mirror of
https://github.com/NanmiCoder/cc-haha
synced 2026-07-16 13:03:31 +08:00
4d6b1855bf
Prepare the desktop release metadata and concise release notes while keeping tagging and release publishing for a later step. The staged local build-script updates keep desktop commands on checked-in local toolchain paths and avoid rewriting preview-agent output when the built content is unchanged. The persistence-upgrade gate now runs the focused desktop Vitest migration suite in non-watch mode, matching the broader desktop quality lane and avoiding pre-push termination during release preparation. Constraint: Release publishing is intentionally deferred per request Constraint: Desktop release metadata must keep package, Tauri config, Cargo metadata, and Cargo.lock aligned Confidence: medium Scope-risk: moderate Directive: Do not tag v0.3.2 until release dry-run and final release verification are rerun on the release candidate Tested: bun run scripts/release.ts 0.3.2 --dry Tested: cd desktop && bun run lint Tested: bun run check:persistence-upgrade Tested: git diff --check Not-tested: Full bun run verify
347 lines
13 KiB
Bash
Executable File
347 lines
13 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
DESKTOP_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
|
|
REPO_ROOT="$(cd "${DESKTOP_DIR}/.." && pwd)"
|
|
|
|
TARGET_TRIPLE="aarch64-apple-darwin"
|
|
TAURI_TARGET_DIR="${DESKTOP_DIR}/src-tauri/target"
|
|
CANONICAL_OUTPUT_DIR="${DESKTOP_DIR}/build-artifacts/macos-arm64"
|
|
APP_BUNDLE_NAME="Claude Code Haha.app"
|
|
APP_BUNDLE_ID="com.claude-code-haha.desktop"
|
|
|
|
usage() {
|
|
cat <<'EOF'
|
|
Build Claude Code Haha desktop for macOS Apple Silicon and output a DMG.
|
|
|
|
Usage:
|
|
./desktop/scripts/build-macos-arm64.sh [extra tauri build args...]
|
|
|
|
Environment:
|
|
SKIP_INSTALL=1 Skip `bun install` in the repo root and desktop app.
|
|
SIGN_BUILD=1 Remove the default `--no-sign` flag and allow signed builds.
|
|
OPEN_OUTPUT=1 Open the canonical artifact output directory in Finder after a successful build.
|
|
PRESERVE_TAURI_TARGET=1
|
|
Keep Tauri/Rust target cache for a faster incremental build.
|
|
By default this script removes the macOS target cache so
|
|
packaged WebView assets cannot be silently reused.
|
|
|
|
Examples:
|
|
./desktop/scripts/build-macos-arm64.sh
|
|
SKIP_INSTALL=1 ./desktop/scripts/build-macos-arm64.sh
|
|
SIGN_BUILD=1 ./desktop/scripts/build-macos-arm64.sh --skip-stapling
|
|
EOF
|
|
}
|
|
|
|
if [[ "${1:-}" == "-h" || "${1:-}" == "--help" ]]; then
|
|
usage
|
|
exit 0
|
|
fi
|
|
|
|
if [[ "$(uname -s)" != "Darwin" ]]; then
|
|
echo "[build-macos-arm64] This script must run on macOS." >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "$(uname -m)" != "arm64" ]]; then
|
|
echo "[build-macos-arm64] This script is intended for Apple Silicon hosts (arm64)." >&2
|
|
exit 1
|
|
fi
|
|
|
|
for command in bun cargo rustc codesign hdiutil; do
|
|
if ! command -v "${command}" >/dev/null 2>&1; then
|
|
echo "[build-macos-arm64] Missing required command: ${command}" >&2
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
if [[ "${SKIP_INSTALL:-0}" != "1" ]]; then
|
|
echo "[build-macos-arm64] Installing root dependencies..."
|
|
(cd "${REPO_ROOT}" && bun install)
|
|
|
|
echo "[build-macos-arm64] Installing desktop dependencies..."
|
|
(cd "${DESKTOP_DIR}" && bun install)
|
|
fi
|
|
|
|
# ── 清理 + 显式预热前端 / sidecar ────────────────────────────
|
|
# 之前遇到过两类"改了源码,build 出来的 .app 还是旧行为"的诡异 case:
|
|
# 1) Bun.build / Tauri bundler 某一层缓存把旧 sidecar binary 复用进新 .app
|
|
# 2) Tauri/Rust target 缓存复用旧 claude-code-desktop,导致新 dist 没被嵌进去
|
|
# 第二类尤其隐蔽: dist 是新的,sidecar 也是新的,但 WebView 运行的还是旧前端。
|
|
#
|
|
# 默认做四件事强制 fresh build:
|
|
# 1) 硬删 sidecar 源 binary + Tauri target/bundle 目录 + 前端 dist
|
|
# 2) 显式跑 bun run build + bun run build:sidecars
|
|
# 3) tauri build 用 --config 覆盖 beforeBuildCommand 为 true(no-op),
|
|
# 避免 sidecar 被重复编译浪费 ~10s
|
|
# 4) 复制到 canonical output 前再次清空输出目录
|
|
# 任一步失败,整个脚本立即退出(set -e)。
|
|
echo "[build-macos-arm64] Cleaning stale sidecar binaries, frontend output, and Tauri bundle cache..."
|
|
rm -rf "${DESKTOP_DIR}/src-tauri/binaries/claude-sidecar-"*
|
|
rm -rf "${DESKTOP_DIR}/dist"
|
|
rm -f "${DESKTOP_DIR}/tsconfig.tsbuildinfo"
|
|
|
|
if [[ "${PRESERVE_TAURI_TARGET:-0}" == "1" ]]; then
|
|
echo "[build-macos-arm64] PRESERVE_TAURI_TARGET=1: keeping Rust dependency cache, clearing app-specific artifacts only..."
|
|
rm -rf "${DESKTOP_DIR}/src-tauri/target/${TARGET_TRIPLE}/release/bundle"
|
|
rm -rf "${DESKTOP_DIR}/src-tauri/target/release/bundle"
|
|
rm -f "${DESKTOP_DIR}/src-tauri/target/${TARGET_TRIPLE}/release/claude-code-desktop"
|
|
rm -f "${DESKTOP_DIR}/src-tauri/target/release/claude-code-desktop"
|
|
find "${DESKTOP_DIR}/src-tauri/target/${TARGET_TRIPLE}/release/build" \
|
|
-maxdepth 1 -name 'claude-code-desktop-*' -exec rm -rf {} + 2>/dev/null || true
|
|
find "${DESKTOP_DIR}/src-tauri/target/${TARGET_TRIPLE}/release/.fingerprint" \
|
|
-maxdepth 1 -name 'claude-code-desktop-*' -exec rm -rf {} + 2>/dev/null || true
|
|
find "${DESKTOP_DIR}/src-tauri/target/${TARGET_TRIPLE}/release/deps" \
|
|
-maxdepth 1 \( -name 'claude_code_desktop-*' -o -name 'libclaude_code_desktop-*' \) -exec rm -f {} + 2>/dev/null || true
|
|
else
|
|
echo "[build-macos-arm64] Removing Tauri target cache for ${TARGET_TRIPLE} to force fresh embedded frontend assets..."
|
|
rm -rf "${DESKTOP_DIR}/src-tauri/target/${TARGET_TRIPLE}"
|
|
rm -rf "${DESKTOP_DIR}/src-tauri/target/release/bundle"
|
|
rm -f "${DESKTOP_DIR}/src-tauri/target/release/claude-code-desktop"
|
|
find "${DESKTOP_DIR}/src-tauri/target/release/build" \
|
|
-maxdepth 1 -name 'claude-code-desktop-*' -exec rm -rf {} + 2>/dev/null || true
|
|
find "${DESKTOP_DIR}/src-tauri/target/release/.fingerprint" \
|
|
-maxdepth 1 -name 'claude-code-desktop-*' -exec rm -rf {} + 2>/dev/null || true
|
|
find "${DESKTOP_DIR}/src-tauri/target/release/deps" \
|
|
-maxdepth 1 \( -name 'claude_code_desktop-*' -o -name 'libclaude_code_desktop-*' \) -exec rm -f {} + 2>/dev/null || true
|
|
fi
|
|
|
|
echo "[build-macos-arm64] Rebuilding frontend (tsc + vite)..."
|
|
(cd "${DESKTOP_DIR}" && bun run build)
|
|
|
|
echo "[build-macos-arm64] Rebuilding sidecar for ${TARGET_TRIPLE}..."
|
|
(cd "${DESKTOP_DIR}" && TAURI_ENV_TARGET_TRIPLE="${TARGET_TRIPLE}" bun run build:sidecars)
|
|
|
|
TAURI_ARGS=(
|
|
node
|
|
./node_modules/@tauri-apps/cli/tauri.js
|
|
build
|
|
--target
|
|
"${TARGET_TRIPLE}"
|
|
--bundles
|
|
app,dmg
|
|
--ci
|
|
--config
|
|
'{"build":{"beforeBuildCommand":"true"}}'
|
|
)
|
|
|
|
if [[ "${SIGN_BUILD:-0}" != "1" ]]; then
|
|
TAURI_ARGS+=(--no-sign)
|
|
fi
|
|
|
|
if [[ "$#" -gt 0 ]]; then
|
|
TAURI_ARGS+=("$@")
|
|
fi
|
|
|
|
echo "[build-macos-arm64] Building DMG for ${TARGET_TRIPLE}..."
|
|
(
|
|
cd "${DESKTOP_DIR}"
|
|
export TAURI_ENV_TARGET_TRIPLE="${TARGET_TRIPLE}"
|
|
"${TAURI_ARGS[@]}"
|
|
)
|
|
|
|
TARGETED_DMG_DIR="${TAURI_TARGET_DIR}/${TARGET_TRIPLE}/release/bundle/dmg"
|
|
FALLBACK_DMG_DIR="${TAURI_TARGET_DIR}/release/bundle/dmg"
|
|
TARGETED_APP_DIR="${TAURI_TARGET_DIR}/${TARGET_TRIPLE}/release/bundle/macos"
|
|
FALLBACK_APP_DIR="${TAURI_TARGET_DIR}/release/bundle/macos"
|
|
LEGACY_BUNDLE_ROOT="${TAURI_TARGET_DIR}/release/bundle"
|
|
|
|
mkdir -p "${CANONICAL_OUTPUT_DIR}"
|
|
find "${CANONICAL_OUTPUT_DIR}" -mindepth 1 -maxdepth 1 -exec rm -rf {} +
|
|
|
|
find_latest_file() {
|
|
local search_dir="$1"
|
|
local pattern="$2"
|
|
if [[ -d "${search_dir}" ]]; then
|
|
find "${search_dir}" -maxdepth 1 -type f -name "${pattern}" | sort | tail -n 1
|
|
fi
|
|
}
|
|
|
|
find_latest_dir() {
|
|
local search_dir="$1"
|
|
local pattern="$2"
|
|
if [[ -d "${search_dir}" ]]; then
|
|
find "${search_dir}" -maxdepth 1 -type d -name "${pattern}" | sort | tail -n 1
|
|
fi
|
|
}
|
|
|
|
LATEST_DMG="$(find_latest_file "${TARGETED_DMG_DIR}" '*.dmg')"
|
|
if [[ -z "${LATEST_DMG}" ]]; then
|
|
LATEST_DMG="$(find_latest_file "${FALLBACK_DMG_DIR}" '*.dmg')"
|
|
fi
|
|
|
|
LATEST_APP="$(find_latest_dir "${TARGETED_APP_DIR}" '*.app')"
|
|
if [[ -z "${LATEST_APP}" ]]; then
|
|
LATEST_APP="$(find_latest_dir "${FALLBACK_APP_DIR}" '*.app')"
|
|
fi
|
|
|
|
build_canonical_dmg() {
|
|
local app_bundle="$1"
|
|
local dmg_output="$2"
|
|
local staging_dir
|
|
local rw_dmg
|
|
|
|
staging_dir="$(mktemp -d "${TMPDIR:-/tmp}/cc-haha-dmg.XXXXXX")"
|
|
rw_dmg="$(mktemp "${TMPDIR:-/tmp}/cc-haha-rw.XXXXXX").dmg"
|
|
|
|
cp -R "${app_bundle}" "${staging_dir}/"
|
|
ln -s /Applications "${staging_dir}/Applications"
|
|
|
|
# Create a read-write DMG first so we can customize the Finder layout
|
|
hdiutil create \
|
|
-volname "Claude Code Haha" \
|
|
-srcfolder "${staging_dir}" \
|
|
-ov \
|
|
-format UDRW \
|
|
"${rw_dmg}" >/dev/null
|
|
|
|
rm -rf "${staging_dir}"
|
|
|
|
# Mount the read-write DMG and apply Finder layout via AppleScript
|
|
local dev_name mount_dir
|
|
dev_name=$(hdiutil attach -readwrite -noverify -noautoopen -nobrowse "${rw_dmg}" \
|
|
| grep -E '^/dev/' | head -1 | awk '{print $1}')
|
|
mount_dir=$(hdiutil info | grep -E "${dev_name}" | tail -1 | awk '{$1=$2=""; print}' | xargs)
|
|
|
|
# Finder AppleScript 在新版 macOS (Sequoia+) 上某些属性
|
|
# (toolbar/statusbar visible、某些 container window 属性) 不再支持,
|
|
# 会返回 -10006 错误。美化失败不是 blocker —— 即便 layout 没设上,
|
|
# DMG 本身还是可用的,只是用户打开时看到的是 Finder 默认排布。
|
|
# 所以这里允许 osascript 非零退出,只 warn,不让 set -e 炸掉整个脚本。
|
|
if ! osascript <<APPLESCRIPT
|
|
tell application "Finder"
|
|
tell disk "Claude Code Haha"
|
|
open
|
|
set current view of container window to icon view
|
|
set toolbar visible of container window to false
|
|
set statusbar visible of container window to false
|
|
set the bounds of container window to {100, 100, 760, 500}
|
|
set viewOptions to the icon view options of container window
|
|
set arrangement of viewOptions to not arranged
|
|
set icon size of viewOptions to 128
|
|
set position of item "${APP_BUNDLE_NAME}" of container window to {180, 170}
|
|
set position of item "Applications" of container window to {480, 170}
|
|
close
|
|
open
|
|
update without registering applications
|
|
delay 2
|
|
close
|
|
end tell
|
|
end tell
|
|
APPLESCRIPT
|
|
then
|
|
echo "[build-macos-arm64] WARN: Finder layout AppleScript failed (likely macOS version incompatible); DMG will use default Finder layout" >&2
|
|
fi
|
|
|
|
sync
|
|
# osascript 可能已经让 Finder 打开了 volume 窗口,正常 detach 可能因为
|
|
# "Resource busy" 失败。失败时用 -force 二次尝试。
|
|
hdiutil detach "${dev_name}" -quiet 2>/dev/null \
|
|
|| hdiutil detach "${dev_name}" -force -quiet
|
|
|
|
# Convert to compressed read-only DMG
|
|
hdiutil convert "${rw_dmg}" -format UDZO -o "${dmg_output}" -ov >/dev/null
|
|
rm -f "${rw_dmg}"
|
|
}
|
|
|
|
codesign_cdhash() {
|
|
local executable="$1"
|
|
codesign -d --verbose=4 "${executable}" 2>&1 \
|
|
| awk -F= '/^CDHash=/{print $2; exit}'
|
|
}
|
|
|
|
sign_canonical_app_bundle() {
|
|
local app_bundle="$1"
|
|
local sidecar="${app_bundle}/Contents/MacOS/claude-sidecar"
|
|
local sidecar_cdhash_before=""
|
|
local sidecar_cdhash_after=""
|
|
|
|
if [[ -x "${sidecar}" ]]; then
|
|
sidecar_cdhash_before="$(codesign_cdhash "${sidecar}")"
|
|
fi
|
|
|
|
# Tauri --no-sign leaves the outer .app with no sealed resources, which
|
|
# fails strict bundle validation once Resources/icon.icns exists. Sign only
|
|
# the outer bundle: do not pass --deep, because re-signing claude-sidecar
|
|
# changes its code-signature hash and breaks existing macOS Keychain ACLs.
|
|
codesign --force --sign - --timestamp=none "${app_bundle}"
|
|
|
|
if [[ -x "${sidecar}" ]]; then
|
|
sidecar_cdhash_after="$(codesign_cdhash "${sidecar}")"
|
|
if [[ "${sidecar_cdhash_before}" != "${sidecar_cdhash_after}" ]]; then
|
|
echo "[build-macos-arm64] ERROR: sidecar signature hash changed while signing app bundle" >&2
|
|
echo "[build-macos-arm64] before=${sidecar_cdhash_before}" >&2
|
|
echo "[build-macos-arm64] after=${sidecar_cdhash_after}" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
codesign --verify --deep --strict --verbose=2 "${app_bundle}"
|
|
}
|
|
|
|
if [[ -n "${LATEST_APP}" ]]; then
|
|
# Normalize the Tauri-produced app in place before copying it anywhere.
|
|
# Without this, opening target/.../bundle/macos/Claude Code Haha.app directly
|
|
# uses the executable's ad-hoc signing identifier instead of the app bundle id,
|
|
# which makes macOS notification authorization behave like a different app.
|
|
sign_canonical_app_bundle "${LATEST_APP}"
|
|
|
|
# 不要 deep re-sign。曾经脚本在这里跑过
|
|
# `codesign --force --deep --sign - --identifier <bundle-id>` 来统一
|
|
# sidecar 和外层的 signing identifier,但这会改变 sidecar binary 的
|
|
# code signature hash —— macOS Keychain ACL 按 hash 识别 caller,
|
|
# 重签完再访问时会被 ACL 当作"陌生 binary"静默拒绝,导致 CLI 读不到
|
|
# OAuth token,最终请求打到 Anthropic 返回 403 "Request not allowed"。
|
|
# 这里只浅签外层 bundle,让 .app 拥有有效资源封印,同时保留 sidecar hash。
|
|
cp -R "${LATEST_APP}" "${CANONICAL_OUTPUT_DIR}/"
|
|
sign_canonical_app_bundle "${CANONICAL_OUTPUT_DIR}/${APP_BUNDLE_NAME}"
|
|
rm -f "${CANONICAL_OUTPUT_DIR}/"*.dmg
|
|
CANONICAL_DMG="${CANONICAL_OUTPUT_DIR}/$(basename "${LATEST_DMG:-Claude Code Haha_0.1.0_aarch64.dmg}")"
|
|
build_canonical_dmg \
|
|
"${CANONICAL_OUTPUT_DIR}/${APP_BUNDLE_NAME}" \
|
|
"${CANONICAL_DMG}"
|
|
|
|
if [[ -n "${LATEST_DMG}" ]]; then
|
|
cp -f "${CANONICAL_DMG}" "${LATEST_DMG}"
|
|
fi
|
|
elif [[ -n "${LATEST_DMG}" ]]; then
|
|
cp -f "${LATEST_DMG}" "${CANONICAL_OUTPUT_DIR}/"
|
|
fi
|
|
|
|
cat > "${CANONICAL_OUTPUT_DIR}/BUILD_INFO.txt" <<EOF
|
|
Target triple: ${TARGET_TRIPLE}
|
|
Canonical output: ${CANONICAL_OUTPUT_DIR}
|
|
Canonical app: ${CANONICAL_OUTPUT_DIR}/${APP_BUNDLE_NAME}
|
|
Canonical DMG: ${CANONICAL_DMG:-not found}
|
|
Tauri app output: ${LATEST_APP:-not found}
|
|
Tauri DMG output: ${LATEST_DMG:-not found}
|
|
Built at: $(date '+%Y-%m-%d %H:%M:%S %z')
|
|
EOF
|
|
|
|
if [[ -d "${LEGACY_BUNDLE_ROOT}" ]]; then
|
|
rm -rf "${LEGACY_BUNDLE_ROOT}"
|
|
fi
|
|
|
|
echo
|
|
echo "[build-macos-arm64] Build finished."
|
|
if [[ -n "${LATEST_APP}" ]]; then
|
|
echo "[build-macos-arm64] Tauri app output (identity normalized): ${LATEST_APP}"
|
|
else
|
|
echo "[build-macos-arm64] No .app found in ${TARGETED_APP_DIR} or ${FALLBACK_APP_DIR}" >&2
|
|
fi
|
|
|
|
if [[ -n "${LATEST_DMG}" ]]; then
|
|
echo "[build-macos-arm64] Tauri DMG output (replaced with canonical DMG): ${LATEST_DMG}"
|
|
else
|
|
echo "[build-macos-arm64] No DMG found in ${TARGETED_DMG_DIR} or ${FALLBACK_DMG_DIR}" >&2
|
|
fi
|
|
|
|
echo "[build-macos-arm64] Canonical output: ${CANONICAL_OUTPUT_DIR}"
|
|
echo "[build-macos-arm64] Removed legacy bundle dir: ${LEGACY_BUNDLE_ROOT}"
|
|
|
|
if [[ "${OPEN_OUTPUT:-0}" == "1" ]]; then
|
|
open "${CANONICAL_OUTPUT_DIR}"
|
|
fi
|