chore: release v1.0.19

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

scripts/ci/compile-android.sh

@@ -20,20 +20,23 @@ echo "==> compile-android: version=${VER} build=${BUILD}"
 # Sync Flutter pubspec version (BSD sed on macOS)
 sed -i '' "s/^version:.*/version: ${VER}+${BUILD}/" client/pubspec.yaml
 
-# --- release 签名：从 CI secrets 还原 keystore 与 key.properties ---
-if [ -n "${ANDROID_KEYSTORE_BASE64:-}" ]; then
-  echo "==> compile-android: configuring release signing"
-  KEYSTORE_PATH="$(pwd)/client/android/jiu-release.jks"
-  echo "${ANDROID_KEYSTORE_BASE64}" | base64 --decode > "${KEYSTORE_PATH}"
-  cat > client/android/key.properties <<EOF
+# --- release 签名（强制）：从 CI secrets 还原 keystore 与 key.properties ---
+# 必须 release 签名。缺任一签名 secret 直接失败，绝不回退 debug：
+# debug 包用公开调试密钥签名，不能正式分发，也无法与正式版互相覆盖升级。
+: "${ANDROID_KEYSTORE_BASE64:?缺少 ANDROID_KEYSTORE_BASE64：未配置 Android release 签名，构建中止（不回退 debug）}"
+: "${ANDROID_KEYSTORE_PASSWORD:?缺少 ANDROID_KEYSTORE_PASSWORD：未配置 Android release 签名，构建中止}"
+: "${ANDROID_KEY_ALIAS:?缺少 ANDROID_KEY_ALIAS：未配置 Android release 签名，构建中止}"
+: "${ANDROID_KEY_PASSWORD:?缺少 ANDROID_KEY_PASSWORD：未配置 Android release 签名，构建中止}"
+
+echo "==> compile-android: configuring release signing"
+KEYSTORE_PATH="$(pwd)/client/android/jiu-release.jks"
+echo "${ANDROID_KEYSTORE_BASE64}" | base64 --decode > "${KEYSTORE_PATH}"
+cat > client/android/key.properties <<EOF
 storeFile=${KEYSTORE_PATH}
 storePassword=${ANDROID_KEYSTORE_PASSWORD}
 keyAlias=${ANDROID_KEY_ALIAS}
 keyPassword=${ANDROID_KEY_PASSWORD}
 EOF
-else
-  echo "==> compile-android: WARNING — no ANDROID_KEYSTORE_BASE64, falling back to debug signing"
-fi
 
 # Build APK (universal, all ABIs — simplest for sideload download)
 cd client