feat: 愚人节彩蛋 + 设置页修复 + GCK 安全加固 + CI/CodeRabbit

.coderabbit.yaml

@@ -0,0 +1,40 @@
+# CodeRabbit AI 代码审查配置
+# 文档: https://docs.coderabbit.ai/reference/configuration
+
+language: "zh-CN"
+tone_instructions: "使用简洁的中文进行代码审查，关注实际问题而非风格偏好。"
+early_access: true
+
+reviews:
+  profile: "chill"
+  high_level_summary: true
+  poem: false
+  sequence_diagrams: false
+  collapse_walkthrough: true
+  changed_files_summary: true
+  path_filters:
+    - "!build/**"
+    - "!oh_modules/**"
+    - "!entry/oh_modules/**"
+    - "!entry/build/**"
+    - "!nativelib/build/**"
+    - "!hvigor/**"
+    - "!oh-package-lock.json5"
+    - "!entry/oh-package-lock.json5"
+    - "!store-assets/**"
+    - "!nativelib/src/main/cpp/moonlight-common-c/**"
+    - "!nativelib/src/main/cpp/ohos-openssl/**"
+  path_instructions:
+    - path: "entry/src/main/ets/**"
+      instructions: |
+        这是 HarmonyOS ArkTS 前端代码。使用 ArkUI 声明式 UI 框架，@Component/@State/@Prop/@Link 等装饰器。
+        关注线程安全（UI 线程 vs Worker）、内存泄漏（定时器/事件监听未清理）、空指针安全。
+    - path: "nativelib/src/main/cpp/**"
+      instructions: |
+        C/C++ 原生层代码，通过 N-API 与 ArkTS 交互。关注内存管理、线程安全、JNI/N-API 生命周期。
+  auto_review:
+    enabled: true
+    drafts: false
+
+chat:
+  auto_reply: true

.github/workflows/build.yml

@@ -301,7 +301,7 @@ jobs:
         ci/patch-sdk.sh ~/ohos-sdk
 
     # ── 构建 ──
-    - name: Build HAP
+    - name: Build Native
       run: |
         set -o pipefail
         BUILD_MODE="${{ steps.build-mode.outputs.mode }}"
@@ -310,94 +310,27 @@ jobs:
         export JAVA_HOME="${JAVA_HOME_17_X64}"
         export LD_LIBRARY_PATH="${HOME}/ohos-sdk/toolchains/lib:${HOME}/ohos-sdk/previewer/common/bin:${LD_LIBRARY_PATH:-}"
 
-        node hvigorw.js assembleHap \
+        node hvigorw.js assembleHar \
           --mode module \
+          -p module=nativelib@default \
           -p product=default \
           -p buildMode="${BUILD_MODE}" \
           --no-daemon \
           --stacktrace \
           2>&1 | tee build-hap.log
 
-        find . -name "*.hap" -type f -exec sh -c 'echo "  $(du -h "$1" | cut -f1)  $1"' _ {} \;
-
-    - name: Build APP (signed)
-      if: steps.signing.outputs.available == 'true'
-      run: |
-        set -o pipefail
-        BUILD_MODE="${{ steps.build-mode.outputs.mode }}"
-        export NODE_HOME="$(dirname "$(dirname "$(which node)")")"
-        export JAVA_HOME="${JAVA_HOME_17_X64}"
-
-        node hvigorw.js assembleApp \
-          --mode module \
-          -p product=default \
-          -p buildMode="${BUILD_MODE}" \
-          --no-daemon \
-          2>&1 | tee build-app.log
-
-        find . -name "*.app" -type f -exec sh -c 'echo "  $(du -h "$1" | cut -f1)  $1"' _ {} \;
-
     # ── 清理 & 上传 ──
     - name: Cleanup signing files
       if: always()
       run: rm -rf .signing/
 
-    - name: Upload HAP artifact
-      uses: actions/upload-artifact@v4
-      if: always()
-      with:
-        name: moonlight-hap-${{ steps.version.outputs.version }}-${{ steps.build-mode.outputs.mode }}
-        path: entry/build/default/outputs/**/*.hap
-        if-no-files-found: warn
-        retention-days: 30
-
-    - name: Upload APP artifact
-      uses: actions/upload-artifact@v4
-      if: steps.signing.outputs.available == 'true'
-      with:
-        name: moonlight-app-${{ steps.version.outputs.version }}-${{ steps.build-mode.outputs.mode }}
-        path: |
-          entry/build/default/outputs/**/*.app
-          build/default/outputs/**/*.app
-        if-no-files-found: warn
-        retention-days: 30
-
     - name: Upload build logs on failure
       uses: actions/upload-artifact@v4
       if: failure()
       with:
         name: build-logs-${{ github.run_id }}
         path: |
           build-hap.log
-          build-app.log
         retention-days: 7
 
-  # ── Release ──
-  release:
-    name: Create Release
-    needs: build
-    runs-on: ubuntu-latest
-    if: startsWith(github.ref, 'refs/tags/v')
-    permissions:
-      contents: write
-
-    steps:
-    - name: Download artifacts
-      uses: actions/download-artifact@v4
-      with:
-        pattern: moonlight-*
-        path: ./artifacts
-        merge-multiple: true
-
-    - name: Create GitHub Release
-      uses: softprops/action-gh-release@v2
-      with:
-        files: |
-          ./artifacts/**/*.hap
-          ./artifacts/**/*.app
-        draft: false
-        prerelease: ${{ contains(github.ref, 'beta') || contains(github.ref, 'alpha') || contains(github.ref, 'rc') }}
-        generate_release_notes: true
-        fail_on_unmatched_files: false
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  # Release 由本地手动构建签名后上传

ci/patch-sdk.sh

@@ -116,4 +116,27 @@ if [ -n "$DISPLAY_DTS" ] && ! grep -q "getBrightnessInfo" "$DISPLAY_DTS"; then
   echo "  Patched display module"
 fi
 
+# ─── @kit.ScanKit ───
+[ ! -f "$KIT_CONFIGS/@kit.ScanKit.json" ] && \
+  cp "$STUBS_DIR/kit.ScanKit.json" "$KIT_CONFIGS/@kit.ScanKit.json"
+cp "$STUBS_DIR/kit.ScanKit.d.ts" "$ETS_API/@kit.ScanKit.d.ts"
+cp "$STUBS_DIR/ohos.scan.scanCore.d.ts" "$ETS_API/@ohos.scan.scanCore.d.ts"
+cp "$STUBS_DIR/ohos.scan.scanBarcode.d.ts" "$ETS_API/@ohos.scan.scanBarcode.d.ts"
+echo "  Applied ScanKit stubs"
+
+# ─── @kit.ShareKit ───
+[ ! -f "$KIT_CONFIGS/@kit.ShareKit.json" ] && \
+  cp "$STUBS_DIR/kit.ShareKit.json" "$KIT_CONFIGS/@kit.ShareKit.json"
+cp "$STUBS_DIR/kit.ShareKit.d.ts" "$ETS_API/@kit.ShareKit.d.ts"
+cp "$STUBS_DIR/ohos.share.systemShare.d.ts" "$ETS_API/@ohos.share.systemShare.d.ts"
+echo "  Applied ShareKit stubs"
+
+# ─── DevKeySecret (CI-only placeholder) ───
+DEV_KEY_SECRET="entry/src/main/ets/config/DevKeySecret.ets"
+if [ ! -f "$DEV_KEY_SECRET" ]; then
+  mkdir -p "$(dirname "$DEV_KEY_SECRET")"
+  cp "${DEV_KEY_SECRET}.example" "$DEV_KEY_SECRET"
+  echo "  Created DevKeySecret from example"
+fi
+
 echo "✅ SDK patches applied"

ci/sdk-stubs/kit.ScanKit.d.ts

@@ -0,0 +1,22 @@
+declare module '@kit.ScanKit' {
+  namespace scanCore {
+    enum ScanType {
+      QR_CODE = 0,
+      BARCODE_TYPE_EAN_13 = 1,
+      BARCODE_TYPE_EAN_8 = 2,
+      BARCODE_TYPE_CODE_128 = 3,
+    }
+  }
+  namespace scanBarcode {
+    interface ScanOptions {
+      scanTypes?: scanCore.ScanType[];
+      enableMultiMode?: boolean;
+      enableAlbum?: boolean;
+    }
+    interface ScanResult {
+      originalValue?: string;
+      scanType?: number;
+    }
+    function startScanForResult(context: object, options?: ScanOptions): Promise<ScanResult>;
+  }
+}

ci/sdk-stubs/kit.ScanKit.json

@@ -0,0 +1,12 @@
+{
+  "symbols": {
+    "scanCore": {
+      "source": "@ohos.scan.scanCore.d.ts",
+      "bindings": "default"
+    },
+    "scanBarcode": {
+      "source": "@ohos.scan.scanBarcode.d.ts",
+      "bindings": "default"
+    }
+  }
+}

ci/sdk-stubs/kit.ShareKit.d.ts

@@ -0,0 +1,33 @@
+declare module '@kit.ShareKit' {
+  namespace systemShare {
+    enum SelectionMode {
+      SINGLE = 0,
+      BATCH = 1,
+    }
+    enum SharePreviewMode {
+      DEFAULT = 0,
+      DETAIL = 1,
+    }
+    interface SharedDataRecord {
+      utd: string;
+      content?: string;
+      uri?: string;
+      data?: ArrayBuffer;
+      title?: string;
+      description?: string;
+      thumbnail?: object;
+    }
+    class SharedData {
+      constructor(record: SharedDataRecord);
+      addRecord(record: SharedDataRecord): void;
+    }
+    interface ShareControllerOptions {
+      selectionMode?: SelectionMode;
+      previewMode?: SharePreviewMode;
+    }
+    class ShareController {
+      constructor(data: SharedData);
+      show(context: object, options?: ShareControllerOptions): Promise<void>;
+    }
+  }
+}

ci/sdk-stubs/kit.ShareKit.json

@@ -0,0 +1,8 @@
+{
+  "symbols": {
+    "systemShare": {
+      "source": "@ohos.share.systemShare.d.ts",
+      "bindings": "default"
+    }
+  }
+}

ci/sdk-stubs/ohos.scan.scanBarcode.d.ts

@@ -0,0 +1,13 @@
+declare namespace scanBarcode {
+  interface ScanOptions {
+    scanTypes?: number[];
+    enableMultiMode?: boolean;
+    enableAlbum?: boolean;
+  }
+  interface ScanResult {
+    originalValue?: string;
+    scanType?: number;
+  }
+  function startScanForResult(context: object, options?: ScanOptions): Promise<ScanResult>;
+}
+export default scanBarcode;

ci/sdk-stubs/ohos.scan.scanCore.d.ts

@@ -0,0 +1,9 @@
+declare namespace scanCore {
+  enum ScanType {
+    QR_CODE = 0,
+    BARCODE_TYPE_EAN_13 = 1,
+    BARCODE_TYPE_EAN_8 = 2,
+    BARCODE_TYPE_CODE_128 = 3,
+  }
+}
+export default scanCore;

ci/sdk-stubs/ohos.share.systemShare.d.ts

@@ -0,0 +1,32 @@
+declare namespace systemShare {
+  enum SelectionMode {
+    SINGLE = 0,
+    BATCH = 1,
+  }
+  enum SharePreviewMode {
+    DEFAULT = 0,
+    DETAIL = 1,
+  }
+  interface SharedDataRecord {
+    utd: string;
+    content?: string;
+    uri?: string;
+    data?: ArrayBuffer;
+    title?: string;
+    description?: string;
+    thumbnail?: object;
+  }
+  class SharedData {
+    constructor(record: SharedDataRecord);
+    addRecord(record: SharedDataRecord): void;
+  }
+  interface ShareControllerOptions {
+    selectionMode?: SelectionMode;
+    previewMode?: SharePreviewMode;
+  }
+  class ShareController {
+    constructor(data: SharedData);
+    show(context: object, options?: ShareControllerOptions): Promise<void>;
+  }
+}
+export default systemShare;