okooooooo/CodePilot
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
309 Commits 1 Branch 0 Tags
main
Commit Graph
6 Commits
Author SHA1 Message Date
7418andClaude Opus 4.6 3359b3b404 fix: macOS 热更新 code signature 校验失败（改用逐组件签名） 
根因：afterPack 中使用 codesign --force --deep -s - 签名，但 --deep 标志
不可靠，无法保证正确的签名顺序，导致 Electron 内嵌的 helper apps、
frameworks、.node 原生模块未被正确签名，ShipIt 在 kSecCSStrictValidate
严格校验时失败。

修复方案：
- scripts/after-pack.js: 移除 Step 4 的 --deep 签名
- scripts/after-sign.js (新增): afterSign 钩子中从内到外逐个签名：
  1. 所有 .node/.dylib/.so 原生二进制
  2. 所有 .framework 目录
  3. 所有 Electron Helper .app
  4. 主 .app bundle
  签名完成后执行 codesign --verify --strict 验证
- electron-builder.yml: 添加 afterSign 钩子引用

使用 afterSign 而非 afterPack 的原因：afterSign 在 electron-builder 自身
签名步骤之后执行（CSC_IDENTITY_AUTO_DISCOVERY=false 时为 no-op），确保
ad-hoc 签名是创建 DMG/ZIP 产物前的最后一步，不会被后续处理覆盖或失效。

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-28 01:31:13 +08:00
7418andClaude Opus 4.6 495319fe1f fix: macOS 热更新 code signature 校验失败 
根因：CI 上没有 Apple Developer 证书，electron-builder 跳过签名，
生成完全未签名的 .app。electron-updater 的 ShipIt 进程在应用更新时
校验 code signature，未签名的 app 被拒绝：
  "Code signature did not pass validation: 代码未能满足指定的代码要求"

修复：
1. scripts/after-pack.js — 在所有文件修改（better-sqlite3 替换）
   完成后，对 macOS .app 执行 ad-hoc 签名（codesign --force --deep -s -）。
   Ad-hoc 签名不需要证书，但能通过 ShipIt 的基本校验。
   如果将来配置了真实证书，electron-builder 的签名步骤会覆盖 ad-hoc。

2. .github/workflows/build.yml — macOS 构建添加
   CSC_IDENTITY_AUTO_DISCOVERY=false，防止 electron-builder
   尝试查找不存在的证书时产生不可预期的行为。

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-27 16:06:54 +08:00
7418andClaude Opus 4.6 9b166be8d6 fix: resolve 25 error-level lint issues (P1-3) 
Fix no-require-imports, no-explicit-any, no-html-link-for-pages,
set-state-in-effect, purity, static-components, and refs rules
across 15 files. 0 errors remain (52 warnings unchanged).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-13 01:24:51 +08:00
7418andClaude Opus 4.6 b42d3d2ad8 fix: explicitly rebuild better-sqlite3 for Electron ABI in afterPack 
Root cause: electron-builder's @electron/rebuild only rebuilds native
modules found in the `files` config. Since better-sqlite3 enters the
app through extraResources (via .next/standalone/), it was skipped.
The afterPack hook was copying the system Node.js ABI (127) instead
of the required Electron ABI (143).

Fix:
- afterPack now explicitly calls `npx electron-rebuild` targeting the
  exact Electron version and architecture from the build context
- Falls back to @electron/rebuild programmatic API if CLI fails
- Fails the build if rebuild cannot complete (no silent failures)
- Adds file size logging for verification
- Excludes `release/` from extraResources to prevent recursive nesting
- Adds startup ABI compatibility check in Electron main process with
  friendly error dialog instead of cryptic crash

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-07 16:23:37 +08:00
7418andClaude Opus 4.6 0bf97a3795 fix: support Windows/Linux paths in afterPack hook 
The afterPack script only searched macOS-specific paths
(CodePilot.app/Contents/Resources) for better_sqlite3.node replacement.
Add Windows/Linux path (resources/standalone/) so the native module
ABI fix works on all platforms.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-07 14:28:38 +08:00
7418andClaude Opus 4.6 ac0546c0b0 fix: ensure better-sqlite3 in standalone uses Electron ABI 
Add afterPack hook that copies the @electron/rebuild-compiled
better_sqlite3.node into the standalone resources directory.
Previously the standalone copy retained the system Node ABI from
next build, causing MODULE_VERSION mismatch at runtime.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-07 13:31:54 +08:00