@pixelbyte-software/pixcode 1.35.4 → 1.36.0

package/dist-server/server/services/startup-update.js

@@ -0,0 +1,208 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawn, spawnSync } from 'node:child_process';
+import { Readable } from 'node:stream';
+const packageName = '@pixelbyte-software/pixcode';
+const registryUrl = `https://registry.npmjs.org/${encodeURIComponent(packageName)}`;
+const startupUpdateAppliedEnv = 'PIXCODE_STARTUP_UPDATE_APPLIED';
+const isTruthyEnv = (value) => /^(1|true|yes|on)$/i.test(String(value || '').trim());
+export function compareVersions(left, right) {
+    const a = String(left || '0.0.0').replace(/^v/, '').split('.').map(Number);
+    const b = String(right || '0.0.0').replace(/^v/, '').split('.').map(Number);
+    for (let i = 0; i < Math.max(a.length, b.length); i += 1) {
+        const av = Number.isFinite(a[i]) ? a[i] : 0;
+        const bv = Number.isFinite(b[i]) ? b[i] : 0;
+        if (av !== bv)
+            return av - bv;
+    }
+    return 0;
+}
+function commandName(name) {
+    if (process.platform === 'win32') {
+        return name === 'npm' ? 'npm.cmd' : `${name}.exe`;
+    }
+    return name;
+}
+function runCapture(command, args, options = {}) {
+    const result = spawnSync(command, args, {
+        cwd: options.cwd,
+        env: options.env || process.env,
+        encoding: 'utf8',
+        shell: false,
+    });
+    if (result.error)
+        throw result.error;
+    if (result.status !== 0) {
+        throw new Error((result.stderr || result.stdout || `${command} exited with code ${result.status}`).trim());
+    }
+    return result.stdout.trim();
+}
+function runInherited(command, args, options = {}) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            env: options.env || process.env,
+            stdio: 'inherit',
+            shell: false,
+            windowsHide: false,
+        });
+        child.on('error', reject);
+        child.on('close', (code) => {
+            if (code === 0) {
+                resolve();
+                return;
+            }
+            reject(new Error(`${command} ${args.join(' ')} exited with code ${code}`));
+        });
+    });
+}
+async function readLatestPackageMetadata() {
+    const response = await fetch(registryUrl, { headers: { accept: 'application/json' } });
+    if (!response.ok)
+        throw new Error(`Registry returned HTTP ${response.status}`);
+    const metadata = await response.json();
+    const latestVersion = metadata?.['dist-tags']?.latest;
+    const latestEntry = latestVersion ? metadata?.versions?.[latestVersion] : null;
+    const tarballUrl = latestEntry?.dist?.tarball;
+    if (!latestVersion || !tarballUrl) {
+        throw new Error('Registry response missing latest version or tarball URL.');
+    }
+    return { latestVersion, tarballUrl };
+}
+async function installNpmGlobal(latestVersion, color) {
+    const npm = commandName('npm');
+    color?.info && console.log(`${color.info('[INFO]')} Installing ${packageName}@${latestVersion} globally before opening the port...`);
+    await runInherited(npm, ['install', '-g', `${packageName}@${latestVersion}`]);
+}
+async function updateGitCheckout(appRoot, color) {
+    const git = commandName('git');
+    const npm = commandName('npm');
+    const currentBranch = runCapture(git, ['branch', '--show-current'], { cwd: appRoot });
+    if (currentBranch !== 'main') {
+        return { updated: false, skipped: true, reason: `git checkout is on ${currentBranch || 'detached HEAD'}, not main` };
+    }
+    const status = runCapture(git, ['status', '--porcelain'], { cwd: appRoot });
+    if (status) {
+        return { updated: false, skipped: true, reason: 'git checkout has local changes' };
+    }
+    color?.info && console.log(`${color.info('[INFO]')} Fetching origin/main before opening the port...`);
+    await runInherited(git, ['fetch', 'origin', 'main'], { cwd: appRoot });
+    const localHead = runCapture(git, ['rev-parse', 'HEAD'], { cwd: appRoot });
+    const remoteHead = runCapture(git, ['rev-parse', 'origin/main'], { cwd: appRoot });
+    if (localHead === remoteHead) {
+        return { updated: false };
+    }
+    color?.info && console.log(`${color.info('[INFO]')} Pulling latest Pixcode from GitHub before opening the port...`);
+    await runInherited(git, ['pull', '--ff-only', 'origin', 'main'], { cwd: appRoot });
+    color?.info && console.log(`${color.info('[INFO]')} Reconciling dependencies after git update...`);
+    await runInherited(npm, ['install', '--no-audit', '--no-fund'], { cwd: appRoot });
+    return { updated: true, version: readPackageVersion(appRoot) };
+}
+function readPackageVersion(appRoot) {
+    try {
+        const raw = fs.readFileSync(path.join(appRoot, 'package.json'), 'utf8');
+        return JSON.parse(raw).version || null;
+    }
+    catch {
+        return null;
+    }
+}
+async function extractRuntimeTarball({ runtimeDir, tarballUrl, latestVersion, currentVersion, color }) {
+    color?.info && console.log(`${color.info('[INFO]')} Updating runtime ${currentVersion} -> ${latestVersion} before opening the port...`);
+    const tarballRes = await fetch(tarballUrl);
+    if (!tarballRes.ok || !tarballRes.body) {
+        throw new Error(`Tarball fetch failed: HTTP ${tarballRes.status}`);
+    }
+    const stagingDir = path.join(runtimeDir, '.staging');
+    const backupDir = path.join(runtimeDir, '.previous');
+    fs.rmSync(stagingDir, { recursive: true, force: true });
+    fs.mkdirSync(stagingDir, { recursive: true });
+    const tarModule = await import('tar');
+    const tarExtract = tarModule.x || tarModule.default?.x;
+    if (!tarExtract)
+        throw new Error('tar extractor not available');
+    await new Promise((resolve, reject) => {
+        const nodeStream = typeof Readable.fromWeb === 'function' && tarballRes.body?.getReader
+            ? Readable.fromWeb(tarballRes.body)
+            : tarballRes.body;
+        const extractor = tarExtract({ cwd: stagingDir, strip: 1 });
+        nodeStream.pipe(extractor);
+        extractor.on('finish', resolve);
+        extractor.on('error', reject);
+        nodeStream.on('error', reject);
+    });
+    fs.rmSync(backupDir, { recursive: true, force: true });
+    fs.mkdirSync(backupDir, { recursive: true });
+    for (const entry of fs.readdirSync(stagingDir)) {
+        const src = path.join(stagingDir, entry);
+        const dst = path.join(runtimeDir, entry);
+        if (fs.existsSync(dst)) {
+            fs.renameSync(dst, path.join(backupDir, entry));
+        }
+        fs.renameSync(src, dst);
+    }
+    fs.rmSync(stagingDir, { recursive: true, force: true });
+    const depsChanged = (() => {
+        try {
+            const prevPkg = JSON.parse(fs.readFileSync(path.join(backupDir, 'package.json'), 'utf8'));
+            const nextPkg = JSON.parse(fs.readFileSync(path.join(runtimeDir, 'package.json'), 'utf8'));
+            return JSON.stringify(prevPkg.dependencies || {}) !== JSON.stringify(nextPkg.dependencies || {});
+        }
+        catch {
+            return true;
+        }
+    })();
+    if (depsChanged) {
+        color?.info && console.log(`${color.info('[INFO]')} Reconciling runtime node_modules...`);
+        await runInherited(commandName('npm'), ['install', '--production', '--no-audit', '--no-fund', '--no-save'], { cwd: runtimeDir });
+    }
+}
+export async function runStartupAutoUpdate({ appRoot, currentVersion, installMode, color, } = {}) {
+    if (isTruthyEnv(process.env.PIXCODE_DISABLE_STARTUP_UPDATE)) {
+        return { updated: false, skipped: true, reason: 'disabled by PIXCODE_DISABLE_STARTUP_UPDATE' };
+    }
+    if (isTruthyEnv(process.env.PIXCODE_SKIP_UPDATE_CHECK)) {
+        return { updated: false, skipped: true, reason: 'disabled by PIXCODE_SKIP_UPDATE_CHECK' };
+    }
+    if (process.env[startupUpdateAppliedEnv] === '1') {
+        return { updated: false, skipped: true, reason: 'already applied in this launch chain' };
+    }
+    if (!appRoot || !currentVersion) {
+        return { updated: false, skipped: true, reason: 'missing app root or current version' };
+    }
+    try {
+        if (installMode === 'git') {
+            return await updateGitCheckout(appRoot, color);
+        }
+        const { latestVersion, tarballUrl } = await readLatestPackageMetadata();
+        if (compareVersions(latestVersion, currentVersion) <= 0) {
+            return { updated: false, latestVersion };
+        }
+        if (process.env.PIXCODE_RUNTIME_DIR) {
+            await extractRuntimeTarball({
+                runtimeDir: process.env.PIXCODE_RUNTIME_DIR,
+                tarballUrl,
+                latestVersion,
+                currentVersion,
+                color,
+            });
+            return { updated: true, version: latestVersion, restartMode: 'exit42' };
+        }
+        await installNpmGlobal(latestVersion, color);
+        return { updated: true, version: latestVersion, restartMode: 'reexec' };
+    }
+    catch (error) {
+        return {
+            updated: false,
+            failed: true,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+export function startupUpdateReexecEnv() {
+    return {
+        ...process.env,
+        [startupUpdateAppliedEnv]: '1',
+    };
+}
+//# sourceMappingURL=startup-update.js.map

package/dist-server/server/services/startup-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-update.js","sourceRoot":"","sources":["../../../server/services/startup-update.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,WAAW,GAAG,8BAA8B,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AACpF,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;AAEjE,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAErF,MAAM,UAAU,eAAe,CAAC,IAAI,EAAE,KAAK;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,IAAI;IACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC/B,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,yBAAyB;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IACtD,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,MAAM,UAAU,GAAG,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC;IAC9C,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,aAAa,EAAE,KAAK;IAClD,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,WAAW,IAAI,aAAa,sCAAsC,CAAC,CAAC;IACrI,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAO,EAAE,KAAK;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,aAAa,IAAI,eAAe,YAAY,EAAE,CAAC;IACvH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;IACtG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAEvE,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gEAAgE,CAAC,CAAC;IACpH,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnF,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACnG,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAO;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,EAAE;IACnG,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,cAAc,OAAO,aAAa,6BAA6B,CAAC,CAAC;IAExI,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACrD,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAEhE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpC,MAAM,UAAU,GAAG,OAAO,QAAQ,CAAC,OAAO,KAAK,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,SAAS;YACrF,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YACnC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QACpB,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACnG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QAC1F,MAAM,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IACnI,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,OAAO,EACP,cAAc,EACd,WAAW,EACX,KAAK,GACN,GAAG,EAAE;IACJ,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,GAAG,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC;QACH,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,MAAM,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,MAAM,yBAAyB,EAAE,CAAC;QACxE,IAAI,eAAe,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,qBAAqB,CAAC;gBAC1B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;gBAC3C,UAAU;gBACV,aAAa;gBACb,cAAc;gBACd,KAAK;aACN,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,GAAG,OAAO,CAAC,GAAG;QACd,CAAC,uBAAuB,CAAC,EAAE,GAAG;KAC/B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pixelbyte-software/pixcode",
-  "version": "1.35.4",
-  "description": "Pixcode — a desktop and mobile web UI for Claude Code, Cursor CLI, Codex, Gemini CLI, Qwen Code, and OpenCode.",
+  "version": "1.36.0",
+  "description": "Self-hosted AI coding agent control room for Claude Code, Cursor CLI, OpenAI Codex, Gemini CLI, Qwen Code, and OpenCode with chat, files, shell, Git, orchestration, API keys, Telegram, MCP, plugins, themes, and desktop/server deployment.",
   "type": "module",
   "main": "dist-server/server/index.js",
   "bin": {
@@ -50,23 +50,48 @@
     "update:platform": "./update-platform.sh"
   },
   "keywords": [
+    "pixcode",
+    "ai coding agent",
+    "ai coding assistant",
+    "self-hosted ai ide",
+    "self-hosted developer tool",
+    "coding agent ui",
+    "coding agent dashboard",
+    "multi-agent orchestration",
+    "agent orchestration",
     "claude code",
     "claude-code",
-    "pixcode",
+    "claude-code-ui",
+    "claude code ui",
+    "anthropic",
     "codex",
-    "gemini",
-    "gemini-cli",
+    "codex-ui",
+    "openai codex",
+    "openai-codex",
+    "openai",
     "cursor",
     "cursor-cli",
+    "cursor cli ui",
+    "gemini",
+    "gemini-cli",
+    "gemini cli ui",
+    "qwen",
+    "qwen-code",
+    "qwen code ui",
     "opencode",
     "opencode-cli",
-    "anthropic",
-    "openai",
+    "opencode ui",
     "google",
-    "coding-agent",
+    "mcp",
+    "mcp manager",
+    "telegram bot",
+    "api automation",
+    "git ui",
+    "terminal ui",
     "web-ui",
-    "ui",
-    "mobile IDE"
+    "desktop app",
+    "mobile IDE",
+    "yapay zeka kodlama"
   ],
   "author": "Pixcode Contributors",
   "license": "AGPL-3.0-or-later",

package/server/cli.js

@@ -18,9 +18,11 @@ import fs from 'fs';
 import path from 'path';
 import os from 'os';
 import net from 'node:net';
+import { spawn } from 'node:child_process';
 
 import { findAppRoot, getModuleDir } from './utils/runtime-paths.js';
 import { buildDaemonCliCommand, handleDaemonCommand, hasInstalledDaemonUnit } from './daemon-manager.js';
+import { runStartupAutoUpdate, startupUpdateReexecEnv } from './services/startup-update.js';
 
 const __dirname = getModuleDir(import.meta.url);
 // The CLI is compiled into dist-server/server, but it still needs to read the top-level
@@ -62,6 +64,7 @@ const c = {
 // Load package.json for version info
 const packageJsonPath = path.join(APP_ROOT, 'package.json');
 const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
+const installMode = fs.existsSync(path.join(APP_ROOT, '.git')) ? 'git' : 'npm';
 // Match the runtime fallback in load-env.js so "pixcode status" reports the same default
 // database location that the backend will actually use when no DATABASE_PATH is configured.
 const DEFAULT_DATABASE_PATH = path.join(os.homedir(), '.pixcode', 'auth.db');
@@ -640,13 +643,62 @@ async function sandboxCommand(args) {
 
 // Start the server
 async function startServer() {
-    // Check for updates silently on startup
-    checkForUpdates(true);
-
     // Import and run the server
     await import('./index.js');
 }
 
+async function reexecAfterStartupUpdate() {
+    await new Promise((resolve, reject) => {
+        const child = spawn(process.execPath, process.argv.slice(1), {
+            cwd: process.cwd(),
+            env: startupUpdateReexecEnv(),
+            stdio: 'inherit',
+            windowsHide: false,
+        });
+        child.on('error', reject);
+        child.on('close', (code, signal) => {
+            if (signal) {
+                process.kill(process.pid, signal);
+                return;
+            }
+            process.exit(code ?? 0);
+        });
+    });
+}
+
+async function runStartupUpdateGate() {
+    const result = await runStartupAutoUpdate({
+        appRoot: APP_ROOT,
+        currentVersion: packageJson.version,
+        installMode,
+        color: c,
+    });
+
+    if (result.failed) {
+        console.log(`${c.warn('[WARN]')} Startup update check failed: ${result.error}`);
+        console.log(`${c.tip('[TIP]')} Continuing with the current version (${packageJson.version}).`);
+        return false;
+    }
+
+    if (result.skipped && result.reason && process.env.PIXCODE_DEBUG_STARTUP_UPDATE === '1') {
+        console.log(`${c.dim('[INFO]')} Startup update skipped: ${result.reason}`);
+    }
+
+    if (!result.updated) {
+        return false;
+    }
+
+    console.log(`${c.ok('[OK]')} Startup update applied${result.version ? ` (${result.version})` : ''}.`);
+    if (result.restartMode === 'exit42') {
+        console.log(`${c.info('[INFO]')} Restarting through the desktop wrapper before opening the port...`);
+        process.exit(42);
+    }
+
+    console.log(`${c.info('[INFO]')} Restarting Pixcode on the updated code before opening the port...`);
+    await reexecAfterStartupUpdate();
+    return true;
+}
+
 async function isPortOpen(port, timeoutMs = 800) {
     return await new Promise((resolve) => {
         const socket = net.createConnection({ host: '127.0.0.1', port: Number(port) });
@@ -888,6 +940,9 @@ async function main() {
 
     switch (command) {
         case 'start':
+            if (await runStartupUpdateGate()) {
+                break;
+            }
             if (await maybeAutoDaemonStart(options)) {
                 break;
             }

package/server/daemon/manager.js

@@ -394,7 +394,6 @@ export function startDaemon({ nodePath, cliEntryPath, serverPort, databasePath }
       windowsHide: true,
       env: {
         ...process.env,
-        PIXCODE_SKIP_UPDATE_CHECK: '1',
         SERVER_PORT: String(resolvedPort),
         ...(resolvedDatabasePath ? { DATABASE_PATH: resolvedDatabasePath } : {})
       }

package/server/database/db.js

@@ -376,7 +376,7 @@ const userDb = {
 // API key operations
 // ---------------------------------------------------------------------------
 const apiKeysDb = {
-    generateApiKey: () => 'ck_' + crypto.randomBytes(32).toString('hex'),
+    generateApiKey: () => 'px_' + crypto.randomBytes(32).toString('hex'),
 
     createApiKey: (userId, keyName) => {
         const apiKey = apiKeysDb.generateApiKey();
@@ -493,7 +493,7 @@ const credentialsDb = {
 // ---------------------------------------------------------------------------
 const DEFAULT_NOTIFICATION_PREFERENCES = {
     channels: { inApp: false, webPush: false },
-    events: { actionRequired: true, stop: true, error: true },
+    events: { actionRequired: true, stop: true, error: true, updates: true },
 };
 
 const normalizeNotificationPreferences = (value) => {
@@ -507,6 +507,7 @@ const normalizeNotificationPreferences = (value) => {
             actionRequired: source.events?.actionRequired !== false,
             stop: source.events?.stop !== false,
             error: source.events?.error !== false,
+            updates: source.events?.updates !== false,
         },
     };
 };

package/server/middleware/auth.js

@@ -5,6 +5,7 @@ import { IS_PLATFORM } from '../constants/config.js';
 
 // Use env var if set, otherwise auto-generate a unique secret per installation
 const JWT_SECRET = process.env.JWT_SECRET || appConfigDb.getOrCreateJwtSecret();
+const isPixcodeApiKey = (token) => typeof token === 'string' && (token.startsWith('px_') || token.startsWith('ck_'));
 
 // Optional API key middleware
 const validateApiKey = (req, res, next) => {
@@ -42,9 +43,8 @@ const authenticateToken = async (req, res, next) => {
   //  - X-API-Key: <apikey>            (legacy, kept for /api/agent compatibility)
   //  - ?token=<jwt>                    (EventSource workaround — can't set headers)
   //  - ?apiKey=<apikey>                (EventSource workaround)
-  // Auth-token mode is decided by the prefix: keys generated by Pixcode start
-  // with `ck_` (see apiKeysDb.generateApiKey) — anything else falls through
-  // to JWT verification.
+  // Auth-token mode is decided by the prefix: new keys generated by Pixcode
+  // start with `px_`; older `ck_` keys remain valid for existing installs.
   const authHeader = req.headers['authorization'];
   const bearerToken = authHeader && authHeader.startsWith('Bearer ') ? authHeader.slice(7).trim() : null;
   const apiKeyHeader = req.headers['x-api-key'];
@@ -53,8 +53,8 @@ const authenticateToken = async (req, res, next) => {
 
   // Try API-key paths first when the credential is unambiguously an API key.
   const explicitApiKey = apiKeyHeader || queryApiKey
-    || (bearerToken && bearerToken.startsWith('ck_') ? bearerToken : null)
-    || (queryToken && queryToken.startsWith('ck_') ? queryToken : null);
+    || (isPixcodeApiKey(bearerToken) ? bearerToken : null)
+    || (isPixcodeApiKey(queryToken) ? queryToken : null);
 
   if (explicitApiKey) {
     try {
@@ -131,16 +131,17 @@ const authenticateWebSocket = (token) => {
     }
   }
 
-  // Normal OSS validation — accept either an API key (`ck_…`) or a JWT.
+  // Normal OSS validation — accept either an API key (`px_…` or legacy
+  // `ck_…`) or a JWT.
   // Mirrors the REST `authenticateToken` middleware so any tool that has
-  // a `ck_` key (CI scripts, the api-tester subagent, the user's own
+  // a Pixcode API key (CI scripts, the api-tester subagent, the user's own
   // automation, ...) can also open a WebSocket without first exchanging
   // the key for a JWT.
   if (!token) {
     return null;
   }
 
-  if (typeof token === 'string' && token.startsWith('ck_')) {
+  if (isPixcodeApiKey(token)) {
     try {
       const user = apiKeysDb.validateApiKey(token);
       if (!user) return null;