@dshtrading/client-ui-updater 0.1.2

package/lib/updater-service.js

@@ -0,0 +1,497 @@
+import { fetchLatestRelease, manifestAssetName, parseUpdateManifest, payloadAssetName } from "./github.js";
+import { isNewerVersion } from "./semver.js";
+import path from "node:path";
+import fs from "node:fs";
+import { createHash } from "node:crypto";
+import { unzipSync } from "fflate";
+//#region src/updater-service.ts
+/**
+* Updater state machine: check → apply → done, plus the wire snapshot the
+* /dshtrading/api/updater routes and the settings page both consume.
+*
+* 增量更新设计（Agent Note: 2026-09-04-auto-update-plugin）：
+* - 检测：GitHub /releases/latest（自动排除 draft/prerelease），tag vX.Y.Z 与
+*   @dshtrading/* 家族版本（changesets fixed 组，本包自身版本即家族版本）比较。
+* - 增量通道：发布资产两件——trust anchor 清单 updates-manifest-v<tag>.json
+*   （记录 payload zip 的 sha256/bytes）+ payload zip（packages/@dshtrading/<pkg>/
+*   展开目录，非 tarball——宿主侧零 tar 解析，只走 fflate unzip）。
+* - 应用：下载 zip → sha256 校验 → 解压进 profile 内 staging → 逐包版本比对 →
+*   backup rename → swap → 版本回读验证；Windows 文件占用按 EPERM/EBUSY 重试；
+*   任一包失败整体回滚（备份移回）。新代码在宿主重启后生效（桌面壳重启宿主）。
+* - 边界：只覆盖 @dshtrading/* 插件家族（profile 内 node_modules）；Electron/Node/
+*   dsh 宿主闭包属于完整安装包通道，reseed 语义天然覆盖（新版本安装包 stamp 变更
+*   → 下次启动 reseed 回捆绑 payload）。
+*/
+/** Business error with a stable code (routes map it onto HTTP payloads). */
+var UpdaterError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+	}
+};
+const AUTO_CHECK_MS_DEFAULT = 216e5;
+const INITIAL_DELAY_MS_DEFAULT = 15e3;
+const CHECK_TTL_MS_DEFAULT = 18e5;
+/** Windows rename retries for files/dirs briefly held open (AV scans etc.). */
+const SWAP_RETRY_ATTEMPTS = 4;
+const SWAP_RETRY_DELAY_MS = 300;
+const applyIdle = () => ({
+	phase: "idle",
+	step: void 0,
+	startedAt: void 0,
+	finishedAt: void 0,
+	targetVersion: void 0,
+	updated: [],
+	skippedCount: 0,
+	error: void 0
+});
+function sha256Hex(data) {
+	return createHash("sha256").update(data).digest("hex");
+}
+function sleep(ms) {
+	return new Promise((resolvePromise) => {
+		setTimeout(resolvePromise, ms);
+	});
+}
+/** rename with bounded retries (Windows briefly holds loaded plugin files). */
+async function renameWithRetry(from, to, log) {
+	let lastError;
+	for (let attempt = 1; attempt <= SWAP_RETRY_ATTEMPTS; attempt += 1) try {
+		fs.renameSync(from, to);
+		return;
+	} catch (error) {
+		lastError = error;
+		const code = error.code;
+		if (!(code === "EPERM" || code === "EBUSY" || code === "ENOTEMPTY" || code === "EACCES") || attempt === SWAP_RETRY_ATTEMPTS) break;
+		log(`rename ${path.basename(from)} -> ${path.basename(to)} retry ${attempt}/3 (${code})`);
+		await sleep(SWAP_RETRY_DELAY_MS * attempt);
+	}
+	throw lastError;
+}
+function rmRf(target) {
+	fs.rmSync(target, {
+		recursive: true,
+		force: true
+	});
+}
+/** Zip entry path safety: no absolute paths, no .. segments (zip-slip guard). */
+function safeZipEntryName(name) {
+	const normalized = name.replaceAll("\\", "/");
+	if (normalized.startsWith("/") || normalized.includes("../") || normalized === ".." || normalized.includes("/..")) return;
+	return normalized;
+}
+var UpdaterService = class {
+	options;
+	env;
+	now;
+	autoCheckMs;
+	initialDelayMs;
+	checkTtlMs;
+	log;
+	checkState;
+	applyState = applyIdle();
+	progress = void 0;
+	timers = [];
+	checkInFlight = false;
+	applyInFlight = false;
+	disposed = false;
+	constructor(options) {
+		this.options = options;
+		this.env = options.env;
+		this.now = options.now ?? (() => Date.now());
+		this.autoCheckMs = options.autoCheckMs ?? AUTO_CHECK_MS_DEFAULT;
+		this.initialDelayMs = options.initialDelayMs ?? INITIAL_DELAY_MS_DEFAULT;
+		this.checkTtlMs = options.checkTtlMs ?? CHECK_TTL_MS_DEFAULT;
+		this.log = options.logger ?? ((line) => {
+			console.log("[dshtrading-updater]", line);
+		});
+		this.checkState = this.loadPersistedCheck();
+	}
+	/** Load persisted check state + schedule auto checks. Idempotent. */
+	start() {
+		if (this.disposed || this.timers.length > 0) return;
+		if (this.env.supported) {
+			const initialTimer = setTimeout(() => {
+				this.check(false).catch(() => void 0);
+			}, this.initialDelayMs);
+			const intervalTimer = setInterval(() => {
+				this.check(false).catch(() => void 0);
+			}, this.autoCheckMs);
+			initialTimer.unref?.();
+			intervalTimer.unref?.();
+			this.timers.push(initialTimer, intervalTimer);
+		}
+	}
+	dispose() {
+		this.disposed = true;
+		for (const timer of this.timers.splice(0)) {
+			clearTimeout(timer);
+			clearInterval(timer);
+		}
+	}
+	/**
+	* Check GitHub for a newer stable release. Non-forced calls honor the TTL
+	* and double as the periodic tick; force=true bypasses the cache (UI button).
+	*/
+	async check(force) {
+		if (!force && this.checkFresh()) return this.snapshot();
+		if (this.checkInFlight) return this.snapshot();
+		this.checkInFlight = true;
+		try {
+			const release = await fetchLatestRelease({
+				repo: this.options.repo,
+				...this.options.github?.apiBase === void 0 ? {} : { apiBase: this.options.github.apiBase },
+				...this.options.github?.fetchImpl === void 0 ? {} : { fetchImpl: this.options.github.fetchImpl },
+				...this.options.github?.timeoutMs === void 0 ? {} : { timeoutMs: this.options.github.timeoutMs }
+			});
+			const latest = release === void 0 ? void 0 : this.latestOf(release);
+			const available = latest?.version !== void 0 && isNewerVersion(latest.version, this.env.familyVersion);
+			this.checkState = {
+				at: new Date(this.now()).toISOString(),
+				status: "ok",
+				error: void 0,
+				available,
+				latest
+			};
+			this.persistCheck();
+		} catch (error) {
+			this.checkState = {
+				at: new Date(this.now()).toISOString(),
+				status: "error",
+				error: error instanceof Error ? error.message : String(error),
+				available: this.checkState.available,
+				latest: this.checkState.latest
+			};
+			this.persistCheck();
+			this.log("check failed: " + (error instanceof Error ? error.message : String(error)));
+		} finally {
+			this.checkInFlight = false;
+		}
+		return this.snapshot();
+	}
+	checkFresh() {
+		if (this.checkState.status !== "ok" || this.checkState.at === void 0) return false;
+		const at = Date.parse(this.checkState.at);
+		if (!Number.isFinite(at)) return false;
+		return this.now() - at < this.checkTtlMs;
+	}
+	latestOf(release) {
+		const hasManifest = release.assets.some((asset) => asset.name === manifestAssetName(release.tagName));
+		const hasPayload = release.assets.some((asset) => asset.name === payloadAssetName(release.tagName));
+		return {
+			version: release.version ?? "",
+			tagName: release.tagName,
+			name: release.name,
+			notes: release.notes,
+			url: release.url,
+			publishedAt: release.publishedAt,
+			payloadAvailable: hasManifest && hasPayload
+		};
+	}
+	/**
+	* Kick off the incremental apply pipeline. Returns immediately with the
+	* running snapshot; the UI polls state. Single-flight: a second call while
+	* running throws UPDATER_BUSY.
+	*/
+	async apply() {
+		if (this.applyInFlight || this.applyState.phase === "running") throw new UpdaterError("UPDATER_BUSY", "an update is already in progress");
+		if (!this.env.supported || this.env.profileRoot === void 0 || this.env.packagesRoot === void 0) throw new UpdaterError("UPDATER_UNSUPPORTED", "incremental update requires a desktop-seeded profile");
+		if (this.checkState.status !== "ok" || this.checkState.available !== true || this.checkState.latest === void 0) throw new UpdaterError("UPDATER_NO_UPDATE", "no newer release is available");
+		if (this.checkState.latest.payloadAvailable !== true) throw new UpdaterError("UPDATER_PAYLOAD_UNAVAILABLE", "this release does not carry the incremental payload");
+		this.applyInFlight = true;
+		const target = this.checkState.latest;
+		this.applyState = {
+			phase: "running",
+			step: "prepare",
+			startedAt: new Date(this.now()).toISOString(),
+			finishedAt: void 0,
+			targetVersion: target.version,
+			updated: [],
+			skippedCount: 0,
+			error: void 0
+		};
+		this.progress = void 0;
+		this.runApply(target).catch((error) => {
+			const message = error instanceof UpdaterError ? `${error.code}: ${error.message}` : error instanceof Error ? error.message : String(error);
+			this.log("apply failed: " + message);
+			this.applyState = {
+				...this.applyState,
+				phase: "error",
+				step: void 0,
+				finishedAt: new Date(this.now()).toISOString(),
+				error: message
+			};
+		}).finally(() => {
+			this.applyInFlight = false;
+			this.progress = void 0;
+		});
+		return this.snapshot();
+	}
+	/** The full pipeline; only called via apply() (single-flight owner). */
+	async runApply(target) {
+		const profileRoot = this.env.profileRoot;
+		const packagesRoot = this.env.packagesRoot;
+		if (profileRoot === void 0 || packagesRoot === void 0) throw new UpdaterError("UPDATER_UNSUPPORTED", "incremental update requires a desktop-seeded profile");
+		this.applyState = {
+			...this.applyState,
+			step: "prepare"
+		};
+		const release = await fetchLatestRelease({
+			repo: this.options.repo,
+			...this.options.github?.apiBase === void 0 ? {} : { apiBase: this.options.github.apiBase },
+			...this.options.github?.fetchImpl === void 0 ? {} : { fetchImpl: this.options.github.fetchImpl },
+			...this.options.github?.timeoutMs === void 0 ? {} : { timeoutMs: this.options.github.timeoutMs }
+		});
+		if (release === void 0 || release.tagName !== target.tagName) throw new UpdaterError("UPDATER_STALE_TARGET", "the target release changed; check again");
+		const manifestAsset = release.assets.find((asset) => asset.name === manifestAssetName(release.tagName));
+		if (manifestAsset === void 0) throw new UpdaterError("UPDATER_PAYLOAD_UNAVAILABLE", "update manifest asset missing");
+		const fetchImpl = this.options.github?.fetchImpl ?? fetch;
+		const manifest = parseUpdateManifest(await this.downloadText(fetchImpl, manifestAsset.url));
+		if (manifest.version !== target.version || manifest.tag !== target.tagName) throw new UpdaterError("UPDATER_MANIFEST_MISMATCH", "manifest does not match the target release");
+		const payloadAsset = release.assets.find((asset) => asset.name === manifest.payload.file);
+		if (payloadAsset === void 0) throw new UpdaterError("UPDATER_PAYLOAD_UNAVAILABLE", "payload zip asset missing");
+		this.applyState = {
+			...this.applyState,
+			step: "download"
+		};
+		const zipBytes = await this.downloadPayload(fetchImpl, payloadAsset, manifest);
+		this.log(`payload downloaded: ${zipBytes.length} bytes, sha256 ok`);
+		this.applyState = {
+			...this.applyState,
+			step: "verify"
+		};
+		this.progress = {
+			step: "verify",
+			bytes: void 0,
+			total: void 0,
+			percent: void 0
+		};
+		const staged = this.stagePackages(zipBytes, manifest, profileRoot);
+		this.applyState = {
+			...this.applyState,
+			step: "install"
+		};
+		const updated = [];
+		let skippedCount = 0;
+		const swapped = [];
+		try {
+			for (const pkg of staged) {
+				const bareName = pkg.name.startsWith("@dshtrading/") ? pkg.name.slice(12) : pkg.name;
+				const targetDir = path.join(packagesRoot, bareName);
+				const installedVersion = this.installedVersionOf(targetDir);
+				if (installedVersion === pkg.version) {
+					skippedCount += 1;
+					continue;
+				}
+				const backupDir = targetDir + ".updater-bak";
+				rmRf(backupDir);
+				if (fs.existsSync(targetDir)) await renameWithRetry(targetDir, backupDir, this.log);
+				try {
+					await renameWithRetry(pkg.dir, targetDir, this.log);
+				} catch (error) {
+					if (fs.existsSync(backupDir) && !fs.existsSync(targetDir)) await renameWithRetry(backupDir, targetDir, this.log).catch(() => void 0);
+					throw error;
+				}
+				swapped.push({
+					backup: backupDir,
+					target: targetDir
+				});
+				if (this.installedVersionOf(targetDir) !== pkg.version) throw new UpdaterError("UPDATER_VERIFY_FAILED", `post-swap version mismatch for ${pkg.name}`);
+				updated.push(pkg.name);
+				this.log(`updated ${pkg.name}: ${installedVersion} -> ${pkg.version}`);
+			}
+		} catch (error) {
+			for (const swap of swapped.reverse()) {
+				rmRf(swap.target);
+				await renameWithRetry(swap.backup, swap.target, this.log).catch(() => void 0);
+			}
+			if (error instanceof UpdaterError) throw error;
+			throw new UpdaterError("UPDATER_INSTALL_FAILED", error instanceof Error ? error.message : String(error));
+		} finally {
+			rmRf(path.join(profileRoot, ".dshtrading-updater"));
+		}
+		for (const swap of swapped) rmRf(swap.backup);
+		this.applyState = {
+			phase: "done",
+			step: void 0,
+			startedAt: this.applyState.startedAt,
+			finishedAt: new Date(this.now()).toISOString(),
+			targetVersion: target.version,
+			updated,
+			skippedCount,
+			error: void 0
+		};
+		this.log(`update applied: ${updated.length} package(s) -> ${target.version} (restart to activate)`);
+	}
+	installedVersionOf(packageDir) {
+		try {
+			const manifest = JSON.parse(fs.readFileSync(path.join(packageDir, "package.json"), "utf8"));
+			return typeof manifest.version === "string" ? manifest.version : "unknown";
+		} catch {
+			return "missing";
+		}
+	}
+	/** Unzip into a staging dir under the profile and cross-check the manifest. */
+	stagePackages(zipBytes, manifest, profileRoot) {
+		let entries;
+		try {
+			entries = unzipSync(zipBytes);
+		} catch (error) {
+			throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", "payload zip unreadable: " + (error instanceof Error ? error.message : String(error)));
+		}
+		const byPackage = /* @__PURE__ */ new Map();
+		for (const [rawName, data] of Object.entries(entries)) {
+			if (rawName.endsWith("/")) continue;
+			const name = safeZipEntryName(rawName);
+			if (name === void 0) throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `unsafe zip entry: ${rawName}`);
+			const segments = name.split("/");
+			if (segments[0] !== "packages" || segments[1] !== "@dshtrading" || segments.length < 4) throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `unexpected zip entry: ${name}`);
+			const pkgName = `@dshtrading/${segments[2]}`;
+			const relativePath = segments.slice(3).join("/");
+			let files = byPackage.get(pkgName);
+			if (files === void 0) {
+				files = /* @__PURE__ */ new Map();
+				byPackage.set(pkgName, files);
+			}
+			files.set(relativePath, data);
+		}
+		for (const entry of manifest.packages) if (!byPackage.has(entry.name)) throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `manifest package missing from payload: ${entry.name}`);
+		const stagingRoot = path.join(profileRoot, ".dshtrading-updater", `staging-${process.pid}-${this.now()}`);
+		const staged = [];
+		for (const [pkgName, files] of byPackage) {
+			const manifestEntry = manifest.packages.find((item) => item.name === pkgName);
+			if (manifestEntry === void 0) throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `payload package missing from manifest: ${pkgName}`);
+			const packageJson = files.get("package.json");
+			if (packageJson === void 0) throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `payload package has no package.json: ${pkgName}`);
+			let declaredVersion;
+			try {
+				declaredVersion = JSON.parse(new TextDecoder().decode(packageJson)).version;
+			} catch {
+				throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `payload package.json unreadable: ${pkgName}`);
+			}
+			if (declaredVersion !== manifestEntry.version) throw new UpdaterError("UPDATER_PAYLOAD_CORRUPT", `payload version mismatch for ${pkgName}`);
+			const dir = path.join(stagingRoot, ...pkgName.split("/"));
+			for (const [relativePath, data] of files) {
+				const file = path.join(dir, ...relativePath.split("/"));
+				fs.mkdirSync(path.dirname(file), { recursive: true });
+				fs.writeFileSync(file, data);
+			}
+			staged.push({
+				name: pkgName,
+				version: manifestEntry.version,
+				dir
+			});
+		}
+		staged.sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+		return staged;
+	}
+	/** Stream the payload zip with progress; verify sha256 + byte length. */
+	async downloadPayload(fetchImpl, asset, manifest) {
+		this.progress = {
+			step: "download",
+			bytes: 0,
+			total: asset.size > 0 ? asset.size : void 0,
+			percent: 0
+		};
+		const chunks = await this.downloadChunks(fetchImpl, asset.url, (bytes, total) => {
+			const knownTotal = total ?? (asset.size > 0 ? asset.size : void 0);
+			this.progress = {
+				step: "download",
+				bytes,
+				total: knownTotal,
+				percent: knownTotal !== void 0 && knownTotal > 0 ? Math.min(99, Math.round(bytes / knownTotal * 100)) : void 0
+			};
+		});
+		const payload = Buffer.concat(chunks);
+		if (manifest.payload.bytes > 0 && payload.length !== manifest.payload.bytes) throw new UpdaterError("UPDATER_SIZE_MISMATCH", `payload size ${payload.length} != manifest ${manifest.payload.bytes}`);
+		if (sha256Hex(payload) !== manifest.payload.sha256.toLowerCase()) throw new UpdaterError("UPDATER_HASH_MISMATCH", "payload sha256 mismatch");
+		return payload;
+	}
+	async downloadText(fetchImpl, url) {
+		const response = await fetchImpl(url, { headers: {
+			accept: "application/octet-stream",
+			"user-agent": "dsh-trading-updater"
+		} });
+		if (!response.ok) throw new UpdaterError("UPDATER_DOWNLOAD_FAILED", `${url} -> ${response.status}`);
+		return response.text();
+	}
+	async downloadChunks(fetchImpl, url, onProgress) {
+		const response = await fetchImpl(url, { headers: {
+			accept: "application/octet-stream",
+			"user-agent": "dsh-trading-updater"
+		} });
+		if (!response.ok || response.body === null) throw new UpdaterError("UPDATER_DOWNLOAD_FAILED", `${url} -> ${response.status}`);
+		const headerTotal = Number(response.headers.get("content-length") ?? "");
+		const total = Number.isFinite(headerTotal) && headerTotal > 0 ? headerTotal : void 0;
+		const reader = response.body.getReader();
+		const chunks = [];
+		let received = 0;
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (value !== void 0) {
+				chunks.push(Buffer.from(value));
+				received += value.byteLength;
+				onProgress(received, total);
+			}
+		}
+		return chunks;
+	}
+	snapshot() {
+		return {
+			environment: {
+				familyVersion: this.env.familyVersion,
+				appVersion: this.env.desktopMarker?.appVersion,
+				profileRoot: this.env.profileRoot,
+				supported: this.env.supported
+			},
+			check: this.checkState,
+			apply: this.applyState,
+			progress: this.applyState.phase === "running" ? this.progress : void 0
+		};
+	}
+	stateFile() {
+		const file = this.options.statePath;
+		return {
+			dir: path.dirname(file),
+			file
+		};
+	}
+	loadPersistedCheck() {
+		try {
+			const lastCheck = JSON.parse(fs.readFileSync(this.stateFile().file, "utf8")).lastCheck;
+			if (lastCheck !== void 0 && typeof lastCheck === "object" && "status" in lastCheck) return {
+				at: lastCheck.at,
+				status: lastCheck.status,
+				error: lastCheck.error,
+				available: lastCheck.available === true,
+				latest: lastCheck.latest
+			};
+		} catch {}
+		return {
+			at: void 0,
+			status: "idle",
+			error: void 0,
+			available: false,
+			latest: void 0
+		};
+	}
+	persistCheck() {
+		const { dir, file } = this.stateFile();
+		try {
+			fs.mkdirSync(dir, { recursive: true });
+			const state = {
+				version: 1,
+				lastCheck: this.checkState
+			};
+			const tmp = file + ".tmp";
+			fs.writeFileSync(tmp, JSON.stringify(state, null, 2) + "\n");
+			fs.renameSync(tmp, file);
+		} catch (error) {
+			this.log("state persist failed: " + (error instanceof Error ? error.message : String(error)));
+		}
+	}
+};
+//#endregion
+export { UpdaterError, UpdaterService };

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@dshtrading/client-ui-updater",
+  "description": "dsh-trading auto-update plugin: GitHub Releases version check with release notes, incremental update of the @dshtrading/* plugin family inside a desktop-seeded profile (vendor payload zip, per-package swap), and the '软件更新' first-level settings section. Browser half registers the settings.section; node half registers the /dshtrading/api/updater routes and the update engine.",
+  "version": "0.1.2",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "./lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./locales": {
+      "types": "./lib/client/locales.d.ts",
+      "default": "./lib/client/locales.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib"
+  ],
+  "license": "PolyForm-Noncommercial-1.0.0",
+  "dependencies": {
+    "fflate": "^0.8.2"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": ">=4.0.0",
+    "@deepseek-ai/dsh-client-locale": ">=0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.2-rc.1",
+    "react": "^18.2.0",
+    "@types/react": "~18.3.1"
+  },
+  "dsh": {
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-slots"
+      ],
+      "platform": "web"
+    }
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-rc.1",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-rc.1",
+    "@types/node": "^24.0.0",
+    "@types/react": "~18.3.1",
+    "lightningcss": "^1.0.0",
+    "react": "^18.2.0",
+    "tsdown": "^0.22.0",
+    "typescript": "^5.9.0",
+    "vitest": "^3.0.0"
+  },
+  "scripts": {
+    "bundle": "tsdown && tsdown --config tsdown.client.config.mjs",
+    "build": "tsdown && tsdown --config tsdown.client.config.mjs",
+    "test": "vitest run"
+  }
+}