fix(ci): 健壮化 Inno Setup 安装 + 部署仅保留最新安装包

- 新增 install-innosetup.ps1：校验下载大小、检查安装程序退出码、双
  Program Files 目录定位 ISCC，修复原内联命令静默成功但没真正装上的问题
  （SYSTEM 账户下 Invoke-WebRequest 无 -UseBasicParsing + 未检查退出码）
- provision/compile-windows.sh 在两个 Program Files 目录查找 ISCC
- deploy.sh 发布安装包到 /opt/jiu/downloads 前先清旧包，仅保留最新版本

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/backup.yml

@@ -1,8 +1,9 @@
 name: DB Backup
 
 on:
-  schedule:
-    - cron: '0 18 * * *'  # UTC 18:00 = 北京时间 02:00
+  # 定时备份已暂停（保留手动触发）。恢复时取消下面 schedule 的注释即可。
+  # schedule:
+  #   - cron: '0 18 * * *'  # UTC 18:00 = 北京时间 02:00
   workflow_dispatch:
 
 jobs:

.gitea/workflows/ci.yml

@@ -1,30 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches-ignore: [main]
-  pull_request:
-
-jobs:
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-go@v5
-        with:
-          go-version-file: backend/go.mod
-          cache-dependency-path: backend/go.sum
-
-      - name: Go tests
-        working-directory: backend
-        run: go test ./...
-
-      - uses: subosito/flutter-action@v2
-        with:
-          channel: stable
-          cache: true
-
-      - name: Flutter tests
-        working-directory: client
-        run: flutter test

.gitea/workflows/deploy.yml

@@ -16,6 +16,9 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Provision (idempotent — auto-runs if host not initialized)
+        run: sh scripts/ci/provision-mac.sh
+
       - name: Compile (Linux backend + Flutter Web)
         run: sh scripts/ci/compile.sh "${{ gitea.ref_name }}"
 
@@ -25,6 +28,30 @@ jobs:
           name: linux-web
           path: dist/
 
+  build-macos:
+    # Same physical runner as build-linux-web (label: mac, capacity 1). Run them
+    # serially via needs so the second job doesn't sit queued and time out.
+    needs: build-linux-web
+    runs-on: mac
+    env:
+      PUB_HOSTED_URL: https://pub.flutter-io.cn
+      FLUTTER_STORAGE_BASE_URL: https://storage.flutter-io.cn
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Provision (idempotent — auto-runs if host not initialized)
+        run: sh scripts/ci/provision-mac.sh
+
+      - name: Compile (Flutter macOS)
+        run: sh scripts/ci/compile-macos.sh "${{ gitea.ref_name }}"
+
+      - name: Upload macos artifacts
+        uses: actions/upload-artifact@v3
+        with:
+          name: macos
+          path: dist/
+
   build-windows:
     runs-on: windows
     env:
@@ -35,6 +62,10 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Provision (idempotent — auto-runs if host not initialized)
+        shell: bash
+        run: sh scripts/ci/provision-windows.sh
+
       - name: Compile (Flutter Windows)
         shell: bash
         run: sh scripts/ci/compile-windows.sh "${{ gitea.ref_name }}"
@@ -46,7 +77,7 @@ jobs:
           path: dist/
 
   release-deploy:
-    needs: [build-linux-web, build-windows]
+    needs: [build-linux-web, build-macos, build-windows]
     runs-on: mac
     env:
       GOPROXY: https://goproxy.cn,direct
@@ -62,6 +93,12 @@ jobs:
           name: linux-web
           path: dist/
 
+      - name: Download macos artifacts
+        uses: actions/download-artifact@v3
+        with:
+          name: macos
+          path: dist/
+
       - name: Download windows artifacts
         uses: actions/download-artifact@v3
         with:

.gitignore

@@ -24,6 +24,9 @@ client/devtools_options.yaml
 # Flutter 构建产物
 client/build/
 
+# CI 构建产物
+dist/
+
 # 营销站构建产物
 web/dist/
 web/node_modules/

CHANGELOG.md

@@ -5,6 +5,48 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.11] - 2026-06-04
+
+### 新功能
+- Windows 客户端改为提供安装程序（Inno Setup 打包的 `jiu-windows-x64-setup.exe`，含中文向导、桌面/开始菜单快捷方式、卸载项），不再是解压版 zip
+
+### 修复
+- 修复客户端「无法安全下载」：下载地址从内网 HTTP Forgejo（`http://192.168.3.200:3000`，公网不可达且被浏览器拦截）改为同源 HTTPS `https://jiu.51yanmei.com/downloads/...`，Windows、macOS 均生效
+- 修复 Windows runner 安装 Inno Setup 失败：改用健壮的 `install-innosetup.ps1`（校验下载大小 + 检查安装退出码 + 双 Program Files 目录定位 ISCC），替代会静默成功但实际没装上的内联命令
+- 部署时将最新安装包发布到 web 服务（`/opt/jiu/downloads/`，nginx `/downloads/` 提供），仅保留最新版本（清旧放新）
+
+## [1.0.9] - 2026-06-04
+
+### 修复
+- 适配 nginx 容器化部署：nginx 已迁入 `pangolin-edge` 容器（host 网络），deploy 改为将 jiu.conf 写入 pangolin 挂载目录并 `docker exec pangolin-edge nginx -s reload`，不再操作已废弃的主机 nginx
+
+## [1.0.8] - 2026-06-03
+
+### 修复
+- 修复 EC2 部署最后一步 nginx reload 失败（`invalid PID number`）：改用 `systemctl reload-or-restart nginx`（经 systemd MAINPID 发 HUP，不依赖空的 /run/nginx.pid），并 `enable nginx` 确保重启后自启
+
+## [1.0.7] - 2026-06-03
+
+### 修复
+- 修复 Windows 构建 `PathExistsException`（errno 183）：复制 client/ 到 C:\jiu-build 后，先清除 cp 复制成真实目录的插件软链（windows/flutter/ephemeral）及 .dart_tool/build，再交给 flutter 干净重建
+
+## [1.0.6] - 2026-06-03
+
+### 改进
+- CI 运行环境自愈预置：mac/windows runner 首次构建自动 `flutter precache` 并预热 pub/go/npm 缓存（stamp 文件按 Flutter 版本短路），后续构建不再运行时下载 engine
+- 发版流水线同一 mac runner 上的任务改为串行（build-macos 依赖 build-linux-web），避免排队等待超时失败
+- 暂停定时数据库备份（保留手动触发）
+
+## [1.0.5] - 2026-06-03
+
+### 修复
+- 修复 Windows CI 构建失败：放弃脆弱的 `subst W:` 路径映射，改为将 client/ 复制到 System32 之外的干净短路径（C:\jiu-build）构建，规避 WOW64 文件系统重定向
+
+## [1.0.4] - 2026-05-30
+
+### 新功能
+- 支持 macOS 桌面客户端下载，下载页 macOS 卡片已激活，下载 zip 解压即用
+
 ## [1.0.3] - 2026-05-28
 
 ### 新功能

client/lib/core/utils/print_util_stub.dart

@@ -54,6 +54,7 @@ Future<void> printProductLabelImpl({
   String shopAddress = '',
   String shopPhone = '',
 }) async {
+  try {
   final font = await _loadFont();
   final doc = pw.Document();
   final qrImage = pw.MemoryImage(qrBytes);
@@ -382,6 +383,7 @@ pw.Widget _sig(pw.Font font, pw.Font bold, String label) {
 }
 
 Future<void> printStockInOrderImpl(StockInOrder order) async {
+  try {
   final font = await _loadFont();
   final bold = await _loadBoldFont();
 

client/windows/.gitignore

@@ -0,0 +1,17 @@
+flutter/ephemeral/
+
+# Visual Studio user-specific files.
+*.suo
+*.user
+*.userosscache
+*.sln.docstates
+
+# Visual Studio build-related files.
+x64/
+x86/
+
+# Visual Studio cache files
+# files ending in .cache can be ignored
+*.[Cc]ache
+# but keep track of directories ending in .cache
+!*.[Cc]ache/

client/windows/CMakeLists.txt

@@ -0,0 +1,108 @@
+# Project-level configuration.
+cmake_minimum_required(VERSION 3.14)
+project(jiu_client LANGUAGES CXX)
+
+# The name of the executable created for the application. Change this to change
+# the on-disk name of your application.
+set(BINARY_NAME "jiu_client")
+
+# Explicitly opt in to modern CMake behaviors to avoid warnings with recent
+# versions of CMake.
+cmake_policy(VERSION 3.14...3.25)
+
+# Define build configuration option.
+get_property(IS_MULTICONFIG GLOBAL PROPERTY GENERATOR_IS_MULTI_CONFIG)
+if(IS_MULTICONFIG)
+  set(CMAKE_CONFIGURATION_TYPES "Debug;Profile;Release"
+    CACHE STRING "" FORCE)
+else()
+  if(NOT CMAKE_BUILD_TYPE AND NOT CMAKE_CONFIGURATION_TYPES)
+    set(CMAKE_BUILD_TYPE "Debug" CACHE
+      STRING "Flutter build mode" FORCE)
+    set_property(CACHE CMAKE_BUILD_TYPE PROPERTY STRINGS
+      "Debug" "Profile" "Release")
+  endif()
+endif()
+# Define settings for the Profile build mode.
+set(CMAKE_EXE_LINKER_FLAGS_PROFILE "${CMAKE_EXE_LINKER_FLAGS_RELEASE}")
+set(CMAKE_SHARED_LINKER_FLAGS_PROFILE "${CMAKE_SHARED_LINKER_FLAGS_RELEASE}")
+set(CMAKE_C_FLAGS_PROFILE "${CMAKE_C_FLAGS_RELEASE}")
+set(CMAKE_CXX_FLAGS_PROFILE "${CMAKE_CXX_FLAGS_RELEASE}")
+
+# Use Unicode for all projects.
+add_definitions(-DUNICODE -D_UNICODE)
+
+# Compilation settings that should be applied to most targets.
+#
+# Be cautious about adding new options here, as plugins use this function by
+# default. In most cases, you should add new options to specific targets instead
+# of modifying this function.
+function(APPLY_STANDARD_SETTINGS TARGET)
+  target_compile_features(${TARGET} PUBLIC cxx_std_17)
+  target_compile_options(${TARGET} PRIVATE /W4 /WX /wd"4100")
+  target_compile_options(${TARGET} PRIVATE /EHsc)
+  target_compile_definitions(${TARGET} PRIVATE "_HAS_EXCEPTIONS=0")
+  target_compile_definitions(${TARGET} PRIVATE "$<$<CONFIG:Debug>:_DEBUG>")
+endfunction()
+
+# Flutter library and tool build rules.
+set(FLUTTER_MANAGED_DIR "${CMAKE_CURRENT_SOURCE_DIR}/flutter")
+add_subdirectory(${FLUTTER_MANAGED_DIR})
+
+# Application build; see runner/CMakeLists.txt.
+add_subdirectory("runner")
+
+
+# Generated plugin build rules, which manage building the plugins and adding
+# them to the application.
+include(flutter/generated_plugins.cmake)
+
+
+# === Installation ===
+# Support files are copied into place next to the executable, so that it can
+# run in place. This is done instead of making a separate bundle (as on Linux)
+# so that building and running from within Visual Studio will work.
+set(BUILD_BUNDLE_DIR "$<TARGET_FILE_DIR:${BINARY_NAME}>")
+# Make the "install" step default, as it's required to run.
+set(CMAKE_VS_INCLUDE_INSTALL_TO_DEFAULT_BUILD 1)
+if(CMAKE_INSTALL_PREFIX_INITIALIZED_TO_DEFAULT)
+  set(CMAKE_INSTALL_PREFIX "${BUILD_BUNDLE_DIR}" CACHE PATH "..." FORCE)
+endif()
+
+set(INSTALL_BUNDLE_DATA_DIR "${CMAKE_INSTALL_PREFIX}/data")
+set(INSTALL_BUNDLE_LIB_DIR "${CMAKE_INSTALL_PREFIX}")
+
+install(TARGETS ${BINARY_NAME} RUNTIME DESTINATION "${CMAKE_INSTALL_PREFIX}"
+  COMPONENT Runtime)
+
+install(FILES "${FLUTTER_ICU_DATA_FILE}" DESTINATION "${INSTALL_BUNDLE_DATA_DIR}"
+  COMPONENT Runtime)
+
+install(FILES "${FLUTTER_LIBRARY}" DESTINATION "${INSTALL_BUNDLE_LIB_DIR}"
+  COMPONENT Runtime)
+
+if(PLUGIN_BUNDLED_LIBRARIES)
+  install(FILES "${PLUGIN_BUNDLED_LIBRARIES}"
+    DESTINATION "${INSTALL_BUNDLE_LIB_DIR}"
+    COMPONENT Runtime)
+endif()
+
+# Copy the native assets provided by the build.dart from all packages.
+set(NATIVE_ASSETS_DIR "${PROJECT_BUILD_DIR}native_assets/windows/")
+install(DIRECTORY "${NATIVE_ASSETS_DIR}"
+   DESTINATION "${INSTALL_BUNDLE_LIB_DIR}"
+   COMPONENT Runtime)
+
+# Fully re-copy the assets directory on each build to avoid having stale files
+# from a previous install.
+set(FLUTTER_ASSET_DIR_NAME "flutter_assets")
+install(CODE "
+  file(REMOVE_RECURSE \"${INSTALL_BUNDLE_DATA_DIR}/${FLUTTER_ASSET_DIR_NAME}\")
+  " COMPONENT Runtime)
+install(DIRECTORY "${PROJECT_BUILD_DIR}/${FLUTTER_ASSET_DIR_NAME}"
+  DESTINATION "${INSTALL_BUNDLE_DATA_DIR}" COMPONENT Runtime)
+
+# Install the AOT library on non-Debug builds only.
+install(FILES "${AOT_LIBRARY}" DESTINATION "${INSTALL_BUNDLE_DATA_DIR}"
+  CONFIGURATIONS Profile;Release
+  COMPONENT Runtime)

client/windows/flutter/CMakeLists.txt

@@ -0,0 +1,109 @@
+# This file controls Flutter-level build steps. It should not be edited.
+cmake_minimum_required(VERSION 3.14)
+
+set(EPHEMERAL_DIR "${CMAKE_CURRENT_SOURCE_DIR}/ephemeral")
+
+# Configuration provided via flutter tool.
+include(${EPHEMERAL_DIR}/generated_config.cmake)
+
+# TODO: Move the rest of this into files in ephemeral. See
+# https://github.com/flutter/flutter/issues/57146.
+set(WRAPPER_ROOT "${EPHEMERAL_DIR}/cpp_client_wrapper")
+
+# Set fallback configurations for older versions of the flutter tool.
+if (NOT DEFINED FLUTTER_TARGET_PLATFORM)
+  set(FLUTTER_TARGET_PLATFORM "windows-x64")
+endif()
+
+# === Flutter Library ===
+set(FLUTTER_LIBRARY "${EPHEMERAL_DIR}/flutter_windows.dll")
+
+# Published to parent scope for install step.
+set(FLUTTER_LIBRARY ${FLUTTER_LIBRARY} PARENT_SCOPE)
+set(FLUTTER_ICU_DATA_FILE "${EPHEMERAL_DIR}/icudtl.dat" PARENT_SCOPE)
+set(PROJECT_BUILD_DIR "${PROJECT_DIR}/build/" PARENT_SCOPE)
+set(AOT_LIBRARY "${PROJECT_DIR}/build/windows/app.so" PARENT_SCOPE)
+
+list(APPEND FLUTTER_LIBRARY_HEADERS
+  "flutter_export.h"
+  "flutter_windows.h"
+  "flutter_messenger.h"
+  "flutter_plugin_registrar.h"
+  "flutter_texture_registrar.h"
+)
+list(TRANSFORM FLUTTER_LIBRARY_HEADERS PREPEND "${EPHEMERAL_DIR}/")
+add_library(flutter INTERFACE)
+target_include_directories(flutter INTERFACE
+  "${EPHEMERAL_DIR}"
+)
+target_link_libraries(flutter INTERFACE "${FLUTTER_LIBRARY}.lib")
+add_dependencies(flutter flutter_assemble)
+
+# === Wrapper ===
+list(APPEND CPP_WRAPPER_SOURCES_CORE
+  "core_implementations.cc"
+  "standard_codec.cc"
+)
+list(TRANSFORM CPP_WRAPPER_SOURCES_CORE PREPEND "${WRAPPER_ROOT}/")
+list(APPEND CPP_WRAPPER_SOURCES_PLUGIN
+  "plugin_registrar.cc"
+)
+list(TRANSFORM CPP_WRAPPER_SOURCES_PLUGIN PREPEND "${WRAPPER_ROOT}/")
+list(APPEND CPP_WRAPPER_SOURCES_APP
+  "flutter_engine.cc"
+  "flutter_view_controller.cc"
+)
+list(TRANSFORM CPP_WRAPPER_SOURCES_APP PREPEND "${WRAPPER_ROOT}/")
+
+# Wrapper sources needed for a plugin.
+add_library(flutter_wrapper_plugin STATIC
+  ${CPP_WRAPPER_SOURCES_CORE}
+  ${CPP_WRAPPER_SOURCES_PLUGIN}
+)
+apply_standard_settings(flutter_wrapper_plugin)
+set_target_properties(flutter_wrapper_plugin PROPERTIES
+  POSITION_INDEPENDENT_CODE ON)
+set_target_properties(flutter_wrapper_plugin PROPERTIES
+  CXX_VISIBILITY_PRESET hidden)
+target_link_libraries(flutter_wrapper_plugin PUBLIC flutter)
+target_include_directories(flutter_wrapper_plugin PUBLIC
+  "${WRAPPER_ROOT}/include"
+)
+add_dependencies(flutter_wrapper_plugin flutter_assemble)
+
+# Wrapper sources needed for the runner.
+add_library(flutter_wrapper_app STATIC
+  ${CPP_WRAPPER_SOURCES_CORE}
+  ${CPP_WRAPPER_SOURCES_APP}
+)
+apply_standard_settings(flutter_wrapper_app)
+target_link_libraries(flutter_wrapper_app PUBLIC flutter)
+target_include_directories(flutter_wrapper_app PUBLIC
+  "${WRAPPER_ROOT}/include"
+)
+add_dependencies(flutter_wrapper_app flutter_assemble)
+
+# === Flutter tool backend ===
+# _phony_ is a non-existent file to force this command to run every time,
+# since currently there's no way to get a full input/output list from the
+# flutter tool.
+set(PHONY_OUTPUT "${CMAKE_CURRENT_BINARY_DIR}/_phony_")
+set_source_files_properties("${PHONY_OUTPUT}" PROPERTIES SYMBOLIC TRUE)
+add_custom_command(
+  OUTPUT ${FLUTTER_LIBRARY} ${FLUTTER_LIBRARY_HEADERS}
+    ${CPP_WRAPPER_SOURCES_CORE} ${CPP_WRAPPER_SOURCES_PLUGIN}
+    ${CPP_WRAPPER_SOURCES_APP}
+    ${PHONY_OUTPUT}
+  COMMAND ${CMAKE_COMMAND} -E env
+    ${FLUTTER_TOOL_ENVIRONMENT}
+    "${FLUTTER_ROOT}/packages/flutter_tools/bin/tool_backend.bat"
+      ${FLUTTER_TARGET_PLATFORM} $<CONFIG>
+  VERBATIM
+)
+add_custom_target(flutter_assemble DEPENDS
+  "${FLUTTER_LIBRARY}"
+  ${FLUTTER_LIBRARY_HEADERS}
+  ${CPP_WRAPPER_SOURCES_CORE}
+  ${CPP_WRAPPER_SOURCES_PLUGIN}
+  ${CPP_WRAPPER_SOURCES_APP}
+)

client/windows/flutter/generated_plugin_registrant.cc

@@ -0,0 +1,17 @@
+//
+//  Generated file. Do not edit.
+//
+
+// clang-format off
+
+#include "generated_plugin_registrant.h"
+
+#include <printing/printing_plugin.h>
+#include <url_launcher_windows/url_launcher_windows.h>
+
+void RegisterPlugins(flutter::PluginRegistry* registry) {
+  PrintingPluginRegisterWithRegistrar(
+      registry->GetRegistrarForPlugin("PrintingPlugin"));
+  UrlLauncherWindowsRegisterWithRegistrar(
+      registry->GetRegistrarForPlugin("UrlLauncherWindows"));
+}

client/windows/flutter/generated_plugin_registrant.h

@@ -0,0 +1,15 @@
+//
+//  Generated file. Do not edit.
+//
+
+// clang-format off
+
+#ifndef GENERATED_PLUGIN_REGISTRANT_
+#define GENERATED_PLUGIN_REGISTRANT_
+
+#include <flutter/plugin_registry.h>
+
+// Registers Flutter plugins.
+void RegisterPlugins(flutter::PluginRegistry* registry);
+
+#endif  // GENERATED_PLUGIN_REGISTRANT_

client/windows/flutter/generated_plugins.cmake

@@ -0,0 +1,26 @@
+#
+# Generated file, do not edit.
+#
+
+list(APPEND FLUTTER_PLUGIN_LIST
+  printing
+  url_launcher_windows
+)
+
+list(APPEND FLUTTER_FFI_PLUGIN_LIST
+  jni
+)
+
+set(PLUGIN_BUNDLED_LIBRARIES)
+
+foreach(plugin ${FLUTTER_PLUGIN_LIST})
+  add_subdirectory(flutter/ephemeral/.plugin_symlinks/${plugin}/windows plugins/${plugin})
+  target_link_libraries(${BINARY_NAME} PRIVATE ${plugin}_plugin)
+  list(APPEND PLUGIN_BUNDLED_LIBRARIES $<TARGET_FILE:${plugin}_plugin>)
+  list(APPEND PLUGIN_BUNDLED_LIBRARIES ${${plugin}_bundled_libraries})
+endforeach(plugin)
+
+foreach(ffi_plugin ${FLUTTER_FFI_PLUGIN_LIST})
+  add_subdirectory(flutter/ephemeral/.plugin_symlinks/${ffi_plugin}/windows plugins/${ffi_plugin})
+  list(APPEND PLUGIN_BUNDLED_LIBRARIES ${${ffi_plugin}_bundled_libraries})
+endforeach(ffi_plugin)

client/windows/runner/CMakeLists.txt

@@ -0,0 +1,40 @@
+cmake_minimum_required(VERSION 3.14)
+project(runner LANGUAGES CXX)
+
+# Define the application target. To change its name, change BINARY_NAME in the
+# top-level CMakeLists.txt, not the value here, or `flutter run` will no longer
+# work.
+#
+# Any new source files that you add to the application should be added here.
+add_executable(${BINARY_NAME} WIN32
+  "flutter_window.cpp"
+  "main.cpp"
+  "utils.cpp"
+  "win32_window.cpp"
+  "${FLUTTER_MANAGED_DIR}/generated_plugin_registrant.cc"
+  "Runner.rc"
+  "runner.exe.manifest"
+)
+
+# Apply the standard set of build settings. This can be removed for applications
+# that need different build settings.
+apply_standard_settings(${BINARY_NAME})
+
+# Add preprocessor definitions for the build version.
+target_compile_definitions(${BINARY_NAME} PRIVATE "FLUTTER_VERSION=\"${FLUTTER_VERSION}\"")
+target_compile_definitions(${BINARY_NAME} PRIVATE "FLUTTER_VERSION_MAJOR=${FLUTTER_VERSION_MAJOR}")
+target_compile_definitions(${BINARY_NAME} PRIVATE "FLUTTER_VERSION_MINOR=${FLUTTER_VERSION_MINOR}")
+target_compile_definitions(${BINARY_NAME} PRIVATE "FLUTTER_VERSION_PATCH=${FLUTTER_VERSION_PATCH}")
+target_compile_definitions(${BINARY_NAME} PRIVATE "FLUTTER_VERSION_BUILD=${FLUTTER_VERSION_BUILD}")
+
+# Disable Windows macros that collide with C++ standard library functions.
+target_compile_definitions(${BINARY_NAME} PRIVATE "NOMINMAX")
+
+# Add dependency libraries and include directories. Add any application-specific
+# dependencies here.
+target_link_libraries(${BINARY_NAME} PRIVATE flutter flutter_wrapper_app)
+target_link_libraries(${BINARY_NAME} PRIVATE "dwmapi.lib")
+target_include_directories(${BINARY_NAME} PRIVATE "${CMAKE_SOURCE_DIR}")
+
+# Run the Flutter tool portions of the build. This must not be removed.
+add_dependencies(${BINARY_NAME} flutter_assemble)

client/windows/runner/Runner.rc

@@ -0,0 +1,121 @@
+// Microsoft Visual C++ generated resource script.
+//
+#pragma code_page(65001)
+#include "resource.h"
+
+#define APSTUDIO_READONLY_SYMBOLS
+/////////////////////////////////////////////////////////////////////////////
+//
+// Generated from the TEXTINCLUDE 2 resource.
+//
+#include "winres.h"
+
+/////////////////////////////////////////////////////////////////////////////
+#undef APSTUDIO_READONLY_SYMBOLS
+
+/////////////////////////////////////////////////////////////////////////////
+// English (United States) resources
+
+#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
+LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US
+
+#ifdef APSTUDIO_INVOKED
+/////////////////////////////////////////////////////////////////////////////
+//
+// TEXTINCLUDE
+//
+
+1 TEXTINCLUDE
+BEGIN
+    "resource.h\0"
+END
+
+2 TEXTINCLUDE
+BEGIN
+    "#include ""winres.h""\r\n"
+    "\0"
+END
+
+3 TEXTINCLUDE
+BEGIN
+    "\r\n"
+    "\0"
+END
+
+#endif    // APSTUDIO_INVOKED
+
+
+/////////////////////////////////////////////////////////////////////////////
+//
+// Icon
+//
+
+// Icon with lowest ID value placed first to ensure application icon
+// remains consistent on all systems.
+IDI_APP_ICON            ICON                    "resources\\app_icon.ico"
+
+
+/////////////////////////////////////////////////////////////////////////////
+//
+// Version
+//
+
+#if defined(FLUTTER_VERSION_MAJOR) && defined(FLUTTER_VERSION_MINOR) && defined(FLUTTER_VERSION_PATCH) && defined(FLUTTER_VERSION_BUILD)
+#define VERSION_AS_NUMBER FLUTTER_VERSION_MAJOR,FLUTTER_VERSION_MINOR,FLUTTER_VERSION_PATCH,FLUTTER_VERSION_BUILD
+#else
+#define VERSION_AS_NUMBER 1,0,0,0
+#endif
+
+#if defined(FLUTTER_VERSION)
+#define VERSION_AS_STRING FLUTTER_VERSION
+#else
+#define VERSION_AS_STRING "1.0.0"
+#endif
+
+VS_VERSION_INFO VERSIONINFO
+ FILEVERSION VERSION_AS_NUMBER
+ PRODUCTVERSION VERSION_AS_NUMBER
+ FILEFLAGSMASK VS_FFI_FILEFLAGSMASK
+#ifdef _DEBUG
+ FILEFLAGS VS_FF_DEBUG
+#else
+ FILEFLAGS 0x0L
+#endif
+ FILEOS VOS__WINDOWS32
+ FILETYPE VFT_APP
+ FILESUBTYPE 0x0L
+BEGIN
+    BLOCK "StringFileInfo"
+    BEGIN
+        BLOCK "040904e4"
+        BEGIN
+            VALUE "CompanyName", "com.yanmei" "\0"
+            VALUE "FileDescription", "jiu_client" "\0"
+            VALUE "FileVersion", VERSION_AS_STRING "\0"
+            VALUE "InternalName", "jiu_client" "\0"
+            VALUE "LegalCopyright", "Copyright (C) 2026 com.yanmei. All rights reserved." "\0"
+            VALUE "OriginalFilename", "jiu_client.exe" "\0"
+            VALUE "ProductName", "jiu_client" "\0"
+            VALUE "ProductVersion", VERSION_AS_STRING "\0"
+        END
+    END
+    BLOCK "VarFileInfo"
+    BEGIN
+        VALUE "Translation", 0x409, 1252
+    END
+END
+
+#endif    // English (United States) resources
+/////////////////////////////////////////////////////////////////////////////
+
+
+
+#ifndef APSTUDIO_INVOKED
+/////////////////////////////////////////////////////////////////////////////
+//
+// Generated from the TEXTINCLUDE 3 resource.
+//
+
+
+/////////////////////////////////////////////////////////////////////////////
+#endif    // not APSTUDIO_INVOKED

client/windows/runner/flutter_window.cpp

@@ -0,0 +1,71 @@
+#include "flutter_window.h"
+
+#include <optional>
+
+#include "flutter/generated_plugin_registrant.h"
+
+FlutterWindow::FlutterWindow(const flutter::DartProject& project)
+    : project_(project) {}
+
+FlutterWindow::~FlutterWindow() {}
+
+bool FlutterWindow::OnCreate() {
+  if (!Win32Window::OnCreate()) {
+    return false;
+  }
+
+  RECT frame = GetClientArea();
+
+  // The size here must match the window dimensions to avoid unnecessary surface
+  // creation / destruction in the startup path.
+  flutter_controller_ = std::make_unique<flutter::FlutterViewController>(
+      frame.right - frame.left, frame.bottom - frame.top, project_);
+  // Ensure that basic setup of the controller was successful.
+  if (!flutter_controller_->engine() || !flutter_controller_->view()) {
+    return false;
+  }
+  RegisterPlugins(flutter_controller_->engine());
+  SetChildContent(flutter_controller_->view()->GetNativeWindow());
+
+  flutter_controller_->engine()->SetNextFrameCallback([&]() {
+    this->Show();
+  });
+
+  // Flutter can complete the first frame before the "show window" callback is
+  // registered. The following call ensures a frame is pending to ensure the
+  // window is shown. It is a no-op if the first frame hasn't completed yet.
+  flutter_controller_->ForceRedraw();
+
+  return true;
+}
+
+void FlutterWindow::OnDestroy() {
+  if (flutter_controller_) {
+    flutter_controller_ = nullptr;
+  }
+
+  Win32Window::OnDestroy();
+}
+
+LRESULT
+FlutterWindow::MessageHandler(HWND hwnd, UINT const message,
+                              WPARAM const wparam,
+                              LPARAM const lparam) noexcept {
+  // Give Flutter, including plugins, an opportunity to handle window messages.
+  if (flutter_controller_) {
+    std::optional<LRESULT> result =
+        flutter_controller_->HandleTopLevelWindowProc(hwnd, message, wparam,
+                                                      lparam);
+    if (result) {
+      return *result;
+    }
+  }
+
+  switch (message) {
+    case WM_FONTCHANGE:
+      flutter_controller_->engine()->ReloadSystemFonts();
+      break;
+  }
+
+  return Win32Window::MessageHandler(hwnd, message, wparam, lparam);
+}

client/windows/runner/flutter_window.h

@@ -0,0 +1,33 @@
+#ifndef RUNNER_FLUTTER_WINDOW_H_
+#define RUNNER_FLUTTER_WINDOW_H_
+
+#include <flutter/dart_project.h>
+#include <flutter/flutter_view_controller.h>
+
+#include <memory>
+
+#include "win32_window.h"
+
+// A window that does nothing but host a Flutter view.
+class FlutterWindow : public Win32Window {
+ public:
+  // Creates a new FlutterWindow hosting a Flutter view running |project|.
+  explicit FlutterWindow(const flutter::DartProject& project);
+  virtual ~FlutterWindow();
+
+ protected:
+  // Win32Window:
+  bool OnCreate() override;
+  void OnDestroy() override;
+  LRESULT MessageHandler(HWND window, UINT const message, WPARAM const wparam,
+                         LPARAM const lparam) noexcept override;
+
+ private:
+  // The project to run.
+  flutter::DartProject project_;
+
+  // The Flutter instance hosted by this window.
+  std::unique_ptr<flutter::FlutterViewController> flutter_controller_;
+};
+
+#endif  // RUNNER_FLUTTER_WINDOW_H_

client/windows/runner/main.cpp

@@ -0,0 +1,43 @@
+#include <flutter/dart_project.h>
+#include <flutter/flutter_view_controller.h>
+#include <windows.h>
+
+#include "flutter_window.h"
+#include "utils.h"
+
+int APIENTRY wWinMain(_In_ HINSTANCE instance, _In_opt_ HINSTANCE prev,
+                      _In_ wchar_t *command_line, _In_ int show_command) {
+  // Attach to console when present (e.g., 'flutter run') or create a
+  // new console when running with a debugger.
+  if (!::AttachConsole(ATTACH_PARENT_PROCESS) && ::IsDebuggerPresent()) {
+    CreateAndAttachConsole();
+  }
+
+  // Initialize COM, so that it is available for use in the library and/or
+  // plugins.
+  ::CoInitializeEx(nullptr, COINIT_APARTMENTTHREADED);
+
+  flutter::DartProject project(L"data");
+
+  std::vector<std::string> command_line_arguments =
+      GetCommandLineArguments();
+
+  project.set_dart_entrypoint_arguments(std::move(command_line_arguments));
+
+  FlutterWindow window(project);
+  Win32Window::Point origin(10, 10);
+  Win32Window::Size size(1280, 720);
+  if (!window.Create(L"jiu_client", origin, size)) {
+    return EXIT_FAILURE;
+  }
+  window.SetQuitOnClose(true);
+
+  ::MSG msg;
+  while (::GetMessage(&msg, nullptr, 0, 0)) {
+    ::TranslateMessage(&msg);
+    ::DispatchMessage(&msg);
+  }
+
+  ::CoUninitialize();
+  return EXIT_SUCCESS;
+}

client/windows/runner/resource.h

@@ -0,0 +1,16 @@
+//{{NO_DEPENDENCIES}}
+// Microsoft Visual C++ generated include file.
+// Used by Runner.rc
+//
+#define IDI_APP_ICON                    101
+
+// Next default values for new objects
+//
+#ifdef APSTUDIO_INVOKED
+#ifndef APSTUDIO_READONLY_SYMBOLS
+#define _APS_NEXT_RESOURCE_VALUE        102
+#define _APS_NEXT_COMMAND_VALUE         40001
+#define _APS_NEXT_CONTROL_VALUE         1001
+#define _APS_NEXT_SYMED_VALUE           101
+#endif
+#endif

client/windows/runner/runner.exe.manifest

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
+  <application xmlns="urn:schemas-microsoft-com:asm.v3">
+    <windowsSettings>
+      <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">PerMonitorV2</dpiAwareness>
+    </windowsSettings>
+  </application>
+  <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
+    <application>
+      <!-- Windows 10 and Windows 11 -->
+      <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
+    </application>
+  </compatibility>
+</assembly>

client/windows/runner/utils.cpp

@@ -0,0 +1,65 @@
+#include "utils.h"
+
+#include <flutter_windows.h>
+#include <io.h>
+#include <stdio.h>
+#include <windows.h>
+
+#include <iostream>
+
+void CreateAndAttachConsole() {
+  if (::AllocConsole()) {
+    FILE *unused;
+    if (freopen_s(&unused, "CONOUT$", "w", stdout)) {
+      _dup2(_fileno(stdout), 1);
+    }
+    if (freopen_s(&unused, "CONOUT$", "w", stderr)) {
+      _dup2(_fileno(stdout), 2);
+    }
+    std::ios::sync_with_stdio();
+    FlutterDesktopResyncOutputStreams();
+  }
+}
+
+std::vector<std::string> GetCommandLineArguments() {
+  // Convert the UTF-16 command line arguments to UTF-8 for the Engine to use.
+  int argc;
+  wchar_t** argv = ::CommandLineToArgvW(::GetCommandLineW(), &argc);
+  if (argv == nullptr) {
+    return std::vector<std::string>();
+  }
+
+  std::vector<std::string> command_line_arguments;
+
+  // Skip the first argument as it's the binary name.
+  for (int i = 1; i < argc; i++) {
+    command_line_arguments.push_back(Utf8FromUtf16(argv[i]));
+  }
+
+  ::LocalFree(argv);
+
+  return command_line_arguments;
+}
+
+std::string Utf8FromUtf16(const wchar_t* utf16_string) {
+  if (utf16_string == nullptr) {
+    return std::string();
+  }
+  unsigned int target_length = ::WideCharToMultiByte(
+      CP_UTF8, WC_ERR_INVALID_CHARS, utf16_string,
+      -1, nullptr, 0, nullptr, nullptr)
+    -1; // remove the trailing null character
+  int input_length = (int)wcslen(utf16_string);
+  std::string utf8_string;
+  if (target_length == 0 || target_length > utf8_string.max_size()) {
+    return utf8_string;
+  }
+  utf8_string.resize(target_length);
+  int converted_length = ::WideCharToMultiByte(
+      CP_UTF8, WC_ERR_INVALID_CHARS, utf16_string,
+      input_length, utf8_string.data(), target_length, nullptr, nullptr);
+  if (converted_length == 0) {
+    return std::string();
+  }
+  return utf8_string;
+}

client/windows/runner/utils.h

@@ -0,0 +1,19 @@
+#ifndef RUNNER_UTILS_H_
+#define RUNNER_UTILS_H_
+
+#include <string>
+#include <vector>
+
+// Creates a console for the process, and redirects stdout and stderr to
+// it for both the runner and the Flutter library.
+void CreateAndAttachConsole();
+
+// Takes a null-terminated wchar_t* encoded in UTF-16 and returns a std::string
+// encoded in UTF-8. Returns an empty std::string on failure.
+std::string Utf8FromUtf16(const wchar_t* utf16_string);
+
+// Gets the command line arguments passed in as a std::vector<std::string>,
+// encoded in UTF-8. Returns an empty std::vector<std::string> on failure.
+std::vector<std::string> GetCommandLineArguments();
+
+#endif  // RUNNER_UTILS_H_

client/windows/runner/win32_window.cpp

@@ -0,0 +1,288 @@
+#include "win32_window.h"
+
+#include <dwmapi.h>
+#include <flutter_windows.h>
+
+#include "resource.h"
+
+namespace {
+
+/// Window attribute that enables dark mode window decorations.
+///
+/// Redefined in case the developer's machine has a Windows SDK older than
+/// version 10.0.22000.0.
+/// See: https://docs.microsoft.com/windows/win32/api/dwmapi/ne-dwmapi-dwmwindowattribute
+#ifndef DWMWA_USE_IMMERSIVE_DARK_MODE
+#define DWMWA_USE_IMMERSIVE_DARK_MODE 20
+#endif
+
+constexpr const wchar_t kWindowClassName[] = L"FLUTTER_RUNNER_WIN32_WINDOW";
+
+/// Registry key for app theme preference.
+///
+/// A value of 0 indicates apps should use dark mode. A non-zero or missing
+/// value indicates apps should use light mode.
+constexpr const wchar_t kGetPreferredBrightnessRegKey[] =
+  L"Software\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize";
+constexpr const wchar_t kGetPreferredBrightnessRegValue[] = L"AppsUseLightTheme";
+
+// The number of Win32Window objects that currently exist.
+static int g_active_window_count = 0;
+
+using EnableNonClientDpiScaling = BOOL __stdcall(HWND hwnd);
+
+// Scale helper to convert logical scaler values to physical using passed in
+// scale factor
+int Scale(int source, double scale_factor) {
+  return static_cast<int>(source * scale_factor);
+}
+
+// Dynamically loads the |EnableNonClientDpiScaling| from the User32 module.
+// This API is only needed for PerMonitor V1 awareness mode.
+void EnableFullDpiSupportIfAvailable(HWND hwnd) {
+  HMODULE user32_module = LoadLibraryA("User32.dll");
+  if (!user32_module) {
+    return;
+  }
+  auto enable_non_client_dpi_scaling =
+      reinterpret_cast<EnableNonClientDpiScaling*>(
+          GetProcAddress(user32_module, "EnableNonClientDpiScaling"));
+  if (enable_non_client_dpi_scaling != nullptr) {
+    enable_non_client_dpi_scaling(hwnd);
+  }
+  FreeLibrary(user32_module);
+}
+
+}  // namespace
+
+// Manages the Win32Window's window class registration.
+class WindowClassRegistrar {
+ public:
+  ~WindowClassRegistrar() = default;
+
+  // Returns the singleton registrar instance.
+  static WindowClassRegistrar* GetInstance() {
+    if (!instance_) {
+      instance_ = new WindowClassRegistrar();
+    }
+    return instance_;
+  }
+
+  // Returns the name of the window class, registering the class if it hasn't
+  // previously been registered.
+  const wchar_t* GetWindowClass();
+
+  // Unregisters the window class. Should only be called if there are no
+  // instances of the window.
+  void UnregisterWindowClass();
+
+ private:
+  WindowClassRegistrar() = default;
+
+  static WindowClassRegistrar* instance_;
+
+  bool class_registered_ = false;
+};
+
+WindowClassRegistrar* WindowClassRegistrar::instance_ = nullptr;
+
+const wchar_t* WindowClassRegistrar::GetWindowClass() {
+  if (!class_registered_) {
+    WNDCLASS window_class{};
+    window_class.hCursor = LoadCursor(nullptr, IDC_ARROW);
+    window_class.lpszClassName = kWindowClassName;
+    window_class.style = CS_HREDRAW | CS_VREDRAW;
+    window_class.cbClsExtra = 0;
+    window_class.cbWndExtra = 0;
+    window_class.hInstance = GetModuleHandle(nullptr);
+    window_class.hIcon =
+        LoadIcon(window_class.hInstance, MAKEINTRESOURCE(IDI_APP_ICON));
+    window_class.hbrBackground = 0;
+    window_class.lpszMenuName = nullptr;
+    window_class.lpfnWndProc = Win32Window::WndProc;
+    RegisterClass(&window_class);
+    class_registered_ = true;
+  }
+  return kWindowClassName;
+}
+
+void WindowClassRegistrar::UnregisterWindowClass() {
+  UnregisterClass(kWindowClassName, nullptr);
+  class_registered_ = false;
+}
+
+Win32Window::Win32Window() {
+  ++g_active_window_count;
+}
+
+Win32Window::~Win32Window() {
+  --g_active_window_count;
+  Destroy();
+}
+
+bool Win32Window::Create(const std::wstring& title,
+                         const Point& origin,
+                         const Size& size) {
+  Destroy();
+
+  const wchar_t* window_class =
+      WindowClassRegistrar::GetInstance()->GetWindowClass();
+
+  const POINT target_point = {static_cast<LONG>(origin.x),
+                              static_cast<LONG>(origin.y)};
+  HMONITOR monitor = MonitorFromPoint(target_point, MONITOR_DEFAULTTONEAREST);
+  UINT dpi = FlutterDesktopGetDpiForMonitor(monitor);
+  double scale_factor = dpi / 96.0;
+
+  HWND window = CreateWindow(
+      window_class, title.c_str(), WS_OVERLAPPEDWINDOW,
+      Scale(origin.x, scale_factor), Scale(origin.y, scale_factor),
+      Scale(size.width, scale_factor), Scale(size.height, scale_factor),
+      nullptr, nullptr, GetModuleHandle(nullptr), this);
+
+  if (!window) {
+    return false;
+  }
+
+  UpdateTheme(window);
+
+  return OnCreate();
+}
+
+bool Win32Window::Show() {
+  return ShowWindow(window_handle_, SW_SHOWNORMAL);
+}
+
+// static
+LRESULT CALLBACK Win32Window::WndProc(HWND const window,
+                                      UINT const message,
+                                      WPARAM const wparam,
+                                      LPARAM const lparam) noexcept {
+  if (message == WM_NCCREATE) {
+    auto window_struct = reinterpret_cast<CREATESTRUCT*>(lparam);
+    SetWindowLongPtr(window, GWLP_USERDATA,
+                     reinterpret_cast<LONG_PTR>(window_struct->lpCreateParams));
+
+    auto that = static_cast<Win32Window*>(window_struct->lpCreateParams);
+    EnableFullDpiSupportIfAvailable(window);
+    that->window_handle_ = window;
+  } else if (Win32Window* that = GetThisFromHandle(window)) {
+    return that->MessageHandler(window, message, wparam, lparam);
+  }
+
+  return DefWindowProc(window, message, wparam, lparam);
+}
+
+LRESULT
+Win32Window::MessageHandler(HWND hwnd,
+                            UINT const message,
+                            WPARAM const wparam,
+                            LPARAM const lparam) noexcept {
+  switch (message) {
+    case WM_DESTROY:
+      window_handle_ = nullptr;
+      Destroy();
+      if (quit_on_close_) {
+        PostQuitMessage(0);
+      }
+      return 0;
+
+    case WM_DPICHANGED: {
+      auto newRectSize = reinterpret_cast<RECT*>(lparam);
+      LONG newWidth = newRectSize->right - newRectSize->left;
+      LONG newHeight = newRectSize->bottom - newRectSize->top;
+
+      SetWindowPos(hwnd, nullptr, newRectSize->left, newRectSize->top, newWidth,
+                   newHeight, SWP_NOZORDER | SWP_NOACTIVATE);
+
+      return 0;
+    }
+    case WM_SIZE: {
+      RECT rect = GetClientArea();
+      if (child_content_ != nullptr) {
+        // Size and position the child window.
+        MoveWindow(child_content_, rect.left, rect.top, rect.right - rect.left,
+                   rect.bottom - rect.top, TRUE);
+      }
+      return 0;
+    }
+
+    case WM_ACTIVATE:
+      if (child_content_ != nullptr) {
+        SetFocus(child_content_);
+      }
+      return 0;
+
+    case WM_DWMCOLORIZATIONCOLORCHANGED:
+      UpdateTheme(hwnd);
+      return 0;
+  }
+
+  return DefWindowProc(window_handle_, message, wparam, lparam);
+}
+
+void Win32Window::Destroy() {
+  OnDestroy();
+
+  if (window_handle_) {
+    DestroyWindow(window_handle_);
+    window_handle_ = nullptr;
+  }
+  if (g_active_window_count == 0) {
+    WindowClassRegistrar::GetInstance()->UnregisterWindowClass();
+  }
+}
+
+Win32Window* Win32Window::GetThisFromHandle(HWND const window) noexcept {
+  return reinterpret_cast<Win32Window*>(
+      GetWindowLongPtr(window, GWLP_USERDATA));
+}
+
+void Win32Window::SetChildContent(HWND content) {
+  child_content_ = content;
+  SetParent(content, window_handle_);
+  RECT frame = GetClientArea();
+
+  MoveWindow(content, frame.left, frame.top, frame.right - frame.left,
+             frame.bottom - frame.top, true);
+
+  SetFocus(child_content_);
+}
+
+RECT Win32Window::GetClientArea() {
+  RECT frame;
+  GetClientRect(window_handle_, &frame);
+  return frame;
+}
+
+HWND Win32Window::GetHandle() {
+  return window_handle_;
+}
+
+void Win32Window::SetQuitOnClose(bool quit_on_close) {
+  quit_on_close_ = quit_on_close;
+}
+
+bool Win32Window::OnCreate() {
+  // No-op; provided for subclasses.
+  return true;
+}
+
+void Win32Window::OnDestroy() {
+  // No-op; provided for subclasses.
+}
+
+void Win32Window::UpdateTheme(HWND const window) {
+  DWORD light_mode;
+  DWORD light_mode_size = sizeof(light_mode);
+  LSTATUS result = RegGetValue(HKEY_CURRENT_USER, kGetPreferredBrightnessRegKey,
+                               kGetPreferredBrightnessRegValue,
+                               RRF_RT_REG_DWORD, nullptr, &light_mode,
+                               &light_mode_size);
+
+  if (result == ERROR_SUCCESS) {
+    BOOL enable_dark_mode = light_mode == 0;
+    DwmSetWindowAttribute(window, DWMWA_USE_IMMERSIVE_DARK_MODE,
+                          &enable_dark_mode, sizeof(enable_dark_mode));
+  }
+}

client/windows/runner/win32_window.h

@@ -0,0 +1,102 @@
+#ifndef RUNNER_WIN32_WINDOW_H_
+#define RUNNER_WIN32_WINDOW_H_
+
+#include <windows.h>
+
+#include <functional>
+#include <memory>
+#include <string>
+
+// A class abstraction for a high DPI-aware Win32 Window. Intended to be
+// inherited from by classes that wish to specialize with custom
+// rendering and input handling
+class Win32Window {
+ public:
+  struct Point {
+    unsigned int x;
+    unsigned int y;
+    Point(unsigned int x, unsigned int y) : x(x), y(y) {}
+  };
+
+  struct Size {
+    unsigned int width;
+    unsigned int height;
+    Size(unsigned int width, unsigned int height)
+        : width(width), height(height) {}
+  };
+
+  Win32Window();
+  virtual ~Win32Window();
+
+  // Creates a win32 window with |title| that is positioned and sized using
+  // |origin| and |size|. New windows are created on the default monitor. Window
+  // sizes are specified to the OS in physical pixels, hence to ensure a
+  // consistent size this function will scale the inputted width and height as
+  // as appropriate for the default monitor. The window is invisible until
+  // |Show| is called. Returns true if the window was created successfully.
+  bool Create(const std::wstring& title, const Point& origin, const Size& size);
+
+  // Show the current window. Returns true if the window was successfully shown.
+  bool Show();
+
+  // Release OS resources associated with window.
+  void Destroy();
+
+  // Inserts |content| into the window tree.
+  void SetChildContent(HWND content);
+
+  // Returns the backing Window handle to enable clients to set icon and other
+  // window properties. Returns nullptr if the window has been destroyed.
+  HWND GetHandle();
+
+  // If true, closing this window will quit the application.
+  void SetQuitOnClose(bool quit_on_close);
+
+  // Return a RECT representing the bounds of the current client area.
+  RECT GetClientArea();
+
+ protected:
+  // Processes and route salient window messages for mouse handling,
+  // size change and DPI. Delegates handling of these to member overloads that
+  // inheriting classes can handle.
+  virtual LRESULT MessageHandler(HWND window,
+                                 UINT const message,
+                                 WPARAM const wparam,
+                                 LPARAM const lparam) noexcept;
+
+  // Called when CreateAndShow is called, allowing subclass window-related
+  // setup. Subclasses should return false if setup fails.
+  virtual bool OnCreate();
+
+  // Called when Destroy is called.
+  virtual void OnDestroy();
+
+ private:
+  friend class WindowClassRegistrar;
+
+  // OS callback called by message pump. Handles the WM_NCCREATE message which
+  // is passed when the non-client area is being created and enables automatic
+  // non-client DPI scaling so that the non-client area automatically
+  // responds to changes in DPI. All other messages are handled by
+  // MessageHandler.
+  static LRESULT CALLBACK WndProc(HWND const window,
+                                  UINT const message,
+                                  WPARAM const wparam,
+                                  LPARAM const lparam) noexcept;
+
+  // Retrieves a class instance pointer for |window|
+  static Win32Window* GetThisFromHandle(HWND const window) noexcept;
+
+  // Update the window frame's theme to match the system theme.
+  static void UpdateTheme(HWND const window);
+
+  bool quit_on_close_ = false;
+
+  // window handle for top level window.
+  HWND window_handle_ = nullptr;
+
+  // window handle for hosted content.
+  HWND child_content_ = nullptr;
+};
+
+#endif  // RUNNER_WIN32_WINDOW_H_

deploy/nginx-jiu.conf

@@ -59,6 +59,14 @@ server {
         try_files /scan.html =404;
     }
 
+    # 桌面客户端安装包下载（Windows .exe / macOS .zip）
+    location /downloads/ {
+        alias /opt/jiu/downloads/;
+        add_header Content-Disposition "attachment";
+        add_header Cache-Control "no-cache";
+        autoindex off;
+    }
+
     # 营销站点兜底（根路径及所有其他路径）
     location / {
         root /opt/jiu/marketing;

deploy/windows/jiu-installer.iss

@@ -0,0 +1,53 @@
+; Inno Setup script for 岩美酒库 Windows 客户端
+; Compiled in CI:
+;   ISCC /DAppVer=<ver> "/DSrcDir=<ReleaseDir>" "/DOutDir=<dist>" jiu-installer.iss
+; Produces: <OutDir>\jiu-windows-x64-setup.exe
+
+#ifndef AppVer
+  #define AppVer "0.0.0"
+#endif
+#ifndef SrcDir
+  #define SrcDir "."
+#endif
+#ifndef OutDir
+  #define OutDir "."
+#endif
+
+#define MyAppName "岩美酒库"
+#define MyAppExe "jiu_client.exe"
+#define MyAppPublisher "岩美"
+
+[Setup]
+AppId={{A3F5C1E2-9B47-4D8A-B6E0-2C1D4F8A9E33}
+AppName={#MyAppName}
+AppVersion={#AppVer}
+AppPublisher={#MyAppPublisher}
+DefaultDirName={autopf}\Jiu
+DefaultGroupName={#MyAppName}
+DisableProgramGroupPage=yes
+OutputDir={#OutDir}
+OutputBaseFilename=jiu-windows-x64-setup
+Compression=lzma2
+SolidCompression=yes
+WizardStyle=modern
+ArchitecturesAllowed=x64
+ArchitecturesInstallIn64BitMode=x64
+UninstallDisplayName={#MyAppName}
+UninstallDisplayIcon={app}\{#MyAppExe}
+
+[Languages]
+Name: "chinesesimp"; MessagesFile: "compiler:Languages\ChineseSimplified.isl"
+
+[Tasks]
+Name: "desktopicon"; Description: "{cm:CreateDesktopIcon}"; GroupDescription: "{cm:AdditionalIcons}"; Flags: checkedonce
+
+[Files]
+Source: "{#SrcDir}\*"; DestDir: "{app}"; Flags: recursesubdirs createallsubdirs ignoreversion
+
+[Icons]
+Name: "{group}\{#MyAppName}"; Filename: "{app}\{#MyAppExe}"
+Name: "{group}\卸载 {#MyAppName}"; Filename: "{uninstallexe}"
+Name: "{commondesktop}\{#MyAppName}"; Filename: "{app}\{#MyAppExe}"; Tasks: desktopicon
+
+[Run]
+Filename: "{app}\{#MyAppExe}"; Description: "{cm:LaunchProgram,{#MyAppName}}"; Flags: nowait postinstall skipifsilent

scripts/ci/_env.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# _env.sh — shared CI mirror env. `source` this from other scripts.
+# Idempotent: only sets vars if not already provided by the environment.
+
+export GOPROXY="${GOPROXY:-https://goproxy.cn,direct}"
+export PUB_HOSTED_URL="${PUB_HOSTED_URL:-https://pub.flutter-io.cn}"
+export FLUTTER_STORAGE_BASE_URL="${FLUTTER_STORAGE_BASE_URL:-https://storage.flutter-io.cn}"
+
+# Ensure Homebrew tools are on PATH (macOS runners); harmless elsewhere.
+case ":${PATH}:" in
+  *":/opt/homebrew/bin:"*) ;;
+  *) export PATH="/opt/homebrew/bin:${PATH}" ;;
+esac

scripts/ci/compile-macos.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# compile-macos.sh <tag>  —  build Flutter macOS desktop, package into dist/
+set -euo pipefail
+
+# shellcheck source=scripts/ci/_env.sh
+. "$(dirname "$0")/_env.sh"
+
+TAG="$1"
+VER="${TAG#v}"
+
+echo "==> compile-macos: version=${VER}"
+
+# Sync Flutter pubspec version (BSD sed on macOS)
+sed -i '' "s/^version:.*/version: ${VER}+1/" client/pubspec.yaml
+
+# Build Flutter macOS
+cd client
+flutter build macos --release \
+  "--dart-define=BASE_URL=https://jiu.51yanmei.com" \
+  "--dart-define=PUBLIC_URL=https://jiu.51yanmei.com" \
+  "--dart-define=APP_VERSION=${TAG}"
+cd ..
+
+# Package .app bundle into zip
+mkdir -p dist
+python3 - <<'PYEOF'
+import zipfile, os
+
+src = os.path.join('client', 'build', 'macos', 'Build', 'Products', 'Release', 'jiu.app')
+dst = os.path.join('dist', 'jiu-macos-x64.zip')
+
+with zipfile.ZipFile(dst, 'w', zipfile.ZIP_DEFLATED) as zf:
+    for root, dirs, files in os.walk(src):
+        for fname in files:
+            fp = os.path.join(root, fname)
+            zf.write(fp, os.path.join('jiu.app', os.path.relpath(fp, src)))
+
+size = os.path.getsize(dst)
+print(f'Packaged {dst} ({size // 1024 // 1024} MB)')
+PYEOF
+
+echo "==> compile-macos: done — dist/ contents:"
+ls -lh dist/

scripts/ci/compile-windows.sh

@@ -2,43 +2,76 @@
 # compile-windows.sh <tag>  —  build Flutter Windows desktop, package into dist/
 set -euo pipefail
 
-export GOPROXY="${GOPROXY:-https://goproxy.cn,direct}"
-export PUB_HOSTED_URL="${PUB_HOSTED_URL:-https://pub.flutter-io.cn}"
-export FLUTTER_STORAGE_BASE_URL="${FLUTTER_STORAGE_BASE_URL:-https://storage.flutter-io.cn}"
+# shellcheck source=scripts/ci/_env.sh
+. "$(dirname "$0")/_env.sh"
 
 TAG="$1"
 VER="${TAG#v}"
 
 echo "==> compile-windows: version=${VER}"
 
-# Sync Flutter pubspec version
+# Sync Flutter pubspec version (done in the checkout, before copying out)
 sed -i "s/^version:.*/version: ${VER}+1/" client/pubspec.yaml
 
-# Build Flutter Windows
-cd client
+# The Forgejo Windows runner checks out under
+#   C:\Windows\System32\config\systemprofile\.cache\act\...\hostexecutor
+# Building there triggers WOW64 filesystem redirection (System32 -> SysWOW64)
+# which breaks CMake/Flutter native paths. So copy the Flutter project to a
+# clean short path OUTSIDE System32 and build there. This replaces the previous
+# `subst W:` trick, which was fragile due to cmd/MSYS quoting.
+BUILD_ROOT="/c/jiu-build"
+BUILD_CLIENT="${BUILD_ROOT}/client"
+
+echo "==> copying client/ to ${BUILD_CLIENT}"
+rm -rf "$BUILD_ROOT"
+mkdir -p "$BUILD_ROOT"
+cp -r client "$BUILD_CLIENT"
+
+# `cp -r` turns Flutter's plugin symlinks (windows/flutter/ephemeral/.plugin_symlinks/*)
+# into real directories. flutter's createPluginSymlinks only cleans up *symlinks*, so it
+# then fails to create a symlink over the copied real dir (errno 183 / PathExists).
+# Drop all regenerable artifacts so the build below recreates them cleanly.
+rm -rf "${BUILD_CLIENT}/windows/flutter/ephemeral" \
+       "${BUILD_CLIENT}/.dart_tool" \
+       "${BUILD_CLIENT}/build"
+
+# Build (run from the clean path; pushd/popd avoids needing $() to save cwd)
+pushd "$BUILD_CLIENT" > /dev/null
+flutter create --platforms=windows . --project-name jiu_client
 flutter build windows --release \
   "--dart-define=BASE_URL=https://jiu.51yanmei.com" \
   "--dart-define=PUBLIC_URL=https://jiu.51yanmei.com" \
   "--dart-define=APP_VERSION=${TAG}"
-cd ..
+popd > /dev/null
 
-# Package release folder into zip using Python (available on all platforms)
+# Package the Release folder into a Windows installer with Inno Setup (ISCC).
+# Inno Setup is installed by provision-windows.sh; check both Program Files dirs.
+ISCC=""
+for c in "/c/Program Files (x86)/Inno Setup 6/ISCC.exe" "/c/Program Files/Inno Setup 6/ISCC.exe"; do
+  if [ -f "$c" ]; then ISCC="$c"; break; fi
+done
+if [ -z "$ISCC" ]; then
+  echo "ERROR: Inno Setup (ISCC) not found. Run provision-windows.sh first." >&2
+  exit 1
+fi
+
+# Run ISCC entirely under the clean build root: 32-bit ISCC would hit WOW64
+# redirection if it read the .iss / wrote output under the System32 workspace.
+cp deploy/windows/jiu-installer.iss "${BUILD_ROOT}/jiu-installer.iss"
+mkdir -p "${BUILD_ROOT}/dist"
+echo "==> building installer with Inno Setup (version ${VER})"
+"$ISCC" \
+  "/DAppVer=${VER}" \
+  "/DSrcDir=C:\\jiu-build\\client\\build\\windows\\x64\\runner\\Release" \
+  "/DOutDir=C:\\jiu-build\\dist" \
+  "C:\\jiu-build\\jiu-installer.iss"
+
+# Copy the installer back to the workspace dist/ via PowerShell (64-bit, so it
+# can write the System32 workspace path without WOW64 redirection).
 mkdir -p dist
-python3 - <<'PYEOF'
-import zipfile, os
-
-src = os.path.join('client', 'build', 'windows', 'x64', 'runner', 'Release')
-dst = os.path.join('dist', 'jiu-windows-x64.zip')
-
-with zipfile.ZipFile(dst, 'w', zipfile.ZIP_DEFLATED) as zf:
-    for root, dirs, files in os.walk(src):
-        for fname in files:
-            fp = os.path.join(root, fname)
-            zf.write(fp, os.path.relpath(fp, src))
-
-size = os.path.getsize(dst)
-print(f'Packaged {dst} ({size // 1024 // 1024} MB)')
-PYEOF
+echo "==> copying installer -> dist/jiu-windows-x64-setup.exe"
+powershell -NoProfile -Command \
+  "Copy-Item 'C:\\jiu-build\\dist\\jiu-windows-x64-setup.exe' 'dist\\jiu-windows-x64-setup.exe' -Force"
 
 echo "==> compile-windows: done — dist/ contents:"
 ls -lh dist/

scripts/ci/compile.sh

@@ -2,10 +2,8 @@
 # compile.sh <tag>  —  build backend + Flutter web, package into dist/
 set -euo pipefail
 
-export PATH="/opt/homebrew/bin:$PATH"
-export GOPROXY="${GOPROXY:-https://goproxy.cn,direct}"
-export PUB_HOSTED_URL="${PUB_HOSTED_URL:-https://pub.flutter-io.cn}"
-export FLUTTER_STORAGE_BASE_URL="${FLUTTER_STORAGE_BASE_URL:-https://storage.flutter-io.cn}"
+# shellcheck source=scripts/ci/_env.sh
+. "$(dirname "$0")/_env.sh"
 
 TAG="$1"
 VER="${TAG#v}"

scripts/ci/deploy.sh

@@ -90,6 +90,11 @@ rsync -avz --delete -e "ssh -i ~/.ssh/ec2_deploy.pem -o StrictHostKeyChecking=no
 rsync -avz --delete -e "ssh -i ~/.ssh/ec2_deploy.pem -o StrictHostKeyChecking=no" \
   /tmp/jiu-marketing-new/ "${EC2_USER}@${EC2_HOST}:/tmp/jiu-marketing-new/"
 
+# Upload desktop client installers (served from /downloads/ by nginx).
+# Guarded: may be absent in a partial manual deploy.
+[ -f dist/jiu-windows-x64-setup.exe ] && ${SCP} dist/jiu-windows-x64-setup.exe "${EC2_USER}@${EC2_HOST}:/tmp/jiu-windows-x64-setup.exe" || true
+[ -f dist/jiu-macos-x64.zip ] && ${SCP} dist/jiu-macos-x64.zip "${EC2_USER}@${EC2_HOST}:/tmp/jiu-macos-x64.zip" || true
+
 echo "==> deploy: running remote deploy"
 
 ${SSH} "${EC2_USER}@${EC2_HOST}" << 'ENDSSH'
@@ -126,9 +131,19 @@ mkdir -p /opt/jiu/marketing
 rsync -a --delete /tmp/jiu-marketing-new/ /opt/jiu/marketing/
 rm -rf /tmp/jiu-marketing-new
 
-# Update nginx config and reload
-sudo cp /tmp/nginx-jiu.conf /etc/nginx/conf.d/jiu.conf
-sudo nginx -t && sudo nginx -s reload
+# Publish desktop client installers to the nginx-served downloads dir.
+# Keep only the latest version: clear old installers, then drop in the new ones.
+mkdir -p /opt/jiu/downloads
+rm -f /opt/jiu/downloads/jiu-windows-* /opt/jiu/downloads/jiu-macos-* 2>/dev/null || true
+[ -f /tmp/jiu-windows-x64-setup.exe ] && mv -f /tmp/jiu-windows-x64-setup.exe /opt/jiu/downloads/ || true
+[ -f /tmp/jiu-macos-x64.zip ] && mv -f /tmp/jiu-macos-x64.zip /opt/jiu/downloads/ || true
+
+# Update jiu nginx config in the pangolin-edge reverse proxy.
+# nginx now runs inside the `pangolin-edge` container (host networking), not on
+# the host. Its /etc/nginx/conf.d is bind-mounted from the host dir below, so we
+# write the config there and reload nginx *inside the container*.
+cp /tmp/nginx-jiu.conf /home/ec2-user/pangolin/edge/conf.d/jiu.conf
+docker exec pangolin-edge nginx -t && docker exec pangolin-edge nginx -s reload
 
 echo "Deploy complete!"
 ENDSSH

scripts/ci/install-innosetup.ps1

@@ -0,0 +1,33 @@
+# install-innosetup.ps1 — robust silent install of Inno Setup 6 for the Windows runner.
+# Idempotent: exits 0 immediately if ISCC.exe is already present.
+$ErrorActionPreference = 'Stop'
+
+$candidates = @(
+  "${env:ProgramFiles(x86)}\Inno Setup 6\ISCC.exe",
+  "$env:ProgramFiles\Inno Setup 6\ISCC.exe"
+)
+foreach ($c in $candidates) {
+  if (Test-Path $c) { Write-Output "ISCC already present: $c"; exit 0 }
+}
+
+$url = 'https://jrsoftware.org/download.php/is.exe'
+$out = Join-Path $env:TEMP 'innosetup-installer.exe'
+
+Write-Output "Downloading Inno Setup: $url"
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+# -UseBasicParsing avoids the IE-engine dependency that fails under the SYSTEM account.
+Invoke-WebRequest -Uri $url -OutFile $out -UseBasicParsing
+
+$size = (Get-Item $out).Length
+Write-Output "Downloaded $size bytes"
+if ($size -lt 1000000) { throw "Downloaded file too small ($size bytes) - not a valid installer" }
+
+Write-Output "Installing silently..."
+$p = Start-Process -FilePath $out -ArgumentList '/VERYSILENT','/SUPPRESSMSGBOXES','/NORESTART','/SP-','/NOICONS' -Wait -PassThru
+Write-Output "Installer exit code: $($p.ExitCode)"
+if ($p.ExitCode -ne 0) { throw "Inno Setup installer failed with exit code $($p.ExitCode)" }
+
+foreach ($c in $candidates) {
+  if (Test-Path $c) { Write-Output "ISCC installed: $c"; exit 0 }
+}
+throw "ISCC not found after install (looked in: $($candidates -join ', '))"

scripts/ci/provision-mac.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+# provision-mac.sh — idempotent provisioning for the macOS host runner.
+#
+# Pre-warms everything the build jobs (compile.sh / compile-macos.sh) would
+# otherwise download at runtime: Flutter macOS+web engine artifacts, pub
+# packages, Go modules, npm deps. Safe to run on every pipeline run — it
+# short-circuits via a stamp file keyed to the installed Flutter version, so
+# once provisioned it returns in milliseconds and downloads nothing.
+set -euo pipefail
+
+SCRIPT_DIR="$(dirname "$0")"
+# shellcheck source=scripts/ci/_env.sh
+. "${SCRIPT_DIR}/_env.sh"
+
+STAMP_DIR="${HOME}/.cache/jiu-ci"
+STAMP="${STAMP_DIR}/provisioned-mac"
+CUR="${STAMP_DIR}/.flutter-version-mac.cur"
+mkdir -p "$STAMP_DIR"
+
+# --- detection: skip if already provisioned for this Flutter version ---
+if ! command -v flutter >/dev/null 2>&1; then
+  echo "ERROR: flutter not found on PATH. Install Flutter on this runner first." >&2
+  exit 1
+fi
+flutter --version --machine > "$CUR" 2>/dev/null || flutter --version > "$CUR" 2>&1 || true
+
+if [ -s "$STAMP" ] && cmp -s "$STAMP" "$CUR"; then
+  echo "==> provision-mac: already provisioned (Flutter unchanged), skipping."
+  exit 0
+fi
+
+echo "==> provision-mac: not provisioned (or Flutter changed) — running."
+
+# --- toolchain presence (do not auto-install system-level tools) ---
+for tool in go node npm; do
+  if ! command -v "$tool" >/dev/null 2>&1; then
+    echo "ERROR: '$tool' not found on PATH. Install it on this runner first." >&2
+    exit 1
+  fi
+done
+
+# --- warm Flutter platform engines (the macOS SDK download seen in CI) ---
+echo "==> precache Flutter engines (macos, web)"
+flutter precache --macos --web --universal
+
+# --- warm dependency caches ---
+echo "==> flutter pub get (client)"
+(cd "${SCRIPT_DIR}/../../client" && flutter pub get)
+
+echo "==> go mod download (backend)"
+(cd "${SCRIPT_DIR}/../../backend" && go mod download)
+
+echo "==> npm ci (web)"
+(cd "${SCRIPT_DIR}/../../web" && npm ci --prefer-offline)
+
+# --- mark provisioned ---
+cp "$CUR" "$STAMP"
+echo "==> provision-mac: done."
+echo "--- versions ---"
+flutter --version | head -1
+go version
+node --version

scripts/ci/provision-windows.sh

@@ -0,0 +1,60 @@
+#!/usr/bin/env bash
+# provision-windows.sh — idempotent provisioning for the Windows host runner.
+#
+# Pre-warms what compile-windows.sh would download at runtime: Flutter Windows
+# engine artifacts, pub packages, and the Inno Setup compiler (ISCC) used to
+# build the installer. The Flutter part short-circuits via a stamp keyed to the
+# installed Flutter version; Inno Setup is ensured on every run (cheap when
+# already present) so it self-heals independently of the Flutter stamp.
+set -euo pipefail
+
+SCRIPT_DIR="$(dirname "$0")"
+# shellcheck source=scripts/ci/_env.sh
+. "${SCRIPT_DIR}/_env.sh"
+
+STAMP_DIR="${HOME}/.cache/jiu-ci"
+STAMP="${STAMP_DIR}/provisioned-windows"
+CUR="${STAMP_DIR}/.flutter-version-win.cur"
+mkdir -p "$STAMP_DIR"
+
+# --- ensure Inno Setup (ISCC) for building the installer (always checked) ---
+# ISCC installs to Program Files (x86) (32-bit app); check both to be safe.
+ISCC_X86="/c/Program Files (x86)/Inno Setup 6/ISCC.exe"
+ISCC_X64="/c/Program Files/Inno Setup 6/ISCC.exe"
+if [ ! -f "$ISCC_X86" ] && [ ! -f "$ISCC_X64" ]; then
+  echo "==> installing Inno Setup 6 (silent)"
+  # Robust installer (checks download size + installer exit code) — inline
+  # bash->powershell quoting was the original failure; a .ps1 avoids it.
+  powershell -NoProfile -ExecutionPolicy Bypass -File "${SCRIPT_DIR}/install-innosetup.ps1"
+  if [ ! -f "$ISCC_X86" ] && [ ! -f "$ISCC_X64" ]; then
+    echo "ERROR: Inno Setup install failed — ISCC not found." >&2
+    exit 1
+  fi
+  echo "==> Inno Setup installed."
+fi
+
+# --- detection (Flutter) ---
+if ! command -v flutter >/dev/null 2>&1; then
+  echo "ERROR: flutter not found on PATH. Install Flutter on this runner first." >&2
+  exit 1
+fi
+flutter --version --machine > "$CUR" 2>/dev/null || flutter --version > "$CUR" 2>&1 || true
+
+if [ -s "$STAMP" ] && cmp -s "$STAMP" "$CUR"; then
+  echo "==> provision-windows: already provisioned (Flutter unchanged), skipping."
+  exit 0
+fi
+
+echo "==> provision-windows: not provisioned (or Flutter changed) — running."
+
+# --- warm Flutter Windows engine + pub deps ---
+echo "==> precache Flutter engine (windows)"
+flutter precache --windows
+
+echo "==> flutter pub get (client)"
+(cd "${SCRIPT_DIR}/../../client" && flutter pub get)
+
+# --- mark provisioned ---
+cp "$CUR" "$STAMP"
+echo "==> provision-windows: done."
+flutter --version | head -1

scripts/ci/release.sh

@@ -36,7 +36,7 @@ PYEOF
 
 echo "==> release: release_notes=${RELEASE_NOTES}"
 
-# Update backend/config/version.yaml (version, build_number, release_notes, windows URL)
+# Update backend/config/version.yaml (version, build_number, release_notes, macos/windows URL)
 python3 - "${VER}" "${RELEASE_NOTES}" "${TAG}" "${FORGEJO_URL}" "${GITEA_REPOSITORY}" <<'PYEOF'
 import sys
 ver   = sys.argv[1]
@@ -44,7 +44,13 @@ notes = sys.argv[2]
 tag   = sys.argv[3]
 furl  = sys.argv[4].rstrip('/')
 repo  = sys.argv[5]
-win_url = f"{furl}/{repo}/releases/download/{tag}/jiu-windows-x64.zip"
+# Public download URLs are served by jiu.51yanmei.com (same-origin HTTPS via the
+# pangolin nginx /downloads/ location), NOT the LAN-only HTTP Forgejo instance —
+# otherwise the HTTPS download page hands the browser an http://192.168.x URL and
+# Chrome blocks it as insecure / it's unreachable from the public internet.
+base  = "https://jiu.51yanmei.com/downloads"
+mac_url = f"{base}/jiu-macos-x64.zip"
+win_url = f"{base}/jiu-windows-x64-setup.exe"
 
 lines = []
 with open('backend/config/version.yaml') as f:
@@ -59,13 +65,15 @@ with open('backend/config/version.yaml') as f:
             lines.append('build_number: ' + str(build) + '\n')
         elif line.startswith('release_notes:'):
             lines.append('release_notes: "' + notes.replace('\\', '\\\\').replace('"', '\\"') + '"\n')
+        elif line.startswith('  macos:'):
+            lines.append('  macos: "' + mac_url + '"\n')
         elif line.startswith('  windows:'):
             lines.append('  windows: "' + win_url + '"\n')
         else:
             lines.append(line)
 with open('backend/config/version.yaml', 'w') as f:
     f.writelines(lines)
-print('version.yaml updated to', ver, '| windows:', win_url)
+print('version.yaml updated to', ver, '| macos:', mac_url, '| windows:', win_url)
 PYEOF
 
 # Package configs.tar.gz (includes updated version.yaml)
@@ -123,6 +131,7 @@ upload_asset dist/jiu-server
 upload_asset dist/web.tar.gz
 upload_asset dist/marketing.tar.gz
 upload_asset dist/configs.tar.gz
-upload_asset dist/jiu-windows-x64.zip
+upload_asset dist/jiu-macos-x64.zip
+upload_asset dist/jiu-windows-x64-setup.exe
 
 echo "==> release: done — Release ${TAG} created"

web/download.njk

@@ -334,14 +334,14 @@ pageStyle: |
       </div>
 
       <!-- macOS -->
-      <div class="dl-card coming-soon" data-platform="macos">
+      <div class="dl-card" data-platform="macos">
         <div class="dl-card-icon"><i data-lucide="laptop" class="icon"></i></div>
         <h3 class="dl-card-name">macOS</h3>
-        <p class="dl-card-desc">支持 Apple Silicon 与 Intel 芯片，通用版本。</p>
-        <span class="dl-status soon">敬请期待</span>
-        <span class="dl-card-btn disabled">
-          <i data-lucide="clock" class="icon"></i>即将推出
-        </span>
+        <p class="dl-card-desc">支持 Apple Silicon 与 Intel，解压即用，首次运行右键→打开。</p>
+        <span class="dl-status available">✓ 已支持</span>
+        <a href="#" class="dl-card-btn primary" id="macos-dl-btn">
+          <i data-lucide="download" class="icon"></i>下载 macOS 版
+        </a>
       </div>
 
       <!-- iOS -->
@@ -432,7 +432,7 @@ pageStyle: |
     ios:     { name: 'iOS',         desc: 'iOS 客户端正在开发中，敬请期待。',              icon: 'smartphone',        btnText: '敬请期待', available: false },
     android: { name: 'Android',     desc: 'Android 客户端正在开发中，敬请期待。',          icon: 'tablet-smartphone', btnText: '敬请期待', available: false },
     windows: { name: 'Windows 桌面', desc: '原生桌面客户端，支持 Win 10/11（64 位），离线模式与本地打印。', icon: 'monitor', btnText: '下载 Windows 版', btnHref: '#', available: true },
-    macos:   { name: 'macOS 桌面',  desc: 'macOS 客户端正在开发中，敬请期待。',            icon: 'laptop',            btnText: '敬请期待', available: false }
+    macos:   { name: 'macOS 桌面',  desc: '支持 Apple Silicon 与 Intel，解压即用，首次运行右键→打开。', icon: 'laptop', btnText: '下载 macOS 版', btnHref: '#', available: true }
   };
 
   function detectPlatform() {
@@ -501,11 +501,16 @@ pageStyle: |
       .then(function(r) { return r.json(); })
       .then(function(data) {
         if (data && data.version) updateVersionBadges(data.version);
+        if (data && data.download_urls && data.download_urls.macos) {
+          platforms.macos.btnHref = data.download_urls.macos;
+          var macBtn = document.getElementById('macos-dl-btn');
+          if (macBtn) macBtn.href = data.download_urls.macos;
+          if (detected === 'macos') updateDetectCard(detected);
+        }
         if (data && data.download_urls && data.download_urls.windows) {
           platforms.windows.btnHref = data.download_urls.windows;
           var btn = document.getElementById('windows-dl-btn');
           if (btn) btn.href = data.download_urls.windows;
-          // 若用户在 Windows 上，同步更新自动识别卡片
           if (detected === 'windows') updateDetectCard(detected);
         }
       })