Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases 1 Activity

projection: begin the exact-path public epoch

Browse source 
The public tree and its history contain only the listed paths. Earlier projection history remains preserved internally.

Source-Sha: 913fde029b935671833254797f0f20f1eb9fabba

Policy-Sha: 913fde029b935671833254797f0f20f1eb9fabba

Tree-Digest: 180ae530c1058a2a5c89837bdce2d323ae83e669e38590ca72e75b8d92b7262f
This commit is contained in:
Fimeg 2026-09-08 21:59:33 -04:00
commit 67e26be2d9
838 changed files with 157302 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

64
installer/windows/build-desktop.ps1 Normal file
View file

@ -0,0 +1,64 @@
# Native Windows CI entry point. Run from an x64 MSVC developer environment
# with Rust, Go and Qt 6 on PATH. Produces the complete Desktop payload;
# setup must package the entire directory, not just redflag-desktop.exe.
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)][string]$OutputDirectory,
[Parameter(Mandatory = $true)][ValidatePattern('^[0-9]+\.[0-9]+\.[0-9]+(\.[0-9]+)?$')][string]$Version
)
$ErrorActionPreference = 'Stop'
Set-StrictMode -Version Latest
if ($env:OS -ne 'Windows_NT') { throw 'This build requires a native Windows runner.' }
foreach ($tool in @('cargo', 'rustc', 'go', 'cl', 'windeployqt')) {
if (-not (Get-Command $tool -ErrorAction SilentlyContinue)) { throw "Missing build tool: $tool" }
}
$rustInfo = & rustc -vV
if ($LASTEXITCODE -ne 0 -or -not ($rustInfo -match 'host: x86_64-pc-windows-msvc')) {
throw 'Select the x86_64-pc-windows-msvc Rust toolchain.'
}
$root = (Resolve-Path (Join-Path $PSScriptRoot '../..')).Path
$expectedVersion = $Version
$output = [IO.Path]::GetFullPath($OutputDirectory)
if (Test-Path $output) { throw 'Output directory must be new; refusing to mix payload versions.' }
New-Item -ItemType Directory -Path $output | Out-Null
Push-Location (Join-Path $root 'desktop')
$previousVersion = $env:REDFLAG_RELEASE_VERSION
try {
$env:REDFLAG_RELEASE_VERSION = $Version
& cargo build --release --locked
if ($LASTEXITCODE -ne 0) { throw 'Desktop build failed.' }
Copy-Item 'target/release/redflag-desktop.exe' $output
} finally { $env:REDFLAG_RELEASE_VERSION = $previousVersion; Pop-Location }
Push-Location (Join-Path $root 'agent')
try {
& go build -trimpath -ldflags "-X github.com/Fimeg/RedFlag/agent/internal/version.Version=$Version" -o (Join-Path $output 'redflag-agent.exe') ./cmd/agent/
if ($LASTEXITCODE -ne 0) { throw 'Agent build failed.' }
} finally { Pop-Location }
$desktop = Join-Path $output 'redflag-desktop.exe'
& windeployqt --release --qmldir (Join-Path $root 'desktop/qml') --dir $output $desktop
if ($LASTEXITCODE -ne 0) { throw 'Qt runtime deployment failed.' }
foreach ($relative in @('Qt6Core.dll', 'Qt6Gui.dll', 'Qt6Qml.dll', 'Qt6Quick.dll', 'platforms/qwindows.dll')) {
if (-not (Test-Path (Join-Path $output $relative))) { throw "Qt payload is missing $relative" }
}
Copy-Item (Join-Path $root 'LICENSE') (Join-Path $output 'LICENSE.txt')
Copy-Item (Join-Path $root 'THIRD_PARTY_LICENSES.md') $output
# Remove the build toolchain from DLL lookup for the version check. A clean
# Windows VM must additionally launch QML and exercise the Agent pipe.
$buildPath = $env:PATH
try {
$env:PATH = "$env:SystemRoot\System32;$env:SystemRoot"
$reportedVersion = & $desktop --version
if ($LASTEXITCODE -ne 0 -or $reportedVersion -ne "RedFlag v$expectedVersion") {
throw 'Staged Desktop failed its version check without the Qt build PATH.'
}
} finally { $env:PATH = $buildPath }
$files = @(Get-ChildItem $output -Recurse -File | Sort-Object FullName | ForEach-Object {
[ordered]@{
path = $_.FullName.Substring($output.Length + 1).Replace('\', '/')
sha256 = (Get-FileHash $_.FullName -Algorithm SHA256).Hash.ToLowerInvariant()
size = $_.Length
}
})
[ordered]@{ desktop_version = $reportedVersion; files = $files } |
ConvertTo-Json -Depth 4 | Set-Content (Join-Path $output 'payload.json') -Encoding UTF8
Write-Output "Desktop payload staged at $output; this is not yet an installer or an installation test."