Develop configurable Swan Remote Support company product

.cargo/config.toml

@@ -1,5 +1,5 @@
 [target.x86_64-pc-windows-msvc]
-rustflags = ["-Ctarget-feature=+crt-static"]
+rustflags = ["-Ctarget-feature=+crt-static", "-Clink-arg=/Brepro"]
 [target.i686-pc-windows-msvc]
 rustflags = ["-C", "target-feature=+crt-static", "-C", "link-args=/NODEFAULTLIB:MSVCRT"]
 [target.aarch64-pc-windows-msvc]

.dockerignore

@@ -0,0 +1,86 @@
+# Deny by default: Git ignore rules do not apply to Docker build contexts.
+# Keep company environment files, keys, databases, packages and build caches out
+# of both the final image and intermediate layers sent to the build daemon.
+**
+!LICENCE
+!product/
+product/**
+!product/Cargo.toml
+!product/Cargo.lock
+!product/protocol/
+product/protocol/**
+!product/protocol/Cargo.toml
+!product/protocol/src/
+product/protocol/src/**
+!product/protocol/src/lib.rs
+!product/protocol/src/installation.rs
+!product/agent/
+product/agent/**
+!product/agent/Cargo.toml
+!product/agent/src/
+product/agent/src/**
+!product/agent/src/lib.rs
+!product/agent/src/main.rs
+!product/agent/src/payload.rs
+!product/agent/src/reporting.rs
+!product/agent/src/technician.rs
+!product/agent/src/technician_runtime.rs
+!product/agent/src/update.rs
+!product/agent/src/verifier_process.rs
+!product/management/
+product/management/**
+!product/management/Cargo.toml
+!product/management/src/
+product/management/src/**
+!product/management/src/main.rs
+!product/management/src/service.rs
+!product/management/src/installation_reporting.rs
+!product/management/src/network.rs
+!product/management/src/network_probe.rs
+!product/management/src/backup.rs
+!product/management/src/backup_stream.rs
+!product/management/src/windows.rs
+!product/management/src/components.rs
+!product/management/src/tests.rs
+!product/management/src/schema.sql
+!product/management/web/
+product/management/web/**
+!product/management/web/index.html
+!product/management/web/app.js
+!product/management/web/style.css
+!product/worker/
+product/worker/**
+!product/worker/Cargo.toml
+!product/worker/src/
+product/worker/src/**
+!product/worker/src/main.rs
+!product/worker/src/configuration.rs
+!product/worker/src/windows.rs
+!branding/
+branding/**
+!branding/swan-support-mark.svg
+!deployment/
+deployment/**
+!deployment/windows/
+deployment/windows/**
+!deployment/windows/Install-Company.ps1
+!deployment/windows/Install-SwanRemoteSupport.cmd
+!deployment/windows/Open-Technician.ps1
+!deployment/windows/Uninstall-Technician.ps1
+!deployment/windows/Verify-MsiRegistration.ps1
+!deployment/windows/Verify-Package.ps1
+!deployment/windows/Get-MsiIdentity.ps1
+!deployment/windows/Get-MsiInstallMode.ps1
+!deployment/windows/Get-WindowsCompatibility.ps1
+!deployment/windows/Restore-ReleaseMsi.ps1
+!deployment/windows/Restore-CustomerExe.ps1
+!deployment/windows/Restore-Configuration.ps1
+!deployment/windows/Restart-Configuration.ps1
+!deployment/windows/Restart-CustomerUi.ps1
+!deployment/windows/Run-SetupUiTask.ps1
+!deployment/windows/Remove-Configuration.ps1
+!deployment/windows/Update-RecoveryTask.ps1
+!deployment/windows/Update-UninstallCancellation.ps1
+!deployment/windows/Commit-Uninstall.ps1
+!deployment/windows/Prepare-CustomerDirectory.ps1
+!deployment/windows/Read-WorkerConfiguration.ps1

.gitattributes

@@ -1 +1,7 @@
 * text=auto
+deployment/transport/** text eol=lf
+deployment/windows/flutter-engine* text eol=lf
+deployment/windows/fixtures/flutter-sdk-3.24.5/** text eol=lf
+deployment/windows/Build-FlutterEngine.ps1 text eol=lf
+deployment/windows/Install-FlutterEngineToolchain.ps1 text eol=lf
+.github/workflows/swan-flutter-engine.yml text eol=lf

.github/workflows/aom-repro-diagnostic.yml

@@ -0,0 +1,41 @@
+name: Diagnose pinned AV1 object reproducibility
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  aom:
+    runs-on: windows-2022
+    strategy:
+      fail-fast: false
+      matrix:
+        replica: [first-runner, independent-runner]
+    timeout-minutes: 45
+    env:
+      VCPKG_COMMIT_ID: 120deac3062162151622ca4860575a33844ba10b
+      VCPKG_DEFAULT_HOST_TRIPLET: x64-windows-static
+      VCPKG_BINARY_SOURCES: clear
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+        with:
+          persist-credentials: false
+      - uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2
+        with:
+          vcpkgDirectory: C:\vcpkg
+          vcpkgGitCommitId: 120deac3062162151622ca4860575a33844ba10b
+          doNotCache: true
+      - name: Build pinned AV1 and repeatedly compile its original source unit
+        shell: pwsh
+        run: |
+          ./deployment/windows/Diagnose-AomObject.ps1 -WorkDirectory (Join-Path $env:RUNNER_TEMP 'swan-aom-object-diagnostic') -RepeatCompiles 24
+      - name: Preserve raw objects and effective compiler inputs
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        with:
+          name: aom-object-diagnostic-${{ matrix.replica }}-UNSIGNED-TEST
+          path: ${{ runner.temp }}/swan-aom-object-diagnostic/evidence/**
+          if-no-files-found: warn
+          retention-days: 90

.github/workflows/bridge.yml

@@ -4,35 +4,26 @@ name: Build flutter-rust-bridge
 
 on:
   workflow_call:
+    inputs:
+      include_windows_arm64:
+        description: Also generate the upstream Flutter 3.44 Windows ARM64 bridge
+        type: boolean
+        default: true
 
 env:
   CARGO_EXPAND_VERSION: "1.0.95"
   FLUTTER_RUST_BRIDGE_VERSION: "1.80.1"
-  RUST_VERSION: "1.75" # https://github.com/rustdesk/rustdesk/discussions/7503
+  RUST_VERSION: "1.90.0"
 
 jobs:
   generate_bridge:
     runs-on: ${{ matrix.job.os }}
     strategy:
       fail-fast: false
       matrix:
-        job:
-          # Default bridge for every platform still on Flutter 3.24.5 (generated with 3.22.3).
-          - {
-              target: x86_64-unknown-linux-gnu,
-              os: ubuntu-22.04,
-              extra-build-args: "",
-              flutter-version: "3.22.3",
-              artifact-name: "bridge-artifact",
-            }
-          # Dedicated bridge for the Windows arm64 build (Flutter 3.44); runs in parallel.
-          - {
-              target: x86_64-unknown-linux-gnu,
-              os: ubuntu-22.04,
-              extra-build-args: "",
-              flutter-version: "3.44.0",
-              artifact-name: "bridge-artifact-flutter-3.44",
-            }
+        # The Swan x64 release uses only the default bridge. Upstream callers
+        # retain both SDK-specific bridge jobs unless they explicitly opt out.
+        job: ${{ fromJSON(inputs.include_windows_arm64 && '[{"target":"x86_64-unknown-linux-gnu","os":"ubuntu-22.04","extra-build-args":"","flutter-version":"3.22.3","artifact-name":"bridge-artifact"},{"target":"x86_64-unknown-linux-gnu","os":"ubuntu-22.04","extra-build-args":"","flutter-version":"3.44.0","artifact-name":"bridge-artifact-flutter-3.44"}]' || '[{"target":"x86_64-unknown-linux-gnu","os":"ubuntu-22.04","extra-build-args":"","flutter-version":"3.22.3","artifact-name":"bridge-artifact"}]') }}
     steps:
       - name: Checkout source code
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
@@ -114,3 +105,12 @@ jobs:
             ./flutter/lib/generated_bridge.freezed.dart
             ./flutter/macos/Runner/bridge_generated.h
             ./flutter/ios/Runner/bridge_generated.h
+
+      # Review and commit dependency resolution before native --locked builds.
+      # Never overwrite a checked-out lockfile from this artifact during builds.
+      - name: Export resolved dependency lock for review
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: ${{ matrix.job.artifact-name }}-resolved-lock
+          path: ./Cargo.lock
+          if-no-files-found: error

.github/workflows/check-service-bootstrap.yml

@@ -0,0 +1,41 @@
+name: Check Windows service bootstrap
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - .github/workflows/check-service-bootstrap.yml
+      - flutter/windows/runner/service_bootstrap.*
+      - deployment/windows/service-bootstrap-tests/**
+      - deployment/windows/test_service_bootstrap.ps1
+permissions:
+  contents: read
+jobs:
+  scm-loader:
+    runs-on: windows-2022
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - name: Compile isolated service fixtures
+        shell: pwsh
+        run: |
+          cmake -S deployment/windows/service-bootstrap-tests -B bootstrap-build -A x64
+          if ($LASTEXITCODE) { throw 'CMake configuration failed' }
+          cmake --build bootstrap-build --config Release
+          if ($LASTEXITCODE) { throw 'Fixture build failed' }
+      - name: Exercise real service manager and loader boundary
+        shell: pwsh
+        run: |
+          ./deployment/windows/test_service_bootstrap.ps1 -BuildDirectory bootstrap-build/Release -OutputDirectory "$env:RUNNER_TEMP/bootstrap-results"
+      - name: Collect fixture source, unsigned binaries and receipts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: windows-service-bootstrap-unsigned-fixtures
+          path: |
+            bootstrap-build/Release/*.exe
+            bootstrap-build/Release/*.dll
+            deployment/windows/test_service_bootstrap.ps1
+            deployment/windows/service-bootstrap-tests/
+            flutter/windows/runner/service_bootstrap.*
+            ${{ runner.temp }}/bootstrap-results/**
+          if-no-files-found: error

.github/workflows/ci.yml

@@ -24,6 +24,10 @@ on:
       - "appimage/**"
       - "flatpak/**"
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event_name == 'workflow_dispatch' && github.run_id || github.ref }}
+  cancel-in-progress: ${{ github.event_name != 'workflow_dispatch' }}
+
 jobs:
   # ensure_cargo_fmt:
   #   name: Ensure 'cargo fmt' has been run