chore(devex): CI 加 mac 矩阵 + version-triplet 校验 + bump-version.sh

.github/workflows/ci.yml

@@ -1,15 +1,32 @@
 name: CI
 
+# 多平台跨语言质量门禁。release-tauri.yml 是发版流水线（仅打包构建），这里负责
+# 在合并前快速验证两件事：
+#   1. 前端 typecheck + vite bundle 通过（tsc + vite build，捕获跨 locale 类型 drift）
+#   2. Rust 后端在 macOS / Windows 都能 cargo check 过（捕获 cfg 漏分支 / 平台 API 误用）
+# 跑 build-mac.sh / windows-package-msvc.ps1 太重；只跑轻量 cargo check + vite build。
+
 on:
   push:
     branches: [main, dev]
   pull_request:
     branches: [main, dev]
 
 jobs:
-  windows-tauri:
-    name: Windows Tauri checks
-    runs-on: windows-latest
+  cross-platform:
+    name: ${{ matrix.label }} checks
+    strategy:
+      # 一个平台挂掉不阻塞其他平台拿到验证结果。
+      fail-fast: false
+      matrix:
+        include:
+          - os: macos-latest
+            label: macOS
+            preflight: false
+          - os: windows-latest
+            label: Windows
+            preflight: true
+    runs-on: ${{ matrix.os }}
     defaults:
       run:
         working-directory: openless-all/app
@@ -32,10 +49,12 @@ jobs:
         run: npm ci
 
       - name: Check Windows prerequisites
+        if: matrix.preflight
         shell: pwsh
         run: ./scripts/windows-preflight.ps1 -Toolchain msvc
 
       - name: Check PowerShell scripts
+        if: matrix.preflight
         shell: pwsh
         run: |
           foreach ($script in @("./scripts/windows-preflight.ps1", "./scripts/windows-build-gnu.ps1", "./scripts/windows-runtime-smoke.ps1")) {
@@ -47,8 +66,38 @@ jobs:
             }
           }
 
-      - name: Build frontend
+      - name: Build frontend (tsc + vite)
         run: npm run build
 
-      - name: Check Tauri backend
+      - name: Check Tauri backend (cargo check)
         run: cargo check --manifest-path src-tauri/Cargo.toml
+
+      - name: Verify version sync across all 5 files
+        # 两个平台都跑这个校验：Windows runner 自带 git-bash，跨 shell 表现一致。
+        # 一旦版本号 drift 立刻 fail，避免发版时再发现漏改。
+        # 校验 5 处：package.json / package-lock.json (root + nested) /
+        # tauri.conf.json / Cargo.toml / Cargo.lock 的 [openless] 包。
+        shell: bash
+        run: |
+          PKG=$(node -p "require('./package.json').version")
+          LOCK_ROOT=$(node -p "require('./package-lock.json').version")
+          LOCK_NESTED=$(node -p "require('./package-lock.json').packages[''].version")
+          TAU=$(node -p "require('./src-tauri/tauri.conf.json').version")
+          CRG=$(grep -E '^version = ' src-tauri/Cargo.toml | head -1 | sed -E 's/^version = "(.+)"$/\1/')
+          # Cargo.lock：找 [openless] 包紧跟的 version 行
+          CARGO_LOCK_VER=$(awk 'BEGIN{found=0} /^name = "openless"$/{found=1; next} found && /^version = /{gsub(/"/,""); print $3; exit}' src-tauri/Cargo.lock)
+          echo "package.json         = $PKG"
+          echo "package-lock root    = $LOCK_ROOT"
+          echo "package-lock nested  = $LOCK_NESTED"
+          echo "tauri.conf.json      = $TAU"
+          echo "Cargo.toml           = $CRG"
+          echo "Cargo.lock openless  = $CARGO_LOCK_VER"
+          mismatch=0
+          for v in "$LOCK_ROOT" "$LOCK_NESTED" "$TAU" "$CRG" "$CARGO_LOCK_VER"; do
+            if [ "$v" != "$PKG" ]; then mismatch=1; fi
+          done
+          if [ "$mismatch" -ne 0 ]; then
+            echo "::error::版本号未对齐 — 请用 scripts/bump-version.sh 同步更新"
+            exit 1
+          fi
+          echo "[ok] 全部 5 处版本号一致：$PKG"

.gitignore

@@ -22,9 +22,18 @@ SC/
 apps/
 promo/
 promo-openless/
+promo-openless-v2/
 docs/old-promo/
 .worktrees/
 
+# 派生产物（兜底）：项目曾出现 promo-openless-v2/node_modules 等遗漏，
+# 这里全局通配，避免某子目录漏配 .gitignore 时把 build artifact 推进 PR。
+node_modules/
+dist/
+target/
+.cargo/registry/
+.cargo/git/
+
 # Windows TSF IME local build outputs
 openless-all/app/windows-ime/OpenLessIme/
 openless-all/app/windows-ime/x64/