From 9e357cf7ccfa42c4f3f2d38364b3b174129e602f Mon Sep 17 00:00:00 2001
From: jkooe <62494645+jkooe@users.noreply.github.com>
Date: Sun, 27 Sep 2026 02:23:42 +0800
Subject: [PATCH] Create windows-e2e.yml

---
 .github/workflows/windows-e2e.yml | 114 ++++++++++++++++++++++++++++++
 1 file changed, 114 insertions(+)
 create mode 100644 .github/workflows/windows-e2e.yml

diff --git a/.github/workflows/windows-e2e.yml b/.github/workflows/windows-e2e.yml
new file mode 100644
index 0000000..19ecf06
--- /dev/null
+++ b/.github/workflows/windows-e2e.yml
@@ -0,0 +1,114 @@
+name: Windows E2E
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'apps/**'
+      - 'packages/**'
+      - 'tests/**'
+      - 'scripts/**'
+      - 'package.json'
+      - 'pnpm-lock.yaml'
+      - '.github/workflows/windows-e2e.yml'
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  windows-e2e:
+    name: Windows 真机验证
+    runs-on: windows-latest
+    timeout-minutes: 30
+
+    steps:
+      - name: 检出代码
+        uses: actions/checkout@v4
+
+      - name: 安装 pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 12
+
+      - name: 安装 Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - name: 安装依赖
+        run: pnpm install --frozen-lockfile
+
+      - name: 构建
+        run: pnpm -r build
+
+      - name: 类型检查
+        run: pnpm typecheck
+
+      - name: E2E — 协议与跨平台能力
+        run: node tests/e2e/run.mjs
+
+      - name: E2E — Windows 专属能力（服务 / 软件 / winget）
+        run: node tests/e2e/windows.mjs
+
+      - name: 冒烟 — install.ps1 安装链路
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = "Stop"
+          ./scripts/install.ps1 -Port 18769 -NodeId ci_win
+
+          $task = Get-ScheduledTask -TaskName "nodeagent" -ErrorAction Stop
+          Write-Host "计划任务状态: $($task.State)"
+
+          $cfg = Get-Content "$env:USERPROFILE\.nodeagent\agent.json" -Raw | ConvertFrom-Json
+          if ($cfg.port -ne 18769) { throw "端口配置错误: $($cfg.port)" }
+          if (-not $cfg.key)       { throw "预共享密钥缺失" }
+          if (-not $cfg.tls)       { throw "TLS 默认应开启" }
+
+          $rule = Get-NetFirewallRule -DisplayName "nodeagent (TCP 18769)" -ErrorAction Stop
+          if (-not $rule) { throw "防火墙规则未创建" }
+
+          Write-Host "OK — 计划任务 / 配置 / 防火墙均已就位"
+
+      - name: 冒烟 — 被控端监听
+        shell: pwsh
+        run: |
+          Start-Process -FilePath "node" -ArgumentList "apps/agent/dist/index.js" -NoNewWindow
+          Start-Sleep -Seconds 4
+          $ok = (Test-NetConnection 127.0.0.1 -Port 18769 -WarningAction SilentlyContinue).TcpTestSucceeded
+          if (-not $ok) { throw "agent 未监听 18769" }
+          Write-Host "agent 已在 18769 监听"
+
+      - name: 冒烟 — CLI 连入（wss + 自签证书 + HMAC 鉴权）
+        shell: pwsh
+        run: |
+          $cfg = Get-Content "$env:USERPROFILE\.nodeagent\agent.json" -Raw | ConvertFrom-Json
+          node apps/cli/dist/index.js connect 127.0.0.1 --port 18769 --key $cfg.key --insecure
+          Write-Host "--- status ---"
+          node apps/cli/dist/index.js status
+          Write-Host "--- services ---"
+          node apps/cli/dist/index.js services --limit 5
+
+      - name: 冒烟 — MCP 工具列表
+        shell: pwsh
+        run: |
+          $cfg = Get-Content "$env:USERPROFILE\.nodeagent\agent.json" -Raw | ConvertFrom-Json
+          @{ client_id="ci"; host="127.0.0.1"; port=18769; tls=$true; insecure=$true; key=$cfg.key } |
+            ConvertTo-Json | Set-Content "$env:USERPROFILE\.nodeagent\config.json" -Encoding UTF8
+          $req = @(
+            '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"ci","version":"1.0"}}}',
+            '{"jsonrpc":"2.0","method":"notifications/initialized"}',
+            '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}'
+          ) -join "`n"
+          ($req + "`n") | node apps/mcp/dist/index.js 2>$null | Select-String "na_status"
+
+      - name: 清理
+        if: always()
+        shell: pwsh
+        run: |
+          Get-Process node -ErrorAction SilentlyContinue | Stop-Process -Force -ErrorAction SilentlyContinue
+          ./scripts/uninstall.ps1 -Port 18769 -Purge