fix(updater): 使用稳定的 Release 下载地址

.github/workflows/release.yml

@@ -139,6 +139,19 @@ jobs:
     permissions:
       contents: write
     steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Stabilize updater download URLs
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          mkdir -p "${RUNNER_TEMP}/chattake-updater"
+          gh release download "${GITHUB_REF_NAME}" --repo "${GITHUB_REPOSITORY}" --pattern latest.json --dir "${RUNNER_TEMP}/chattake-updater"
+          gh release view "${GITHUB_REF_NAME}" --repo "${GITHUB_REPOSITORY}" --json assets > "${RUNNER_TEMP}/chattake-updater/assets.json"
+          node scripts/stabilize-updater-json.mjs "${RUNNER_TEMP}/chattake-updater/latest.json" "${RUNNER_TEMP}/chattake-updater/assets.json"
+          gh release upload "${GITHUB_REF_NAME}" --repo "${GITHUB_REPOSITORY}" "${RUNNER_TEMP}/chattake-updater/latest.json" --clobber
+
       - name: Publish complete Release
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

package.json

@@ -5,7 +5,7 @@
     "sync:changelog": "node scripts/sync-changelog.mjs",
     "check:release-version": "node scripts/check-release-version.mjs",
     "build:companions": "bun scripts/build-companions.mjs",
-    "verify": "bun --cwd packages/sidecar test && bun --cwd packages/mcp-server test && cargo test --manifest-path apps/desktop/src-tauri/Cargo.toml && bun run --cwd apps/desktop build",
+    "verify": "node --test scripts/stabilize-updater-json.test.mjs && bun --cwd packages/sidecar test && bun --cwd packages/mcp-server test && cargo test --manifest-path apps/desktop/src-tauri/Cargo.toml && bun run --cwd apps/desktop build",
     "build:debug": "bun run build:companions && cargo test --manifest-path apps/desktop/src-tauri/Cargo.toml && bun run --cwd apps/desktop tauri -- build --debug --no-bundle"
   },
   "workspaces": [

scripts/stabilize-updater-json.mjs

@@ -0,0 +1,40 @@
+import { readFileSync, writeFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { resolve } from 'node:path'
+
+export function stabilizeUpdaterJson(latest, release) {
+  if (!latest?.platforms || !Array.isArray(release?.assets)) {
+    throw new Error('latest.json 或 Release assets 格式无效')
+  }
+
+  const stableUrlByApiUrl = new Map(
+    release.assets.map((asset) => [asset.apiUrl, asset.url]),
+  )
+  const result = structuredClone(latest)
+
+  for (const [platform, config] of Object.entries(result.platforms)) {
+    if (typeof config?.url !== 'string') {
+      throw new Error(`${platform} 缺少 updater URL`)
+    }
+    if (!config.url.startsWith('https://api.github.com/')) continue
+
+    const stableUrl = stableUrlByApiUrl.get(config.url)
+    if (!stableUrl) {
+      throw new Error(`${platform} 的 updater 资产不在当前 Release 中`)
+    }
+    config.url = stableUrl
+  }
+
+  return result
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  const [latestPath, assetsPath] = process.argv.slice(2)
+  if (!latestPath || !assetsPath) {
+    throw new Error('用法: node scripts/stabilize-updater-json.mjs <latest.json> <assets.json>')
+  }
+  const latest = JSON.parse(readFileSync(latestPath, 'utf8'))
+  const release = JSON.parse(readFileSync(assetsPath, 'utf8'))
+  const stable = stabilizeUpdaterJson(latest, release)
+  writeFileSync(latestPath, `${JSON.stringify(stable, null, 2)}\n`)
+}

scripts/stabilize-updater-json.test.mjs

@@ -0,0 +1,23 @@
+import assert from 'node:assert/strict'
+import test from 'node:test'
+
+import { stabilizeUpdaterJson } from './stabilize-updater-json.mjs'
+
+test('replaces GitHub asset API URLs with stable download URLs', () => {
+  const apiUrl = 'https://api.github.com/repos/owner/repo/releases/assets/123'
+  const stableUrl = 'https://github.com/owner/repo/releases/download/v1.2.3/app.tar.gz'
+  const latest = {
+    version: '1.2.3',
+    platforms: {
+      'darwin-aarch64': { url: apiUrl, signature: 'sig' },
+      'darwin-aarch64-app': { url: apiUrl, signature: 'sig' },
+    },
+  }
+
+  const result = stabilizeUpdaterJson(latest, {
+    assets: [{ apiUrl, url: stableUrl }],
+  })
+
+  assert.equal(result.platforms['darwin-aarch64'].url, stableUrl)
+  assert.equal(result.platforms['darwin-aarch64-app'].url, stableUrl)
+})