✨ feat: support desktop release framework and workflow (#6474)

* add desktop

fix build

update release desktop ci

improve desktop build for pr workflow

update desktop build workflow

test auto updater

fix

fix release nightly channel

support shortcut framework

improve nightly version rule

add zip release

only add mac publish

fix static file relative issue

support delete files

fix lint

enable asar

add setting open in editor in menu

add electron store framework and locale update flow

fix default searchFCModel

refactor the electron server ipc to stable mode

improve electron dev workflow

improve electron build workflow

make qwen2.5b default

improve comment workflow

fix types

refactor code

improve window size of settings/provider

路由拦截器v3.5

fix RouteIntercept issue

improve log

use productName in package.json

update

add pin list for feature flag

update

sure settings update

make ollama as default provider in desktop

fix desktop close page issue

fix desktop default variants

improve to reduce bundle

improve to reduce bundle again

improve set desktop version workflow

add nightly icons

add prebuild scripts to reduce package size

add to test prebuild

fix workflow

try to add sign and notarize for mac in workflow

try to add sign and notarize

add i18n for menu and main

update menu i18n

add i18n framework

add menu implement and setting

improve layout design for desktop

update Author

fix failed register protocol

fix prod building

fix tests

fix open error of mac and windows
improve lint

update pr comment

add service framework

add fileSearchService

improve

fix release workflow

add header

improve pr workflow fetch

improve client fetch

add linux upload workflow

improve workflow and implement

fix build electron in ci

build the desktop framework

fix build electron in ci

update tsconfig

fix desktop build workflow

finish desktop build workflow

fix workflow build steps

update workflow

test release workflow

refactor

update

update

improve loading state

refactor the 404 error

* 重构存储路径，统一到一个 lobehub-storage 下，方便未来用户自定义存储路径

* fix lint

* update

* try to fix windows open issue

* rename

* fix storage

* refactor the remote server sync

* refactor the request method

* 完成服务端同步实现逻辑

* fix lint

* save size

* refactor to make sure different instance of ipc channel

* clean log

* fix refresh

* fix tools calling

* fix auth callback issue

* update workflow

* add window ico

* push

* update

* add beta release

* fix update issue

* 完成官方实例链接

* fix

* fix stdio

Author: arvinxx

.env.desktop

@@ -3,6 +3,5 @@ APP_URL=http://localhost:3015
 FEATURE_FLAGS=-check_updates,+pin_list
 KEY_VAULTS_SECRET=oLXWIiR/AKF+rWaqy9lHkrYgzpATbW3CtJp3UfkVgpE=
 DATABASE_URL=postgresql://postgres@localhost:5432/postgres
-DEFAULT_AGENT_CONFIG="model=qwen2.5;provider=ollama;chatConfig.searchFCModel.provider=ollama;chatConfig.searchFCModel.model=qwen2.5"
-SYSTEM_AGENT="default=ollama/qwen2.5"
 SEARCH_PROVIDERS=search1api
+NEXT_PUBLIC_SERVICE_MODE='server'

.github/workflows/release-desktop.yml renamed to .github/workflows/desktop-pr-build.yml

@@ -1,9 +1,6 @@
-name: Release Desktop
+name: Desktop PR Build
 
 on:
-#  uncomment when official desktop version released
-#  release:
-#    types: [published] # 发布 release 时触发构建
   pull_request:
     types: [synchronize, labeled, unlabeled] # PR 更新或标签变化时触发
 
@@ -12,17 +9,17 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+# Add default permissions
+permissions: read-all
+
 env:
   PR_TAG_PREFIX: pr- # PR 构建版本的前缀标识
 
 jobs:
   test:
     name: Code quality check
     # 添加 PR label 触发条件，只有添加了 Build Desktop 标签的 PR 才会触发构建
-    if: |
-      (github.event_name == 'pull_request' &&
-       contains(github.event.pull_request.labels.*.name, 'Build Desktop')) ||
-      github.event_name != 'pull_request'
+    if: contains(github.event.pull_request.labels.*.name, 'Build Desktop')
     runs-on: ubuntu-latest # 只在 ubuntu 上运行一次检查
     steps:
       - name: Checkout base
@@ -38,7 +35,7 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v2
         with:
-          version: 8
+          version: 9
 
       - name: Install deps
         run: pnpm install
@@ -50,21 +47,14 @@ jobs:
         env:
           NODE_OPTIONS: --max-old-space-size=6144
 
-  #      - name: Test
-  #        run: pnpm run test
-
   version:
     name: Determine version
     # 与 test job 相同的触发条件
-    if: |
-      (github.event_name == 'pull_request' &&
-       contains(github.event.pull_request.labels.*.name, 'Build Desktop')) ||
-      github.event_name != 'pull_request'
+    if: contains(github.event.pull_request.labels.*.name, 'Build Desktop')
     runs-on: ubuntu-latest
     outputs:
       # 输出版本信息，供后续 job 使用
       version: ${{ steps.set_version.outputs.version }}
-      is_pr_build: ${{ steps.set_version.outputs.is_pr_build }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -82,40 +72,20 @@ jobs:
           # 从 apps/desktop/package.json 读取基础版本号
           base_version=$(node -p "require('./apps/desktop/package.json').version")
 
-          if [ "${{ github.event_name }}" == "pull_request" ]; then
-            # PR 构建：在基础版本号上添加 PR 信息
-            branch_name="${{ github.head_ref }}"
-            # 清理分支名，移除非法字符
-            sanitized_branch=$(echo "${branch_name}" | sed -E 's/[^a-zA-Z0-9_.-]+/-/g')
-            # 创建特殊的 PR 版本号：基础版本号-PR前缀-分支名-提交哈希
-            version="${base_version}-${{ env.PR_TAG_PREFIX }}${sanitized_branch}-$(git rev-parse --short HEAD)"
-            echo "version=${version}" >> $GITHUB_OUTPUT
-            echo "is_pr_build=true" >> $GITHUB_OUTPUT
-            echo "📦 Release Version: ${version} (based on base version ${base_version})"
-
-          elif [ "${{ github.event_name }}" == "release" ]; then
-            # Release 事件直接使用 release tag 作为版本号，去掉可能的 v 前缀
-            version="${{ github.event.release.tag_name }}"
-            version="${version#v}"
-            echo "version=${version}" >> $GITHUB_OUTPUT
-            echo "is_pr_build=false" >> $GITHUB_OUTPUT
-            echo "📦 Release Version: ${version}"
-
-          else
-            # 其他情况（如手动触发）使用 apps/desktop/package.json 的版本号
-            version="${base_version}"
-            echo "version=${version}" >> $GITHUB_OUTPUT
-            echo "is_pr_build=false" >> $GITHUB_OUTPUT
-            echo "📦 Release Version: ${version}"
-          fi
+          # PR 构建：在基础版本号上添加 PR 信息
+          pr_number="${{ github.event.pull_request.number }}"
+          ci_build_number="${{ github.run_number }}" # CI 构建编号
+          version="${base_version}-nightly.pr${pr_number}.${ci_build_number}"
+          echo "version=${version}" >> $GITHUB_OUTPUT
+          echo "📦 Release Version: ${version} (based on base version ${base_version})"
+
         env:
           NODE_OPTIONS: --max-old-space-size=6144
 
       # 输出版本信息总结，方便在 GitHub Actions 界面查看
       - name: Version Summary
         run: |
           echo "🚦 Release Version: ${{ steps.set_version.outputs.version }}"
-          echo "🔄 Is PR Build: ${{ steps.set_version.outputs.is_pr_build }}"
 
   build:
     needs: [version, test]
@@ -137,43 +107,57 @@ jobs:
       - name: Setup pnpm
         uses: pnpm/action-setup@v2
         with:
-          version: 8
+          version: 9
 
+      # node-linker=hoisted 模式将可以确保 asar 压缩可用
       - name: Install deps
-        run: pnpm install
+        run: pnpm install --node-linker=hoisted
 
       - name: Install deps on Desktop
         run: npm run install-isolated --prefix=./apps/desktop
 
       # 设置 package.json 的版本号
       - name: Set package version
-        run: npm run workflow:set-desktop-version ${{ needs.version.outputs.version }}
+        run: npm run workflow:set-desktop-version ${{ needs.version.outputs.version }} nightly
 
       # macOS 构建处理
       - name: Build artifact on macOS
         if: runner.os == 'macOS'
         run: npm run desktop:build
         env:
-          APP_URL: http://localhost:3010
+          # 设置更新通道，PR构建为nightly，否则为stable
+          UPDATE_CHANNEL: 'nightly'
+          APP_URL: http://localhost:3015
           DATABASE_URL: 'postgresql://postgres@localhost:5432/postgres'
           # 默认添加一个加密 SECRET
           KEY_VAULTS_SECRET: 'oLXWIiR/AKF+rWaqy9lHkrYgzpATbW3CtJp3UfkVgpE='
-        # 公证部分将来再加回
-        #   CSC_LINK: ./build/developer-id-app-certs.p12
-        #   CSC_KEY_PASSWORD: ${{ secrets.APPLE_APP_CERTS_PASSWORD }}
-        #   APPLE_ID: ${{ secrets.APPLE_ID }}
-        #   APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
+          # macOS 签名和公证配置
+          CSC_LINK: ${{ secrets.APPLE_CERTIFICATE_BASE64 }}
+          CSC_KEY_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          NEXT_PUBLIC_DESKTOP_PROJECT_ID: ${{ secrets.UMAMI_NIGHTLY_DESKTOP_PROJECT_ID }}
+          NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL: ${{ secrets.UMAMI_NIGHTLY_DESKTOP_BASE_URL }}
+
+          # allow provisionally
+          CSC_FOR_PULL_REQUEST: true
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
 
       # 非 macOS 平台构建处理
       - name: Build artifact on other platforms
         if: runner.os != 'macOS'
         run: npm run desktop:build
         env:
-          APP_URL: http://localhost:3010
+          # 设置更新通道，PR构建为nightly，否则为stable
+          UPDATE_CHANNEL: 'nightly'
+          APP_URL: http://localhost:3015
           DATABASE_URL: 'postgresql://postgres@localhost:5432/postgres'
           KEY_VAULTS_SECRET: 'oLXWIiR/AKF+rWaqy9lHkrYgzpATbW3CtJp3UfkVgpE='
+          NEXT_PUBLIC_DESKTOP_PROJECT_ID: ${{ secrets.UMAMI_NIGHTLY_DESKTOP_PROJECT_ID }}
+          NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL: ${{ secrets.UMAMI_NIGHTLY_DESKTOP_BASE_URL }}
+
 
-      # 上传构建产物，移除了 zip 相关部分
+      # 上传构建产物
       - name: Upload artifact
         uses: actions/upload-artifact@v4
         with:
@@ -186,18 +170,21 @@ jobs:
             apps/desktop/release/*.AppImage
           retention-days: 5
 
-      - name: Log build info
-        run: |
-          echo "🔄 Is PR Build: ${{ needs.version.outputs.is_pr_build }}"
-
-  # 将原本的 merge job 调整，作为所有构建产物的准备步骤
-  prepare-artifacts:
+  publish-pr:
     needs: [build, version]
-    name: Prepare Artifacts
+    name: Publish PR Build
     runs-on: ubuntu-latest
+    # Grant write permissions for creating release and commenting on PR
+    permissions:
+      contents: write
+      pull-requests: write
     outputs:
       artifact_path: ${{ steps.set_path.outputs.path }}
     steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
       # 下载所有平台的构建产物
       - name: Download artifacts
         uses: actions/download-artifact@v4
@@ -210,66 +197,6 @@ jobs:
       - name: List artifacts
         run: ls -R release
 
-      # 设置构建产物路径，供后续 job 使用
-      - name: Set artifact path
-        id: set_path
-        run: echo "path=release" >> $GITHUB_OUTPUT
-
-  # 正式版发布 job - 只处理 release 触发的场景
-  publish-release:
-    # 只在 release 事件触发且不是 PR 构建时执行
-    if: |
-      github.event_name == 'release' &&
-      needs.version.outputs.is_pr_build != 'true'
-    needs: [prepare-artifacts, version]
-    name: Publish Release
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      # 下载构建产物
-      - name: Download artifacts
-        uses: actions/download-artifact@v4
-        with:
-          path: ${{ needs.prepare-artifacts.outputs.artifact_path }}
-          pattern: release-*
-          merge-multiple: true
-
-      # 将构建产物上传到现有 release
-      - name: Upload to Release
-        uses: softprops/action-gh-release@v1
-        with:
-          tag_name: ${{ github.event.release.tag_name }}
-          files: |
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/latest*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.dmg*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.zip*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.exe*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.AppImage
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-  # PR 构建的处理步骤
-  publish-pr:
-    if: needs.version.outputs.is_pr_build == 'true'
-    needs: [prepare-artifacts, version]
-    name: Publish PR Build
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      # 下载构建产物
-      - name: Download artifacts
-        uses: actions/download-artifact@v4
-        with:
-          path: ${{ needs.prepare-artifacts.outputs.artifact_path }}
-          pattern: release-*
-          merge-multiple: true
-
       # 生成PR发布描述
       - name: Generate PR Release Body
         id: pr_release_body
@@ -287,22 +214,22 @@ jobs:
 
             return body;
 
-      # 为构建产物创建一个临时发布
       - name: Create Temporary Release for PR
         id: create_release
         uses: softprops/action-gh-release@v1
         with:
           name: PR Build v${{ needs.version.outputs.version }}
-          tag_name: pr-build-${{ github.event.pull_request.number }}-${{ github.sha }}
+          tag_name: v${{ needs.version.outputs.version }}
+          #          tag_name: pr-build-${{ github.event.pull_request.number }}-${{ github.sha }}
           body: ${{ steps.pr_release_body.outputs.result }}
           draft: false
           prerelease: true
           files: |
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/latest*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.dmg*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.zip*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.exe*
-            ${{ needs.prepare-artifacts.outputs.artifact_path }}/*.AppImage
+            release/latest*
+            release/*.dmg*
+            release/*.zip*
+            release/*.exe*
+            release/*.AppImage
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -315,17 +242,12 @@ jobs:
             const releaseUrl = "${{ steps.create_release.outputs.url }}";
             const prCommentGenerator = require('${{ github.workspace }}/.github/scripts/pr-comment.js');
 
-            const body = await prCommentGenerator({
+            const result = await prCommentGenerator({
               github,
               context,
               releaseUrl,
               version: "${{ needs.version.outputs.version }}",
-              tag: "pr-build-${{ github.event.pull_request.number }}-${{ github.sha }}"
+              tag: "v${{ needs.version.outputs.version }}"
             });
 
-            github.rest.issues.createComment({
-              issue_number: context.issue.number,
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              body: body
-            });
+            console.log(`评论状态: ${result.updated ? '已更新' : '已创建'}, ID: ${result.id}`);