fix(cli): unblock downloaded binaries to prevent Access Denied error

fengmk2 · fengmk2 · commit 60a834719f87 · 2026-04-03T21:36:50.000+08:00
Windows SmartScreen / Defender blocks execution of downloaded .exe files that carry a Zone.Identifier (Mark of the Web) alternate data stream. This causes both "Access denied" on vp.exe itself and "Failed to download Node.js runtime: Access is denied. (os error 5)" when vp.exe tries to perform file operations while MOTW-restricted. Strip the marker with Unblock-File after copying binaries to BinDir. Closes #901 Closes #1019 Closes #1226
diff --git a/packages/cli/install.ps1 b/packages/cli/install.ps1
@@ -350,6 +350,10 @@ function Main {
         }
     }
 
+    # Remove Zone.Identifier (Mark of the Web) from downloaded binaries so
+    # Windows SmartScreen / Defender won't block execution.
+    Get-ChildItem -Path $BinDir -Filter "*.exe" | Unblock-File
+
     # Generate wrapper package.json that declares vite-plus as a dependency.
     # pnpm will install vite-plus and all transitive deps via `vp install`.
     # The packageManager field pins pnpm to a known-good version.

Original file line number	Diff line number	Diff line change
`@@ -350,6 +350,10 @@ function Main {`
`350`	`350`	`}`
`351`	`351`	`}`
`352`	`352`
	`353`	`+ # Remove Zone.Identifier (Mark of the Web) from downloaded binaries so`
	`354`	`+ # Windows SmartScreen / Defender won't block execution.`
	`355`	`+ Get-ChildItem -Path $BinDir -Filter "*.exe" \| Unblock-File`
	`356`	`+`
`353`	`357`	`# Generate wrapper package.json that declares vite-plus as a dependency.`
`354`	`358`	# pnpm will install vite-plus and all transitive deps via `vp install`.
`355`	`359`	`# The packageManager field pins pnpm to a known-good version.`