electrify-web 1.0.0

package/lib/pwa/index.js

@@ -0,0 +1,241 @@
+"use strict";
+/**
+ * PWA (Progressive Web App) 支持
+ * 解析 Web App Manifest，提取应用信息
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchPWAInfo = fetchPWAInfo;
+exports.getBestIconFromManifest = getBestIconFromManifest;
+exports.pwaDisplayToOptions = pwaDisplayToOptions;
+exports.pwaInfoToOptions = pwaInfoToOptions;
+const axios_1 = __importDefault(require("axios"));
+const log = __importStar(require("loglevel"));
+/**
+ * 从 HTML 中提取属性值
+ */
+function extractAttr(html, tagPattern, attr) {
+    const match = html.match(tagPattern);
+    if (match) {
+        const attrMatch = match[0].match(new RegExp(`${attr}=["']([^"']+)["']`, 'i'));
+        return attrMatch === null || attrMatch === void 0 ? void 0 : attrMatch[1];
+    }
+    return undefined;
+}
+/**
+ * 从 HTML 中提取 manifest 链接
+ */
+function extractManifestUrl(html, baseUrl) {
+    const match = html.match(/<link[^>]*rel=["']manifest["'][^>]*>/i);
+    if (match) {
+        const href = extractAttr(match[0], /.*/, 'href');
+        if (href) {
+            try {
+                return new URL(href, baseUrl).href;
+            }
+            catch {
+                return undefined;
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * 从 HTML 中提取 PWA 相关信息
+ */
+function extractPWAInfoFromHtml(html, baseUrl) {
+    const info = {};
+    // 主题色
+    const themeColorMatch = html.match(/<meta[^>]*name=["']theme-color["'][^>]*>/i);
+    if (themeColorMatch) {
+        info.themeColor = extractAttr(themeColorMatch[0], /.*/, 'content');
+    }
+    // Apple Touch Icon
+    const appleTouchMatch = html.match(/<link[^>]*rel=["']apple-touch-icon[^"']*["'][^>]*>/i);
+    if (appleTouchMatch) {
+        const href = extractAttr(appleTouchMatch[0], /.*/, 'href');
+        if (href) {
+            try {
+                info.appleTouchIcon = new URL(href, baseUrl).href;
+            }
+            catch { /* ignore */ }
+        }
+    }
+    // Favicon
+    const faviconMatch = html.match(/<link[^>]*rel=["'](?:shortcut )?icon["'][^>]*>/i);
+    if (faviconMatch) {
+        const href = extractAttr(faviconMatch[0], /.*/, 'href');
+        if (href) {
+            try {
+                info.favicon = new URL(href, baseUrl).href;
+            }
+            catch { /* ignore */ }
+        }
+    }
+    // 标题
+    const titleMatch = html.match(/<title[^>]*>([^<]+)<\/title>/i);
+    if (titleMatch) {
+        info.title = titleMatch[1].trim();
+    }
+    // 描述
+    const descMatch = html.match(/<meta[^>]*name=["']description["'][^>]*>/i);
+    if (descMatch) {
+        info.description = extractAttr(descMatch[0], /.*/, 'content');
+    }
+    return info;
+}
+/**
+ * 获取网站的 PWA 信息
+ */
+async function fetchPWAInfo(url) {
+    const info = {};
+    try {
+        // 获取 HTML
+        const response = await axios_1.default.get(url, {
+            timeout: 10000,
+            headers: {
+                'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36',
+            },
+        });
+        const html = response.data;
+        Object.assign(info, extractPWAInfoFromHtml(html, url));
+        // 查找并获取 manifest
+        const manifestUrl = extractManifestUrl(html, url);
+        if (manifestUrl) {
+            info.manifestUrl = manifestUrl;
+            try {
+                const manifestResponse = await axios_1.default.get(manifestUrl, { timeout: 5000 });
+                info.manifest = manifestResponse.data;
+                log.debug('Found PWA manifest:', manifestUrl);
+            }
+            catch (err) {
+                log.debug('Failed to fetch manifest:', err);
+            }
+        }
+    }
+    catch (err) {
+        log.debug('Failed to fetch PWA info:', err);
+    }
+    return info;
+}
+/**
+ * 从 PWA 信息中获取最佳图标 URL
+ */
+function getBestIconFromManifest(manifest, baseUrl) {
+    if (!manifest.icons || manifest.icons.length === 0) {
+        return undefined;
+    }
+    // 按尺寸排序，优先选择大图标
+    const sortedIcons = [...manifest.icons].sort((a, b) => {
+        var _a, _b;
+        const sizeA = parseInt(((_a = a.sizes) === null || _a === void 0 ? void 0 : _a.split('x')[0]) || '0', 10);
+        const sizeB = parseInt(((_b = b.sizes) === null || _b === void 0 ? void 0 : _b.split('x')[0]) || '0', 10);
+        return sizeB - sizeA;
+    });
+    // 优先选择 purpose 为 any 或 maskable 的图标
+    const preferredIcon = sortedIcons.find((icon) => !icon.purpose || icon.purpose === 'any' || icon.purpose.includes('any')) || sortedIcons[0];
+    try {
+        return new URL(preferredIcon.src, baseUrl).href;
+    }
+    catch {
+        return preferredIcon.src;
+    }
+}
+/**
+ * 将 PWA manifest 的 display 模式转换为 Nativefier 选项
+ */
+function pwaDisplayToOptions(display) {
+    switch (display) {
+        case 'fullscreen':
+            return { fullScreen: true };
+        case 'standalone':
+            return { hideWindowFrame: false };
+        case 'minimal-ui':
+            return { hideWindowFrame: false };
+        default:
+            return {};
+    }
+}
+/**
+ * 从 PWA 信息生成 Nativefier 选项建议
+ */
+function pwaInfoToOptions(info, baseUrl) {
+    const options = {};
+    if (info.manifest) {
+        // 名称
+        if (info.manifest.short_name) {
+            options.name = info.manifest.short_name;
+        }
+        else if (info.manifest.name) {
+            options.name = info.manifest.name;
+        }
+        // 图标
+        const iconUrl = getBestIconFromManifest(info.manifest, baseUrl);
+        if (iconUrl) {
+            options.icon = iconUrl;
+        }
+        // 背景色
+        if (info.manifest.background_color) {
+            options.backgroundColor = info.manifest.background_color;
+        }
+        else if (info.manifest.theme_color) {
+            options.backgroundColor = info.manifest.theme_color;
+        }
+        // 显示模式
+        Object.assign(options, pwaDisplayToOptions(info.manifest.display));
+    }
+    // 如果 manifest 没有图标，使用 Apple Touch Icon 或 favicon
+    if (!options.icon) {
+        if (info.appleTouchIcon) {
+            options.icon = info.appleTouchIcon;
+        }
+        else if (info.favicon) {
+            options.icon = info.favicon;
+        }
+    }
+    // 如果没有名称，使用页面标题
+    if (!options.name && info.title) {
+        options.name = info.title;
+    }
+    // 如果没有背景色，使用主题色
+    if (!options.backgroundColor && info.themeColor) {
+        options.backgroundColor = info.themeColor;
+    }
+    return options;
+}
+//# sourceMappingURL=index.js.map

package/lib/pwa/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pwa/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqHH,oCAiCC;AAKD,0DAsBC;AAKD,kDAcC;AAKD,4CA4DC;AAnQD,kDAA0B;AAC1B,8CAAgC;AAgChC;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,UAAkB,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9E,OAAO,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAClE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAC3D,MAAM,IAAI,GAAqB,EAAE,CAAC;IAElC,MAAM;IACN,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAChF,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;IAED,mBAAmB;IACnB,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC1F,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,CAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,UAAU;IACV,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACnF,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK;IACL,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,CAAC;IAED,KAAK;IACL,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1E,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAY,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,UAAU;QACV,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YACpC,OAAO,EAAE,KAAK;YACd,OAAO,EAAE;gBACP,YAAY,EAAE,8DAA8D;aAC7E;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAc,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAEvD,iBAAiB;QACjB,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,gBAAgB,GAAG,MAAM,eAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC,IAAsB,CAAC;gBACxD,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IAEH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,uBAAuB,CAAC,QAAwB,EAAE,OAAe;IAC/E,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,gBAAgB;IAChB,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;;QACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAA,MAAA,CAAC,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,KAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAA,MAAA,CAAC,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,KAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,OAAO,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,oCAAoC;IACpC,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClF,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAEpB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAgB;IAIlD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,KAAK,YAAY;YACf,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACpC,KAAK,YAAY;YACf,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QACpC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,IAAa,EAAE,OAAe;IAO7D,MAAM,OAAO,GAMR,EAAE,CAAC;IAER,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,KAAK;QACL,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1C,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,CAAC;QAED,KAAK;QACL,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC;QACzB,CAAC;QAED,MAAM;QACN,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACnC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC3D,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtD,CAAC;QAED,OAAO;QACP,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAChD,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/lib/security/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * 检查 Electron 版本安全性
+ */
+export declare function checkElectronSecurity(version: string): {
+    safe: boolean;
+    vulnerabilities: string[];
+    recommendation?: string;
+};
+/**
+ * 获取最新 Electron 版本
+ */
+export declare function getLatestElectronVersion(): Promise<string | undefined>;
+/**
+ * 执行安全检查并输出警告
+ */
+export declare function performSecurityCheck(electronVersion: string): Promise<void>;
+/**
+ * doctor 命令 - 检查系统环境
+ */
+export declare function runDoctor(): Promise<{
+    passed: boolean;
+    checks: Array<{
+        name: string;
+        status: 'pass' | 'warn' | 'fail';
+        message: string;
+    }>;
+}>;

package/lib/security/index.js

@@ -0,0 +1,202 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkElectronSecurity = checkElectronSecurity;
+exports.getLatestElectronVersion = getLatestElectronVersion;
+exports.performSecurityCheck = performSecurityCheck;
+exports.runDoctor = runDoctor;
+const log = __importStar(require("loglevel"));
+const axios_1 = __importDefault(require("axios"));
+// 已知有严重漏洞的 Electron 版本 (CVE 数据)
+const KNOWN_VULNERABLE_VERSIONS = {
+    // 格式: 'major.minor': ['CVE-xxxx-xxxx', ...]
+    '22.0': ['CVE-2023-4863'], // libwebp 漏洞
+    '22.1': ['CVE-2023-4863'],
+    '22.2': ['CVE-2023-4863'],
+    '22.3': ['CVE-2023-4863'],
+    '23.0': ['CVE-2023-4863'],
+    '23.1': ['CVE-2023-4863'],
+    '23.2': ['CVE-2023-4863'],
+    '24.0': ['CVE-2023-4863'],
+    '24.1': ['CVE-2023-4863'],
+    '24.2': ['CVE-2023-4863'],
+    '24.3': ['CVE-2023-4863'],
+    '24.4': ['CVE-2023-4863'],
+    '25.0': ['CVE-2023-4863'],
+    '25.1': ['CVE-2023-4863'],
+    '25.2': ['CVE-2023-4863'],
+    '25.3': ['CVE-2023-4863'],
+    '25.4': ['CVE-2023-4863'],
+    '25.5': ['CVE-2023-4863'],
+    '25.6': ['CVE-2023-4863'],
+    // 25.7.0+ 已修复
+};
+// 推荐的安全版本
+const RECOMMENDED_VERSIONS = {
+    25: '25.9.8',
+    26: '26.6.10',
+    27: '27.3.11',
+    28: '28.3.3',
+    29: '29.4.6',
+    30: '30.5.1',
+    31: '31.7.7',
+    32: '32.2.7',
+    33: '33.4.0',
+};
+/**
+ * 检查 Electron 版本安全性
+ */
+function checkElectronSecurity(version) {
+    var _a;
+    const parts = version.split('.');
+    const major = parseInt(parts[0], 10);
+    const minor = parseInt(parts[1], 10);
+    const patch = parseInt(((_a = parts[2]) === null || _a === void 0 ? void 0 : _a.split('-')[0]) || '0', 10);
+    const majorMinor = `${major}.${minor}`;
+    const vulnerabilities = KNOWN_VULNERABLE_VERSIONS[majorMinor] || [];
+    const safe = vulnerabilities.length === 0;
+    let recommendation;
+    if (!safe && RECOMMENDED_VERSIONS[major]) {
+        recommendation = RECOMMENDED_VERSIONS[major];
+    }
+    return { safe, vulnerabilities, recommendation };
+}
+/**
+ * 获取最新 Electron 版本
+ */
+async function getLatestElectronVersion() {
+    try {
+        const response = await axios_1.default.get('https://releases.electronjs.org/releases.json', { timeout: 5000 });
+        const stable = response.data.find((r) => !r.version.includes('-'));
+        return stable === null || stable === void 0 ? void 0 : stable.version;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * 执行安全检查并输出警告
+ */
+async function performSecurityCheck(electronVersion) {
+    const result = checkElectronSecurity(electronVersion);
+    if (!result.safe) {
+        log.warn('\n' + '⚠️'.repeat(20));
+        log.warn('🔴 SECURITY WARNING: Electron version has known vulnerabilities!');
+        log.warn(`   Version: ${electronVersion}`);
+        log.warn(`   CVEs: ${result.vulnerabilities.join(', ')}`);
+        if (result.recommendation) {
+            log.warn(`   Recommended: ${result.recommendation}`);
+            log.warn(`   Use: --electron-version ${result.recommendation}`);
+        }
+        log.warn('⚠️'.repeat(20) + '\n');
+    }
+    else {
+        log.debug(`✅ Electron ${electronVersion} has no known critical vulnerabilities`);
+    }
+}
+/**
+ * doctor 命令 - 检查系统环境
+ */
+async function runDoctor() {
+    const checks = [];
+    // 1. Node.js 版本检查
+    const nodeVersion = process.version;
+    const nodeMajor = parseInt(nodeVersion.slice(1).split('.')[0], 10);
+    if (nodeMajor >= 18) {
+        checks.push({ name: 'Node.js', status: 'pass', message: `${nodeVersion} ✓` });
+    }
+    else if (nodeMajor >= 16) {
+        checks.push({ name: 'Node.js', status: 'warn', message: `${nodeVersion} (recommend 18+)` });
+    }
+    else {
+        checks.push({ name: 'Node.js', status: 'fail', message: `${nodeVersion} (requires 16+)` });
+    }
+    // 2. npm 版本检查
+    try {
+        const { execSync } = await Promise.resolve().then(() => __importStar(require('child_process')));
+        const npmVersion = execSync('npm --version', { encoding: 'utf8' }).trim();
+        const npmMajor = parseInt(npmVersion.split('.')[0], 10);
+        if (npmMajor >= 7) {
+            checks.push({ name: 'npm', status: 'pass', message: `${npmVersion} ✓` });
+        }
+        else {
+            checks.push({ name: 'npm', status: 'warn', message: `${npmVersion} (recommend 7+)` });
+        }
+    }
+    catch {
+        checks.push({ name: 'npm', status: 'fail', message: 'not found' });
+    }
+    // 3. 平台检查
+    const platform = process.platform;
+    checks.push({ name: 'Platform', status: 'pass', message: `${platform} (${process.arch})` });
+    // 4. 磁盘空间检查 (简单检查)
+    try {
+        const { execSync } = await Promise.resolve().then(() => __importStar(require('child_process')));
+        if (platform !== 'win32') {
+            const df = execSync('df -h . | tail -1', { encoding: 'utf8' });
+            const available = df.split(/\s+/)[3];
+            checks.push({ name: 'Disk Space', status: 'pass', message: `${available} available` });
+        }
+    }
+    catch {
+        checks.push({ name: 'Disk Space', status: 'warn', message: 'unable to check' });
+    }
+    // 5. 网络连接检查
+    try {
+        await axios_1.default.get('https://registry.npmjs.org', { timeout: 5000 });
+        checks.push({ name: 'Network', status: 'pass', message: 'npm registry reachable ✓' });
+    }
+    catch {
+        checks.push({ name: 'Network', status: 'warn', message: 'npm registry unreachable' });
+    }
+    // 6. Electron 缓存检查
+    const os = await Promise.resolve().then(() => __importStar(require('os')));
+    const path = await Promise.resolve().then(() => __importStar(require('path')));
+    const fs = await Promise.resolve().then(() => __importStar(require('fs')));
+    const electronCache = path.join(os.homedir(), '.electron');
+    if (fs.existsSync(electronCache)) {
+        const files = fs.readdirSync(electronCache);
+        checks.push({ name: 'Electron Cache', status: 'pass', message: `${files.length} versions cached` });
+    }
+    else {
+        checks.push({ name: 'Electron Cache', status: 'warn', message: 'no cache (first build will be slower)' });
+    }
+    const passed = checks.every((c) => c.status !== 'fail');
+    return { passed, checks };
+}
+//# sourceMappingURL=index.js.map

package/lib/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,sDAoBC;AAKD,4DAWC;AAKD,oDAkBC;AAKD,8BAqEC;AAvLD,8CAAgC;AAChC,kDAA0B;AAQ1B,gCAAgC;AAChC,MAAM,yBAAyB,GAA6B;IAC1D,4CAA4C;IAC5C,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa;IACxC,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,cAAc;CACf,CAAC;AAEF,UAAU;AACV,MAAM,oBAAoB,GAA2B;IACnD,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,QAAQ;CACb,CAAC;AAEF;;GAEG;AACH,SAAgB,qBAAqB,CAAC,OAAe;;IAKnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAA,MAAA,KAAK,CAAC,CAAC,CAAC,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,KAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;IAEvC,MAAM,eAAe,GAAG,yBAAyB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC;IAE1C,IAAI,cAAkC,CAAC;IACvC,IAAI,CAAC,IAAI,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AACnD,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,wBAAwB;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAC9B,+CAA+C,EAC/C,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QACF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,OAAO,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,oBAAoB,CACxC,eAAuB;IAEvB,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;IAEtD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC,eAAe,eAAe,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,cAAc,eAAe,wCAAwC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,SAAS;IAI7B,MAAM,MAAM,GAA+E,EAAE,CAAC;IAE9F,kBAAkB;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,kBAAkB,EAAE,CAAC,CAAC;IAC9F,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,iBAAiB,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,cAAc;IACd,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;QACnD,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,iBAAiB,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,UAAU;IACV,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAE5F,mBAAmB;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,eAAe,GAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,YAAY,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;IACZ,IAAI,CAAC;QACH,MAAM,eAAK,CAAC,GAAG,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,mBAAmB;IACnB,MAAM,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,wDAAa,MAAM,GAAC,CAAC;IAClC,MAAM,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IACtG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACxD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/lib/updater/index.d.ts

@@ -0,0 +1,34 @@
+/**
+ * 自动更新系统
+ * 为生成的应用添加自动更新能力
+ */
+export interface UpdateConfig {
+    provider: 'github' | 'generic' | 's3' | 'spaces';
+    owner?: string;
+    repo?: string;
+    url?: string;
+    channel?: 'latest' | 'beta' | 'alpha';
+    allowDowngrade?: boolean;
+    allowPrerelease?: boolean;
+}
+/**
+ * 生成 electron-updater 配置
+ */
+export declare function generateUpdaterConfig(config: UpdateConfig): Record<string, unknown>;
+/**
+ * 生成自动更新的主进程代码
+ */
+export declare function generateAutoUpdateCode(config: UpdateConfig): string;
+/**
+ * 生成简化版更新检查代码（不依赖 electron-updater）
+ */
+export declare function generateSimpleUpdateChecker(updateUrl: string): string;
+/**
+ * 将更新代码注入到应用中
+ */
+export declare function injectAutoUpdate(appPath: string, config: UpdateConfig | string): void;
+/**
+ * 解析更新配置字符串
+ * 格式: github:owner/repo 或 https://update-server.com/updates
+ */
+export declare function parseUpdateConfig(configStr: string): UpdateConfig | string;