feat: 添加 AltStore 应用源及发布维护流程

- 根据已发布 Release 和实际 IPA 生成应用源，包含版本、下载地址、权限和截图 - 校验包标识、版本标签、文件大小与 SHA-256，补充生成脚本测试 - 记录手动更新应用源的维护流程，完善本地自检 - 忽略仅供本机使用的 GitHub 上传说明
2026-10-23 04:11:22 +08:00 · 2026-10-20 23:35:00 +08:00
parent 0915a144a7
commit 7daa6b5635
6 changed files with 352 additions and 1 deletions
@@ -0,0 +1,131 @@
+import hashlib
+import importlib.util
+import plistlib
+import tempfile
+import unittest
+import zipfile
+from pathlib import Path
+
+
+spec = importlib.util.spec_from_file_location("altstore_source", Path(__file__).parents[1] / "update-altstore-source.py")
+altstore_source = importlib.util.module_from_spec(spec)
+spec.loader.exec_module(altstore_source)
+
+
+class AltStoreSourceTests(unittest.TestCase):
+    def setUp(self):
+        temporary = tempfile.TemporaryDirectory()
+        self.addCleanup(temporary.cleanup)
+        self.ipa = Path(temporary.name) / "reader-unsigned.ipa"
+        self.info = {
+            "CFBundleIdentifier": "com.epiboly.legado",
+            "CFBundleName": "Reader",
+            "CFBundleDisplayName": "小浣熊阅读",
+            "CFBundleShortVersionString": "1.2.3",
+            "CFBundleVersion": "42",
+            "MinimumOSVersion": "15.0",
+            "NSCameraUsageDescription": "扫描导入二维码",
+            "NSPhotoLibraryAddUsageDescription": "保存图片",
+            "NSAppTransportSecurity": {"NSAllowsArbitraryLoads": True},
+        }
+        self.release = {
+            "tag_name": "v1.2.3",
+            "published_at": "2026-10-19T01:02:03Z",
+            "draft": False,
+            "prerelease": False,
+            "body": "更新阅读体验。",
+        }
+        self.write_ipa()
+
+    def write_ipa(self, extra=None):
+        with zipfile.ZipFile(self.ipa, "w") as archive:
+            archive.writestr("Payload/Reader.app/Info.plist", plistlib.dumps(self.info, fmt=plistlib.FMT_BINARY))
+            if extra:
+                archive.writestr(extra, b"fixture")
+        self.release["assets"] = [{
+            "name": self.ipa.name,
+            "state": "uploaded",
+            "size": self.ipa.stat().st_size,
+            "digest": "sha256:" + hashlib.sha256(self.ipa.read_bytes()).hexdigest(),
+            "browser_download_url": "https://github.com/Aminark/legado-ios/releases/download/v1.2.3/reader-unsigned.ipa",
+        }]
+
+    def generate(self):
+        return altstore_source.make_source(self.ipa, self.release, "Aminark/legado-ios", "main")
+
+    def test_metadata_permissions_and_legacy_fields_match_ipa(self):
+        source = self.generate()
+        self.assertEqual(source["sourceURL"], "https://raw.githubusercontent.com/Aminark/legado-ios/main/docs/altstore.json")
+        app = source["apps"][0]
+        version = app["versions"][0]
+        self.assertEqual(app["bundleIdentifier"], self.info["CFBundleIdentifier"])
+        self.assertEqual(version["version"], "1.2.3")
+        self.assertEqual(version["buildVersion"], "42")
+        self.assertEqual(version["minOSVersion"], "15.0")
+        self.assertEqual(version["date"], self.release["published_at"])
+        for key in ("version", "size", "downloadURL"):
+            self.assertEqual(app[key], version[key])
+        self.assertEqual(app["appPermissions"], {
+            "entitlements": [],
+            "privacy": {
+                "NSCameraUsageDescription": "扫描导入二维码",
+                "NSPhotoLibraryAddUsageDescription": "保存图片",
+            },
+        })
+
+    def test_rejects_drafts_and_prereleases(self):
+        for key in ("draft", "prerelease"):
+            with self.subTest(key=key):
+                self.release[key] = True
+                with self.assertRaisesRegex(ValueError, "published stable"):
+                    self.generate()
+                self.release[key] = False
+
+    def test_rejects_wrong_release_asset(self):
+        for key, value in (("size", 1), ("digest", "sha256:wrong"),
+                           ("browser_download_url", "https://example.com/wrong.ipa"),
+                           ("name", "another.ipa"), ("state", "new")):
+            with self.subTest(key=key):
+                self.write_ipa()
+                self.release["assets"][0][key] = value
+                with self.assertRaises(ValueError):
+                    self.generate()
+
+    def test_older_github_metadata_without_digest_is_supported(self):
+        del self.release["assets"][0]["digest"]
+        self.assertEqual(self.generate()["apps"][0]["version"], "1.2.3")
+
+    def test_rejects_packages_needing_an_entitlement_audit(self):
+        for extra in ("Payload/Reader.app/_CodeSignature/CodeResources",
+                      "Payload/Reader.app/embedded.mobileprovision",
+                      "Payload/Reader.app/PlugIns/Widget.appex/Info.plist"):
+            with self.subTest(extra=extra):
+                self.write_ipa(extra)
+                with self.assertRaisesRegex(ValueError, "entitlement audit"):
+                    self.generate()
+
+    def test_rejects_unresolved_build_metadata(self):
+        self.info["CFBundleVersion"] = "$(CURRENT_PROJECT_VERSION)"
+        self.write_ipa()
+        with self.assertRaisesRegex(ValueError, "CFBundleVersion"):
+            self.generate()
+
+    def test_rejects_release_and_package_mismatches(self):
+        self.info["CFBundleIdentifier"] = "com.example.another-app"
+        self.write_ipa()
+        with self.assertRaisesRegex(ValueError, "bundle identifier"):
+            self.generate()
+        self.info["CFBundleIdentifier"] = "com.epiboly.legado"
+        self.info["CFBundleShortVersionString"] = "1.2.4"
+        self.write_ipa()
+        with self.assertRaisesRegex(ValueError, "Release tag"):
+            self.generate()
+
+    def test_rejects_publication_dates_without_a_timezone(self):
+        self.release["published_at"] = "2026-10-19T01:02:03"
+        with self.assertRaisesRegex(ValueError, "timezone"):
+            self.generate()
+
+
+if __name__ == "__main__":
+    unittest.main()