release: package FCP-BeautyGirl 1.3.2 with verified legacy identity migration

scripts/verify-release-package.py

@@ -2,10 +2,11 @@
 """Verify an expanded release payload and run template-only update/rollback in isolation."""
 from pathlib import Path
 import argparse,hashlib,json,os,plistlib,shutil,subprocess,sys
+from product_identity import PRODUCT
 root=Path(__file__).resolve().parent.parent
 parser=argparse.ArgumentParser(description=__doc__)
-parser.add_argument('--version',default='1.2.0')
-parser.add_argument('--build',default='14')
+parser.add_argument('--version',default=PRODUCT['version'])
+parser.add_argument('--build',default=PRODUCT['build'])
 parser.add_argument('--expanded',default='build/pkg-expanded')
 parser.add_argument('--fixture',default='build/pkg-isolation')
 args=parser.parse_args()
@@ -33,7 +34,10 @@ base=root/args.fixture;base.mkdir(exist_ok=False)
 volume=base/'volume';home=base/'user';home.mkdir()
 start=post.index('CURRENT_ACTIVE=0')
 isolated='#!/bin/zsh\nset -eu\nTARGET_VOLUME="'+str(volume)+'"\nCONSOLE_USER="'+os.getlogin()+'"\nCONSOLE_UID="'+str(os.getuid())+'"\nCONSOLE_GROUP="staff"\nUSER_HOME="'+str(home)+'"\n'+post[start:]
-isolated=isolated[:isolated.index('fx_verify_app "${TARGET_VOLUME%/}/Library/Plug-Ins/FxPlug/FCP-BeautyGirl.app"')]+'exit 0\n'
+stop = isolated.find('# FCP-BeautyGirl identity migration.')
+if stop < 0:
+ stop = isolated.index('fx_verify_app "${TARGET_VOLUME%/}/Library/Plug-Ins/FxPlug/FCP-BeautyGirl.app"')
+isolated=isolated[:stop]+'exit 0\n'
 isolated=isolated.replace('/usr/sbin/chown -R','/usr/bin/true')
 new_copy=next(l for l in isolated.splitlines() if l.startswith('/usr/bin/ditto "${TARGET_VOLUME%/}'))
 def refill():
@@ -66,7 +70,7 @@ assert files(final)==original
 assert all((final/n).stat().st_flags & 2 for n in ['large.png','small.png'])
 backups=list((home/'Library/Application Support/PKGForge/Template Backups').rglob('.locked-paths'))
 assert backups and all('/Movies/' not in str(x) for x in backups)
-package=root/('releases/'+args.version+'/大鱼人像美化-'+args.version+'.pkg')
+package=root/('releases/'+args.version+'/'+PRODUCT['name']+'-'+args.version+'.pkg')
 info=plistlib.loads((packed/'Contents/Info.plist').read_bytes())
 assert info['CFBundleShortVersionString']==args.version and info['CFBundleVersion']==args.build
 report={'package':str(package.relative_to(root)),'bytes':package.stat().st_size,'sha256':sha(package),'version':args.version,'build':args.build,'app_files_compared':len(files(formal)),'app_byte_and_symlink_equality':True,'template_files':{n:sha(template/n) for n in runtime},'locked_relative_paths':['大鱼人像美化/large.png','大鱼人像美化/small.png'],'script_sha256':{'preinstall':sha(expanded/'Scripts/preinstall'),'postinstall':sha(expanded/'Scripts/postinstall')},'isolated_script_tests':['fresh install','replace old locked thumbnail','partial copy failure restores old bytes and locks'],'isolation_changes':['Console identity/home redirected to task fixture','chown replaced with true','FxPlug verification skipped; formal app signature and discovery verified separately'],'real_installer_execution':False,'app_and_template_installed':'APP installed through signed delivery workflow; formal template files matched the specified installed category, not changed by running this PKG','fonts':'No editable third-party font dependency; promotional lettering baked into PNG. No optional font ZIP needed.'}