Fix release workflow platform builds

Author: tri5m

.github/workflows/release.yml

@@ -76,9 +76,40 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Build
+      - name: Prepare updater signing key
+        shell: bash
+        run: |
+          if [ -z "${TAURI_SIGNING_PRIVATE_KEY:-}" ]; then
+            echo "TAURI_SIGNING_PRIVATE_KEY secret is required" >&2
+            exit 1
+          fi
+          node - <<'NODE'
+          const key = process.env.TAURI_SIGNING_PRIVATE_KEY.trim();
+          const decoded = Buffer.from(key, 'base64').toString('utf8');
+          const firstLine = decoded.split(/\r?\n/, 1)[0] || '';
+
+          if (!firstLine.startsWith('untrusted comment:')) {
+            console.error('TAURI_SIGNING_PRIVATE_KEY must be the full content of .updater/file-share.key.');
+            process.exit(1);
+          }
+
+          if (firstLine.includes('public key')) {
+            console.error('TAURI_SIGNING_PRIVATE_KEY is a public key. Use .updater/file-share.key, not .updater/file-share.key.pub.');
+            process.exit(1);
+          }
+
+          if (!firstLine.includes('secret key')) {
+            console.error('TAURI_SIGNING_PRIVATE_KEY is not an updater secret key.');
+            process.exit(1);
+          }
+          NODE
+          printf '%s' "$TAURI_SIGNING_PRIVATE_KEY" > "$RUNNER_TEMP/tauri-signing.key"
         env:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+
+      - name: Build
+        env:
+          TAURI_SIGNING_PRIVATE_KEY_PATH: ${{ runner.temp }}/tauri-signing.key
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
         run: npm run build -- ${{ matrix.build_args }}
 

README.md

@@ -40,7 +40,7 @@ npm run dev
 
 启动后会打开 Tauri 管理端窗口。输入端口并点击“启动服务”后，客户端才可以通过局域网地址访问。
 
-桌面端在 macOS 菜单栏和 Windows 系统托盘中提供后台入口。关闭窗口不会退出应用，需要通过托盘菜单里的“退出”真正关闭。
+桌面端在 macOS 菜单栏和 Windows 系统托盘中提供后台入口。
 
 开发模式说明：
 
@@ -60,7 +60,7 @@ npm run build
 
 GitHub Actions 发布前，需要在仓库 Settings -> Secrets and variables -> Actions 中添加：
 
-- `TAURI_SIGNING_PRIVATE_KEY`：`.updater/file-share.key` 的完整内容
+- `TAURI_SIGNING_PRIVATE_KEY`：`.updater/file-share.key` 的原始完整内容，直接复制文件里的 base64 字符串，不要解码，也不要使用 `.updater/file-share.key.pub`
 - `TAURI_SIGNING_PRIVATE_KEY_PASSWORD`：如果私钥设置了密码再填写；当前生成的私钥没有密码，可以不填
 
 ## 自动发布

src-tauri/src/main.rs

@@ -7,8 +7,10 @@ use tauri::{
     image::Image,
     menu::{Menu, MenuItem},
     tray::{TrayIcon, TrayIconBuilder},
-    ActivationPolicy, AppHandle, Emitter, Manager, RunEvent, WindowEvent, Wry,
+    AppHandle, Emitter, Manager, RunEvent, WindowEvent, Wry,
 };
+#[cfg(target_os = "macos")]
+use tauri::ActivationPolicy;
 
 const DEFAULT_PORT: u16 = 5421;
 const TRAY_TOGGLE_SHARE_ID: &str = "toggle-share";