fix(windows): restore Windows 7 startup compatibility

apps/desktop/src/lib/__tests__/windowsInstallerTemplate.spec.ts

@@ -4,6 +4,17 @@ import { describe, expect, it } from "vitest";
 import { shouldAbortWindowsWebView2RuntimeFallback } from "@/lib/app/windowsWebView2RuntimePolicy";
 
 const template = readFileSync(resolve(process.cwd(), "src-tauri/windows/nsis/installer.nsi"), "utf8");
+const win7Config = JSON.parse(readFileSync(resolve(process.cwd(), "src-tauri/tauri.webview2-win7-fixed.conf.json"), "utf8"));
+const win7RuntimeScript = readFileSync(resolve(process.cwd(), ".github/scripts/prepare-webview2-win7-runtime.ps1"), "utf8");
+const win7PeAuditScript = readFileSync(resolve(process.cwd(), ".github/scripts/assert-win7-pe-compat.ps1"), "utf8");
+const win7RuntimeProbeScript = readFileSync(resolve(process.cwd(), ".github/scripts/assert-webview2-win7-runtime.ps1"), "utf8");
+const win7InstallerAuditScript = readFileSync(resolve(process.cwd(), ".github/scripts/assert-win7-installer-content.ps1"), "utf8");
+const appCargoToml = readFileSync(resolve(process.cwd(), "src-tauri/Cargo.toml"), "utf8");
+const workspaceCargoToml = readFileSync(resolve(process.cwd(), "Cargo.toml"), "utf8");
+const appBuildScript = readFileSync(resolve(process.cwd(), "src-tauri/build.rs"), "utf8");
+const wryWebView2Source = readFileSync(resolve(process.cwd(), "vendor/wry/src/webview2/mod.rs"), "utf8");
+const ciWorkflow = readFileSync(resolve(process.cwd(), ".github/workflows/ci.yml"), "utf8");
+const releaseWorkflow = readFileSync(resolve(process.cwd(), ".github/workflows/release.yml"), "utf8");
 
 describe("Windows offline installer template", () => {
   it.each([
@@ -63,3 +74,72 @@ describe("Windows offline installer template", () => {
     expect(template).toContain('ReadRegStr ${RESULT} HKCU "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\${WEBVIEW2APPGUID}" "pv"');
   });
 });
+
+describe("Windows 7 fixed WebView2 runtime bundle", () => {
+  it("bundles a fixed runtime instead of invoking a system Runtime installer", () => {
+    expect(win7Config.bundle.windows.webviewInstallMode).toEqual({
+      type: "fixedRuntime",
+      path: "webview2-fixed-runtime",
+    });
+    expect(win7RuntimeScript).toContain("Microsoft.WebView2.FixedVersionRuntime.$runtimeVersion.x64");
+    expect(win7RuntimeScript).toContain("msedgewebview2.exe");
+    expect(win7RuntimeScript).not.toContain("microsoftedgestandaloneinstaller");
+    expect(win7RuntimeScript).not.toContain("go.microsoft.com/fwlink");
+  });
+
+  it("pins the archived Microsoft runtime before extracting it", () => {
+    expect(win7RuntimeScript).toContain('$runtimeVersion = "109.0.1518.78"');
+    expect(win7RuntimeScript).toContain('$runtimeSha256 = "7622281cf83de1a35e3a471f432f7a897d65f0a7d3975df08512b7b253dd45c7"');
+    expect(win7RuntimeScript).toContain("Get-FileHash -LiteralPath $archivePath -Algorithm SHA256");
+    expect(win7RuntimeScript).toContain("Get-AuthenticodeSignature -LiteralPath $archivePath");
+    expect(win7RuntimeScript).toContain('$signature.SignerCertificate.Subject -notmatch "Microsoft Corporation"');
+    expect(win7RuntimeScript).toContain('& $expand $archivePath "-F:*" $extractDirectory');
+  });
+
+  it("rejects executable imports that cannot load on Windows 7", () => {
+    expect(win7PeAuditScript).toContain('"combase.dll"');
+    expect(win7PeAuditScript).toContain('"api-ms-win-core-winrt-"');
+    expect(win7PeAuditScript).toContain('"CoIncrementMTAUsage"');
+    expect(win7PeAuditScript).toContain('"GetSystemTimePreciseAsFileTime"');
+    expect(win7PeAuditScript).toContain('"VCRUNTIME140.dll"');
+    expect(win7PeAuditScript).toContain('"MSVCP140.dll"');
+    expect(win7PeAuditScript).toContain('"ucrtbase.dll"');
+    expect(win7PeAuditScript).toContain('"api-ms-win-crt-"');
+    expect(win7PeAuditScript).toContain("dumpbin.exe");
+  });
+
+  it("probes the fixed runtime through the Win7-compatible loader", () => {
+    expect(win7RuntimeProbeScript).toContain("GetAvailableCoreWebView2BrowserVersionString");
+    expect(win7RuntimeProbeScript).toContain('$ExpectedVersion = "109.0.1518.78"');
+    expect(win7RuntimeProbeScript).toContain("msedgewebview2.exe");
+    expect(ciWorkflow).toContain("./.github/scripts/assert-webview2-win7-runtime.ps1");
+    expect(releaseWorkflow).toContain("./.github/scripts/assert-webview2-win7-runtime.ps1");
+  });
+
+  it("passes the configured fixed-runtime folder to WebView2 discovery and creation", () => {
+    expect(workspaceCargoToml).toContain('wry = { path = "vendor/wry" }');
+    expect(wryWebView2Source).toContain('std::env::var_os("WEBVIEW2_BROWSER_EXECUTABLE_FOLDER")');
+    expect(wryWebView2Source).toContain(`CreateCoreWebView2EnvironmentWithOptions(
+        browser_executable_folder_ptr,`);
+    expect(wryWebView2Source).toContain("GetAvailableCoreWebView2BrowserVersionString(browser_executable_folder_ptr, &mut versioninfo)");
+  });
+
+  it("audits the files produced by the silent Win7 installer", () => {
+    expect(win7InstallerAuditScript).toContain('"webview2-fixed-runtime\\msedgewebview2.exe"');
+    expect(win7InstallerAuditScript).toContain('"dbx.exe"');
+    expect(ciWorkflow).toContain("./.github/scripts/assert-win7-installer-content.ps1");
+    expect(releaseWorkflow).toContain("./.github/scripts/assert-win7-installer-content.ps1");
+  });
+
+  it("builds the Windows 7 executable with the production custom protocol", () => {
+    expect(appCargoToml).toContain('custom-protocol = ["tauri/custom-protocol"]');
+    expect(appBuildScript).toContain("CARGO_FEATURE_CUSTOM_PROTOCOL");
+    expect(appBuildScript).toContain("CARGO_CFG_TARGET_VENDOR");
+    expect(ciWorkflow).toContain("--release --features custom-protocol --target x86_64-win7-windows-msvc");
+    expect(releaseWorkflow).toContain("--release --features custom-protocol --target x86_64-win7-windows-msvc");
+    expect(ciWorkflow).toContain("TAURI_CONFIG = Get-Content src-tauri/tauri.webview2-win7-fixed.conf.json -Raw");
+    expect(releaseWorkflow).toContain("TAURI_CONFIG = Get-Content src-tauri/tauri.webview2-win7-fixed.conf.json -Raw");
+    expect(ciWorkflow).toContain("target-feature=+crt-static");
+    expect(releaseWorkflow).toContain("target-feature=+crt-static");
+  });
+});