Ð޸´ȫÏîĿÉó²éÎÊÌⲢ·¢²¼ v1.1.9

¸ÄÓñ¾»ú¶ÀÁ¢ CA£¬»ָ´ CLI TLS УÑ飬±£»¤ƾ¾ÝÓëÅäÖò¢·¢±£´档 Ð޸´ Cursor Êý¾ݡ¢»Ự·¾¶¡¢´úÀíÉúÃüÖÜÆڡ¢ģÐÍÇëÇóÓë Skills Îļþ²Ù×÷¡£ Ϊ¶ÀÁ¢ Tab ·þÎñÔö¼ӿͻ§¶˼øȨ£¬Éý¼¶ÒÀÀµÓ빤¾ßÁ´£¬ÍêÉƷ¢²¼ԪÐÅϢͬ²½¡£ Ñé֤£ºÁ½¸ö Go ģ¿éµĲâÊÔ/vet¡¢¹ؼüģ¿é race¡¢ǰ¶˲âÊÔ/Éú²ú¹¹½¨/Éó¼ơ¢ Go ¿ɴï©¶´ɨÃèÓë macOS/Linux ¿ÉÐÐģ¿齻²æ±àÒë¾ùͨ¹ý¡£ Windows ¸ôÀëÆô¶¯ͨ¹ý£»δÍê³ɵĵã»÷ðÑ̺ÍԭÉúƽ̨Ñé֤¼ûÉó²鱨¸档
2026-11-10 09:59:34 +08:00
parent db73cf5a39
commit 188225fae6
98 changed files with 3324 additions and 930 deletions
--- a/internal/cursor/launcher_windows_test.go
+++ b/internal/cursor/launcher_windows_test.go
@@ -0,0 +1,77 @@
+//go:build windows
+
+package cursor
+
+import (
+	"encoding/json"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+	"testing"
+)
+
+func utf8BOM(text string) []byte { return append([]byte{0xef, 0xbb, 0xbf}, []byte(text)...) }
+
+func TestPowerShellLauncherPreservesUnicodePathsAndArguments(t *testing.T) {
+	dir := filepath.Join(t.TempDir(), "中文 space O'Brien")
+	if err := os.MkdirAll(dir, 0700); err != nil {
+		t.Fatal(err)
+	}
+	result := filepath.Join(dir, "result.json")
+	fake := `$payload=@{args=@($args);ca=$env:NODE_EXTRA_CA_CERTS;options=$env:NODE_OPTIONS;tls=$env:NODE_TLS_REJECT_UNAUTHORIZED};[IO.File]::WriteAllText(` + psLiteral(result) + `,($payload|ConvertTo-Json -Compress),[Text.Encoding]::UTF8);exit 0`
+	if err := os.WriteFile(filepath.Join(dir, "cursor-agent.ps1"), utf8BOM(fake), 0600); err != nil {
+		t.Fatal(err)
+	}
+	preload := filepath.Join(dir, "tls-redirect.cjs")
+	launcher := filepath.Join(dir, "launch.ps1")
+	if err := os.WriteFile(launcher, utf8BOM(buildWindowsLauncher("39092", filepath.Join(dir, "ca.crt"), "fixture-token", filepath.Join(dir, "agent.cmd"), preload)), 0600); err != nil {
+		t.Fatal(err)
+	}
+	cmd := exec.Command("powershell.exe", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-File", launcher, "--message", "one two", "a&b", "O'Brien")
+	cmd.Env = append(os.Environ(), "NODE_TLS_REJECT_UNAUTHORIZED=0", "NODE_OPTIONS=--require=old-tls-bypass.cjs")
+	if out, err := cmd.CombinedOutput(); err != nil {
+		t.Fatalf("launcher: %v %s", err, out)
+	}
+	data, err := os.ReadFile(result)
+	if err != nil {
+		t.Fatal(err)
+	}
+	data = []byte(strings.TrimPrefix(string(data), "\ufeff"))
+	var got struct {
+		Args    []string `json:"args"`
+		CA      string   `json:"ca"`
+		Options string   `json:"options"`
+		TLS     string   `json:"tls"`
+	}
+	if err = json.Unmarshal(data, &got); err != nil {
+		t.Fatal(err)
+	}
+	want := []string{"--message", "one two", "a&b", "O'Brien"}
+	if len(got.Args) != len(want) {
+		t.Fatalf("arguments: %#v", got.Args)
+	}
+	for i := range want {
+		if got.Args[i] != want[i] {
+			t.Fatalf("argument %d: %q", i, got.Args[i])
+		}
+	}
+	if got.CA != filepath.Join(dir, "ca.crt") || got.TLS != "" || strings.Contains(got.Options, "tls-bypass") {
+		t.Fatal("unsafe launcher environment")
+	}
+}
+
+func TestMigrationPowerShellSyntaxWithoutExecutingTrustChanges(t *testing.T) {
+	body := windowsCAMigrationBody(`C:\用户 space O'Brien\ca.crt`, strings.Repeat("A", 40), strings.Repeat("B", 40))
+	path := filepath.Join(t.TempDir(), "migration.ps1")
+	if err := os.WriteFile(path, utf8BOM(body), 0600); err != nil {
+		t.Fatal(err)
+	}
+	parse := `$tokens=$null;$errors=$null;$null=[Management.Automation.Language.Parser]::ParseFile(` + psLiteral(path) + `,[ref]$tokens,[ref]$errors);if($errors.Count){$errors|ForEach-Object{$_.Message};exit 1}`
+	if out, err := exec.Command("powershell.exe", "-NoProfile", "-NonInteractive", "-Command", parse).CombinedOutput(); err != nil {
+		t.Fatalf("invalid migration syntax: %v %s", err, out)
+	}
+	if strings.Contains(body, "CurrentUser") {
+		t.Fatal("elevated script must not target the alternate administrator's user store")
+	}
+}