chatup 0.2.20__tar.gz → 0.2.21__tar.gz

{chatup-0.2.20/src/chatup.egg-info → chatup-0.2.21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: chatup
-Version: 0.2.20
+Version: 0.2.21
 Summary: ChatArch setup CLI extracted from ChatTool
 Author-email: rexwzh <1073853456@qq.com>
 License-Expression: MIT
@@ -59,7 +59,7 @@ chatup doctor
 chatup uv
 chatup chrome-for-testing install --channel stable -I
 chatup playwright install 1.61.1 -I
-chatup workspace default ~/Playground
+chatup workspace ~/Playground
 ```
 
 `chatup uv` 默认更新已有 `~/.bashrc`、`~/.zshrc` 的自动激活块；使用 `chatup uv --no-activate` 可保持启动配置不变。不会创建缺失的 rc 文件，Windows 跳过此项。
@@ -99,16 +99,17 @@ npm run studio
 
 需要已有 Node.js >=18.12 和 npm >=9。创建带锁文件的 Remotion 4.0.530 项目，检测本机 Chrome 并输出渲染命令；不覆盖已有无关目录，也不替换 Node 或下载浏览器。项目放在指定目录，已有 Blender/Chrome 可通过 `chatup macos --app blender --app chrome` 验证或安装。详见[Remotion 安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#remotion)。
 
-## Chrome 与 iTerm2
+## Chrome、Snipaste 与 iTerm2
 
 ```bash
 chatup chrome --dry-run
 chatup chrome             # 按系统安装普通 Google Chrome
+chatup snipaste           # 在 macOS 或 Windows 安装 Snipaste
 chatup iterm              # 安装 iTerm2，仅限 macOS
 chatup chrome --sudo --yes # Linux：允许提权并确认包安装
 ```
 
-macOS 直接下载官方 DMG/ZIP 并校验开发者签名，无需 Homebrew；默认装到 `/Applications`，不可写时使用 `~/Applications`。Windows 使用 WinGet `Google.Chrome`；Linux x86_64 使用官方 DEB/RPM 与 apt/dnf/yum/zypper。已安装时验证并复用，不改默认浏览器、终端或用户配置。自动化浏览器仍使用 `chatup chrome-for-testing`。详见[安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#chrome-iterm)。
+macOS 直接下载官方 DMG/ZIP 并校验开发者签名，无需 Homebrew；默认装到 `/Applications`，不可写时使用 `~/Applications`。Windows 使用 WinGet 精确包 `Google.Chrome.EXE`（当前用户安装）和 `liule.Snipaste`，需以 `--yes` 接受首次协议，Chrome 还会验证已安装程序的 Google 签名、产品身份和版本；Linux x86_64 支持 Chrome 的官方 DEB/RPM 与 apt/dnf/yum/zypper。已安装时验证并复用，不改默认浏览器、终端或用户配置。自动化浏览器仍使用 `chatup chrome-for-testing`。详见[安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#chrome-iterm)。
 
 ## ChatGPT / Codex 桌面应用
 
@@ -128,7 +129,7 @@ chatup chatgpt --yes  # Windows 首次安装时接受 Store 协议
 | --- | --- |
 | 基础运行环境 | `doctor`、`uv`、`nodejs`、`docker`、`zsh`、`chrome-for-testing`、`chromedriver`、`playwright`、`frp` |
 | 工作区脚手架 | `workspace` |
-| 桌面应用 | `macos`（Snipaste/iTerm2/Chrome/Blender 多选）、`chrome`、`iterm`（仅 macOS）、`chatgpt`（含 Codex） |
+| 桌面应用 | `macos`（Snipaste/iTerm2/Chrome/Blender 多选）、`chrome`、`snipaste`（macOS/Windows）、`iterm`（仅 macOS）、`chatgpt`（含 Codex） |
 | 视频项目 | `remotion` |
 | 本地服务安装 | `gitea`、`discourse`、`zulip`、`mysql`、`nginx`、`crs` |
 | Agent 工具链 | `cc-connect`、`claude`、`codex`、`cursor-agent`、`opencode`、`hermes`、`lark-cli` |

{chatup-0.2.20 → chatup-0.2.21}/README.md

@@ -28,7 +28,7 @@ chatup doctor
 chatup uv
 chatup chrome-for-testing install --channel stable -I
 chatup playwright install 1.61.1 -I
-chatup workspace default ~/Playground
+chatup workspace ~/Playground
 ```
 
 `chatup uv` 默认更新已有 `~/.bashrc`、`~/.zshrc` 的自动激活块；使用 `chatup uv --no-activate` 可保持启动配置不变。不会创建缺失的 rc 文件，Windows 跳过此项。
@@ -68,16 +68,17 @@ npm run studio
 
 需要已有 Node.js >=18.12 和 npm >=9。创建带锁文件的 Remotion 4.0.530 项目，检测本机 Chrome 并输出渲染命令；不覆盖已有无关目录，也不替换 Node 或下载浏览器。项目放在指定目录，已有 Blender/Chrome 可通过 `chatup macos --app blender --app chrome` 验证或安装。详见[Remotion 安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#remotion)。
 
-## Chrome 与 iTerm2
+## Chrome、Snipaste 与 iTerm2
 
 ```bash
 chatup chrome --dry-run
 chatup chrome             # 按系统安装普通 Google Chrome
+chatup snipaste           # 在 macOS 或 Windows 安装 Snipaste
 chatup iterm              # 安装 iTerm2，仅限 macOS
 chatup chrome --sudo --yes # Linux：允许提权并确认包安装
 ```
 
-macOS 直接下载官方 DMG/ZIP 并校验开发者签名，无需 Homebrew；默认装到 `/Applications`，不可写时使用 `~/Applications`。Windows 使用 WinGet `Google.Chrome`；Linux x86_64 使用官方 DEB/RPM 与 apt/dnf/yum/zypper。已安装时验证并复用，不改默认浏览器、终端或用户配置。自动化浏览器仍使用 `chatup chrome-for-testing`。详见[安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#chrome-iterm)。
+macOS 直接下载官方 DMG/ZIP 并校验开发者签名，无需 Homebrew；默认装到 `/Applications`，不可写时使用 `~/Applications`。Windows 使用 WinGet 精确包 `Google.Chrome.EXE`（当前用户安装）和 `liule.Snipaste`，需以 `--yes` 接受首次协议，Chrome 还会验证已安装程序的 Google 签名、产品身份和版本；Linux x86_64 支持 Chrome 的官方 DEB/RPM 与 apt/dnf/yum/zypper。已安装时验证并复用，不改默认浏览器、终端或用户配置。自动化浏览器仍使用 `chatup chrome-for-testing`。详见[安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#chrome-iterm)。
 
 ## ChatGPT / Codex 桌面应用
 
@@ -97,7 +98,7 @@ chatup chatgpt --yes  # Windows 首次安装时接受 Store 协议
 | --- | --- |
 | 基础运行环境 | `doctor`、`uv`、`nodejs`、`docker`、`zsh`、`chrome-for-testing`、`chromedriver`、`playwright`、`frp` |
 | 工作区脚手架 | `workspace` |
-| 桌面应用 | `macos`（Snipaste/iTerm2/Chrome/Blender 多选）、`chrome`、`iterm`（仅 macOS）、`chatgpt`（含 Codex） |
+| 桌面应用 | `macos`（Snipaste/iTerm2/Chrome/Blender 多选）、`chrome`、`snipaste`（macOS/Windows）、`iterm`（仅 macOS）、`chatgpt`（含 Codex） |
 | 视频项目 | `remotion` |
 | 本地服务安装 | `gitea`、`discourse`、`zulip`、`mysql`、`nginx`、`crs` |
 | Agent 工具链 | `cc-connect`、`claude`、`codex`、`cursor-agent`、`opencode`、`hermes`、`lark-cli` |

{chatup-0.2.20 → chatup-0.2.21}/src/chatup/__init__.py

@@ -2,4 +2,4 @@
 
 __all__ = ["__version__"]
 
-__version__ = "0.2.20"
+__version__ = "0.2.21"

{chatup-0.2.20 → chatup-0.2.21}/src/chatup/cli.py

@@ -6,7 +6,7 @@ from chatstyle import add_tree_option
 from chatup import __version__
 from chatup.commands.chrome_for_testing import cli as chrome_for_testing_cli
 from chatup.commands.chromedriver import cli as chromedriver_cli
-from chatup.commands.desktop import chrome_cli, iterm_cli
+from chatup.commands.desktop import chrome_cli, iterm_cli, snipaste_cli
 from chatup.commands.macos import macos_cli
 from chatup.commands.playwright import cli as playwright_cli
 from chatup.commands.remotion import remotion_cli
@@ -36,6 +36,7 @@ main.add_command(chrome_for_testing_cli)
 main.add_command(chromedriver_cli)
 main.add_command(playwright_cli)
 main.add_command(chrome_cli)
+main.add_command(snipaste_cli)
 main.add_command(iterm_cli)
 main.add_command(macos_cli)
 main.add_command(remotion_cli)

{chatup-0.2.20 → chatup-0.2.21}/src/chatup/commands/desktop.py

@@ -44,6 +44,15 @@ def chrome_cli(**kwargs) -> None:
     _install("chrome", **kwargs)
 
 
+@click.command(name="snipaste")
+@click.option("--dry-run", is_flag=True, help="Show the installation plan without downloading or installing.")
+@click.option("--yes", "-y", is_flag=True, help="Accept Windows agreements.")
+@click.option("--log-level", type=click.Choice(["DEBUG", "INFO", "WARNING", "ERROR"], case_sensitive=False), default="INFO")
+def snipaste_cli(**kwargs) -> None:
+    """Install Snipaste for macOS or Windows."""
+    _install("snipaste", **kwargs)
+
+
 @click.command(name="iterm")
 @click.option("--dry-run", is_flag=True, help="Show the installation plan without downloading or installing.")
 @click.option("--log-level", type=click.Choice(["DEBUG", "INFO", "WARNING", "ERROR"], case_sensitive=False), default="INFO")

{chatup-0.2.20 → chatup-0.2.21}/src/chatup/runtime/_managed_artifact.py

@@ -79,7 +79,7 @@ def safe_extract_zip(
                             f"Symlink escapes {label} archive root: {member.filename}"
                         )
                     target.parent.mkdir(parents=True, exist_ok=True)
-                    target.symlink_to(link_value)
+                    target.symlink_to(link_value, target_is_directory=resolved_link.is_dir())
                     continue
                 if member.is_dir() or stat.S_ISDIR(mode):
                     target.mkdir(parents=True, exist_ok=True)

{chatup-0.2.20 → chatup-0.2.21}/src/chatup/setup/desktop.py

@@ -1,8 +1,10 @@
-"""Native installers for Google Chrome and supported macOS desktop apps."""
+"""Native installers for Chrome, Snipaste and supported macOS desktop apps."""
 from __future__ import annotations
 
 import logging
 import hashlib
+import base64
+import json
 import os
 from pathlib import Path
 import platform
@@ -22,6 +24,8 @@ logger = logging.getLogger(__name__)
 MAC_APPS = {
     "chrome": {
         "app": "Google Chrome",
+        "winget_id": "Google.Chrome.EXE",
+        "winget_scope": "user",
         "bundle": "Google Chrome.app",
         "bundle_id": "com.google.Chrome",
         "team_id": "EQHXZ8M8AV",
@@ -38,6 +42,7 @@ MAC_APPS = {
     },
     "snipaste": {
         "app": "Snipaste",
+        "winget_id": "liule.Snipaste",
         "bundle": "Snipaste.app",
         "bundle_id": "com.Snipaste",
         "team_id": "NGTL73P583",
@@ -73,15 +78,15 @@ def _is_root() -> bool:
     return hasattr(os, "geteuid") and os.geteuid() == 0
 
 
-def plan_desktop_install(
-    app: str, *, sudo: bool = False, yes: bool = False,
-) -> dict[str, Any]:
+def plan_desktop_install(app: str, *, sudo: bool = False, yes: bool = False) -> dict[str, Any]:
     """Describe the current platform's installation without writes or processes."""
     spec = MAC_APPS[app]
     system = platform.system()
     plan = {"app": spec["app"], "platform": system}
-    if app != "chrome" and system != "Darwin":
+    if system != "Darwin" and app in {"iterm", "blender"}:
         raise RuntimeError(f"{spec['app']} is supported on macOS only; current platform: {system}.")
+    if system not in {"Darwin", "Windows"} and app == "snipaste":
+        raise RuntimeError(f"{spec['app']} is supported on macOS and Windows only; current platform: {system}.")
     if system == "Darwin":
         if platform.machine().lower() not in {"arm64", "aarch64", "x86_64", "amd64"}:
             raise RuntimeError(f"Unsupported macOS architecture: {platform.machine()}.")
@@ -92,13 +97,24 @@ def plan_desktop_install(
         directory = directories[0] if os.access(directories[0], os.W_OK) else directories[1]
         return {**plan, **spec, "method": "macos", "path": str(existing or directory / spec["bundle"])}
     if system == "Windows":
-        selector = ["--id", "Google.Chrome", "--exact", "--source", "winget", "--disable-interactivity"]
+        package_id = spec.get("winget_id")
+        if not package_id:
+            raise RuntimeError(f"{spec['app']} is supported on macOS only; current platform: {system}.")
+        selector = ["--id", package_id, "--exact", "--source", "winget", "--disable-interactivity"]
         command = ["winget", "install", *selector, "--silent", "--no-upgrade"]
+        if spec.get("winget_scope"):
+            command += ["--scope", spec["winget_scope"]]
         verify = ["winget", "list", *selector]
         if yes:
             command += ["--accept-package-agreements", "--accept-source-agreements"]
             verify += ["--accept-source-agreements"]
-        return {**plan, "method": "winget", "command": command, "verify_command": verify}
+        return {
+            **plan,
+            "method": "winget",
+            "winget_id": package_id,
+            "command": command,
+            "verify_command": verify,
+        }
     if system == "Linux":
         if platform.machine().lower() not in {"x86_64", "amd64"}:
             raise RuntimeError("Google Chrome for Linux requires x86_64; Google does not provide a Linux ARM package.")
@@ -274,22 +290,77 @@ def _install_linux(plan: dict[str, Any], *, sudo: bool) -> dict[str, Any]:
     return {**plan, **installed, "status": "installed", "verified": True}
 
 
+def _google_signed_file(path: Path) -> dict[str, str]:
+    powershell = shutil.which("powershell.exe") or shutil.which("pwsh.exe")
+    if not powershell:
+        raise RuntimeError("PowerShell is required to verify Google's Authenticode signature.")
+    # Encode the script and quote its sole path literal, including apostrophes.
+    literal = str(path).replace("'", "''")
+    script = (
+        "$ErrorActionPreference = 'Stop'; "
+        "$ProgressPreference = 'SilentlyContinue'; "
+        "$env:PSModulePath = Join-Path $PSHOME 'Modules'; "
+        "[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new(); "
+        f"$file = Get-Item -LiteralPath '{literal}'; "
+        "$sig = Get-AuthenticodeSignature -LiteralPath $file.FullName; "
+        "$publisher = if ($sig.SignerCertificate) { "
+        "$sig.SignerCertificate.GetNameInfo([System.Security.Cryptography.X509Certificates.X509NameType]::SimpleName, $false) "
+        "} else { '' }; "
+        "@{status=[string]$sig.Status; publisher=$publisher; "
+        "product=$file.VersionInfo.ProductName; version=$file.VersionInfo.ProductVersion; "
+        "original=$file.VersionInfo.OriginalFilename} | ConvertTo-Json -Compress"
+    )
+    encoded = base64.b64encode(script.encode("utf-16-le")).decode("ascii")
+    result = _run([powershell, "-NoProfile", "-NonInteractive", "-OutputFormat", "Text",
+                   "-EncodedCommand", encoded], timeout=120)
+    details = json.loads(result.stdout.lstrip("\ufeff"))
+    if not isinstance(details, dict) or details.get("status") != "Valid" or details.get("publisher") != "Google LLC":
+        raise RuntimeError(f"Google Authenticode signature verification failed: {path}.")
+    version = details.get("version", "")
+    if (details.get("product") != "Google Chrome"
+            or str(details.get("original", "")).lower() != "chrome.exe"
+            or not isinstance(version, str) or not re.fullmatch(r"\d+(?:\.\d+){3}", version)):
+        raise RuntimeError(f"Cannot verify installed Google Chrome identity/version: {path}.")
+    return {"binary": str(path), "path": str(path), "version": version}
+
+
+def _windows_chrome() -> dict[str, str] | None:
+    for variable in ("LOCALAPPDATA", "PROGRAMW6432", "PROGRAMFILES", "PROGRAMFILES(X86)"):
+        root = os.environ.get(variable)
+        if root:
+            binary = Path(root) / "Google/Chrome/Application/chrome.exe"
+            if binary.exists():
+                return _google_signed_file(binary)
+    return None
+
+
 def _install_windows(plan: dict[str, Any]) -> dict[str, Any]:
+    is_chrome = plan["winget_id"] == "Google.Chrome.EXE"
+    existing = _windows_chrome() if is_chrome else None
+    if existing:
+        return {**plan, **existing, "status": "already_installed", "verified": True}
     executable = shutil.which("winget")
     if not executable:
-        raise RuntimeError("WinGet is required to install Google Chrome: https://aka.ms/getwinget")
+        raise RuntimeError(f"WinGet is required to install {plan['app']}: https://aka.ms/getwinget")
 
     def installed():
         result = _run([executable, *plan["verify_command"][1:]], timeout=120, check=False)
-        return result.returncode == 0 and re.search(r"\bGoogle\.Chrome\b", result.stdout) is not None
+        return result.returncode == 0 and re.search(
+            rf"(?<![\w.-]){re.escape(plan['winget_id'])}(?![\w.-])", result.stdout,
+        ) is not None
 
     if installed():
+        if is_chrome:
+            raise RuntimeError("Google Chrome package record exists, but signed chrome.exe was not found.")
         return {**plan, "status": "already_installed", "verified": True}
-    logger.info("Installing Google Chrome with WinGet; use --yes to accept source/package agreements")
+    logger.info("Installing %s with WinGet; use --yes to accept source/package agreements", plan["app"])
     _run([executable, *plan["command"][1:]], capture=False)
     if not installed():
-        raise RuntimeError("Google Chrome installation verification failed: no matching WinGet package record.")
-    return {**plan, "status": "installed", "verified": True}
+        raise RuntimeError(f"{plan['app']} installation verification failed: no matching WinGet package record.")
+    details = _windows_chrome() if is_chrome else {}
+    if is_chrome and not details:
+        raise RuntimeError("Google Chrome installation verification failed: signed chrome.exe not found.")
+    return {**plan, **details, "status": "installed", "verified": True}
 
 
 def setup_desktop_app(

{chatup-0.2.20 → chatup-0.2.21}/src/chatup/setup/workspace/options.py

@@ -1,6 +1,9 @@
 from __future__ import annotations
 
 from pathlib import Path
+import os
+import shutil
+import stat
 import subprocess
 
 import click
@@ -27,14 +30,60 @@ Topic directories such as `chatarch/package-development` and `chatarch/package-r
 """
 
 
+def _resolve_git_command() -> str | None:
+    git = shutil.which("git")
+    if git:
+        return git
+    if os.name != "nt":
+        return None
+
+    candidates: list[Path] = []
+    local_app_data = os.environ.get("LOCALAPPDATA")
+    if local_app_data:
+        candidates.extend(
+            [
+                Path(local_app_data) / "Programs" / "Git" / "cmd" / "git.exe",
+                Path(local_app_data) / "Programs" / "Git" / "bin" / "git.exe",
+            ]
+        )
+    for env_name in ("ProgramFiles", "ProgramFiles(x86)"):
+        root = os.environ.get(env_name)
+        if root:
+            candidates.extend(
+                [
+                    Path(root) / "Git" / "cmd" / "git.exe",
+                    Path(root) / "Git" / "bin" / "git.exe",
+                ]
+            )
+
+    for candidate in candidates:
+        if candidate.is_file():
+            return str(candidate)
+    return None
+
+
+_GIT_NOT_FOUND_MESSAGE = (
+    "Git executable not found. Install Git and make sure `git` is available on PATH. "
+    "On Windows, standard Git for Windows locations are also supported. "
+    "Then rerun this command."
+)
+
+
 def _run_git(
     args: list[str], workdir: Path | None = None
 ) -> subprocess.CompletedProcess[str]:
-    command = ["git"]
+    git = _resolve_git_command()
+    if git is None:
+        raise click.ClickException(_GIT_NOT_FOUND_MESSAGE)
+
+    command = [git]
     if workdir is not None:
         command.extend(["-C", str(workdir)])
     command.extend(args)
-    return subprocess.run(command, capture_output=True, text=True)
+    try:
+        return subprocess.run(command, capture_output=True, text=True, encoding="utf-8", errors="replace")
+    except FileNotFoundError as exc:
+        raise click.ClickException(_GIT_NOT_FOUND_MESSAGE) from exc
 
 
 def _clone_or_update_repo(
@@ -92,15 +141,85 @@ def apply_chattool_option(
     }
 
 
+def _paths_point_to_same_entry(source: Path, target: Path) -> bool:
+    try:
+        return source.exists() and target.exists() and source.samefile(target)
+    except OSError:
+        return False
+
+
+def _is_windows_reparse_point(path: Path) -> bool:
+    if os.name != "nt":
+        return False
+    try:
+        info = path.stat(follow_symlinks=False)
+    except (AttributeError, OSError, ValueError):
+        return False
+    return info.st_reparse_tag == stat.IO_REPARSE_TAG_MOUNT_POINT
+
+
+def _remove_link_path(path: Path) -> None:
+    if os.name == "nt" and path.is_dir():
+        path.rmdir()
+    else:
+        path.unlink()
+
+
+def _create_windows_junction(source: Path, target: Path) -> None:
+    comspec = os.environ.get("ComSpec", "cmd")
+    # Pass paths through quoted environment expansion, not cmd command syntax.
+    env = {**os.environ, "CHATUP_LINK_SOURCE": str(source), "CHATUP_LINK_TARGET": str(target)}
+    command = (
+        f'{subprocess.list2cmdline([comspec])} /d /v:off /c '
+        'mklink /J "%CHATUP_LINK_TARGET%" "%CHATUP_LINK_SOURCE%"'
+    )
+    result = subprocess.run(
+        command,
+        capture_output=True,
+        text=True,
+        errors="replace",
+        env=env,
+    )
+    if result.returncode != 0:
+        message = result.stderr.strip() or result.stdout.strip()
+        raise click.ClickException(message or f"Failed to create junction: {target}")
+
+
+def _create_windows_link_fallback(source: Path, target: Path, original: OSError) -> None:
+    if os.name != "nt":
+        raise click.ClickException(
+            f"Failed to create symlink {target} -> {source}: {original}"
+        ) from original
+    try:
+        if source.is_dir():
+            _create_windows_junction(source.resolve(), target)
+        else:
+            os.link(source, target)
+    except (OSError, click.ClickException) as exc:
+        raise click.ClickException(
+            "Failed to create a workspace link on Windows. Enable Developer Mode "
+            "or run with symlink privileges; directory junction/file hard-link "
+            f"fallback also failed for {target} -> {source}: {exc}"
+        ) from exc
+
+
 def _ensure_symlink(source: Path, target: Path) -> None:
     target.parent.mkdir(parents=True, exist_ok=True)
-    if target.is_symlink():
-        target.unlink()
+    if target.is_symlink() or _is_windows_reparse_point(target):
+        if _paths_point_to_same_entry(source, target):
+            return
+        _remove_link_path(target)
     elif target.exists():
+        if _paths_point_to_same_entry(source, target):
+            return
         raise click.ClickException(
-            f"Refusing to replace existing non-symlink path: {target}"
+            f"Refusing to replace existing non-link path: {target}"
         )
-    target.symlink_to(source)
+
+    try:
+        target.symlink_to(source, target_is_directory=source.is_dir())
+    except OSError as exc:
+        _create_windows_link_fallback(source, target, exc)
 
 
 def _ensure_local_skill_group(workspace_dir: Path) -> Path:

{chatup-0.2.20 → chatup-0.2.21/src/chatup.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: chatup
-Version: 0.2.20
+Version: 0.2.21
 Summary: ChatArch setup CLI extracted from ChatTool
 Author-email: rexwzh <1073853456@qq.com>
 License-Expression: MIT
@@ -59,7 +59,7 @@ chatup doctor
 chatup uv
 chatup chrome-for-testing install --channel stable -I
 chatup playwright install 1.61.1 -I
-chatup workspace default ~/Playground
+chatup workspace ~/Playground
 ```
 
 `chatup uv` 默认更新已有 `~/.bashrc`、`~/.zshrc` 的自动激活块；使用 `chatup uv --no-activate` 可保持启动配置不变。不会创建缺失的 rc 文件，Windows 跳过此项。
@@ -99,16 +99,17 @@ npm run studio
 
 需要已有 Node.js >=18.12 和 npm >=9。创建带锁文件的 Remotion 4.0.530 项目，检测本机 Chrome 并输出渲染命令；不覆盖已有无关目录，也不替换 Node 或下载浏览器。项目放在指定目录，已有 Blender/Chrome 可通过 `chatup macos --app blender --app chrome` 验证或安装。详见[Remotion 安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#remotion)。
 
-## Chrome 与 iTerm2
+## Chrome、Snipaste 与 iTerm2
 
 ```bash
 chatup chrome --dry-run
 chatup chrome             # 按系统安装普通 Google Chrome
+chatup snipaste           # 在 macOS 或 Windows 安装 Snipaste
 chatup iterm              # 安装 iTerm2，仅限 macOS
 chatup chrome --sudo --yes # Linux：允许提权并确认包安装
 ```
 
-macOS 直接下载官方 DMG/ZIP 并校验开发者签名，无需 Homebrew；默认装到 `/Applications`，不可写时使用 `~/Applications`。Windows 使用 WinGet `Google.Chrome`；Linux x86_64 使用官方 DEB/RPM 与 apt/dnf/yum/zypper。已安装时验证并复用，不改默认浏览器、终端或用户配置。自动化浏览器仍使用 `chatup chrome-for-testing`。详见[安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#chrome-iterm)。
+macOS 直接下载官方 DMG/ZIP 并校验开发者签名，无需 Homebrew；默认装到 `/Applications`，不可写时使用 `~/Applications`。Windows 使用 WinGet 精确包 `Google.Chrome.EXE`（当前用户安装）和 `liule.Snipaste`，需以 `--yes` 接受首次协议，Chrome 还会验证已安装程序的 Google 签名、产品身份和版本；Linux x86_64 支持 Chrome 的官方 DEB/RPM 与 apt/dnf/yum/zypper。已安装时验证并复用，不改默认浏览器、终端或用户配置。自动化浏览器仍使用 `chatup chrome-for-testing`。详见[安装约定](https://arch.gh.wzhecnu.cn/ChatUp/commands/#chrome-iterm)。
 
 ## ChatGPT / Codex 桌面应用
 
@@ -128,7 +129,7 @@ chatup chatgpt --yes  # Windows 首次安装时接受 Store 协议
 | --- | --- |
 | 基础运行环境 | `doctor`、`uv`、`nodejs`、`docker`、`zsh`、`chrome-for-testing`、`chromedriver`、`playwright`、`frp` |
 | 工作区脚手架 | `workspace` |
-| 桌面应用 | `macos`（Snipaste/iTerm2/Chrome/Blender 多选）、`chrome`、`iterm`（仅 macOS）、`chatgpt`（含 Codex） |
+| 桌面应用 | `macos`（Snipaste/iTerm2/Chrome/Blender 多选）、`chrome`、`snipaste`（macOS/Windows）、`iterm`（仅 macOS）、`chatgpt`（含 Codex） |
 | 视频项目 | `remotion` |
 | 本地服务安装 | `gitea`、`discourse`、`zulip`、`mysql`、`nginx`、`crs` |
 | Agent 工具链 | `cc-connect`、`claude`、`codex`、`cursor-agent`、`opencode`、`hermes`、`lark-cli` |

{chatup-0.2.20 → chatup-0.2.21}/tests/test_browser_backend_cli.py

@@ -15,8 +15,11 @@ def test_browser_artifacts_have_independent_top_level_backends():
     assert "chromedriver" in commands
     assert "playwright" in commands
     assert "chrome" in commands
+    assert "snipaste" in commands
     assert not isinstance(main.commands["chrome"], click.Group)
+    assert not isinstance(main.commands["snipaste"], click.Group)
     assert "regular Google Chrome" in main.commands["chrome"].help
+    assert "Snipaste" in main.commands["snipaste"].help
     assert "browser" not in commands
     assert "chromium" not in commands
 

{chatup-0.2.20 → chatup-0.2.21}/tests/test_chrome_for_testing.py

@@ -263,7 +263,7 @@ def test_resolve_rejects_non_object_metadata(tmp_path):
         )
 
 
-def test_force_install_rejects_symlink_root(tmp_path):
+def test_force_install_rejects_symlink_root(tmp_path, require_symlink_privilege):
     home = tmp_path / "chrome-for-testing"
     outside = tmp_path / "outside"
     outside.mkdir()
@@ -281,7 +281,7 @@ def test_force_install_rejects_symlink_root(tmp_path):
         )
 
 
-def test_install_rejects_untrusted_resolver_identity_and_parent_symlink(tmp_path):
+def test_install_rejects_untrusted_resolver_identity_and_parent_symlink(tmp_path, require_symlink_privilege):
     home = tmp_path / "chrome-for-testing"
     downloaded = False
 
@@ -402,7 +402,22 @@ def test_safe_extract_rejects_path_traversal_and_special_files(tmp_path):
         safe_extract_chrome_for_testing_zip(special, tmp_path / "special-out")
 
 
-def test_safe_extract_allows_internal_symlink_and_rejects_escape(tmp_path):
+def test_safe_extract_marks_directory_symlinks(tmp_path, monkeypatch):
+    internal = tmp_path / "internal.zip"
+    with zipfile.ZipFile(internal, "w") as bundle:
+        bundle.writestr("app/Versions/1/chrome", "binary")
+        link = zipfile.ZipInfo("app/Versions/Current")
+        link.external_attr = (stat.S_IFLNK | 0o777) << 16
+        bundle.writestr(link, "1")
+
+    calls = []
+    monkeypatch.setattr(Path, "symlink_to", lambda self, target, target_is_directory=False:
+                        calls.append((target, target_is_directory)))
+    safe_extract_chrome_for_testing_zip(internal, tmp_path / "output")
+    assert calls == [("1", True)]
+
+
+def test_safe_extract_allows_internal_symlink_and_rejects_escape(tmp_path, require_symlink_privilege):
     internal = tmp_path / "internal.zip"
     with zipfile.ZipFile(internal, "w") as bundle:
         bundle.writestr("app/Versions/1/chrome", "binary")

{chatup-0.2.20 → chatup-0.2.21}/tests/test_chromedriver.py

@@ -400,7 +400,7 @@ def test_chromedriver_rejects_non_object_metadata(tmp_path):
         )
 
 
-def test_chromedriver_force_install_rejects_symlink_root(tmp_path):
+def test_chromedriver_force_install_rejects_symlink_root(tmp_path, require_symlink_privilege):
     home = tmp_path / "chromedriver"
     outside = tmp_path / "outside"
     outside.mkdir()
@@ -419,7 +419,7 @@ def test_chromedriver_force_install_rejects_symlink_root(tmp_path):
 
 
 def test_driver_install_rejects_untrusted_resolver_identity_and_parent_symlink(
-    tmp_path,
+    tmp_path, require_symlink_privilege,
 ):
     home = tmp_path / "chromedriver"
     downloaded = False

{chatup-0.2.20 → chatup-0.2.21}/tests/test_cli_tree_docs.py

@@ -81,5 +81,6 @@ def test_cli_tree_is_in_mkdocs_nav_and_backend_contracts_are_complete():
         missing = sorted(item for item in required if item not in text)
         assert not missing, f"{name} is missing backend contract terms: {missing}"
         assert "chatup chrome" in text
+        assert "chatup snipaste" in text
         assert "chatup iterm" in text
         assert "from chatup.chrome import" not in text

{chatup-0.2.20 → chatup-0.2.21}/tests/test_playwright.py

@@ -88,7 +88,7 @@ def test_install_requires_exact_version_supported_browser_and_node(tmp_path):
         )
 
 
-def test_install_rejects_parent_symlink_escape(tmp_path):
+def test_install_rejects_parent_symlink_escape(tmp_path, require_symlink_privilege):
     home = tmp_path / "playwright"
     outside = tmp_path / "outside"
     outside.mkdir()

{chatup-0.2.20 → chatup-0.2.21}/tests/test_version.py

@@ -5,7 +5,7 @@ from chatup.cli import main
 
 
 def test_version_present():
-    assert __version__ == "0.2.20"
+    assert __version__ == "0.2.21"
 
 
 def test_cli_help():

{chatup-0.2.20 → chatup-0.2.21}/tests/test_workspace_setup.py

@@ -1,10 +1,22 @@
 from pathlib import Path
+import os
+from types import SimpleNamespace
 
+import click
+import pytest
 from click.testing import CliRunner
 
 from chatup.cli import main
 
 
+def _assert_link_points_to(link: Path, target: Path) -> None:
+    assert link.exists()
+    try:
+        assert link.resolve() == target.resolve() or link.samefile(target)
+    except OSError:
+        assert False, f"{link} does not point to {target}"
+
+
 def test_workspace_template_includes_chatarch_lifecycle_dirs(tmp_path):
     workspace_dir = tmp_path / "workspace"
 
@@ -49,8 +61,7 @@ def test_workspace_chatblog_missing_docs_creates_placeholder_and_public_link(tmp
     assert result.exit_code == 0, result.output
     public_link = workspace_dir / "public" / "chatblog"
     docs_dir = workspace_dir / "core" / "ChatBlog" / "docs"
-    assert public_link.is_symlink()
-    assert public_link.resolve() == docs_dir
+    _assert_link_points_to(public_link, docs_dir)
     assert (docs_dir / "README.md").exists()
     assert "Public link source: docs" in result.output
 
@@ -75,8 +86,7 @@ def test_workspace_chatblog_uses_docs_even_when_source_posts_exists(tmp_path, mo
 
     assert result.exit_code == 0, result.output
     public_link = workspace_dir / "public" / "chatblog"
-    assert public_link.is_symlink()
-    assert public_link.resolve() == workspace_dir / "core" / "ChatBlog" / "docs"
+    _assert_link_points_to(public_link, workspace_dir / "core" / "ChatBlog" / "docs")
     assert "Public link source: docs" in result.output
 
 
@@ -123,13 +133,20 @@ def test_workspace_all_extras_clone_chattool_chatblog_chatmemory(tmp_path, monke
     assert Path("core/ChatTool") in cloned
     assert Path("core/ChatBlog") in cloned
     assert Path("core/ChatMemory") in cloned
-    assert (workspace_dir / "public" / "chatblog").is_symlink()
+    _assert_link_points_to(
+        workspace_dir / "public" / "chatblog",
+        workspace_dir / "core" / "ChatBlog" / "docs",
+    )
     assert not (workspace_dir / "skills" / "trae").exists()
-    assert (workspace_dir / "skills" / "chatarch").is_symlink()
-    assert (workspace_dir / "skills" / "common").is_symlink()
-    assert (workspace_dir / "skills" / "agents").is_symlink()
-    assert (workspace_dir / "skills" / "README.md").is_symlink()
-    assert (workspace_dir / "skills" / "README.md").resolve() == workspace_dir / "core" / "ChatMemory" / "Skills" / "README.md"
+    for group in ["chatarch", "common", "agents"]:
+        _assert_link_points_to(
+            workspace_dir / "skills" / group,
+            workspace_dir / "core" / "ChatMemory" / "Skills" / group,
+        )
+    _assert_link_points_to(
+        workspace_dir / "skills" / "README.md",
+        workspace_dir / "core" / "ChatMemory" / "Skills" / "README.md",
+    )
     assert not (workspace_dir / "skills" / "package-development").exists()
     assert not (workspace_dir / "skills" / "package-review").exists()
     local_readme = (workspace_dir / "skills" / "local" / "README.md").read_text(encoding="utf-8")
@@ -138,3 +155,102 @@ def test_workspace_all_extras_clone_chattool_chatblog_chatmemory(tmp_path, monke
     assert "available under `skills/chatarch/`" in local_readme
     assert "chatarch/package-review are available under skills/chatarch/" in result.output
     assert "Skills README:" in result.output
+
+
+def test_workspace_extra_repo_reports_missing_git(tmp_path, monkeypatch):
+    from chatup.setup.workspace import options
+
+    monkeypatch.setattr(options, "_resolve_git_command", lambda: None)
+
+    with pytest.raises(click.ClickException) as excinfo:
+        options._clone_or_update_repo(
+            "https://example.invalid/repo.git",
+            tmp_path / "workspace" / "core" / "Repo",
+            interactive=False,
+            can_prompt=False,
+        )
+
+    assert "Git executable not found" in str(excinfo.value)
+
+
+def test_workspace_resolves_windows_git_standard_location(tmp_path, monkeypatch):
+    from chatup.setup.workspace import options
+
+    git = tmp_path / "Programs" / "Git" / "cmd" / "git.exe"
+    git.parent.mkdir(parents=True)
+    git.write_text("fake git", encoding="utf-8")
+
+    monkeypatch.setattr(options.shutil, "which", lambda name: None)
+    monkeypatch.setattr(options, "os", SimpleNamespace(name="nt", environ=os.environ))
+    monkeypatch.setenv("LOCALAPPDATA", str(tmp_path))
+    monkeypatch.delenv("ProgramFiles", raising=False)
+    monkeypatch.delenv("ProgramFiles(x86)", raising=False)
+
+    assert type(Path()) is type(tmp_path)
+    assert options._resolve_git_command() == str(git)
+
+
+def test_workspace_directory_link_uses_directory_symlink_flag(tmp_path, monkeypatch):
+    from chatup.setup.workspace import options
+
+    source = tmp_path / "source"
+    target = tmp_path / "target"
+    source.mkdir()
+    captured = {}
+
+    def fake_symlink_to(self, source_path, target_is_directory=False):
+        captured["source"] = source_path
+        captured["target_is_directory"] = target_is_directory
+
+    monkeypatch.setattr(Path, "symlink_to", fake_symlink_to)
+
+    options._ensure_symlink(source, target)
+
+    assert captured == {"source": source, "target_is_directory": True}
+
+
+def test_workspace_directory_link_falls_back_to_windows_junction(tmp_path, monkeypatch):
+    from chatup.setup.workspace import options
+
+    source = tmp_path / "source"
+    target = tmp_path / "target"
+    source.mkdir()
+    created = []
+
+    def fail_symlink_to(self, source_path, target_is_directory=False):
+        raise OSError("symlink privilege missing")
+
+    def fake_junction(source_path, target_path):
+        created.append((source_path, target_path))
+        target_path.mkdir()
+
+    monkeypatch.setattr(Path, "symlink_to", fail_symlink_to)
+    monkeypatch.setattr(options, "os", SimpleNamespace(name="nt", environ=os.environ))
+    monkeypatch.setattr(options, "_create_windows_junction", fake_junction)
+
+    assert type(Path()) is type(tmp_path)
+    options._ensure_symlink(source, target)
+
+    assert created == [(source.resolve(), target)]
+    assert target.is_dir()
+
+
+@pytest.mark.skipif(os.name != "nt", reason="native Windows junctions")
+@pytest.mark.parametrize("name", ["space dir", "a&b", "literal%PATH%!name"])
+def test_windows_junction_preserves_literal_paths_and_target_data(tmp_path, name):
+    from chatup.setup.workspace import options
+
+    source = tmp_path / name
+    source.mkdir()
+    sentinel = source / "keep.txt"
+    sentinel.write_text("keep", encoding="utf-8")
+    target = tmp_path / (name + "-link")
+    options._create_windows_junction(source, target)
+    try:
+        assert options._is_windows_reparse_point(target)
+        assert target.samefile(source)
+        options._ensure_symlink(source, target)
+        assert (target / "keep.txt").read_text(encoding="utf-8") == "keep"
+    finally:
+        options._remove_link_path(target)
+    assert sentinel.read_text(encoding="utf-8") == "keep"