@justin06lee/subaru 0.1.0

package/dist/electron.js

@@ -0,0 +1,428 @@
+import {
+  allowedUrl,
+  fetchLatestRelease,
+  fileStorage,
+  findChecksumAsset,
+  isNewer,
+  parseChecksums,
+  pickAsset
+} from "./chunk-CPOOJ2JD.js";
+import {
+  createUpdater
+} from "./chunk-SRQ3JWJK.js";
+import {
+  pathWithTools,
+  sourceAdapter
+} from "./chunk-MI26ZEPP.js";
+
+// src/electron.ts
+function electronAdapter(autoUpdater, options = {}) {
+  autoUpdater.autoDownload = false;
+  autoUpdater.autoInstallOnAppQuit = true;
+  autoUpdater.allowPrerelease = options.allowPrerelease ?? false;
+  return {
+    kind: "electron",
+    name: "electron",
+    storage: options.storagePath ? fileStorage(options.storagePath) : void 0,
+    async check() {
+      const result = await autoUpdater.checkForUpdates();
+      if (!result || !result.isUpdateAvailable) return null;
+      const info = result.updateInfo;
+      const release = { tag: info.version };
+      const notes = notesToString(info.releaseNotes);
+      if (notes) release.notes = notes;
+      if (info.releaseDate) release.date = info.releaseDate;
+      return release;
+    },
+    async install(_release, { relaunch, onProgress }) {
+      const onProgressEvent = (p) => onProgress(p.percent / 100);
+      autoUpdater.on("download-progress", onProgressEvent);
+      try {
+        await autoUpdater.downloadUpdate();
+      } finally {
+        autoUpdater.off("download-progress", onProgressEvent);
+      }
+      if (relaunch) {
+        autoUpdater.quitAndInstall();
+        return "restarting";
+      }
+      return "ready";
+    },
+    async restart() {
+      autoUpdater.quitAndInstall();
+    }
+  };
+}
+function notesToString(notes) {
+  if (!notes) return void 0;
+  if (typeof notes === "string") return notes;
+  return notes.map((n) => n.note ? `${n.version}
+${n.note}` : n.version).join("\n\n");
+}
+var IPC = {
+  state: "subaru:state",
+  get: "subaru:get",
+  check: "subaru:check",
+  install: "subaru:install",
+  restart: "subaru:restart",
+  skip: "subaru:skip",
+  dismiss: "subaru:dismiss"
+};
+function serveUpdater(updater, ipcMain, targets) {
+  ipcMain.handle(IPC.get, () => updater.getState());
+  ipcMain.on(IPC.check, () => void updater.check());
+  ipcMain.on(IPC.install, () => void updater.install());
+  ipcMain.on(IPC.restart, () => void updater.restart());
+  ipcMain.on(IPC.skip, () => void updater.skip());
+  ipcMain.on(IPC.dismiss, () => updater.dismiss());
+  return updater.subscribe((state) => {
+    for (const wc of targets()) {
+      if (wc.isDestroyed?.()) continue;
+      wc.send(IPC.state, state);
+    }
+  });
+}
+function nodeRunner(options = {}) {
+  return async ({ argv, cwd, detach }) => {
+    const { spawn } = await import("child_process");
+    const base = options.env ?? process.env;
+    const env = { ...base, PATH: pathWithTools(base.PATH, base.HOME) };
+    const [program, ...args] = argv;
+    if (!program) return { code: 1, output: "empty command" };
+    if (detach) {
+      const fs = await import("fs");
+      const os = await import("os");
+      const path = await import("path");
+      const log = options.log ?? path.join(os.tmpdir(), "subaru-update.log");
+      const fd = fs.openSync(log, "a");
+      fs.writeSync(fd, `
+=== ${(/* @__PURE__ */ new Date()).toISOString()} ${argv.join(" ")} (in ${cwd}) ===
+`);
+      try {
+        const child = spawn(program, args, { cwd, env, detached: true, stdio: ["ignore", fd, fd] });
+        child.unref();
+        return await new Promise((resolve) => {
+          child.once("spawn", () => resolve({ code: 0, output: `started; output in ${log}` }));
+          child.once("error", (e) => resolve({ code: 1, output: String(e) }));
+        });
+      } finally {
+        fs.closeSync(fd);
+      }
+    }
+    return new Promise((resolve) => {
+      let output = "";
+      const child = spawn(program, args, { cwd, env, stdio: ["ignore", "pipe", "pipe"] });
+      child.stdout?.on("data", (d) => output += d.toString());
+      child.stderr?.on("data", (d) => output += d.toString());
+      child.once("error", (e) => resolve({ code: 1, output: output + String(e) }));
+      child.once("close", (code) => resolve({ code: code ?? 1, output }));
+    });
+  };
+}
+function bundleAdapter(options) {
+  const platform = options.platform ?? process.platform;
+  const arch = options.arch ?? process.arch;
+  const run = options.run ?? nodeRunner();
+  const env = options.env ?? process.env;
+  const signing = options.signing ?? "unsigned";
+  let held = null;
+  const app = () => {
+    if (!options.app) throw new Error("subaru: bundleAdapter needs app (pass { app } from electron)");
+    return options.app;
+  };
+  const binName = () => options.name ?? app().getName().toLowerCase();
+  const currentVersion = () => options.currentVersion ?? app().getVersion();
+  function target() {
+    if (platform === "darwin") {
+      if (options.bundlePath) return { form: "app", path: options.bundlePath };
+      const exe2 = app().getPath("exe");
+      const i = exe2.indexOf(".app/");
+      if (i < 0) throw new Error(`subaru: ${exe2} is not inside a .app bundle`);
+      return { form: "app", path: exe2.slice(0, i + 4) };
+    }
+    if (env.APPIMAGE) return { form: "appimage", path: env.APPIMAGE };
+    if (options.bundlePath) return { form: "dir", path: options.bundlePath };
+    const exe = app().getPath("exe");
+    return { form: "dir", path: exe.slice(0, exe.lastIndexOf("/")) || "/" };
+  }
+  function pick(rel) {
+    const os = platform === "darwin" ? "darwin" : "linux";
+    const asset = pickBundleAsset(rel.assets, binName(), os, arch, platform === "linux" && env.APPIMAGE ? "appimage" : "archive");
+    if (!asset) throw new Error(`subaru: ${rel.tag} has no ${platform === "linux" && env.APPIMAGE ? "AppImage" : "archive"} for ${binName()} ${os}/${arch}`);
+    return asset;
+  }
+  async function sh(argv, cwd) {
+    const r = await run({ argv, cwd });
+    if (r.code !== 0) throw new Error(`${argv[0]} failed: ${r.output.trim() || `exit ${r.code}`}`);
+    return r.output;
+  }
+  function relaunchInto(t) {
+    if (t.form === "appimage") app().relaunch({ execPath: t.path });
+    else app().relaunch();
+    app().exit(0);
+  }
+  return {
+    kind: "electron",
+    name: `bundle:${options.repo}`,
+    async check(signal) {
+      if (platform !== "darwin" && platform !== "linux") {
+        throw new Error(`subaru: bundle updates are implemented for macOS and Linux (this is ${platform}); use electronAdapter(autoUpdater)`);
+      }
+      const rel = await fetchLatestRelease(options.repo, { fetch: options.fetch, api: options.api }, signal);
+      if (!rel || !isNewer(rel.tag, currentVersion())) {
+        held = null;
+        return null;
+      }
+      held = { release: rel, asset: pick(rel) };
+      const out = { tag: rel.tag, version: rel.version };
+      if (rel.notes) out.notes = rel.notes;
+      if (rel.url) out.url = rel.url;
+      if (rel.date) out.date = rel.date;
+      return out;
+    },
+    async install(release, { relaunch, onProgress }) {
+      const fs = await import("fs");
+      const fsp = await import("fs/promises");
+      const path = await import("path");
+      const os = await import("os");
+      const crypto = await import("crypto");
+      if (!held || held.release.tag !== release.tag) {
+        const fresh = await fetchLatestRelease(options.repo, { fetch: options.fetch, api: options.api });
+        if (!fresh || fresh.tag !== release.tag) throw new Error(`subaru: ${release.tag} is no longer the latest release`);
+        held = { release: fresh, asset: pick(fresh) };
+      }
+      const { release: rel, asset } = held;
+      const t = target();
+      if (t.form === "dir") await refuseSetuidSandbox(t.path, fsp, path);
+      const requirement = platform === "darwin" && signing === "signed" ? await designatedRequirement(t.path, run) : null;
+      if (!options.allowAnyHost && !allowedUrl(asset.url)) throw new Error(`subaru: refusing to download ${asset.url}: not a GitHub URL`);
+      const doFetch = options.fetch ?? ((input, init) => fetch(input, init));
+      const work = await fsp.mkdtemp(path.join(os.tmpdir(), "subaru-"));
+      const parent = path.dirname(t.path);
+      let stage;
+      try {
+        stage = await fsp.mkdtemp(path.join(parent, `.${path.basename(t.path)}.subaru-`));
+      } catch (e) {
+        await fsp.rm(work, { recursive: true, force: true }).catch(() => {
+        });
+        throw new Error(`subaru: cannot write next to ${t.path} (${e.code ?? e}); an install owned by a package manager updates through it`);
+      }
+      try {
+        const file = path.join(work, asset.name);
+        const res = await doFetch(asset.url, { headers: { accept: "application/octet-stream" } });
+        if (!res.ok || !res.body) throw new Error(`subaru: download ${asset.name}: ${res.status}`);
+        if (!options.allowAnyHost && !allowedUrl(res.url || asset.url)) throw new Error(`subaru: redirected off GitHub to ${res.url}`);
+        const total = Number(res.headers.get("content-length")) || asset.size || 0;
+        const hash = crypto.createHash("sha256");
+        const out = fs.createWriteStream(file);
+        let got = 0;
+        onProgress(total ? 0 : null);
+        for await (const chunk of res.body) {
+          hash.update(chunk);
+          got += chunk.length;
+          if (!out.write(chunk)) await new Promise((r) => out.once("drain", r));
+          onProgress(total ? Math.min(got / total, 1) : null);
+        }
+        await new Promise((resolve, reject) => out.end((e) => e ? reject(e) : resolve()));
+        if (!got) throw new Error(`subaru: ${asset.name} is empty`);
+        const sum = hash.digest("hex");
+        const ca = findChecksumAsset(rel.assets, asset.name);
+        if (ca) {
+          if (!options.allowAnyHost && !allowedUrl(ca.url)) throw new Error(`subaru: refusing to download ${ca.url}: not a GitHub URL`);
+          const cres = await doFetch(ca.url);
+          if (!cres.ok) throw new Error(`subaru: download ${ca.name}: ${cres.status}`);
+          const want = parseChecksums(await cres.text(), asset.name);
+          if (!want) throw new Error(`subaru: ${ca.name} does not list ${asset.name}`);
+          if (want !== sum) throw new Error(`subaru: checksum mismatch for ${asset.name}`);
+        } else if (options.requireChecksum) {
+          throw new Error(`subaru: release ${rel.tag} ships no checksum file for ${asset.name}`);
+        }
+        let fresh;
+        if (t.form === "appimage") {
+          fresh = path.join(stage, path.basename(t.path));
+          await fsp.copyFile(file, fresh);
+          await fsp.chmod(fresh, 493);
+        } else {
+          const lower = asset.name.toLowerCase();
+          if (lower.endsWith(".zip")) await sh(platform === "darwin" ? ["ditto", "-x", "-k", file, stage] : ["unzip", "-q", file, "-d", stage], work);
+          else if (lower.endsWith(".tar.gz") || lower.endsWith(".tgz")) await sh(["tar", "-xzf", file, "-C", stage], work);
+          else throw new Error(`subaru: ${asset.name} is neither a .zip nor a .tar.gz`);
+          if (t.form === "app") {
+            const found = await findBundle(stage, fsp, path);
+            if (!found) throw new Error(`subaru: ${asset.name} holds no .app bundle`);
+            fresh = found;
+          } else {
+            const exe = path.basename(app().getPath("exe"));
+            const found = await findDirWith(stage, exe, fsp, path);
+            if (!found) throw new Error(`subaru: ${asset.name} holds no directory with ${exe} in it`);
+            fresh = found;
+          }
+        }
+        if (t.form === "app") {
+          await run({ argv: ["xattr", "-dr", "com.apple.quarantine", fresh], cwd: work });
+          if (requirement) {
+            const v = await run({ argv: ["codesign", "--verify", "--deep", "--strict", `-R=${requirement}`, fresh], cwd: work });
+            if (v.code !== 0) {
+              throw new Error(`subaru: ${asset.name} is not signed by the identity this app is signed with, so its permission grants would not carry over; refusing it (${v.output.trim() || `exit ${v.code}`})`);
+            }
+          }
+        }
+        if (t.form === "appimage") {
+          await fsp.rename(fresh, t.path);
+        } else {
+          const aside = path.join(parent, `.${path.basename(t.path)}.subaru-old`);
+          await fsp.rm(aside, { recursive: true, force: true });
+          await fsp.rename(t.path, aside);
+          try {
+            await fsp.rename(fresh, t.path);
+          } catch (e) {
+            await fsp.rename(aside, t.path);
+            throw e;
+          }
+          await fsp.rm(aside, { recursive: true, force: true }).catch(() => {
+          });
+        }
+        if (t.form === "app" && signing === "unsigned" && options.resetPermissions?.length) {
+          const id = options.bundleId ?? await readBundleId(t.path, run);
+          if (id) {
+            for (const service of options.resetPermissions) await run({ argv: ["tccutil", "reset", service, id], cwd: work });
+          }
+        }
+      } finally {
+        await fsp.rm(work, { recursive: true, force: true }).catch(() => {
+        });
+        await fsp.rm(stage, { recursive: true, force: true }).catch(() => {
+        });
+      }
+      if (relaunch) {
+        relaunchInto(t);
+        return "restarting";
+      }
+      return "ready";
+    },
+    async restart() {
+      relaunchInto(target());
+    }
+  };
+}
+function pickBundleAsset(assets, name, os, arch, form) {
+  if (form === "appimage") {
+    const images = assets.filter((a) => a.name.toLowerCase().endsWith(".appimage"));
+    const byStem = new Map(images.map((a) => [a.name.slice(0, -".appimage".length), a]));
+    const hit = pickAsset(images.map((a) => ({ ...a, name: a.name.slice(0, -".appimage".length) })), name, os, arch);
+    return hit ? byStem.get(hit.name) ?? null : null;
+  }
+  const archives = assets.filter((a) => /\.(zip|tar\.gz|tgz)$/i.test(a.name));
+  return pickAsset(archives, name, os, arch);
+}
+async function findBundle(dir, fsp, path) {
+  const entries = await fsp.readdir(dir, { withFileTypes: true });
+  for (const e of entries) if (e.isDirectory() && e.name.endsWith(".app")) return path.join(dir, e.name);
+  for (const e of entries) {
+    if (!e.isDirectory() || e.name.startsWith("__MACOSX")) continue;
+    const nested = await findBundle(path.join(dir, e.name), fsp, path);
+    if (nested) return nested;
+  }
+  return null;
+}
+async function findDirWith(dir, exe, fsp, path, depth = 0) {
+  const entries = await fsp.readdir(dir, { withFileTypes: true });
+  if (entries.some((e) => e.isFile() && e.name === exe)) return dir;
+  if (depth >= 3) return null;
+  for (const e of entries) {
+    if (!e.isDirectory()) continue;
+    const nested = await findDirWith(path.join(dir, e.name), exe, fsp, path, depth + 1);
+    if (nested) return nested;
+  }
+  return null;
+}
+async function refuseSetuidSandbox(dir, fsp, path) {
+  const st = await fsp.stat(path.join(dir, "chrome-sandbox")).catch(() => null);
+  if (st && st.mode & 2048) {
+    throw new Error(`subaru: ${dir}/chrome-sandbox is setuid root, which an update cannot reproduce; update this install with the package manager that made it`);
+  }
+}
+async function designatedRequirement(bundle, run) {
+  const r = await run({ argv: ["codesign", "--display", "-r-", bundle], cwd: "/" });
+  const line = r.output.split("\n").find((l) => /^(# )?designated => /.test(l));
+  const req = line?.replace(/^(# )?designated => /, "").trim();
+  if (r.code !== 0 || !req) {
+    throw new Error(`subaru: signing is 'signed' but ${bundle} has no code signature (${r.output.trim() || `exit ${r.code}`}); use signing: 'unsigned'`);
+  }
+  if (/^cdhash\b/.test(req)) {
+    throw new Error(`subaru: signing is 'signed' but ${bundle} is only ad-hoc signed, so no new build can keep its grants; sign with a stable identity or use signing: 'unsigned'`);
+  }
+  return req;
+}
+async function readBundleId(bundle, run) {
+  const r = await run({ argv: ["defaults", "read", `${bundle}/Contents/Info`, "CFBundleIdentifier"], cwd: "/" });
+  return r.code === 0 ? r.output.trim() || null : null;
+}
+async function subaru(repo, options = {}) {
+  const electron = options.electron ?? await import("electron");
+  const app = electron.app;
+  const path = await import("path");
+  const adapter = options.adapter ?? (options.checkout ? sourceAdapter({ checkout: options.checkout, run: options.source?.run ?? nodeRunner(), ...options.source }) : bundleAdapter({ repo, app, signing: options.signing, resetPermissions: options.resetPermissions, bundleId: options.bundleId, requireChecksum: options.requireChecksum }));
+  const updater = createUpdater({
+    adapter,
+    policy: options.policy ?? (app.isPackaged ? "prompt" : "off"),
+    storage: fileStorage(path.join(app.getPath("userData"), "subaru.json")),
+    debug: options.debug
+  });
+  if (options.ipcMain) serveUpdater(updater, options.ipcMain, options.windows ?? (() => []));
+  if (options.dialog !== false && electron.dialog) {
+    const dialog = electron.dialog;
+    const name = options.name ?? app.getName();
+    let asked = "";
+    updater.subscribe((s) => {
+      const key = `${s.status}:${s.release?.tag ?? ""}`;
+      if (s.dismissed || asked === key) return;
+      if (s.status === "available" && s.policy === "prompt" && !s.skipped) {
+        asked = key;
+        void app.whenReady().then(async () => {
+          const { response } = await dialog.showMessageBox({
+            type: "info",
+            message: `${name} ${s.release?.version ?? s.release?.tag} is available.`,
+            detail: s.release?.notes?.slice(0, 2e3),
+            buttons: ["Update now", "Skip this version", "Later"],
+            defaultId: 0,
+            cancelId: 2
+          });
+          if (response === 0) await updater.install();
+          else if (response === 1) await updater.skip();
+          else updater.dismiss();
+        });
+      } else if (s.status === "ready") {
+        asked = key;
+        void app.whenReady().then(async () => {
+          const { response } = await dialog.showMessageBox({
+            type: "info",
+            message: `${name} ${s.release?.version ?? s.release?.tag ?? ""} is ready. Restart to finish.`.replace("  ", " "),
+            buttons: ["Restart now", "Later"],
+            defaultId: 0,
+            cancelId: 1
+          });
+          if (response === 0) await updater.restart();
+          else updater.dismiss();
+        });
+      } else if (s.status === "error" && s.error) {
+        asked = key;
+        void app.whenReady().then(
+          () => dialog.showMessageBox({ type: "warning", message: `${name} could not update.`, detail: s.error ?? void 0, buttons: ["OK"] })
+        );
+      }
+    });
+  }
+  updater.start();
+  return updater;
+}
+export {
+  IPC,
+  bundleAdapter,
+  electronAdapter,
+  nodeRunner,
+  pickBundleAsset,
+  serveUpdater,
+  subaru
+};
+//# sourceMappingURL=electron.js.map

package/dist/electron.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/electron.ts"],"sourcesContent":["/**\n * Electron, main-process side.\n *\n *   subaru('owner/repo')          — the whole integration in one call: the\n *                                   bundle adapter below, a native dialog,\n *                                   and the daily check.\n *   bundleAdapter({ repo })       — an Adapter that downloads the app from\n *                                   GitHub Releases and swaps it in place:\n *                                   the .app on macOS, the AppImage or the\n *                                   unpacked directory on Linux. Signed or\n *                                   unsigned; no electron-updater, no source\n *                                   checkout.\n *   electronAdapter(autoUpdater)  — an Adapter over electron-updater, which\n *                                   downloads and applies releases published\n *                                   by electron-builder (Windows, or apps\n *                                   already on it).\n *   serveUpdater(updater, ipc)    — mirrors the updater over IPC so the\n *                                   renderer can show the same prompt through\n *                                   \"@justin06lee/subaru/electron/renderer\".\n *   nodeRunner()                  — runs git and make for sourceAdapter\n *                                   (source mode: unsigned apps that a\n *                                   Makefile builds and installs).\n */\nimport { createUpdater, type Adapter, type InstallOutcome, type Policy, type Release, type Updater, type UpdaterState } from './core';\nimport { allowedUrl, fetchLatestRelease, findChecksumAsset, isNewer, parseChecksums, pickAsset, type FetchLike, type GitHubAsset, type GitHubRelease } from './github';\nimport { pathWithTools, sourceAdapter, type Runner, type SourceAdapterOptions } from './source';\nimport { fileStorage } from './storage';\n\n/** The slice of electron-updater's AppUpdater subaru uses. */\nexport interface ElectronAutoUpdater {\n  autoDownload: boolean;\n  autoInstallOnAppQuit: boolean;\n  allowPrerelease: boolean;\n  checkForUpdates(): Promise<{ isUpdateAvailable: boolean; updateInfo: ElectronUpdateInfo } | null>;\n  downloadUpdate(): Promise<unknown>;\n  quitAndInstall(isSilent?: boolean, isForceRunAfter?: boolean): void;\n  on(event: 'download-progress', listener: (progress: { percent: number }) => void): unknown;\n  off(event: 'download-progress', listener: (progress: { percent: number }) => void): unknown;\n}\n\nexport interface ElectronUpdateInfo {\n  version: string;\n  releaseName?: string | null;\n  releaseNotes?: string | Array<{ version: string; note: string | null }> | null;\n  releaseDate?: string;\n}\n\nexport interface ElectronAdapterOptions {\n  allowPrerelease?: boolean;\n  /** Where to keep state. Default: no persistence beyond the process; pass fileStorage(join(app.getPath('userData'), 'subaru.json')). */\n  storagePath?: string;\n}\n\nexport function electronAdapter(autoUpdater: ElectronAutoUpdater, options: ElectronAdapterOptions = {}): Adapter {\n  autoUpdater.autoDownload = false;\n  autoUpdater.autoInstallOnAppQuit = true;\n  autoUpdater.allowPrerelease = options.allowPrerelease ?? false;\n\n  return {\n    kind: 'electron',\n    name: 'electron',\n    storage: options.storagePath ? fileStorage(options.storagePath) : undefined,\n    async check() {\n      const result = await autoUpdater.checkForUpdates();\n      if (!result || !result.isUpdateAvailable) return null;\n      const info = result.updateInfo;\n      const release: Release = { tag: info.version };\n      const notes = notesToString(info.releaseNotes);\n      if (notes) release.notes = notes;\n      if (info.releaseDate) release.date = info.releaseDate;\n      return release;\n    },\n    async install(_release, { relaunch, onProgress }) {\n      const onProgressEvent = (p: { percent: number }) => onProgress(p.percent / 100);\n      autoUpdater.on('download-progress', onProgressEvent);\n      try {\n        await autoUpdater.downloadUpdate();\n      } finally {\n        autoUpdater.off('download-progress', onProgressEvent);\n      }\n      if (relaunch) {\n        autoUpdater.quitAndInstall();\n        return 'restarting';\n      }\n      return 'ready';\n    },\n    async restart() {\n      autoUpdater.quitAndInstall();\n    },\n  };\n}\n\nfunction notesToString(notes: ElectronUpdateInfo['releaseNotes']): string | undefined {\n  if (!notes) return undefined;\n  if (typeof notes === 'string') return notes;\n  return notes\n    .map((n) => (n.note ? `${n.version}\\n${n.note}` : n.version))\n    .join('\\n\\n');\n}\n\n/** The IPC surface subaru uses, so tests can pass a fake and apps pass Electron's. */\nexport interface IpcMainLike {\n  handle(channel: string, listener: (event: unknown, ...args: unknown[]) => unknown): void;\n  on(channel: string, listener: (event: unknown, ...args: unknown[]) => void): unknown;\n}\n\nexport interface WebContentsLike {\n  send(channel: string, ...args: unknown[]): void;\n  isDestroyed?(): boolean;\n}\n\nexport const IPC = {\n  state: 'subaru:state',\n  get: 'subaru:get',\n  check: 'subaru:check',\n  install: 'subaru:install',\n  restart: 'subaru:restart',\n  skip: 'subaru:skip',\n  dismiss: 'subaru:dismiss',\n} as const;\n\n/**\n * Publish the updater to renderers: state changes are pushed on\n * \"subaru:state\", and the renderer's actions arrive on the other channels.\n * `targets` returns the webContents that should receive state (usually every\n * BrowserWindow's).\n */\nexport function serveUpdater(updater: Updater, ipcMain: IpcMainLike, targets: () => WebContentsLike[]): () => void {\n  ipcMain.handle(IPC.get, () => updater.getState());\n  ipcMain.on(IPC.check, () => void updater.check());\n  ipcMain.on(IPC.install, () => void updater.install());\n  ipcMain.on(IPC.restart, () => void updater.restart());\n  ipcMain.on(IPC.skip, () => void updater.skip());\n  ipcMain.on(IPC.dismiss, () => updater.dismiss());\n  return updater.subscribe((state: UpdaterState) => {\n    for (const wc of targets()) {\n      if (wc.isDestroyed?.()) continue;\n      wc.send(IPC.state, state);\n    }\n  });\n}\n\nexport interface NodeRunnerOptions {\n  /** Where a detached `make update` writes its output. Default: subaru-update.log in the temp dir. */\n  log?: string;\n  env?: Record<string, string | undefined>;\n}\n\n/**\n * A Runner on Node's child_process for sourceAdapter. Detached requests are\n * started in their own session with output appended to a log file, so\n * `make update` keeps going after it has quit this program. PATH gains the\n * usual tool directories a Finder-launched app lacks (Homebrew, bun, go,\n * cargo).\n */\nexport function nodeRunner(options: NodeRunnerOptions = {}): Runner {\n  return async ({ argv, cwd, detach }) => {\n    const { spawn } = await import('node:child_process');\n    const base = options.env ?? process.env;\n    const env = { ...base, PATH: pathWithTools(base.PATH, base.HOME) } as Record<string, string>;\n    const [program, ...args] = argv;\n    if (!program) return { code: 1, output: 'empty command' };\n    if (detach) {\n      const fs = await import('node:fs');\n      const os = await import('node:os');\n      const path = await import('node:path');\n      const log = options.log ?? path.join(os.tmpdir(), 'subaru-update.log');\n      const fd = fs.openSync(log, 'a');\n      fs.writeSync(fd, `\\n=== ${new Date().toISOString()} ${argv.join(' ')} (in ${cwd}) ===\\n`);\n      try {\n        const child = spawn(program, args, { cwd, env, detached: true, stdio: ['ignore', fd, fd] });\n        child.unref();\n        return await new Promise<{ code: number; output: string }>((resolve) => {\n          child.once('spawn', () => resolve({ code: 0, output: `started; output in ${log}` }));\n          child.once('error', (e) => resolve({ code: 1, output: String(e) }));\n        });\n      } finally {\n        fs.closeSync(fd);\n      }\n    }\n    return new Promise((resolve) => {\n      let output = '';\n      const child = spawn(program, args, { cwd, env, stdio: ['ignore', 'pipe', 'pipe'] });\n      child.stdout?.on('data', (d: Buffer) => (output += d.toString()));\n      child.stderr?.on('data', (d: Buffer) => (output += d.toString()));\n      child.once('error', (e) => resolve({ code: 1, output: output + String(e) }));\n      child.once('close', (code) => resolve({ code: code ?? 1, output }));\n    });\n  };\n}\n\n// Bundle swap: release mode, macOS and Linux ----------------------------------------\n\n/** The slice of Electron's `app` the bundle adapter and subaru() use. */\nexport interface AppLike {\n  getName(): string;\n  getVersion(): string;\n  getPath(name: 'exe' | 'userData' | 'temp'): string;\n  relaunch(options?: { execPath?: string; args?: string[] }): void;\n  exit(code?: number): void;\n  isPackaged: boolean;\n  whenReady(): Promise<void>;\n}\n\n/**\n * How the macOS app is signed, which decides what happens to its permission\n * grants (Accessibility, Screen Recording, ...) across an update.\n *\n *   'unsigned' — ad-hoc or no signature. Every build is a new identity to\n *                macOS, so grants cannot survive; subaru resets the stale\n *                ones (resetPermissions) so the new build asks again.\n *   'signed'   — a stable signing identity (Developer ID, or any certificate\n *                you sign every build with). The new bundle must satisfy the\n *                running bundle's designated requirement, the same check\n *                macOS uses for grants, or it is refused before anything is\n *                replaced; grants carry over and nothing is reset.\n *\n * Ignored on Linux, which has no equivalent.\n */\nexport type Signing = 'unsigned' | 'signed';\n\nexport interface BundleAdapterOptions {\n  /** \"owner/name\" on GitHub. */\n  repo: string;\n  app?: AppLike;\n  /** Program name used to pick the asset (`<name>-darwin-arm64.zip`). Default: the app name, lowercased. */\n  name?: string;\n  /** Running version. Default app.getVersion(). */\n  currentVersion?: string;\n  /** Default 'unsigned'. */\n  signing?: Signing;\n  /**\n   * macOS permission services to reset before relaunching an unsigned\n   * build, so it asks again instead of sitting on a stale grant: e.g.\n   * [\"Accessibility\", \"ScreenCapture\", \"ListenEvent\"]. Needs the bundle id\n   * (read from the bundle when not given). Not used when signing is\n   * 'signed': the grants are still valid.\n   */\n  resetPermissions?: string[];\n  bundleId?: string;\n  requireChecksum?: boolean;\n  fetch?: FetchLike;\n  /** Runs ditto, tar, unzip, xattr, codesign, tccutil. Default: nodeRunner(). */\n  run?: Runner;\n  /** Test hooks. */\n  bundlePath?: string;\n  platform?: string;\n  arch?: string;\n  api?: string;\n  allowAnyHost?: boolean;\n  env?: Record<string, string | undefined>;\n}\n\n/** What is being replaced: a .app, an AppImage file, or an unpacked Linux directory. */\ninterface Target {\n  form: 'app' | 'appimage' | 'dir';\n  path: string;\n}\n\n/**\n * Installs releases the way Tauri's updater does, with nothing but an\n * archive on GitHub Releases.\n *\n *   macOS   `<name>-darwin-<arch>.zip` (or .tar.gz) holding the .app,\n *           unpacked with ditto so symlinks and signatures survive, swapped\n *           in place of the running bundle.\n *   Linux   run as an AppImage: `<name>-linux-<arch>.AppImage` replaces the\n *           file $APPIMAGE points at. Run from an unpacked directory\n *           (electron-builder's linux-unpacked, a tarball in ~/.local or\n *           /opt): `<name>-linux-<arch>.tar.gz` (or .zip) replaces the\n *           directory the executable lives in.\n *\n * The published checksum is verified first, the new copy is staged next to\n * the old one so the swap is a rename on one filesystem, and a failure at\n * any step leaves the running app where it was.\n */\nexport function bundleAdapter(options: BundleAdapterOptions): Adapter {\n  const platform = options.platform ?? process.platform;\n  const arch = options.arch ?? process.arch;\n  const run = options.run ?? nodeRunner();\n  const env = options.env ?? process.env;\n  const signing = options.signing ?? 'unsigned';\n  let held: { release: GitHubRelease; asset: GitHubAsset } | null = null;\n\n  const app = () => {\n    if (!options.app) throw new Error('subaru: bundleAdapter needs app (pass { app } from electron)');\n    return options.app;\n  };\n  const binName = () => options.name ?? app().getName().toLowerCase();\n  const currentVersion = () => options.currentVersion ?? app().getVersion();\n\n  function target(): Target {\n    if (platform === 'darwin') {\n      if (options.bundlePath) return { form: 'app', path: options.bundlePath };\n      const exe = app().getPath('exe');\n      const i = exe.indexOf('.app/');\n      if (i < 0) throw new Error(`subaru: ${exe} is not inside a .app bundle`);\n      return { form: 'app', path: exe.slice(0, i + 4) };\n    }\n    if (env.APPIMAGE) return { form: 'appimage', path: env.APPIMAGE };\n    if (options.bundlePath) return { form: 'dir', path: options.bundlePath };\n    const exe = app().getPath('exe');\n    return { form: 'dir', path: exe.slice(0, exe.lastIndexOf('/')) || '/' };\n  }\n\n  function pick(rel: GitHubRelease): GitHubAsset {\n    const os = platform === 'darwin' ? 'darwin' : 'linux';\n    const asset = pickBundleAsset(rel.assets, binName(), os, arch, platform === 'linux' && env.APPIMAGE ? 'appimage' : 'archive');\n    if (!asset) throw new Error(`subaru: ${rel.tag} has no ${platform === 'linux' && env.APPIMAGE ? 'AppImage' : 'archive'} for ${binName()} ${os}/${arch}`);\n    return asset;\n  }\n\n  async function sh(argv: string[], cwd: string): Promise<string> {\n    const r = await run({ argv, cwd });\n    if (r.code !== 0) throw new Error(`${argv[0]} failed: ${r.output.trim() || `exit ${r.code}`}`);\n    return r.output;\n  }\n\n  function relaunchInto(t: Target) {\n    // An AppImage runs from a mount that disappears with the process, so the\n    // relaunch has to name the file itself.\n    if (t.form === 'appimage') app().relaunch({ execPath: t.path });\n    else app().relaunch();\n    app().exit(0);\n  }\n\n  return {\n    kind: 'electron',\n    name: `bundle:${options.repo}`,\n    async check(signal) {\n      if (platform !== 'darwin' && platform !== 'linux') {\n        throw new Error(`subaru: bundle updates are implemented for macOS and Linux (this is ${platform}); use electronAdapter(autoUpdater)`);\n      }\n      const rel = await fetchLatestRelease(options.repo, { fetch: options.fetch, api: options.api }, signal);\n      if (!rel || !isNewer(rel.tag, currentVersion())) {\n        held = null;\n        return null;\n      }\n      held = { release: rel, asset: pick(rel) };\n      const out: Release = { tag: rel.tag, version: rel.version };\n      if (rel.notes) out.notes = rel.notes;\n      if (rel.url) out.url = rel.url;\n      if (rel.date) out.date = rel.date;\n      return out;\n    },\n    async install(release, { relaunch, onProgress }): Promise<InstallOutcome> {\n      const fs = await import('node:fs');\n      const fsp = await import('node:fs/promises');\n      const path = await import('node:path');\n      const os = await import('node:os');\n      const crypto = await import('node:crypto');\n      if (!held || held.release.tag !== release.tag) {\n        const fresh = await fetchLatestRelease(options.repo, { fetch: options.fetch, api: options.api });\n        if (!fresh || fresh.tag !== release.tag) throw new Error(`subaru: ${release.tag} is no longer the latest release`);\n        held = { release: fresh, asset: pick(fresh) };\n      }\n      const { release: rel, asset } = held;\n      // Everything that can be known before the download is checked first,\n      // so a misconfigured app fails fast instead of after 100 MB.\n      const t = target();\n      if (t.form === 'dir') await refuseSetuidSandbox(t.path, fsp, path);\n      const requirement = platform === 'darwin' && signing === 'signed' ? await designatedRequirement(t.path, run) : null;\n      if (!options.allowAnyHost && !allowedUrl(asset.url)) throw new Error(`subaru: refusing to download ${asset.url}: not a GitHub URL`);\n      const doFetch = options.fetch ?? ((input: string, init?: RequestInit) => fetch(input, init));\n\n      const work = await fsp.mkdtemp(path.join(os.tmpdir(), 'subaru-'));\n      // Staged beside the target, so the swap is a rename on one filesystem\n      // (Linux /tmp is often tmpfs) and an unwritable install fails here.\n      const parent = path.dirname(t.path);\n      let stage: string;\n      try {\n        stage = await fsp.mkdtemp(path.join(parent, `.${path.basename(t.path)}.subaru-`));\n      } catch (e) {\n        await fsp.rm(work, { recursive: true, force: true }).catch(() => {});\n        throw new Error(`subaru: cannot write next to ${t.path} (${(e as NodeJS.ErrnoException).code ?? e}); an install owned by a package manager updates through it`);\n      }\n      try {\n        // 1. download with progress and a running hash\n        const file = path.join(work, asset.name);\n        const res = await doFetch(asset.url, { headers: { accept: 'application/octet-stream' } });\n        if (!res.ok || !res.body) throw new Error(`subaru: download ${asset.name}: ${res.status}`);\n        if (!options.allowAnyHost && !allowedUrl(res.url || asset.url)) throw new Error(`subaru: redirected off GitHub to ${res.url}`);\n        const total = Number(res.headers.get('content-length')) || asset.size || 0;\n        const hash = crypto.createHash('sha256');\n        const out = fs.createWriteStream(file);\n        let got = 0;\n        onProgress(total ? 0 : null);\n        for await (const chunk of res.body as AsyncIterable<Uint8Array>) {\n          hash.update(chunk);\n          got += chunk.length;\n          if (!out.write(chunk)) await new Promise((r) => out.once('drain', r));\n          onProgress(total ? Math.min(got / total, 1) : null);\n        }\n        await new Promise<void>((resolve, reject) => out.end((e?: Error | null) => (e ? reject(e) : resolve())));\n        if (!got) throw new Error(`subaru: ${asset.name} is empty`);\n        const sum = hash.digest('hex');\n\n        // 2. checksum\n        const ca = findChecksumAsset(rel.assets, asset.name);\n        if (ca) {\n          if (!options.allowAnyHost && !allowedUrl(ca.url)) throw new Error(`subaru: refusing to download ${ca.url}: not a GitHub URL`);\n          const cres = await doFetch(ca.url);\n          if (!cres.ok) throw new Error(`subaru: download ${ca.name}: ${cres.status}`);\n          const want = parseChecksums(await cres.text(), asset.name);\n          if (!want) throw new Error(`subaru: ${ca.name} does not list ${asset.name}`);\n          if (want !== sum) throw new Error(`subaru: checksum mismatch for ${asset.name}`);\n        } else if (options.requireChecksum) {\n          throw new Error(`subaru: release ${rel.tag} ships no checksum file for ${asset.name}`);\n        }\n\n        // 3. unpack into the stage, keeping symlinks, permissions and signatures\n        let fresh: string;\n        if (t.form === 'appimage') {\n          fresh = path.join(stage, path.basename(t.path));\n          await fsp.copyFile(file, fresh);\n          await fsp.chmod(fresh, 0o755);\n        } else {\n          const lower = asset.name.toLowerCase();\n          if (lower.endsWith('.zip')) await sh(platform === 'darwin' ? ['ditto', '-x', '-k', file, stage] : ['unzip', '-q', file, '-d', stage], work);\n          else if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) await sh(['tar', '-xzf', file, '-C', stage], work);\n          else throw new Error(`subaru: ${asset.name} is neither a .zip nor a .tar.gz`);\n          if (t.form === 'app') {\n            const found = await findBundle(stage, fsp, path);\n            if (!found) throw new Error(`subaru: ${asset.name} holds no .app bundle`);\n            fresh = found;\n          } else {\n            const exe = path.basename(app().getPath('exe'));\n            const found = await findDirWith(stage, exe, fsp, path);\n            if (!found) throw new Error(`subaru: ${asset.name} holds no directory with ${exe} in it`);\n            fresh = found;\n          }\n        }\n\n        // 4. macOS: the new bundle must launch cleanly and, when signed, be\n        //    the same identity the grants were given to.\n        if (t.form === 'app') {\n          await run({ argv: ['xattr', '-dr', 'com.apple.quarantine', fresh], cwd: work });\n          if (requirement) {\n            const v = await run({ argv: ['codesign', '--verify', '--deep', '--strict', `-R=${requirement}`, fresh], cwd: work });\n            if (v.code !== 0) {\n              throw new Error(`subaru: ${asset.name} is not signed by the identity this app is signed with, so its permission grants would not carry over; refusing it (${v.output.trim() || `exit ${v.code}`})`);\n            }\n          }\n        }\n\n        // 5. swap: the running copy steps aside, the new one takes its place\n        if (t.form === 'appimage') {\n          await fsp.rename(fresh, t.path);\n        } else {\n          const aside = path.join(parent, `.${path.basename(t.path)}.subaru-old`);\n          await fsp.rm(aside, { recursive: true, force: true });\n          await fsp.rename(t.path, aside);\n          try {\n            await fsp.rename(fresh, t.path);\n          } catch (e) {\n            await fsp.rename(aside, t.path);\n            throw e;\n          }\n          await fsp.rm(aside, { recursive: true, force: true }).catch(() => {});\n        }\n\n        // 6. unsigned macOS: the grants belonged to the old build, so clear them\n        //    and let the new build ask again\n        if (t.form === 'app' && signing === 'unsigned' && options.resetPermissions?.length) {\n          const id = options.bundleId ?? (await readBundleId(t.path, run));\n          if (id) {\n            for (const service of options.resetPermissions) await run({ argv: ['tccutil', 'reset', service, id], cwd: work });\n          }\n        }\n      } finally {\n        await fsp.rm(work, { recursive: true, force: true }).catch(() => {});\n        await fsp.rm(stage, { recursive: true, force: true }).catch(() => {});\n      }\n      if (relaunch) {\n        relaunchInto(t);\n        return 'restarting';\n      }\n      return 'ready';\n    },\n    async restart() {\n      relaunchInto(target());\n    },\n  };\n}\n\n/**\n * The asset for this platform in the shape the install needs: an AppImage,\n * or a .zip / .tar.gz archive. Raw binaries (a Go program's assets in the\n * same release) are never picked.\n */\nexport function pickBundleAsset(assets: GitHubAsset[], name: string, os: string, arch: string, form: 'appimage' | 'archive'): GitHubAsset | null {\n  if (form === 'appimage') {\n    const images = assets.filter((a) => a.name.toLowerCase().endsWith('.appimage'));\n    // pickAsset skips AppImages (the Go module can't run one), so match on the name without its extension\n    const byStem = new Map(images.map((a) => [a.name.slice(0, -'.appimage'.length), a]));\n    const hit = pickAsset(images.map((a) => ({ ...a, name: a.name.slice(0, -'.appimage'.length) })), name, os, arch);\n    return hit ? byStem.get(hit.name) ?? null : null;\n  }\n  const archives = assets.filter((a) => /\\.(zip|tar\\.gz|tgz)$/i.test(a.name));\n  return pickAsset(archives, name, os, arch);\n}\n\nasync function findBundle(dir: string, fsp: typeof import('node:fs/promises'), path: typeof import('node:path')): Promise<string | null> {\n  const entries = await fsp.readdir(dir, { withFileTypes: true });\n  for (const e of entries) if (e.isDirectory() && e.name.endsWith('.app')) return path.join(dir, e.name);\n  for (const e of entries) {\n    if (!e.isDirectory() || e.name.startsWith('__MACOSX')) continue;\n    const nested = await findBundle(path.join(dir, e.name), fsp, path);\n    if (nested) return nested;\n  }\n  return null;\n}\n\n/** The directory in an unpacked Linux archive that holds the app's executable, at the top or a few levels down. */\nasync function findDirWith(dir: string, exe: string, fsp: typeof import('node:fs/promises'), path: typeof import('node:path'), depth = 0): Promise<string | null> {\n  const entries = await fsp.readdir(dir, { withFileTypes: true });\n  if (entries.some((e) => e.isFile() && e.name === exe)) return dir;\n  if (depth >= 3) return null;\n  for (const e of entries) {\n    if (!e.isDirectory()) continue;\n    const nested = await findDirWith(path.join(dir, e.name), exe, fsp, path, depth + 1);\n    if (nested) return nested;\n  }\n  return null;\n}\n\n/**\n * A chrome-sandbox that is setuid root was set up by a package manager or\n * by hand with sudo; a copy unpacked by the user cannot be, and Electron\n * would refuse to start with it. Better to say so before replacing anything.\n */\nasync function refuseSetuidSandbox(dir: string, fsp: typeof import('node:fs/promises'), path: typeof import('node:path')) {\n  const st = await fsp.stat(path.join(dir, 'chrome-sandbox')).catch(() => null);\n  if (st && st.mode & 0o4000) {\n    throw new Error(`subaru: ${dir}/chrome-sandbox is setuid root, which an update cannot reproduce; update this install with the package manager that made it`);\n  }\n}\n\n/**\n * The running bundle's designated requirement: what macOS checks a new\n * build against to decide whether the grants still apply. An ad-hoc\n * signature's requirement is its own hash, which no other build can meet,\n * so it means the app is not really signed.\n */\nasync function designatedRequirement(bundle: string, run: Runner): Promise<string> {\n  const r = await run({ argv: ['codesign', '--display', '-r-', bundle], cwd: '/' });\n  // an implicit requirement is printed commented out (\"# designated => cdhash ...\")\n  const line = r.output.split('\\n').find((l) => /^(# )?designated => /.test(l));\n  const req = line?.replace(/^(# )?designated => /, '').trim();\n  if (r.code !== 0 || !req) {\n    throw new Error(`subaru: signing is 'signed' but ${bundle} has no code signature (${r.output.trim() || `exit ${r.code}`}); use signing: 'unsigned'`);\n  }\n  if (/^cdhash\\b/.test(req)) {\n    throw new Error(`subaru: signing is 'signed' but ${bundle} is only ad-hoc signed, so no new build can keep its grants; sign with a stable identity or use signing: 'unsigned'`);\n  }\n  return req;\n}\n\nasync function readBundleId(bundle: string, run: Runner): Promise<string | null> {\n  const r = await run({ argv: ['defaults', 'read', `${bundle}/Contents/Info`, 'CFBundleIdentifier'], cwd: '/' });\n  return r.code === 0 ? r.output.trim() || null : null;\n}\n\n// One call ----------------------------------------------------------------------------\n\nexport interface ElectronAutoOptions {\n  policy?: Policy;\n  /** Shown in the dialog. Default app.getName(). */\n  name?: string;\n  /** Source mode instead of GitHub Releases: the app's git checkout, fast-forwarded and rebuilt with make. */\n  checkout?: string;\n  source?: Omit<SourceAdapterOptions, 'checkout' | 'run'> & { run?: Runner };\n  /** Passed to bundleAdapter. 'signed' keeps macOS permission grants across updates; default 'unsigned'. */\n  signing?: Signing;\n  resetPermissions?: string[];\n  bundleId?: string;\n  requireChecksum?: boolean;\n  /** false: no native dialog; drive the UI yourself (serveUpdater + the card in the renderer). */\n  dialog?: boolean;\n  /** Mirror state to renderers too. */\n  ipcMain?: IpcMainLike;\n  windows?: () => WebContentsLike[];\n  debug?: (message: string) => void;\n  /** Test hooks: Electron's app and dialog. */\n  electron?: { app: AppLike; dialog?: DialogLike };\n  adapter?: Adapter;\n}\n\nexport interface DialogLike {\n  showMessageBox(options: { type?: string; message: string; detail?: string; buttons: string[]; defaultId?: number; cancelId?: number }): Promise<{ response: number }>;\n}\n\n/**\n * The whole integration in one call, from the main process:\n *\n *   import { subaru } from '@justin06lee/subaru/electron';\n *   subaru('justin06lee/ruri');\n *\n * Once a day it looks at the repository's latest release. When there is a\n * newer one it asks with a native dialog (Update now / Skip this version /\n * Later), downloads the release for this platform, swaps it in and\n * relaunches. Nothing needs publishing beyond a GitHub release; signing is\n * optional, and { signing: 'signed' } keeps macOS permission grants.\n * Pass { checkout } for source mode instead. Development runs (app.isPackaged\n * false) stay off unless a policy is given.\n */\nexport async function subaru(repo: string, options: ElectronAutoOptions = {}): Promise<Updater> {\n  const electron = options.electron ?? ((await import('electron')) as unknown as { app: AppLike; dialog: DialogLike });\n  const app = electron.app;\n  const path = await import('node:path');\n  const adapter =\n    options.adapter ??\n    (options.checkout\n      ? sourceAdapter({ checkout: options.checkout, run: options.source?.run ?? nodeRunner(), ...options.source })\n      : bundleAdapter({ repo, app, signing: options.signing, resetPermissions: options.resetPermissions, bundleId: options.bundleId, requireChecksum: options.requireChecksum }));\n  const updater = createUpdater({\n    adapter,\n    policy: options.policy ?? (app.isPackaged ? 'prompt' : 'off'),\n    storage: fileStorage(path.join(app.getPath('userData'), 'subaru.json')),\n    debug: options.debug,\n  });\n  if (options.ipcMain) serveUpdater(updater, options.ipcMain, options.windows ?? (() => []));\n  if (options.dialog !== false && electron.dialog) {\n    const dialog = electron.dialog;\n    const name = options.name ?? app.getName();\n    let asked = '';\n    updater.subscribe((s) => {\n      const key = `${s.status}:${s.release?.tag ?? ''}`;\n      if (s.dismissed || asked === key) return;\n      if (s.status === 'available' && s.policy === 'prompt' && !s.skipped) {\n        asked = key;\n        void app.whenReady().then(async () => {\n          const { response } = await dialog.showMessageBox({\n            type: 'info',\n            message: `${name} ${s.release?.version ?? s.release?.tag} is available.`,\n            detail: s.release?.notes?.slice(0, 2000),\n            buttons: ['Update now', 'Skip this version', 'Later'],\n            defaultId: 0,\n            cancelId: 2,\n          });\n          if (response === 0) await updater.install();\n          else if (response === 1) await updater.skip();\n          else updater.dismiss();\n        });\n      } else if (s.status === 'ready') {\n        asked = key;\n        void app.whenReady().then(async () => {\n          const { response } = await dialog.showMessageBox({\n            type: 'info',\n            message: `${name} ${s.release?.version ?? s.release?.tag ?? ''} is ready. Restart to finish.`.replace('  ', ' '),\n            buttons: ['Restart now', 'Later'],\n            defaultId: 0,\n            cancelId: 1,\n          });\n          if (response === 0) await updater.restart();\n          else updater.dismiss();\n        });\n      } else if (s.status === 'error' && s.error) {\n        asked = key;\n        void app.whenReady().then(() =>\n          dialog.showMessageBox({ type: 'warning', message: `${name} could not update.`, detail: s.error ?? undefined, buttons: ['OK'] }),\n        );\n      }\n    });\n  }\n  updater.start();\n  return updater;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqDO,SAAS,gBAAgB,aAAkC,UAAkC,CAAC,GAAY;AAC/G,cAAY,eAAe;AAC3B,cAAY,uBAAuB;AACnC,cAAY,kBAAkB,QAAQ,mBAAmB;AAEzD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,SAAS,QAAQ,cAAc,YAAY,QAAQ,WAAW,IAAI;AAAA,IAClE,MAAM,QAAQ;AACZ,YAAM,SAAS,MAAM,YAAY,gBAAgB;AACjD,UAAI,CAAC,UAAU,CAAC,OAAO,kBAAmB,QAAO;AACjD,YAAM,OAAO,OAAO;AACpB,YAAM,UAAmB,EAAE,KAAK,KAAK,QAAQ;AAC7C,YAAM,QAAQ,cAAc,KAAK,YAAY;AAC7C,UAAI,MAAO,SAAQ,QAAQ;AAC3B,UAAI,KAAK,YAAa,SAAQ,OAAO,KAAK;AAC1C,aAAO;AAAA,IACT;AAAA,IACA,MAAM,QAAQ,UAAU,EAAE,UAAU,WAAW,GAAG;AAChD,YAAM,kBAAkB,CAAC,MAA2B,WAAW,EAAE,UAAU,GAAG;AAC9E,kBAAY,GAAG,qBAAqB,eAAe;AACnD,UAAI;AACF,cAAM,YAAY,eAAe;AAAA,MACnC,UAAE;AACA,oBAAY,IAAI,qBAAqB,eAAe;AAAA,MACtD;AACA,UAAI,UAAU;AACZ,oBAAY,eAAe;AAC3B,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,UAAU;AACd,kBAAY,eAAe;AAAA,IAC7B;AAAA,EACF;AACF;AAEA,SAAS,cAAc,OAA+D;AACpF,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,MACJ,IAAI,CAAC,MAAO,EAAE,OAAO,GAAG,EAAE,OAAO;AAAA,EAAK,EAAE,IAAI,KAAK,EAAE,OAAQ,EAC3D,KAAK,MAAM;AAChB;AAaO,IAAM,MAAM;AAAA,EACjB,OAAO;AAAA,EACP,KAAK;AAAA,EACL,OAAO;AAAA,EACP,SAAS;AAAA,EACT,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AACX;AAQO,SAAS,aAAa,SAAkB,SAAsB,SAA8C;AACjH,UAAQ,OAAO,IAAI,KAAK,MAAM,QAAQ,SAAS,CAAC;AAChD,UAAQ,GAAG,IAAI,OAAO,MAAM,KAAK,QAAQ,MAAM,CAAC;AAChD,UAAQ,GAAG,IAAI,SAAS,MAAM,KAAK,QAAQ,QAAQ,CAAC;AACpD,UAAQ,GAAG,IAAI,SAAS,MAAM,KAAK,QAAQ,QAAQ,CAAC;AACpD,UAAQ,GAAG,IAAI,MAAM,MAAM,KAAK,QAAQ,KAAK,CAAC;AAC9C,UAAQ,GAAG,IAAI,SAAS,MAAM,QAAQ,QAAQ,CAAC;AAC/C,SAAO,QAAQ,UAAU,CAAC,UAAwB;AAChD,eAAW,MAAM,QAAQ,GAAG;AAC1B,UAAI,GAAG,cAAc,EAAG;AACxB,SAAG,KAAK,IAAI,OAAO,KAAK;AAAA,IAC1B;AAAA,EACF,CAAC;AACH;AAeO,SAAS,WAAW,UAA6B,CAAC,GAAW;AAClE,SAAO,OAAO,EAAE,MAAM,KAAK,OAAO,MAAM;AACtC,UAAM,EAAE,MAAM,IAAI,MAAM,OAAO,eAAoB;AACnD,UAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,UAAM,MAAM,EAAE,GAAG,MAAM,MAAM,cAAc,KAAK,MAAM,KAAK,IAAI,EAAE;AACjE,UAAM,CAAC,SAAS,GAAG,IAAI,IAAI;AAC3B,QAAI,CAAC,QAAS,QAAO,EAAE,MAAM,GAAG,QAAQ,gBAAgB;AACxD,QAAI,QAAQ;AACV,YAAM,KAAK,MAAM,OAAO,IAAS;AACjC,YAAM,KAAK,MAAM,OAAO,IAAS;AACjC,YAAM,OAAO,MAAM,OAAO,MAAW;AACrC,YAAM,MAAM,QAAQ,OAAO,KAAK,KAAK,GAAG,OAAO,GAAG,mBAAmB;AACrE,YAAM,KAAK,GAAG,SAAS,KAAK,GAAG;AAC/B,SAAG,UAAU,IAAI;AAAA,OAAS,oBAAI,KAAK,GAAE,YAAY,CAAC,IAAI,KAAK,KAAK,GAAG,CAAC,QAAQ,GAAG;AAAA,CAAS;AACxF,UAAI;AACF,cAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,KAAK,KAAK,UAAU,MAAM,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAC1F,cAAM,MAAM;AACZ,eAAO,MAAM,IAAI,QAA0C,CAAC,YAAY;AACtE,gBAAM,KAAK,SAAS,MAAM,QAAQ,EAAE,MAAM,GAAG,QAAQ,sBAAsB,GAAG,GAAG,CAAC,CAAC;AACnF,gBAAM,KAAK,SAAS,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,QAAQ,OAAO,CAAC,EAAE,CAAC,CAAC;AAAA,QACpE,CAAC;AAAA,MACH,UAAE;AACA,WAAG,UAAU,EAAE;AAAA,MACjB;AAAA,IACF;AACA,WAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAI,SAAS;AACb,YAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,KAAK,KAAK,OAAO,CAAC,UAAU,QAAQ,MAAM,EAAE,CAAC;AAClF,YAAM,QAAQ,GAAG,QAAQ,CAAC,MAAe,UAAU,EAAE,SAAS,CAAE;AAChE,YAAM,QAAQ,GAAG,QAAQ,CAAC,MAAe,UAAU,EAAE,SAAS,CAAE;AAChE,YAAM,KAAK,SAAS,CAAC,MAAM,QAAQ,EAAE,MAAM,GAAG,QAAQ,SAAS,OAAO,CAAC,EAAE,CAAC,CAAC;AAC3E,YAAM,KAAK,SAAS,CAAC,SAAS,QAAQ,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC;AAAA,IACpE,CAAC;AAAA,EACH;AACF;AAuFO,SAAS,cAAc,SAAwC;AACpE,QAAM,WAAW,QAAQ,YAAY,QAAQ;AAC7C,QAAM,OAAO,QAAQ,QAAQ,QAAQ;AACrC,QAAM,MAAM,QAAQ,OAAO,WAAW;AACtC,QAAM,MAAM,QAAQ,OAAO,QAAQ;AACnC,QAAM,UAAU,QAAQ,WAAW;AACnC,MAAI,OAA8D;AAElE,QAAM,MAAM,MAAM;AAChB,QAAI,CAAC,QAAQ,IAAK,OAAM,IAAI,MAAM,8DAA8D;AAChG,WAAO,QAAQ;AAAA,EACjB;AACA,QAAM,UAAU,MAAM,QAAQ,QAAQ,IAAI,EAAE,QAAQ,EAAE,YAAY;AAClE,QAAM,iBAAiB,MAAM,QAAQ,kBAAkB,IAAI,EAAE,WAAW;AAExE,WAAS,SAAiB;AACxB,QAAI,aAAa,UAAU;AACzB,UAAI,QAAQ,WAAY,QAAO,EAAE,MAAM,OAAO,MAAM,QAAQ,WAAW;AACvE,YAAMA,OAAM,IAAI,EAAE,QAAQ,KAAK;AAC/B,YAAM,IAAIA,KAAI,QAAQ,OAAO;AAC7B,UAAI,IAAI,EAAG,OAAM,IAAI,MAAM,WAAWA,IAAG,8BAA8B;AACvE,aAAO,EAAE,MAAM,OAAO,MAAMA,KAAI,MAAM,GAAG,IAAI,CAAC,EAAE;AAAA,IAClD;AACA,QAAI,IAAI,SAAU,QAAO,EAAE,MAAM,YAAY,MAAM,IAAI,SAAS;AAChE,QAAI,QAAQ,WAAY,QAAO,EAAE,MAAM,OAAO,MAAM,QAAQ,WAAW;AACvE,UAAM,MAAM,IAAI,EAAE,QAAQ,KAAK;AAC/B,WAAO,EAAE,MAAM,OAAO,MAAM,IAAI,MAAM,GAAG,IAAI,YAAY,GAAG,CAAC,KAAK,IAAI;AAAA,EACxE;AAEA,WAAS,KAAK,KAAiC;AAC7C,UAAM,KAAK,aAAa,WAAW,WAAW;AAC9C,UAAM,QAAQ,gBAAgB,IAAI,QAAQ,QAAQ,GAAG,IAAI,MAAM,aAAa,WAAW,IAAI,WAAW,aAAa,SAAS;AAC5H,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,WAAW,IAAI,GAAG,WAAW,aAAa,WAAW,IAAI,WAAW,aAAa,SAAS,QAAQ,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE;AACvJ,WAAO;AAAA,EACT;AAEA,iBAAe,GAAG,MAAgB,KAA8B;AAC9D,UAAM,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI,CAAC;AACjC,QAAI,EAAE,SAAS,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,OAAO,KAAK,KAAK,QAAQ,EAAE,IAAI,EAAE,EAAE;AAC7F,WAAO,EAAE;AAAA,EACX;AAEA,WAAS,aAAa,GAAW;AAG/B,QAAI,EAAE,SAAS,WAAY,KAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC;AAAA,QACzD,KAAI,EAAE,SAAS;AACpB,QAAI,EAAE,KAAK,CAAC;AAAA,EACd;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,UAAU,QAAQ,IAAI;AAAA,IAC5B,MAAM,MAAM,QAAQ;AAClB,UAAI,aAAa,YAAY,aAAa,SAAS;AACjD,cAAM,IAAI,MAAM,uEAAuE,QAAQ,qCAAqC;AAAA,MACtI;AACA,YAAM,MAAM,MAAM,mBAAmB,QAAQ,MAAM,EAAE,OAAO,QAAQ,OAAO,KAAK,QAAQ,IAAI,GAAG,MAAM;AACrG,UAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,eAAe,CAAC,GAAG;AAC/C,eAAO;AACP,eAAO;AAAA,MACT;AACA,aAAO,EAAE,SAAS,KAAK,OAAO,KAAK,GAAG,EAAE;AACxC,YAAM,MAAe,EAAE,KAAK,IAAI,KAAK,SAAS,IAAI,QAAQ;AAC1D,UAAI,IAAI,MAAO,KAAI,QAAQ,IAAI;AAC/B,UAAI,IAAI,IAAK,KAAI,MAAM,IAAI;AAC3B,UAAI,IAAI,KAAM,KAAI,OAAO,IAAI;AAC7B,aAAO;AAAA,IACT;AAAA,IACA,MAAM,QAAQ,SAAS,EAAE,UAAU,WAAW,GAA4B;AACxE,YAAM,KAAK,MAAM,OAAO,IAAS;AACjC,YAAM,MAAM,MAAM,OAAO,aAAkB;AAC3C,YAAM,OAAO,MAAM,OAAO,MAAW;AACrC,YAAM,KAAK,MAAM,OAAO,IAAS;AACjC,YAAM,SAAS,MAAM,OAAO,QAAa;AACzC,UAAI,CAAC,QAAQ,KAAK,QAAQ,QAAQ,QAAQ,KAAK;AAC7C,cAAM,QAAQ,MAAM,mBAAmB,QAAQ,MAAM,EAAE,OAAO,QAAQ,OAAO,KAAK,QAAQ,IAAI,CAAC;AAC/F,YAAI,CAAC,SAAS,MAAM,QAAQ,QAAQ,IAAK,OAAM,IAAI,MAAM,WAAW,QAAQ,GAAG,kCAAkC;AACjH,eAAO,EAAE,SAAS,OAAO,OAAO,KAAK,KAAK,EAAE;AAAA,MAC9C;AACA,YAAM,EAAE,SAAS,KAAK,MAAM,IAAI;AAGhC,YAAM,IAAI,OAAO;AACjB,UAAI,EAAE,SAAS,MAAO,OAAM,oBAAoB,EAAE,MAAM,KAAK,IAAI;AACjE,YAAM,cAAc,aAAa,YAAY,YAAY,WAAW,MAAM,sBAAsB,EAAE,MAAM,GAAG,IAAI;AAC/G,UAAI,CAAC,QAAQ,gBAAgB,CAAC,WAAW,MAAM,GAAG,EAAG,OAAM,IAAI,MAAM,gCAAgC,MAAM,GAAG,oBAAoB;AAClI,YAAM,UAAU,QAAQ,UAAU,CAAC,OAAe,SAAuB,MAAM,OAAO,IAAI;AAE1F,YAAM,OAAO,MAAM,IAAI,QAAQ,KAAK,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;AAGhE,YAAM,SAAS,KAAK,QAAQ,EAAE,IAAI;AAClC,UAAI;AACJ,UAAI;AACF,gBAAQ,MAAM,IAAI,QAAQ,KAAK,KAAK,QAAQ,IAAI,KAAK,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC;AAAA,MAClF,SAAS,GAAG;AACV,cAAM,IAAI,GAAG,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACnE,cAAM,IAAI,MAAM,gCAAgC,EAAE,IAAI,KAAM,EAA4B,QAAQ,CAAC,6DAA6D;AAAA,MAChK;AACA,UAAI;AAEF,cAAM,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI;AACvC,cAAM,MAAM,MAAM,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,QAAQ,2BAA2B,EAAE,CAAC;AACxF,YAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAM,OAAM,IAAI,MAAM,oBAAoB,MAAM,IAAI,KAAK,IAAI,MAAM,EAAE;AACzF,YAAI,CAAC,QAAQ,gBAAgB,CAAC,WAAW,IAAI,OAAO,MAAM,GAAG,EAAG,OAAM,IAAI,MAAM,oCAAoC,IAAI,GAAG,EAAE;AAC7H,cAAM,QAAQ,OAAO,IAAI,QAAQ,IAAI,gBAAgB,CAAC,KAAK,MAAM,QAAQ;AACzE,cAAM,OAAO,OAAO,WAAW,QAAQ;AACvC,cAAM,MAAM,GAAG,kBAAkB,IAAI;AACrC,YAAI,MAAM;AACV,mBAAW,QAAQ,IAAI,IAAI;AAC3B,yBAAiB,SAAS,IAAI,MAAmC;AAC/D,eAAK,OAAO,KAAK;AACjB,iBAAO,MAAM;AACb,cAAI,CAAC,IAAI,MAAM,KAAK,EAAG,OAAM,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;AACpE,qBAAW,QAAQ,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,IAAI;AAAA,QACpD;AACA,cAAM,IAAI,QAAc,CAAC,SAAS,WAAW,IAAI,IAAI,CAAC,MAAsB,IAAI,OAAO,CAAC,IAAI,QAAQ,CAAE,CAAC;AACvG,YAAI,CAAC,IAAK,OAAM,IAAI,MAAM,WAAW,MAAM,IAAI,WAAW;AAC1D,cAAM,MAAM,KAAK,OAAO,KAAK;AAG7B,cAAM,KAAK,kBAAkB,IAAI,QAAQ,MAAM,IAAI;AACnD,YAAI,IAAI;AACN,cAAI,CAAC,QAAQ,gBAAgB,CAAC,WAAW,GAAG,GAAG,EAAG,OAAM,IAAI,MAAM,gCAAgC,GAAG,GAAG,oBAAoB;AAC5H,gBAAM,OAAO,MAAM,QAAQ,GAAG,GAAG;AACjC,cAAI,CAAC,KAAK,GAAI,OAAM,IAAI,MAAM,oBAAoB,GAAG,IAAI,KAAK,KAAK,MAAM,EAAE;AAC3E,gBAAM,OAAO,eAAe,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI;AACzD,cAAI,CAAC,KAAM,OAAM,IAAI,MAAM,WAAW,GAAG,IAAI,kBAAkB,MAAM,IAAI,EAAE;AAC3E,cAAI,SAAS,IAAK,OAAM,IAAI,MAAM,iCAAiC,MAAM,IAAI,EAAE;AAAA,QACjF,WAAW,QAAQ,iBAAiB;AAClC,gBAAM,IAAI,MAAM,mBAAmB,IAAI,GAAG,+BAA+B,MAAM,IAAI,EAAE;AAAA,QACvF;AAGA,YAAI;AACJ,YAAI,EAAE,SAAS,YAAY;AACzB,kBAAQ,KAAK,KAAK,OAAO,KAAK,SAAS,EAAE,IAAI,CAAC;AAC9C,gBAAM,IAAI,SAAS,MAAM,KAAK;AAC9B,gBAAM,IAAI,MAAM,OAAO,GAAK;AAAA,QAC9B,OAAO;AACL,gBAAM,QAAQ,MAAM,KAAK,YAAY;AACrC,cAAI,MAAM,SAAS,MAAM,EAAG,OAAM,GAAG,aAAa,WAAW,CAAC,SAAS,MAAM,MAAM,MAAM,KAAK,IAAI,CAAC,SAAS,MAAM,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,mBACjI,MAAM,SAAS,SAAS,KAAK,MAAM,SAAS,MAAM,EAAG,OAAM,GAAG,CAAC,OAAO,QAAQ,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,cAC1G,OAAM,IAAI,MAAM,WAAW,MAAM,IAAI,kCAAkC;AAC5E,cAAI,EAAE,SAAS,OAAO;AACpB,kBAAM,QAAQ,MAAM,WAAW,OAAO,KAAK,IAAI;AAC/C,gBAAI,CAAC,MAAO,OAAM,IAAI,MAAM,WAAW,MAAM,IAAI,uBAAuB;AACxE,oBAAQ;AAAA,UACV,OAAO;AACL,kBAAM,MAAM,KAAK,SAAS,IAAI,EAAE,QAAQ,KAAK,CAAC;AAC9C,kBAAM,QAAQ,MAAM,YAAY,OAAO,KAAK,KAAK,IAAI;AACrD,gBAAI,CAAC,MAAO,OAAM,IAAI,MAAM,WAAW,MAAM,IAAI,4BAA4B,GAAG,QAAQ;AACxF,oBAAQ;AAAA,UACV;AAAA,QACF;AAIA,YAAI,EAAE,SAAS,OAAO;AACpB,gBAAM,IAAI,EAAE,MAAM,CAAC,SAAS,OAAO,wBAAwB,KAAK,GAAG,KAAK,KAAK,CAAC;AAC9E,cAAI,aAAa;AACf,kBAAM,IAAI,MAAM,IAAI,EAAE,MAAM,CAAC,YAAY,YAAY,UAAU,YAAY,MAAM,WAAW,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC;AACnH,gBAAI,EAAE,SAAS,GAAG;AAChB,oBAAM,IAAI,MAAM,WAAW,MAAM,IAAI,uHAAuH,EAAE,OAAO,KAAK,KAAK,QAAQ,EAAE,IAAI,EAAE,GAAG;AAAA,YACpM;AAAA,UACF;AAAA,QACF;AAGA,YAAI,EAAE,SAAS,YAAY;AACzB,gBAAM,IAAI,OAAO,OAAO,EAAE,IAAI;AAAA,QAChC,OAAO;AACL,gBAAM,QAAQ,KAAK,KAAK,QAAQ,IAAI,KAAK,SAAS,EAAE,IAAI,CAAC,aAAa;AACtE,gBAAM,IAAI,GAAG,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACpD,gBAAM,IAAI,OAAO,EAAE,MAAM,KAAK;AAC9B,cAAI;AACF,kBAAM,IAAI,OAAO,OAAO,EAAE,IAAI;AAAA,UAChC,SAAS,GAAG;AACV,kBAAM,IAAI,OAAO,OAAO,EAAE,IAAI;AAC9B,kBAAM;AAAA,UACR;AACA,gBAAM,IAAI,GAAG,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACtE;AAIA,YAAI,EAAE,SAAS,SAAS,YAAY,cAAc,QAAQ,kBAAkB,QAAQ;AAClF,gBAAM,KAAK,QAAQ,YAAa,MAAM,aAAa,EAAE,MAAM,GAAG;AAC9D,cAAI,IAAI;AACN,uBAAW,WAAW,QAAQ,iBAAkB,OAAM,IAAI,EAAE,MAAM,CAAC,WAAW,SAAS,SAAS,EAAE,GAAG,KAAK,KAAK,CAAC;AAAA,UAClH;AAAA,QACF;AAAA,MACF,UAAE;AACA,cAAM,IAAI,GAAG,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AACnE,cAAM,IAAI,GAAG,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACtE;AACA,UAAI,UAAU;AACZ,qBAAa,CAAC;AACd,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,UAAU;AACd,mBAAa,OAAO,CAAC;AAAA,IACvB;AAAA,EACF;AACF;AAOO,SAAS,gBAAgB,QAAuB,MAAc,IAAY,MAAc,MAAkD;AAC/I,MAAI,SAAS,YAAY;AACvB,UAAM,SAAS,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,YAAY,EAAE,SAAS,WAAW,CAAC;AAE9E,UAAM,SAAS,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,GAAG,CAAC,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC;AACnF,UAAM,MAAM,UAAU,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,MAAM,EAAE,KAAK,MAAM,GAAG,CAAC,YAAY,MAAM,EAAE,EAAE,GAAG,MAAM,IAAI,IAAI;AAC/G,WAAO,MAAM,OAAO,IAAI,IAAI,IAAI,KAAK,OAAO;AAAA,EAC9C;AACA,QAAM,WAAW,OAAO,OAAO,CAAC,MAAM,wBAAwB,KAAK,EAAE,IAAI,CAAC;AAC1E,SAAO,UAAU,UAAU,MAAM,IAAI,IAAI;AAC3C;AAEA,eAAe,WAAW,KAAa,KAAwC,MAA0D;AACvI,QAAM,UAAU,MAAM,IAAI,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC9D,aAAW,KAAK,QAAS,KAAI,EAAE,YAAY,KAAK,EAAE,KAAK,SAAS,MAAM,EAAG,QAAO,KAAK,KAAK,KAAK,EAAE,IAAI;AACrG,aAAW,KAAK,SAAS;AACvB,QAAI,CAAC,EAAE,YAAY,KAAK,EAAE,KAAK,WAAW,UAAU,EAAG;AACvD,UAAM,SAAS,MAAM,WAAW,KAAK,KAAK,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI;AACjE,QAAI,OAAQ,QAAO;AAAA,EACrB;AACA,SAAO;AACT;AAGA,eAAe,YAAY,KAAa,KAAa,KAAwC,MAAkC,QAAQ,GAA2B;AAChK,QAAM,UAAU,MAAM,IAAI,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAC9D,MAAI,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,EAAE,SAAS,GAAG,EAAG,QAAO;AAC9D,MAAI,SAAS,EAAG,QAAO;AACvB,aAAW,KAAK,SAAS;AACvB,QAAI,CAAC,EAAE,YAAY,EAAG;AACtB,UAAM,SAAS,MAAM,YAAY,KAAK,KAAK,KAAK,EAAE,IAAI,GAAG,KAAK,KAAK,MAAM,QAAQ,CAAC;AAClF,QAAI,OAAQ,QAAO;AAAA,EACrB;AACA,SAAO;AACT;AAOA,eAAe,oBAAoB,KAAa,KAAwC,MAAkC;AACxH,QAAM,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,KAAK,gBAAgB,CAAC,EAAE,MAAM,MAAM,IAAI;AAC5E,MAAI,MAAM,GAAG,OAAO,MAAQ;AAC1B,UAAM,IAAI,MAAM,WAAW,GAAG,6HAA6H;AAAA,EAC7J;AACF;AAQA,eAAe,sBAAsB,QAAgB,KAA8B;AACjF,QAAM,IAAI,MAAM,IAAI,EAAE,MAAM,CAAC,YAAY,aAAa,OAAO,MAAM,GAAG,KAAK,IAAI,CAAC;AAEhF,QAAM,OAAO,EAAE,OAAO,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,uBAAuB,KAAK,CAAC,CAAC;AAC5E,QAAM,MAAM,MAAM,QAAQ,wBAAwB,EAAE,EAAE,KAAK;AAC3D,MAAI,EAAE,SAAS,KAAK,CAAC,KAAK;AACxB,UAAM,IAAI,MAAM,mCAAmC,MAAM,2BAA2B,EAAE,OAAO,KAAK,KAAK,QAAQ,EAAE,IAAI,EAAE,4BAA4B;AAAA,EACrJ;AACA,MAAI,YAAY,KAAK,GAAG,GAAG;AACzB,UAAM,IAAI,MAAM,mCAAmC,MAAM,qHAAqH;AAAA,EAChL;AACA,SAAO;AACT;AAEA,eAAe,aAAa,QAAgB,KAAqC;AAC/E,QAAM,IAAI,MAAM,IAAI,EAAE,MAAM,CAAC,YAAY,QAAQ,GAAG,MAAM,kBAAkB,oBAAoB,GAAG,KAAK,IAAI,CAAC;AAC7G,SAAO,EAAE,SAAS,IAAI,EAAE,OAAO,KAAK,KAAK,OAAO;AAClD;AA6CA,eAAsB,OAAO,MAAc,UAA+B,CAAC,GAAqB;AAC9F,QAAM,WAAW,QAAQ,YAAc,MAAM,OAAO,UAAU;AAC9D,QAAM,MAAM,SAAS;AACrB,QAAM,OAAO,MAAM,OAAO,MAAW;AACrC,QAAM,UACJ,QAAQ,YACP,QAAQ,WACL,cAAc,EAAE,UAAU,QAAQ,UAAU,KAAK,QAAQ,QAAQ,OAAO,WAAW,GAAG,GAAG,QAAQ,OAAO,CAAC,IACzG,cAAc,EAAE,MAAM,KAAK,SAAS,QAAQ,SAAS,kBAAkB,QAAQ,kBAAkB,UAAU,QAAQ,UAAU,iBAAiB,QAAQ,gBAAgB,CAAC;AAC7K,QAAM,UAAU,cAAc;AAAA,IAC5B;AAAA,IACA,QAAQ,QAAQ,WAAW,IAAI,aAAa,WAAW;AAAA,IACvD,SAAS,YAAY,KAAK,KAAK,IAAI,QAAQ,UAAU,GAAG,aAAa,CAAC;AAAA,IACtE,OAAO,QAAQ;AAAA,EACjB,CAAC;AACD,MAAI,QAAQ,QAAS,cAAa,SAAS,QAAQ,SAAS,QAAQ,YAAY,MAAM,CAAC,EAAE;AACzF,MAAI,QAAQ,WAAW,SAAS,SAAS,QAAQ;AAC/C,UAAM,SAAS,SAAS;AACxB,UAAM,OAAO,QAAQ,QAAQ,IAAI,QAAQ;AACzC,QAAI,QAAQ;AACZ,YAAQ,UAAU,CAAC,MAAM;AACvB,YAAM,MAAM,GAAG,EAAE,MAAM,IAAI,EAAE,SAAS,OAAO,EAAE;AAC/C,UAAI,EAAE,aAAa,UAAU,IAAK;AAClC,UAAI,EAAE,WAAW,eAAe,EAAE,WAAW,YAAY,CAAC,EAAE,SAAS;AACnE,gBAAQ;AACR,aAAK,IAAI,UAAU,EAAE,KAAK,YAAY;AACpC,gBAAM,EAAE,SAAS,IAAI,MAAM,OAAO,eAAe;AAAA,YAC/C,MAAM;AAAA,YACN,SAAS,GAAG,IAAI,IAAI,EAAE,SAAS,WAAW,EAAE,SAAS,GAAG;AAAA,YACxD,QAAQ,EAAE,SAAS,OAAO,MAAM,GAAG,GAAI;AAAA,YACvC,SAAS,CAAC,cAAc,qBAAqB,OAAO;AAAA,YACpD,WAAW;AAAA,YACX,UAAU;AAAA,UACZ,CAAC;AACD,cAAI,aAAa,EAAG,OAAM,QAAQ,QAAQ;AAAA,mBACjC,aAAa,EAAG,OAAM,QAAQ,KAAK;AAAA,cACvC,SAAQ,QAAQ;AAAA,QACvB,CAAC;AAAA,MACH,WAAW,EAAE,WAAW,SAAS;AAC/B,gBAAQ;AACR,aAAK,IAAI,UAAU,EAAE,KAAK,YAAY;AACpC,gBAAM,EAAE,SAAS,IAAI,MAAM,OAAO,eAAe;AAAA,YAC/C,MAAM;AAAA,YACN,SAAS,GAAG,IAAI,IAAI,EAAE,SAAS,WAAW,EAAE,SAAS,OAAO,EAAE,gCAAgC,QAAQ,MAAM,GAAG;AAAA,YAC/G,SAAS,CAAC,eAAe,OAAO;AAAA,YAChC,WAAW;AAAA,YACX,UAAU;AAAA,UACZ,CAAC;AACD,cAAI,aAAa,EAAG,OAAM,QAAQ,QAAQ;AAAA,cACrC,SAAQ,QAAQ;AAAA,QACvB,CAAC;AAAA,MACH,WAAW,EAAE,WAAW,WAAW,EAAE,OAAO;AAC1C,gBAAQ;AACR,aAAK,IAAI,UAAU,EAAE;AAAA,UAAK,MACxB,OAAO,eAAe,EAAE,MAAM,WAAW,SAAS,GAAG,IAAI,sBAAsB,QAAQ,EAAE,SAAS,QAAW,SAAS,CAAC,IAAI,EAAE,CAAC;AAAA,QAChI;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACA,UAAQ,MAAM;AACd,SAAO;AACT;","names":["exe"]}

package/dist/github-Ds4DWDq9.d.ts

@@ -0,0 +1,37 @@
+import { R as Release } from './core-DmEjLKLp.js';
+
+/**
+ * GitHub Releases, the same way the Go module reads them: the latest
+ * non-draft, non-prerelease release, its assets matched to a platform by
+ * name tokens, and its checksum file when it publishes one.
+ */
+
+interface GitHubAsset {
+    name: string;
+    url: string;
+    size: number;
+}
+interface GitHubRelease extends Release {
+    assets: GitHubAsset[];
+}
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+interface GitHubOptions {
+    fetch?: FetchLike;
+    token?: string;
+    api?: string;
+}
+declare function splitRepo(repo: string): [string, string];
+declare function fetchLatestRelease(repo: string, options?: GitHubOptions, signal?: AbortSignal): Promise<GitHubRelease | null>;
+/**
+ * Pick the asset built for this program on this platform by tokenising the
+ * name on "-", "_", "." and " " and requiring one OS token and one
+ * architecture token (aliases understood). The asset that starts with the
+ * program name and has the fewest unexplained words wins, so
+ * "app-helper-darwin-arm64" loses to "app-darwin-arm64". Darwin also accepts
+ * "universal".
+ */
+declare function pickAsset(assets: GitHubAsset[], binName: string, os: string, arch: string): GitHubAsset | null;
+/** Is `latest` strictly newer than `current`? Unknown current means yes; unknown latest means no. */
+declare function isNewer(latest: string, current: string | undefined): boolean;
+
+export { type FetchLike as F, type GitHubAsset as G, type GitHubRelease as a, fetchLatestRelease as f, isNewer as i, pickAsset as p, splitRepo as s };

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+import { S as StateStorage } from './core-DmEjLKLp.js';
+export { A as Adapter, c as AdapterKind, I as InstallOptions, d as InstallOutcome, P as Policy, R as Release, e as Status, b as Updater, a as UpdaterLike, f as UpdaterOptions, U as UpdaterState, g as createUpdater, m as memoryStorage, p as parsePolicy, w as webStorage } from './core-DmEjLKLp.js';
+export { RunRequest, RunResult, Runner, SourceAdapterOptions, pathWithTools, sourceAdapter } from './source.js';
+export { G as GitHubAsset, a as GitHubRelease, f as fetchLatestRelease, i as isNewer, p as pickAsset, s as splitRepo } from './github-Ds4DWDq9.js';
+export { C as CardLabels, M as MountCardOptions, d as defaultCardLabels, m as mountCard } from './card-BFhpWbA5.js';
+export { C as CARD_CSS, a as CARD_POSITIONS, b as CARD_TOKENS, c as CardPosition, d as CardStyleOptions, e as CardTheme, f as CardToken, g as CardVars, h as cardVars, i as injectStyles } from './styles-zfa0Pc0l.js';
+
+/**
+ * A JSON file, for Electron's main process (point it at app.getPath('userData'))
+ * or any Node program. Writes are atomic: temp file, then rename.
+ */
+declare function fileStorage(path: string): StateStorage;
+
+export { StateStorage, fileStorage };

package/dist/index.js

@@ -0,0 +1,49 @@
+import {
+  defaultCardLabels,
+  mountCard
+} from "./chunk-K7IY5EW6.js";
+import {
+  fetchLatestRelease,
+  fileStorage,
+  isNewer,
+  pickAsset,
+  splitRepo
+} from "./chunk-CPOOJ2JD.js";
+import {
+  createUpdater,
+  memoryStorage,
+  parsePolicy,
+  webStorage
+} from "./chunk-SRQ3JWJK.js";
+import {
+  pathWithTools,
+  sourceAdapter
+} from "./chunk-MI26ZEPP.js";
+import {
+  CARD_CSS,
+  CARD_POSITIONS,
+  CARD_TOKENS,
+  cardVars,
+  injectStyles
+} from "./chunk-POOH3Z7G.js";
+export {
+  CARD_CSS,
+  CARD_POSITIONS,
+  CARD_TOKENS,
+  cardVars,
+  createUpdater,
+  defaultCardLabels,
+  fetchLatestRelease,
+  fileStorage,
+  injectStyles,
+  isNewer,
+  memoryStorage,
+  mountCard,
+  parsePolicy,
+  pathWithTools,
+  pickAsset,
+  sourceAdapter,
+  splitRepo,
+  webStorage
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}