@alipay/agent-payment 1.0.5-dev.3 → 1.0.5

package/README.md

@@ -0,0 +1,13 @@
+# alipay-agent-payment release
+
+This repository contains only the npm publish payload for `@alipay/agent-payment`.
+
+Publish flow:
+
+1. Generate `.publish` from the source repository.
+2. Sync the generated payload into this repository.
+3. Commit and push a version tag like `v1.0.0`.
+4. The `publish.yml` workflow publishes to npm through OIDC trusted publishing.
+
+Before publishing, configure npm Trusted Publishing for this package and point it
+to this repository's `.github/workflows/publish.yml` workflow.

package/bin/install-payguard.js

@@ -0,0 +1,433 @@
+#!/usr/bin/env node
+/**
+ * PayGuard 自动安装脚本
+ * 在第三方 CLI 的 npm install 阶段执行
+ *
+ * 功能：
+ * 1. 检测 PayGuard 是否已安装且运行
+ * 2. 未安装时从 CDN 获取最新版本并下载
+ * 3. 执行用户级静默安装
+ */
+
+const fs = require('fs');
+const path = require('path');
+https = require('https');
+const { execSync } = require('child_process');
+const os = require('os');
+const crypto = require('crypto');
+const zlib = require('zlib');
+
+// 配置
+const CONFIG = {
+  // 版本元数据 API 基地址
+  metaUrlBase: 'https://mdn.alipayobjects.com/apg_afts/uri/file/as',
+  // 用户级安装目录
+  installDir: {
+    linux: process.env.PAYGUARD_INSTALL_DIR || path.join(os.homedir(), '.payguard'),
+    darwin: process.env.PAYGUARD_INSTALL_DIR || path.join(os.homedir(), 'Library/Application Support/com.alipay.agent.payguard/PayGuard.app'),
+    win32: process.env.PAYGUARD_INSTALL_DIR || path.join(os.homedir(), 'AppData/Roaming/PayGuard')
+  },
+  // 系统级安装目录（root/管理员安装）
+  systemInstallDir: {
+    linux: '/opt/PayGuard',
+    darwin: '/Library/Application Support/com.alipay.agent.payguard/PayGuard.app',
+    win32: 'C:\\Program Files\\PayGuard'
+  },
+  // 平台检测映射 (process.platform -> meta 文件名中的平台名)
+  platformMap: {
+    linux: 'linux',
+    darwin: 'macOS',
+    win32: 'win32'
+  },
+  // 架构检测映射 (process.arch -> 统一架构名)
+  archMap: {
+    x64: 'amd64',
+    arm64: 'arm64',
+    ia32: 'x86'
+  },
+  // 架构到文件名格式的映射 (process.arch -> meta 文件名中的架构名)
+  metaArchMap: {
+    x64: 'x86_64',
+    arm64: 'arm64',
+    ia32: 'x86'
+  },
+  // 各平台对应的安装包扩展名
+  fileExtension: {
+    linux: '.run',
+    darwin: '.pkg',
+    win32: '.exe'
+  },
+  // 各平台对应的二进制文件名
+  binaryName: {
+    linux: 'PayGuard',
+    darwin: 'PayGuard',
+    win32: 'PayGuard.exe'
+  },
+  // 各平台二进制文件相对于安装目录的路径（macOS App Bundle 结构特殊）
+  binaryRelPath: {
+    linux: '',
+    darwin: 'Contents/Library/Services/',
+    win32: ''
+  },
+  // 各平台安装命令模板（%s 会被替换为安装包路径）
+  installCommand: {
+    linux: (pkg) => getLinuxInstallCommand(pkg),
+    darwin: (pkg) => `installer -pkg "${pkg}" -target CurrentUserHomeDirectory`,
+    win32: (pkg) => `"${pkg}" /S`  // 预留，未实现
+  }
+};
+
+// 检测 systemctl 是否可用
+function isSystemctlAvailable() {
+  try {
+    // 检查 systemctl 命令是否存在
+    execSync('which systemctl', { stdio: 'pipe', timeout: 5000 });
+    // 检查 systemd 是否真正运行（PID 1）
+    const pid1 = fs.readFileSync('/proc/1/comm', 'utf8').trim();
+    return pid1 === 'systemd';
+  } catch (e) {
+    return false;
+  }
+}
+
+// 获取 Linux 安装命令（根据是否支持 systemctl 动态生成）
+function getLinuxInstallCommand(pkg) {
+  if (isSystemctlAvailable()) {
+    return `bash "${pkg}"`;
+  } else {
+    // 容器环境：使用 supervisor 作为服务管理器
+    return `bash "${pkg}" --service-manager=supervisor`;
+  }
+}
+
+// 日志输出（统一前缀）
+function log(msg) {
+  console.log(`[PayGuard] ${msg}`);
+}
+function logError(msg) {
+  console.error(`[PayGuard] ${msg}`);
+}
+
+// 检测平台
+function getPlatform() {
+  const platform = CONFIG.platformMap[process.platform];
+  if (!platform) {
+    throw new Error(`Unsupported platform: ${process.platform}`);
+  }
+  return platform;
+}
+
+// 检测架构
+function getArch() {
+  return CONFIG.archMap[process.arch] || process.arch;
+}
+
+// 获取安装目录
+function getInstallDir() {
+  return CONFIG.installDir[process.platform];
+}
+
+// 定义系统级安装路径（root/系统管理员安装）
+function getSystemInstallDir() {
+  return CONFIG.systemInstallDir[process.platform];
+}
+
+// 获取平台+架构对应的元数据文件名
+// 格式: PayGuard_${platform}_${arch}_latest_meta.json
+function getMetaFileName() {
+  const platform = getPlatform();
+  // Windows 强制使用 x86_64 架构，不支持其他架构
+  const arch = platform === 'win32' ? 'x86_64' : (CONFIG.metaArchMap[process.arch] || process.arch);
+  const metaPlatform = platform === 'win32' ? 'win' : platform; // Windows 平台在文件名中使用 "win"
+  
+  return `PayGuard_${metaPlatform}_${arch}_latest_meta.json`;
+}
+
+// 获取文件扩展名
+function getFileExtension() {
+  return CONFIG.fileExtension[process.platform];
+}
+
+// 在目录中查找二进制文件（Windows 支持版本子目录，macOS 支持 App Bundle 子路径）
+// 返回找到的文件路径，或 null
+function findBinaryInDir(baseDir, binaryName, platform) {
+  const relPath = CONFIG.binaryRelPath[platform] || '';
+
+  if (platform !== 'win32') {
+    // Linux/macOS: 检查 baseDir/[relPath/]binaryName
+    const binaryPath = path.join(baseDir, relPath, binaryName);
+    return fs.existsSync(binaryPath) ? binaryPath : null;
+  }
+
+  // Windows: 先检查直接路径（baseDir/binaryName），再检查版本子目录（baseDir/0.1.0/binaryName）
+  if (!fs.existsSync(baseDir)) {
+    return null;
+  }
+
+  const directPath = path.join(baseDir, binaryName);
+  if (fs.existsSync(directPath)) {
+    return directPath;
+  }
+
+  // 遍历子目录查找版本号目录（如 0.1.0）
+  try {
+    const entries = fs.readdirSync(baseDir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (entry.isDirectory()) {
+        const versionedPath = path.join(baseDir, entry.name, binaryName);
+        if (fs.existsSync(versionedPath)) {
+          return versionedPath;
+        }
+      }
+    }
+  } catch (e) {
+    // 忽略读取错误
+  }
+
+  return null;
+}
+
+// 检测 PayGuard 是否已安装（检查用户级和系统级）
+function isInstalled() {
+  const binaryName = CONFIG.binaryName[process.platform];
+
+  // 1. 检查用户级安装
+  const userInstallDir = getInstallDir();
+  const userBinaryPath = findBinaryInDir(userInstallDir, binaryName, process.platform);
+
+  if (userBinaryPath) {
+    log('User installation found');
+    return true;
+  }
+
+  // 2. 检查系统级安装（root/管理员安装）
+  const systemInstallDir = getSystemInstallDir();
+  if (systemInstallDir) {
+    const systemBinaryPath = findBinaryInDir(systemInstallDir, binaryName, process.platform);
+
+    if (systemBinaryPath) {
+      log('System installation found (installed by root/admin)');
+      return true;
+    }
+  }
+
+  return false;
+}
+
+// 从 URL 获取 JSON 数据
+function fetchJson(url) {
+  return new Promise((resolve, reject) => {
+    https.get(url, (response) => {
+      if (response.statusCode === 302 || response.statusCode === 301) {
+        fetchJson(response.headers.location)
+          .then(resolve)
+          .catch(reject);
+        return;
+      }
+
+      if (response.statusCode !== 200) {
+        reject(new Error(`Failed to fetch metadata: HTTP ${response.statusCode}`));
+        return;
+      }
+
+      const chunks = [];
+      response.on('data', (chunk) => chunks.push(chunk));
+      response.on('end', () => {
+        try {
+          let buffer = Buffer.concat(chunks);
+          const contentEncoding = response.headers['content-encoding'];
+          if (contentEncoding === 'gzip') {
+            buffer = zlib.gunzipSync(buffer);
+          }
+          resolve(JSON.parse(buffer.toString()));
+        } catch (e) {
+          reject(new Error(`Failed to parse JSON: ${e.message}`));
+        }
+      });
+    }).on('error', reject);
+  });
+}
+
+// 计算文件 MD5
+function calculateMd5(filePath) {
+  return new Promise((resolve, reject) => {
+    const hash = crypto.createHash('md5');
+    const stream = fs.createReadStream(filePath);
+    stream.on('error', reject);
+    stream.on('data', (chunk) => hash.update(chunk));
+    stream.on('end', () => resolve(hash.digest('hex')));
+  });
+}
+
+// 计算文件 SHA256
+function calculateSha256(filePath) {
+  return new Promise((resolve, reject) => {
+    const hash = crypto.createHash('sha256');
+    const stream = fs.createReadStream(filePath);
+    stream.on('error', reject);
+    stream.on('data', (chunk) => hash.update(chunk));
+    stream.on('end', () => resolve(hash.digest('hex')));
+  });
+}
+
+// 统一校验文件哈希值
+// algorithm: 'md5' | 'sha256'
+async function verifyChecksum(filePath, algorithm, expectedHash) {
+  const algo = algorithm.toLowerCase();
+  log(`Verifying ${algo.toUpperCase()} checksum...`);
+
+  const actualHash = algo === 'sha256'
+    ? await calculateSha256(filePath)
+    : await calculateMd5(filePath);
+
+  if (actualHash.toLowerCase() !== expectedHash.toLowerCase()) {
+    throw new Error(`${algo.toUpperCase()} checksum verification failed`);
+  }
+  log(`${algo.toUpperCase()} verification passed`);
+}
+
+// 下载文件（支持可选的校验）
+async function downloadFile(url, dest, metaInfo = null) {
+  return new Promise((resolve, reject) => {
+    const file = fs.createWriteStream(dest);
+
+    https.get(url, (response) => {
+      if (response.statusCode === 302 || response.statusCode === 301) {
+        // 跟随重定向
+        downloadFile(response.headers.location, dest, metaInfo)
+          .then(resolve)
+          .catch(reject);
+        return;
+      }
+
+      if (response.statusCode !== 200) {
+        reject(new Error(`Download failed: HTTP ${response.statusCode}`));
+        return;
+      }
+
+      const totalSize = parseInt(response.headers['content-length'], 10) || metaInfo?.file_size || 0;
+      let downloaded = 0;
+
+      response.on('data', (chunk) => {
+        downloaded += chunk.length;
+        if (totalSize > 0) {
+          const percent = Math.round((downloaded / totalSize) * 100);
+          process.stdout.write(`\r[PayGuard] Downloading: ${percent}%`);
+        }
+      });
+
+      response.pipe(file);
+
+      file.on('finish', async () => {
+        file.close();
+        log('Download complete');
+
+        // 验证文件校验和
+        if (metaInfo) {
+          try {
+            const stats = fs.statSync(dest);
+            if (metaInfo.file_size && stats.size !== metaInfo.file_size) {
+              reject(new Error(`File size mismatch: expected ${metaInfo.file_size}, got ${stats.size}`));
+              return;
+            }
+
+            if (metaInfo.sha256) {
+              await verifyChecksum(dest, 'sha256', metaInfo.sha256);
+            } else if (metaInfo.md5) {
+              await verifyChecksum(dest, 'md5', metaInfo.md5);
+            }
+          } catch (err) {
+            reject(new Error(`Verification failed: ${err.message}`));
+            return;
+          }
+        }
+
+        resolve(dest);
+      });
+    }).on('error', (err) => {
+      fs.unlinkSync(dest);
+      reject(err);
+    });
+  });
+}
+
+// 统一安装函数
+async function installPackage(platform, packagePath) {
+  const commandTemplate = CONFIG.installCommand[platform];
+  if (!commandTemplate) {
+    throw new Error(`Installation not implemented for platform: ${platform}`);
+  }
+
+  log(`Installing for ${platform}...`);
+
+  try {
+    const command = commandTemplate(packagePath);
+    execSync(command, { stdio: 'inherit' });
+    log('Installation complete');
+  } finally {
+    fs.unlinkSync(packagePath);
+  }
+}
+
+// 主安装流程
+async function main() {
+  try {
+    const platform = getPlatform();
+
+    log(`Platform: ${platform}`);
+
+    // 1. 检查是否已安装
+    if (isInstalled()) {
+      log('Skipping installation (already exists)');
+      process.exit(0);
+    }
+
+    log('Not installed, fetching latest version info...');
+
+    // 2. 获取最新版本元数据
+    const metaFile = getMetaFileName();
+    const metaUrl = `${CONFIG.metaUrlBase}/${metaFile}`;
+    // metaUrl = "https://mdn.alipayobjects.com/agentpaypuard/uri/file/as/PayGuard_linux_x86_64_latest_meta.json";
+    log(`Fetching metadata: ${metaUrl}`);
+
+    let metaInfo;
+    try {
+      metaInfo = await fetchJson(metaUrl);
+      log(`Latest version: ${metaInfo.version}`);
+      log(`Package: ${metaInfo.file_name}`);
+    } catch (err) {
+      logError(`Failed to fetch metadata: ${err.message}`);
+      throw err;
+    }
+
+    // 3. 下载到临时目录
+    const ext = getFileExtension();
+    const tempPath = path.join(os.tmpdir(), `PayGuard_latest${ext}`);
+    const downloadUrl = metaInfo.download_url || metaInfo.alias_url;
+
+    log(`Downloading from: ${downloadUrl}`);
+    await downloadFile(downloadUrl, tempPath, metaInfo);
+
+    // 4. 执行平台特定安装
+    await installPackage(process.platform, tempPath);
+
+    log('Installation successful!');
+    log(`Version: ${metaInfo.version}`);
+    log(`Install location: ${getInstallDir()}`);
+
+  } catch (error) {
+    logError(`Installation failed: ${error.message}`);
+    // 不阻塞 npm install，只打印警告
+    logError('You can manually install from: https://docs.payguard.com/install');
+    process.exit(0); // 返回 0 不阻塞 npm install
+  }
+}
+
+// 支持跳过安装的环境变量,测试1
+if (process.env.SKIP_PAYGUARD_INSTALL === '1' || process.env.SKIP_PAYGUARD_INSTALL === 'true') {
+  log('Skipping installation (SKIP_PAYGUARD_INSTALL is set)');
+  process.exit(0);
+}
+
+// 运行
+main();