源码快照 @ 2026-09-02 (source-only, 剔除非源码素材)

scripts/release/refresh-signed-windows-artifacts.mjs

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+import { createHash } from "node:crypto";
+import { createRequire } from "node:module";
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+
+const [distRootArg, expectedCountArg = "6"] = process.argv.slice(2);
+
+if (!distRootArg || !/^\d+$/.test(expectedCountArg)) {
+  console.error("Usage: node scripts/release/refresh-signed-windows-artifacts.mjs <dist-root> [expected-installer-count]");
+  process.exit(2);
+}
+
+const distRoot = resolve(distRootArg);
+const expectedCount = Number(expectedCountArg);
+const desktopRequire = createRequire(new URL("../../apps/desktop/package.json", import.meta.url));
+const electronBuilderRequire = createRequire(desktopRequire.resolve("electron-builder/package.json"));
+const { buildBlockMap } = electronBuilderRequire("app-builder-lib/out/targets/blockmap/blockmap.js");
+const YAML = desktopRequire("yaml");
+
+function walk(dir) {
+  const entries = [];
+  for (const entry of readdirSync(dir)) {
+    const path = join(dir, entry);
+    const stat = statSync(path);
+    if (stat.isDirectory()) entries.push(...walk(path));
+    else if (stat.isFile()) entries.push(path);
+  }
+  return entries;
+}
+
+function sha512(file) {
+  return createHash("sha512").update(readFileSync(file)).digest("base64");
+}
+
+async function regenerateBlockmap(installerPath) {
+  const blockmapPath = `${installerPath}.blockmap`;
+  mkdirSync(dirname(blockmapPath), { recursive: true });
+  await buildBlockMap(installerPath, "gzip", blockmapPath);
+  if (!existsSync(blockmapPath)) {
+    throw new Error(`electron-builder did not create ${blockmapPath}`);
+  }
+}
+
+function manifestName(installerName) {
+  if (installerName.startsWith("openwork-cloud-win-")) return "cloud.yml";
+  if (installerName.startsWith("openwork-enterprise-win-")) return "enterprise.yml";
+  if (installerName.startsWith("openwork-win-")) return "latest.yml";
+  throw new Error(`Unsupported Windows installer name: ${installerName}`);
+}
+
+function updateManifest(installerPath) {
+  const installerName = basename(installerPath);
+  const manifestPath = join(dirname(installerPath), manifestName(installerName));
+  if (!existsSync(manifestPath)) {
+    throw new Error(`Missing Windows updater manifest for ${installerName}: ${manifestPath}`);
+  }
+
+  const installerSha512 = sha512(installerPath);
+  const installerSize = statSync(installerPath).size;
+  const manifest = YAML.parse(readFileSync(manifestPath, "utf8"));
+
+  if (!manifest || !Array.isArray(manifest.files)) {
+    throw new Error(`Invalid Windows updater manifest: ${manifestPath}`);
+  }
+
+  let matchedFile = false;
+  manifest.files = manifest.files.map((file) => {
+    if (!file || file.url !== installerName) return file;
+    matchedFile = true;
+    return { ...file, sha512: installerSha512, size: installerSize };
+  });
+
+  if (!matchedFile) {
+    throw new Error(`Manifest ${manifestPath} does not reference signed installer ${installerName}`);
+  }
+
+  manifest.path = installerName;
+  manifest.sha512 = installerSha512;
+  writeFileSync(manifestPath, YAML.stringify(manifest), "utf8");
+}
+
+if (!existsSync(distRoot)) {
+  console.error(`Windows artifact directory does not exist: ${distRoot}`);
+  process.exit(1);
+}
+
+const installers = walk(distRoot).filter((file) =>
+  /^openwork(?:-(?:cloud|enterprise))?-win-(?:x64|arm64)-.+\.exe$/i.test(basename(file)),
+);
+
+if (installers.length !== expectedCount) {
+  console.error(`Expected exactly ${expectedCount} signed Windows installers, found ${installers.length}.`);
+  for (const installer of installers) console.error(`- ${installer}`);
+  process.exit(1);
+}
+
+for (const installer of installers) {
+  await regenerateBlockmap(installer);
+  updateManifest(installer);
+  console.log(`Refreshed signed Windows artifact metadata: ${installer}`);
+}