feat: add windows portable zip artifacts (#107)

* ci/runtime: add windows portable zip artifacts

* fix(ci/runtime): address portable artifact review comments

* fix(ci): scope portable nightly normalization

* refactor(ci): build windows portable zip from release outputs

* fix(testing): address portable packaging review comments

* fix(ci/runtime): tighten portable packaging inputs

* fix(ci/runtime): share portable marker config

* refactor(ci): lazily load portable packaging config

Author: zouyonghe

.github/workflows/build-desktop-tauri.yml

@@ -432,8 +432,9 @@ jobs:
     runs-on: ${{ matrix.runner }}
     env:
       ASTRBOT_WINDOWS_BUNDLES: nsis
-      WINDOWS_INSTALLER_EXE_GLOBS: |
+      WINDOWS_RELEASE_ASSET_GLOBS: |
         src-tauri/target/release/bundle/nsis/*.exe
+        src-tauri/target/release/bundle/nsis/*portable*.zip
     strategy:
       fail-fast: false
       matrix:
@@ -482,6 +483,14 @@ jobs:
           set -euo pipefail
           node scripts/ci/backend-smoke-test.mjs --label "windows-${{ matrix.arch }}"
 
+      - name: Package portable zip artifact (Windows)
+        shell: bash
+        run: |
+          set -euo pipefail
+          python3 -m scripts.ci.package_windows_portable \
+            --bundle-dir src-tauri/target/release/bundle/nsis \
+            --output-dir src-tauri/target/release/bundle/nsis
+
       - name: Verify Windows installer outputs
         shell: bash
         run: bash scripts/ci/verify-windows-installer-outputs.sh
@@ -492,9 +501,10 @@ jobs:
           name: astrbot-desktop-tauri-${{ needs.resolve_build_context.outputs.astrbot_version }}-windows-${{ matrix.arch }}
           if-no-files-found: error
           # Only upload Windows installer executables.
-          # A broad **/*.exe pattern also matches bundled Python runtime helpers.
+          # Keep explicit globs here so we only publish the installer plus the
+          # portable zip, not bundled helper executables from the embedded runtime.
           path: |
-            ${{ env.WINDOWS_INSTALLER_EXE_GLOBS }}
+            ${{ env.WINDOWS_RELEASE_ASSET_GLOBS }}
             src-tauri/target/release/bundle/nsis/*.exe.sig
 
   release:
@@ -594,7 +604,8 @@ jobs:
             - Source: `${{ needs.resolve_build_context.outputs.source_git_url }}`
             - Ref: `${{ needs.resolve_build_context.outputs.source_git_ref }}`
             - Mode: `${{ needs.resolve_build_context.outputs.build_mode }}`
-            - Windows installer format: `nsis`.
+            - Windows package formats: `nsis installer` and `portable zip`.
+            - Windows portable zip uses manual replacement updates and requires WebView2 to already exist on the host.
           generate_release_notes: true
           prerelease: ${{ needs.resolve_build_context.outputs.release_prerelease == 'true' }}
           make_latest: ${{ needs.resolve_build_context.outputs.release_make_latest == 'true' }}

.github/workflows/check-scripts.yml

@@ -64,3 +64,19 @@ jobs:
             exit 0
           fi
           python3 -m compileall -q scripts
+
+      - name: Run Python script behavior tests
+        run: |
+          set -euo pipefail
+          if [ ! -d scripts/ci ]; then
+            echo "scripts/ci directory does not exist, skip Python script tests."
+            exit 0
+          fi
+
+          mapfile -t test_files < <(find scripts/ci -type f -name 'test_*.py' | sort)
+          if [ "${#test_files[@]}" -eq 0 ]; then
+            echo "No Python script tests found (test_*.py), skip."
+            exit 0
+          fi
+
+          python3 -m unittest discover -s scripts/ci -p 'test_*.py'

scripts/ci/normalize_release_artifact_filenames.py

@@ -13,6 +13,7 @@
     ARTIFACT_EXTENSIONS,
     LOCALE_PATTERN,
     MACOS_CANONICAL_ARTIFACT_STEM_PATTERN,
+    SHORT_SHA_PATTERN,
     VERSION_PATTERN,
     WINDOWS_ARTIFACT_STEM_PATTERN_FRAGMENT,
 )
@@ -61,6 +62,12 @@
             MACOS_CANONICAL_ARTIFACT_STEM_PATTERN,
             "AstrBot_{version}_macos_{arch}",
         ),
+        (
+            re.compile(
+                rf"{WINDOWS_ARTIFACT_STEM_PATTERN_FRAGMENT}(?:-portable|_portable)(?P<nightly_suffix>_nightly_{SHORT_SHA_PATTERN})?$"
+            ),
+            "AstrBot_{version}_windows_{arch}_portable{nightly_suffix}",
+        ),
     ),
     ".app.tar.gz": (
         (
@@ -148,14 +155,18 @@ def strip_nightly_suffix(stem: str) -> str:
     return NIGHTLY_HASH_PATTERN.sub("", stem)
 
 
+def should_preserve_original_nightly_suffix(stem: str, ext: str) -> bool:
+    return ext == ".zip" and ("_portable" in stem or "-portable" in stem)
+
+
 def canonicalize_stem(
     stem: str, ext: str, warned_unknown_arches: set[str]
 ) -> tuple[str, bool]:
     for pattern, normalized_template in CANONICALIZE_RULES.get(ext, ()):
         match = pattern.fullmatch(stem)
         if not match:
             continue
-        groups = match.groupdict()
+        groups = {key: value or "" for key, value in match.groupdict().items()}
         if "arch" in groups:
             groups["arch"] = normalize_arch(groups["arch"], warned_unknown_arches)
         return normalized_template.format(**groups), True
@@ -228,11 +239,21 @@ def main() -> int:
 
         original_name = path.name
         original_stem = strip_extension(original_name, ext)
+        canonical_ext = canonicalization_extension(ext)
 
         stripped_stem = strip_nightly_suffix(original_stem)
-        normalized_stem, matched = canonicalize_stem(
-            stripped_stem, canonicalization_extension(ext), warned_unknown_arches
-        )
+        candidate_stems = [stripped_stem]
+        if should_preserve_original_nightly_suffix(original_stem, canonical_ext):
+            candidate_stems.insert(0, original_stem)
+
+        normalized_stem = original_stem
+        matched = False
+        for candidate_stem in candidate_stems:
+            normalized_stem, matched = canonicalize_stem(
+                candidate_stem, canonical_ext, warned_unknown_arches
+            )
+            if matched:
+                break
 
         if not matched:
             unmatched_messages.append(