Files

T

修雨 bd711108f9 fix(upgrade): ad-hoc sign darwin binaries to fix amfid SIGKILL on Apple Silicon (#339 )

GoReleaser cross-compiles darwin/arm64 binaries on ubuntu-latest with no
codesign step. macOS 11+ on Apple Silicon requires at least an ad-hoc
signature; unsigned arm64 binaries are SIGKILL'd by amfid on first exec,
which surfaces as `signal: killed` and aborts `dws upgrade` at the
"解压并验证" step.

Two layers of fix:

1. Release-side: post-goreleaser.sh now unpacks each dws-darwin-*.tar.gz,
   applies an ad-hoc signature (codesign locally, rcodesign in CI),
   deterministically repacks, and rewrites the matching line in
   checksums.txt. release.yml installs rcodesign 0.27.0 before
   GoReleaser runs.

2. Client-side self-heal: validateNewBinary detects `signal: killed` on
   darwin and retries once after running `codesign --force --sign -` and
   clearing com.apple.quarantine. Future releases stay functional even
   if the signing step is ever skipped.

Verified end-to-end: stripped a real dws binary → exec exits 137 →
validateNewBinary recovers → final binary shows Signature=adhoc and runs.

2026-05-21 22:45:22 +08:00

dev

fix: unify version management - pass git tag to post-goreleaser.sh

2026-04-01 17:03:52 +08:00

hooks

init

2026-03-27 17:55:57 +08:00

policy

fix: correct structure about security.

2026-03-28 21:42:06 +08:00

release

fix(upgrade): ad-hoc sign darwin binaries to fix amfid SIGKILL on Apple Silicon (#339 )

2026-05-21 22:45:22 +08:00

install-skills.sh

fix(install): add .hermes/skills to AGENT_DIRS (#188 ) (#221 )

2026-05-07 11:07:27 +08:00

install.ps1

fix(install): add .hermes/skills to AGENT_DIRS (#188 ) (#221 )

2026-05-07 11:07:27 +08:00

install.sh

fix(install): add .hermes/skills to AGENT_DIRS (#188 ) (#221 )

2026-05-07 11:07:27 +08:00

README.md

init

2026-03-27 17:55:57 +08:00

README.md

Go Bootstrap Scripts

These repo-local entrypoints are the supported shell entrypoints for building, testing, packaging, and policy checks.

make build: build the dws CLI from cmd
make test: run go test ./...
make lint: run formatting checks and required golangci-lint
make fmt: format Go source files under cmd/, internal/, and test/
make package: build all release artifacts locally via goreleaser --snapshot
make release: build and publish a release via goreleaser

Script groups:

Root installers: ./scripts/install.sh, ./scripts/install.ps1, ./scripts/install-skills.sh
Dev helpers: ./scripts/dev/build.sh, ./scripts/dev/lint.sh, ./scripts/dev/ci-local.sh, ./scripts/dev/run-mock-e2e.sh, ./scripts/dev/coverage.sh
Policy checks: ./scripts/policy/check-generated-drift.sh, ./scripts/policy/check-command-surface.sh, ./scripts/policy/check-open-source-assets.sh
Release helpers: ./scripts/release/post-goreleaser.sh, ./scripts/release/verify-package-managers.sh, ./scripts/release/publish-homebrew-formula.sh