feat：移除了弹窗，服务器添加sls

scripts/axolotl/verify-update-manifest.mjs

@@ -0,0 +1,45 @@
+import fs from 'node:fs'
+
+const [manifestPath, tag, source = 'github'] = process.argv.slice(2)
+const expectedVersion = tag?.replace(/^v/, '')
+
+if (!manifestPath || !expectedVersion || !['github', 'cnb'].includes(source)) {
+	throw new Error('Usage: node verify-update-manifest.mjs <latest.json> <version-tag> [github|cnb]')
+}
+
+const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'))
+
+if (manifest.version !== expectedVersion) {
+	throw new Error(`Manifest version ${manifest.version} does not match ${expectedVersion}`)
+}
+
+const requiredPlatforms = [
+	'darwin-aarch64',
+	'darwin-x86_64',
+	'linux-aarch64',
+	'linux-x86_64',
+	'windows-x86_64',
+]
+
+for (const platform of requiredPlatforms) {
+	const update = manifest.platforms?.[platform]
+
+	if (!update || typeof update.signature !== 'string' || update.signature.trim().length < 32) {
+		throw new Error(`Missing signed update for ${platform}`)
+	}
+
+	const url = new URL(update.url)
+	const pathname = decodeURIComponent(url.pathname).toLowerCase()
+	const isExpectedUrl =
+		url.protocol === 'https:' &&
+		(source === 'github'
+			? url.hostname === 'github.com' &&
+				pathname.includes('/mystic-stars/axolotl/releases/download/')
+			: url.hostname === 'cnb.cool' &&
+				pathname.includes(`/axlmc/axolotl/-/releases/download/${tag.toLowerCase()}/`))
+	if (!isExpectedUrl) {
+		throw new Error(`Unexpected ${source} update URL for ${platform}: ${update.url}`)
+	}
+}
+
+console.log(`Verified signed ${source} updater manifest for ${expectedVersion}`)