Feat/crypto

.github/workflows/build.yml

@@ -2,68 +2,67 @@ name: Build
 
 on:
   push:
-    branches: [ main, develop, feat/* ]
+    branches: [main, develop, feat/*]
   pull_request:
-    branches: [ main, develop ]
+    branches: [main, develop]
 
 env:
-  DOTNET_VERSION: '10.0.x'
+  DOTNET_VERSION: "10.0.x"
 
 jobs:
   build-windows:
     name: Build Windows
     runs-on: windows-latest
-    
+
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-    
-    - name: Setup .NET
-      uses: actions/setup-dotnet@v4
-      with:
-        dotnet-version: ${{ env.DOTNET_VERSION }}
-    
-    - name: Restore dependencies
-      run: dotnet restore MarketAssistant.slnx
-    
-    - name: Build
-      run: dotnet build src/MarketAssistant.csproj -c Release --no-restore
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: ${{ env.DOTNET_VERSION }}
+
+      - name: Restore dependencies
+        run: dotnet restore MarketAssistant.slnx
+
+      - name: Build
+        run: dotnet build src/MarketAssistant.App/MarketAssistant.App.csproj -c Release --no-restore
 
   build-macos:
     name: Build macOS
     runs-on: macos-latest
-    
+
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-    
-    - name: Setup .NET
-      uses: actions/setup-dotnet@v4
-      with:
-        dotnet-version: ${{ env.DOTNET_VERSION }}
-    
-    - name: Restore dependencies
-      run: dotnet restore MarketAssistant.slnx
-    
-    - name: Build
-      run: dotnet build src/MarketAssistant.csproj -c Release --no-restore -r osx-x64 -p:ErrorOnDuplicatePublishOutputFiles=false
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: ${{ env.DOTNET_VERSION }}
+
+      - name: Restore dependencies
+        run: dotnet restore MarketAssistant.slnx
+
+      - name: Build
+        run: dotnet build src/MarketAssistant.App/MarketAssistant.App.csproj -c Release --no-restore -r osx-x64 -p:ErrorOnDuplicatePublishOutputFiles=false
 
   build-linux:
     name: Build Linux
     runs-on: ubuntu-latest
-    
+
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-
-    - name: Setup .NET
-      uses: actions/setup-dotnet@v4
-      with:
-        dotnet-version: ${{ env.DOTNET_VERSION }}
-
-    - name: Restore dependencies
-      run: dotnet restore MarketAssistant.slnx
-
-    - name: Build
-      run: dotnet build src/MarketAssistant.csproj -c Release --no-restore -r linux-x64
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: ${{ env.DOTNET_VERSION }}
+
+      - name: Restore dependencies
+        run: dotnet restore MarketAssistant.slnx
 
+      - name: Build
+        run: dotnet build src/MarketAssistant.App/MarketAssistant.App.csproj -c Release --no-restore -r linux-x64

.github/workflows/release.yml

@@ -31,12 +31,28 @@ jobs:
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
 
+      - name: Resolve release version
+        id: version
+        shell: bash
+        run: |
+          if [ -n "${{ inputs.version }}" ]; then
+            VERSION="${{ inputs.version }}"
+          elif [ "${{ github.event_name }}" = "release" ]; then
+            VERSION="${{ github.event.release.tag_name }}"
+          else
+            VERSION="${GITHUB_REF#refs/tags/}"
+          fi
+          # 去掉前缀 v
+          VERSION="${VERSION#v}"
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Resolved version: $VERSION"
+
       - name: Restore dependencies
         run: dotnet restore MarketAssistant.slnx
 
       - name: Build Windows x64
         run: |
-          dotnet publish src/MarketAssistant.csproj `
+          dotnet publish src/MarketAssistant.App/MarketAssistant.App.csproj `
             -c Release `
             -r win-x64 `
             --self-contained `
@@ -45,13 +61,31 @@ jobs:
             -p:UseAppHost=true `
             -p:DebugType=None `
             -p:DebugSymbols=false `
+            -p:Version=${{ steps.version.outputs.version }} `
+            -p:InformationalVersion=${{ steps.version.outputs.version }} `
             -o ./publish/windows
+        shell: pwsh
 
       - name: Clean debug files
         run: |
           Get-ChildItem -Path ./publish/windows -Include "*.pdb", "*.xml" -Recurse | Remove-Item -Force
         shell: pwsh
 
+      - name: Install Inno Setup
+        run: choco install innosetup --no-progress -y
+
+      - name: Build installer
+        shell: pwsh
+        env:
+          APP_VERSION: ${{ steps.version.outputs.version }}
+        run: |
+          $version = $env:APP_VERSION
+          $issFile = "scripts\windows\MarketAssistant.iss"
+          $content = Get-Content $issFile -Raw
+          $content = $content -replace '#define MyAppVersion ".*?"', "#define MyAppVersion `"$version`""
+          Set-Content $issFile -Value $content -NoNewline
+          & "${env:ProgramFiles(x86)}\Inno Setup 6\ISCC.exe" $issFile
+
       - name: Create ZIP archive
         run: |
           Compress-Archive -Path ./publish/windows/* `
@@ -63,7 +97,9 @@ jobs:
         uses: actions/upload-artifact@v4
         with:
           name: windows-x64
-          path: ${{ env.APP_NAME }}-Windows-x64.zip
+          path: |
+            ${{ env.APP_NAME }}-Windows-x64.zip
+            Release/Windows/*.exe
 
   # macOS 构建
   build-macos:
@@ -78,6 +114,21 @@ jobs:
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
 
+      - name: Resolve release version
+        id: version
+        shell: bash
+        run: |
+          if [ -n "${{ inputs.version }}" ]; then
+            VERSION="${{ inputs.version }}"
+          elif [ "${{ github.event_name }}" = "release" ]; then
+            VERSION="${{ github.event.release.tag_name }}"
+          else
+            VERSION="${GITHUB_REF#refs/tags/}"
+          fi
+          VERSION="${VERSION#v}"
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Resolved version: $VERSION"
+
       - name: Restore dependencies
         run: dotnet restore MarketAssistant.slnx
 
@@ -99,6 +150,7 @@ jobs:
       - name: Build macOS app
         run: ./scripts/macos/build-app-bundle.sh
         env:
+          APP_VERSION: ${{ steps.version.outputs.version }}
           # 如果配置了签名，取消注释以下行
           # SIGNING_IDENTITY: ${{ secrets.MACOS_SIGNING_IDENTITY }}
           # NOTARYTOOL_PROFILE: "AC_PASSWORD"
@@ -130,6 +182,21 @@ jobs:
         with:
           dotnet-version: ${{ env.DOTNET_VERSION }}
 
+      - name: Resolve release version
+        id: version
+        shell: bash
+        run: |
+          if [ -n "${{ inputs.version }}" ]; then
+            VERSION="${{ inputs.version }}"
+          elif [ "${{ github.event_name }}" = "release" ]; then
+            VERSION="${{ github.event.release.tag_name }}"
+          else
+            VERSION="${GITHUB_REF#refs/tags/}"
+          fi
+          VERSION="${VERSION#v}"
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "Resolved version: $VERSION"
+
       - name: Install dependencies
         run: |
           sudo apt-get update
@@ -145,9 +212,13 @@ jobs:
 
       - name: Build Debian package
         run: ./scripts/linux/build-deb.sh
+        env:
+          APP_VERSION: ${{ steps.version.outputs.version }}
 
       - name: Build RPM package
         run: ./scripts/linux/build-rpm.sh
+        env:
+          APP_VERSION: ${{ steps.version.outputs.version }}
         continue-on-error: true
 
       - name: Upload .deb package
@@ -178,6 +249,9 @@ jobs:
       contents: write
 
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
       - name: Download all artifacts
         uses: actions/download-artifact@v4
         with:
@@ -189,7 +263,7 @@ jobs:
       - name: Get release version
         id: get_version
         run: |
-          if [ "${{ github.event_name }}" == "release" ]; then
+          if [ "${{ github.event_name }}" = "release" ]; then
             echo "version=${{ github.event.release.tag_name }}" >> $GITHUB_OUTPUT
           else
             echo "version=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
@@ -210,17 +284,34 @@ jobs:
             echo "Release $TAG not found. Skipping asset cleanup."
           fi
 
+      - name: Generate SHA256 checksums
+        working-directory: ./artifacts
+        run: |
+          find . -type f \( -name "*.zip" -o -name "*.exe" -o -name "*.dmg" -o -name "*.deb" -o -name "*.rpm" \) -exec sha256sum {} \; > ../SHA256SUMS.txt
+          cat ../SHA256SUMS.txt
+
       - name: Upload release assets
         uses: softprops/action-gh-release@v2
         with:
           files: |
             ./artifacts/**/*.zip
+            ./artifacts/**/*.exe
             ./artifacts/**/*.dmg
             ./artifacts/**/*.deb
             ./artifacts/**/*.rpm
+            ./SHA256SUMS.txt
           tag_name: ${{ steps.get_version.outputs.version }}
           name: ${{ steps.get_version.outputs.version }}
           draft: false
-          prerelease: false
+          prerelease: ${{ contains(steps.get_version.outputs.version, '-') }}
+          body: |
+            ## 下载说明
+
+            请根据操作系统选择对应安装包：
+            - **Windows**: `MarketAssistant-Windows-x64.zip`（便携版）或 `MarketAssistant-Setup-<version>.exe`（安装版）
+            - **macOS**: `MarketAssistant-<version>.dmg`（Universal Binary，同时支持 Apple Silicon 和 Intel）
+            - **Linux**: `MarketAssistant-<version>-amd64.deb`（Debian/Ubuntu）或 `MarketAssistant-<version>-x86_64.rpm`（Fedora/RHEL）
+
+            完整性校验请参考 `SHA256SUMS.txt`。
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -3,6 +3,9 @@
 ##
 ## Get latest from https://github.com/github/gitignore/blob/main/VisualStudio.gitignore
 
+# Windows 保留设备名（误生成时 git 会反复列出，磁盘上实际不存在）
+nul
+
 # User-specific files
 *.rsuser
 *.suo
@@ -398,3 +401,10 @@ FodyWeavers.xsd
 
 # JetBrains Rider
 *.sln.iml
+.idea/
+
+# Secrets and credentials
+.secrets
+.env
+*.pem
+*.key