接入Jenkins OSS发布凭据

通过受保护凭据注入阿里云AccessKey

让Windows x64发布流水线完成安装包和latest.json上传

apps/ai-game-creator-shell/scripts/release-upload.mjs

@@ -14,10 +14,22 @@ const { generateUpdateManifest, prepareReleaseVersion, runTauriBuild } =
 
 function runOssutil(args) {
   const binary = process.env.OSSUTIL_BIN?.trim() || 'ossutil';
-  const result = spawnSync(binary, [...args, '--endpoint', endpoint], {
-    stdio: 'inherit',
-    shell: false,
-  });
+  const accessKeyId = process.env.AGC_OSS_ACCESS_KEY_ID?.trim();
+  const accessKeySecret = process.env.AGC_OSS_ACCESS_KEY_SECRET;
+  if (Boolean(accessKeyId) !== Boolean(accessKeySecret)) {
+    throw new Error('OSS AccessKey ID 和 Secret 必须同时提供');
+  }
+  const credentialArgs = accessKeyId
+    ? ['--access-key-id', accessKeyId, '--access-key-secret', accessKeySecret]
+    : [];
+  const result = spawnSync(
+    binary,
+    [...args, '--endpoint', endpoint, ...credentialArgs],
+    {
+      stdio: 'inherit',
+      shell: false,
+    },
+  );
   if (result.error) {
     throw new Error(`无法执行 ${binary}，请先安装并配置 ossutil`);
   }