From f1733c843cddca71ddfbefdebd7f72c4032e30aa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=99=B4=E5=A4=A9?= <keh5@vip.qq.com>
Date: Sun, 12 Jul 2026 13:01:21 -0700
Subject: [PATCH] fix(ci): compile Hermes sync transaction on Unix

---
 src-tauri/src/commands/hermes.rs            | 6 ++++--
 tests/release-readiness-regressions.test.js | 7 +++++++
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/src-tauri/src/commands/hermes.rs b/src-tauri/src/commands/hermes.rs
index ebe2708..0e5e083 100644
--- a/src-tauri/src/commands/hermes.rs
+++ b/src-tauri/src/commands/hermes.rs
@@ -3112,7 +3112,9 @@ fn replace_hermes_files_transaction(entries: &[(PathBuf, String, bool)]) -> Resu
     );
     let mut staged: Vec<(PathBuf, PathBuf, PathBuf, bool, bool)> = Vec::new();
 
-    for (file, content, _private) in entries {
+    for (file, content, private) in entries {
+        #[cfg(not(unix))]
+        let _ = private;
         if let Some(parent) = file.parent() {
             std::fs::create_dir_all(parent)
                 .map_err(|e| format!("创建 Hermes 配置目录失败: {e}"))?;
@@ -3120,7 +3122,7 @@ fn replace_hermes_files_transaction(entries: &[(PathBuf, String, bool)]) -> Resu
         let temp = file.with_extension(format!("tmp-{suffix}"));
         let backup = file.with_extension(format!("bak-sync-{suffix}"));
         std::fs::write(&temp, content).map_err(|e| format!("写入临时配置失败: {e}"))?;
-        #[cfg(not(target_os = "windows"))]
+        #[cfg(unix)]
         if *private {
             use std::os::unix::fs::PermissionsExt;
             std::fs::set_permissions(&temp, std::fs::Permissions::from_mode(0o600))
diff --git a/tests/release-readiness-regressions.test.js b/tests/release-readiness-regressions.test.js
index a5d01b7..640438e 100644
--- a/tests/release-readiness-regressions.test.js
+++ b/tests/release-readiness-regressions.test.js
@@ -39,3 +39,10 @@ test('Hermes Rust 与 Web 关键 Provider 注册表保持一致', () => {
   assert.match(rust, /id:\s*"alibaba",[\s\S]*?name:\s*"Qwen Cloud"/)
   assert.match(web, /hermesProvider\('alibaba',\s*'Qwen Cloud'/)
 })
+
+test('Hermes 配置事务的私密权限标记可跨平台编译', () => {
+  const rust = read('src-tauri/src/commands/hermes.rs')
+  assert.match(rust, /for \(file, content, private\) in entries/)
+  assert.match(rust, /#\[cfg\(unix\)\][\s\S]*?if \*private/)
+  assert.match(rust, /#\[cfg\(not\(unix\)\)\][\s\S]*?let _ = private;/)
+})