add windows kanata

Author: UniqueDing

conf/kanata/kanata.vbs

@@ -1,4 +1,5 @@
 install_kanata_deepin() (
+    # Build Kanata locally because the Deepin repositories do not package it.
     without_nix_env sudo apt install -y curl build-essential pkg-config libayatana-appindicator3-dev
 
     local temporary_dir
@@ -20,6 +21,7 @@ install_kanata_deepin() (
         https://github.com/rszyma/kanata-tray/releases/latest/download/kanata-tray-linux
     sudo install -m 0755 "$tray_binary" /usr/local/bin/kanata-tray
 
+    # Allow Kanata to create virtual input devices and keep the tray per user.
     sudo groupadd --system --force uinput
     sudo usermod -aG input,uinput "$USER"
     sudo install -m 0644 "$DOTFILES_DIR/conf/kanata/99-kanata.rules" /etc/udev/rules.d/99-kanata.rules
@@ -37,6 +39,7 @@ install_kanata_deepin() (
 )
 
 kanata_macos_run() {
+    # Homebrew must run outside a Nix-provided environment.
     if declare -F without_nix_env >/dev/null 2>&1; then
         without_nix_env "$@"
     else
@@ -47,6 +50,7 @@ kanata_macos_run() {
 install_kanata_macos() (
     set -e
 
+    # The macOS setup is maintained for Apple Silicon only.
     if [[ "$(uname -s)" != Darwin || "$(uname -m)" != arm64 ]]; then
         echo "error: macOS Kanata installation requires Apple Silicon (Darwin arm64)" >&2
         exit 1
@@ -67,6 +71,7 @@ install_kanata_macos() (
     mkdir -p "$(dirname "$kanata_config")"
     ln -sfn "$DOTFILES_DIR/conf/kanata/kanata.kbd" "$kanata_config"
 
+    # Kanata needs a system LaunchDaemon; the tray remains a user LaunchAgent.
     local daemon_plist="$temporary_dir/dev.kanata.kanata.plist"
     cat > "$daemon_plist" <<PLIST
 <?xml version="1.0" encoding="UTF-8"?>
@@ -189,11 +194,89 @@ PLIST
         "  spctl --assess --type execute --verbose '$tray_binary_path'"
 )
 
+install_kanata_windows() (
+    set -e
+
+    # Winget currently publishes the Kanata GUI package for x64 only.
+    case "$(uname -m)" in
+    x86_64|amd64) ;;
+    *)
+        printf 'error: Windows Kanata installation requires x86_64/amd64, got %s\n' "$(uname -m)" >&2
+        exit 1
+        ;;
+    esac
+
+    if [[ -z "${LOCALAPPDATA:-}" || -z "${USERDOMAIN:-}" || -z "${USERNAME:-}" ]]; then
+        printf '%s\n' 'error: LOCALAPPDATA, USERDOMAIN, and USERNAME must be set' >&2
+        exit 1
+    fi
+
+    winget install --exact --id jtroo.kanata_gui --source winget \
+        --accept-source-agreements --accept-package-agreements
+
+    # Winget owns the executable path, so locate the installed portable package.
+    local package_root="${LOCALAPPDATA}/Microsoft/WinGet/Packages"
+    local kanata_filename="kanata_windows_gui_winIOv2_x64.exe"
+    local -a kanata_matches=()
+    if [[ -d "$package_root" ]]; then
+        local absolute_package_root
+        absolute_package_root="$(CDPATH= cd -- "$package_root" && pwd -P)"
+        while IFS= read -r -d '' kanata_match; do
+            kanata_matches+=("$kanata_match")
+        done < <(find "$absolute_package_root" -type f -name "$kanata_filename" -print0)
+    fi
+
+    case "${#kanata_matches[@]}" in
+    0)
+        printf 'error: could not find %s beneath %s\n' "$kanata_filename" "$package_root" >&2
+        exit 1
+        ;;
+    1)
+        local kanata_exe="${kanata_matches[0]}"
+        ;;
+    *)
+        printf 'error: found %d matching Kanata executables beneath %s; expected exactly one:\n' \
+            "${#kanata_matches[@]}" "$package_root" >&2
+        printf '  %s\n' "${kanata_matches[@]}" >&2
+        exit 1
+        ;;
+    esac
+
+    # Keep the user configuration outside Winget's versioned package directory.
+    local kanata_dir="${LOCALAPPDATA}/kanata"
+    local kanata_cfg="${kanata_dir}/kanata.kbd"
+    mkdir -p "$kanata_dir"
+    install -m 0644 "$DOTFILES_DIR/conf/kanata/kanata.kbd" "$kanata_cfg"
+
+    # Task Scheduler has no working-directory option; use absolute paths instead.
+    local run_as="${USERDOMAIN}\\${USERNAME}"
+    schtasks.exe //Create \
+        //TN "Kanata" \
+        //SC ONLOGON \
+        //RU "$run_as" \
+        //IT \
+        //TR "\"${kanata_exe}\" --cfg \"${kanata_cfg}\"" \
+        //F
+    schtasks.exe //Run //TN "Kanata"
+
+    printf '%s\n' \
+        'Warning: the default LLHOOK/winIOv2 build does not remap administrator-elevated applications unless Kanata itself is elevated.' \
+        'The Windows installer intentionally does not install Interception.' \
+        'Future Kanata upgrades are managed via winget.'
+)
+
 install_kanata() {
-    if [[ "$(uname -s)" == Darwin ]]; then
+    # Route native platforms before consulting Linux distribution metadata.
+    local os_name
+    os_name="$(uname -s)"
+    if [[ "$os_name" == Darwin ]]; then
         install_kanata_macos
         return
     fi
+    if [[ "$os_name" == MINGW* || "$os_name" == MSYS* || "$os_name" == CYGWIN* ]]; then
+        install_kanata_windows
+        return
+    fi
 
     case "${DISTRIB_ID:-}" in
     Arch|EndeavourOS)
@@ -205,7 +288,7 @@ install_kanata() {
         install_kanata_deepin || return
         ;;
     *)
-        echo "error: kanata install is only configured for Arch/EndeavourOS/Deepin" >&2
+        echo "error: kanata install is only configured for Windows, Arch/EndeavourOS, or Deepin" >&2
         exit 1
         ;;
     esac

scripts/kanata.sh

@@ -22,15 +22,97 @@ without_nix_env() {
     env -u NIX_PATH -u NIX_PROFILES -u NIX_SSL_CERT_FILE -u NIX_REMOTE -u IN_NIX_SHELL PATH="$clean_path" "$@"
 }
 
+install_clash_party_deepin() (
+    set -e
+
+    local architecture
+    architecture="$(without_nix_env dpkg --print-architecture)" || exit 1
+    case "$architecture" in
+    amd64|arm64)
+        ;;
+    *)
+        echo "error: unsupported Clash Party architecture: $architecture" >&2
+        exit 1
+        ;;
+    esac
+
+    local temporary_dir
+    temporary_dir="$(without_nix_env mktemp -d)" || exit 1
+    trap 'rm -rf "$temporary_dir"' EXIT
+
+    local release_file="$temporary_dir/release.json"
+    without_nix_env curl \
+        --location \
+        --silent \
+        --show-error \
+        --fail \
+        --header 'Accept: application/vnd.github+json' \
+        --output "$release_file" \
+        https://api.github.com/repos/mihomo-party-org/clash-party/releases/latest || exit 1
+
+    local tag_name
+    tag_name="$(without_nix_env jq -er '
+        select(.draft == false and .prerelease == false)
+        | .tag_name
+        | select(type == "string" and length > 0)
+    ' "$release_file")" || exit 1
+
+    local version="${tag_name#v}"
+    local deb_name="clash-party-linux-${version}-${architecture}.deb"
+    local checksum_name="${deb_name}.sha256"
+    local deb_url
+    local checksum_url
+    deb_url="$(without_nix_env jq -er --arg name "$deb_name" "
+        [.assets[] | select(.name == \$name and .state == \"uploaded\") | .browser_download_url]
+        | select(length == 1)
+        | .[0]
+        | select(type == \"string\" and length > 0)
+    " "$release_file")" || exit 1
+    checksum_url="$(without_nix_env jq -er --arg name "$checksum_name" "
+        [.assets[] | select(.name == \$name and .state == \"uploaded\") | .browser_download_url]
+        | select(length == 1)
+        | .[0]
+        | select(type == \"string\" and length > 0)
+    " "$release_file")" || exit 1
+
+    without_nix_env curl --location --silent --show-error --fail --output "$temporary_dir/$deb_name" "$deb_url" || exit 1
+    without_nix_env curl --location --silent --show-error --fail --output "$temporary_dir/$checksum_name" "$checksum_url" || exit 1
+
+    local expected_checksum
+    expected_checksum="$(< "$temporary_dir/$checksum_name")"
+    if [[ ! "$expected_checksum" =~ ^[[:xdigit:]]{64}$ ]]; then
+        echo "error: invalid Clash Party checksum for $deb_name" >&2
+        exit 1
+    fi
+
+    local actual_checksum
+    actual_checksum="$(without_nix_env sha256sum "$temporary_dir/$deb_name")" || exit 1
+    actual_checksum="${actual_checksum%% *}"
+    if [[ "${actual_checksum,,}" != "${expected_checksum,,}" ]]; then
+        echo "error: Clash Party checksum mismatch for $deb_name" >&2
+        exit 1
+    fi
+
+    cd "$temporary_dir"
+    without_nix_env sudo apt install -y "./$deb_name" || exit 1
+)
+
 install_deepin_packages() {
     PACKAGE_FILE="deepin.list"
     if [[ ! -f "$DOTFILES_DIR/package/$PACKAGE_FILE" ]]; then
         echo "error：$PACKAGE_FILE not exsit!"
         exit 1
     fi
     echo "deb https://pro-store-packages.uniontech.com/appstore eagle-pro appstore" | sudo tee /etc/apt/sources.list.d/appstoreuos.list
-    without_nix_env sudo apt update
-    cat "$DOTFILES_DIR/package/$PACKAGE_FILE" | grep -vE '^\s*#' | grep -vE '^\s*$' | xargs -r without_nix_env sudo apt install -y
+    without_nix_env sudo apt update || return
+    without_nix_env sudo apt install -y curl jq || return
+
+    local packages=()
+    mapfile -t packages < <(grep -vE '^\s*(#|$)' "$DOTFILES_DIR/package/$PACKAGE_FILE")
+    if ((${#packages[@]} > 0)); then
+        without_nix_env sudo apt install -y "${packages[@]}" || return
+    fi
+    install_clash_party_deepin
 }
 
 install_arch_packages() {
@@ -64,7 +146,34 @@ install_windows_packages() {
     cat "$DOTFILES_DIR/package/$PACKAGE_FILE" | grep -vE '^\s*#' | grep -vE '^\s*$' | xargs -r -I {} winget install --id "{}" --exact --accept-package-agreements --accept-source-agreements
 }
 
+install_macos_packages() {
+    local package_file="$DOTFILES_DIR/package/macos.list"
+    local package
+
+    if [[ ! -f "$package_file" ]]; then
+        echo "error: macos.list not found" >&2
+        return 1
+    fi
+    if ! command -v brew >/dev/null 2>&1; then
+        echo "error: Homebrew (brew) is required for macOS packages" >&2
+        return 1
+    fi
+
+    brew update || return 1
+    while IFS= read -r package || [[ -n "$package" ]]; do
+        package="${package#${package%%[![:space:]]*}}"
+        package="${package%${package##*[![:space:]]}}"
+        [[ -z "$package" || "${package#\#}" != "$package" ]] && continue
+        brew install --cask "$package" || return 1
+    done < "$package_file"
+}
+
 default_pkg_target() {
+    if [[ "$(uname -s)" == "Darwin" ]]; then
+        echo macos
+        return
+    fi
+
     if [[ "${OS:-}" == "Windows_NT" ]]; then
         echo windows
         return
@@ -79,7 +188,7 @@ default_pkg_target() {
         ;;
     *)
         echo "error: cannot infer package target for DISTRIB_ID='${DISTRIB_ID:-}'" >&2
-        echo "usage: $0 pkg <arch|deepin|termux|windows>" >&2
+        echo "usage: $0 pkg <arch|deepin|termux|windows|macos>" >&2
         exit 1
         ;;
     esac
@@ -112,6 +221,15 @@ update_system_packages() {
     windows)
         winget upgrade --all --accept-package-agreements --accept-source-agreements
         ;;
+    macos)
+        if command -v brew >/dev/null 2>&1; then
+            brew update
+            brew upgrade --cask
+        else
+            echo "error: Homebrew (brew) is required for macOS updates" >&2
+            return 1
+        fi
+        ;;
     esac
 }
 
@@ -131,51 +249,66 @@ install_packages() {
     case "$target" in
     deepin)
         install_deepin_packages
-        install_linux_fonts
         link_linux_configs
         ;;
     arch)
         install_arch_packages
-        install_linux_fonts
         link_linux_configs
         ;;
     termux)
         install_termux_packages
-        install_linux_fonts
         link_linux_configs
         ;;
     windows)
         install_windows_packages
-        install_windows_fonts
         link_windows_configs
         ;;
+    macos)
+        install_macos_packages || return 1
+        link_macos_configs || return 1
+        ;;
     *)
         echo "error: unknown package target: $target" >&2
         exit 1
         ;;
     esac
 }
 
-run_pkg() {
+run_fonts() {
     local target="${1:-}"
     if [[ -z "$target" ]]; then
         target="$(default_pkg_target)"
     fi
 
-    install_packages "$target" || true
-    save_pkg_target "$target"
-}
-
-install_kanata() {
-    case "${DISTRIB_ID:-}" in
-    Arch|EndeavourOS)
-        yay -Sy --noconfirm kanata
-        sudo ln -sfn "$DOTFILES_DIR/conf/kanata/kanata.kbd" /etc/kanata.kbd
-        sudo systemctl enable --now kanata
+    case "$target" in
+    deepin|arch|termux)
+        install_linux_fonts
+        ;;
+    windows)
+        install_windows_fonts
+        ;;
+    macos)
+        install_macos_fonts || return 1
         ;;
     *)
-        echo "error: kanata install is only configured for Arch/EndeavourOS" >&2
+        echo "error: unknown font target: $target" >&2
         exit 1
         ;;
     esac
 }
+
+run_pkg() {
+    local target="${1:-}"
+    if [[ -z "$target" ]]; then
+        target="$(default_pkg_target)"
+    fi
+
+    if [[ "$target" == "macos" ]]; then
+        install_packages "$target" || return 1
+        save_pkg_target "$target"
+        return
+    fi
+
+    install_packages "$target" || true
+    save_pkg_target "$target"
+}