修复: df-im-gateway Hello 握手补 proto 字段

- Wave A 7b 给 df-tunnel 的 Hello 结构体新增必填 proto 字段,但 df-im-gateway(commander.rs:84)的构造点漏同步 → cargo check --workspace 挂 E0063
- 补 proto: 1(serde 缺省 v1,与旧服务端兼容);教训:跨 crate 结构体改动自证必须 cargo check --workspace(-p 单 crate 不覆盖下游 bin)

scripts/publish-release.ps1

@@ -62,13 +62,15 @@ if (-not $SkipBuild) {
     Write-Host "[3/6] 跳过构建(-SkipBuild),复用已有产物"
 }
 
-# 定位产物:裸 exe / .nsis.zip / .sig
+# 定位产物:Tauri v2 = setup.exe + .exe.sig(更新包即安装器本身);v1 遗留 = .nsis.zip + .nsis.zip.sig
 $setupExe = Get-ChildItem "$nsisDir\devflow_${version}_x64-setup.exe" -ErrorAction SilentlyContinue | Select-Object -First 1
+$sigFile = Get-ChildItem "$nsisDir\devflow_${version}_x64-setup.exe.sig","$nsisDir\devflow_${version}_x64-setup.nsis.zip.sig" -ErrorAction SilentlyContinue | Select-Object -First 1
 $zipFile = Get-ChildItem "$nsisDir\devflow_${version}_x64-setup.nsis.zip" -ErrorAction SilentlyContinue | Select-Object -First 1
-$sigFile = Get-ChildItem "$nsisDir\devflow_${version}_x64-setup.nsis.zip.sig" -ErrorAction SilentlyContinue | Select-Object -First 1
-if (-not $zipFile) { Write-Host "[失败] 未找到 .nsis.zip 产物(确认 createUpdaterArtifacts=true)"; exit 1 }
-if (-not $sigFile) { Write-Host "[失败] 未找到 .sig 签名文件"; exit 1 }
-Write-Host "       产物: $($zipFile.Name) ($([math]::Round($zipFile.Length/1MB,1))MB)"
+if (-not $sigFile) { Write-Host "[失败] 未找到 .sig 签名文件(确认 createUpdaterArtifacts=true 且 TAURI_SIGNING_PRIVATE_KEY 就位)"; exit 1 }
+# 与 .sig 配对的更新产物:v2 签名(.exe.sig)配 setup.exe;v1 签名(.nsis.zip.sig)配 .nsis.zip
+$artifact = if ($sigFile.Name.EndsWith('.exe.sig')) { $setupExe } else { $zipFile }
+if (-not $artifact) { Write-Host "[失败] 未找到与 $($sigFile.Name) 配对的更新产物"; exit 1 }
+Write-Host "       产物: $($artifact.Name) ($([math]::Round($artifact.Length/1MB,1))MB)"
 
 # ── 4. 生成 latest.json ──
 Write-Host "[4/6] 生成 latest.json..."
@@ -79,7 +81,7 @@ if (-not $Notes) {
     if (-not $Notes) { $Notes = "DevFlow v$version" }
 }
 $pubDate = (Get-Date).ToUniversalTime().ToString("yyyy-MM-ddTHH:mm:ssZ")
-$sha256 = (Get-FileHash $zipFile.FullName -Algorithm SHA256).Hash.ToLower()
+$sha256 = (Get-FileHash $artifact.FullName -Algorithm SHA256).Hash.ToLower()
 $latestJson = [ordered]@{
     version   = $version
     notes     = $Notes
@@ -87,7 +89,7 @@ $latestJson = [ordered]@{
     platforms = [ordered]@{
         "windows-x86_64" = [ordered]@{
             signature = $sig
-            url       = "$baseUrl/devflow_${version}_x64-setup.nsis.zip"
+            url       = "$baseUrl/$($artifact.Name)"
         }
     }
 } | ConvertTo-Json -Depth 5
@@ -102,8 +104,8 @@ $env:MSYS_NO_PATHCONV = "1"
 ssh-proxy exec -n $site -c "mkdir -p $remoteDir"
 if ($LASTEXITCODE -ne 0) { Write-Host "[失败] 创建远程目录"; exit 1 }
 
-$uploads = @($latestPath, $zipFile.FullName, $sigFile.FullName)
-if ($setupExe) { $uploads += $setupExe.FullName }
+$uploads = @($latestPath, $sigFile.FullName, $artifact.FullName)
+if ($setupExe -and $setupExe.FullName -ne $artifact.FullName) { $uploads += $setupExe.FullName }
 foreach ($f in $uploads) {
     $name = Split-Path $f -Leaf
     Write-Host "       上传 $name ..."