react-native-flux-desktop-packer 0.1.0 → 0.1.1

package/README.md

@@ -54,7 +54,7 @@ Requirements (build machine): Node.js ≥ 18 on Windows. Optional: [Go](https://
 | `icon` | PNG embedded as the exe icon (optional; default icon otherwise) |
 | `main` | compiled entry JS; falls back to `package.json`'s `main` |
 | `output` | where the exe lands (default `build`) |
-| `pack` | payload whitelist, default `["dist","node_modules","assets","package.json","app.json"]` |
+| `pack` | payload whitelist, default `["dist","node_modules","assets","package.json","app.json"]`; also `pack.mode` (`folder` default, or `sea`) and `pack.assets` (asset dir, default `assets`) |
 
 **2.** Build your app, then pack:
 
@@ -84,6 +84,32 @@ The stage copies your `dist/`, `node_modules/`, `assets/`, `package.json` and `a
 
 At runtime the launcher sets `FLUX_PACKAGED=1` and `FLUX_APP_DIR=<AppName>`, so the library routes KV/log data to `%APPDATA%\<AppName>\` — no writable-path issues even when the exe sits in `Program Files`.
 
+## SEA single-file mode (`pack.mode: "sea"`)
+
+The default path above ships the **folder/launcher** payload (a Go exe embedding a zip of `dist/` + `node_modules/` + `node.exe`). On first launch it self-extracts a readable **JS source tree** to `%LOCALAPPDATA%` — which works, but the extracted `dist/**/*.js` and `node_modules/` make it obviously a JavaScript project.
+
+Setting `"pack": { "mode": "sea" }` in `app.json` switches to a **Node SEA** (Single Executable Application) build that fixes the optics. The existing `folder` path is untouched — flip the field back to revert.
+
+```
+app.json ─▶ [1] esbuild      all JS → one minified app.cjs (no dist/ tree, no node_modules)
+         ─▶ [2] SEA assets   app.cjs + native .node (self + skia) + icudtl.dat + image assets embedded in the blob
+         ─▶ [3] rcedit       icon + FileDescription/ProductName/… written onto a node.exe copy (BEFORE injection)
+         ─▶ [4] postject     NODE_SEA_BLOB injected into that exe
+         ─▶ [5] subsystem    PE OptionalHeader.Subsystem 3→2 (GUI) so double-click doesn't flash a console
+         ─▶ [6] deliver      <output>/<Name>-<version>.exe  (one file)
+```
+
+At runtime, `node:sea` runs a bootstrap (the SEA `main`) that self-extracts the embedded natives/assets once to a hidden `%LOCALAPPDATA%\<AppName>\run-<stamp>\`, installs native-resolution hooks (skia via `NAPI_RS_NATIVE_LIBRARY_PATH`, your `.node` via `Module._resolveFilename`), `chdir`s to the extracted asset dir, sets `FLUX_PACKAGED=1` / `FLUX_APP_DIR`, then `createRequire`s the opaque `app.cjs`. The `.extracted` marker makes second launches skip re-extraction. There is **no `node.exe` child process** — Task Manager shows the branded `<App>.exe` name and icon.
+
+What you gain: the disk no longer holds a JS source tree — the extracted dir contains a single minified `app.cjs` plus opaque compiled binaries (`.node`/`.dat`) and your image assets.
+
+**Requirements:** build machine needs Node.js ≥ 20 with SEA support (uses `--experimental-sea-config`) plus `esbuild` and `postject` (declared as `optionalDependencies`; `rcedit` is optional too — icon/version injection degrades gracefully when absent). Missing `esbuild`/`postject` → the packer errors with the exact `npm i` to run.
+
+**Honest limitations:**
+- **Not absolute anti-reverse-engineering.** SEA blobs have public extraction tools and `app.cjs` is minified plaintext JS. This *raises the bar* and removes the "obviously a JS project" surface; it does **not** make the source unrecoverable. For more, layer `bytenode`/V8 bytecode over the bundle (out of scope here).
+- **Runtime still writes opaque natives + one `app.cjs`** to a hidden `%LOCALAPPDATA%` dir. Node SEA can only embed JS in the blob — native `.node` addons and non-JS assets must land on a real path (this is the C1 self-extract tradeoff; a co-located `native/` folder is the only alternative).
+- **Size** grows to roughly node.exe + blob + embedded natives (≈ 130–140 MB for the gallery demo).
+
 ## Pre-flight validation
 
 The packer fails fast, before copying anything:

package/README.zh-CN.md

@@ -54,7 +54,7 @@ npm install --save-dev react-native-flux-desktop-packer
 | `icon` | 嵌入 exe 的 PNG 图标（可选，缺省用默认图标） |
 | `main` | 编译后的入口 JS；缺省回落 `package.json` 的 `main` |
 | `output` | 产物落地目录（默认 `build`） |
-| `pack` | 负载白名单，默认 `["dist","node_modules","assets","package.json","app.json"]` |
+| `pack` | 负载白名单，默认 `["dist","node_modules","assets","package.json","app.json"]`；另含 `pack.mode`（默认 `folder`，或 `sea`）与 `pack.assets`（资源目录，默认 `assets`） |
 
 **2.** 先编译应用，再打包：
 
@@ -84,6 +84,32 @@ stage 阶段会拷贝你的 `dist/`、`node_modules/`、`assets/`、`package.jso
 
 运行时启动器会注入 `FLUX_PACKAGED=1` 和 `FLUX_APP_DIR=<AppName>`，库会据此把 KV/日志数据路由到 `%APPDATA%\<AppName>\`——exe 放进 `Program Files` 也没有可写路径问题。
 
+## SEA 单文件模式（`pack.mode: "sea"`）
+
+上面的默认路径走的是**文件夹/启动器**负载（一个 Go exe 内嵌 `dist/` + `node_modules/` + `node.exe` 的 zip）。首启会自解压出一份可读的 **JS 源码树**到 `%LOCALAPPDATA%`——能跑，但解压出的 `dist/**/*.js` 和 `node_modules/` 让人一眼看出这是个 JS 项目。
+
+在 `app.json` 里设 `"pack": { "mode": "sea" }` 即切到 **Node SEA**（单可执行应用）构建，修掉这个观感。现有 `folder` 路径原封不动——把字段改回去即可回退。
+
+```
+app.json ─▶ [1] esbuild      全部 JS → 一个 minified app.cjs（无 dist/ 树、无 node_modules）
+         ─▶ [2] SEA 资产     app.cjs + 原生 .node（自研 + skia）+ icudtl.dat + 图片资源 → 内嵌进 blob
+         ─▶ [3] rcedit       在 node.exe 副本上写图标 + FileDescription/ProductName/…（在注入之前）
+         ─▶ [4] postject     将 NODE_SEA_BLOB 注入该 exe
+         ─▶ [5] 子系统       PE OptionalHeader.Subsystem 3→2（GUI），双击不弹控制台
+         ─▶ [6] 交付         <output>/<Name>-<version>.exe（单文件）
+```
+
+运行时，`node:sea` 跑一个 bootstrap（即 SEA 的 `main`）：把内嵌的原生/资源一次性自解压到隐藏的 `%LOCALAPPDATA%\<AppName>\run-<stamp>\`，安装原生解析钩子（skia 走 `NAPI_RS_NATIVE_LIBRARY_PATH`，你的 `.node` 走 `Module._resolveFilename`），`chdir` 到解压出的资源目录，设 `FLUX_PACKAGED=1` / `FLUX_APP_DIR`，然后 `createRequire` 加载不透明的 `app.cjs`。`.extracted` 标记使二次启动跳过重复解压。**没有 `node.exe` 子进程**——任务管理器显示品牌化的 `<App>.exe` 名与图标。
+
+收益：磁盘上不再有 JS 源码树——解压目录只有一份 minified `app.cjs` 加不透明的编译二进制（`.node`/`.dat`）与你的图片资源。
+
+**前置要求：** 构建机需支持 SEA 的 Node.js ≥ 20（用 `--experimental-sea-config`），外加 `esbuild` 和 `postject`（声明为 `optionalDependencies`；`rcedit` 也是选填—图标/版本注入缺失时优雅跳过）。缺 `esbuild`/`postject` → packer 报错并给出需执行的 `npm i`。
+
+**诚实的限制：**
+- **非绝对防逆向。** SEA blob 有公开提取工具，`app.cjs` 是 minified 明文 JS。本模式*抬高成本*、去掉“一眼是 JS 项目”的观感；**并不能**让源码不可还原。若要更硬，在 bundle 上叠 `bytenode`/V8 字节码（本次范围外）。
+- **运行期仍会写不透明原生 + 一份 `app.cjs`** 到隐藏的 `%LOCALAPPDATA%` 目录。Node SEA 的 blob 只能嵌 JS——原生 `.node` 插件与非 JS 资源必须落到真实路径（这是 C1 自解压的取舍；唯一替代是 exe 旁放 `native/` 文件夹）。
+- **体积**增长到约为 node.exe + blob + 内嵌原生（gallery demo 约 130–140 MB）。
+
 ## 打包前硬校验
 
 复制动作开始之前，packer 会快速失败：

package/launcher/main.go

@@ -39,6 +39,9 @@ var (
 	Entry   = "dist\\main.js"
 	AppName = "Flux"
 	ExeName = "Flux"
+	// Runtime 运行时 exe 的文件名（相对缓存根）。打包时经 -X main.Runtime 注入为应用名.exe，
+	// 使任务管理器里真正吃内存的进程显示应用名而非 node.exe；缺省兼容旧负载（node.exe）。
+	Runtime = "node.exe"
 )
 
 var (
@@ -138,10 +141,10 @@ func main() {
 		_ = os.WriteFile(ready, []byte("ok"), 0o644)
 	}
 
-	node := filepath.Join(dest, "node.exe")
+	node := filepath.Join(dest, Runtime)
 	entry := filepath.Join(dest, Entry)
 	if _, err := os.Stat(node); err != nil {
-		showFatal(ExeName, "解压后缺少 node.exe:\n"+node)
+		showFatal(ExeName, "解压后缺少运行时 exe:\n"+node)
 	}
 	if _, err := os.Stat(entry); err != nil {
 		showFatal(ExeName, "解压后缺少入口:\n"+entry)

package/lib/brand.js

@@ -0,0 +1,133 @@
+// brand.js —— 给「运行时 exe（原 node.exe）」注入应用图标 + 版本字符串。
+// 动机：任务管理器里真正吃内存的进程是启动器 spawn 的运行时 exe，它显示的名字/图标取自「该 exe 主模块的文件名 +
+// 内嵌版本资源(FileDescription) + 内嵌图标」，与启动器图标、App 内窗口图标都无关。仅改文件名可去掉 “node.exe”
+// 字样，但 Win11 分组视图的友好名与图标仍是 Node 的——要彻底换成品牌，须改写该 exe 的资源（rcedit，Electron 同款）。
+// 本模块全程优雅降级：未装 rcedit / 无图标 → 跳过注入（改名仍生效），绝不阻断打包。
+const fs = require('fs');
+const path = require('path');
+const cp = require('child_process');
+const { warn, ok } = require('./util');
+
+const PKG_ROOT = path.join(__dirname, '..');
+
+/** 把多尺寸 PNG 打包成 .ico（Vista 起图标条目可用 PNG 负载；rcedit/Windows 接受）。 */
+function buildIcoFromPngs(pngPaths, outIco) {
+  const entries = pngPaths.map((p) => fs.readFileSync(p));
+  const dims = entries.map((b) => ({ w: b.readUInt32BE(16), h: b.readUInt32BE(20) })); // PNG IHDR
+  const n = entries.length;
+  const header = Buffer.alloc(6);
+  header.writeUInt16LE(0, 0);
+  header.writeUInt16LE(1, 2); // type=icon
+  header.writeUInt16LE(n, 4);
+  const dir = Buffer.alloc(16 * n);
+  let offset = 6 + dir.length;
+  const parts = [header, dir];
+  entries.forEach((buf, i) => {
+    const base = i * 16;
+    const { w, h } = dims[i];
+    dir.writeUInt8(w >= 256 ? 0 : w, base + 0);
+    dir.writeUInt8(h >= 256 ? 0 : h, base + 1);
+    dir.writeUInt8(0, base + 2); // 颜色数
+    dir.writeUInt8(0, base + 3); // 保留
+    dir.writeUInt16LE(1, base + 4); // 平面
+    dir.writeUInt16LE(32, base + 6); // 位深
+    dir.writeUInt32LE(buf.length, base + 8); // 数据大小
+    dir.writeUInt32LE(offset, base + 12); // 数据偏移
+    offset += buf.length;
+    parts.push(buf);
+  });
+  fs.writeFileSync(outIco, Buffer.concat(parts));
+  return outIco;
+}
+
+/** 解析 rcedit（消费方或 packer 自身 node_modules 均可）；找不到返回 null。 */
+function resolveRcedit(projectRoot) {
+  const cand = [projectRoot, PKG_ROOT].filter(Boolean);
+  try {
+    return require(require.resolve('rcedit', { paths: cand }));
+  } catch {
+    /* not here */
+  }
+  try {
+    return require('rcedit');
+  } catch {
+    return null;
+  }
+}
+
+/** 解析 rcedit 自带的可执行 exe（x64 优先）；找不到返回 null。 */
+function resolveRceditBin(projectRoot) {
+  const cand = [projectRoot, PKG_ROOT].filter(Boolean);
+  let dir = null;
+  try {
+    dir = path.dirname(require.resolve('rcedit', { paths: cand }));
+  } catch {
+    try {
+      dir = path.dirname(require.resolve('rcedit'));
+    } catch {
+      return null;
+    }
+  }
+  const binDir = path.join(dir, '..', 'bin');
+  const x64 = path.join(binDir, 'rcedit-x64.exe');
+  if (fs.existsSync(x64)) return x64;
+  const x86 = path.join(binDir, 'rcedit.exe');
+  return fs.existsSync(x86) ? x86 : null;
+}
+
+/**
+ * 就地给 exePath 注入图标 + 版本字符串。直接 spawnSync rcedit 自带 exe 并设硬超时——
+ * 规避 rcedit 的 JS 异步包装在本环境下不返回的问题；任何失败均优雅跳过（不抛、不阻断）。
+ */
+async function brandRuntime(exePath, { projectRoot, iconPngPaths, name, description, version }) {
+  const bin = resolveRceditBin(projectRoot);
+  if (!bin) {
+    warn('未安装可用的 rcedit（在 packer 里 `npm i rcedit`），跳过 exe 图标/描述注入（改名仍生效）');
+    return false;
+  }
+  let ico = null;
+  if (Array.isArray(iconPngPaths) && iconPngPaths.length) {
+    ico = path.join(path.dirname(exePath), '__brand__.ico');
+    try {
+      buildIcoFromPngs(iconPngPaths, ico);
+    } catch (e) {
+      warn(`生成 .ico 失败（仅改版本字符串）：${e.message}`);
+      ico = null;
+    }
+  }
+  const args = [exePath];
+  const push = (k, v) => {
+    if (v != null && v !== '') args.push('--set-version-string', k, String(v));
+  };
+  // FileDescription 会被 Windows 当作任务栏/Alt-Tab 的「应用友好名」——必须是简短可读名，用 name。
+  // description（常为整句产品描述）不适合放这里，否则任务栏会显示一长串文案。
+  // push('FileDescription', name);
+  push('ProductName', name);
+  push('OriginalFilename', name + '.exe');
+  push('InternalName', name);
+  const v = version != null ? String(version).replace(/^v/, '') : '';
+  if (/^\d+(\.\d+){0,3}$/.test(v)) {
+    args.push('--set-file-version', v, '--set-product-version', v);
+  }
+  if (ico) args.push('--set-icon', ico);
+  try {
+    const r = cp.spawnSync(bin, args, { windowsHide: true, encoding: 'utf8', timeout: 60000 });
+    if (r.error) throw r.error;
+    if (r.status !== 0) throw new Error(String(r.stderr || r.stdout || '').trim() || 'exit ' + r.status);
+    ok(`exe 已注入品牌：${path.basename(exePath)}${ico ? ' + 图标' : ''}`);
+    return true;
+  } catch (e) {
+    warn(`rcedit 注入失败（忽略）：${(e && e.message) || e}`);
+    return false;
+  } finally {
+    if (ico) {
+      try {
+        fs.unlinkSync(ico);
+      } catch {
+        /* ignore */
+      }
+    }
+  }
+}
+
+module.exports = { brandRuntime, buildIcoFromPngs, resolveRcedit, resolveRceditBin };

package/lib/bundle.js

@@ -0,0 +1,83 @@
+// bundle.js —— 用 esbuild 把应用入口（dist/App.js，纯 CommonJS）连同全部纯 JS 依赖
+// 打成单个 minified bundle。原生 addon(.node) 与 yoga wasm 之外的一切都被内联；
+// .node / 平台专属包标为 external，交由 SEA bootstrap 落盘后正常 require。
+// esbuild 作为 packer 的可选依赖：消费方或 packer 自身 node_modules 均可解析；缺失则抛清晰错误。
+const fs = require('fs');
+const path = require('path');
+
+const PKG_ROOT = path.join(__dirname, '..');
+
+// external 名单：SEA main 作用域外（bootstrap 用 createRequire 加载 bundle）时，
+// 这些 require 保持原样，运行时由 bootstrap 的解析钩子/环境重定向到自解压目录。
+const EXTERNALS = [
+  'node:sea',
+  '*.node',
+  // 自研库的原生绑定（按平台分包名，运行时只会用到 win32-x64）
+  'react-native-flux-desktop-win32-x64-msvc',
+  'react-native-flux-desktop-win32-ia32-msvc',
+  'react-native-flux-desktop-win32-arm64-msvc',
+  'react-native-flux-desktop-darwin-x64',
+  'react-native-flux-desktop-darwin-arm64',
+  'react-native-flux-desktop-linux-*',
+  'react-native-flux-desktop-android-*',
+  'react-native-flux-desktop-freebsd-*',
+  // @napi-rs/canvas 的平台预编译包（skia .node 由 bootstrap 经 env 指向解压副本）
+  '@napi-rs/canvas-win32-x64-msvc',
+  '@napi-rs/canvas-win32-x64-gnu',
+  '@napi-rs/canvas-win32-arm64-msvc',
+  '@napi-rs/canvas-win32-ia32-msvc',
+  '@napi-rs/canvas-darwin-x64',
+  '@napi-rs/canvas-darwin-arm64',
+  '@napi-rs/canvas-linux-x64-gnu',
+  '@napi-rs/canvas-linux-x64-musl',
+  '@napi-rs/canvas-linux-arm64-gnu',
+  '@napi-rs/canvas-linux-arm64-musl',
+  '@napi-rs/canvas-android-arm64',
+  '@napi-rs/canvas-android-arm-eabi',
+  // 可选大二进制：缺失时运行时自动降级（波形），不内联避免体积膨胀/解析失败
+  'ffmpeg-static',
+];
+
+function resolveEsbuild(projectRoot) {
+  const cand = [projectRoot, PKG_ROOT].filter(Boolean);
+  try {
+    return require(require.resolve('esbuild', { paths: cand }));
+  } catch {
+    /* not here */
+  }
+  try {
+    return require('esbuild');
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * 打包入口为单个 CJS bundle。
+ * @returns {Promise<{outfile:string,size:number}>}
+ */
+async function buildAppBundle({ projectRoot, entryAbs, outfile, minify = true, extraExternals = [] }) {
+  const esbuild = resolveEsbuild(projectRoot);
+  if (!esbuild) {
+    throw new Error('未安装 esbuild（sea 模式所需）。在 packer 目录执行：npm i esbuild postject');
+  }
+  if (!fs.existsSync(entryAbs)) {
+    throw new Error(`入口不存在，无法打包：${entryAbs}`);
+  }
+  await esbuild.build({
+    absWorkingDir: projectRoot,
+    entryPoints: [entryAbs],
+    bundle: true,
+    platform: 'node',
+    format: 'cjs',
+    minify,
+    target: 'node20',
+    legalComments: 'none',
+    logLevel: 'warning',
+    outfile,
+    external: EXTERNALS.concat(extraExternals),
+  });
+  return { outfile, size: fs.statSync(outfile).size };
+}
+
+module.exports = { buildAppBundle, resolveEsbuild, EXTERNALS };

package/lib/config.js

@@ -42,6 +42,12 @@ function loadConfig(projectRoot) {
   const version = typeof app.version === 'string' ? app.version : '0.0.0';
   const output = app.output || 'build';
 
+  // 打包模式：app.pack.mode = "folder"(默认，Go 启动器 + 解压明文 dist) | "sea"(Node SEA 单文件)
+  const packObj = app.pack && typeof app.pack === 'object' ? app.pack : {};
+  const packMode = packObj.mode === 'sea' ? 'sea' : 'folder';
+  // 资源目录（相对项目根），sea 模式内嵌进 exe、运行时解压到 cwd；folder 模式整目录拷贝
+  const assetsDirRel = typeof packObj.assets === 'string' ? packObj.assets : 'assets';
+
   const cfg = {
     projectRoot,
     name: app.name,
@@ -50,8 +56,12 @@ function loadConfig(projectRoot) {
     icon: typeof app.icon === 'string' ? app.icon : null,
     outputAbs: path.isAbsolute(output) ? output : path.join(projectRoot, output),
     outputRel: output,
+    packMode,
+    assetsDirRel,
     // 归一化入口为平台分隔（Go 里用 dist\\Gallery.js）
     mainRel: main.split('/').join(path.sep),
+    // 数据/缓存目录用的应用名（与启动器 sanitize 同规则：空格/斜杠等转 '-'）
+    safeAppName: sanitizeDirName(app.name) || 'Flux',
     appJson: app,
   };
 
@@ -139,4 +149,11 @@ function safeName(s) {
     .trim();
 }
 
-module.exports = { loadConfig, fourPart, safeName, validateEntry, newestSourceMtime };
+// 数据/缓存目录名净化（对齐 launcher main.go 的 sanitize：空格、/ \ : * ? " < > | 一律转 '-'）
+function sanitizeDirName(s) {
+  return String(s)
+    .replace(/[ /\\:*?"<>|]/g, '-')
+    .trim();
+}
+
+module.exports = { loadConfig, fourPart, safeName, sanitizeDirName, validateEntry, newestSourceMtime };

package/lib/icon.js

@@ -11,44 +11,11 @@ async function buildIconSyso({ projectRoot, iconRel, outDir, name, version, desc
     warn('app.json 未配置 icon，跳过图标（exe 使用默认图标）');
     return null;
   }
-  const iconPath = path.isAbsolute(iconRel) ? iconRel : path.join(projectRoot, iconRel);
-  if (!fs.existsSync(iconPath)) {
-    warn(`图标文件不存在：${iconPath}（跳过图标）`);
-    return null;
-  }
-
-  // 从消费方项目解析 @napi-rs/canvas（packer 自身不依赖它）
-  let canvas;
-  try {
-    const modPath = require.resolve('@napi-rs/canvas', { paths: [projectRoot] });
-    canvas = require(modPath);
-  } catch {
-    warn('消费方未安装 @napi-rs/canvas，无法缩放图标（跳过图标）');
-    return null;
-  }
-
-  const goWinres = which(path.join(process.env.USERPROFILE || '', 'go', 'bin', 'go-winres.exe')) || which('go-winres');
-  if (!goWinres) {
-    warn('未找到 go-winres（go install github.com/tc-hib/go-winres@latest），跳过图标');
-    return null;
-  }
-
   ensureDir(outDir);
   const winresDir = path.join(outDir, 'winres');
-  ensureDir(winresDir);
-  const SIZES = [16, 24, 32, 48, 64, 128, 256];
-  const img = await canvas.loadImage(iconPath);
-  const files = [];
-  for (const s of SIZES) {
-    const c = canvas.createCanvas(s, s);
-    const ctx = c.getContext('2d');
-    ctx.imageSmoothingEnabled = true;
-    ctx.imageSmoothingQuality = 'high';
-    ctx.drawImage(img, 0, 0, img.width, img.height, 0, 0, s, s);
-    const fname = `icon-${s}x${s}.png`;
-    fs.writeFileSync(path.join(winresDir, fname), c.toBuffer('image/png'));
-    files.push(fname);
-  }
+  const gen = await renderIconPngs({ projectRoot, iconRel, outDir: winresDir });
+  if (!gen) return null;
+  const files = gen.files;
 
   const v = fourPart(version);
   const json = {
@@ -75,6 +42,11 @@ async function buildIconSyso({ projectRoot, iconRel, outDir, name, version, desc
   fs.writeFileSync(jsonPath, JSON.stringify(json, null, 2));
 
   // go-winres make → 产出 rsrc_windows_amd64.syso 于 outDir
+  const goWinres = which(path.join(process.env.USERPROFILE || '', 'go', 'bin', 'go-winres.exe')) || which('go-winres');
+  if (!goWinres) {
+    warn('未找到 go-winres（go install github.com/tc-hib/go-winres@latest），跳过图标');
+    return null;
+  }
   run(goWinres, ['make', '--in', jsonPath, '--out', path.join(outDir, 'rsrc'), '--arch', 'amd64'], { stdio: 'ignore' });
   const syso = path.join(outDir, 'rsrc_windows_amd64.syso');
   if (!fs.existsSync(syso)) {
@@ -85,4 +57,45 @@ async function buildIconSyso({ projectRoot, iconRel, outDir, name, version, desc
   return syso;
 }
 
-module.exports = { buildIconSyso };
+module.exports = { buildIconSyso, renderIconPngs };
+
+/**
+ * 把 app.json.icon 指的 PNG 缩放为多尺寸图标 PNG，写入 outDir。
+ * 供 go-winres（启动器 exe）与 rcedit（运行时 exe 品牌注入）两处复用，避免取图逻辑漂移。
+ * 任一前置缺失（无 iconRel / 文件不存在 / 无 canvas）都优雅返回 null。
+ * 返回 { abs: 绝对路径数组, files: 相对 outDir 的文件名数组 }。
+ */
+async function renderIconPngs({ projectRoot, iconRel, outDir }) {
+  if (!iconRel) return null;
+  const iconPath = path.isAbsolute(iconRel) ? iconRel : path.join(projectRoot, iconRel);
+  if (!fs.existsSync(iconPath)) {
+    warn(`图标文件不存在：${iconPath}（跳过图标）`);
+    return null;
+  }
+  let canvas;
+  try {
+    const modPath = require.resolve('@napi-rs/canvas', { paths: [projectRoot] });
+    canvas = require(modPath);
+  } catch {
+    warn('消费方未安装 @napi-rs/canvas，无法缩放图标（跳过图标）');
+    return null;
+  }
+  ensureDir(outDir);
+  const SIZES = [16, 24, 32, 48, 64, 128, 256];
+  const img = await canvas.loadImage(iconPath);
+  const abs = [];
+  const files = [];
+  for (const s of SIZES) {
+    const c = canvas.createCanvas(s, s);
+    const ctx = c.getContext('2d');
+    ctx.imageSmoothingEnabled = true;
+    ctx.imageSmoothingQuality = 'high';
+    ctx.drawImage(img, 0, 0, img.width, img.height, 0, 0, s, s);
+    const fname = `icon-${s}x${s}.png`;
+    const p = path.join(outDir, fname);
+    fs.writeFileSync(p, c.toBuffer('image/png'));
+    abs.push(p);
+    files.push(fname);
+  }
+  return { abs, files };
+}

package/lib/index.js

@@ -6,7 +6,9 @@ const fs = require('fs');
 const path = require('path');
 const { step, ok, warn, rmrf, ensureDir, copyTree, dirSize, fmtMB, which, run } = require('./util');
 const { loadConfig, safeName } = require('./config');
-const { buildIconSyso } = require('./icon');
+const { buildIconSyso, renderIconPngs } = require('./icon');
+const { brandRuntime } = require('./brand');
+const { packSea } = require('./sea');
 
 const PKG_ROOT = path.join(__dirname, '..');
 const LAUNCHER_DIR = path.join(PKG_ROOT, 'launcher');
@@ -33,12 +35,29 @@ async function pack(options = {}) {
   console.log(`  应用名：${cfg.name}   版本：${cfg.version}`);
   console.log(`  入口　：${cfg.mainRel}`);
   console.log(`  产物到：${cfg.outputAbs}`);
+  console.log(`  模式　：${cfg.packMode}`);
 
   const work = path.join(projectRoot, '.flux-pack');
   const stage = path.join(work, 'stage');
   const zip = path.join(work, 'payload.zip');
   const buildDir = path.join(work, 'launcher-build');
   rmrf(work);
+
+  // ---- sea 模式：Node SEA 单文件（无 dist 明文树）----
+  if (cfg.packMode === 'sea') {
+    ensureDir(cfg.outputAbs);
+    const entryAbs = path.join(projectRoot, cfg.mainRel);
+    let exe;
+    try {
+      exe = await packSea({ projectRoot, cfg, work, outAbs: cfg.outputAbs, exeBase, fileBase, entryAbs, assetsDirRel: cfg.assetsDirRel });
+    } finally {
+      if (!keepWork) rmrf(work);
+      else warn(`保留工作目录：${work}`);
+    }
+    console.log('\n\x1b[32m✔ 打包完成（sea 单文件）→\x1b[0m ' + exe);
+    return { exe };
+  }
+
   ensureDir(stage);
 
   // ---- 1) 组装载 ----
@@ -60,9 +79,27 @@ async function pack(options = {}) {
       fs.copyFileSync(src, path.join(stage, item));
     }
   }
-  // 捆绑当前 node.exe（napi ABI 稳定，跨大版本可加载）
-  fs.copyFileSync(process.execPath, path.join(stage, 'node.exe'));
-  ok(`node.exe 来自：${process.execPath}`);
+  // 捆绑当前 node.exe，但以应用名落盘（napi ABI 稳定，跨大版本可加载）。
+  // 运行时进程改名 → 任务管理器「详细信息」页的名称列不再显示 node.exe（node 不校验自身文件名，改名照常运行）。
+  const runtimeName = exeBase + '.exe';
+  fs.copyFileSync(process.execPath, path.join(stage, runtimeName));
+  ok(`运行时 exe：${runtimeName}（来自 ${process.execPath}）`);
+
+  // 品牌注入：把应用图标 + FileDescription 写进该运行时 exe 的资源，使任务管理器里真正吃内存的那个进程
+  // 显示应用名与自定义图标（友好名/图标取自 exe 内嵌资源，与启动器图标、App 内窗口图标无关）。
+  // 依赖 rcedit：未装则优雅跳过（改名仍生效），绝不阻断打包。
+  try {
+    const gen = await renderIconPngs({ projectRoot, iconRel: cfg.icon, outDir: path.join(work, 'rtpng') });
+    await brandRuntime(path.join(stage, runtimeName), {
+      projectRoot,
+      iconPngPaths: gen ? gen.abs : [],
+      name: cfg.name,
+      description: cfg.description,
+      version: cfg.version,
+    });
+  } catch (e) {
+    warn(`运行时 exe 品牌注入异常（忽略）：${e.message}`);
+  }
 
   // 入口存在性校验（相对 stage 根）
   const entryInStage = path.join(stage, cfg.mainRel);
@@ -105,7 +142,7 @@ async function pack(options = {}) {
   let delivered;
   if (!goExe) {
     warn('未检测到 Go，无法产单文件 exe → 回落「便携文件夹 + .cmd」（同样可直接运行）');
-    delivered = emitPortableFolder({ stage, outAbs: cfg.outputAbs, exeBase: fileBase, mainRel: cfg.mainRel });
+    delivered = emitPortableFolder({ stage, outAbs: cfg.outputAbs, exeBase: fileBase, mainRel: cfg.mainRel, runtimeName });
   } else {
     ensureDir(buildDir);
     fs.copyFileSync(path.join(LAUNCHER_DIR, 'main.go'), path.join(buildDir, 'main.go'));
@@ -115,7 +152,7 @@ async function pack(options = {}) {
     const outExe = path.join(buildDir, fileBase + '.exe');
     // 用生成的 .cmd 显式控制引号：go 的 -ldflags 必须是「单个带引号字符串」，
     // 而 Node 直接 spawn go 会把内层引号拆坏。值均用无空格 ASCII（exeBase / mainRel）。
-    const ld = `-H windowsgui -X main.Entry=${cfg.mainRel} -X main.AppName=${exeBase} -X main.ExeName=${exeBase}`;
+    const ld = `-H windowsgui -X main.Entry=${cfg.mainRel} -X main.AppName=${exeBase} -X main.ExeName=${exeBase} -X main.Runtime=${runtimeName}`;
     const cmdFile = path.join(buildDir, 'build-launcher.cmd');
     const goLine = `"${goExe}" build -trimpath -ldflags "${ld}" -o "${outExe}" .`;
     fs.writeFileSync(cmdFile, ['@echo off', 'cd /d "' + buildDir + '"', goLine, ''].join('\r\n'), 'utf8');
@@ -138,7 +175,7 @@ async function pack(options = {}) {
 }
 
 // 无 Go 时的回落：把 stage 目录整体搬到 output/<name>/，写 run.cmd（置 FLUX_PACKAGED=1）
-function emitPortableFolder({ stage, outAbs, exeBase, mainRel }) {
+function emitPortableFolder({ stage, outAbs, exeBase, mainRel, runtimeName }) {
   const dest = path.join(outAbs, exeBase);
   rmrf(dest);
   copyTree(stage, dest);
@@ -146,7 +183,7 @@ function emitPortableFolder({ stage, outAbs, exeBase, mainRel }) {
     '@echo off',
     'cd /d "%~dp0"',
     'set FLUX_PACKAGED=1',
-    `"%~dp0node.exe" "%~dp0${mainRel}" %*`,
+    `"%~dp0${runtimeName}" "%~dp0${mainRel}" %*`,
     '',
   ].join('\r\n');
   fs.writeFileSync(path.join(dest, 'run.cmd'), cmd, 'utf8');

package/lib/sea.js

@@ -0,0 +1,298 @@
+// sea.js —— Node SEA「单文件」打包（flux-pack 的 sea 模式）。
+// 对外产物 = 单个品牌化 exe（重命名+注入图标的 node.exe，内含全部 JS）。运行期由内嵌 bootstrap
+// 把「原生 .node + icudtl.dat + app bundle + assets 资源树」自解压到隐藏目录
+// (%LOCALAPPDATA%\<AppName>\run-<stamp>\)，再用 createRequire 正常加载 app —— 磁盘上不再出现
+// 可读的 dist/**/*.js 源码树，任务管理器也只看到 <AppName>.exe（无 node.exe 子进程）。
+//
+// 关键约束（Phase 0 spike 已验证）：
+//  1) app bundle 不能当 SEA main：main 作用域的 require 是 embedderRequire，require(.node) 会抛
+//     ERR_UNKNOWN_BUILTIN_MODULE。→ main 只放 bootstrap；app 作为 asset 落盘后用 createRequire 加载。
+//  2) sea.getRawAsset 返回 ArrayBuffer → 必须 Buffer.from。
+//  3) @napi-rs/canvas 认 NAPI_RS_NATIVE_LIBRARY_PATH（绝对路径优先）；自研 rnfd 走 Module._resolveFilename 钩子。
+//  4) skia 需 icudtl.dat 与其同目录；demos 经 process.cwd()/assets 取图 → 解压后 chdir 到 run 根。
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { execFileSync } = require('child_process');
+const { step, ok, warn, ensureDir, dirSize, fmtMB } = require('./util');
+const { buildAppBundle, resolveEsbuild } = require('./bundle');
+const { brandRuntime } = require('./brand');
+const { renderIconPngs } = require('./icon');
+
+const PKG_ROOT = path.join(__dirname, '..');
+
+function resolvePostject(projectRoot) {
+  const cand = [projectRoot, PKG_ROOT].filter(Boolean);
+  try {
+    return require(require.resolve('postject', { paths: cand })).inject;
+  } catch {
+    /* not here */
+  }
+  try {
+    return require('postject').inject;
+  } catch {
+    return null;
+  }
+}
+
+// 在若干 node_modules 根里找第一个匹配相对路径的文件
+function findFirst(root, relParts) {
+  const p = path.join(root, ...relParts);
+  return fs.existsSync(p) ? p : null;
+}
+
+// 递归列目录内所有文件（相对 base）
+function walkFiles(base, rel = '') {
+  const out = [];
+  const abs = path.join(base, rel);
+  let items;
+  try {
+    items = fs.readdirSync(abs, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const it of items) {
+    const r = rel ? path.join(rel, it.name) : it.name;
+    if (it.isDirectory()) out.push(...walkFiles(base, r));
+    else if (it.isFile()) out.push(r);
+  }
+  return out;
+}
+
+/**
+ * 收集需内嵌为 SEA assets 的原生/数据文件。
+ * @returns {{rnfd:string,skia:string,icu:string}} 绝对路径
+ */
+function locateNatives(projectRoot) {
+  const roots = [path.join(projectRoot, 'node_modules')];
+  const pick = (rel) => {
+    for (const r of roots) {
+      const f = findFirst(r, rel);
+      if (f) return f;
+    }
+    // 兜底：全局扫 node_modules（同名 .node 可能嵌在 pkg 副本里）
+    return null;
+  };
+  const rnfd = pick(['react-native-flux-desktop', 'react-native-flux-desktop.win32-x64-msvc.node']);
+  const skia = pick(['@napi-rs', 'canvas-win32-x64-msvc', 'skia.win32-x64-msvc.node']);
+  const icu = pick(['@napi-rs', 'canvas-win32-x64-msvc', 'icudtl.dat']);
+  const miss = [];
+  if (!rnfd) miss.push('react-native-flux-desktop.win32-x64-msvc.node');
+  if (!skia) miss.push('skia.win32-x64-msvc.node');
+  if (!icu) miss.push('icudtl.dat');
+  if (miss.length) throw new Error(`未找到原生依赖：${miss.join(', ')}\n（sea 模式需在项目 node_modules 里存在这些 .node/dat）`);
+  return { rnfd, skia, icu };
+}
+
+// 生成 bootstrap.cjs 源码（SEA main）。manifest 以 JSON 字面量注入。
+function makeBootstrap(manifest) {
+  return `// 自动生成：react-native-flux-desktop-packer sea bootstrap（请勿手改）
+const sea = require('node:sea');
+const fs = require('fs'), path = require('path'), os = require('os'), Module = require('module');
+const MANIFEST = ${JSON.stringify(manifest)};
+const get = (k) => { const a = sea.getRawAsset(k); return a ? Buffer.from(a) : null; };
+const APPDIR = process.env.FLUX_SEA_APP || MANIFEST.appName;
+const dir = path.join(process.env.LOCALAPPDATA || os.tmpdir(), APPDIR, 'run-' + MANIFEST.stamp);
+fs.mkdirSync(dir, { recursive: true });
+
+// 1) 原生 + 资源树：按 stamp 幂等自解压
+const marker = path.join(dir, '.extracted');
+if (!fs.existsSync(marker)) {
+  for (const r of MANIFEST.resources) {
+    const buf = get(r.key);
+    if (!buf || !buf.length) continue;
+    const target = path.join(dir, r.rel);
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    fs.writeFileSync(target, buf);
+  }
+  fs.writeFileSync(marker, MANIFEST.stamp);
+}
+
+// 2) app bundle：单个不透明 blob，仅在内容变化时重写
+const appPath = path.join(dir, 'app.cjs');
+const appBuf = get(MANIFEST.appKey);
+const appMarker = path.join(dir, '.app');
+const sig = appBuf.length + ':' + MANIFEST.stamp;
+if (!fs.existsSync(appMarker) || fs.readFileSync(appMarker).toString() !== sig) {
+  fs.writeFileSync(appPath, appBuf);
+  fs.writeFileSync(appMarker, sig);
+}
+
+// 3) @napi-rs/canvas：绝对路径直指解压后的 skia（最高优先级）
+process.env.NAPI_RS_NATIVE_LIBRARY_PATH = path.join(dir, MANIFEST.skiaRel);
+
+// 4) 自研原生：bare/相对 .node 重定向到 dir（全局钩子，对 createRequire 加载的模块同样生效）
+const RNFD = 'react-native-flux-desktop.win32-x64-msvc.node';
+const RNFD_ABS = path.join(dir, RNFD);
+const origResolve = Module._resolveFilename;
+Module._resolveFilename = function (request) {
+  if (typeof request === 'string') {
+    if (request === 'react-native-flux-desktop-win32-x64-msvc') return RNFD_ABS;
+    if (request.indexOf(RNFD) >= 0) return RNFD_ABS;
+  }
+  return origResolve.apply(this, arguments);
+};
+
+// 5) 数据/日志隔离 + cwd（demos 经 process.cwd()/assets 取图）
+process.env.FLUX_PACKAGED = '1';
+if (MANIFEST.appDirEnv) process.env.FLUX_APP_DIR = MANIFEST.appDirEnv;
+try { process.chdir(dir); } catch (e) {}
+
+// 6) 用 createRequire 正常加载 app（普通 require，绕开 embedderRequire）
+Module.createRequire(path.join(dir, 'boot.js'))(appPath);
+`;
+}
+
+// 把 PE 子系统由控制台(3)改为 GUI(2)：node.exe 是控制台子系统，双击会闪一个黑框。
+// 启动器旧路靠 go 的 -H windowsgui 隐框；SEA 无启动器，故直接改 exe 的 OptionalHeader.Subsystem。
+// PE 头(=e_lfanew) 后：4 字节签名 + 20 字节 COFF File Header + Optional Header；Subsystem 在 optional
+// header 偏移 68（PE32/PE32+ 同）→ 绝对 peOff + 4 + 20 + 68 = peOff + 92。
+function toGuiSubsystem(exePath) {
+  try {
+    const fd = fs.openSync(exePath, 'r+');
+    const mz = Buffer.alloc(2);
+    fs.readSync(fd, mz, 0, 2, 0);
+    if (mz.toString('latin1') !== 'MZ') { fs.closeSync(fd); return false; }
+    const ptr = Buffer.alloc(4);
+    fs.readSync(fd, ptr, 0, 4, 0x3c);
+    const peOff = ptr.readUInt32LE(0);
+    const sig = Buffer.alloc(4);
+    fs.readSync(fd, sig, 0, 4, peOff);
+    if (sig.toString('latin1') !== 'PE\0\0') { fs.closeSync(fd); return false; }
+    const subOff = peOff + 4 + 20 + 68;
+    const buf = Buffer.alloc(2);
+    fs.readSync(fd, buf, 0, 2, subOff);
+    const cur = buf.readUInt16LE(0);
+    let done = false;
+    if (cur === 3) { // IMAGE_SUBSYSTEM_WINDOWS_CUI -> GUI
+      buf.writeUInt16LE(2, 0);
+      fs.writeSync(fd, buf, 0, 2, subOff);
+      done = true;
+    }
+    fs.closeSync(fd);
+    return done;
+  } catch (e) {
+    warn(`GUI 子系统切换失败（忽略，仍会有控制台窗口）：${e.message}`);
+    return false;
+  }
+}
+
+/**
+ * 执行 sea 模式打包。
+ * @param {object} a { projectRoot, cfg, work, outAbs, exeBase, fileBase, entryAbs, assetsDirRel }
+ * @returns {Promise<string>} 产物 exe 路径
+ */
+async function packSea(a) {
+  const { projectRoot, cfg, work, outAbs, fileBase, entryAbs } = a;
+  if (!resolveEsbuild(projectRoot)) throw new Error('sea 模式需要 esbuild：在 packer 目录 `npm i esbuild postject`');
+  const postject = resolvePostject(projectRoot);
+  if (!postject) throw new Error('sea 模式需要 postject：在 packer 目录 `npm i esbuild postject`');
+
+  const seaDir = path.join(work, 'sea');
+  ensureDir(seaDir);
+
+  // ---- 1) bundle app ----
+  step('[s1/4] esbuild 打包应用为单 bundle');
+  const bundle = path.join(seaDir, 'app.cjs');
+  const r = await buildAppBundle({ projectRoot, entryAbs, outfile: bundle });
+  ok(`app bundle：${fmtMB(r.size)}（全部 JS 已内联，无 dist 源码树）`);
+
+  // ---- 2) 收集 assets（原生 + 数据 + 资源树）+ stamp ----
+  step('[s2/4] 收集原生/资源并生成 bootstrap');
+  const nat = locateNatives(projectRoot);
+  const resources = [];
+  const assetsMap = {};
+  let idx = 0;
+  const addRes = (key, rel, abs) => {
+    resources.push({ key, rel });
+    assetsMap[key] = abs;
+  };
+  addRes('rnfd', 'react-native-flux-desktop.win32-x64-msvc.node', nat.rnfd);
+  addRes('skia', 'skia.win32-x64-msvc.node', nat.skia);
+  addRes('icu', 'icudtl.dat', nat.icu);
+
+  // app.json：应用运行时从 cwd 读它取 name/description/version/icon（如 App.tsx 里
+  // readFileSync(process.cwd()/app.json)）。sea 下 cwd=解压目录，故须把 app.json 也展到根，
+  // 否则读不到会回退成默认 name:'App'（窗口标题/托盘 tooltip 都变 'App'）。
+  const appJsonAbs = path.join(projectRoot, 'app.json');
+  if (fs.existsSync(appJsonAbs)) addRes('appjson', 'app.json', appJsonAbs);
+  else warn('未找到 app.json，运行时窗口标题等将回退默认（name:App）');
+
+  const assetsBase = path.join(projectRoot, a.assetsDirRel || 'assets');
+  if (fs.existsSync(assetsBase)) {
+    for (const rel of walkFiles(assetsBase)) {
+      const key = 'a' + idx++;
+      addRes(key, path.join(a.assetsDirRel || 'assets', rel), path.join(assetsBase, rel));
+    }
+    ok(`资源文件：${idx} 个（来自 ${a.assetsDirRel || 'assets'}/）`);
+  } else {
+    warn(`无 ${a.assetsDirRel || 'assets'} 目录，跳过资源内嵌`);
+  }
+
+  // stamp：内容变化才重解压（含 app.json，改名字/描述也能刷新）
+  const ajSig = fs.existsSync(appJsonAbs) ? (() => { const s = fs.statSync(appJsonAbs); return s.size + ':' + Math.round(s.mtimeMs); })() : 'none';
+  const sigSrc = [nat.rnfd, nat.skia, nat.icu].map((p) => { const s = fs.statSync(p); return s.size + ':' + Math.round(s.mtimeMs); }).join('|') + '|' + ajSig + '|' + r.size;
+  const stamp = crypto.createHash('md5').update(sigSrc).digest('hex').slice(0, 12);
+
+  const appDirEnv = cfg.safeAppName || 'Flux';
+  const manifest = {
+    stamp,
+    appName: appDirEnv,
+    appDirEnv,
+    appKey: 'app',
+    skiaRel: 'skia.win32-x64-msvc.node',
+    resources,
+  };
+  const bootstrapPath = path.join(seaDir, 'bootstrap.cjs');
+  fs.writeFileSync(bootstrapPath, makeBootstrap(manifest), 'utf8');
+  assetsMap[manifest.appKey] = bundle; // app 作为 asset
+
+  // ---- 3) 生成 blob ----
+  step('[s3/4] 生成 SEA blob');
+  const blob = path.join(seaDir, 'sea.blob');
+  const config = { main: bootstrapPath, output: blob, disableExperimentalSEAWarning: true, useCodeCache: false, assets: assetsMap };
+  const cfgPath = path.join(seaDir, 'sea-config.json');
+  fs.writeFileSync(cfgPath, JSON.stringify(config, null, 2), 'utf8');
+  execFileSync(process.execPath, ['--experimental-sea-config', cfgPath], { stdio: 'inherit', cwd: seaDir });
+  ok(`blob：${fmtMB(fs.statSync(blob).size)}（含 JS + ${Object.keys(assetsMap).length} 项内嵌资产）`);
+
+  // ---- 4) exe：品牌 → 注入 → GUI 子系统 ----
+  // 顺序要点：rcedit 在「已注入 SEA blob 的大 exe」上会卡死（实测普通 node.exe 副本仅数百毫秒），
+  // 故先在纯净的 node.exe 副本上写图标/版本资源，再 postject 注入 SEA 负载，最后补 GUI 子系统字节。
+  step('[s4/4] 组装 exe（品牌 → SEA 注入 → GUI 子系统）');
+  ensureDir(outAbs);
+  const finalExe = path.join(outAbs, fileBase + '.exe');
+  const exe = path.join(seaDir, fileBase + '.exe');
+  if (fs.existsSync(exe)) fs.unlinkSync(exe);
+  fs.copyFileSync(process.execPath, exe);
+
+  // 4a) 品牌（图标 + FileDescription）——在 postject 之前，失败仅告警不阻断。
+  try {
+    const gen = await renderIconPngs({ projectRoot, iconRel: cfg.icon, outDir: path.join(seaDir, 'png') });
+    await brandRuntime(exe, {
+      projectRoot,
+      iconPngPaths: gen ? gen.abs : [],
+      name: cfg.name,
+      description: cfg.description,
+      version: cfg.version,
+    });
+  } catch (e) {
+    warn(`品牌注入跳过（不影响运行）：${e.message}`);
+  }
+
+  // 4b) 注入 SEA 负载（rcedit 已改写资源段，postject 追加 NODE_SEA_BLOB 节，二者共存）。
+  await postject(exe, 'NODE_SEA_BLOB', fs.readFileSync(blob), {
+    sentinelFuse: 'NODE_SEA_FUSE_fce680ab2cc467b6e072b8b5df1996b2',
+    macFailsafe: false,
+    kind: 'node-sea',
+  });
+  ok(`已注入 SEA 负载 → ${path.basename(exe)}`);
+
+  // 4c) GUI 子系统补丁（双击不弹控制台窗口）——须在 postject 之后，避免注入回写覆盖字节补丁。
+  if (toGuiSubsystem(exe)) ok('已切为 GUI 子系统（双击不弹控制台窗口）');
+  fs.copyFileSync(exe, finalExe);
+  ok(`产物：${finalExe}（${fmtMB(fs.statSync(finalExe).size)}）`);
+  return finalExe;
+}
+
+module.exports = { packSea, makeBootstrap, locateNatives, walkFiles };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-flux-desktop-packer",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Package a react-native-flux-desktop app into a self-contained Windows .exe (Go launcher + go:embed payload). Install as a devDependency, add `output`/`main` to app.json, then run `flux-pack`.",
   "license": "MIT",
   "author": "keyon",
@@ -31,6 +31,11 @@
   "os": [
     "win32"
   ],
+  "optionalDependencies": {
+    "rcedit": "^4.0.1",
+    "esbuild": "^0.28.2",
+    "postject": "^1.0.0-alpha.6"
+  },
   "keywords": [
     "react-native-flux-desktop",
     "packer",