From cdb24fd31dfe22da801407022abffb675ed8059b Mon Sep 17 00:00:00 2001 From: toorux Date: Mon, 12 Oct 2026 01:56:07 +0800 Subject: [PATCH] Add optional q2f runtime and Quest APK conversion --- .github/workflows/release.yml | 41 ++++- docs/releases.md | 2 +- docs/user-guide/apk-manager.md | 2 +- docs/zh-CN/releases.md | 4 +- docs/zh-CN/user-guide/apk-manager.md | 4 +- src/apk.rs | 12 ++ src/apk/q2f.rs | 238 +++++++++++++++++++++++++++ src/session.rs | 10 ++ tests/test_q2f_runtime.py | 63 +++++++ tools/package-q2f.py | 81 +++++++++ tools/package-release.sh | 14 +- tools/q2f-runtime.py | 135 +++++++++++++++ ui/locales/en-US.json | 14 +- ui/locales/zh-CN.json | 14 +- ui/src/apk-install-review.tsx | 5 +- ui/src/apk-manager.css | 1 + ui/src/apk-manager.tsx | 13 +- 17 files changed, 633 insertions(+), 20 deletions(-) create mode 100644 src/apk/q2f.rs create mode 100644 tests/test_q2f_runtime.py create mode 100644 tools/package-q2f.py create mode 100644 tools/q2f-runtime.py diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c00394f..8236ac3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -54,6 +54,34 @@ jobs: key: cef-linux-arm64-154.0.32-682c378 - name: Fetch pinned CEF run: test -d target/cef || bash tools/fetch-cef.sh + - uses: actions/setup-java@v4 + with: + distribution: temurin + java-version: '25.0.4.1+1' + architecture: aarch64 + - name: Prepare pinned q2f inputs + run: | + mkdir -p target/q2f-input + curl -fsSL --retry 3 -o target/q2f-input/cli-jar.zip https://github.com/ovrport/app/releases/download/1.2.3/cli-jar.zip + python3 - <<'PY' + import zipfile + with zipfile.ZipFile('target/q2f-input/cli-jar.zip') as source: + name = 'overportcli-1.2.3-all.jar' + with source.open(name) as data, open('target/q2f-input/' + name, 'xb') as output: + import shutil + shutil.copyfileobj(data, output) + PY + curl -fsSL --retry 3 -o target/q2f-input/libraries.zip https://files.crx.moe/ovrport/tracker/releases/download/3.4.3-23204ea/libraries.zip + curl -fsSL --retry 3 -o target/q2f-input/LICENSE https://raw.githubusercontent.com/ovrport/app/c790854/LICENSE + curl -fsSL --retry 3 -o target/q2f-input/source.tar.gz https://github.com/ovrport/app/archive/c790854.tar.gz + sha256sum -c <<'EOF' + 307d58a69a5c9722f912d1b6566b0dd1e0ebe1440c6d1e56cab6cb883d74fef2 target/q2f-input/overportcli-1.2.3-all.jar + 6cec6c176e1aeee8d9ec4f9b4e3982f71da7b44a36a293249620073a06f00e5e target/q2f-input/libraries.zip + 2db2c0f597a8be01d9742180019627b4c23fd0213f04f5034fbad53f0d296eb3 target/q2f-input/source.tar.gz + EOF + jlink --strip-debug --no-man-pages --no-header-files --compress=2 \ + --add-modules java.base,java.datatransfer,java.xml,java.prefs,java.desktop,java.logging,java.net.http,jdk.crypto.ec,jdk.unsupported \ + --output target/q2f-input/java - name: Validate run: | npm ci @@ -66,11 +94,16 @@ jobs: env: RELEASE_REPO: ${{ github.repository }} RELEASE_TAG: ${{ github.ref_name }} + Q2F_JAVA_HOME: target/q2f-input/java + Q2F_CLI_JAR: target/q2f-input/overportcli-1.2.3-all.jar + Q2F_LIBRARIES_ZIP: target/q2f-input/libraries.zip + Q2F_LICENSE: target/q2f-input/LICENSE + Q2F_SOURCE_ARCHIVE: target/q2f-input/source.tar.gz run: | bash tools/package-release.sh target/cef mkdir -p release-assets archive=$(find release -maxdepth 1 -name 'framely-*-linux-arm64.tar.gz' ! -name '*-offline-linux-arm64.tar.gz' ! -name 'framely-cef-*' -print -quit) - cp release/*.tar.gz release/framely-cef.json release-assets/ + cp release/*.tar.gz release/framely-cef.json release/framely-q2f.json release-assets/ cp tools/bootstrap.py release-assets/bootstrap.py cp install.sh release-assets/install.sh "$CARGO_TARGET_DIR/release/framely" release-manifest --archive "$archive" --url "https://github.com/$RELEASE_REPO/releases/download/$RELEASE_TAG/$(basename "$archive")" --output release-assets/framely-release.json --changelog "Framely $RELEASE_TAG" @@ -99,8 +132,8 @@ jobs: RELEASE_TAG: ${{ github.ref_name }} run: | cd release-assets - sha256sum -- *.tar.gz bootstrap.py install.sh framely-release.json framely-cef.json > SHA256SUMS - printf 'Framely %s\n\nFirst install: choose the complete *-offline-linux-arm64.tar.gz package. Updates: choose the smaller Framely package without CEF. A separate framely-cef-* archive is available for runtime downloads.\n\nInstall on Frame over SSH using the repository install.sh. SHA256SUMS verifies archives; each archive also includes internal checksums.\n' "$RELEASE_TAG" > release-notes.txt + sha256sum -- *.tar.gz bootstrap.py install.sh framely-release.json framely-cef.json framely-q2f.json > SHA256SUMS + printf 'Framely %s\n\nFirst install: choose the complete *-offline-linux-arm64.tar.gz package. Updates: choose the smaller Framely package without CEF. Separate framely-cef-* and framely-q2f-* archives provide the browser and optional Quest converter.\n\nInstall on Frame over SSH using the repository install.sh. SHA256SUMS verifies archives; each archive also includes internal checksums.\n' "$RELEASE_TAG" > release-notes.txt prerelease=false latest=true if [[ "$RELEASE_TAG" == *-* ]]; then @@ -108,5 +141,5 @@ jobs: latest=false fi gh release create "$RELEASE_TAG" --verify-tag --title "Framely $RELEASE_TAG" --notes-file release-notes.txt --draft --latest=false --prerelease="$prerelease" - gh release upload "$RELEASE_TAG" -- *.tar.gz SHA256SUMS bootstrap.py install.sh framely-release.json framely-cef.json + gh release upload "$RELEASE_TAG" -- *.tar.gz SHA256SUMS bootstrap.py install.sh framely-release.json framely-cef.json framely-q2f.json gh release edit "$RELEASE_TAG" --draft=false --latest="$latest" --prerelease="$prerelease" diff --git a/docs/releases.md b/docs/releases.md index 506b089..2ecacff 100644 --- a/docs/releases.md +++ b/docs/releases.md @@ -58,7 +58,7 @@ Prerelease suffixes create GitHub Prereleases without Latest. Installer releases Only tags publish. After every product build succeeds, publication creates a draft, uploads assets/checksums, then makes it public. Failed drafts are not stable download targets. Manual runs leave Actions artifacts only. -Device attachments include the core archive without CEF, the complete `*-offline-linux-arm64.tar.gz` archive, a separate `framely-cef-*` runtime archive, `framely-release.json`, `framely-cef.json`, `bootstrap.py`, `install.sh` and `SHA256SUMS`. The update descriptor always targets the core archive. First installation selects the complete offline archive. CEF is verified and shared under `/home/.framely/cef/`; missing or newly required runtimes download separately, and previous runtimes remain available for rollback. See [package selection and runtime recovery](user-guide/installation.md#release-packages-and-cef). Installer releases have five platform packages and checksums only. Desktop installers download archive/checksums without user-managed scripts. +Device attachments include the core archive without CEF, the complete `*-offline-linux-arm64.tar.gz` archive, a separate `framely-cef-*` runtime archive, an optional `framely-q2f-*` Quest conversion archive, `framely-release.json`, `framely-cef.json`, `framely-q2f.json`, `bootstrap.py`, `install.sh` and `SHA256SUMS`. The update descriptor always targets the core archive. First installation selects the complete offline archive. CEF is verified and shared under `/home/.framely/cef/`; missing or newly required runtimes download separately, and previous runtimes remain available for rollback. The q2f archive is downloaded only when Quest conversion is chosen; each release pins a verified runtime identity, and already installed APKs are not automatically reconverted. See [package selection and runtime recovery](user-guide/installation.md#release-packages-and-cef). Installer releases have five platform packages and checksums only. Desktop installers download archive/checksums without user-managed scripts. External checksums cover downloaded archives; internal checksums cover extracted payload. Neither independently proves author identity. Online installation trusts the chosen repository/HTTPS, local installation the supplied archive/checksums. Redirects never downgrade HTTPS. diff --git a/docs/user-guide/apk-manager.md b/docs/user-guide/apk-manager.md index 4646204..0a3b289 100644 --- a/docs/user-guide/apk-manager.md +++ b/docs/user-guide/apk-manager.md @@ -91,7 +91,7 @@ Do not invoke Lepton's global cleanup commands as an application-specific uninst ## Supported formats -The initial implementation supports individual APKs. Split APK bundles, XAPK/APKM, OBB import, Google Play installation and automatic Steam shortcut creation are outside this version. Unsupported bundles are rejected rather than treated as ordinary APKs. +The initial implementation supports individual APKs. Optional Quest conversion downloads and verifies a separate `framely-q2f-*` runtime when selected in the APK install review. It preserves the original APK and reviews the converted, newly signed APK before installation. The runtime and per-package signing keys live in the configured APK storage location and move with it. An existing original APK may reject the new signature; Framely will not silently uninstall it or erase saves. Updating q2f does not automatically reconvert installed games. Games can continue downloading their own OBB data into persistent container storage. Split APK bundles, XAPK/APKM, manual OBB import, Google Play installation and automatic Steam shortcut creation are outside this version. Unsupported bundles are rejected rather than treated as ordinary APKs. ### Flat window orientation diff --git a/docs/zh-CN/releases.md b/docs/zh-CN/releases.md index fc4e2ec..96eeb0d 100644 --- a/docs/zh-CN/releases.md +++ b/docs/zh-CN/releases.md @@ -42,7 +42,7 @@ framely call system.source.save '{"source":{"url":"https://example.org/framely-r 每次构建生成不含 CEF 的本体包 `framely-<版本及构建号>-linux-arm64.tar.gz`、完整离线包 `framely-<版本及构建号>-offline-linux-arm64.tar.gz`、独立运行库 `framely-cef-<运行库标识>-linux-arm64.tar.gz`。更新清单 `framely-release.json` 固定指向不含 CEF 的本体包；首次安装固定选择完整离线包。`framely-cef.json` 提供独立 CEF 的 HTTPS 下载地址、大小及 SHA256。 -CEF 按内容哈希保存在 `/home/.framely/cef/<运行库标识>`，更新时复用；旧安装中相同的运行库自动迁移。所需运行库缺失或 CEF 版本更换时单独下载并校验，各发行的运行库保留用于回滚。完整包可离线提供 CEF。参见[发行包与运行库恢复](user-guide/installation.md#发行包与-cef)。 +CEF 按内容哈希保存在 `/home/.framely/cef/<运行库标识>`，更新时复用；旧安装中相同的运行库自动迁移。所需运行库缺失或 CEF 版本更换时单独下载并校验，各发行的运行库保留用于回滚。完整包可离线提供 CEF。参见[发行包与运行库恢复](user-guide/installation.md#发行包与-cef)。可选的 Quest 转换工具另打 `framely-q2f-*` 包，发行包声明经过验证的确切版本；只有用户选择 Quest 转换时才校验缓存并按需下载，Framely 本体更新不自动重转已安装 APK。 ## GitHub Actions 发布 @@ -71,7 +71,7 @@ git push origin installer-v0.4.1-preview.10 只有标签触发会发布。各工作流在自己的构建全部成功后创建草稿 Release，上传本产品产物及外部 `SHA256SUMS`，最后公开草稿。Framely Release 额外包含 `bootstrap.py`、入口脚本和更新清单；安装器 Release 只包含五个平台的安装器包和校验文件。失败的草稿不作为最新稳定版提供下载。手动触发用于验证，仅保留 Actions artifacts。 -Framely 本体 Release 附件用途：`framely-*-linux-arm64.tar.gz` 为不含 CEF 的更新包，`framely-*-offline-linux-arm64.tar.gz` 为首次安装用的完整离线包，`framely-cef-*` 为独立运行库，`framely-cef.json` 提供运行库下载信息；`framely-release.json` 为内置更新功能的版本清单；`install.sh` 是命令行入口，调用 `bootstrap.py` 完成下载、校验和维护；`SHA256SUMS` 为附件校验清单。桌面安装器只需自动下载运行包和校验清单，用户无需手动下载脚本。安装器的五个平台包发布在独立的安装器 Release 中。 +Framely 本体 Release 附件用途：`framely-*-linux-arm64.tar.gz` 为不含 CEF 的更新包，`framely-*-offline-linux-arm64.tar.gz` 为首次安装用的完整离线包，`framely-cef-*` 为独立运行库，`framely-cef.json` 提供运行库下载信息；`framely-q2f-*` 为可选 Quest 转换工具包，`framely-q2f.json` 提供下载信息；`framely-release.json` 为内置更新功能的版本清单；`install.sh` 是命令行入口，调用 `bootstrap.py` 完成下载、校验和维护；`SHA256SUMS` 为附件校验清单。桌面安装器只需自动下载运行包和校验清单，用户无需手动下载脚本。安装器的五个平台包发布在独立的安装器 Release 中。 外部 `SHA256SUMS` 包含压缩包哈希，校验传输内容；包内同名文件校验解压后的载荷。哈希不能独立证明作者身份，在线安装依赖指定 GitHub 仓库与 HTTPS；本地安装依赖用户提供的可信包与校验文件。下载遵循 HTTPS 重定向，不允许降级。 diff --git a/docs/zh-CN/user-guide/apk-manager.md b/docs/zh-CN/user-guide/apk-manager.md index c773f33..fe69512 100644 --- a/docs/zh-CN/user-guide/apk-manager.md +++ b/docs/zh-CN/user-guide/apk-manager.md @@ -28,6 +28,8 @@ APK 管理用于安装和管理 Steam Frame 上的 Lepton 侧载应用，本地 点击“安装 APK”，选择单个 `.apk`，核对名称、包名、版本、最低 Android SDK 和目标容器。在 Frame 内选择本机 APK 会直接在设备上校验，不经过浏览器上传；确认阶段保留独立本机副本，不修改原文件。网络上传暂存于 Frame 持久化文件系统，避免占满较小的 `/tmp`。上传显示真实字节进度；后续显示处理阶段，不使用假百分比。 +Quest 游戏可在安装审核中点击“转换此 APK”。Framely 首次使用时按发行包声明的标识下载独立的 `framely-q2f-*` 工具包，校验完整归档和内部文件，之后复用已验证缓存；普通 APK 安装无需下载。转换调用 OVR Port，原始 APK 不修改，转换结果重新读取并再次审核后才安装。转换会重新签名；原版 APK 已安装时可能出现签名不匹配，Framely 不会自动卸载应用或清除存档。工具包和每个包名的签名密钥保存在配置的 APK 存储目录，随该目录迁移；转换临时文件也使用该位置，不使用 `/tmp`。工具包更新只影响之后发起的转换，不自动重新转换已安装游戏。转换结果能否在 Frame 运行仍取决于游戏。 + 在 Frame 内，两个管理面板的文件选择入口统一使用 Framely 内置文件选择器，包括 APK、插件包和语言文件。默认打开下载目录，记住上次选择的目录；左侧为按需加载的文件夹树，覆盖主目录、临时目录和已挂载存储，支持逐级展开、收起和当前路径定位，提供目录导航、手动输入路径、搜索、隐藏文件和文件类型筛选。选中文件后确认；B/Escape 只取消选择器，不关闭管理面板。外部浏览器继续使用系统文件选择器。启动台右侧的“安装APK”按钮打开 APK 管理面板。 共享容器中的 APK 使用各自独立的 Android 安装目录。容器重启会保留 Android 外部存储中的已下载资源，包括未完成的下载片段和更新进度记录。无法识别的 Lepton 存储初始化脚本会在执行前拒绝，避免丢弃文件；游戏是否继续下载仍由自身更新器决定。旧版单 APK 挂载会在保存的安装包可用时恢复，旧 OBB 资源链接会在替换安装前迁移，并保留原目标。这只能防止后续丢失，旧版启动流程已经删除的下载资源无法仅靠 APK 还原。 @@ -97,7 +99,7 @@ Android 清除已卸载包的保留状态时可能需要原签名 APK。Framely ## 格式范围 -首版支持单个 APK。不包含分包、XAPK/APKM、OBB 导入、Google Play 安装及自动创建 Steam 快捷方式；不支持的包格式会明确拒绝。 +首版支持单个 APK。Quest 兼容转换同样只接受单个 APK；游戏自行下载的 OBB 资源继续使用持久化容器存储。不包含分包、XAPK/APKM、手动 OBB 导入、Google Play 安装及自动创建 Steam 快捷方式；不支持的包格式会明确拒绝。 ### 平面窗口方向 diff --git a/src/apk.rs b/src/apk.rs index a5abbb6..1b113d3 100644 --- a/src/apk.rs +++ b/src/apk.rs @@ -25,6 +25,7 @@ mod graphics; mod lifecycle; mod native; pub(crate) mod permissions; +mod q2f; mod steam_bridge; mod steam_shortcuts; pub(crate) mod steam_ui; @@ -2775,6 +2776,17 @@ pub fn reviews_drop(home: &Path, ticket: &str) -> Result { } Ok(json!(true)) } +pub fn q2f_convert( + home: &Path, + ticket: &str, + cancel: &Cancellation, + progress: impl Fn(Value) -> Result<()>, +) -> Result { + q2f::convert(home, ticket, cancel, progress) +} +pub fn q2f_status(home: &Path) -> Result { + q2f::status(home) +} pub fn operate( home: &Path, kind: &str, diff --git a/src/apk/q2f.rs b/src/apk/q2f.rs new file mode 100644 index 0000000..6decf18 --- /dev/null +++ b/src/apk/q2f.rs @@ -0,0 +1,238 @@ +//! Optional Quest APK conversion. The runtime is versioned separately from Framely. +use super::{apk_metadata, init, review, space, Cancellation, Metadata, MUTATION}; +use anyhow::{ensure, Context, Result}; +use serde_json::{json, Value}; +use std::{ + fs, + os::unix::fs::{symlink, PermissionsExt}, + path::{Path, PathBuf}, + process::{Command, Stdio}, + thread, + time::Duration, +}; + +fn release_root() -> Result { + Ok(std::env::current_exe()? + .parent() + .context("Missing Framely binary directory")? + .parent() + .context("Missing Framely release directory")? + .to_path_buf()) +} + +fn requirement_path() -> Result { + if let Some(path) = std::env::var_os("FRAMELY_Q2F_DESCRIPTOR") { + return Ok(PathBuf::from(path)); + } + Ok(release_root()?.join("Q2F_RUNTIME.json")) +} + +fn tool_path() -> Result { + if let Some(path) = std::env::var_os("FRAMELY_Q2F_TOOL") { + return Ok(PathBuf::from(path)); + } + Ok(release_root()?.join("tools/q2f-runtime.py")) +} + +pub(super) fn status(home: &Path) -> Result { + let requirement: Value = serde_json::from_slice(&fs::read(requirement_path()?)?)?; + let identity = requirement["id"] + .as_str() + .context("Invalid q2f runtime identity")?; + ensure!( + !identity.is_empty() + && identity + .bytes() + .all(|b| b.is_ascii_alphanumeric() || b".+-".contains(&b)) + && !identity.contains(".."), + "Invalid q2f runtime identity" + ); + let cached = super::root(home).join("q2f/runtimes").join(identity); + Ok(json!({"id":identity,"bytes":requirement["size"], + "cached":fs::read_to_string(cached.join("VERSION")).is_ok_and(|v|v.trim()==identity)})) +} + +fn run(mut command: Command, log: &Path, cancel: &Cancellation) -> Result<()> { + let output = fs::OpenOptions::new() + .create(true) + .truncate(true) + .write(true) + .open(log)?; + let errors = output.try_clone()?; + let mut child = command + .stdout(Stdio::from(output)) + .stderr(Stdio::from(errors)) + .spawn()?; + loop { + if let Err(error) = cancel.check() { + let _ = child.kill(); + let _ = child.wait(); + return Err(error); + } + if let Some(status) = child.try_wait()? { + if status.success() { + return Ok(()); + } + let detail = fs::read_to_string(log).unwrap_or_default(); + let tail = detail + .chars() + .rev() + .take(3000) + .collect::() + .chars() + .rev() + .collect::(); + anyhow::bail!("Quest conversion failed ({}): {}", status, tail.trim()); + } + thread::sleep(Duration::from_millis(200)); + } +} + +fn workspace(storage: &Path, runtime: &Path) -> Result { + let workspace = storage.join("q2f/workspace"); + fs::create_dir_all(workspace.join("signatures"))?; + fs::set_permissions( + workspace.join("signatures"), + fs::Permissions::from_mode(0o700), + )?; + let libraries = workspace.join("libraries"); + if libraries.is_symlink() || libraries.exists() { + if !libraries.is_symlink() { + anyhow::bail!("Unexpected q2f libraries path"); + } + fs::remove_file(&libraries)?; + } + let identity = runtime + .file_name() + .context("Missing q2f runtime identity")?; + // Keep this relative so APK storage migration preserves the link. + symlink( + Path::new("../runtimes").join(identity).join("libraries"), + &libraries, + )?; + fs::copy( + runtime.join("overport-installed.json"), + workspace.join("installed.json"), + )?; + Ok(workspace) +} + +#[cfg(test)] +mod tests { + use super::*; + + #[test] + fn workspace_library_link_survives_apk_storage_move() { + let temp = tempfile::tempdir().unwrap(); + let old = temp.path().join("old"); + let runtime = old.join("q2f/runtimes/test-id"); + fs::create_dir_all(runtime.join("libraries")).unwrap(); + fs::write(runtime.join("overport-installed.json"), "{}").unwrap(); + fs::write(runtime.join("libraries/probe"), "ok").unwrap(); + let work = workspace(&old, &runtime).unwrap(); + assert_eq!( + fs::read_to_string(work.join("libraries/probe")).unwrap(), + "ok" + ); + let new = temp.path().join("new"); + fs::rename(old, &new).unwrap(); + assert_eq!( + fs::read_to_string(new.join("q2f/workspace/libraries/probe")).unwrap(), + "ok" + ); + } +} + +pub(super) fn convert( + home: &Path, + ticket: &str, + cancel: &Cancellation, + progress: impl Fn(Value) -> Result<()>, +) -> Result { + let _guard = MUTATION.lock().unwrap(); + cancel.check()?; + let storage = init(home)?; + let (source, before) = review(home, ticket)?; + let source_apk = source.join("base.apk"); + let original_bytes = fs::metadata(&source_apk)?.len(); + // The observed OVR Port peak was roughly four source APK sizes, plus the + // original review. Leave a fixed reserve for unrelated Android writes. + space( + &storage, + original_bytes + .saturating_mul(5) + .saturating_add(1024 * 1024 * 1024), + )?; + let descriptor = requirement_path()?; + ensure!( + descriptor.is_file(), + "This Framely build has no q2f runtime requirement" + ); + let requirement: Value = serde_json::from_slice(&fs::read(&descriptor)?)?; + let version = requirement["librariesVersion"] + .as_str() + .context("Invalid q2f runtime version")?; + ensure!( + version + .bytes() + .all(|b| b.is_ascii_alphanumeric() || b".-".contains(&b)), + "Invalid q2f runtime version" + ); + progress(json!({"phase":"q2f-preparing","operation":"convert"}))?; + let log = storage.join("logs").join(format!("q2f-{ticket}.log")); + let mut prepare = Command::new("python3"); + prepare.arg(tool_path()?).arg(&descriptor).arg(&storage); + run(prepare, &log, cancel)?; + let runtime = PathBuf::from( + fs::read_to_string(&log)? + .lines() + .last() + .context("q2f runtime path missing")?, + ); + ensure!( + runtime.is_dir() && runtime.starts_with(storage.join("q2f/runtimes")), + "Invalid q2f runtime path" + ); + let work = workspace(&storage, &runtime)?; + let output = source.join("converted"); + fs::create_dir_all(&output)?; + progress(json!({"phase":"q2f-converting","operation":"convert","cancellable":true}))?; + let mut java = Command::new(runtime.join("java/bin/java")); + java.arg("-Xmx3g") + .arg("-jar") + .arg(runtime.join("overportcli.jar")) + .arg("patch") + .arg(format!("--input={}", source_apk.display())) + .arg(format!("--output={}", output.display())) + .arg("--output-name=base.apk") + .arg(format!("--workspace={}", work.display())) + .arg(format!("--version={version}")); + let conversion = run(java, &log, cancel); + let _ = fs::remove_dir_all(work.join("dec")); + if let Err(error) = conversion { + let _ = fs::remove_dir_all(&output); + return Err(error); + } + let converted = output.join("base.apk"); + let result = (|| -> Result { + ensure!(converted.is_file(), "Quest converter produced no APK"); + progress(json!({"phase":"q2f-verifying","operation":"convert"}))?; + let after: Metadata = apk_metadata::read(&converted)?; + ensure!( + after.package == before.package && after.version_code == before.version_code, + "Quest conversion changed APK package or version" + ); + cancel.check()?; + // Create a fresh review after conversion so the user has the full + // review window even when patching takes several minutes. + drop(_guard); + super::inspect(home, &converted, cancel) + })(); + let _ = fs::remove_dir_all(&output); + let next = result?; + let _ = super::reviews_drop(home, ticket); + Ok( + json!({"ticket":next["ticket"],"metadata":next["metadata"],"bytes":next["bytes"], + "q2fVersion":requirement["id"],"originalBytes":original_bytes}), + ) +} diff --git a/src/session.rs b/src/session.rs index 2fa6cd5..03cf369 100644 --- a/src/session.rs +++ b/src/session.rs @@ -1077,6 +1077,16 @@ impl Agent { &crate::steam::home()?, p["ticket"].as_str().context("Missing APK review")?, ), + "apk.q2f.status" => crate::apk::q2f_status(&crate::steam::home()?), + "apk.q2f.start" => { + let _gate = APK_STORAGE_API_GATE.lock().unwrap(); + ensure!(!self.jobs.active_kind("apk:storage") && !self.jobs.active_kind("apk:operation"), "请等待 APK 操作或存储迁移完成"); + let home = crate::steam::home()?; + let ticket = p["ticket"].as_str().context("Missing APK review")?.to_owned(); + self.jobs.task_progress("apk:operation", move |cancel, progress| { + crate::apk::q2f_convert(&home, &ticket, &cancel, |value| { progress(value); Ok(()) }) + }) + } "apk.cleanup.list" => crate::apk::cleanup_list(&crate::steam::home()?), "apk.storage.status" => crate::apk::storage_status(&crate::steam::home()?), "apk.permission.pending" => Ok(json!(crate::apk::permissions::pending(&crate::steam::home()?)?)), diff --git a/tests/test_q2f_runtime.py b/tests/test_q2f_runtime.py new file mode 100644 index 0000000..1a8a0c4 --- /dev/null +++ b/tests/test_q2f_runtime.py @@ -0,0 +1,63 @@ +import importlib.util +import json +import pathlib +import tarfile +import tempfile +import unittest +from unittest.mock import patch + +SCRIPT = pathlib.Path(__file__).resolve().parents[1] / 'tools/q2f-runtime.py' +SPEC = importlib.util.spec_from_file_location('q2f_runtime', SCRIPT) +RUNTIME = importlib.util.module_from_spec(SPEC) +SPEC.loader.exec_module(RUNTIME) + + +class Q2FRuntimeTests(unittest.TestCase): + def test_exact_cache_is_reused_and_tampering_is_rejected(self): + with tempfile.TemporaryDirectory() as directory: + base = pathlib.Path(directory) + identity = 'overport-test-123456789abc' + payload = base / 'payload' + (payload / 'java/bin').mkdir(parents=True) + for name in ('java/bin/java', 'overportcli.jar', 'overport-installed.json', 'OVR_PORT_LICENSE'): + (payload / name).write_text(name) + files = sorted(p for p in payload.rglob('*') if p.is_file()) + sums = ''.join(f'{RUNTIME.digest(p)} {p.relative_to(payload)}\n' for p in files) + (payload / 'VERSION').write_text(identity + '\n') + (payload / 'SHA256SUMS').write_text(sums) + archive = base / f'framely-q2f-{identity}-linux-arm64.tar.gz' + with tarfile.open(archive, 'w:gz') as tar: + tar.add(payload, arcname=f'framely-q2f-{identity}') + descriptor = base / 'requirement.json' + descriptor.write_text(json.dumps({'schemaVersion': 1, 'id': identity, + 'archive': archive.name, 'size': archive.stat().st_size, + 'sha256': RUNTIME.digest(archive), 'url': 'https://example.invalid/q2f'})) + copies = [] + def copy(_requirement, destination): + destination.write_bytes(archive.read_bytes()) + copies.append(destination) + with patch.object(RUNTIME, 'download', copy): + cached = RUNTIME.prepare(descriptor, base / 'storage') + self.assertEqual(cached, RUNTIME.prepare(descriptor, base / 'storage')) + self.assertEqual(len(copies), 1) + (cached / 'overportcli.jar').write_text('changed') + with self.assertRaisesRegex(ValueError, 'checksum mismatch'): + RUNTIME.prepare(descriptor, base / 'storage') + + def test_archive_rejects_link_and_escape(self): + with tempfile.TemporaryDirectory() as directory: + base = pathlib.Path(directory) + identity = 'overport-test-123456789abc' + archive = base / 'unsafe.tar.gz' + for index, member in enumerate((f'framely-q2f-{identity}/../escape', f'framely-q2f-{identity}/link')): + with tarfile.open(archive, 'w:gz') as tar: + info = tarfile.TarInfo(member) + info.type = tarfile.SYMTYPE if member.endswith('/link') else tarfile.REGTYPE + info.size = 0 + tar.addfile(info) + with self.assertRaisesRegex(ValueError, 'Unsafe'): + RUNTIME.extract(archive, base / f'target-{index}', identity) + + +if __name__ == '__main__': + unittest.main() diff --git a/tools/package-q2f.py b/tools/package-q2f.py new file mode 100644 index 0000000..e015097 --- /dev/null +++ b/tools/package-q2f.py @@ -0,0 +1,81 @@ +#!/usr/bin/env python3 +"""Build an independently downloadable Quest conversion runtime.""" +import argparse +import hashlib +import json +import pathlib +import shutil +import tarfile +import tempfile +import zipfile + +CLI_VERSION = '1.2.3' +LIBRARIES_VERSION = '3.4.3-23204ea' +CLI_SHA256 = '307d58a69a5c9722f912d1b6566b0dd1e0ebe1440c6d1e56cab6cb883d74fef2' +LIBRARIES_SHA256 = '6cec6c176e1aeee8d9ec4f9b4e3982f71da7b44a36a293249620073a06f00e5e' +SOURCE_SHA256 = '2db2c0f597a8be01d9742180019627b4c23fd0213f04f5034fbad53f0d296eb3' + + +def digest(path): + with path.open('rb') as source: + return hashlib.file_digest(source, 'sha256').hexdigest() + + +def safe_zip_extract(source, destination): + with zipfile.ZipFile(source) as archive: + for entry in archive.infolist(): + path = pathlib.PurePosixPath(entry.filename) + if (path.is_absolute() or '..' in path.parts or '\\' in entry.filename + or (entry.external_attr >> 16) & 0o170000 == 0o120000): + raise ValueError('Unsafe OVR Port library entry') + target = destination.joinpath(*path.parts) + if entry.is_dir(): + target.mkdir(parents=True, exist_ok=True) + else: + target.parent.mkdir(parents=True, exist_ok=True) + with archive.open(entry) as data, target.open('xb') as output: + shutil.copyfileobj(data, output) + + +def package(args): + cli, libraries, java, source = map(pathlib.Path, (args.cli_jar, args.libraries_zip, args.java_home, args.source_archive)) + if digest(cli) != CLI_SHA256 or digest(libraries) != LIBRARIES_SHA256 or digest(source) != SOURCE_SHA256: + raise ValueError('Pinned OVR Port artifact checksum mismatch') + if not (java / 'bin/java').is_file() or not (java / 'legal/java.base/LICENSE').is_file(): + raise ValueError('Incomplete Java runtime') + output = pathlib.Path(args.output) + output.mkdir(parents=True, exist_ok=True) + with tempfile.TemporaryDirectory(prefix='q2f-package-', dir=output) as scratch: + payload = pathlib.Path(scratch) / 'payload' + shutil.copytree(java, payload / 'java', symlinks=False) + shutil.copy2(cli, payload / 'overportcli.jar') + safe_zip_extract(libraries, payload / 'libraries' / LIBRARIES_VERSION) + (payload / 'overport-installed.json').write_text(json.dumps({'releases': [ + {'version': LIBRARIES_VERSION, 'app_required': '1.2.0', 'is_experimental': True} + ]}) + '\n') + shutil.copy2(args.license, payload / 'OVR_PORT_LICENSE') + shutil.copy2(source, payload / 'OVR_PORT_SOURCE.tar.gz') + (payload / 'SOURCE').write_text('https://github.com/ovrport/app/tree/c790854\n') + entries = sorted(p for p in payload.rglob('*') if p.is_file()) + checksums = ''.join(f'{digest(p)} {p.relative_to(payload).as_posix()}\n' for p in entries) + identity = f'overport-{CLI_VERSION}-{LIBRARIES_VERSION}-{hashlib.sha256(checksums.encode()).hexdigest()[:12]}' + (payload / 'VERSION').write_text(identity + '\n') + (payload / 'SHA256SUMS').write_text(checksums) + archive = output / f'framely-q2f-{identity}-linux-arm64.tar.gz' + with tarfile.open(archive, 'w:gz') as tar: + tar.add(payload, arcname=f'framely-q2f-{identity}') + requirement = {'schemaVersion': 1, 'id': identity, + 'cliVersion': CLI_VERSION, 'librariesVersion': LIBRARIES_VERSION, + 'archive': archive.name, 'size': archive.stat().st_size, + 'sha256': digest(archive), + 'url': f'https://github.com/{args.repo}/releases/download/{args.tag}/{archive.name}'} + pathlib.Path(args.stage, 'Q2F_RUNTIME.json').write_text(json.dumps(requirement, indent=2) + '\n') + pathlib.Path(output, 'framely-q2f.json').write_text(json.dumps(requirement, indent=2) + '\n') + print(archive) + + +if __name__ == '__main__': + parser = argparse.ArgumentParser() + for name in ('stage', 'output', 'java-home', 'cli-jar', 'libraries-zip', 'license', 'source-archive', 'repo', 'tag'): + parser.add_argument('--' + name, required=True) + package(parser.parse_args()) diff --git a/tools/package-release.sh b/tools/package-release.sh index 8398823..a72dcd3 100755 --- a/tools/package-release.sh +++ b/tools/package-release.sh @@ -19,7 +19,12 @@ else fi binary=${CARGO_TARGET_DIR:-target}/release/framely version=$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -1) -build_id="$version-$(find "$binary" target/native media/bin ui/dist sdk templates/plugin examples/showcase packaging tools docs assets/branding assets/search README.md README.zh-CN.md LICENSE -type f ! -path '*/__pycache__/*' -print0 | sort -z | xargs -0 sha256sum | sha256sum | cut -c1-12)" +q2f_java=${Q2F_JAVA_HOME:-target/quest-conversion-jre} +q2f_cli=${Q2F_CLI_JAR:-target/overportcli-1.2.3-all.jar} +q2f_libraries=${Q2F_LIBRARIES_ZIP:-target/overport-libraries-3.4.3-23204ea.zip} +q2f_license=${Q2F_LICENSE:-target/overport-source/LICENSE} +q2f_source=${Q2F_SOURCE_ARCHIVE:-target/q2f-source.tar.gz} +build_id="$version-$(find "$binary" target/native media/bin ui/dist sdk templates/plugin examples/showcase packaging tools docs assets/branding assets/search README.md README.zh-CN.md LICENSE "$q2f_java" "$q2f_cli" "$q2f_libraries" "$q2f_license" "$q2f_source" -type f ! -path '*/__pycache__/*' -print0 | sort -z | xargs -0 sha256sum | sha256sum | cut -c1-12)" stage="$base/release/framely-$build_id" [[ ! -e $stage ]] || { echo 'Release already exists.' >&2; exit 1; } mkdir -p "$stage"/{bin,lib/cef,lib/openvr,lib/media,share/ui,share/licenses,tools} @@ -74,10 +79,15 @@ cp -a assets/branding "$stage/tools/source/assets/" cp -a examples/showcase "$stage/tools/source/examples/" cp -a ui/src ui/locales ui/index.html ui/package.json "$stage/tools/source/ui/" cp tools/build-ui.mjs tools/build-branding.mjs tools/plugin-dev.mjs "$stage/tools/source/tools/" -cp tools/extract-release.py tools/bootstrap.py tools/cef-runtime.py tools/export-diagnostics.py "$stage/tools/" +cp tools/extract-release.py tools/bootstrap.py tools/cef-runtime.py tools/q2f-runtime.py tools/export-diagnostics.py "$stage/tools/" find "$stage/tools/source" -type d -name __pycache__ -prune -exec rm -rf -- {} + cp -a docs "$stage/share/" printf '%s\n' "$build_id" > "$stage/VERSION" chmod 755 "$stage"/*.sh "$stage/bin/"* "$stage/lib/cef/framely-vr" +python3 tools/package-q2f.py --stage "$stage" --output release \ + --java-home "$q2f_java" --cli-jar "$q2f_cli" \ + --libraries-zip "$q2f_libraries" --license "$q2f_license" \ + --source-archive "$q2f_source" \ + --repo "${RELEASE_REPO:-SteamFramelyHomebrew/framely}" --tag "${RELEASE_TAG:-v$version}" python3 tools/package-runtime.py "$stage" "$cef" "${RELEASE_REPO:-SteamFramelyHomebrew/framely}" "${RELEASE_TAG:-v$version}" echo "Package: release/framely-$build_id-linux-arm64.tar.gz" diff --git a/tools/q2f-runtime.py b/tools/q2f-runtime.py new file mode 100644 index 0000000..7e4be61 --- /dev/null +++ b/tools/q2f-runtime.py @@ -0,0 +1,135 @@ +#!/usr/bin/env python3 +"""Download and verify the exact optional Quest conversion runtime.""" +import hashlib +import json +import os +import pathlib +import re +import shutil +import sys +import tarfile +import tempfile +import urllib.parse +import urllib.request + +MAX_ARCHIVE = 512 * 1024 * 1024 +MAX_EXPANDED = 1024 * 1024 * 1024 + + +def digest(path): + with path.open('rb') as source: + return hashlib.file_digest(source, 'sha256').hexdigest() + + +def validate(root, identity): + if root.is_symlink() or not root.is_dir() or (root / 'VERSION').read_text().strip() != identity: + raise ValueError('Invalid q2f runtime cache') + lines = (root / 'SHA256SUMS').read_text().splitlines() + expected = set() + for line in lines: + match = re.fullmatch(r'([a-f0-9]{64}) ([^\\]+)', line) + if not match: + raise ValueError('Invalid q2f checksum list') + relative = pathlib.PurePosixPath(match[2]) + if relative.is_absolute() or '..' in relative.parts or not relative.parts: + raise ValueError('Invalid q2f payload path') + file = root.joinpath(*relative.parts) + if file.is_symlink() or not file.is_file() or digest(file) != match[1]: + raise ValueError('q2f payload checksum mismatch: ' + match[2]) + expected.add(relative.as_posix()) + actual = {p.relative_to(root).as_posix() for p in root.rglob('*') if p.is_file()} + if actual != expected | {'VERSION', 'SHA256SUMS'}: + raise ValueError('Unexpected q2f payload files') + for required in ('java/bin/java', 'overportcli.jar', 'overport-installed.json', 'OVR_PORT_LICENSE'): + if required not in expected: + raise ValueError('Incomplete q2f runtime: ' + required) + + +class HTTPSRedirect(urllib.request.HTTPRedirectHandler): + def redirect_request(self, req, fp, code, msg, headers, newurl): + if urllib.parse.urlparse(newurl).scheme != 'https': + raise ValueError('HTTPS redirect downgrade rejected') + return super().redirect_request(req, fp, code, msg, headers, newurl) + + +def download(requirement, destination): + url = requirement['url'] + if urllib.parse.urlparse(url).scheme != 'https': + raise ValueError('q2f URL must use HTTPS') + request = urllib.request.Request(url, headers={'User-Agent': 'Framely-q2f'}) + with urllib.request.build_opener(HTTPSRedirect()).open(request, timeout=90) as response, destination.open('xb') as output: + total = 0 + while block := response.read(256 * 1024): + total += len(block) + if total > requirement['size'] or total > MAX_ARCHIVE: + raise ValueError('q2f download exceeds declared size') + output.write(block) + if total != requirement['size'] or digest(destination) != requirement['sha256']: + raise ValueError('q2f archive checksum mismatch') + + +def extract(archive, target, identity): + prefix = f'framely-q2f-{identity}' + target.mkdir(mode=0o700) + with tarfile.open(archive, 'r:gz') as source: + members = source.getmembers() + if len(members) > 10000 or sum(m.size for m in members) > MAX_EXPANDED: + raise ValueError('q2f archive is too large') + seen = set() + for member in members: + path = pathlib.PurePosixPath(member.name) + if (path.is_absolute() or '..' in path.parts or '\\' in member.name + or not path.parts or path.parts[0] != prefix + or member.name in seen or not (member.isfile() or member.isdir())): + raise ValueError('Unsafe q2f archive member') + seen.add(member.name) + for member in members: + parts = pathlib.PurePosixPath(member.name).parts[1:] + if not parts: + continue + path = target.joinpath(*parts) + if member.isdir(): + path.mkdir(parents=True, exist_ok=True) + else: + path.parent.mkdir(parents=True, exist_ok=True) + with source.extractfile(member) as data, path.open('xb') as output: + shutil.copyfileobj(data, output) + path.chmod(0o755 if member.mode & 0o111 else 0o644) + validate(target, identity) + + +def prepare(descriptor, storage): + spec = json.loads(pathlib.Path(descriptor).read_text()) + identity = spec['id'] + archive_name = f'framely-q2f-{identity}-linux-arm64.tar.gz' + if (spec['schemaVersion'] != 1 or not re.fullmatch(r'[a-zA-Z0-9.+-]+', identity) + or '..' in identity or spec['archive'] != archive_name + or not 0 < spec['size'] <= MAX_ARCHIVE + or not re.fullmatch(r'[a-f0-9]{64}', spec['sha256'])): + raise ValueError('Invalid q2f requirement') + parent = pathlib.Path(storage) / 'q2f' / 'runtimes' + if parent.is_symlink(): + raise ValueError('q2f storage must not be a symlink') + parent.mkdir(parents=True, exist_ok=True) + cached = parent / identity + if cached.exists() or cached.is_symlink(): + validate(cached, identity) + return cached + with tempfile.TemporaryDirectory(prefix='.download-', dir=parent) as scratch: + scratch = pathlib.Path(scratch) + archive = scratch / archive_name + download(spec, archive) + payload = scratch / 'payload' + extract(archive, payload, identity) + payload.rename(cached) + return cached + + +if __name__ == '__main__': + try: + if len(sys.argv) != 3: + raise ValueError('Usage: q2f-runtime.py DESCRIPTOR APK_STORAGE') + print(prepare(*sys.argv[1:]), flush=True) + except (KeyError, ValueError, OSError, tarfile.TarError) as error: + print('Framely q2f: ' + str(error), file=sys.stderr) + sys.exit(1) diff --git a/ui/locales/en-US.json b/ui/locales/en-US.json index 9d0710e..babc99a 100644 --- a/ui/locales/en-US.json +++ b/ui/locales/en-US.json @@ -1285,6 +1285,18 @@ "分别设置应用在 Steam 中显示的名称。留空恢复应用原名；更新 APK 后保留。Steam 不可用时将在就绪后同步。": "Set each app’s name in Steam. Leave blank to use its original name. Names survive APK updates and sync when Steam is ready.", "Invalid Steam display name": "Invalid Steam display name", "Steam display name must be at most 128 characters without control characters": "Steam display name must be at most 128 characters without control characters", - "Steam name update was not acknowledged": "Steam name update was not acknowledged" + "Steam name update was not acknowledged": "Steam name update was not acknowledged", + "Quest 兼容转换": "Quest compatibility conversion", + "此 APK 已完成兼容转换并重新签名。": "This APK has been converted and re-signed.", + "可选：使用独立 q2f 工具包转换并重新签名 APK。首次使用会下载工具包，转换结果仍需在 Frame 上验证。": "Optional: convert and re-sign this APK with the separate q2f package. The package downloads on first use; the result still needs testing on Frame.", + "已转换": "Converted", + "转换此 APK": "Convert this APK", + "准备 Quest 转换工具": "Preparing Quest converter", + "正在转换 APK": "Converting APK", + "校验转换结果": "Verifying converted APK", + "转换完成，请确认安装。": "Conversion complete. Review the APK before installing.", + "正在检查转换工具": "Checking converter", + "工具包已缓存": "Converter cached", + "首次使用需下载 {0} 工具包": "First use downloads the {0} converter" } } diff --git a/ui/locales/zh-CN.json b/ui/locales/zh-CN.json index 24f5747..b7e4ee1 100644 --- a/ui/locales/zh-CN.json +++ b/ui/locales/zh-CN.json @@ -1285,6 +1285,18 @@ "分别设置应用在 Steam 中显示的名称。留空恢复应用原名；更新 APK 后保留。Steam 不可用时将在就绪后同步。": "分别设置应用在 Steam 中显示的名称。留空恢复应用原名；更新 APK 后保留。Steam 不可用时将在就绪后同步。", "Invalid Steam display name": "无效的 Steam 显示名称", "Steam display name must be at most 128 characters without control characters": "Steam 显示名称最多 128 个字符，不能包含控制字符", - "Steam name update was not acknowledged": "Steam 未确认名称更新" + "Steam name update was not acknowledged": "Steam 未确认名称更新", + "Quest 兼容转换": "Quest 兼容转换", + "此 APK 已完成兼容转换并重新签名。": "此 APK 已完成兼容转换并重新签名。", + "可选：使用独立 q2f 工具包转换并重新签名 APK。首次使用会下载工具包，转换结果仍需在 Frame 上验证。": "可选：使用独立 q2f 工具包转换并重新签名 APK。首次使用会下载工具包，转换结果仍需在 Frame 上验证。", + "已转换": "已转换", + "转换此 APK": "转换此 APK", + "准备 Quest 转换工具": "准备 Quest 转换工具", + "正在转换 APK": "正在转换 APK", + "校验转换结果": "校验转换结果", + "转换完成，请确认安装。": "转换完成，请确认安装。", + "正在检查转换工具": "正在检查转换工具", + "工具包已缓存": "工具包已缓存", + "首次使用需下载 {0} 工具包": "首次使用需下载 {0} 工具包" } } diff --git a/ui/src/apk-install-review.tsx b/ui/src/apk-install-review.tsx index dae8d6a..1d3f337 100644 --- a/ui/src/apk-install-review.tsx +++ b/ui/src/apk-install-review.tsx @@ -5,13 +5,14 @@ import {Select} from './localized-select'; import {t} from './i18n'; type Metadata={name:string;package:string;version:string;versionCode:number;minSdk:number;icon?:string;activities:string[];abis:string[]}; -type Props={metadata:Metadata;size:string;previous?:Metadata;updating:boolean;containerName:string;running:boolean;displayMode:string;busy:boolean;error:string;onDisplayMode:(value:string)=>void;onStop:()=>void;onCancel:()=>void;onConfirm:()=>void}; -export function ApkInstallReview({metadata,size,previous,updating,containerName,running,displayMode,busy,error,onDisplayMode,onStop,onCancel,onConfirm}:Props){ +type Props={metadata:Metadata;size:string;previous?:Metadata;updating:boolean;containerName:string;running:boolean;displayMode:string;busy:boolean;error:string;converted:boolean;q2f?:{cached:boolean;size:string};q2fError?:string;onDisplayMode:(value:string)=>void;onStop:()=>void;onCancel:()=>void;onConvert:()=>void;onConfirm:()=>void}; +export function ApkInstallReview({metadata,size,previous,updating,containerName,running,displayMode,busy,error,converted,q2f,q2fError,onDisplayMode,onStop,onCancel,onConvert,onConfirm}:Props){ const mismatch=!!previous&&previous.package!==metadata.package; return

{t(updating?'确认更新 APK':'确认安装 APK')}

{t(updating?'更新应用并保留现有存档和设置。':'核对应用信息，选择合适的显示方式。')}

{metadata.name}

{metadata.package}

{t('版本')} {previous&&`${previous.version} → `}{metadata.version||t('未声明')} · {size}

+
{t('Quest 兼容转换')}{t(converted?'此 APK 已完成兼容转换并重新签名。':'可选：使用独立 q2f 工具包转换并重新签名 APK。首次使用会下载工具包，转换结果仍需在 Frame 上验证。')}{!converted&&{q2fError?q2fError:!q2f?t('正在检查转换工具'):q2f.cached?t('工具包已缓存'):t('首次使用需下载 {0} 工具包',{0:q2f.size})}}
{converted?{t('已转换')}:}
{t('显示方式')}{t(displayMode==='vr'?'隐藏二维窗口，应用本身需要支持 VR。':'通过二维窗口显示并操作应用。')}
void perform('settings',{app:details.id,orientation})} options={[{value:'auto',label:t('自动选择')},{value:'landscape',label:t('横屏')},{value:'portrait',label:t('竖屏')}]}/>