fix: make release packaging portable

- replace zip and shasum shell dependencies with Python stdlib helpers

- keep release checksum and archive generation working under Git Bash on Windows

Author: Kingson4Wu

scripts/release-package.sh

@@ -18,6 +18,7 @@ DIST_DIR="$ROOT_DIR/dist"
 TMP_DIR="$(mktemp -d)"
 PACKAGE_NAME="git-auto-sync-${VERSION}-release"
 PACKAGE_ROOT="$TMP_DIR/$PACKAGE_NAME"
+PYTHON_BIN="${PYTHON:-}"
 ARTIFACTS=(
   "$DIST_DIR/${PACKAGE_NAME}.tar.gz"
   "$DIST_DIR/${PACKAGE_NAME}.tar.gz.sha256sum"
@@ -35,6 +36,17 @@ RELEASE_FILES=(
   "uv.lock"
 )
 
+if [[ -z "$PYTHON_BIN" ]]; then
+  if command -v python3 >/dev/null 2>&1; then
+    PYTHON_BIN="python3"
+  elif command -v python >/dev/null 2>&1; then
+    PYTHON_BIN="python"
+  else
+    echo "Missing required command for release package: python3 or python" >&2
+    exit 1
+  fi
+fi
+
 for item in "${RELEASE_FILES[@]}"; do
   if [[ ! -e "$ROOT_DIR/$item" ]]; then
     echo "Missing required file for release package: $item" >&2
@@ -56,12 +68,35 @@ find "$PACKAGE_ROOT" -type f \( -name "*.pyc" -o -name "*.pyo" \) -delete
 cp -f "$ROOT_DIR/README.md" "$PACKAGE_ROOT/INSTALL.md"
 
 tar -czf "$DIST_DIR/${PACKAGE_NAME}.tar.gz" -C "$TMP_DIR" "$PACKAGE_NAME"
-shasum -a 256 "$DIST_DIR/${PACKAGE_NAME}.tar.gz" | awk '{print $1}' > "$DIST_DIR/${PACKAGE_NAME}.tar.gz.sha256sum"
+"$PYTHON_BIN" - "$DIST_DIR/${PACKAGE_NAME}.tar.gz" "$DIST_DIR/${PACKAGE_NAME}.tar.gz.sha256sum" <<'PY'
+from pathlib import Path
+import hashlib
+import sys
 
-(
-  cd "$TMP_DIR" && zip -r "$DIST_DIR/${PACKAGE_NAME}.zip" "$PACKAGE_NAME" >/dev/null
-)
-shasum -a 256 "$DIST_DIR/${PACKAGE_NAME}.zip" | awk '{print $1}' > "$DIST_DIR/${PACKAGE_NAME}.zip.sha256sum"
+archive = Path(sys.argv[1])
+checksum = Path(sys.argv[2])
+checksum.write_text(hashlib.sha256(archive.read_bytes()).hexdigest() + "\n", encoding="utf-8")
+PY
+
+"$PYTHON_BIN" - "$TMP_DIR" "$PACKAGE_NAME" "$DIST_DIR/${PACKAGE_NAME}.zip" "$DIST_DIR/${PACKAGE_NAME}.zip.sha256sum" <<'PY'
+from pathlib import Path
+import hashlib
+import sys
+import zipfile
+
+tmp_dir = Path(sys.argv[1])
+package_name = sys.argv[2]
+archive = Path(sys.argv[3])
+checksum = Path(sys.argv[4])
+package_root = tmp_dir / package_name
+
+with zipfile.ZipFile(archive, "w", compression=zipfile.ZIP_DEFLATED) as zf:
+    for path in sorted(package_root.rglob("*")):
+        if path.is_file():
+            zf.write(path, path.relative_to(tmp_dir).as_posix())
+
+checksum.write_text(hashlib.sha256(archive.read_bytes()).hexdigest() + "\n", encoding="utf-8")
+PY
 
 rm -rf "$TMP_DIR"