源码快照 @ 2026-09-01 (source-only, 剔除非源码素材)

scripts/prepare-windows-upgrade-baseline.mjs

@@ -0,0 +1,88 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import { execFile } from 'node:child_process';
+import { mkdir, readFile, rm } from 'node:fs/promises';
+import { basename, dirname, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { promisify } from 'node:util';
+import { compareProductReleaseVersions } from './release-version.mjs';
+import { sha256File } from './verify-packaged-app.mjs';
+
+const runFile = promisify(execFile);
+const repoRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+const defaultManifestPath = join(repoRoot, 'scripts', 'windows-upgrade-baseline.json');
+
+export function validateWindowsUpgradeBaseline(manifest, candidateVersion) {
+  if (manifest.tag !== `v${manifest.version}`)
+    throw new Error('Baseline tag must match its version.');
+  if (manifest.assetName !== `Maka-${manifest.version}-win-x64.exe`) {
+    throw new Error('Baseline asset name must exactly match its version and architecture.');
+  }
+  if (!/^[0-9a-f]{64}$/u.test(manifest.sha256)) {
+    throw new Error('Baseline SHA-256 must be a lowercase 64-character digest.');
+  }
+  if (compareProductReleaseVersions(manifest.version, candidateVersion) >= 0) {
+    throw new Error('Windows upgrade baseline must be older than the candidate.');
+  }
+  return manifest;
+}
+
+export async function prepareWindowsUpgradeBaseline(
+  candidateVersion,
+  outputDirectory,
+  {
+    manifestPath = defaultManifestPath,
+    repository = process.env.GITHUB_REPOSITORY ?? 'apache/maka',
+    run = runFile,
+    checksum = sha256File,
+  } = {},
+) {
+  const manifest = validateWindowsUpgradeBaseline(
+    JSON.parse(await readFile(manifestPath, 'utf8')),
+    candidateVersion,
+  );
+  const directory = resolve(outputDirectory);
+  await rm(directory, { recursive: true, force: true });
+  await mkdir(directory, { recursive: true });
+  await run('gh', [
+    'release',
+    'download',
+    manifest.tag,
+    '--repo',
+    repository,
+    '--pattern',
+    manifest.assetName,
+    '--dir',
+    directory,
+  ]);
+  const installer = join(directory, manifest.assetName);
+  const actual = await checksum(installer);
+  if (actual !== manifest.sha256) {
+    throw new Error(
+      `Windows upgrade baseline checksum mismatch for ${basename(installer)}: expected ${manifest.sha256}, found ${actual}.`,
+    );
+  }
+  return installer;
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  const installer = await prepareWindowsUpgradeBaseline(process.argv[2], process.argv[3]);
+  process.stdout.write(installer);
+}