Add scripts for updating executable metadata and signing

- Created `debug-rcedit.mjs` for testing rcedit functionality.
- Implemented `set-icon.mjs` to update executable metadata and optionally set an icon from assets.
- Added `sign-exe.ps1` PowerShell script to sign the executable with a digital certificate.

Author: Kinin-Code-Offical

assets/README.txt

@@ -0,0 +1,2 @@
+Please place your application icon here and name it "logo.ico".
+It will be used for the executable and the installer.

assets/logo.ico

@@ -5,6 +5,7 @@
 #define MyAppPublisher "Kinin Code"
 #define MyAppURL "https://github.com/Kinin-Code-Offical/cloudsqlctl"
 #define MyAppExeName "cloudsqlctl.exe"
+#define MyAppIcon "..\assets\logo.ico"
 
 [Setup]
 AppId={{8A4B2C1D-E3F4-5678-9012-3456789ABCDE}
@@ -15,6 +16,9 @@ AppPublisherURL={#MyAppURL}
 AppSupportURL={#MyAppURL}
 AppUpdatesURL={#MyAppURL}
 DefaultDirName={autopf}\{#MyAppName}
+#ifexist MyAppIcon
+SetupIconFile={#MyAppIcon}
+#endif
 DisableProgramGroupPage=yes
 PrivilegesRequired=admin
 OutputDir=..\dist

assets/logo.png

@@ -56,6 +56,7 @@
     "jest": "30.2.0",
     "postject": "1.0.0-alpha.6",
     "prettier": "^3.2.5",
+    "rcedit": "5.0.2",
     "ts-jest": "^29.1.2",
     "ts-node": "10.9.2",
     "tsup": "^8.0.2",

installer/cloudsqlctl.iss

@@ -40,4 +40,12 @@ npx postject dist/cloudsqlctl-base.exe NODE_SEA_BLOB dist/sea-prep.blob --sentin
 Write-Host "Finalizing..."
 Move-Item -Path "dist/cloudsqlctl-base.exe" -Destination "bin/cloudsqlctl.exe" -Force
 
+# 7. Set Icon (if available)
+Write-Host "Setting icon..."
+node tools/set-icon.mjs
+
+# 8. Sign Executable (Optional)
+Write-Host "Attempting to sign executable..."
+./tools/sign-exe.ps1
+
 Write-Host "Build complete: bin/cloudsqlctl.exe"

package-lock.json

@@ -0,0 +1,4 @@
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+const rcedit = require('rcedit');
+console.log(rcedit);

package.json

@@ -0,0 +1,61 @@
+import path from 'path';
+import fs from 'fs';
+import { fileURLToPath } from 'url';
+import { rcedit } from 'rcedit';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// Read package.json
+const packageJsonPath = path.resolve(__dirname, '../package.json');
+const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
+const { version } = packageJson;
+
+const exePath = path.resolve(__dirname, '../bin/cloudsqlctl.exe');
+const iconPath = path.resolve(__dirname, '../assets/logo.ico');
+
+async function main() {
+  // Icon is optional, but metadata is mandatory
+  const hasIcon = fs.existsSync(iconPath);
+  if (!hasIcon) {
+    console.log(
+      'No icon found at assets/logo.ico. Skipping icon update, but will update metadata.',
+    );
+  }
+
+  if (!fs.existsSync(exePath)) {
+    console.error(`Executable not found at ${exePath}`);
+    process.exit(1);
+  }
+
+  console.log(`Updating executable metadata (Version: ${version})...`);
+
+  const options = {
+    'version-string': {
+      CompanyName: 'Kinin Code',
+      FileDescription: 'CloudSQLCTL - Google Cloud SQL Proxy Manager',
+      FileVersion: version,
+      InternalName: 'cloudsqlctl',
+      LegalCopyright: 'Copyright (c) 2025 Kinin Code. All rights reserved.',
+      OriginalFilename: 'cloudsqlctl.exe',
+      ProductName: 'CloudSQLCTL',
+      ProductVersion: version,
+    },
+    'file-version': version,
+    'product-version': version,
+  };
+
+  if (hasIcon) {
+    options.icon = iconPath;
+  }
+
+  try {
+    await rcedit(exePath, options);
+    console.log('Executable metadata updated successfully.');
+  } catch (error) {
+    console.error('Error updating executable resources:', error);
+    process.exit(1);
+  }
+}
+
+main();

tools/build-sea.ps1

@@ -0,0 +1,30 @@
+param(
+    [string]$ExePath = "bin\cloudsqlctl.exe",
+    [string]$CertPath = "$env:CLOUDSQLCTL_SIGN_CERT",
+    [SecureString]$CertPassword = "$env:CLOUDSQLCTL_SIGN_PWD"
+)
+
+$ErrorActionPreference = "Stop"
+
+if (-not (Test-Path $ExePath)) {
+    Write-Warning "Executable not found at $ExePath. Skipping signing."
+    exit 0
+}
+
+if (-not $CertPath -or -not (Test-Path $CertPath)) {
+    Write-Warning "Signing certificate not found (env:CLOUDSQLCTL_SIGN_CERT). Skipping digital signature."
+    Write-Host "To enable signing, set CLOUDSQLCTL_SIGN_CERT to the path of your .pfx file."
+    exit 0
+}
+
+Write-Host "Signing $ExePath with certificate $CertPath..."
+
+try {
+    $cert = Get-PfxCertificate -FilePath $CertPath
+    Set-AuthenticodeSignature -FilePath $ExePath -Certificate $cert -TimestampServer "http://timestamp.digicert.com"
+    Write-Host "Successfully signed $ExePath"
+}
+catch {
+    Write-Error "Failed to sign executable: $_"
+    exit 1
+}