@yufengtadian/freedom-cli 1.12.18 → 1.13.1

package/templates/go/gen_config.go

@@ -1,22 +0,0 @@
-package main
-
-import "freedom-cli-shell/pkg/freedom"
-
-// appConfig 返回应用窗口配置（编译期默认值）。
-//
-// 通用壳在运行时还会读取 exe 同目录 resources/config.json（由 freedom CLI build
-// 阶段根据 freedom.config.js 生成），其中的字段会覆盖本默认值。因此：
-//   - 使用预编译通用壳时，本文件中的值只是兜底，无需手动修改；
-//   - 若通过 go build 直接编译本项目（不使用 CLI），此处即为最终配置。
-func appConfig() freedom.Config {
-	return freedom.Config{
-		Title:     "Freedom App",
-		TitleBar:  freedom.TitleBarFrameless,
-		Width:     1024,
-		Height:    720,
-		MinWidth:  400,
-		MinHeight: 300,
-		Center:    true,
-		Debug:     false,
-	}
-}

package/templates/go/pkg/freedom/center_windows_test.go

@@ -1,32 +0,0 @@
-//go:build windows
-
-package freedom
-
-import "testing"
-
-// TestClampCentered 覆盖 M5 双向 clamp 的所有分支：
-// 小窗严格居中 / 超屏贴左上（上下界互打架）/ 副屏负坐标 / 右缘与下缘不越界。
-func TestClampCentered(t *testing.T) {
-	cases := []struct {
-		name                         string
-		winW, winH, left, top        int
-		workW, workH, wantX, wantY   int
-	}{
-		{"主屏小窗严格居中", 240, 180, 0, 0, 1920, 1040, 840, 430},
-		{"主屏超屏贴左上角", 3000, 2000, 0, 0, 1920, 1040, 0, 0},
-		{"副屏负坐标居中", 800, 600, -1920, 0, 1920, 1080, -1360, 240},
-		{"右缘不越界", 1900, 1000, 0, 0, 1920, 1080, 10, 40},
-		{"窗口恰等于工作区", 1920, 1040, 0, 0, 1920, 1040, 0, 0},
-		{"副屏超屏上界回贴左上", 3000, 2000, -1920, 0, 1920, 1040, -1920, 0},
-		{"高度触下缘", 200, 1040, 0, 0, 1920, 1040, 860, 0},
-	}
-	for _, c := range cases {
-		t.Run(c.name, func(t *testing.T) {
-			x, y := clampCentered(c.winW, c.winH, c.left, c.top, c.workW, c.workH)
-			if x != c.wantX || y != c.wantY {
-				t.Fatalf("clampCentered(%d,%d,%d,%d,%d,%d) = (%d,%d), want (%d,%d)",
-					c.winW, c.winH, c.left, c.top, c.workW, c.workH, x, y, c.wantX, c.wantY)
-			}
-		})
-	}
-}

package/templates/go/pkg/freedom/security_test.go

@@ -1,153 +0,0 @@
-package freedom
-
-import (
-	"bytes"
-	"crypto/aes"
-	"crypto/cipher"
-	"crypto/hmac"
-	"crypto/sha256"
-	"encoding/hex"
-	"os"
-	"path/filepath"
-	"testing"
-)
-
-// 跨语言一致性：deriveSecurityKey 的期望值由 Node crypto.pbkdf2Sync 生成
-// （见 lib/security.js 测试 / 开发时用 node -e 复算）。两侧必须一致，
-// 否则 CLI high 模式 build 的加密资源壳无法解密。
-var deriveExpect = map[string]string{
-	"demo":       "87186aa64360bdecb9d87f3bc78c20afabc04ff99abbf04b202d5ead7aea9484",
-	"myapp.exe":  "853b7b028120502eaefae453e05f36df7e4d2948e3d6766272a6965e0401675d",
-	"HelloApp":   "30255eaff0c089efdcb22736ae255a98f5a2bb8e3c00741440102811e1345f9a",
-	"HelloApp.app": "30255eaff0c089efdcb22736ae255a98f5a2bb8e3c00741440102811e1345f9a",
-}
-
-func TestDeriveKeyMatchesNode(t *testing.T) {
-	for name, wantHex := range deriveExpect {
-		got := hex.EncodeToString(deriveSecurityKey(name))
-		if got != wantHex {
-			t.Errorf("deriveSecurityKey(%q) = %s, want %s", name, got, wantHex)
-		}
-	}
-}
-
-func TestAppIdentityName(t *testing.T) {
-	cases := map[string]string{
-		"demo":         "demo",
-		"myapp.exe":    "myapp",
-		"HelloApp.app": "HelloApp",
-		// 与 lib/security.js appIdentityFor 正则语义一致：仅去除最后一个 .exe/.app 后缀
-		"app.exe.app": "app.exe",
-	}
-	for in, want := range cases {
-		if got := appIdentityName(in); got != want {
-			t.Errorf("appIdentityName(%q) = %q, want %q", in, got, want)
-		}
-	}
-}
-
-func TestPBKDF2RFCVector(t *testing.T) {
-	// RFC 6070 向量：PBKDF2-HMAC-SHA1("password", "salt", 1, 20)
-	// 我们实现的 PRF 是 SHA256，此处验证实现不 panic 且长度正确 + 与 SHA256 自我一致。
-	dk := pbkdf2HMACSHA256([]byte("password"), []byte("salt"), 4096, 32)
-	if len(dk) != 32 {
-		t.Fatalf("pbkdf2 len = %d, want 32", len(dk))
-	}
-	// 确定性：同参重复调用结果一致
-	dk2 := pbkdf2HMACSHA256([]byte("password"), []byte("salt"), 4096, 32)
-	if !bytes.Equal(dk, dk2) {
-		t.Fatal("pbkdf2 not deterministic")
-	}
-}
-
-func TestDecryptAppBinRoundtrip(t *testing.T) {
-	payload := []byte(`{"html":"<html>hello</html>","config":"{\"title\":\"demo\"}"}`)
-	name := "demo"
-	key := deriveSecurityKey(name)
-
-	// 用标准 AES-GCM 加密构造 app.bin（模拟 CLI build 产物）
-	data, err := encryptForTest(name, payload)
-	if err != nil {
-		t.Fatalf("encryptForTest: %v", err)
-	}
-	p, err := decryptAppBin(name, data)
-	if err != nil {
-		t.Fatalf("decryptAppBin: %v", err)
-	}
-	if p.HTML != "<html>hello</html>" || p.Config != "{\"title\":\"demo\"}" {
-		t.Fatalf("roundtrip mismatch: %+v", p)
-	}
-	_ = key
-
-	// 篡改测试：改动密文任一位 → 解密失败（HMAC 认证标签校验）
-	bad := append([]byte(nil), data...)
-	bad[len(bad)-1] ^= 0x01
-	if _, err := decryptAppBin(name, bad); err == nil {
-		t.Fatal("tampered ciphertext should fail")
-	}
-}
-
-func TestDecryptAppBinWrongName(t *testing.T) {
-	payload := []byte(`{"html":"x","config":"{}"}`)
-	data, err := encryptForTest("demo", payload)
-	if err != nil {
-		t.Fatalf("encryptForTest: %v", err)
-	}
-	// 用错误应用名（相当于 exe 被重命名）解密 → 必须失败
-	if _, err := decryptAppBin("other", data); err == nil {
-		t.Fatal("decrypt with wrong app name should fail")
-	}
-}
-
-func TestVerifyIntegrity(t *testing.T) {
-	dir := t.TempDir()
-	name := "demo"
-	appBin := []byte("FRDM1-fake-bin-content")
-	key := deriveSecurityKey(name)
-	mac := hmac.New(sha256.New, key)
-	mac.Write(appBin)
-	want := hex.EncodeToString(mac.Sum(nil))
-
-	// 正常：匹配
-	good := `{"v":1,"appBin":"` + want + `","backend":{}}`
-	if err := os.WriteFile(filepath.Join(dir, ".integrity"), []byte(good), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	if err := verifyIntegrity(dir, name, appBin); err != nil {
-		t.Fatalf("verifyIntegrity should pass: %v", err)
-	}
-
-	// 篡改：app.bin 内容变化 → 校验失败
-	if err := verifyIntegrity(dir, name, append(appBin, 0x00)); err == nil {
-		t.Fatal("tampered appBin should fail integrity")
-	}
-
-	// 无 .integrity → 跳过（向后兼容）
-	dir2 := t.TempDir()
-	if err := verifyIntegrity(dir2, name, appBin); err != nil {
-		t.Fatalf("missing .integrity should pass: %v", err)
-	}
-}
-
-// ---- 测试辅助 ----
-
-// encryptForTest 用与 CLI lib/security.js 相同的容器格式加密载荷（供壳单测使用）。
-// 算法与正式流程一致：AES-256-CTR 加密 → HMAC-SHA256(密文) 截 16B 认证标签。
-func encryptForTest(name string, plain []byte) ([]byte, error) {
-	key := deriveSecurityKey(name)
-	block, err := aes.NewCipher(key)
-	if err != nil {
-		return nil, err
-	}
-	iv := make([]byte, securityIVLen) // 固定 iv 便于确定性（仅测试）
-	stream := cipher.NewCTR(block, iv)
-	ct := make([]byte, len(plain))
-	stream.XORKeyStream(ct, plain)
-	mac := hmac.New(sha256.New, key)
-	mac.Write(ct)
-	tag := mac.Sum(nil)[:securityTagLen]
-	out := append([]byte(securityMagic), iv...)
-	out = append(out, tag...)
-	out = append(out, ct...)
-	return out, nil
-}

package/templates/go/temp_vet_test/main.go

@@ -1,40 +0,0 @@
-package main
-
-import "unsafe"
-
-// 写法B：widl 风格链式解引用
-func comVtableB(ppv uintptr, index uint32) uintptr {
-	vt := *(*uintptr)(*(*unsafe.Pointer)(unsafe.Pointer(ppv)))
-	return *(*uintptr)(unsafe.Pointer(vt + uintptr(index)*8))
-}
-
-// 写法D：先转 unsafe.Pointer 立即传给子函数
-func comVtableD(ppv uintptr, index uint32) uintptr {
-	return comVtableDPtr(unsafe.Pointer(ppv), index)
-}
-
-func comVtableDPtr(pp unsafe.Pointer, index uint32) uintptr {
-	vt := *(*uintptr)(pp)
-	return *(*uintptr)(unsafe.Add(unsafe.Pointer(vt), uintptr(index)*8))
-}
-
-// 写法E：uintptr 参数直接转结构体指针再读字段
-type unkBox struct{ v unsafe.Pointer }
-
-func comVtableE(ppv uintptr, index uint32) uintptr {
-	b := (*unkBox)(unsafe.Pointer(ppv))
-	slots := unsafe.Slice((*uintptr)(b.v), int(index)+1)
-	return slots[index]
-}
-
-// 写法F：类型化数组头 + Slice
-func comVtableF(ppv uintptr, index uint32) uintptr {
-	obj := (*[1]unsafe.Pointer)(unsafe.Pointer(ppv))
-	vt := *obj
-	slots := unsafe.Slice((*uintptr)(vt[0]), int(index)+1)
-	return slots[index]
-}
-
-func main() {
-	_, _, _, _ = comVtableB(0, 0), comVtableD(0, 0), comVtableE(0, 0), comVtableF(0, 0)
-}

package/templates/go/vet_err.txt

@@ -1 +0,0 @@
-pkg\freedom\syscap_windows.go:56:30: possible misuse of unsafe.Pointer

package/templates/go/vet_err2.txt

@@ -1,2 +0,0 @@
-pkg\freedom\syscap_windows.go:56:22: possible misuse of unsafe.Pointer
-pkg\freedom\syscap_windows.go:61:32: possible misuse of unsafe.Pointer

package/templates/go/webview_go/.github/workflows/ci.yaml

@@ -1,62 +0,0 @@
-name: CI Pipeline
-on: [push, pull_request]
-
-jobs:
-  build:
-    runs-on: ${{ matrix.image }}
-    strategy:
-      fail-fast: false
-      matrix:
-        # Go 1.23 was the latest version as of 2024-08-31 but the action output a "warning":
-        # Failed to restore: "/usr/bin/tar" failed with error: The process '/usr/bin/tar' failed with exit code 2
-        # Go 1.22 didn't output the above "warning" so we're using this version.
-        # Go 1.14 made -mod=vendor default.
-        # Go 1.13 is the version set in go.mod.
-        include:
-          - { image: macos-14,     go: '1.22' }
-          - { image: macos-14,     go: '1.21' }
-          - { image: macos-14,     go: '1.20' }
-          # Go 1.19 is the earliest version available for ARM64.
-          - { image: macos-14,     go: '1.19' }
-          # macos-12 runner has x86_64 support which is needed for old versions of Go
-          - { image: macos-12,     go: '1.18' }
-          - { image: macos-12,     go: '1.17' }
-          - { image: macos-12,     go: '1.16' }
-          - { image: macos-12,     go: '1.15' }
-          - { image: macos-12,     go: '1.14' }
-          - { image: macos-12,     go: '1.13' }
-          - { image: ubuntu-22.04, go: '1.22', apt: libgtk-4-dev libwebkitgtk-6.0-dev }
-          - { image: ubuntu-22.04, go: '1.22', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.22', apt: libgtk-3-dev libwebkit2gtk-4.0-dev }
-          - { image: ubuntu-22.04, go: '1.21', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.20', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.19', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.18', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.17', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.16', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.15', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.14', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: ubuntu-22.04, go: '1.13', apt: libgtk-3-dev libwebkit2gtk-4.1-dev }
-          - { image: windows-2022, go: '1.22' }
-          - { image: windows-2022, go: '1.21' }
-          # Go 1.20 is the earliest version that is usable in this environment as of 2024-08-31.
-          # Compilation fails with older versions:
-          # [...]/bin/ld.exe: [...]\go-link-3209855222\000008.o: in function `x_cgo_thread_start':
-          # \\_\_\runtime\cgo/gcc_util.c:18: undefined reference to `__imp___iob_func'
-          - { image: windows-2022, go: '1.20' }
-    name: Build (${{ matrix.image }}, go ${{ matrix.go }})
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install dependencies
-        if: runner.os == 'Linux'
-        run: sudo apt-get update && sudo apt-get install -y libwebkit2gtk-4.0-dev
-      - uses: actions/setup-go@v5
-        with:
-          go-version: ${{ matrix.go }}
-      - name: Build examples
-        run: >
-          go build
-          ./examples/basic
-          ./examples/bind
-      - name: Run tests
-        run: go test

package/templates/go/webview_go/CHANGELOG.md

@@ -1,15 +0,0 @@
-# Changelog
-
-### Migrating from v0.1.1 to v0.10.0
-
-1. `Webview.Open()` has been removed. Use other webview APIs to create a window, open a link and run main UI loop.
-2. `Webview.Debug()` and `webview.Debugf()` have been removed. Use your favorite logging library to debug webview apps.
-3. `Webview.Settings` struct has been removed. Title, URL and size are controlled via other API setters and can be updated at any time, not only when webview is created.
-4. `Webview.Loop()` has been removed. Use `Run()` instead.
-5. `WebView.Run()`, `WebView.Terminate()`, `WebView.SetTitle()`, `WebView.Dispatch()` stayed the same.
-6. `WebView.Exit()` has been renamed to `WebView.Destroy()`
-7. `WebView.SetColor()` and `WebView.SetFullScreen()` have been removed. Use `Window()` to get native window handle and probably write some Cgo code to adjust native window to your taste.
-8. `Webview.Dialog` has been removed. But it is likely to be brought back as a standalone module.
-9. `WebView.Eval()` remained the same.
-10. `WebView.InjectCSS()` has been removed. Use eval to inject style tag with CSS inside.
-11. `WebView.Bind()` kept the name, but changed the semantics. Only functions can be bound. Not the structs, like in Lorca.

package/templates/go/webview_go/LICENSE

@@ -1,22 +0,0 @@
-MIT License
-
-Copyright (c) 2017 Serge Zaitsev
-Copyright (c) 2020 webview
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/templates/go/webview_go/README.md

@@ -1,50 +0,0 @@
-# webview_go
-
-[![GoDoc](https://godoc.org/github.com/webview/webview_go?status.svg)](https://godoc.org/github.com/webview/webview_go)
-[![Go Report Card](https://goreportcard.com/badge/github.com/webview/webview_go)](https://goreportcard.com/report/github.com/webview/webview_go)
-
-Go language binding for the [webview library][webview].
-
-> [!NOTE]
-> Versions <= 0.1.1 are available in the [old repository][webview].
-
-### Getting Started
-
-See [Go package documentation][go-docs] for the Go API documentation, or simply read the source code.
-
-Start with creating a new directory structure for your project.
-
-```sh
-mkdir my-project && cd my-project
-```
-
-Create a new Go module.
-
-```sh
-go mod init example.com/app
-```
-
-Save one of the example programs into your project directory.
-
-```sh
-curl -sSLo main.go "https://raw.githubusercontent.com/webview/webview_go/master/examples/basic/main.go"
-```
-
-Install dependencies.
-
-```sh
-go get github.com/webview/webview_go
-```
-
-Build the example. On Windows, add `-ldflags="-H windowsgui"` to the command line.
-
-```sh
-go build
-```
-
-### Notes
-
-Calling `Eval()` or `Dispatch()` before `Run()` does not work because the webview instance has only been configured and not yet started.
-
-[go-docs]: https://pkg.go.dev/github.com/webview/webview_go
-[webview]: https://github.com/webview/webview

package/templates/go/webview_go/examples/basic/main.go

@@ -1,12 +0,0 @@
-package main
-
-import webview "github.com/webview/webview_go"
-
-func main() {
-	w := webview.New(false)
-	defer w.Destroy()
-	w.SetTitle("Basic Example")
-	w.SetSize(480, 320, webview.HintNone)
-	w.SetHtml("Thanks for using webview!")
-	w.Run()
-}

package/templates/go/webview_go/examples/bind/main.go

@@ -1,38 +0,0 @@
-package main
-
-import webview "github.com/webview/webview_go"
-
-const html = `<button id="increment">Tap me</button>
-<div>You tapped <span id="count">0</span> time(s).</div>
-<script>
-  const [incrementElement, countElement] =
-    document.querySelectorAll("#increment, #count");
-  document.addEventListener("DOMContentLoaded", () => {
-    incrementElement.addEventListener("click", () => {
-      window.increment().then(result => {
-        countElement.textContent = result.count;
-      });
-    });
-  });
-</script>`
-
-type IncrementResult struct {
-	Count uint `json:"count"`
-}
-
-func main() {
-	var count uint = 0
-	w := webview.New(false)
-	defer w.Destroy()
-	w.SetTitle("Bind Example")
-	w.SetSize(480, 320, webview.HintNone)
-
-	// A binding that increments a value and immediately returns the new value.
-	w.Bind("increment", func() IncrementResult {
-		count++
-		return IncrementResult{Count: count}
-	})
-
-	w.SetHtml(html)
-	w.Run()
-}

package/templates/go/webview_go/glue.c

@@ -1,36 +0,0 @@
-#include "webview.h"
-
-#include <stdlib.h>
-#include <stdint.h>
-
-struct binding_context {
-    webview_t w;
-    uintptr_t index;
-};
-
-void _webviewDispatchGoCallback(void *);
-void _webviewBindingGoCallback(webview_t, char *, char *, uintptr_t);
-
-static void _webview_dispatch_cb(webview_t w, void *arg) {
-    _webviewDispatchGoCallback(arg);
-}
-
-static void _webview_binding_cb(const char *id, const char *req, void *arg) {
-    struct binding_context *ctx = (struct binding_context *) arg;
-    _webviewBindingGoCallback(ctx->w, (char *)id, (char *)req, ctx->index);
-}
-
-void CgoWebViewDispatch(webview_t w, uintptr_t arg) {
-    webview_dispatch(w, _webview_dispatch_cb, (void *)arg);
-}
-
-void CgoWebViewBind(webview_t w, const char *name, uintptr_t index) {
-    struct binding_context *ctx = calloc(1, sizeof(struct binding_context));
-    ctx->w = w;
-    ctx->index = index;
-    webview_bind(w, name, _webview_binding_cb, (void *)ctx);
-}
-
-void CgoWebViewUnbind(webview_t w, const char *name) {
-    webview_unbind(w, name);
-}

package/templates/go/webview_go/go.mod

@@ -1,3 +0,0 @@
-module github.com/webview/webview_go
-
-go 1.13

package/templates/go/webview_go/libs/mswebview2/LICENSE

@@ -1,27 +0,0 @@
-Copyright (C) Microsoft Corporation. All rights reserved.
-
-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are
-met:
-
-   * Redistributions of source code must retain the above copyright
-notice, this list of conditions and the following disclaimer.
-   * Redistributions in binary form must reproduce the above
-copyright notice, this list of conditions and the following disclaimer
-in the documentation and/or other materials provided with the
-distribution.
-   * The name of Microsoft Corporation, or the names of its contributors 
-may not be used to endorse or promote products derived from this
-software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.