zhaolei
2514e509c6
Some checks failed
AI automation / Route event (push) Has been cancelled
AI automation / Hand reopened issue to maintainers (push) Has been cancelled
AI automation / Clean source issue state (push) Has been cancelled
AI automation / Reconcile handoffs (push) Has been cancelled
AI automation / Classify issue (push) Has been cancelled
AI automation / Claude Code smoke (push) Has been cancelled
AI automation / Review issue follow-up (push) Has been cancelled
AI automation / Publish issue follow-up (push) Has been cancelled
AI automation / Implement with Claude Code (push) Has been cancelled
AI automation / Publish implement PR (push) Has been cancelled
AI automation / Continue queued issue comments (push) Has been cancelled
AI automation / Codex review loop (push) Has been cancelled
AI automation / Publish Codex fix (push) Has been cancelled
AI automation / Clear Codex dispatch marker (push) Has been cancelled
AI automation / Own PR re-request Codex (push) Has been cancelled
AI automation / External PR re-request Codex (push) Has been cancelled
AI automation / Poll Codex reaction / retry (push) Has been cancelled
SSH 连接修复： - main.cjs 顶部在所有 ssh2 require 之前安装 boringSslDhCompat 补丁 - 5 条 SSH 连接路径统一 legacyAlgorithms 默认值为 true portable 版主机数据修复： - main.cjs portable 模式设置 NETCATTY_PORTABLE=1 - preload.cjs 暴露 window.netcatty.isPortable - useVaultState portable 模式跳过 safeStorage DPAPI 加密的 hosts_v1 - inspection saveVaultHosts handler 补 legacyAlgorithms/tags/os 字段映射 打包体积修复： - 恢复 electron-builder.config.cjs 原始 40+ 条排除规则 - package.json 加 pend 运行时依赖
321 lines
14 KiB
JavaScript
321 lines
14 KiB
JavaScript
const path = require('node:path');
|
||
const { moshExtraResources } = require('./scripts/mosh-extra-resources.cjs');
|
||
const { etExtraResources } = require('./scripts/et-extra-resources.cjs');
|
||
|
||
/**
|
||
* @type {import('electron-builder').Configuration}
|
||
*/
|
||
module.exports = {
|
||
// 内网环境下 electron-builder 默认会去 github.com 下载 Electron zip。
|
||
// 强制指向本地已解压的 node_modules/electron/dist，跳过联网。
|
||
electronDist: path.join(__dirname, 'node_modules', 'electron', 'dist'),
|
||
appId: 'com.netcatty.app',
|
||
productName: 'NetMesh',
|
||
artifactName: '${productName}-${version}-${os}-${arch}.${ext}',
|
||
protocols: [
|
||
{
|
||
name: 'SSH URL',
|
||
schemes: ['ssh']
|
||
},
|
||
{
|
||
name: 'Telnet URL',
|
||
schemes: ['telnet']
|
||
},
|
||
{
|
||
name: 'JumpServer URL',
|
||
schemes: ['jms']
|
||
}
|
||
],
|
||
electronLanguages: ['en', 'en-US', 'zh_CN', 'zh-CN', 'zh_TW', 'zh-TW', 'ru'],
|
||
// Give the macOS build a unique Mach-O LC_UUID before signing, so macOS
|
||
// Local Network privacy treats Netcatty distinctly from every other
|
||
// Electron app (which all share Electron's prebuilt LC_UUID) — see #1040
|
||
// and scripts/afterPackMacUuid.cjs. No-op on Windows/Linux.
|
||
beforePack: './scripts/beforePackCursorSdk.cjs',
|
||
afterPack: './scripts/afterPackMacUuid.cjs',
|
||
// Platform-split icons (#813):
|
||
// - public/icon.png keeps Apple's HIG grid margin so the rendered
|
||
// squircle sits at ~88% of the PNG canvas. macOS needs this —
|
||
// the dock renders icons with its own rounding/shadow and most
|
||
// third-party apps (#803) leave that grid margin alone so the
|
||
// squircle lines up with neighbors.
|
||
// - public/icon-win.png uses a tight-crop viewBox so the squircle
|
||
// fills 100% of the PNG. Windows / Linux taskbars render icons
|
||
// full-bleed, so the Apple margin showed up as visible padding,
|
||
// making the app icon look smaller than other apps in taskbar /
|
||
// Start menu / desktop shortcuts.
|
||
icon: 'public/icon.png',
|
||
// npmRebuild 默认开启，会尝试下载 Electron headers 重新编译所有 native modules。
|
||
// 内网环境访问 www.electronjs.org 超时，关闭它直接用 dev 模式下已编译好的 native deps。
|
||
// 如果 release 后 native modules 在目标机器上报 ABI mismatch，再回来开它 + 配 npmmirror 的 ELECTRON_MIRROR。
|
||
npmRebuild: false,
|
||
directories: {
|
||
buildResources: 'build',
|
||
output: 'release'
|
||
},
|
||
files: [
|
||
'dist/**/*',
|
||
'electron/**/*',
|
||
// The Windows Hello helper is shipped once through win.extraResources.
|
||
// Exclude local per-arch build output from app.asar on every platform.
|
||
'!electron/bridges/windowsHelloHelper/build/**/*',
|
||
// Runtime smoke fixtures are built test packages, not host resources.
|
||
// Keep them out of production ASARs so no example plugin can be
|
||
// mistaken for an installed or host-trusted package.
|
||
'!electron/plugins/fixtures/**/*',
|
||
// Main-process terminal flow control reads shared thresholds from here
|
||
// (terminalFlowAck.cjs). Must ship beside electron/ in app.asar.
|
||
'infrastructure/config/terminalFlowConstants.cjs',
|
||
'infrastructure/config/terminalFlowConstants.json',
|
||
// Renderer and Mosh's main-process bootstrap share the same
|
||
// fail-closed prompt classifier at runtime.
|
||
'domain/terminalPromptSecurity.shared.cjs',
|
||
'lib/**/*.cjs',
|
||
'lib/**/*.json',
|
||
'skills/**/*',
|
||
'!public/**/*',
|
||
'!**/*.map',
|
||
'!**/*.d.ts',
|
||
'!**/*.d.mts',
|
||
'!**/*.d.cts',
|
||
'!**/*.ts',
|
||
'!**/*.tsx',
|
||
'!**/*.test.*',
|
||
'!**/*.spec.*',
|
||
'!**/__tests__/**/*',
|
||
'!**/test/**/*',
|
||
'!**/tests/**/*',
|
||
'!**/example/**/*',
|
||
'!**/examples/**/*',
|
||
'!node_modules/**/docs/**/*',
|
||
'!node_modules/**/doc/**/*',
|
||
'!node_modules/**/benchmark/**/*',
|
||
'!node_modules/**/benchmarks/**/*',
|
||
// Renderer-only packages are compiled into dist by Vite. Keep them
|
||
// installed for npm run dev/build, but do not ship the duplicate source
|
||
// packages in release artifacts.
|
||
'!node_modules/@fontsource/**/*',
|
||
'!node_modules/@monaco-editor/**/*',
|
||
'!node_modules/@radix-ui/**/*',
|
||
'!node_modules/@xterm/**/*',
|
||
'!node_modules/lucide-react/**/*',
|
||
'!node_modules/monaco-editor/**/*',
|
||
'!node_modules/react/**/*',
|
||
'!node_modules/react-dom/**/*',
|
||
'!node_modules/ai/**/*',
|
||
'!node_modules/@ai-sdk/**/*',
|
||
'!node_modules/@mdxeditor/**/*',
|
||
'!node_modules/streamdown/**/*',
|
||
'!node_modules/@streamdown/**/*',
|
||
'!node_modules/@tanstack/react-virtual/**/*',
|
||
'!node_modules/pinyin-pro/**/*',
|
||
'!node_modules/re2js/**/*',
|
||
'!node_modules/@eslint-community/regexpp/**/*',
|
||
'!node_modules/clsx/**/*',
|
||
'!node_modules/tailwind-merge/**/*',
|
||
'!node_modules/use-stick-to-bottom/**/*',
|
||
'!node_modules/lexical/**/*',
|
||
'!node_modules/@lexical/**/*',
|
||
'!node_modules/@codemirror/**/*',
|
||
'!node_modules/katex/**/*',
|
||
'!node_modules/shiki/**/*',
|
||
'!node_modules/@shiki/**/*',
|
||
// Heavy cloud completion specs are intentionally not bundled. The main
|
||
// process filters the same prefixes so dev and packaged builds behave
|
||
// consistently.
|
||
'!node_modules/@withfig/autocomplete/build/aws.js',
|
||
'!node_modules/@withfig/autocomplete/build/aws/**/*',
|
||
'!node_modules/@withfig/autocomplete/build/gcloud.js',
|
||
'!node_modules/@withfig/autocomplete/build/gcloud/**/*',
|
||
'!node_modules/@withfig/autocomplete/build/az/**/*',
|
||
// Fig specs are already compiled JavaScript; TypeScript is only pulled
|
||
// in by Fig helper packages as build tooling and is not needed at app
|
||
// runtime.
|
||
'!node_modules/typescript/**/*',
|
||
// ── Exclude per-platform native agent binaries (~100s of MB each). ──
|
||
// Netcatty is "bring your own CLI": each SDK is pointed at the user's
|
||
// system-installed CLI via an absolute path override (claude
|
||
// pathToClaudeCodeExecutable / codex codexPathOverride / copilot cliPath).
|
||
// Only the SDKs' JS is bundled; the heavy per-arch binaries are dropped.
|
||
// NOTE: claude-agent-sdk vendors the `claude` binary as a NESTED package
|
||
// (claude-agent-sdk/node_modules/@anthropic-ai/claude-agent-sdk-<arch>),
|
||
// so this exclusion must match at any depth (**/), not just top-level.
|
||
// The codex/copilot exclusions target only the per-arch binary packages
|
||
// (codex-<arch> / copilot-<arch>) — NOT @openai/codex-sdk / copilot-sdk,
|
||
// whose JS we DO bundle. @github/copilot is the full ~288MB CLI (with
|
||
// per-platform prebuilds); netcatty uses the user's copilot via cliPath,
|
||
// so it is excluded entirely.
|
||
'!**/@anthropic-ai/claude-agent-sdk-*/**/*',
|
||
'!node_modules/@anthropic-ai/claude-code-*/**/*',
|
||
'!node_modules/@openai/codex-{darwin,linux,linuxmusl,win32}-*/**/*',
|
||
'!node_modules/@github/copilot-{darwin,linux,linuxmusl,win32}-*/**/*',
|
||
'!node_modules/@github/copilot/**/*',
|
||
'!node_modules/opencode-{darwin,linux,linuxmusl,windows}-*/**/*',
|
||
'!node_modules/opencode-ai/**/*',
|
||
// CodeBuddy follows the same first-party integration model as the
|
||
// other coding agents: Netcatty discovers and passes the user's
|
||
// installed CLI path to the SDK. Keep the small SDK wrapper, but do not
|
||
// bundle the full CodeBuddy CLI payload (rg vendors + web UI).
|
||
'!node_modules/@tencent-ai/agent-sdk/cli/**/*',
|
||
// Netcatty loads Cursor SDK through ESM dynamic import, so the duplicate
|
||
// CommonJS build and type metadata are not needed at runtime.
|
||
'!node_modules/@cursor/sdk/dist/cjs/**/*',
|
||
'!node_modules/@cursor/sdk/dist/**/*.d.ts',
|
||
'!node_modules/@cursor/sdk/dist/**/*.d.ts.map',
|
||
// sqlite3 rebuilds a native module for Electron; its upstream source
|
||
// tarball is build-time payload only.
|
||
'!node_modules/sqlite3/deps/**/*'
|
||
],
|
||
asarUnpack: [
|
||
'node_modules/node-pty/**/*',
|
||
'node_modules/ssh2/**/*',
|
||
'node_modules/cpu-features/**/*',
|
||
'node_modules/@vscode/windows-process-tree/**/*',
|
||
'node_modules/@anthropic-ai/claude-agent-sdk/**/*',
|
||
'node_modules/@cursor/sdk-*/**/*',
|
||
'node_modules/sqlite3/**/*',
|
||
'node_modules/@modelcontextprotocol/sdk/**/*',
|
||
'lib/**/*.cjs',
|
||
'lib/**/*.json',
|
||
'node_modules/zod/**/*',
|
||
'node_modules/zod-to-json-schema/**/*',
|
||
'node_modules/@netcatty/plugin-cli/**/*',
|
||
'node_modules/@netcatty/plugin-contract/**/*',
|
||
'node_modules/@netcatty/plugin-sdk/**/*',
|
||
'electron/plugins/runtime/**/*',
|
||
'node_modules/ajv/**/*',
|
||
'node_modules/ajv-formats/**/*',
|
||
'node_modules/fast-deep-equal/**/*',
|
||
'node_modules/fast-uri/**/*',
|
||
'node_modules/json-schema-traverse/**/*',
|
||
'electron/cli/**/*',
|
||
'electron/capabilities/**/*',
|
||
'electron/shared/**/*',
|
||
'electron/mcp/**/*',
|
||
'skills/**/*'
|
||
],
|
||
mac: {
|
||
// app-builder's PNG-to-ICNS conversion can corrupt the 16px/32px 1x
|
||
// representations even though the source PNG is valid RGBA. Use the
|
||
// iconutil-generated bundle instead so Finder and app switchers do not
|
||
// render those representations as colored noise.
|
||
icon: 'build/icon.icns',
|
||
target: [
|
||
{
|
||
target: 'dmg',
|
||
arch: ['arm64', 'x64']
|
||
},
|
||
{
|
||
target: 'zip',
|
||
arch: ['arm64', 'x64']
|
||
}
|
||
],
|
||
category: 'public.app-category.developer-tools',
|
||
hardenedRuntime: true,
|
||
notarize: true,
|
||
entitlements: 'electron/entitlements.mac.plist',
|
||
entitlementsInherit: 'electron/entitlements.mac.plist',
|
||
extendInfo: {
|
||
NSCameraUsageDescription: 'Netcatty may use the camera for video calls',
|
||
NSMicrophoneUsageDescription: 'Netcatty may use the microphone for audio',
|
||
NSLocalNetworkUsageDescription: 'Netcatty needs local network access for SSH connections',
|
||
CFBundleDocumentTypes: [
|
||
{
|
||
CFBundleTypeName: 'Folder',
|
||
CFBundleTypeRole: 'Viewer',
|
||
LSHandlerRank: 'Alternate',
|
||
LSItemContentTypes: ['public.folder']
|
||
}
|
||
]
|
||
},
|
||
extraResources: [...moshExtraResources('darwin'), ...etExtraResources('darwin')]
|
||
},
|
||
dmg: {
|
||
title: '${productName}',
|
||
iconSize: 100,
|
||
iconTextSize: 12,
|
||
window: {
|
||
width: 540,
|
||
height: 380
|
||
},
|
||
contents: [
|
||
{ x: 140, y: 158 },
|
||
{ x: 400, y: 158, type: 'link', path: '/Applications' }
|
||
]
|
||
},
|
||
win: {
|
||
icon: 'build/icon.ico',
|
||
// 先只打 zip（无需 NSIS / portable 联网构建），后续再按需恢复 NSIS installer
|
||
target: ['zip'],
|
||
extraResources: [
|
||
...moshExtraResources('win32'),
|
||
...etExtraResources('win32'),
|
||
]
|
||
},
|
||
portable: {
|
||
artifactName: '${productName}-${version}-portable-${os}-${arch}.${ext}',
|
||
},
|
||
nsis: {
|
||
include: 'build/installer.nsh',
|
||
oneClick: false,
|
||
perMachine: false,
|
||
allowElevation: true,
|
||
allowToChangeInstallationDirectory: true,
|
||
createDesktopShortcut: true,
|
||
createStartMenuShortcut: true,
|
||
shortcutName: 'NetMesh'
|
||
},
|
||
linux: {
|
||
// Linux .deb/.rpm/AppImage icons come from build/icons/* (see
|
||
// scripts/generate-linux-icons.sh). Point at the icons directory
|
||
// under buildResources — electron-builder still falls back to the
|
||
// top-level icon (public/icon.png) when linux.icon is unset, which
|
||
// installs only hicolor/1024x1024 and launchers miss the icon (#274,
|
||
// #1340). Do NOT set linux.icon to a single 1024px PNG either.
|
||
icon: 'icons',
|
||
target: ['AppImage', 'deb', 'rpm', 'pacman'],
|
||
category: 'Development',
|
||
extraResources: [...moshExtraResources('linux'), ...etExtraResources('linux')]
|
||
},
|
||
deb: {
|
||
// Use gzip instead of default xz(lzma) for better compatibility with
|
||
// Deepin OS and other distros that have issues with lzma decompression
|
||
compression: 'gz',
|
||
afterInstall: 'scripts/linux/after-install.tpl'
|
||
},
|
||
rpm: {
|
||
// Default fpm/electron-builder RPM compression is "xzmt" (multi-threaded
|
||
// xz). AlmaLinux/RHEL 8 images provide `xz` but not the `xzmt` shim, so
|
||
// rpmbuild fails with exit 127 during packaging. gzip is portable and
|
||
// matches our deb preference for older distros.
|
||
compression: 'gzip',
|
||
afterInstall: 'scripts/linux/after-install.tpl',
|
||
fpm: [
|
||
// Avoid rpm's generated /usr/lib/.build-id symlinks. Those hashes
|
||
// are global on the host, so owning them can conflict with other RPMs.
|
||
'--rpm-rpmbuild-define', '_build_id_links none',
|
||
// Electron ships prebuilt binaries. RHEL/Alma brp post-install
|
||
// scripts (strip/compress/etc.) can exit 127 when a helper is
|
||
// missing or a gcc-toolset `strip` is on PATH; skip them.
|
||
'--rpm-rpmbuild-define', '__os_install_post %{nil}',
|
||
]
|
||
},
|
||
pacman: {
|
||
// FPM-generated .pacman packages bypass Arch's alpm hooks that
|
||
// normally refresh the hicolor icon cache. Without this, KDE cannot
|
||
// resolve Icon=netcatty and shows a generic placeholder (#1358).
|
||
afterInstall: 'scripts/linux/after-install.tpl',
|
||
afterRemove: 'scripts/linux/after-remove.tpl',
|
||
},
|
||
// publish: [
|
||
// {
|
||
// provider: 'github',
|
||
// owner: 'binaricat',
|
||
// repo: 'Netcatty',
|
||
// releaseType: 'release'
|
||
// }
|
||
// ],
|
||
// 内网环境 —— 关闭 GitHub publish，electron-builder 不会再尝试连 github.com
|
||
publish: null
|
||
};
|