fix: harden proxied client installation

distribution/bootstrap-windows.template.ps1

@@ -6,11 +6,12 @@ if (Get-Variable -Name PSNativeCommandUseErrorActionPreference -ErrorAction Sile
 [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
 
 $dingSourceBases = @({{NODE_SOURCE_BASES_POWERSHELL}})
-$dingInstallerUrl = "{{INSTALLER_URL}}"
+$dingInstallerUrls = @({{INSTALLER_URLS_POWERSHELL}})
 $dingInstallerSha256 = "{{INSTALLER_SHA256}}"
-$dingPublicKeyUrl = "{{PUBLIC_KEY_URL}}"
+$dingPublicKeyUrls = @({{PUBLIC_KEY_URLS_POWERSHELL}})
 $dingPublicKeySha256 = "{{PUBLIC_KEY_SHA256}}"
 $dingManifestUrl = "{{MANIFEST_URL}}"
+$dingManifestMirrorUrls = @({{MANIFEST_MIRROR_URLS_POWERSHELL}})
 
 function Write-DingProgress([string] $dingMessage) {
   [Console]::Error.WriteLine("[dingtalk-approval] $dingMessage")
@@ -113,10 +114,22 @@ New-Item -ItemType Directory -Path $dingInstallTemp -Force | Out-Null
 try {
   $dingInstaller = Join-Path $dingInstallTemp "installer.mjs"
   $dingPublicKey = Join-Path $dingInstallTemp "release-signing-public.pem"
-  Save-DingDownload @($dingInstallerUrl) $dingInstaller $dingInstallerSha256
-  Save-DingDownload @($dingPublicKeyUrl) $dingPublicKey $dingPublicKeySha256
+  Save-DingDownload $dingInstallerUrls $dingInstaller $dingInstallerSha256
+  Save-DingDownload $dingPublicKeyUrls $dingPublicKey $dingPublicKeySha256
   Write-DingProgress "4/4 执行安装器；最终 JSON 输出到 stdout，阶段进度输出到 stderr"
-  $dingInstallOutput = & $dingNodePath $dingInstaller install --manifest-url $dingManifestUrl --public-key $dingPublicKey --json
+  $dingInstallerArgs = @($dingInstaller, "install", "--manifest-url", $dingManifestUrl)
+  foreach ($dingManifestMirrorUrl in $dingManifestMirrorUrls) {
+    $dingInstallerArgs += @("--manifest-mirror-url", $dingManifestMirrorUrl)
+  }
+  $dingInstallerArgs += @("--public-key", $dingPublicKey, "--json")
+  $dingNodeProxyArgs = @()
+  $dingProxyConfigured = $env:HTTPS_PROXY -or $env:HTTP_PROXY -or $env:ALL_PROXY
+  $dingProxyAlreadyEnabled = ($env:NODE_OPTIONS -match '(^|\s)--use-env-proxy($|\s)') -or ($env:NODE_USE_ENV_PROXY -match '^(1|true)$')
+  if ($dingProxyConfigured -and -not $dingProxyAlreadyEnabled) {
+    & $dingNodePath -e 'process.exit(process.allowedNodeEnvironmentFlags.has("--use-env-proxy") ? 0 : 1)'
+    if ($LASTEXITCODE -eq 0) { $dingNodeProxyArgs = @("--use-env-proxy") }
+  }
+  $dingInstallOutput = & $dingNodePath @dingNodeProxyArgs @dingInstallerArgs
   $dingInstallExit = $LASTEXITCODE
   if ($dingInstallExit -ne 0) { throw "钉钉审批安装器执行失败：$dingInstallOutput" }
   $dingResult = $dingInstallOutput | ConvertFrom-Json