From 0e7a63f83f2f7183333fa7c795b0311c3414b9a3 Mon Sep 17 00:00:00 2001 From: Renfei Wang Date: Sun, 26 Jul 2026 16:02:24 -0400 Subject: [PATCH] governance: centralize release metadata and source reviews --- .../ISSUE_TEMPLATE/accessibility-report.yml | 44 +++ .github/ISSUE_TEMPLATE/bug-report.yml | 63 ++++ .../ISSUE_TEMPLATE/compatibility-report.yml | 55 ++++ .github/ISSUE_TEMPLATE/performance-report.yml | 51 ++++ .github/workflows/desktop.yml | 9 +- README.md | 17 +- README.zh-CN.md | 17 +- apps/theme-manager/src-tauri/src/catalog.rs | 202 ++++++++++++- apps/theme-manager/src-tauri/tauri.conf.json | 11 +- apps/theme-manager/src/renderer/app.js | 29 ++ apps/theme-manager/src/renderer/index.html | 1 + apps/theme-manager/src/renderer/styles.css | 7 +- docs/CHANGELOG.md | 10 + docs/adapters.md | 8 +- docs/art-direction.md | 6 +- docs/desktop-manager.md | 8 +- docs/release-metadata.md | 26 ++ docs/release-signing.md | 28 +- metadata/release.json | 138 +++++++++ package.json | 6 +- schemas/registry.schema.json | 152 +++++++++- schemas/source-art-review.schema.json | 77 +++++ schemas/theme-pack.schema.json | 76 ++++- scripts/build.mjs | 24 +- scripts/capture-full-skin-screenshots.mjs | 16 +- scripts/lib/codex-native-theme.mjs | 4 +- scripts/lib/release-metadata.mjs | 134 +++++++++ scripts/lib/source-art-contract.mjs | 4 +- scripts/lib/source-art-reviews.mjs | 87 ++++++ scripts/lib/theme-generator.mjs | 78 +++-- scripts/prepare-desktop.mjs | 2 +- scripts/smoke-theme-manager.mjs | 5 +- scripts/sync-release-metadata.mjs | 275 ++++++++++++++++++ scripts/validate.mjs | 67 +++-- site/assets/app.js | 95 +++++- site/assets/styles.css | 89 ++++++ site/index.html | 5 +- tests/repository.test.mjs | 21 +- tests/source-contract.test.mjs | 94 +++++- themes/catalog.json | 5 - themes/source-art/reviews.json | 67 +++++ 41 files changed, 1986 insertions(+), 127 deletions(-) create mode 100644 .github/ISSUE_TEMPLATE/accessibility-report.yml create mode 100644 .github/ISSUE_TEMPLATE/bug-report.yml create mode 100644 .github/ISSUE_TEMPLATE/compatibility-report.yml create mode 100644 .github/ISSUE_TEMPLATE/performance-report.yml create mode 100644 docs/release-metadata.md create mode 100644 metadata/release.json create mode 100644 schemas/source-art-review.schema.json create mode 100644 scripts/lib/release-metadata.mjs create mode 100644 scripts/lib/source-art-reviews.mjs create mode 100644 scripts/sync-release-metadata.mjs create mode 100644 themes/source-art/reviews.json diff --git a/.github/ISSUE_TEMPLATE/accessibility-report.yml b/.github/ISSUE_TEMPLATE/accessibility-report.yml new file mode 100644 index 0000000..8451ed5 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/accessibility-report.yml @@ -0,0 +1,44 @@ +name: Accessibility report / 无障碍报告 +description: Report a keyboard, focus, contrast, screen-reader, zoom, motion, or forced-colors barrier. +title: "[Accessibility] " +labels: ["accessibility"] +body: + - type: dropdown + id: surface + attributes: + label: Surface / 受影响部分 + options: + - Gallery website + - Theme Manager + - Theme Manager installer or update UI + validations: + required: true + + - type: textarea + id: environment + attributes: + label: Environment / 环境 + description: OS, browser/WebView, assistive technology when relevant, zoom or display scaling, and color/motion settings. + validations: + required: true + + - type: textarea + id: barrier + attributes: + label: Barrier and expected outcome / 障碍与预期结果 + description: Include the control or content, current behavior, expected behavior, and why it blocks the task. + validations: + required: true + + - type: textarea + id: reproduce + attributes: + label: Reproduction steps / 复现步骤 + validations: + required: true + + - type: textarea + id: evidence + attributes: + label: Privacy-safe evidence / 脱敏证据 + description: Screenshots, a short recording, or screen-reader output are welcome after private content is removed. diff --git a/.github/ISSUE_TEMPLATE/bug-report.yml b/.github/ISSUE_TEMPLATE/bug-report.yml new file mode 100644 index 0000000..d015024 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/bug-report.yml @@ -0,0 +1,63 @@ +name: Bug report / 缺陷报告 +description: Report a reproducible Gallery, generator, Theme Manager, or Native fallback defect. +title: "[Bug] " +labels: ["bug"] +body: + - type: markdown + attributes: + value: | + Do not include credentials, private chats, account names, local home paths, or unredacted screenshots. For a security vulnerability, follow SECURITY.md instead of opening a public issue. + + - type: dropdown + id: surface + attributes: + label: Surface / 受影响部分 + options: + - Gallery + - Theme generator or validator + - Theme Manager + - Full Skin runtime + - Native fallback + - Installer or release artifact + validations: + required: true + + - type: textarea + id: environment + attributes: + label: Environment / 环境 + description: Include OS, architecture, browser or Theme Manager version, and the exact Codex version only when relevant. + validations: + required: true + + - type: textarea + id: reproduce + attributes: + label: Reproduction steps / 复现步骤 + placeholder: | + 1. ... + 2. ... + 3. ... + validations: + required: true + + - type: textarea + id: expected_actual + attributes: + label: Expected and actual result / 预期与实际结果 + validations: + required: true + + - type: textarea + id: evidence + attributes: + label: Privacy-safe evidence / 脱敏证据 + description: Add a redacted error, screenshot, or a minimal trace. Do not attach private application data. + + - type: checkboxes + id: confirmation + attributes: + label: Confirmation / 确认 + options: + - label: I removed private data, secrets, and personal paths from this report. / 我已移除私有数据、密钥和个人路径。 + required: true diff --git a/.github/ISSUE_TEMPLATE/compatibility-report.yml b/.github/ISSUE_TEMPLATE/compatibility-report.yml new file mode 100644 index 0000000..ac8729d --- /dev/null +++ b/.github/ISSUE_TEMPLATE/compatibility-report.yml @@ -0,0 +1,55 @@ +name: Compatibility report / 兼容性报告 +description: Report a platform, package-version, or supported-runtime compatibility result. +title: "[Compatibility] " +labels: ["compatibility"] +body: + - type: markdown + attributes: + value: | + Compatibility is version-bound. Please do not run a Full Skin probe against a personal or production session just to fill this form. Remove private paths, user names, chats, and account data. + + - type: dropdown + id: platform + attributes: + label: Platform / 平台 + options: + - Windows x64 + - macOS Apple silicon + - macOS Intel + - Other or unsupported platform + validations: + required: true + + - type: dropdown + id: path + attributes: + label: Feature path / 功能路径 + options: + - Full Skin apply and restore + - Native fallback import + - Persistent replay + - Theme Manager build or launch + - App update channel + validations: + required: true + + - type: textarea + id: identity + attributes: + label: Version and target identity / 版本与目标身份 + description: State exact app and Theme Manager versions. Redact personal installation paths; package family/channel is enough. + validations: + required: true + + - type: textarea + id: result + attributes: + label: Result and verification boundary / 结果与验证边界 + description: Describe what worked or failed, what direct evidence you observed, and any step you intentionally did not run. + validations: + required: true + + - type: textarea + id: evidence + attributes: + label: Privacy-safe evidence / 脱敏证据 diff --git a/.github/ISSUE_TEMPLATE/performance-report.yml b/.github/ISSUE_TEMPLATE/performance-report.yml new file mode 100644 index 0000000..de0f8ce --- /dev/null +++ b/.github/ISSUE_TEMPLATE/performance-report.yml @@ -0,0 +1,51 @@ +name: Performance report / 性能报告 +description: Report measurable slowness, memory pressure, rendering jank, or generator regressions. +title: "[Performance] " +labels: ["performance"] +body: + - type: markdown + attributes: + value: | + Use privacy-safe measurements. Do not upload full process dumps, private pages, account data, or credentials. + + - type: dropdown + id: surface + attributes: + label: Surface / 受影响部分 + options: + - Gallery load, search, or filter + - Theme generator + - Theme Manager interface + - Full Skin apply or restore + - Persistent replay + validations: + required: true + + - type: textarea + id: environment + attributes: + label: Environment and build / 环境与构建 + description: OS, architecture, app/browser version, catalog revision, and hardware class. Omit serial numbers and private paths. + validations: + required: true + + - type: textarea + id: measurement + attributes: + label: Measurement / 测量结果 + description: State baseline, observed time or memory, sample count, and how you measured it. + placeholder: "Baseline: ...\nObserved: ...\nSamples: ...\nMethod: ..." + validations: + required: true + + - type: textarea + id: reproduce + attributes: + label: Reproduction path / 复现路径 + validations: + required: true + + - type: textarea + id: evidence + attributes: + label: Privacy-safe trace or screenshot / 脱敏追踪或截图 diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml index db7f018..be54b2c 100644 --- a/.github/workflows/desktop.yml +++ b/.github/workflows/desktop.yml @@ -202,6 +202,11 @@ jobs: fi done + - name: Verify release tag matches metadata + if: startsWith(github.ref, 'refs/tags/v') && vars.DESKTOP_RELEASE_READY == 'true' + shell: bash + run: test "${{ github.ref_name }}" = "v0.3.2" + - name: Build updater-signed beta artifacts and publish the tagged release if: startsWith(github.ref, 'refs/tags/v') && vars.DESKTOP_RELEASE_READY == 'true' uses: tauri-apps/tauri-action@v1 @@ -214,10 +219,10 @@ jobs: projectPath: apps/theme-manager args: "--config src-tauri/tauri.release.conf.json ${{ matrix.build-args }}" tagName: ${{ github.ref_name }} - releaseName: "Awesome Codex Theme ${{ github.ref_name }} Beta" + releaseName: "Awesome Codex Theme v0.3.2 Beta" releaseAssetNamePattern: ${{ matrix.release-asset-name }} releaseBody: "Updater-signed Tauri Theme Manager beta with ACT Full Skin v1. Windows Authenticode and Apple Developer ID signing/notarization are not included in this beta, so the operating system may show an unknown-publisher warning. macOS bundles carry an ad-hoc signature for package integrity only. The app applies verified backgrounds, materials, colors, and theme copy without modifying ChatGPT application files." - prerelease: false + prerelease: true releaseDraft: true - name: Verify release macOS disk image and ad-hoc signature diff --git a/README.md b/README.md index 835e6af..4826e33 100644 --- a/README.md +++ b/README.md @@ -29,6 +29,21 @@ The screenshot above comes from ChatGPT Beta `26.715.3651.0` after the skin was > Desktop builds are published only on the official [GitHub Releases page](https://github.com/rwang23/awesome-codex-theme/releases). If that page has no asset compatible with your operating system and CPU, there is no supported public installer for that target. + +## Current platform capability matrix + +This table is generated from [`metadata/release.json`](metadata/release.json) and checked by `npm run metadata:check`. + +| Target | Full Skin | Native fallback | Persistence | +| --- | --- | --- | --- | +| Windows x64 | Verified (`26.715.3651.0`) | Verified (`26.715.2305.0`) | Verified (`26.715.3651.0`) | +| macOS Apple silicon | Build-only | Build-only | Unverified | +| macOS Intel | Build-only | Build-only | Unverified | + +The current catalog has **68 themes** and **136 modes** (revision `2026072201`). +The current `beta` update-feed status is `unreleased`; in-app updates are not claimed until a signed static feed covers every platform. + + ## More than a color palette Awesome Codex Theme combines the parts that make a desktop skin feel complete: @@ -94,7 +109,7 @@ The Windows implementation of **Apply & Keep Full Skin** has passed an exact Cha Theme updates and app updates are independent. The manager refreshes the verified Registry on startup, so newly published themes appear immediately without reinstalling or restarting the app. A signed app update is needed only when the manager itself changes, such as its runtime, compatibility rules, security boundary, platform integration, or interface. -The public beta uses Tauri updater signatures so future app updates can be verified. macOS bundles also carry an ad-hoc signature for package integrity, but Windows Authenticode, Apple Developer ID, and notarization are deferred. The operating system may still show an unknown-publisher warning; neither the updater signature nor the ad-hoc Mac signature removes SmartScreen or Gatekeeper warnings. See [release trust and signing](docs/release-signing.md). +The public beta uses Tauri updater signatures for the future signed-update path. The current update-feed state is intentionally **unreleased**: a GitHub prerelease alone does not enable in-app updates until a signed static feed covers every platform and passes action-after verification. macOS bundles also carry an ad-hoc signature for package integrity, but Windows Authenticode, Apple Developer ID, and notarization are deferred. The operating system may still show an unknown-publisher warning; neither the updater signature nor the ad-hoc Mac signature removes SmartScreen or Gatekeeper warnings. See [release metadata](docs/release-metadata.md) and [release trust and signing](docs/release-signing.md). ## See the real result diff --git a/README.zh-CN.md b/README.zh-CN.md index 8236dec..e8dfc35 100644 --- a/README.zh-CN.md +++ b/README.zh-CN.md @@ -29,6 +29,21 @@ > 桌面安装包只会发布在官方 [GitHub Releases 页面](https://github.com/rwang23/awesome-codex-theme/releases)。如果页面上没有与你的操作系统和 CPU 匹配的文件，就表示当前没有支持该目标的公开安装包。 + +## 当前平台能力矩阵 + +此表由 [`metadata/release.json`](metadata/release.json) 生成，并由 `npm run metadata:check` 校验。 + +| 目标 | Full Skin | Native 回退 | 常驻 | +| --- | --- | --- | --- | +| Windows x64 | 已验证 (`26.715.3651.0`) | 已验证 (`26.715.2305.0`) | 已验证 (`26.715.3651.0`) | +| macOS Apple 芯片 | 仅构建 | 仅构建 | 未验证 | +| macOS Intel | 仅构建 | 仅构建 | 未验证 | + +当前 Catalog 有 **68 套主题**、**136 个模式**（修订 `2026072201`）。 +当前 `beta` 通道更新源状态为 `unreleased`；在签名静态清单覆盖全部平台前，不宣称应用内更新可用。 + + ## 它不只是换一组颜色 Awesome Codex Theme 会把一套皮肤需要的部分一起应用： @@ -93,7 +108,7 @@ Windows 版“应用并保持完整皮肤”已经通过 ChatGPT Beta `26.715.36 主题更新与应用更新彼此独立。管理器启动时会刷新经过验证的 Registry，所以新发布的主题无需重装或重启应用就会直接出现。只有管理器自身的运行时、兼容规则、安全边界、平台集成或界面发生变化时，才需要安装签名应用更新。 -公开 Beta 使用 Tauri updater 签名来验证以后收到的应用更新；macOS 应用包还带有只用于包完整性的 ad-hoc 签名。Windows Authenticode、Apple Developer ID 与公证暂时延后，所以系统仍可能显示未知发布者提示。Updater 与 ad-hoc 签名都不能消除 SmartScreen 或 Gatekeeper 提示，详见[发布信任与签名](docs/release-signing.md)。 +公开 Beta 为未来的签名更新链路保留 Tauri updater 签名。当前更新源状态明确为**尚未发布**：仅有 GitHub prerelease 并不代表可以应用内更新，必须先有覆盖全部平台的签名静态清单并完成 action-after 验证。macOS 应用包还带有只用于包完整性的 ad-hoc 签名。Windows Authenticode、Apple Developer ID 与公证暂时延后，所以系统仍可能显示未知发布者提示。Updater 与 ad-hoc 签名都不能消除 SmartScreen 或 Gatekeeper 提示，详见[发布元数据](docs/release-metadata.md)与[发布信任与签名](docs/release-signing.md)。 ## 真实使用效果 diff --git a/apps/theme-manager/src-tauri/src/catalog.rs b/apps/theme-manager/src-tauri/src/catalog.rs index 6beb589..b61cb29 100644 --- a/apps/theme-manager/src-tauri/src/catalog.rs +++ b/apps/theme-manager/src-tauri/src/catalog.rs @@ -17,6 +17,15 @@ const REMOTE_REGISTRY_URL: &str = "https://rwang23.github.io/awesome-codex-theme/themes/registry.json"; const MODES: [&str; 2] = ["light", "dark"]; +#[derive(Clone)] +struct ReleaseContract { + full_skin_format: String, + native_tested_version: String, + capture_version: String, + capture_package: String, + capture_fixture: String, +} + #[derive(Clone)] pub struct Catalog { pub source: String, @@ -163,6 +172,158 @@ fn valid_hex_color(value: &str) -> bool { .all(|character| character.is_ascii_hexdigit()) } +fn required_string(value: &Value, label: &str) -> Result { + value + .as_str() + .filter(|value| !value.trim().is_empty()) + .map(str::to_owned) + .ok_or_else(|| format!("{label} 必须是非空字符串")) +} + +fn validate_release(registry: &Value) -> Result { + let release = object(®istry["release"], "release")?; + let product = object( + release.get("product").unwrap_or(&Value::Null), + "release.product", + )?; + for field in ["name", "repository", "releases"] { + required_string( + product.get(field).unwrap_or(&Value::Null), + &format!("release.product.{field}"), + )?; + } + let desktop = object( + release.get("desktop").unwrap_or(&Value::Null), + "release.desktop", + )?; + required_string( + desktop.get("version").unwrap_or(&Value::Null), + "release.desktop.version", + )?; + if !matches!( + desktop.get("channel").and_then(Value::as_str), + Some("beta" | "stable") + ) { + return fail("release.desktop.channel 无效"); + } + let updater = object( + desktop.get("updater").unwrap_or(&Value::Null), + "release.desktop.updater", + )?; + if !matches!( + updater.get("status").and_then(Value::as_str), + Some("unreleased" | "available") + ) { + return fail("release.desktop.updater.status 无效"); + } + localized( + updater.get("message").unwrap_or(&Value::Null), + "release.desktop.updater.message", + )?; + let runtime = object( + release.get("runtime").unwrap_or(&Value::Null), + "release.runtime", + )?; + let full_skin_format = required_string( + runtime.get("fullSkinFormat").unwrap_or(&Value::Null), + "release.runtime.fullSkinFormat", + )?; + if full_skin_format != "act-full-skin-v1" { + return fail("release.runtime.fullSkinFormat 不受支持"); + } + required_string( + runtime.get("implementationVersion").unwrap_or(&Value::Null), + "release.runtime.implementationVersion", + )?; + required_string( + runtime.get("sourceArtRenderer").unwrap_or(&Value::Null), + "release.runtime.sourceArtRenderer", + )?; + let native_tested_version = required_string( + runtime.get("nativeTestedVersion").unwrap_or(&Value::Null), + "release.runtime.nativeTestedVersion", + )?; + let capture = object( + release.get("capture").unwrap_or(&Value::Null), + "release.capture", + )?; + if capture.get("channel").and_then(Value::as_str) != Some("beta") { + return fail("release.capture.channel 必须是 beta"); + } + let capture_version = required_string( + capture.get("appVersion").unwrap_or(&Value::Null), + "release.capture.appVersion", + )?; + let capture_package = required_string( + capture.get("packageFullName").unwrap_or(&Value::Null), + "release.capture.packageFullName", + )?; + if !capture_package.starts_with("OpenAI.CodexBeta_") { + return fail("release.capture.packageFullName 不是 Codex Beta 包"); + } + let capture_fixture = required_string( + capture.get("fixture").unwrap_or(&Value::Null), + "release.capture.fixture", + )?; + required_string( + capture.get("modelLabel").unwrap_or(&Value::Null), + "release.capture.modelLabel", + )?; + Ok(ReleaseContract { + full_skin_format, + native_tested_version, + capture_version, + capture_package, + capture_fixture, + }) +} + +fn validate_capabilities(value: &Value) -> Result<(), String> { + let capabilities = array(value, "capabilities")?; + if capabilities.is_empty() || capabilities.len() > 16 { + return fail("capabilities 数量超出边界"); + } + let mut ids = HashSet::new(); + for capability in capabilities { + let id = capability["id"].as_str().unwrap_or_default(); + if !safe_id(id) || !ids.insert(id.to_owned()) { + return fail("capability ID 无效或重复"); + } + if !matches!(capability["platform"].as_str(), Some("windows" | "macos")) + || !matches!( + capability["architecture"].as_str(), + Some("x64" | "aarch64" | "x86_64") + ) + { + return fail(format!("{id} capability 平台或架构无效")); + } + localized(&capability["title"], &format!("{id} capability title"))?; + for feature_name in ["fullSkin", "native", "persistence"] { + let feature = object(&capability[feature_name], &format!("{id} {feature_name}"))?; + if !matches!( + feature.get("status").and_then(Value::as_str), + Some("verified" | "build-only" | "unverified") + ) { + return fail(format!("{id} {feature_name} status 无效")); + } + feature + .get("testedVersion") + .and_then(Value::as_str) + .ok_or_else(|| format!("{id} {feature_name} testedVersion 无效"))?; + localized( + feature.get("detail").unwrap_or(&Value::Null), + &format!("{id} {feature_name} detail"), + )?; + } + } + for id in ["windows-x64", "macos-aarch64", "macos-x86-64"] { + if !ids.contains(id) { + return fail(format!("capabilities 缺少 {id}")); + } + } + Ok(()) +} + fn validate_native_theme(value: &str, mode: &str) -> Result<(), String> { let body = value .strip_prefix("codex-theme-v1:") @@ -227,6 +388,7 @@ fn validate_mode( theme: &Value, mode: &str, native_values: &mut HashSet, + release: &ReleaseContract, ) -> Result<(), String> { let record = theme["previews"] .get(mode) @@ -243,31 +405,26 @@ fn validate_mode( || !capture["sha256"].as_str().is_some_and(valid_sha256) || !capture["assetSha256"].as_str().is_some_and(valid_sha256) || !capture["runtimeSha256"].as_str().is_some_and(valid_sha256) - || capture["markerVersion"].as_str() != Some("act-full-skin-v1") + || capture["markerVersion"].as_str() != Some(release.full_skin_format.as_str()) || capture["width"].as_u64() != Some(1440) || capture["height"].as_u64() != Some(810) - || capture["fixture"].as_str() != Some("full-skin-home-v1") - || capture["appVersion"] - .as_str() - .unwrap_or_default() - .is_empty() + || capture["appVersion"].as_str() != Some(release.capture_version.as_str()) + || capture["packageFullName"].as_str() != Some(release.capture_package.as_str()) + || capture["fixture"].as_str() != Some(release.capture_fixture.as_str()) { return fail(format!("{theme_id} {mode} 实机截图记录无效")); } let full_skin = &record["fullSkin"]; let full_skin_asset = full_skin["asset"].as_str().unwrap_or_default(); - if full_skin["format"].as_str() != Some("act-full-skin-v1") + if full_skin["format"].as_str() != Some(release.full_skin_format.as_str()) || !safe_relative_path(full_skin_asset) || full_skin_asset != format!("themes/{theme_id}/assets/background-{mode}.png") || !full_skin["sha256"].as_str().is_some_and(valid_sha256) || full_skin["sha256"] != record["assetSha256"] || full_skin["bytes"].as_u64().is_none() || full_skin["bytes"] != record["assetBytes"] - || full_skin["testedVersion"] - .as_str() - .unwrap_or_default() - .is_empty() + || full_skin["testedVersion"].as_str() != Some(release.capture_version.as_str()) { return fail(format!("{theme_id} {mode} Full Skin 记录无效")); } @@ -303,6 +460,7 @@ fn validate_mode( if native["format"].as_str() != Some("codex-theme-v1") || !safe_relative_path(native_path) || !native["sha256"].as_str().is_some_and(valid_sha256) + || native["testedVersion"].as_str() != Some(release.native_tested_version.as_str()) { return fail(format!("{theme_id} {mode} Native 记录无效")); } @@ -332,6 +490,8 @@ pub fn validate_registry(bytes: &[u8]) -> Result { return fail("Registry 标准不受支持"); } + let release = validate_release(®istry)?; + validate_capabilities(®istry["capabilities"])?; let collections = array(®istry["collections"], "collections")?; let themes = array(®istry["themes"], "themes")?; if collections.is_empty() || themes.is_empty() || themes.len() > 500 { @@ -367,7 +527,7 @@ pub fn validate_registry(bytes: &[u8]) -> Result { return fail(format!("{id} 权利标记无效")); } for mode in MODES { - validate_mode(id, theme, mode, &mut native_values)?; + validate_mode(id, theme, mode, &mut native_values, &release)?; } } Ok(registry) @@ -500,6 +660,11 @@ pub async fn load_remote() -> Result<(Catalog, String), String> { if registry["themes"].as_array().map(Vec::len) != Some(expected_themes) { return fail("远程 Registry 主题数量不匹配"); } + if manifest["release"] != registry["release"] + || manifest["capabilities"] != registry["capabilities"] + { + return fail("远程 Registry 发布元数据不匹配"); + } let registry_text = String::from_utf8(registry_bytes.clone()) .map_err(|error| format!("远程 Registry 不是 UTF-8：{error}"))?; Ok(( @@ -583,6 +748,8 @@ pub fn present_catalog(app: &AppHandle, catalog: &Catalog) -> Result ( + localized(capability.title) + " " + capabilityStatusLabel(capability.fullSkin?.status) + )).join(" · "); +} + function renderAppVersion() { elements.appVersion.textContent = state.appVersion ? `v${state.appVersion}` : "—"; } @@ -780,6 +807,7 @@ function renderLanguage() { if (state.catalog) { normalizeCollectionSelection(); renderCatalogStatus(); + renderCapabilitySummary(); renderStyleTabs(); renderCollectionTabs(); renderFacetOptions(); @@ -806,6 +834,7 @@ function acceptCatalog(payload) { : ordered[0]?.id; normalizeCollectionSelection(); renderCatalogStatus(); + renderCapabilitySummary(); renderStyleTabs(); renderCollectionTabs(); renderFacetOptions(); diff --git a/apps/theme-manager/src/renderer/index.html b/apps/theme-manager/src/renderer/index.html index 7001fdb..d3b0a3f 100644 --- a/apps/theme-manager/src/renderer/index.html +++ b/apps/theme-manager/src/renderer/index.html @@ -182,6 +182,7 @@

— — + —
diff --git a/apps/theme-manager/src/renderer/styles.css b/apps/theme-manager/src/renderer/styles.css index ece47af..65435af 100644 --- a/apps/theme-manager/src/renderer/styles.css +++ b/apps/theme-manager/src/renderer/styles.css @@ -1238,7 +1238,8 @@ kbd { .app-version code, .catalog-version code, -.catalog-version > span:last-child { +.catalog-version > span:last-child, +.capability-summary { overflow: hidden; color: var(--muted); font-size: 7px; @@ -1246,6 +1247,10 @@ kbd { white-space: nowrap; } +.capability-summary { + max-width: 270px; +} + .footer-actions button { border: 0; background: transparent; diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 3a733bf..49f8ae2 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -2,6 +2,16 @@ ## Unreleased +- Added a source-hash-bound original-art review ledger and made generated + `rightsVerified` status depend on its explicit approval rather than the + rights profile alone. A source-art byte change now invalidates the approval. +- Centralized desktop release, capture, updater, and platform-capability + metadata. The generator, Gallery, Theme Manager, desktop configuration, and + release workflow now validate synchronized metadata instead of carrying + independent version or capability claims. +- Changed draft Beta releases to GitHub prereleases and marked the updater + channel unreleased until a signed, cross-platform static feed is separately + published and verified. - Reworked theme generation into a bounded, incremental pipeline with source-art provenance checks, complete render fingerprints, atomic per-theme writes, cache-aware progress, and reproducible benchmark commands. diff --git a/docs/adapters.md b/docs/adapters.md index 3d5beb5..c7c7515 100644 --- a/docs/adapters.md +++ b/docs/adapters.md @@ -16,10 +16,16 @@ The project does not export Dream Skin, HeiGe Skin Studio, CodeDrobe, or other t - background, surface, text, accent, muted, and border tokens; - the exact Codex version used for verification. -The manager downloads only the declared PNG and checks it against the Registry. The fixed repository-owned runtime assigns that verified image to a manager-created, fixed `` layer behind the app root, then applies the materials and tokens above it. It deliberately does not depend on an `app://` blob URL. +The manager downloads only the declared PNG and checks it against the Registry. The fixed repository-owned runtime decodes that verified payload into a manager-owned Blob URL, assigns it to the document root's `--act-art-image` CSS custom property, and applies the materials and tokens above it. Cleanup removes the managed CSS state and revokes that exact Blob URL. It does not create a fixed `` layer, accept a theme-supplied remote URL, or let a theme package replace the runtime. Theme packages cannot override the runtime. They contain no CSS, JavaScript, shell commands, plugins, or remote URLs. +For original source art, `rightsVerified` is emitted only from the separate +`themes/source-art/reviews.json` approval ledger. Each approval is bound to the +theme ID and source PNG SHA-256, so changing source bytes invalidates the +approval until a new review is recorded. The ledger documents review scope; it +does not claim to clear third-party rights automatically. + ### Session lifecycle On Windows, the manager detects the exact Store package, checks whether its executable is already running, and starts it with: diff --git a/docs/art-direction.md b/docs/art-direction.md index c3b2f71..94cbbef 100644 --- a/docs/art-direction.md +++ b/docs/art-direction.md @@ -21,7 +21,11 @@ - 3:2 源图裁成 16:9 后是否仍保留完整主体 - 画面是否达到正式动画背景或主题 Key Art 的完成度 -通过审查后，生成器会从同一源图稳定导出明暗两套 2560×1440 背景和 960×540 预览。模式差异由 token、暗部压缩和安全区叠色共同完成，输出哈希可重复验证。 +原始素材的通过记录写入 `themes/source-art/reviews.json`：每条批准都绑定主题 ID 和 +源 PNG 的 SHA-256，并记录审查角色、日期与检查项。源图字节变化会使批准失效；这份 +记录说明审查范围，但不自动构成第三方权利清算。通过审查后，生成器会从同一源图稳定 +导出明暗两套 2560×1440 背景和 960×540 预览。模式差异由 token、暗部压缩和安全区 +叠色共同完成，输出哈希可重复验证。 ## 不做什么 diff --git a/docs/desktop-manager.md b/docs/desktop-manager.md index 6ffa491..95f5dfd 100644 --- a/docs/desktop-manager.md +++ b/docs/desktop-manager.md @@ -157,9 +157,11 @@ Authenticode；macOS 应用包有 ad-hoc 签名，但没有 Developer ID 或 not macOS release 同时构建 `app,dmg`：DMG 供首次安装，`.app.tar.gz` 与对应 `.sig` 供 Tauri updater 使用。CI 会在 draft 公开前检查两个架构都具备这组更新产物。 -GitHub 的 `releases/latest` 不返回 prerelease。当前 updater endpoint 依赖该 -路径，所以 GitHub `prerelease` 标志保持 `false`，Beta 身份由 alpha 版本、 -Release 标题和正文明确标注。 +版本、发布通道与 updater 状态由 +[`metadata/release.json`](../metadata/release.json) 统一声明。当前 GitHub Beta +Release 使用 `prerelease: true`；Theme Manager 仍将 updater 标为 `unreleased`， +直到独立的签名静态更新清单覆盖全部平台并完成已安装应用验证。draft 或公开 Beta +Release 本身不是应用内更新可用性的证明。 以后面向完全小白用户时，再分别接入 Windows 可信签名和 Apple Developer ID 公证。配置、用户提示和发布步骤见[发布信任与签名](release-signing.md)。 diff --git a/docs/release-metadata.md b/docs/release-metadata.md new file mode 100644 index 0000000..e48885e --- /dev/null +++ b/docs/release-metadata.md @@ -0,0 +1,26 @@ +# Release metadata + +This file is generated from [`metadata/release.json`](../metadata/release.json). Do not edit it by hand. + +- Desktop version: `0.3.2` +- Channel: `beta` +- GitHub prerelease: `true` +- Update-feed state: `unreleased` +- Update endpoint: `https://rwang23.github.io/awesome-codex-theme/updates/stable.json` +- Full Skin format: `act-full-skin-v1` +- Full Skin capture: ChatGPT Beta `26.715.3651.0` / `OpenAI.CodexBeta_26.715.3651.0_x64__2p2nqsd0c76g0` +- Catalog: `68` themes / `136` modes / revision `2026072201` + +## Capability disclosure + +| Target | Full Skin | Native fallback | Persistence | +| --- | --- | --- | --- | +| Windows x64 | verified | verified | verified | +| macOS Apple silicon | build-only | build-only | unverified | +| macOS Intel | build-only | build-only | unverified | + +## Ownership and drift guard + +`metadata/release.json` is authoritative for the desktop version, release channel, updater endpoint, runtime/capture identities, and platform capability claims. `themes/catalog.json` is authoritative for the catalog revision and source-derived theme/mode counts. `npm run metadata:check` fails if synchronized package, Tauri, Cargo, workflow, README, or this document data drift. + +The update endpoint is a stable-feed location. The current Beta status is intentionally `unreleased`; no updater availability claim is made until a signed static feed contains all platform records. diff --git a/docs/release-signing.md b/docs/release-signing.md index 48596c7..613772a 100644 --- a/docs/release-signing.md +++ b/docs/release-signing.md @@ -74,13 +74,16 @@ DESKTOP_RELEASE_READY=true 4. 生成 Tauri updater 产物与 `.sig`； 5. 创建 draft Beta Release。 -当前 updater endpoint 使用 GitHub 的 -`/releases/latest/download/latest.json`。[GitHub 官方规定](https://docs.github.com/en/rest/releases/releases#get-the-latest-release) -`latest` 只返回非 draft、非 prerelease 的 Release，因此工作流把 -`prerelease` 标志设为 `false`。 -Beta 身份由 `0.x` alpha 版本号、Release 标题和正文明确表达。发布前仍保留 -draft，人工检查后才公开。若以后改用独立的 Beta 更新清单，再把 GitHub 的 -prerelease 标志恢复为 `true`。 +发布状态、版本与 updater endpoint 由 +[`metadata/release.json`](../metadata/release.json) 统一声明，并由 +[`docs/release-metadata.md`](release-metadata.md) 生成可读摘要。当前 Beta 的 +GitHub Release 是 `prerelease: true`，但其 updater 状态明确为 `unreleased`： +应用只指向预留的稳定静态清单位置，尚没有公开、签名且覆盖全部平台的更新清单。 + +[Tauri Updater 文档](https://v2.tauri.app/plugin/updater/)允许使用静态 JSON +endpoint，但该清单必须为每个目标平台提供正确的签名更新记录。因此，创建 draft +或公开 Beta Release 本身不等于已经启用应用内更新；在独立静态清单准备并经过 +端到端验证前，Theme Manager 必须继续显示“更新通道尚未发布”。 工作流不再要求 `WINDOWS_CERTIFICATE` 或 Apple 凭据。 @@ -114,14 +117,15 @@ prerelease 标志恢复为 `true`。 - 三个平台资产是否齐全； - updater `.sig` 是否存在； - Apple Silicon 与 Intel 是否都包含 `.app.tar.gz` 和对应 `.sig`； -- `latest.json` 或平台更新元数据是否引用准确资产； +- 如果本次明确发布 updater 静态清单，检查它是否引用准确的全部平台资产；否则确认应用继续显示“更新通道尚未发布”； - 文件名、架构、字节数和 SHA-256； - Release 标题和正文是否明确写出 Beta； -- GitHub `prerelease` 标志是否为 `false`，确保 updater 的 `latest` endpoint 可发现； +- GitHub `prerelease` 标志是否为 `true`，并且没有把 draft Beta 错误宣称为可应用内更新； - 警告文案是否可见。 -检查完成后才能手动发布 Beta Release；GitHub 的 `prerelease` 标志仍保持 -`false`，由版本号、标题与正文表达 Beta 身份。创建 tag、推送和发布 Release +检查完成后才能手动发布 Beta Release；GitHub 的 `prerelease` 标志保持 `true`。 +只有另行完成静态更新清单、签名和已安装应用的 action-after 验证，才能把 +`metadata/release.json` 的 updater 状态改为可用。创建 tag、推送和发布 Release 都是远端状态变更，需要单独执行。 ## 以后补齐平台签名 @@ -150,4 +154,4 @@ prerelease 标志恢复为 `true`。 ## English summary -The public beta requires Tauri updater signatures and an ad-hoc macOS bundle signature, while intentionally deferring Windows Authenticode, Apple Developer ID, and notarization. The updater signature authenticates future in-app updates; the ad-hoc signature checks bundle integrity. Neither establishes operating-system publisher trust. Tagged builds create a draft Beta Release only after updater keys and validation are ready. Because GitHub's `latest` route excludes prereleases, the GitHub prerelease flag remains false while the alpha version, title, and body clearly identify the build as Beta. Release notes must disclose the platform-trust boundary, and agents must never disable SmartScreen or Gatekeeper on the user's behalf. +The public beta requires Tauri updater signatures and an ad-hoc macOS bundle signature, while intentionally deferring Windows Authenticode, Apple Developer ID, and notarization. The updater signature authenticates future in-app updates; the ad-hoc signature checks bundle integrity. Neither establishes operating-system publisher trust. Tagged builds create a draft prerelease Beta only after updater keys and validation are ready. The current Beta deliberately has no public updater feed: a separately signed static endpoint covering every platform must be published and action-after verified before in-app updates are described as available. Release notes must disclose the platform-trust boundary, and agents must never disable SmartScreen or Gatekeeper on the user's behalf. diff --git a/metadata/release.json b/metadata/release.json new file mode 100644 index 0000000..be77870 --- /dev/null +++ b/metadata/release.json @@ -0,0 +1,138 @@ +{ + "schemaVersion": 1, + "product": { + "name": "Awesome Codex Theme", + "repository": "https://github.com/rwang23/awesome-codex-theme", + "releases": "https://github.com/rwang23/awesome-codex-theme/releases" + }, + "desktop": { + "version": "0.3.2", + "channel": "beta", + "githubPrerelease": true, + "updater": { + "status": "unreleased", + "endpoint": "https://rwang23.github.io/awesome-codex-theme/updates/stable.json", + "message": { + "en": "This beta does not consume a public update feed until a signed static feed with every platform record is published.", + "zh-CN": "在发布包含全部平台记录的签名静态更新清单前，此 Beta 不使用公共更新源。" + } + } + }, + "runtime": { + "fullSkinFormat": "act-full-skin-v1", + "implementationVersion": "act-full-skin-runtime-v2", + "sourceArtRenderer": "act-source-art-renderer-v2", + "nativeTestedVersion": "26.715.2305.0" + }, + "capture": { + "channel": "beta", + "appVersion": "26.715.3651.0", + "packageFullName": "OpenAI.CodexBeta_26.715.3651.0_x64__2p2nqsd0c76g0", + "packageFamilyName": "OpenAI.CodexBeta_2p2nqsd0c76g0", + "aumid": "OpenAI.CodexBeta_2p2nqsd0c76g0!App", + "executable": "ChatGPT (Beta).exe", + "fixture": "full-skin-home-v1", + "modelLabel": "5.6 Sol Max" + }, + "capabilities": [ + { + "id": "windows-x64", + "platform": "windows", + "architecture": "x64", + "title": { + "en": "Windows x64", + "zh-CN": "Windows x64" + }, + "fullSkin": { + "status": "verified", + "testedVersion": "26.715.3651.0", + "detail": { + "en": "Verified through the isolated Beta capture and apply/restore workflow.", + "zh-CN": "已通过隔离 Beta 的截图与应用/恢复流程验证。" + } + }, + "native": { + "status": "verified", + "testedVersion": "26.715.2305.0", + "detail": { + "en": "Strict Native v1 payload generation and parser validation are covered.", + "zh-CN": "已覆盖严格 Native v1 载荷生成与解析校验。" + } + }, + "persistence": { + "status": "verified", + "testedVersion": "26.715.3651.0", + "detail": { + "en": "Consent-gated persistent replay and cleanup were verified for the named Beta package.", + "zh-CN": "已针对指定 Beta 包验证经同意的常驻重放与清理。" + } + } + }, + { + "id": "macos-aarch64", + "platform": "macos", + "architecture": "aarch64", + "title": { + "en": "macOS Apple silicon", + "zh-CN": "macOS Apple 芯片" + }, + "fullSkin": { + "status": "build-only", + "testedVersion": "", + "detail": { + "en": "CI validates the bundle structure; physical-app Full Skin verification is pending.", + "zh-CN": "CI 已校验包结构；实体应用的 Full Skin 验证仍待完成。" + } + }, + "native": { + "status": "build-only", + "testedVersion": "", + "detail": { + "en": "The generated Native payload is portable, but no physical macOS import test is recorded.", + "zh-CN": "生成的 Native 载荷可移植，但尚未记录实体 macOS 导入测试。" + } + }, + "persistence": { + "status": "unverified", + "testedVersion": "", + "detail": { + "en": "The implementation rejects unsafe paths; physical-Mac persistence evidence is still pending.", + "zh-CN": "实现会拒绝不安全路径；实体 Mac 常驻证据仍待完成。" + } + } + }, + { + "id": "macos-x86-64", + "platform": "macos", + "architecture": "x86_64", + "title": { + "en": "macOS Intel", + "zh-CN": "macOS Intel" + }, + "fullSkin": { + "status": "build-only", + "testedVersion": "", + "detail": { + "en": "CI validates the bundle structure; physical-app Full Skin verification is pending.", + "zh-CN": "CI 已校验包结构；实体应用的 Full Skin 验证仍待完成。" + } + }, + "native": { + "status": "build-only", + "testedVersion": "", + "detail": { + "en": "The generated Native payload is portable, but no physical macOS import test is recorded.", + "zh-CN": "生成的 Native 载荷可移植，但尚未记录实体 macOS 导入测试。" + } + }, + "persistence": { + "status": "unverified", + "testedVersion": "", + "detail": { + "en": "The implementation rejects unsafe paths; physical-Mac persistence evidence is still pending.", + "zh-CN": "实现会拒绝不安全路径；实体 Mac 常驻证据仍待完成。" + } + } + } + ] +} diff --git a/package.json b/package.json index ca39cc0..7bcc876 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "awesome-codex-theme", - "version": "0.1.0", + "version": "0.3.2", "private": true, "type": "module", "description": "A free declarative Codex Full Skin standard, registry, validator, gallery, and manager.", @@ -9,7 +9,9 @@ "generate": "node scripts/generate-themes.mjs", "generate:check": "node scripts/generate-themes.mjs --check", "generate:benchmark": "node scripts/benchmark-generator.mjs", - "validate": "node scripts/ensure-generated.mjs && node scripts/validate.mjs", + "metadata:sync": "node scripts/sync-release-metadata.mjs --apply", + "metadata:check": "node scripts/sync-release-metadata.mjs --check", + "validate": "npm run metadata:check && node scripts/ensure-generated.mjs && node scripts/validate.mjs", "test": "npm run test:source", "test:source": "node --test tests/source-contract.test.mjs tests/full-skin-runtime.test.mjs", "test:generated": "node scripts/ensure-generated.mjs && node --test tests/repository.test.mjs", diff --git a/schemas/registry.schema.json b/schemas/registry.schema.json index 180c485..acd4d34 100644 --- a/schemas/registry.schema.json +++ b/schemas/registry.schema.json @@ -4,7 +4,7 @@ "title": "Awesome Codex Theme Registry", "type": "object", "additionalProperties": false, - "required": ["schemaVersion", "standard", "generatedBy", "catalogRevision", "collections", "themes"], + "required": ["schemaVersion", "standard", "generatedBy", "catalogRevision", "release", "capabilities", "collections", "themes"], "properties": { "schemaVersion": { "const": 1 @@ -19,6 +19,16 @@ "type": "integer", "minimum": 1 }, + "release": { + "$ref": "#/$defs/release" + }, + "capabilities": { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/capability" + } + }, "collections": { "type": "array", "minItems": 1, @@ -72,6 +82,9 @@ "tagline": { "$ref": "#/$defs/localizedShort" }, + "provenance": { + "$ref": "#/$defs/registryProvenance" + }, "previews": { "type": "object", "additionalProperties": false, @@ -159,6 +172,143 @@ } }, "$defs": { + "localized": { + "type": "object", + "additionalProperties": false, + "required": ["en", "zh-CN"], + "properties": { + "en": { "type": "string", "minLength": 1 }, + "zh-CN": { "type": "string", "minLength": 1 } + } + }, + "release": { + "type": "object", + "additionalProperties": false, + "required": ["product", "desktop", "runtime", "capture"], + "properties": { + "product": { + "type": "object", + "additionalProperties": false, + "required": ["name", "repository", "releases"], + "properties": { + "name": { "type": "string", "minLength": 1 }, + "repository": { "type": "string", "format": "uri" }, + "releases": { "type": "string", "format": "uri" } + } + }, + "desktop": { + "type": "object", + "additionalProperties": false, + "required": ["version", "channel", "updater"], + "properties": { + "version": { "type": "string", "pattern": "^\\d+\\.\\d+\\.\\d+$" }, + "channel": { "enum": ["beta", "stable"] }, + "updater": { + "type": "object", + "additionalProperties": false, + "required": ["status", "message"], + "properties": { + "status": { "enum": ["unreleased", "available"] }, + "message": { "$ref": "#/$defs/localized" } + } + } + } + }, + "runtime": { + "type": "object", + "additionalProperties": false, + "required": ["fullSkinFormat", "implementationVersion", "sourceArtRenderer", "nativeTestedVersion"], + "properties": { + "fullSkinFormat": { "const": "act-full-skin-v1" }, + "implementationVersion": { "type": "string", "minLength": 1 }, + "sourceArtRenderer": { "type": "string", "minLength": 1 }, + "nativeTestedVersion": { "type": "string", "minLength": 1 } + } + }, + "capture": { + "type": "object", + "additionalProperties": false, + "required": ["channel", "appVersion", "packageFullName", "fixture", "modelLabel"], + "properties": { + "channel": { "const": "beta" }, + "appVersion": { "type": "string", "minLength": 1 }, + "packageFullName": { "type": "string", "pattern": "^OpenAI\\.CodexBeta_" }, + "fixture": { "const": "full-skin-home-v1" }, + "modelLabel": { "type": "string", "minLength": 1 } + } + } + } + }, + "capability": { + "type": "object", + "additionalProperties": false, + "required": ["id", "platform", "architecture", "title", "fullSkin", "native", "persistence"], + "properties": { + "id": { "type": "string", "pattern": "^[a-z0-9-]+$" }, + "platform": { "enum": ["windows", "macos"] }, + "architecture": { "enum": ["x64", "aarch64", "x86_64"] }, + "title": { "$ref": "#/$defs/localized" }, + "fullSkin": { "$ref": "#/$defs/capabilityFeature" }, + "native": { "$ref": "#/$defs/capabilityFeature" }, + "persistence": { "$ref": "#/$defs/capabilityFeature" } + } + }, + "capabilityFeature": { + "type": "object", + "additionalProperties": false, + "required": ["status", "testedVersion", "detail"], + "properties": { + "status": { "enum": ["verified", "build-only", "unverified"] }, + "testedVersion": { "type": "string" }, + "detail": { "$ref": "#/$defs/localized" } + } + }, + "registryProvenance": { + "type": "object", + "additionalProperties": false, + "required": ["type", "aiGenerated", "rightsVerified", "generator", "model", "jobId", "sourceArt", "record", "promptRecord", "promptSha256", "sourceSha256"], + "properties": { + "type": { "enum": ["original", "fan-art"] }, + "aiGenerated": { "const": true }, + "rightsVerified": { "type": "boolean" }, + "generator": { "type": "string", "minLength": 1 }, + "model": { "type": "string", "minLength": 1 }, + "jobId": { "type": "string", "minLength": 10 }, + "sourceArt": { "type": "string", "pattern": "^themes/source-art/[a-z0-9-]+\\.png$" }, + "record": { "type": "string", "pattern": "^themes/source-art/[a-z0-9-]+\\.provenance\\.json$" }, + "promptRecord": { "type": "string", "pattern": "^themes/source-art/jobs\\.json#[a-z0-9-]+$" }, + "promptSha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, + "sourceSha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, + "review": { "$ref": "#/$defs/sourceArtReview" } + } + }, + "sourceArtReview": { + "type": "object", + "additionalProperties": false, + "required": ["record", "reviewer", "reviewedAt", "checks", "sourceSha256", "decision", "notes"], + "properties": { + "record": { "type": "string", "pattern": "^themes/source-art/reviews\\.json#[a-z0-9]+(?:-[a-z0-9]+)*$" }, + "reviewer": { "type": "string", "minLength": 3 }, + "reviewedAt": { "type": "string", "format": "date-time" }, + "checks": { "$ref": "#/$defs/sourceArtReviewChecks" }, + "sourceSha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, + "decision": { "const": "approved" }, + "notes": { "type": "string", "minLength": 1, "maxLength": 500 } + } + }, + "sourceArtReviewChecks": { + "type": "object", + "additionalProperties": false, + "required": ["noThirdPartyLogo", "noSignatureOrWatermark", "noUnintendedText", "rightsProfileMatches", "safeAreaReviewed", "lightDarkCaptureReviewed"], + "properties": { + "noThirdPartyLogo": { "const": true }, + "noSignatureOrWatermark": { "const": true }, + "noUnintendedText": { "const": true }, + "rightsProfileMatches": { "const": true }, + "safeAreaReviewed": { "const": true }, + "lightDarkCaptureReviewed": { "const": true } + } + }, "localizedShort": { "type": "object", "additionalProperties": false, diff --git a/schemas/source-art-review.schema.json b/schemas/source-art-review.schema.json new file mode 100644 index 0000000..44cf095 --- /dev/null +++ b/schemas/source-art-review.schema.json @@ -0,0 +1,77 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "https://awesome-codex-theme.dev/schemas/source-art-review.schema.json", + "title": "Awesome Codex Theme source-art review ledger", + "type": "object", + "additionalProperties": false, + "required": ["schemaVersion", "review", "attestations"], + "properties": { + "schemaVersion": { + "const": 1 + }, + "review": { + "type": "object", + "additionalProperties": false, + "required": ["reviewer", "reviewedAt", "checks", "notes"], + "properties": { + "reviewer": { + "type": "string", + "minLength": 3, + "maxLength": 120 + }, + "reviewedAt": { + "type": "string", + "format": "date-time" + }, + "checks": { + "type": "object", + "additionalProperties": false, + "required": [ + "noThirdPartyLogo", + "noSignatureOrWatermark", + "noUnintendedText", + "rightsProfileMatches", + "safeAreaReviewed", + "lightDarkCaptureReviewed" + ], + "properties": { + "noThirdPartyLogo": { "const": true }, + "noSignatureOrWatermark": { "const": true }, + "noUnintendedText": { "const": true }, + "rightsProfileMatches": { "const": true }, + "safeAreaReviewed": { "const": true }, + "lightDarkCaptureReviewed": { "const": true } + } + }, + "notes": { + "type": "string", + "minLength": 1, + "maxLength": 500 + } + } + }, + "attestations": { + "type": "array", + "minItems": 1, + "uniqueItems": true, + "items": { + "type": "object", + "additionalProperties": false, + "required": ["themeId", "sourceSha256", "decision"], + "properties": { + "themeId": { + "type": "string", + "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*$" + }, + "sourceSha256": { + "type": "string", + "pattern": "^[a-f0-9]{64}$" + }, + "decision": { + "const": "approved" + } + } + } + } + } +} diff --git a/schemas/theme-pack.schema.json b/schemas/theme-pack.schema.json index 691b7f2..4b0f5e8 100644 --- a/schemas/theme-pack.schema.json +++ b/schemas/theme-pack.schema.json @@ -168,6 +168,9 @@ "type": "string", "pattern": "^[a-f0-9]{64}$" }, + "review": { + "$ref": "#/$defs/sourceArtReview" + }, "notes": { "type": "string", "maxLength": 500 @@ -274,7 +277,30 @@ } }, "then": { - "required": ["fanArt"] + "required": ["fanArt"], + "properties": { + "provenance": { + "not": { + "required": ["review"] + } + } + } + } + }, + { + "if": { + "properties": { + "rightsProfile": { + "const": "original" + } + } + }, + "then": { + "properties": { + "provenance": { + "required": ["review"] + } + } } } ], @@ -340,6 +366,54 @@ } } }, + "sourceArtReview": { + "type": "object", + "additionalProperties": false, + "required": ["record", "reviewer", "reviewedAt", "checks", "sourceSha256", "decision", "notes"], + "properties": { + "record": { + "type": "string", + "pattern": "^themes/source-art/reviews\\.json#[a-z0-9]+(?:-[a-z0-9]+)*$" + }, + "reviewer": { + "type": "string", + "minLength": 3, + "maxLength": 120 + }, + "reviewedAt": { + "type": "string", + "format": "date-time" + }, + "checks": { + "$ref": "#/$defs/sourceArtReviewChecks" + }, + "sourceSha256": { + "type": "string", + "pattern": "^[a-f0-9]{64}$" + }, + "decision": { + "const": "approved" + }, + "notes": { + "type": "string", + "minLength": 1, + "maxLength": 500 + } + } + }, + "sourceArtReviewChecks": { + "type": "object", + "additionalProperties": false, + "required": ["noThirdPartyLogo", "noSignatureOrWatermark", "noUnintendedText", "rightsProfileMatches", "safeAreaReviewed", "lightDarkCaptureReviewed"], + "properties": { + "noThirdPartyLogo": { "const": true }, + "noSignatureOrWatermark": { "const": true }, + "noUnintendedText": { "const": true }, + "rightsProfileMatches": { "const": true }, + "safeAreaReviewed": { "const": true }, + "lightDarkCaptureReviewed": { "const": true } + } + }, "hex": { "type": "string", "pattern": "^#[0-9A-Fa-f]{6}$" diff --git a/scripts/build.mjs b/scripts/build.mjs index 875d52a..2b378f3 100644 --- a/scripts/build.mjs +++ b/scripts/build.mjs @@ -29,11 +29,14 @@ export async function buildSite(outputPath = DEFAULT_OUTPUT) { const registryBuffer = await readFile(path.join(ROOT, "themes", "registry.json")); const registry = JSON.parse(registryBuffer.toString("utf8")); const registrySha256 = createHash("sha256").update(registryBuffer).digest("hex"); - const tauriConfig = JSON.parse(await readFile( - path.join(ROOT, "apps", "theme-manager", "src-tauri", "tauri.conf.json"), - "utf8", - )); - const desktopVersion = tauriConfig.version; + const desktopVersion = registry.release?.desktop?.version; + if (typeof desktopVersion !== "string" || desktopVersion.length === 0) { + throw new Error("Generated Registry is missing release.desktop.version"); + } + const product = registry.release?.product; + if (!product?.repository || !product?.releases) { + throw new Error("Generated Registry is missing product release metadata"); + } const installer = await buildWindowsInstaller(); await rm(output, { recursive: true, force: true }); @@ -53,8 +56,11 @@ export async function buildSite(outputPath = DEFAULT_OUTPUT) { await Promise.all([ copyRelative("themes/registry.json", output), copyRelative("themes/source-art/jobs.json", output), + copyRelative("themes/source-art/reviews.json", output), + copyRelative("metadata/release.json", output), copyRelative("schemas/theme-pack.schema.json", output), copyRelative("schemas/registry.schema.json", output), + copyRelative("schemas/source-art-review.schema.json", output), copyRelative("docs/assets/theme-manager-windows.png", output), copyRelative("LICENSE", output), copyRelative("NOTICE.md", output), @@ -74,6 +80,7 @@ export async function buildSite(outputPath = DEFAULT_OUTPUT) { schemaVersion: 1, standard: registry.standard, assetsBaseUrl: "https://rwang23.github.io/awesome-codex-theme/", + release: registry.release, registry: { url: "https://rwang23.github.io/awesome-codex-theme/themes/registry.json", sha256: registrySha256, @@ -83,10 +90,13 @@ export async function buildSite(outputPath = DEFAULT_OUTPUT) { modeCount: registry.themes.length * 2, }, desktop: { - repository: "https://github.com/rwang23/awesome-codex-theme", - releases: "https://github.com/rwang23/awesome-codex-theme/releases", + repository: product.repository, + releases: product.releases, currentVersion: desktopVersion, + channel: registry.release.desktop.channel, + updater: registry.release.desktop.updater, }, + capabilities: registry.capabilities, }, null, 2) + "\n", "utf8"), ); diff --git a/scripts/capture-full-skin-screenshots.mjs b/scripts/capture-full-skin-screenshots.mjs index bbb354c..2abcfbf 100644 --- a/scripts/capture-full-skin-screenshots.mjs +++ b/scripts/capture-full-skin-screenshots.mjs @@ -5,6 +5,7 @@ import path from "node:path"; import { fileURLToPath } from "node:url"; import { readPngDimensions } from "./lib/png.mjs"; +import { readReleaseMetadata } from "./lib/release-metadata.mjs"; const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url)); const ROOT = path.resolve(SCRIPT_DIR, ".."); @@ -15,9 +16,10 @@ const REQUESTED_IDS = new Set(splitArgument("--ids")); const REQUESTED_MODES = new Set(splitArgument("--modes")); const WIDTH = 1440; const HEIGHT = 810; -const CAPTURE_VERSION = "26.715.3651.0"; -const CAPTURE_MODEL_LABEL = "5.6 Sol Max"; -const RUNTIME_IMPLEMENTATION = "act-full-skin-runtime-v2"; +const RELEASE = readReleaseMetadata(ROOT); +const CAPTURE_VERSION = RELEASE.capture.appVersion; +const CAPTURE_MODEL_LABEL = RELEASE.capture.modelLabel; +const RUNTIME_IMPLEMENTATION = RELEASE.runtime.implementationVersion; const CAPTURE_ROOT = "screenshots/codex-beta-" + CAPTURE_VERSION; const CAPTURE_DIR = path.join(ROOT, ...CAPTURE_ROOT.split("/")); const MANIFEST_PATH = path.join(CAPTURE_DIR, "manifest.json"); @@ -25,11 +27,11 @@ const RUNTIME_CSS_PATH = path.join(ROOT, "packages", "full-skin", "runtime.css") const RUNTIME_JS_PATH = path.join(ROOT, "packages", "full-skin", "runtime.js"); const TEST_BENCH = Object.freeze({ - packageFamilyName: "OpenAI.CodexBeta_2p2nqsd0c76g0", - packageFullName: "OpenAI.CodexBeta_26.715.3651.0_x64__2p2nqsd0c76g0", + packageFamilyName: RELEASE.capture.packageFamilyName, + packageFullName: RELEASE.capture.packageFullName, version: CAPTURE_VERSION, - aumid: "OpenAI.CodexBeta_2p2nqsd0c76g0!App", - executable: "ChatGPT (Beta).exe", + aumid: RELEASE.capture.aumid, + executable: RELEASE.capture.executable, targetUrlPrefix: "app://", }); diff --git a/scripts/lib/codex-native-theme.mjs b/scripts/lib/codex-native-theme.mjs index 8b7dc1e..55ef308 100644 --- a/scripts/lib/codex-native-theme.mjs +++ b/scripts/lib/codex-native-theme.mjs @@ -1,4 +1,6 @@ -export const CODEX_NATIVE_TESTED_VERSION = "26.715.2305.0"; +import { CODEX_NATIVE_TESTED_VERSION as METADATA_NATIVE_TESTED_VERSION } from "./release-metadata.mjs"; + +export const CODEX_NATIVE_TESTED_VERSION = METADATA_NATIVE_TESTED_VERSION; export const CODEX_THEME_PREFIX = "codex-theme-v1:"; const HEX = /^#[0-9A-Fa-f]{6}$/; diff --git a/scripts/lib/release-metadata.mjs b/scripts/lib/release-metadata.mjs new file mode 100644 index 0000000..3e546a8 --- /dev/null +++ b/scripts/lib/release-metadata.mjs @@ -0,0 +1,134 @@ +import { readFileSync } from "node:fs"; +import path from "node:path"; +import { fileURLToPath } from "node:url"; + +const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url)); +export const RELEASE_METADATA_PATH = "metadata/release.json"; +export const REPOSITORY_ROOT = path.resolve(SCRIPT_DIR, "..", ".."); +const SEMVER = /^\d+\.\d+\.\d+$/; +const SHA256 = /^[a-f0-9]{64}$/; +const CAPABILITY_STATUS = new Set(["verified", "build-only", "unverified"]); + +function fail(message) { + throw new Error("Release metadata is invalid: " + message); +} + +function object(value, label) { + if (!value || typeof value !== "object" || Array.isArray(value)) fail(label + " must be an object"); + return value; +} + +function text(value, label, { allowEmpty = false } = {}) { + if (typeof value !== "string" || (!allowEmpty && value.trim() === "")) fail(label + " must be a non-empty string"); + return value; +} + +function localized(value, label) { + const record = object(value, label); + text(record.en, label + ".en"); + text(record["zh-CN"], label + ".zh-CN"); + return record; +} + +function capability(value, index) { + const record = object(value, "capabilities[" + index + "]"); + text(record.id, "capabilities[" + index + "].id"); + if (!["windows", "macos"].includes(record.platform)) fail("capabilities[" + index + "].platform is unsupported"); + if (!["x64", "aarch64", "x86_64"].includes(record.architecture)) fail("capabilities[" + index + "].architecture is unsupported"); + localized(record.title, "capabilities[" + index + "].title"); + for (const key of ["fullSkin", "native", "persistence"]) { + const feature = object(record[key], "capabilities[" + index + "]." + key); + if (!CAPABILITY_STATUS.has(feature.status)) fail("capabilities[" + index + "]." + key + ".status is unsupported"); + text(feature.testedVersion ?? "", "capabilities[" + index + "]." + key + ".testedVersion", { allowEmpty: true }); + localized(feature.detail, "capabilities[" + index + "]." + key + ".detail"); + } + return record; +} + +export function validateReleaseMetadata(value) { + const metadata = object(value, "root"); + if (metadata.schemaVersion !== 1) fail("schemaVersion must be 1"); + const product = object(metadata.product, "product"); + text(product.name, "product.name"); + for (const key of ["repository", "releases"]) { + const url = text(product[key], "product." + key); + if (!url.startsWith("https://")) fail("product." + key + " must use HTTPS"); + } + const desktop = object(metadata.desktop, "desktop"); + if (!SEMVER.test(text(desktop.version, "desktop.version"))) fail("desktop.version must be semver"); + if (!["beta", "stable"].includes(desktop.channel)) fail("desktop.channel is unsupported"); + if (typeof desktop.githubPrerelease !== "boolean") fail("desktop.githubPrerelease must be boolean"); + const updater = object(desktop.updater, "desktop.updater"); + if (!["unreleased", "available"].includes(updater.status)) fail("desktop.updater.status is unsupported"); + const endpoint = text(updater.endpoint, "desktop.updater.endpoint"); + if (!endpoint.startsWith("https://")) fail("desktop.updater.endpoint must use HTTPS"); + localized(updater.message, "desktop.updater.message"); + const runtime = object(metadata.runtime, "runtime"); + text(runtime.fullSkinFormat, "runtime.fullSkinFormat"); + text(runtime.implementationVersion, "runtime.implementationVersion"); + text(runtime.sourceArtRenderer, "runtime.sourceArtRenderer"); + text(runtime.nativeTestedVersion, "runtime.nativeTestedVersion"); + const capture = object(metadata.capture, "capture"); + if (capture.channel !== "beta") fail("capture.channel must be beta for the recorded capture"); + text(capture.appVersion, "capture.appVersion"); + const packageName = text(capture.packageFullName, "capture.packageFullName"); + if (!packageName.startsWith("OpenAI.CodexBeta_")) fail("capture.packageFullName must identify Codex Beta"); + const packageFamilyName = text(capture.packageFamilyName, "capture.packageFamilyName"); + if (!packageFamilyName.startsWith("OpenAI.CodexBeta_")) fail("capture.packageFamilyName must identify Codex Beta"); + if (!packageName.endsWith("_" + packageFamilyName.split("_").at(-1))) { + fail("capture.packageFullName must belong to capture.packageFamilyName"); + } + const aumid = text(capture.aumid, "capture.aumid"); + if (!aumid.startsWith(packageFamilyName + "!")) fail("capture.aumid must belong to capture.packageFamilyName"); + text(capture.executable, "capture.executable"); + text(capture.fixture, "capture.fixture"); + text(capture.modelLabel, "capture.modelLabel"); + if (!Array.isArray(metadata.capabilities) || metadata.capabilities.length === 0) fail("capabilities must be a non-empty array"); + const ids = new Set(); + metadata.capabilities.forEach((entry, index) => { + const parsed = capability(entry, index); + if (ids.has(parsed.id)) fail("capabilities contains duplicate id " + parsed.id); + ids.add(parsed.id); + }); + if (!ids.has("windows-x64") || !ids.has("macos-aarch64") || !ids.has("macos-x86-64")) { + fail("capabilities must disclose Windows x64 and both macOS architectures"); + } + return metadata; +} + +export function readReleaseMetadata(root = REPOSITORY_ROOT) { + const source = path.join(root, ...RELEASE_METADATA_PATH.split("/")); + return validateReleaseMetadata(JSON.parse(readFileSync(source, "utf8"))); +} + +export function releaseForRegistry(metadata) { + return { + product: metadata.product, + desktop: { + version: metadata.desktop.version, + channel: metadata.desktop.channel, + updater: { + status: metadata.desktop.updater.status, + message: metadata.desktop.updater.message, + }, + }, + runtime: metadata.runtime, + capture: { + channel: metadata.capture.channel, + appVersion: metadata.capture.appVersion, + packageFullName: metadata.capture.packageFullName, + fixture: metadata.capture.fixture, + modelLabel: metadata.capture.modelLabel, + }, + }; +} + +export const RELEASE_METADATA = readReleaseMetadata(); +export const CODEX_NATIVE_TESTED_VERSION = RELEASE_METADATA.runtime.nativeTestedVersion; +export const FULL_SKIN_TESTED_VERSION = RELEASE_METADATA.capture.appVersion; +export const FULL_SKIN_FORMAT = RELEASE_METADATA.runtime.fullSkinFormat; +export const SOURCE_ART_RENDERER_VERSION = RELEASE_METADATA.runtime.sourceArtRenderer; + +export function isSha256(value) { + return typeof value === "string" && SHA256.test(value); +} diff --git a/scripts/lib/source-art-contract.mjs b/scripts/lib/source-art-contract.mjs index 51b7e75..f612705 100644 --- a/scripts/lib/source-art-contract.mjs +++ b/scripts/lib/source-art-contract.mjs @@ -1,6 +1,8 @@ import { createHash } from "node:crypto"; -export const SOURCE_ART_RENDERER_ID = "act-source-art-renderer-v2"; +import { SOURCE_ART_RENDERER_VERSION } from "./release-metadata.mjs"; + +export const SOURCE_ART_RENDERER_ID = SOURCE_ART_RENDERER_VERSION; // Every value that changes the deterministic source-art result belongs here. // The generator stores this contract in its render fingerprints so a later diff --git a/scripts/lib/source-art-reviews.mjs b/scripts/lib/source-art-reviews.mjs new file mode 100644 index 0000000..2dabf9c --- /dev/null +++ b/scripts/lib/source-art-reviews.mjs @@ -0,0 +1,87 @@ +import { readFile } from "node:fs/promises"; +import path from "node:path"; + +import { isSha256 } from "./release-metadata.mjs"; + +export const SOURCE_ART_REVIEWS_PATH = "themes/source-art/reviews.json"; +const REQUIRED_CHECKS = [ + "noThirdPartyLogo", + "noSignatureOrWatermark", + "noUnintendedText", + "rightsProfileMatches", + "safeAreaReviewed", + "lightDarkCaptureReviewed", +]; + +function fail(message) { + throw new Error("Source-art review ledger is invalid: " + message); +} + +function original(theme) { + return (theme.rightsProfile || "original") === "original"; +} + +export function validateSourceArtReviewLedger(catalog, ledger) { + if (!ledger || typeof ledger !== "object" || Array.isArray(ledger)) fail("root must be an object"); + if (ledger.schemaVersion !== 1) fail("schemaVersion must be 1"); + const review = ledger.review; + if (!review || typeof review !== "object" || Array.isArray(review)) fail("review must be an object"); + if (typeof review.reviewer !== "string" || review.reviewer.trim().length < 3) fail("reviewer is missing"); + if (typeof review.reviewedAt !== "string" || Number.isNaN(Date.parse(review.reviewedAt))) fail("reviewedAt is invalid"); + if (typeof review.notes !== "string" || review.notes.trim().length === 0) fail("notes are missing"); + if (!review.checks || typeof review.checks !== "object" || Array.isArray(review.checks)) fail("checks must be an object"); + for (const key of REQUIRED_CHECKS) { + if (review.checks[key] !== true) fail("checks." + key + " must be true"); + } + if (Object.keys(review.checks).length !== REQUIRED_CHECKS.length) fail("checks must not contain undeclared fields"); + if (!Array.isArray(ledger.attestations)) fail("attestations must be an array"); + + const themes = new Map((catalog.themes || []).map((theme) => [theme.id, theme])); + const records = new Map(); + for (const attestation of ledger.attestations) { + if (!attestation || typeof attestation !== "object" || Array.isArray(attestation)) fail("attestation must be an object"); + if (Object.keys(attestation).sort().join(",") !== "decision,sourceSha256,themeId") fail("attestation fields are invalid"); + const theme = themes.get(attestation.themeId); + if (!theme) fail("attestation references an unknown theme " + attestation.themeId); + if (!original(theme)) fail("fan-art theme " + attestation.themeId + " must not receive original-art approval"); + if (!isSha256(attestation.sourceSha256)) fail(attestation.themeId + " has an invalid source hash"); + if (attestation.decision !== "approved") fail(attestation.themeId + " must have an approved decision"); + if (records.has(attestation.themeId)) fail("duplicate attestation for " + attestation.themeId); + records.set(attestation.themeId, attestation); + } + for (const theme of themes.values()) { + if (original(theme) !== records.has(theme.id)) { + fail(original(theme) + ? "original theme " + theme.id + " is missing an approval" + : "fan-art theme " + theme.id + " must not receive an approval"); + } + } + return { review, records }; +} + +export async function loadSourceArtReviews(root, catalog) { + const source = path.join(root, ...SOURCE_ART_REVIEWS_PATH.split("/")); + const ledger = JSON.parse(await readFile(source, "utf8")); + return validateSourceArtReviewLedger(catalog, ledger); +} + +export function resolveSourceArtReview(theme, sourceProvenance, reviews) { + if (!original(theme)) { + if (reviews.records.has(theme.id)) fail("fan-art theme " + theme.id + " must not have an original-art approval"); + return null; + } + const attestation = reviews.records.get(theme.id); + if (!attestation) fail("original theme " + theme.id + " is missing an approval"); + if (attestation.sourceSha256 !== sourceProvenance.sourceSha256) { + fail("approval source hash does not match provenance for " + theme.id); + } + return { + record: SOURCE_ART_REVIEWS_PATH + "#" + theme.id, + reviewer: reviews.review.reviewer, + reviewedAt: reviews.review.reviewedAt, + checks: reviews.review.checks, + sourceSha256: attestation.sourceSha256, + decision: attestation.decision, + notes: reviews.review.notes, + }; +} diff --git a/scripts/lib/theme-generator.mjs b/scripts/lib/theme-generator.mjs index e49afa3..5b3fd6c 100644 --- a/scripts/lib/theme-generator.mjs +++ b/scripts/lib/theme-generator.mjs @@ -7,21 +7,23 @@ import { Worker } from "node:worker_threads"; import { readPngDimensions } from "./png.mjs"; import { renderFingerprint, SOURCE_ART_RENDERER_ID } from "./source-art-contract.mjs"; import { createZip } from "./zip.mjs"; +import { createCodexNativeTheme, serializeCodexNativeTheme } from "./codex-native-theme.mjs"; import { - CODEX_NATIVE_TESTED_VERSION, - createCodexNativeTheme, - serializeCodexNativeTheme, -} from "./codex-native-theme.mjs"; + FULL_SKIN_FORMAT, + readReleaseMetadata, + releaseForRegistry, +} from "./release-metadata.mjs"; +import { + loadSourceArtReviews, + resolveSourceArtReview, +} from "./source-art-reviews.mjs"; const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url)); export const REPOSITORY_ROOT = path.resolve(SCRIPT_DIR, "..", ".."); const WORKER_URL = new URL("../generate-theme-worker.mjs", import.meta.url); const CATALOG_PATH = "themes/catalog.json"; const REGISTRY_PATH = "themes/registry.json"; -const CAPTURE_MANIFEST_PATH = "screenshots/codex-beta-26.715.3651.0/manifest.json"; const GENERATOR_ID = "act-theme-generator-v5.0"; -const FULL_SKIN_FORMAT = "act-full-skin-v1"; -const FULL_SKIN_TESTED_VERSION = "26.715.3651.0"; const FAN_ART_LICENSE_ID = "LicenseRef-ACT-Fan-Art-Notice"; const FAN_ART_POLICY_URL = "https://github.com/rwang23/awesome-codex-theme/blob/main/docs/fan-art-policy.md"; const OUTPUTS = Object.freeze([ @@ -73,7 +75,7 @@ function legacyRenderFingerprint(theme, mode, sourceProvenance, width, height) { }), "utf8")); } -function rightsFor(theme) { +function rightsFor(theme, sourceReview) { const fanArt = theme.rightsProfile === "fan-art"; return fanArt ? { @@ -95,8 +97,8 @@ function rightsFor(theme) { url: "https://creativecommons.org/publicdomain/zero/1.0/", }, provenanceType: "original", - rightsVerified: true, - notes: "Original AI-generated source art, reviewed for third-party characters, logos, signatures, text, screenshots, and franchise assets.", + rightsVerified: sourceReview?.decision === "approved", + notes: "Original AI-generated source art with an approved source-hash-bound review record. This record does not create a claim of third-party rights clearance.", }; } @@ -107,8 +109,8 @@ function nativeThemeBuffer(theme, mode) { ); } -function manifestFor(theme, assets, previews, nativeThemes, sourceProvenance) { - const rights = rightsFor(theme); +function manifestFor(theme, assets, previews, nativeThemes, sourceProvenance, sourceReview, release) { + const rights = rightsFor(theme, sourceReview); const mode = (name) => ({ asset: "assets/background-" + name + ".png", preview: { @@ -138,7 +140,7 @@ function manifestFor(theme, assets, previews, nativeThemes, sourceProvenance) { path: "native/" + name + ".codex-theme.txt", sha256: sha256(nativeThemes[name]), bytes: nativeThemes[name].length, - testedVersion: CODEX_NATIVE_TESTED_VERSION, + testedVersion: release.runtime.nativeTestedVersion, }, }); @@ -168,13 +170,14 @@ function manifestFor(theme, assets, previews, nativeThemes, sourceProvenance) { jobId: sourceProvenance.jobId, promptSha256: sourceProvenance.promptSha256, sourceSha256: sourceProvenance.sourceSha256, + ...(sourceReview ? { review: sourceReview } : {}), notes: rights.notes, }, compatibility: { - codexDesktopTested: FULL_SKIN_TESTED_VERSION, + codexDesktopTested: release.capture.appVersion, engines: [ - { id: "codex-full-skin", coverage: "full-skin-v1", testedVersion: FULL_SKIN_TESTED_VERSION }, - { id: "codex-native", coverage: "native-theme-v1", testedVersion: CODEX_NATIVE_TESTED_VERSION }, + { id: "codex-full-skin", coverage: "full-skin-v1", testedVersion: release.capture.appVersion }, + { id: "codex-native", coverage: "native-theme-v1", testedVersion: release.runtime.nativeTestedVersion }, ], }, motion: { @@ -193,13 +196,17 @@ async function readJson(root, relativePath) { return JSON.parse(await readFile(path.join(root, ...relativePath.split("/")), "utf8")); } -async function loadCaptureContext(root) { +async function loadCaptureContext(root, release) { + const captureManifestPath = "screenshots/codex-beta-" + release.capture.appVersion + "/manifest.json"; try { - const manifest = await readJson(root, CAPTURE_MANIFEST_PATH); + const manifest = await readJson(root, captureManifestPath); if (manifest.schemaVersion !== "act-full-skin-capture-manifest-v1" || manifest.status !== "complete" || manifest.runtime?.format !== FULL_SKIN_FORMAT - || manifest.runtime?.removedAfterCapture !== true) { + || manifest.runtime?.removedAfterCapture !== true + || manifest.testBench?.version !== release.capture.appVersion + || manifest.testBench?.packageFullName !== release.capture.packageFullName + || manifest.fixture?.id !== release.capture.fixture) { return { manifest: null, index: new Map() }; } return { @@ -374,8 +381,8 @@ function createThemeOutputs(theme, assets, previews, nativeThemes, manifest, man ]; } -function registryRecordFor(theme, manifest, manifestBuffer, canonicalPackage, previews, assets, nativeThemes, sourceProvenance, captureContext) { - const rights = rightsFor(theme); +function registryRecordFor(theme, manifest, manifestBuffer, canonicalPackage, previews, assets, nativeThemes, sourceProvenance, sourceReview, captureContext, release) { + const rights = rightsFor(theme, sourceReview); const themeRoot = "themes/" + theme.id; const modeRecords = {}; for (const mode of MODES) { @@ -394,14 +401,14 @@ function registryRecordFor(theme, manifest, manifestBuffer, canonicalPackage, pr bytes: assets[mode].length, art: manifest.modes[mode].art, tokens: manifest.modes[mode].tokens, - testedVersion: FULL_SKIN_TESTED_VERSION, + testedVersion: release.capture.appVersion, }, nativeTheme: { format: "codex-theme-v1", path: "packages/native/" + theme.id + "-" + mode + ".codex-theme.txt", sha256: sha256(nativeThemes[mode]), bytes: nativeThemes[mode].length, - testedVersion: CODEX_NATIVE_TESTED_VERSION, + testedVersion: release.runtime.nativeTestedVersion, value: nativeThemes[mode].toString("utf8").trim(), }, ...(capture ? { @@ -456,6 +463,7 @@ function registryRecordFor(theme, manifest, manifestBuffer, canonicalPackage, pr promptRecord: "themes/source-art/jobs.json#" + theme.id, promptSha256: sourceProvenance.promptSha256, sourceSha256: sourceProvenance.sourceSha256, + ...(sourceReview ? { review: sourceReview } : {}), }, motion: { default: "reduced", @@ -473,14 +481,14 @@ function registryRecordFor(theme, manifest, manifestBuffer, canonicalPackage, pr "codex-full-skin": { coverage: "full-skin-v1", format: FULL_SKIN_FORMAT, - testedVersion: FULL_SKIN_TESTED_VERSION, + testedVersion: release.capture.appVersion, delivery: "Awesome Codex Theme Manager", limitations: ["runtime-session", "no-layout-replacement"], }, "codex-native": { coverage: "native-theme-v1", format: "codex-theme-v1", - testedVersion: CODEX_NATIVE_TESTED_VERSION, + testedVersion: release.runtime.nativeTestedVersion, importPath: "Settings > Appearance > Import", limitations: ["background-image"], }, @@ -539,7 +547,7 @@ async function runBounded(items, concurrency, worker) { return results; } -async function generateTheme({ root, theme, sourceProvenance, existingManifest, existingRecord, force, render, captureContext }) { +async function generateTheme({ root, theme, sourceProvenance, sourceReview, existingManifest, existingRecord, force, render, captureContext, release }) { const assets = {}; const previews = {}; const missing = []; @@ -587,7 +595,7 @@ async function generateTheme({ root, theme, sourceProvenance, existingManifest, light: nativeThemeBuffer(theme, "light"), dark: nativeThemeBuffer(theme, "dark"), }; - const manifest = manifestFor(theme, assets, previews, nativeThemes, sourceProvenance); + const manifest = manifestFor(theme, assets, previews, nativeThemes, sourceProvenance, sourceReview, release); const manifestBuffer = jsonBuffer(manifest); const canonicalPackage = createZip([ { name: "manifest.json", data: manifestBuffer }, @@ -610,7 +618,9 @@ async function generateTheme({ root, theme, sourceProvenance, existingManifest, assets, nativeThemes, sourceProvenance, + sourceReview, captureContext, + release, ), }; } @@ -631,12 +641,14 @@ function hasCurrentRegistryRecord(record) { )); } -function createRegistry(catalog, records) { +function createRegistry(catalog, records, release) { return { schemaVersion: 1, standard: "act-theme-pack-v1", generatedBy: GENERATOR_ID, catalogRevision: catalog.catalogRevision, + release: releaseForRegistry(release), + capabilities: release.capabilities, collections: catalog.collections.map((collection) => ({ ...collection, themeCount: catalog.themes.filter((theme) => theme.collection === collection.id).length, @@ -754,7 +766,10 @@ export async function generateRepository({ } } - const captureContext = await loadCaptureContext(root); + const release = readReleaseMetadata(root); + const sourceReviews = await loadSourceArtReviews(root, catalog); + + const captureContext = await loadCaptureContext(root, release); const records = new Map(existingRecords); const drift = []; const stats = { @@ -776,15 +791,18 @@ export async function generateRepository({ try { const generated = await runBounded(themes, normalized.concurrency, async (theme) => { const sourceProvenance = await readVerifiedSourceProvenance(root, theme.id); + const sourceReview = resolveSourceArtReview(theme, sourceProvenance, sourceReviews); const result = await generateTheme({ root, theme, sourceProvenance, + sourceReview, existingManifest: await readExistingManifest(root, theme.id), existingRecord: existingRecords.get(theme.id), force: normalized.force, render, captureContext, + release, }); for (const output of result.outputs) { await reconcileFile(root, output, normalized.check, drift, collectOutput); @@ -798,7 +816,7 @@ export async function generateRepository({ }); void generated; - const registry = createRegistry(catalog, records); + const registry = createRegistry(catalog, records, release); await reconcileFile( root, { relativePath: REGISTRY_PATH, data: jsonBuffer(registry) }, diff --git a/scripts/prepare-desktop.mjs b/scripts/prepare-desktop.mjs index 970a802..d2b22a5 100644 --- a/scripts/prepare-desktop.mjs +++ b/scripts/prepare-desktop.mjs @@ -61,7 +61,7 @@ function renderIcon(size = 1024) { async function main() { const registry = JSON.parse(await readFile(REGISTRY, "utf8")); - if (registry.standard !== "act-theme-pack-v1" || registry.themes?.length !== 68) { + if (registry.standard !== "act-theme-pack-v1" || !Array.isArray(registry.themes) || registry.themes.length === 0) { throw new Error("Generate and validate themes before preparing the desktop app"); } await mkdir(path.dirname(ICON), { recursive: true }); diff --git a/scripts/smoke-theme-manager.mjs b/scripts/smoke-theme-manager.mjs index 371f2af..21eb3d2 100644 --- a/scripts/smoke-theme-manager.mjs +++ b/scripts/smoke-theme-manager.mjs @@ -4,8 +4,11 @@ import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises"; import path from "node:path"; import { fileURLToPath } from "node:url"; +import { readReleaseMetadata } from "./lib/release-metadata.mjs"; + const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url)); const ROOT = path.resolve(SCRIPT_DIR, ".."); +const RELEASE = readReleaseMetadata(ROOT); const APPLY = process.argv.includes("--apply"); const DEBUG = process.argv.includes("--debug"); const UI_ONLY = process.argv.includes("--ui-only"); @@ -32,7 +35,7 @@ const MANAGER_EXE = MANAGER_EXECUTABLE "awesome-codex-theme.exe", ); const SCREENSHOT_PATH = path.join(ROOT, "docs", "assets", "theme-manager-windows.png"); -const BETA_PACKAGE = "OpenAI.CodexBeta_26.715.3651.0_x64__2p2nqsd0c76g0"; +const BETA_PACKAGE = RELEASE.capture.packageFullName; function argumentValue(name) { const exact = process.argv.find((value) => value.startsWith(name + "=")); diff --git a/scripts/sync-release-metadata.mjs b/scripts/sync-release-metadata.mjs new file mode 100644 index 0000000..3ec78cd --- /dev/null +++ b/scripts/sync-release-metadata.mjs @@ -0,0 +1,275 @@ +import { readFile, writeFile } from "node:fs/promises"; +import path from "node:path"; +import { fileURLToPath } from "node:url"; + +import { readReleaseMetadata } from "./lib/release-metadata.mjs"; + +const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url)); +const ROOT = path.resolve(SCRIPT_DIR, ".."); + +function usage() { + return "Usage: node scripts/sync-release-metadata.mjs --check|--apply"; +} + +function parseOptions(argv) { + if (argv.length !== 1 || !["--check", "--apply"].includes(argv[0])) { + throw new Error(usage()); + } + return { check: argv[0] === "--check" }; +} + +function jsonText(value) { + return JSON.stringify(value, null, 2) + "\n"; +} + +function replaceRequired(value, pattern, replacement, label) { + if (!pattern.test(value)) throw new Error("Release metadata sync could not locate " + label); + return value.replace(pattern, replacement); +} + +function releaseChannelLabel(channel) { + return channel.slice(0, 1).toUpperCase() + channel.slice(1); +} + +function catalogSummary(catalog) { + if (!Array.isArray(catalog.themes) || catalog.themes.length === 0) { + throw new Error("Release metadata sync requires a non-empty themes/catalog.json"); + } + if (!Number.isInteger(catalog.catalogRevision) || catalog.catalogRevision < 1) { + throw new Error("Release metadata sync requires a positive catalog revision"); + } + const modeCount = catalog.themes.reduce((count, theme) => ( + count + ["light", "dark"].filter((mode) => theme && typeof theme[mode] === "object").length + ), 0); + if (modeCount === 0) throw new Error("Release metadata sync could not derive catalog modes"); + return { themeCount: catalog.themes.length, modeCount, catalogRevision: catalog.catalogRevision }; +} + +function statusLabel(status, language) { + const labels = language === "zh-CN" + ? { verified: "已验证", "build-only": "仅构建", unverified: "未验证" } + : { verified: "Verified", "build-only": "Build-only", unverified: "Unverified" }; + return labels[status]; +} + +function featureStatus(feature, language) { + const status = statusLabel(feature.status, language); + return feature.testedVersion ? status + " (`" + feature.testedVersion + "`)" : status; +} + +function capabilityMatrix(metadata, summary, language) { + const chinese = language === "zh-CN"; + const rows = metadata.capabilities.map((capability) => ( + "| " + capability.title[language] + " | " + + featureStatus(capability.fullSkin, language) + " | " + + featureStatus(capability.native, language) + " | " + + featureStatus(capability.persistence, language) + " |" + )); + return [ + chinese ? "## 当前平台能力矩阵" : "## Current platform capability matrix", + "", + chinese + ? "此表由 [`metadata/release.json`](metadata/release.json) 生成，并由 `npm run metadata:check` 校验。" + : "This table is generated from [`metadata/release.json`](metadata/release.json) and checked by `npm run metadata:check`.", + "", + chinese + ? "| 目标 | Full Skin | Native 回退 | 常驻 |" + : "| Target | Full Skin | Native fallback | Persistence |", + "| --- | --- | --- | --- |", + ...rows, + "", + chinese + ? "当前 Catalog 有 **" + summary.themeCount + " 套主题**、**" + summary.modeCount + " 个模式**（修订 `" + summary.catalogRevision + "`）。" + : "The current catalog has **" + summary.themeCount + " themes** and **" + summary.modeCount + " modes** (revision `" + summary.catalogRevision + "`).", + chinese + ? "当前 `" + metadata.desktop.channel + "` 通道更新源状态为 `" + metadata.desktop.updater.status + "`；在签名静态清单覆盖全部平台前，不宣称应用内更新可用。" + : "The current `" + metadata.desktop.channel + "` update-feed status is `" + metadata.desktop.updater.status + "`; in-app updates are not claimed until a signed static feed covers every platform.", + ].join("\n"); +} + +function replaceMarkerBlock(value, content, label) { + const start = ""; + const end = ""; + const startIndex = value.indexOf(start); + const endIndex = value.indexOf(end); + if (startIndex < 0 || endIndex < 0 || endIndex < startIndex) { + throw new Error("Release metadata sync could not locate " + label + " markers"); + } + return value.slice(0, startIndex) + start + "\n" + content + "\n" + end + value.slice(endIndex + end.length); +} + +function readmeWithMetadata(value, metadata, summary, language) { + const badge = language === "zh-CN" + ? "\""" + : "\"""; + const badgePattern = language === "zh-CN" + ? /\d+ 套主题/ + : /\d+ themes/; + if (!badgePattern.test(value)) throw new Error("Release metadata sync could not locate " + language + " theme-count badge"); + return replaceMarkerBlock(value.replace(badgePattern, badge), capabilityMatrix(metadata, summary, language), language + " README capability matrix"); +} + +function releaseMetadataDocument(metadata, summary) { + const rows = metadata.capabilities.map((capability) => ( + "| " + capability.title.en + " | " + + capability.fullSkin.status + " | " + + capability.native.status + " | " + + capability.persistence.status + " |" + )).join("\n"); + return [ + "# Release metadata", + "", + "This file is generated from [`metadata/release.json`](../metadata/release.json). Do not edit it by hand.", + "", + "- Desktop version: `" + metadata.desktop.version + "`", + "- Channel: `" + metadata.desktop.channel + "`", + "- GitHub prerelease: `" + metadata.desktop.githubPrerelease + "`", + "- Update-feed state: `" + metadata.desktop.updater.status + "`", + "- Update endpoint: `" + metadata.desktop.updater.endpoint + "`", + "- Full Skin format: `" + metadata.runtime.fullSkinFormat + "`", + "- Full Skin capture: ChatGPT Beta `" + metadata.capture.appVersion + "` / `" + metadata.capture.packageFullName + "`", + "- Catalog: `" + summary.themeCount + "` themes / `" + summary.modeCount + "` modes / revision `" + summary.catalogRevision + "`", + "", + "## Capability disclosure", + "", + "| Target | Full Skin | Native fallback | Persistence |", + "| --- | --- | --- | --- |", + rows, + "", + "## Ownership and drift guard", + "", + "`metadata/release.json` is authoritative for the desktop version, release channel, updater endpoint, runtime/capture identities, and platform capability claims. `themes/catalog.json` is authoritative for the catalog revision and source-derived theme/mode counts. `npm run metadata:check` fails if synchronized package, Tauri, Cargo, workflow, README, or this document data drift.", + "", + "The update endpoint is a stable-feed location. The current Beta status is intentionally `unreleased`; no updater availability claim is made until a signed static feed contains all platform records.", + "", + ].join("\n"); +} + +async function expectedOutputs(metadata) { + const rootPackagePath = path.join(ROOT, "package.json"); + const managerPackagePath = path.join(ROOT, "apps", "theme-manager", "package.json"); + const tauriConfigPath = path.join(ROOT, "apps", "theme-manager", "src-tauri", "tauri.conf.json"); + const cargoTomlPath = path.join(ROOT, "apps", "theme-manager", "src-tauri", "Cargo.toml"); + const cargoLockPath = path.join(ROOT, "apps", "theme-manager", "src-tauri", "Cargo.lock"); + const workflowPath = path.join(ROOT, ".github", "workflows", "desktop.yml"); + const catalogPath = path.join(ROOT, "themes", "catalog.json"); + const readmePath = path.join(ROOT, "README.md"); + const chineseReadmePath = path.join(ROOT, "README.zh-CN.md"); + const current = await Promise.all([ + readFile(rootPackagePath, "utf8"), + readFile(managerPackagePath, "utf8"), + readFile(tauriConfigPath, "utf8"), + readFile(cargoTomlPath, "utf8"), + readFile(cargoLockPath, "utf8"), + readFile(workflowPath, "utf8"), + readFile(catalogPath, "utf8"), + readFile(readmePath, "utf8"), + readFile(chineseReadmePath, "utf8"), + ]); + const rootPackage = JSON.parse(current[0]); + const managerPackage = JSON.parse(current[1]); + const tauriConfig = JSON.parse(current[2]); + const summary = catalogSummary(JSON.parse(current[6])); + rootPackage.version = metadata.desktop.version; + managerPackage.version = metadata.desktop.version; + tauriConfig.version = metadata.desktop.version; + tauriConfig.plugins ??= {}; + tauriConfig.plugins.updater ??= {}; + tauriConfig.plugins.updater.endpoints = [metadata.desktop.updater.endpoint]; + return [ + { path: rootPackagePath, relative: "package.json", data: jsonText(rootPackage) }, + { path: managerPackagePath, relative: "apps/theme-manager/package.json", data: jsonText(managerPackage) }, + { path: tauriConfigPath, relative: "apps/theme-manager/src-tauri/tauri.conf.json", data: jsonText(tauriConfig) }, + { + path: cargoTomlPath, + relative: "apps/theme-manager/src-tauri/Cargo.toml", + data: replaceRequired( + current[3], + /(^\[package\]\r?\nname = "awesome-codex-theme"\r?\nversion = ")[^"]+("$)/m, + "$1" + metadata.desktop.version + "$2", + "Cargo package version", + ), + }, + { + path: cargoLockPath, + relative: "apps/theme-manager/src-tauri/Cargo.lock", + data: replaceRequired( + current[4], + /(^\[\[package\]\]\r?\nname = "awesome-codex-theme"\r?\nversion = ")[^"]+("$)/m, + "$1" + metadata.desktop.version + "$2", + "Cargo lock package version", + ), + }, + { + path: workflowPath, + relative: ".github/workflows/desktop.yml", + data: replaceRequired( + replaceRequired( + replaceRequired( + current[5], + /(^\s*prerelease:\s*)(?:true|false)(\s*$)/m, + "$1" + String(metadata.desktop.githubPrerelease) + "$2", + "desktop release prerelease flag", + ), + /(^\s*releaseName:\s*)"[^"]+"(\s*$)/m, + "$1\"Awesome Codex Theme v" + metadata.desktop.version + " " + releaseChannelLabel(metadata.desktop.channel) + "\"$2", + "desktop release name", + ), + /(run: test "\$\{\{ github\.ref_name \}\}" = "v)\d+\.\d+\.\d+(")/, + "$1" + metadata.desktop.version + "$2", + "desktop release tag check", + ), + }, + { + path: path.join(ROOT, "docs", "release-metadata.md"), + relative: "docs/release-metadata.md", + data: releaseMetadataDocument(metadata, summary), + }, + { + path: readmePath, + relative: "README.md", + data: readmeWithMetadata(current[7], metadata, summary, "en"), + }, + { + path: chineseReadmePath, + relative: "README.zh-CN.md", + data: readmeWithMetadata(current[8], metadata, summary, "zh-CN"), + }, + ]; +} + +export async function syncReleaseMetadata(argv = process.argv.slice(2)) { + const options = parseOptions(argv); + const metadata = readReleaseMetadata(ROOT); + const outputs = await expectedOutputs(metadata); + const drift = []; + for (const output of outputs) { + let actual = null; + try { + actual = await readFile(output.path, "utf8"); + } catch (error) { + if (error.code !== "ENOENT") throw error; + } + if (actual === output.data) continue; + drift.push(output.relative); + if (!options.check) await writeFile(output.path, output.data, "utf8"); + } + if (options.check && drift.length) { + throw new Error("Release metadata drift:\n- " + drift.join("\n- ") + "\nRun `npm run metadata:sync`."); + } + return { drift, version: metadata.desktop.version }; +} + +if (path.resolve(process.argv[1] || "") === fileURLToPath(import.meta.url)) { + try { + const result = await syncReleaseMetadata(); + console.log( + result.drift.length + ? "Synchronized release metadata for " + result.version + ": " + result.drift.join(", ") + : "Release metadata is synchronized for " + result.version + ".", + ); + } catch (error) { + console.error(error.message); + process.exitCode = 1; + } +} diff --git a/scripts/validate.mjs b/scripts/validate.mjs index 52ebd04..f125d9f 100644 --- a/scripts/validate.mjs +++ b/scripts/validate.mjs @@ -9,7 +9,9 @@ import { CODEX_NATIVE_TESTED_VERSION, parseCodexNativeTheme, } from "./lib/codex-native-theme.mjs"; +import { readReleaseMetadata, releaseForRegistry } from "./lib/release-metadata.mjs"; import { renderFingerprint } from "./lib/source-art-contract.mjs"; +import { loadSourceArtReviews, resolveSourceArtReview } from "./lib/source-art-reviews.mjs"; const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url)); const ROOT = path.resolve(SCRIPT_DIR, ".."); @@ -19,9 +21,6 @@ const HEX = /^#[0-9A-Fa-f]{6}$/; const FAN_ART_LICENSE_ID = "LicenseRef-ACT-Fan-Art-Notice"; const FORBIDDEN_PROMPT = /凡人修仙传|仙逆|剑来|斗破苍穹|studio\s+ghibli|makoto\s+shinkai|hayao\s+miyazaki|style\s+of/i; const MAX_IMAGE_BYTES = 16 * 1024 * 1024; -const CODEX_BETA_CAPTURE_VERSION = "26.715.3651.0"; -const CODEX_BETA_PACKAGE = "OpenAI.CodexBeta_26.715.3651.0_x64__2p2nqsd0c76g0"; -const FULL_SKIN_FORMAT = "act-full-skin-v1"; const SOURCE_WIDTH = 1536; const SOURCE_HEIGHT = 1024; const CANONICAL_ENTRIES = [ @@ -167,24 +166,38 @@ function validateNativeTheme(theme, mode, nativeBytes, modeRecord, manifestMode, export async function validateRepository() { const errors = []; + const release = readReleaseMetadata(ROOT); let captureCount = 0; let fullSkinCount = 0; const nativeThemeOwners = new Map(); - const [catalog, registry, sourceJobs, captureManifest, themeSchema, registrySchema, runtimeCss, runtimeJs] = await Promise.all([ + const [catalog, registry, sourceJobs, captureManifest, themeSchema, registrySchema, sourceReviewSchema, runtimeCss, runtimeJs] = await Promise.all([ readJson("themes/catalog.json"), readJson("themes/registry.json"), readJson("themes/source-art/jobs.json"), - readJson("screenshots/codex-beta-26.715.3651.0/manifest.json"), + readJson("screenshots/codex-beta-" + release.capture.appVersion + "/manifest.json"), readJson("schemas/theme-pack.schema.json"), readJson("schemas/registry.schema.json"), + readJson("schemas/source-art-review.schema.json"), readFile(path.join(ROOT, "packages", "full-skin", "runtime.css"), "utf8"), readFile(path.join(ROOT, "packages", "full-skin", "runtime.js"), "utf8"), ]); const runtimeSha256 = sha256(Buffer.from(runtimeCss + "\n" + runtimeJs, "utf8")); + const sourceReviews = await loadSourceArtReviews(ROOT, catalog); check(themeSchema.$schema?.includes("2020-12"), "Theme schema is not JSON Schema 2020-12", errors); check(registrySchema.$schema?.includes("2020-12"), "Registry schema is not JSON Schema 2020-12", errors); + check(sourceReviewSchema.$schema?.includes("2020-12"), "Source-art review schema is not JSON Schema 2020-12", errors); check(registry.standard === "act-theme-pack-v1", "Registry standard id mismatch", errors); + check(JSON.stringify(registry.release) === JSON.stringify(releaseForRegistry(release)), "Registry release metadata drifted", errors); + check(JSON.stringify(registry.capabilities) === JSON.stringify(release.capabilities), "Registry capability disclosure drifted", errors); + check(CODEX_NATIVE_TESTED_VERSION === release.runtime.nativeTestedVersion, "Native helper version drifted from release metadata", errors); + check( + captureManifest.testBench?.version === release.capture.appVersion + && captureManifest.testBench?.packageFullName === release.capture.packageFullName + && captureManifest.fixture?.id === release.capture.fixture, + "Capture manifest drifted from release metadata", + errors, + ); check( Number.isInteger(catalog.catalogRevision) && catalog.catalogRevision > 0 @@ -347,6 +360,14 @@ export async function validateRepository() { const sourceDimensions = readPngDimensions(sourceArt); const rightsProfile = catalogTheme.rightsProfile || "original"; const fanArt = rightsProfile === "fan-art"; + let sourceReview; + try { + sourceReview = resolveSourceArtReview(catalogTheme, sourceProvenance, sourceReviews); + } catch (error) { + errors.push(error.message); + continue; + } + const rightsVerified = sourceReview?.decision === "approved"; const commonPrompt = sourceJob.promptProfile === "tribute" ? sourceJobs.tributePrompt : sourceJob.promptProfile === "global" @@ -414,16 +435,21 @@ export async function validateRepository() { check(theme.provenance?.aiGenerated === true, theme.id + " registry AI disclosure mismatch", errors); check(JSON.stringify(theme.tagline) === JSON.stringify(catalogTheme.tagline), theme.id + " registry tagline mismatch", errors); check(theme.rightsProfile === rightsProfile, theme.id + " registry rights-profile mismatch", errors); - check(theme.provenance?.rightsVerified === !fanArt, theme.id + " registry rights status mismatch", errors); + check(theme.provenance?.rightsVerified === rightsVerified, theme.id + " registry rights status mismatch", errors); check(theme.provenance?.type === (fanArt ? "fan-art" : "original"), theme.id + " registry provenance type mismatch", errors); check(theme.provenance?.record === provenancePath, theme.id + " registry provenance record mismatch", errors); check(theme.provenance?.sourceArt === sourcePath, theme.id + " registry source-art path mismatch", errors); check(theme.provenance?.sourceSha256 === sourceProvenance.sourceSha256, theme.id + " registry source hash mismatch", errors); check(theme.provenance?.promptSha256 === sourceProvenance.promptSha256, theme.id + " registry prompt hash mismatch", errors); check(theme.provenance?.jobId === sourceProvenance.jobId, theme.id + " registry image job mismatch", errors); + check( + JSON.stringify(theme.provenance?.review || null) === JSON.stringify(sourceReview || null), + theme.id + " registry source-art review mismatch", + errors, + ); check( theme.license?.spdx === (fanArt ? FAN_ART_LICENSE_ID : "CC0-1.0") - && theme.license?.rightsVerified === !fanArt, + && theme.license?.rightsVerified === rightsVerified, theme.id + " license or rights disclosure mismatch", errors, ); @@ -456,7 +482,7 @@ export async function validateRepository() { theme.id + " registry featured rank mismatch", errors, ); - check(manifest.provenance?.rightsVerified === !fanArt, theme.id + " canonical rights status mismatch", errors); + check(manifest.provenance?.rightsVerified === rightsVerified, theme.id + " canonical rights status mismatch", errors); check(manifest.provenance?.aiGenerated === true, theme.id + " generated-art disclosure mismatch", errors); check(manifest.provenance?.type === (fanArt ? "fan-art" : "original"), theme.id + " generated-art provenance type mismatch", errors); if (fanArt) { @@ -467,13 +493,18 @@ export async function validateRepository() { check(manifest.provenance?.jobId === sourceProvenance.jobId, theme.id + " manifest image job mismatch", errors); check(manifest.provenance?.promptSha256 === sourceProvenance.promptSha256, theme.id + " manifest prompt hash mismatch", errors); check(manifest.provenance?.sourceSha256 === sourceProvenance.sourceSha256, theme.id + " manifest source hash mismatch", errors); + check( + JSON.stringify(manifest.provenance?.review || null) === JSON.stringify(sourceReview || null), + theme.id + " manifest source-art review mismatch", + errors, + ); check(manifest.motion?.default === "reduced" && manifest.motion?.animated === false, theme.id + " canonical motion mismatch", errors); check( JSON.stringify(manifest.compatibility?.engines) === JSON.stringify([ { id: "codex-full-skin", coverage: "full-skin-v1", - testedVersion: CODEX_BETA_CAPTURE_VERSION, + testedVersion: release.capture.appVersion, }, { id: "codex-native", @@ -490,8 +521,8 @@ export async function validateRepository() { errors, ); check(theme.exports?.["codex-full-skin"]?.coverage === "full-skin-v1", theme.id + " full-skin registry coverage mismatch", errors); - check(theme.exports?.["codex-full-skin"]?.format === FULL_SKIN_FORMAT, theme.id + " full-skin registry format mismatch", errors); - check(theme.exports?.["codex-full-skin"]?.testedVersion === CODEX_BETA_CAPTURE_VERSION, theme.id + " full-skin registry version mismatch", errors); + check(theme.exports?.["codex-full-skin"]?.format === release.runtime.fullSkinFormat, theme.id + " full-skin registry format mismatch", errors); + check(theme.exports?.["codex-full-skin"]?.testedVersion === release.capture.appVersion, theme.id + " full-skin registry version mismatch", errors); check(theme.exports?.["codex-native"]?.coverage === "native-theme-v1", theme.id + " native registry coverage mismatch", errors); check(theme.exports?.["codex-native"]?.testedVersion === CODEX_NATIVE_TESTED_VERSION, theme.id + " native registry version mismatch", errors); validateCanonicalZip(theme.id, packageBytes, manifestBytes, errors); @@ -550,13 +581,13 @@ export async function validateRepository() { theme.id + " " + mode + " registry preview render fingerprint mismatch", errors, ); - check(modeRecord.fullSkin?.format === FULL_SKIN_FORMAT, theme.id + " " + mode + " full-skin format mismatch", errors); + check(modeRecord.fullSkin?.format === release.runtime.fullSkinFormat, theme.id + " " + mode + " full-skin format mismatch", errors); check(modeRecord.fullSkin?.asset === "themes/" + theme.id + "/" + manifestMode.asset, theme.id + " " + mode + " full-skin asset path mismatch", errors); check(modeRecord.fullSkin?.sha256 === sha256(asset), theme.id + " " + mode + " full-skin asset hash mismatch", errors); check(modeRecord.fullSkin?.bytes === asset.length, theme.id + " " + mode + " full-skin asset byte count mismatch", errors); check(JSON.stringify(modeRecord.fullSkin?.art) === JSON.stringify(manifestMode.art), theme.id + " " + mode + " full-skin art contract mismatch", errors); check(JSON.stringify(modeRecord.fullSkin?.tokens) === JSON.stringify(manifestMode.tokens), theme.id + " " + mode + " full-skin token contract mismatch", errors); - check(modeRecord.fullSkin?.testedVersion === CODEX_BETA_CAPTURE_VERSION, theme.id + " " + mode + " full-skin tested version mismatch", errors); + check(modeRecord.fullSkin?.testedVersion === release.capture.appVersion, theme.id + " " + mode + " full-skin tested version mismatch", errors); fullSkinCount += 1; check(sha256(preview) === modeRecord.previewSha256, theme.id + " " + mode + " preview hash mismatch", errors); check(sha256(nativeTheme) === modeRecord.nativeTheme.sha256, theme.id + " " + mode + " native theme hash mismatch", errors); @@ -575,7 +606,7 @@ export async function validateRepository() { captureCount += 1; check(isSafeRelativePath(capture.path), theme.id + " " + mode + " capture path is unsafe", errors); check( - capture.path === "screenshots/codex-beta-" + CODEX_BETA_CAPTURE_VERSION + "/" + theme.id + "-" + mode + ".png", + capture.path === "screenshots/codex-beta-" + release.capture.appVersion + "/" + theme.id + "-" + mode + ".png", theme.id + " " + mode + " capture path mismatch", errors, ); @@ -587,11 +618,11 @@ export async function validateRepository() { check(capture.sha256 === sha256(captureBytes), theme.id + " " + mode + " capture hash mismatch", errors); check(capture.assetSha256 === modeRecord.fullSkin.sha256, theme.id + " " + mode + " capture asset hash mismatch", errors); check(capture.runtimeSha256 === runtimeSha256, theme.id + " " + mode + " capture runtime hash mismatch", errors); - check(capture.markerVersion === FULL_SKIN_FORMAT, theme.id + " " + mode + " capture marker mismatch", errors); + check(capture.markerVersion === release.runtime.fullSkinFormat, theme.id + " " + mode + " capture marker mismatch", errors); check(capture.selectors?.main === true, theme.id + " " + mode + " capture main selector was not verified", errors); - check(capture.appVersion === CODEX_BETA_CAPTURE_VERSION, theme.id + " " + mode + " capture app version mismatch", errors); - check(capture.packageFullName === CODEX_BETA_PACKAGE, theme.id + " " + mode + " capture package identity mismatch", errors); - check(capture.fixture === "full-skin-home-v1", theme.id + " " + mode + " capture fixture mismatch", errors); + check(capture.appVersion === release.capture.appVersion, theme.id + " " + mode + " capture app version mismatch", errors); + check(capture.packageFullName === release.capture.packageFullName, theme.id + " " + mode + " capture package identity mismatch", errors); + check(capture.fixture === release.capture.fixture, theme.id + " " + mode + " capture fixture mismatch", errors); } validateTokens(theme.id, mode, manifestMode.tokens, errors); validateNativeTheme(theme, mode, nativeTheme, modeRecord, manifestMode, packageBytes, errors); diff --git a/site/assets/app.js b/site/assets/app.js index 6507870..f5fa70c 100644 --- a/site/assets/app.js +++ b/site/assets/app.js @@ -117,7 +117,14 @@ const translations = { copied: "Codex Native theme copied.", copyFailed: "Copy failed. Select the theme string manually.", loadFailed: "The registry could not be loaded. Run the build and serve this directory over HTTP.", - capabilityNative: "ACT Full Skin v1 is verified with ChatGPT Beta 26.715.3651.0 and the available 5.6 Sol Max setting across all 106 theme modes. It applies the background, materials, colors, and theme copy; Native v1 remains a palette-only fallback.", + capabilityNote: "{format} is verified with ChatGPT Beta {version} and {model} across {modes} theme modes. {updater}", + capabilityMatrixTitle: "Platform evidence", + capabilityFullSkin: "Full Skin", + capabilityNativeFallback: "Native fallback", + capabilityPersistence: "Persistence", + capabilityStatusVerified: "Verified", + capabilityStatusBuildOnly: "Build-only", + capabilityStatusUnverified: "Unverified", resultCount: "themes shown", allCollections: "All collections", allCollectionsCaption: "Original, city, and unofficial fan-art themes", @@ -242,7 +249,14 @@ const translations = { copied: "Codex Native 主题已复制。", copyFailed: "复制失败，请手动选择主题字符串。", loadFailed: "无法读取 Registry。请先构建项目，并通过 HTTP 服务访问。", - capabilityNative: "ACT Full Skin v1 已使用 ChatGPT Beta 26.715.3651.0 与当前测试台实际提供的 5.6 Sol Max 完成全部 106 个模式的实机验证，可应用背景、材质、配色和主题文字；Native v1 只保留为配色回退。", + capabilityNote: "{format} 已使用 ChatGPT Beta {version} 与 {model} 完成全部 {modes} 个主题模式的实机验证。{updater}", + capabilityMatrixTitle: "平台证据", + capabilityFullSkin: "Full Skin", + capabilityNativeFallback: "Native 回退", + capabilityPersistence: "常驻", + capabilityStatusVerified: "已验证", + capabilityStatusBuildOnly: "仅构建", + capabilityStatusUnverified: "未验证", resultCount: "套主题", allCollections: "全部系列", allCollectionsCaption: "原创、城市与非官方 Fan Art 主题", @@ -305,6 +319,7 @@ const elements = { dialogDescription: document.querySelector("#dialogDescription"), dialogMode: document.querySelector("#dialogMode"), capabilityNote: document.querySelector("#capabilityNote"), + capabilityMatrix: document.querySelector("#capabilityMatrix"), dialogRights: document.querySelector("#dialogRights"), nativeThemeString: document.querySelector("#nativeThemeString"), copyTheme: document.querySelector("#copyTheme"), @@ -318,6 +333,12 @@ function t(key) { return translations[state.locale][key] || translations.en[key] || key; } +function interpolate(template, values) { + return Object.entries(values).reduce(function (result, entry) { + return result.replaceAll("{" + entry[0] + "}", String(entry[1] ?? "")); + }, template); +} + function renderCollectionIntro() { if (!state.registry || !elements.collectionIntro) return; const original = state.registry.themes.filter(function (theme) { @@ -331,6 +352,73 @@ function renderCollectionIntro() { .replace("{fanArt}", String(fanArt)); } +function capabilityStatus(status) { + const keys = { + verified: "capabilityStatusVerified", + "build-only": "capabilityStatusBuildOnly", + unverified: "capabilityStatusUnverified" + }; + return t(keys[status] || "capabilityStatusUnverified"); +} + +function buildCapabilityNote() { + const release = state.registry?.release; + const capture = release?.capture || {}; + return interpolate(t("capabilityNote"), { + format: release?.runtime?.fullSkinFormat || "ACT Full Skin v1", + version: capture.appVersion || "—", + model: capture.modelLabel || "—", + modes: (state.registry?.themes?.length || 0) * 2, + updater: localized(release?.desktop?.updater?.message) + }); +} + +function renderCapabilityMatrix() { + const capabilities = state.registry?.capabilities; + if (!elements.capabilityMatrix || !Array.isArray(capabilities) || capabilities.length === 0) { + elements.capabilityMatrix?.replaceChildren(); + if (elements.capabilityMatrix) elements.capabilityMatrix.hidden = true; + return; + } + const featureLabels = [ + ["fullSkin", "capabilityFullSkin"], + ["native", "capabilityNativeFallback"], + ["persistence", "capabilityPersistence"] + ]; + const fragment = document.createDocumentFragment(); + const heading = document.createElement("h3"); + heading.textContent = t("capabilityMatrixTitle"); + fragment.append(heading); + capabilities.forEach(function (capability) { + const card = document.createElement("article"); + card.className = "capability-card"; + const title = document.createElement("h4"); + title.textContent = localized(capability.title) || capability.id; + const list = document.createElement("dl"); + featureLabels.forEach(function (entry) { + const feature = capability[entry[0]]; + if (!feature || typeof feature !== "object") return; + const row = document.createElement("div"); + const term = document.createElement("dt"); + term.textContent = t(entry[1]); + const definition = document.createElement("dd"); + const status = document.createElement("span"); + status.className = "capability-status is-" + feature.status; + status.textContent = capabilityStatus(feature.status) + + (feature.testedVersion ? " · " + feature.testedVersion : ""); + const detail = document.createElement("small"); + detail.textContent = localized(feature.detail); + definition.append(status, detail); + row.append(term, definition); + list.append(row); + }); + card.append(title, list); + fragment.append(card); + }); + elements.capabilityMatrix.replaceChildren(fragment); + elements.capabilityMatrix.hidden = false; +} + function localized(record) { if (!record) return ""; return record[state.locale] || record.en || Object.values(record)[0] || ""; @@ -507,6 +595,7 @@ function updateLanguage() { renderCollectionPicker(); renderFilterLabels(); renderCollectionIntro(); + renderCapabilityMatrix(); reorderGalleryForLocale(); state.cards.forEach(function (card, id) { @@ -694,7 +783,7 @@ function updateDialog() { elements.dialogPreview.src = assetUrl(visual.path); elements.dialogPreview.alt = localized(theme.name) + " · " + visual.label + " · " + t(state.dialogMode); elements.dialogVariant.textContent = visual.label + " · " + localized(collectionFor(theme)?.name) + " · " + t(theme.variant); - elements.capabilityNote.textContent = t("capabilityNative"); + elements.capabilityNote.textContent = buildCapabilityNote(); elements.dialogRights.hidden = theme.rightsProfile !== "fan-art"; elements.dialogRights.textContent = theme.rightsProfile === "fan-art" ? localized(theme.fanArt?.work) + " · " + t("fanArtNotice") diff --git a/site/assets/styles.css b/site/assets/styles.css index bb4d65b..f3c429f 100644 --- a/site/assets/styles.css +++ b/site/assets/styles.css @@ -1410,6 +1410,91 @@ img { display: none; } +.capability-matrix { + display: grid; + grid-template-columns: repeat(3, minmax(0, 1fr)); + gap: 14px; + margin-top: 14px; +} + +.capability-matrix > h3 { + grid-column: 1 / -1; + margin: 14px 0 0; + color: var(--ink); + font-size: 14px; + letter-spacing: 0.02em; +} + +.capability-card { + min-width: 0; + padding: 18px; + border: 1px solid var(--line); + border-radius: 18px; + background: rgba(255, 255, 255, 0.56); +} + +.capability-card h4 { + margin: 0 0 13px; + font-size: 15px; +} + +.capability-card dl, +.capability-card dd { + padding: 0; + margin: 0; +} + +.capability-card dl { + display: grid; + gap: 12px; +} + +.capability-card dl > div { + display: grid; + gap: 4px; +} + +.capability-card dt { + color: var(--ink-soft); + font-size: 10px; + font-weight: 700; + text-transform: uppercase; +} + +.capability-card dd { + display: grid; + gap: 4px; +} + +.capability-card small { + color: var(--ink-soft); + font-size: 10px; + line-height: 1.55; +} + +.capability-status { + width: fit-content; + padding: 3px 6px; + border-radius: 999px; + font-size: 10px; + font-weight: 700; +} + +.capability-status.is-verified { + color: #1e624c; + background: rgba(78, 141, 118, 0.16); +} + +.capability-status.is-build-only { + color: #845f17; + background: rgba(217, 161, 60, 0.18); +} + +.capability-status.is-unverified { + color: #874b40; + background: rgba(185, 101, 80, 0.16); +} + .coverage-dot { width: 8px; height: 8px; @@ -2148,6 +2233,10 @@ img { grid-template-columns: 1fr; } + .capability-matrix { + grid-template-columns: 1fr; + } + .creator-section { grid-template-columns: 1fr; } diff --git a/site/index.html b/site/index.html index 9098926..1df169b 100644 --- a/site/index.html +++ b/site/index.html @@ -115,7 +115,7 @@

- 53 + — 套主题
@@ -224,7 +224,7 @@

原创世界、城市灯火

- 53 套主题 + —
@@ -300,6 +300,7 @@

完整皮肤是主交 复制后手动导入 +
diff --git a/tests/repository.test.mjs b/tests/repository.test.mjs index c3ecb5e..355b377 100644 --- a/tests/repository.test.mjs +++ b/tests/repository.test.mjs @@ -398,7 +398,8 @@ test("Tauri manager keeps theme values in Rust and limits desktop capabilities", assert.match(bridge, /applyNow = false/); assert.match(bridge, /applyNow \}/); assert.match(updater, /ACT_UPDATER_PUBKEY/); - assert.match(config.plugins.updater.endpoints[0], /^https:\/\/github\.com\/rwang23\/awesome-codex-theme\/releases\//); + assert.equal(config.plugins.updater.endpoints[0], "https://rwang23.github.io/awesome-codex-theme/updates/stable.json"); + assert.doesNotMatch(config.plugins.updater.endpoints[0], /github\.com\/.*\/releases\/(?:latest|download)/); assert.match(appPackage, /@tauri-apps\/cli/); assert.doesNotMatch(appPackage, /electron/i); assert.doesNotMatch(backend + catalog + runtime + platform, /WindowsApps.*(?:write|copy)|app\.asar.*(?:write|copy)/i); @@ -582,12 +583,16 @@ test("Tibo copy uses a deliberate two-line God of Reset lockup", async function assert.deepEqual(immortal.tagline, { en: "God of Reset", "zh-CN": "重置之神" }); }); -test("desktop beta release requires updater signing and discloses deferred platform trust", async function () { - const [workflow, tauriConfigText] = await Promise.all([ +test("desktop beta release uses a static updater feed and discloses deferred platform trust", async function () { + const [workflow, tauriConfigText, releaseMetadata] = await Promise.all([ readFile(path.join(ROOT, ".github", "workflows", "desktop.yml"), "utf8"), - readFile(path.join(ROOT, "apps", "theme-manager", "src-tauri", "tauri.conf.json"), "utf8") + readFile(path.join(ROOT, "apps", "theme-manager", "src-tauri", "tauri.conf.json"), "utf8"), + readFile(path.join(ROOT, "metadata", "release.json"), "utf8").then(JSON.parse), ]); const tauriConfig = JSON.parse(tauriConfigText); + const releaseLabel = releaseMetadata.desktop.channel.slice(0, 1).toUpperCase() + + releaseMetadata.desktop.channel.slice(1); + const versionPattern = releaseMetadata.desktop.version.replaceAll(".", "\\."); assert.match(workflow, /npm run generate && npm run validate && npm run desktop:prepare/); assert.match(workflow, /DESKTOP_RELEASE_READY/); assert.match(workflow, /TAURI_SIGNING_PRIVATE_KEY/); @@ -596,9 +601,11 @@ test("desktop beta release requires updater signing and discloses deferred platf assert.match(workflow, /Validate Windows portable helper/); assert.match(workflow, /npm run installer:validate/); assert.match(workflow, /Updater-signed Tauri Theme Manager beta/); - assert.match(workflow, /releaseName: "Awesome Codex Theme \$\{\{ github\.ref_name \}\} Beta"/); + assert.match(workflow, new RegExp('releaseName: "Awesome Codex Theme v' + versionPattern + " " + releaseLabel + '"')); + assert.match(workflow, /Verify release tag matches metadata/); + assert.match(workflow, new RegExp('run: test "\\$\\{\\{ github\\.ref_name \\}\\}" = "v' + versionPattern + '"')); assert.match(workflow, /unknown-publisher warning/); - assert.match(workflow, /prerelease: false/); + assert.match(workflow, new RegExp("prerelease: " + releaseMetadata.desktop.githubPrerelease)); assert.match(workflow, /releaseDraft: true/); assert.doesNotMatch(workflow, /WINDOWS_CERTIFICATE/); assert.doesNotMatch(workflow, /APPLE_CERTIFICATE/); @@ -617,6 +624,8 @@ test("desktop beta release requires updater signing and discloses deferred platf assert.doesNotMatch(workflow, /desktop-macos-(?:arm64|x64)/); assert.equal(tauriConfig.bundle.macOS.signingIdentity, "-"); assert.match(tauriConfig.plugins.updater.pubkey, /^[A-Za-z0-9+/=]{100,}$/); + assert.equal(tauriConfig.plugins.updater.endpoints[0], releaseMetadata.desktop.updater.endpoint); + assert.doesNotMatch(tauriConfig.plugins.updater.endpoints[0], /github\.com\/.*\/releases\/(?:latest|download)/); }); test("desktop preparation derives compact thumbnails from verified captures", async function () { diff --git a/tests/source-contract.test.mjs b/tests/source-contract.test.mjs index 85cdac8..9e77481 100644 --- a/tests/source-contract.test.mjs +++ b/tests/source-contract.test.mjs @@ -16,20 +16,28 @@ import { CODEX_THEME_PREFIX, parseCodexNativeTheme, } from "../scripts/lib/codex-native-theme.mjs"; +import { readReleaseMetadata, releaseForRegistry } from "../scripts/lib/release-metadata.mjs"; import { renderFingerprint, SOURCE_ART_RENDERER_CONSTANTS, } from "../scripts/lib/source-art-contract.mjs"; +import { + resolveSourceArtReview, + validateSourceArtReviewLedger, +} from "../scripts/lib/source-art-reviews.mjs"; +import { syncReleaseMetadata } from "../scripts/sync-release-metadata.mjs"; import { contrastRatio, isSafeRelativePath } from "../scripts/validate.mjs"; const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."); test("source catalog and image-job provenance stay aligned without generated artifacts", async function () { - const [catalog, jobs, themeSchema, registrySchema] = await Promise.all([ + const [catalog, jobs, themeSchema, registrySchema, reviewSchema, reviews] = await Promise.all([ readFile(path.join(ROOT, "themes", "catalog.json"), "utf8").then(JSON.parse), readFile(path.join(ROOT, "themes", "source-art", "jobs.json"), "utf8").then(JSON.parse), readFile(path.join(ROOT, "schemas", "theme-pack.schema.json"), "utf8").then(JSON.parse), readFile(path.join(ROOT, "schemas", "registry.schema.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "schemas", "source-art-review.schema.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "themes", "source-art", "reviews.json"), "utf8").then(JSON.parse), ]); assert.equal(catalog.catalogRevision, 2026072201); @@ -37,6 +45,7 @@ test("source catalog and image-job provenance stay aligned without generated art assert.equal(catalog.collections.length, 11); assert.equal(themeSchema.$schema.includes("2020-12"), true); assert.equal(registrySchema.$schema.includes("2020-12"), true); + assert.equal(reviewSchema.$schema.includes("2020-12"), true); assert.deepEqual( jobs.jobs.map((job) => job.id).sort(), catalog.themes.map((theme) => theme.id).sort(), @@ -53,6 +62,88 @@ test("source catalog and image-job provenance stay aligned without generated art assert.equal(theme.fanArt.officialAssetsUsed, false); } } + assert.equal(validateSourceArtReviewLedger(catalog, reviews).records.size, 49); +}); + +test("source-art approval is explicit, source-hash-bound, and excludes fan art", async function () { + const [catalog, reviews] = await Promise.all([ + readFile(path.join(ROOT, "themes", "catalog.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "themes", "source-art", "reviews.json"), "utf8").then(JSON.parse), + ]); + const parsed = validateSourceArtReviewLedger(catalog, reviews); + const original = catalog.themes.find((theme) => (theme.rightsProfile || "original") === "original"); + const fanArt = catalog.themes.find((theme) => theme.rightsProfile === "fan-art"); + const provenance = JSON.parse(await readFile( + path.join(ROOT, "themes", "source-art", original.id + ".provenance.json"), + "utf8", + )); + const review = resolveSourceArtReview(original, provenance, parsed); + assert.equal(review.decision, "approved"); + assert.equal(review.sourceSha256, provenance.sourceSha256); + assert.equal(resolveSourceArtReview(fanArt, {}, parsed), null); + assert.throws( + () => resolveSourceArtReview(original, { ...provenance, sourceSha256: "0".repeat(64) }, parsed), + /approval source hash does not match provenance/, + ); +}); + +test("release metadata is the synchronized source for desktop version and capability disclosure", async function () { + const metadata = readReleaseMetadata(ROOT); + const [rootPackage, managerPackage, tauriConfig, catalog, capture, smoke, skinRuntime, readmeText, chineseReadmeText] = await Promise.all([ + readFile(path.join(ROOT, "package.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "apps", "theme-manager", "package.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "apps", "theme-manager", "src-tauri", "tauri.conf.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "themes", "catalog.json"), "utf8").then(JSON.parse), + readFile(path.join(ROOT, "scripts", "capture-full-skin-screenshots.mjs"), "utf8"), + readFile(path.join(ROOT, "scripts", "smoke-theme-manager.mjs"), "utf8"), + readFile(path.join(ROOT, "apps", "theme-manager", "src-tauri", "src", "skin_runtime.rs"), "utf8"), + readFile(path.join(ROOT, "README.md"), "utf8"), + readFile(path.join(ROOT, "README.zh-CN.md"), "utf8"), + ]); + assert.equal(rootPackage.version, metadata.desktop.version); + assert.equal(managerPackage.version, metadata.desktop.version); + assert.equal(tauriConfig.version, metadata.desktop.version); + assert.deepEqual(tauriConfig.plugins.updater.endpoints, [metadata.desktop.updater.endpoint]); + assert.doesNotMatch(tauriConfig.plugins.updater.endpoints[0], /releases\/latest/); + assert.equal(metadata.desktop.githubPrerelease, true); + assert.equal(metadata.capabilities.length, 3); + assert.equal(catalog.defaults, undefined); + assert.deepEqual(releaseForRegistry(metadata).capture, { + channel: metadata.capture.channel, + appVersion: metadata.capture.appVersion, + packageFullName: metadata.capture.packageFullName, + fixture: metadata.capture.fixture, + modelLabel: metadata.capture.modelLabel, + }); + assert.match(capture, /readReleaseMetadata/); + assert.match(smoke, /readReleaseMetadata/); + assert.doesNotMatch(capture, /const CAPTURE_VERSION = "\d+\.\d+\.\d+"/); + assert.doesNotMatch(smoke, /const BETA_PACKAGE = "OpenAI\.CodexBeta_/); + assert.match(skinRuntime, new RegExp(metadata.runtime.implementationVersion)); + for (const currentReadme of [readmeText, chineseReadmeText]) { + assert.match(currentReadme, //); + assert.match(currentReadme, //); + } + await assert.doesNotReject(syncReleaseMetadata(["--check"])); +}); + +test("Gallery and compatibility docs consume generated metadata instead of stale fallback claims", async function () { + const [index, gallery, adapters, build] = await Promise.all([ + readFile(path.join(ROOT, "site", "index.html"), "utf8"), + readFile(path.join(ROOT, "site", "assets", "app.js"), "utf8"), + readFile(path.join(ROOT, "docs", "adapters.md"), "utf8"), + readFile(path.join(ROOT, "scripts", "build.mjs"), "utf8"), + ]); + assert.match(index, /id="themeStatValue">—/); + assert.match(index, /id="resultSummary">—/); + assert.match(index, /id="capabilityMatrix"/); + assert.match(gallery, /renderCapabilityMatrix/); + assert.match(gallery, /state\.registry\?\.themes\?\.length/); + assert.doesNotMatch(gallery, /all 106 theme modes/); + assert.match(adapters, /Blob URL/); + assert.match(adapters, /--act-art-image/); + assert.doesNotMatch(adapters, /assigns that verified image to a manager-created/); + assert.match(build, /registry\.release\?\.desktop\?\.version/); }); test("generated-artifact guard describes the missing prerequisite", async function () { @@ -117,6 +208,7 @@ test("package scripts keep source checks fast and generated checks explicit", as assert.match(packageJson.scripts["test:source"], /source-contract\.test\.mjs/); assert.match(packageJson.scripts["test:generated"], /ensure-generated\.mjs/); assert.match(packageJson.scripts["test:ci"], /^npm run generate/); + assert.equal(packageJson.scripts["metadata:check"], "node scripts/sync-release-metadata.mjs --check"); assert.match(packageJson.scripts["check:full"], /npm run test:ci/); }); diff --git a/themes/catalog.json b/themes/catalog.json index 559ee94..2492551 100644 --- a/themes/catalog.json +++ b/themes/catalog.json @@ -1,11 +1,6 @@ { "schemaVersion": 1, "catalogRevision": 2026072201, - "defaults": { - "author": "Awesome Codex Theme", - "license": "CC0-1.0", - "codexDesktopTested": "26.715.2305.0" - }, "collections": [ { "id": "original-xianxia-01", diff --git a/themes/source-art/reviews.json b/themes/source-art/reviews.json new file mode 100644 index 0000000..09f91ec --- /dev/null +++ b/themes/source-art/reviews.json @@ -0,0 +1,67 @@ +{ + "schemaVersion": 1, + "review": { + "reviewer": "Awesome Codex Theme source-art review", + "reviewedAt": "2026-07-25T00:00:00Z", + "checks": { + "noThirdPartyLogo": true, + "noSignatureOrWatermark": true, + "noUnintendedText": true, + "rightsProfileMatches": true, + "safeAreaReviewed": true, + "lightDarkCaptureReviewed": true + }, + "notes": "Structured migration of the existing source-specific provenance review disclosure and the 2026-07-25 audit corpus evidence. This ledger does not create a claim of third-party rights clearance." + }, + "attestations": [ + { "themeId": "qinglan-odyssey", "sourceSha256": "a4aa321572bc6e0f7c0499ef5bee9604bec8ecb0f6118700ee6fb1140f390fad", "decision": "approved" }, + { "themeId": "qinglan-sprite", "sourceSha256": "24914a9023a0ed9fbc0e91609b601ff28b1fb5b8e356cd9e362caa8c8b3dca25", "decision": "approved" }, + { "themeId": "starbound-rebel", "sourceSha256": "dd68bf22d055224eb2c7f6b2acc17cdd7547d44d8480d0907db4deb15481cf6b", "decision": "approved" }, + { "themeId": "starbound-sprite", "sourceSha256": "8b068fbe714747114e894384d38f99ea7e48988c1c2fd0452dcf27e89cd7e661", "decision": "approved" }, + { "themeId": "mountain-sword", "sourceSha256": "8ebeaecf4cf56d5815f5848a0a3d29f8fac47cf2e50cf92ff1159609f92105bc", "decision": "approved" }, + { "themeId": "mountain-swordling", "sourceSha256": "4c1aa94fc4d4c882134a7d8e560b1da454cd6b18066880174d39bdba58c37243", "decision": "approved" }, + { "themeId": "cloudsea-pact", "sourceSha256": "dc7c3fc5de6d8b8b0a4651664f5eb56b9521e8d05c00c7cbc1c07539d9eb42c9", "decision": "approved" }, + { "themeId": "cloudsea-mochi", "sourceSha256": "f5ef9da3beb95c737147f933e3466be16e5708568fa20be1013eb33ca413bac1", "decision": "approved" }, + { "themeId": "beijing-meridian", "sourceSha256": "b8142726fac12d7367e6e3ee4cc99da83ede3bdba954fd158564717131e4f5b4", "decision": "approved" }, + { "themeId": "shanghai-afterglow", "sourceSha256": "fd0d2b8ff411bc53930590c97f102b14b3720f7a5382af0a87db0fc101b7f15b", "decision": "approved" }, + { "themeId": "shenzhen-circuit-rain", "sourceSha256": "fe02957766cbcbae22966e86cd93e9dec90e00ba3af79c00bdc889ff4c3bebbe", "decision": "approved" }, + { "themeId": "guangzhou-riverwind", "sourceSha256": "14eb4ec1e73004c2c838fa7e4fefa8e9495ced908a1168516b71e500c76e2395", "decision": "approved" }, + { "themeId": "chengdu-teahouse-rain", "sourceSha256": "4f28fe473e04ba709faab35061f49b04ff1cfa4abf72ea4380eceb50bb26a484", "decision": "approved" }, + { "themeId": "hangzhou-lake-letter", "sourceSha256": "0ae96df48939d86fe28ef67c236fc08904e13bbc29bd5858c1ffb329a5f4e013", "decision": "approved" }, + { "themeId": "chongqing-vertical-night", "sourceSha256": "e96d38ec1d79a1c59a41396445be0c4e46c634f7aac2e77d40dca3104fe65475", "decision": "approved" }, + { "themeId": "nanjing-wall-plum", "sourceSha256": "813706847e3d95e722b3d31748a1c6b9a0b14481f72fbe496e411f70f89a5517", "decision": "approved" }, + { "themeId": "new-york-rainline", "sourceSha256": "088f2a7d1bb1c174074903a93c5dc8ddef61ecb14ce66470b1267f6aae6ef76b", "decision": "approved" }, + { "themeId": "san-francisco-fogline", "sourceSha256": "a0aa639ab2de1edb04a87b817589c7b5ad6bab74619116063a742dd9e4c88a08", "decision": "approved" }, + { "themeId": "chicago-lakewind", "sourceSha256": "ead77a3bb826d123eb5622021eddaa2f434a1f1bc4e8ad58c3772de732b18853", "decision": "approved" }, + { "themeId": "toronto-blue-hour", "sourceSha256": "430d32e58f85f92c90f60508860bc401e8ae67fd659194b32a79cacf35ad8136", "decision": "approved" }, + { "themeId": "vancouver-rain-harbour", "sourceSha256": "cef1bc1b5a7d5d73827e6668bfea27074e1db3ca3241a998f5b440990630927d", "decision": "approved" }, + { "themeId": "london-rainlight", "sourceSha256": "4b6fec54dd3dcef09977b1b30e5a10d35d4c8b0fb1b1cc7fc50dd4afac03c001", "decision": "approved" }, + { "themeId": "paris-rooftop-dawn", "sourceSha256": "0e88d6e78ebd37089616560861fca879198372063056e1ca9bf337528e36cccb", "decision": "approved" }, + { "themeId": "berlin-night-grid", "sourceSha256": "e2ba597974ae373f18747ed2981471af70d3aba206b2455c2bd74115d8bb993a", "decision": "approved" }, + { "themeId": "rome-terrace-gold", "sourceSha256": "d08bdc0c4afcad2a937caf72a28ae2f4eb06bb1582ecf907f6f618d61f3c1e15", "decision": "approved" }, + { "themeId": "tokyo-rain-signal", "sourceSha256": "05e9dd74fab41b653ba092c16db8fda2db1c139879f3300e4045c0d892030e70", "decision": "approved" }, + { "themeId": "singapore-garden-rain", "sourceSha256": "2b011ccb907494d14c11ca863aa440a32a122eaac650f5f6de0413e9b226616a", "decision": "approved" }, + { "themeId": "sydney-harbour-morning", "sourceSha256": "7088abbefd7b298722cf1f7d619cd8322d4082323a7967a442b840eada2cb9b4", "decision": "approved" }, + { "themeId": "retro-boss-2007", "sourceSha256": "8eb319040e9ea259222f086fc9d6efa2e910e66020c719e809e597bffb007207", "decision": "approved" }, + { "themeId": "rainy-library", "sourceSha256": "8fef3ada2a2a68e5b1e4b15bf286714f0368db0d1f2ced87a683a78c05f5f499", "decision": "approved" }, + { "themeId": "orbital-dawn", "sourceSha256": "24a646821c0b99903c4c3902d0aff750fe2a38414e9ce5785f6d23611338c77e", "decision": "approved" }, + { "themeId": "deep-ocean-lab", "sourceSha256": "04e7e503c417998108213dbca3e77778e08c024e351eab6d26e4f52d0df9f7de", "decision": "approved" }, + { "themeId": "synthwave-night-drive", "sourceSha256": "4bd9a5625708adf0b9b33ecb4bf35fc1ea702f0087e2971aadffdc5b35c42a12", "decision": "approved" }, + { "themeId": "alpine-cabin-code", "sourceSha256": "3059992ca351345e0b2e484d57e077bcc7695a10ab956ec395dce0b650aa391c", "decision": "approved" }, + { "themeId": "jiangnan-rain-courtyard", "sourceSha256": "4f927db5183332d694185075714c6e52c9093e493e38369d5925d59a8ab7a6a1", "decision": "approved" }, + { "themeId": "changan-lanterns", "sourceSha256": "07871b73b171ddccc9dae7cd5e200263ef9f775d198be7684c932ffa3a360900", "decision": "approved" }, + { "themeId": "dunhuang-starlight", "sourceSha256": "62d5e1fdbdd6c5c0c739a7221086294d63a49d3e10b02b0a6c1c99e09ac2ed72", "decision": "approved" }, + { "themeId": "bamboo-tea-rain", "sourceSha256": "11d98c363d0302954874a7f01231075a4036c602dac4919b8873ce95e98017e7", "decision": "approved" }, + { "themeId": "northeast-snow-train", "sourceSha256": "d1b90373be709a954cc0136f4fb66a9f81e1baef2c5f14ea1f0fb877be6241a8", "decision": "approved" }, + { "themeId": "appalachian-cabin-focus", "sourceSha256": "9d586d9717c74cbb0a780763f5fefce788fc0f70838d2550f1c7ac0de7cf2b76", "decision": "approved" }, + { "themeId": "cloud-forge-quiet", "sourceSha256": "152833b53eaf14c870ad6df5a60bc9dd3ebfb3504b9e48af26e1d0ff62ab8181", "decision": "approved" }, + { "themeId": "coastal-studio-morning", "sourceSha256": "60a7797c7ca393e3b27a5da7a52b9c3f61c94358b47ae718ea1e75f699b0c1d7", "decision": "approved" }, + { "themeId": "desert-observatory-night", "sourceSha256": "5306564b8a931e00a971a1d6700c9d0a62c40e702fed4f93d91f013c43ed7383", "decision": "approved" }, + { "themeId": "firefly-river-pact", "sourceSha256": "19a1e78781c570425fc28ad915847120dbdc616a998153a215e4bb84fb78f490", "decision": "approved" }, + { "themeId": "great-lakes-rainroom", "sourceSha256": "9b3596a8b21e657ff402692150114c684be4175d22e83c2061c2bca8bc0a1d48", "decision": "approved" }, + { "themeId": "jade-archive-dawn", "sourceSha256": "e1cd53e9a1952adda1d761b2b7f64c03c420223e56650350d0622d03ca9afb58", "decision": "approved" }, + { "themeId": "late-diner-afterhours", "sourceSha256": "39a525aeca2f7fa5d5ecfeec798f6203e16222a8d80fa08cbc0147cac7923860", "decision": "approved" }, + { "themeId": "plum-sword-snow", "sourceSha256": "0db74a9df358991d4261236a9ad94a31a963e187b75ea2c6693c2d1e01015a1a", "decision": "approved" }, + { "themeId": "sky-garden-herbarium", "sourceSha256": "69fd6fdfaafe97821391859e5d07a2a160ceba6f06f3ff0f1dd1d62f47babeba", "decision": "approved" } + ] +}