别再一个个点更新了：让 Agent 一次管好 Windows 11、Ubuntu 26.04 和 macOS 26 的常用软件升级

powershell -ExecutionPolicy Bypass -File .\Upgrade-Windows11-Apps.ps1

powershell -ExecutionPolicy Bypass -File .\Upgrade-Windows11-Apps.ps1 -Execute

param(
    [switch]$Execute,
    [switch]$IncludeUnknown
)

$ErrorActionPreference = "Stop"
$LogRoot = Join-Path $env:USERPROFILE "upgrade-logs"
$Stamp = Get-Date -Format "yyyyMMdd-HHmmss"
$LogFile = Join-Path $LogRoot "windows11-app-upgrade-$Stamp.log"
New-Item -ItemType Directory -Force -Path $LogRoot | Out-Null
Start-Transcript -Path $LogFile -Force | Out-Null

try {
    Write-Host "Mode: $(if ($Execute) { 'EXECUTE' } else { 'DRY-RUN' })"
    Write-Host "Log: $LogFile"

    if (-not (Get-Command winget -ErrorAction SilentlyContinue)) {
        throw "winget is not available. Install or repair App Installer from Microsoft Store first."
    }

    Write-Host "`n[System]"
    Get-ComputerInfo | Select-Object WindowsProductName, WindowsVersion, OsHardwareAbstractionLayer | Format-List

    Write-Host "`n[WinGet sources]"
    winget source list

    Write-Host "`n[Upgradeable packages]"
    winget upgrade

    $ExportPath = Join-Path $LogRoot "winget-export-$Stamp.json"
    Write-Host "`n[Inventory export] $ExportPath"
    winget export --output $ExportPath --accept-source-agreements | Out-Host

    if ($Execute) {
        $args = @("upgrade", "--all", "--silent", "--disable-interactivity", "--accept-package-agreements", "--accept-source-agreements")
        if ($IncludeUnknown) { $args += "--include-unknown" }
        Write-Host "`n[Upgrade] winget $($args -join ' ')"
        & winget @args
        $code = $LASTEXITCODE
        Write-Host "winget exit code: $code"
    } else {
        Write-Host "`nDry-run only. Re-run with -Execute to upgrade. Add -IncludeUnknown only after reviewing unknown-version packages."
    }

    Write-Host "`n[After]"
    winget upgrade
    Write-Host "`nIf Store apps still show updates, open Microsoft Store > Library > Get updates."
}
finally {
    Stop-Transcript | Out-Null
}

bash upgrade-ubuntu2604-apps.sh

EXECUTE=1 bash upgrade-ubuntu2604-apps.sh

EXECUTE=1 FULL_UPGRADE=1 bash upgrade-ubuntu2604-apps.sh

#!/usr/bin/env bash
set -euo pipefail

EXECUTE="${EXECUTE:-0}"
FULL_UPGRADE="${FULL_UPGRADE:-0}"
LOG_DIR="${LOG_DIR:-$HOME/upgrade-logs}"
STAMP="$(date +%Y%m%d-%H%M%S)"
LOG_FILE="$LOG_DIR/ubuntu2604-app-upgrade-$STAMP.log"
mkdir -p "$LOG_DIR"
exec > >(tee -a "$LOG_FILE") 2>&1

run() {
  if [ "$EXECUTE" = "1" ]; then
    echo "+ $*"
    "$@"
  else
    printf '[dry-run]'; printf ' %q' "$@"; printf '\n'
  fi
}

as_root() {
  if [ "$(id -u)" -eq 0 ]; then "$@"; else sudo "$@"; fi
}

echo "Mode: $([ "$EXECUTE" = "1" ] && echo EXECUTE || echo DRY-RUN)"
echo "Log: $LOG_FILE"
echo

echo "[System]"
lsb_release -a 2>/dev/null || cat /etc/os-release
uname -srmo
df -h / /var 2>/dev/null || df -h /

echo
echo "[APT locks]"
if fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1; then
  echo "APT lock is busy. Wait for other package tasks to finish."
  exit 1
fi

echo
echo "[APT update]"
run as_root apt-get update

echo
echo "[APT upgrade simulation]"
as_root apt-get -s upgrade || true
if [ "$FULL_UPGRADE" = "1" ]; then
  echo
  echo "[APT full-upgrade simulation]"
  as_root apt-get -s full-upgrade || true
fi

if [ "$EXECUTE" = "1" ]; then
  as_root apt-get upgrade -y
  if [ "$FULL_UPGRADE" = "1" ]; then
    as_root apt-get full-upgrade -y
  fi
  as_root apt-get autoremove --purge -y
  as_root apt-get autoclean -y
else
  echo "Dry-run only. Set EXECUTE=1 to upgrade. Set FULL_UPGRADE=1 only after reviewing removals."
fi

if command -v snap >/dev/null 2>&1; then
  echo
  echo "[Snap]"
  snap refresh --list || true
  run as_root snap refresh
fi

if command -v flatpak >/dev/null 2>&1; then
  echo
  echo "[Flatpak]"
  flatpak remote-ls --updates 2>/dev/null || true
  run flatpak update -y
fi

echo
echo "[Restart check]"
if [ -f /var/run/reboot-required ]; then
  echo "Reboot is required. Packages:"
  cat /var/run/reboot-required.pkgs 2>/dev/null || true
else
  echo "No reboot-required marker found."
fi

echo
echo "Done. Review log: $LOG_FILE"

zsh upgrade-macos26-apps.zsh

EXECUTE=1 zsh upgrade-macos26-apps.zsh

#!/bin/zsh
set -euo pipefail

EXECUTE="${EXECUTE:-0}"
LOG_DIR="${LOG_DIR:-$HOME/upgrade-logs}"
STAMP="$(date +%Y%m%d-%H%M%S)"
LOG_FILE="$LOG_DIR/macos26-app-upgrade-$STAMP.log"
mkdir -p "$LOG_DIR"
exec > >(tee -a "$LOG_FILE") 2>&1

run() {
  if [[ "$EXECUTE" == "1" ]]; then
    echo "+ $*"
    "$@"
  else
    printf '[dry-run]'; printf ' %q' "$@"; printf '\n'
  fi
}

echo "Mode: $([[ "$EXECUTE" == "1" ]] && echo EXECUTE || echo DRY-RUN)"
echo "Log: $LOG_FILE"
echo

echo "[System]"
sw_vers
uname -srmo

echo
echo "[Apple Software Update]"
softwareupdate --list || true
if [[ "$EXECUTE" == "1" ]]; then
  echo "Installing all listed Apple software updates. Save work before running this script."
  sudo softwareupdate --install --all
else
  echo "Dry-run only. Set EXECUTE=1 to install listed Apple updates. This script does not request a major OS installer."
fi

if command -v brew >/dev/null 2>&1; then
  echo
  echo "[Homebrew]"
  brew --version
  brew update
  brew outdated || true
  if [[ "$EXECUTE" == "1" ]]; then
    brew upgrade
    brew cleanup
  else
    echo "[dry-run] brew upgrade"
    brew cleanup --dry-run || true
  fi
else
  echo
  echo "[Homebrew] not installed; skip. This script will not install it automatically."
fi

echo

echo "[App Store]"
echo "For Mac App Store apps, open App Store > Updates, or keep automatic app updates enabled. This script does not install third-party App Store CLI tools."

echo

echo "[Restart check]"
softwareupdate --history | tail -20 || true
echo "If Software Update reports a restart is required, reboot manually after saving work."
echo "Done. Review log: $LOG_FILE"

请在当前机器上辅助升级常用软件。先识别当前系统是 Windows 11、Ubuntu 26.04 还是 macOS 26，再选择对应脚本或等价命令执行。要求：
1. 先盘点系统版本、磁盘空间、当前可升级软件清单和包管理器来源。
2. 默认先 dry-run 或仅列清单，不要直接升级。
3. 不要执行大版本操作系统升级，不要下载未知第三方安装器，不要安装新的包管理器。
4. 不要输出真实内网地址、完整计算机名、私有域名、Token、密钥或账号信息。
5. 执行前说明将要升级的入口：WinGet / apt / snap / flatpak / Software Update / Homebrew 等。
6. 执行升级后给出升级前后对比、失败项、日志路径、是否需要重启，以及可以回滚或暂缓的建议。