akanjs 3.0.0-beta.28 → 3.0.0-beta.29

package/vendor/@akanjs/native/packages/cli/src/lib/publish.ts

@@ -2,7 +2,7 @@
 
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
-import { publishAppUpdate } from "../platforms/desktop-update.ts";
+import { assertSameServer, publishAppUpdate } from "../platforms/desktop-update.ts";
 import { BUNDLE_FILE, readBundleInfo } from "./compat.ts";
 import { CliError, log } from "./log.ts";
 import type { BuildContext } from "./prepare.ts";
@@ -41,6 +41,23 @@ export function nextSequence(dir: string, channel: string, now = Math.floor(Date
   return previous + 1;
 }
 
+/** `<out>/<os>-<arch>` for a desktop release, `<out>/<platform>` for a phone's web bundle. */
+export function releaseDir(out: string, platform: ReleasePlatform): string {
+  const desktop = platform === "macos" || platform === "windows" || platform === "linux";
+  return join(out, desktop ? `${platform}-${hostArch()}` : platform);
+}
+
+/** Refuses before the build a desktop release the apps of its channel would refuse for its server (assertSameServer). */
+export function assertServerOfChannel(
+  config: { desktop?: { server?: unknown } },
+  platform: ReleasePlatform,
+  out: string,
+  channel: string,
+): void {
+  if (platform === "macos" || platform === "windows" || platform === "linux")
+    assertSameServer(releaseDir(out, platform), channel, !!config.desktop?.server);
+}
+
 /** Refuses before the build a release that could not be signed: no key on this machine, or another app's. */
 export function assertSigningKey(config: { app: { id: string }; updates?: { publicKey: string } | null }): void {
   if (!config.updates)
@@ -73,16 +90,16 @@ export async function publishRelease(
     throw new CliError("akan-native.config.ts has no updates: { url, publicKey } (run `akan-native update keygen`)");
   const desktop = platform === "macos" || platform === "windows" || platform === "linux" ? platform : null;
   
-  const dir = join(out, desktop ? `${desktop}-${hostArch()}` : platform);
+  const dir = releaseDir(out, platform);
   assertChannel(channel);
   assertSigningKey(config);
   const keyPath = updateKeyPath(config.app.id);
   const sequence = nextSequence(dir, channel);
 
   let manifest: UpdateManifest;
-  let superseded: string | null = null;
+  let leftovers: string[] = [];
   if (desktop) {
-    ({ manifest, superseded } = await publishAppUpdate(ctx, desktop, artifact, dir, channel, sequence));
+    ({ manifest, leftovers } = await publishAppUpdate(ctx, desktop, artifact, dir, channel, sequence));
   } else {
     const info = readBundleInfo(join(ctx.outDir, BUNDLE_FILE));
     manifest = webManifest({
@@ -99,6 +116,6 @@ export async function publishRelease(
   const signature = `${signManifest(bytes, keyPath, config.updates.publicKey)}\n`;
   mkdirSync(dir, { recursive: true });
   writeSigned(dir, channel, bytes, signature);
-  if (superseded) rmSync(superseded, { force: true });
+  for (const file of leftovers) rmSync(file, { force: true });
   return { dir, manifest };
 }

package/vendor/@akanjs/native/packages/cli/src/lib/updates.ts

@@ -58,6 +58,8 @@ export interface UpdateManifest {
   archive?: { sha256: string; url: string; size: number; gzSha256: string };
   /** App updates: gzip deltas from earlier releases' tars (`from` = that tar's sha256). */
   patches?: { from: string; url: string; sha256: string; size: number }[];
+  /** App updates: whether the app carries a server; an installed app refuses a release that differs from itself. */
+  server?: boolean;
 }
 
 /** Every file of a web bundle as the app serves it: index.html with the init script and CSP, public/, env.runtime.json. */

package/vendor/@akanjs/native/packages/cli/src/platforms/desktop-update.ts

@@ -1,11 +1,11 @@
 
 
-import { existsSync, mkdirSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { createDelta } from "../../../desktop/src/delta.ts";
 import { runtimeVersion } from "../lib/boot.ts";
 import { execOrThrow } from "../lib/exec.ts";
-import { dim, log } from "../lib/log.ts";
+import { CliError, dim, log } from "../lib/log.ts";
 import type { BuildContext } from "../lib/prepare.ts";
 import { hostArch, sha256, type UpdateManifest } from "../lib/updates.ts";
 import { type DesktopOs, resourcesOf } from "./desktop.ts";
@@ -16,6 +16,30 @@ const TAR: Record<DesktopOs, string[]> = {
   linux: ["tar"],
 };
 
+/**
+ * An installed app refuses a release whose server presence is not its own (plugins/updates): published, this one would
+ * be refused by every app the channel reached, and so would every release after it. A manifest from before the field
+ * says nothing and is not compared.
+ */
+export function assertSameServer(dir: string, channel: string, server: boolean): void {
+  const path = join(dir, `${channel}.json`);
+  if (!existsSync(path)) return;
+  const previous = JSON.parse(readFileSync(path, "utf8")) as Partial<UpdateManifest>;
+  if (typeof previous.server !== "boolean" || previous.server === server) return;
+  throw new CliError(
+    `the ${channel} release in ${dir} (${previous.bundle}) ${previous.server ? "carries a server and this build does not" : "carries no server and this build does"}, and installed apps refuse a release that differs: publish this build on another channel (updates.channel), or remove ${path} to start the channel over`,
+  );
+}
+
+/** The previous release's tar from its published archive, when it is still here and still what it says. */
+function previousTar(out: string, previous: UpdateManifest): Uint8Array | null {
+  const archive = previous.archive;
+  const file = archive ? join(out, archive.url) : "";
+  if (!archive || !existsSync(file)) return null;
+  const tar = Bun.gunzipSync(readFileSync(file));
+  return sha256(tar) === archive.sha256 ? tar : null;
+}
+
 export async function publishAppUpdate(
   ctx: BuildContext,
   os: DesktopOs,
@@ -23,40 +47,40 @@ export async function publishAppUpdate(
   out: string,
   channel: string,
   sequence: number,
-): Promise<{ manifest: UpdateManifest; superseded: string | null }> {
+): Promise<{ manifest: UpdateManifest; leftovers: string[] }> {
   const { config } = ctx.project;
+  const server = existsSync(join(resourcesOf(os, app), "server.json"));
+  assertSameServer(out, channel, server);
+  const previousPath = join(out, `${channel}.json`);
+  const previous = existsSync(previousPath) ? (JSON.parse(readFileSync(previousPath, "utf8")) as UpdateManifest) : null;
   const dir = join(out, "app");
   mkdirSync(dir, { recursive: true });
   const tmp = join(dir, `.build-${sequence}.tar`);
   await execOrThrow([...TAR[os], "-cf", tmp, "-C", dirname(app), basename(app)], { echo: false });
   const tar = readFileSync(tmp);
+  rmSync(tmp);
   const tarSha = sha256(tar);
-  renameSync(tmp, join(dir, `${tarSha}.tar`));
   const gz = Bun.gzipSync(tar, { level: 9 });
   writeFileSync(join(dir, `${tarSha}.tar.gz`), gz);
 
   const patches: NonNullable<UpdateManifest["patches"]> = [];
-  let superseded: string | null = null;
-  const previousPath = join(out, `${channel}.json`);
-  if (existsSync(previousPath)) {
-    const previous = JSON.parse(readFileSync(previousPath, "utf8")) as UpdateManifest;
-    const from = previous.archive?.sha256;
-    const base = from ? join(dir, `${from}.tar`) : "";
-    if (from && from !== tarSha && existsSync(base)) {
-      const started = performance.now();
-      const delta = Bun.gzipSync(createDelta(readFileSync(base), tar), { level: 9 });
-      const name = `${from}-${tarSha}.delta.gz`;
-      writeFileSync(join(dir, name), delta);
-      patches.push({ from, url: `app/${name}`, sha256: sha256(delta), size: delta.length });
-      log.info(
-        dim(
-          `delta from ${previous.bundle}: ${(delta.length / 1024).toFixed(0)} KiB instead of ${(gz.length / 1024 / 1024).toFixed(1)} MiB (${Math.round(performance.now() - started)} ms)`,
-        ),
-      );
-    }
-    
-    if (from && from !== tarSha) superseded = base;
+  const from = previous?.archive?.sha256;
+  const base = previous && from && from !== tarSha ? previousTar(out, previous) : null;
+  if (previous && from && base) {
+    const started = performance.now();
+    const delta = Bun.gzipSync(createDelta(base, tar), { level: 9 });
+    const name = `${from}-${tarSha}.delta.gz`;
+    writeFileSync(join(dir, name), delta);
+    patches.push({ from, url: `app/${name}`, sha256: sha256(delta), size: delta.length });
+    log.info(
+      dim(
+        `delta from ${previous.bundle}: ${(delta.length / 1024).toFixed(0)} KiB instead of ${(gz.length / 1024 / 1024).toFixed(1)} MiB (${Math.round(performance.now() - started)} ms)`,
+      ),
+    );
   }
+  const leftovers = readdirSync(dir)
+    .filter((name) => /^[0-9a-f]{64}\.tar$/.test(name))
+    .map((name) => join(dir, name));
 
   const manifest: UpdateManifest = {
     schema: 1,
@@ -72,9 +96,10 @@ export async function publishAppUpdate(
       JSON.parse(readFileSync(join(resourcesOf(os, app), "updates.json"), "utf8")) as { embeddedSequence: number }
     ).embeddedSequence,
     arch: hostArch(),
-    files: [{ path: basename(app), sha256: tarSha, size: statSync(join(dir, `${tarSha}.tar`)).size }],
+    files: [{ path: basename(app), sha256: tarSha, size: tar.length }],
     archive: { sha256: tarSha, url: `app/${tarSha}.tar.gz`, size: gz.length, gzSha256: sha256(gz) },
     patches,
+    server,
   };
-  return { manifest, superseded };
+  return { manifest, leftovers };
 }

package/vendor/@akanjs/native/packages/cli/src/platforms/windows-installer.ts

@@ -17,8 +17,11 @@ const WEBVIEW2_CLIENT = "{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}";
 export const WINDOWS_MAX_PATH = 259;
 /** `C:\Users\` + a 20-character user name + `\AppData\Local\Programs\`. */
 const INSTALL_ROOT = "C:\\Users\\".length + 20 + "\\AppData\\Local\\Programs\\".length;
-/** `.update-<version>-<sequence>\`: an update unpacks next to the app, under the app's name again, before the swap. */
-const STAGING = ".update-".length + 24 + 1;
+/** A release's bundle id is `<app.version>-<publish time in seconds>`, ten digits until the year 2286 (lib/publish.ts). */
+const SEQUENCE_DIGITS = 10;
+/** NTFS's default cluster: every file takes whole clusters on disk. */
+const CLUSTER = 4096;
+const MIB = 1024 * 1024;
 
 export interface InstallerInput {
   name: string;
@@ -30,6 +33,10 @@ export interface InstallerInput {
   folder: string;
   /** Its top-level files and folders: what an update or uninstall removes. */
   entries: { name: string; dir: boolean }[];
+  /** Bytes the app folder takes on disk, and bytes the setup unpacks in all (the folder and the WebView2 bootstrapper). */
+  space: { install: number; unpack: number };
+  /** deepLinks.schemes: the uninstaller removes those the app registered for its own executable. */
+  schemes: string[];
   icon?: string;
   bootstrapper: string;
   stopScript: string;
@@ -39,14 +46,29 @@ export interface InstallerInput {
 /** `$` is NSIS's variable sigil; the names that reach a script cannot hold a quote (config.ts app.name). */
 const nsis = (value: string) => value.replace(/\$/g, "$$$$");
 
+const mib = (bytes: number) => Math.ceil(bytes / MIB);
+
 const removal = (entries: InstallerInput["entries"]) =>
   entries
-    .map(({ name, dir }) => (dir ? `  RMDir /r "$INSTDIR\\${nsis(name)}"` : `  Delete "$INSTDIR\\${nsis(name)}"`))
+    .map(({ name, dir }) =>
+      dir ? `  !insertmacro RemoveTree "$INSTDIR\\${nsis(name)}"` : `  Delete "$INSTDIR\\${nsis(name)}"`,
+    )
     .join("\n");
 
 const moveIn = (entries: InstallerInput["entries"]) =>
   entries.map(({ name }) => `      Rename "$INSTDIR.setup-new\\${nsis(name)}" "$INSTDIR\\${nsis(name)}"`).join("\n");
 
+const unlink = (schemes: string[]) =>
+  schemes
+    .map(
+      (scheme) => `  ReadRegStr $0 HKCU "Software\\Classes\\${scheme}\\shell\\open\\command" ""
+  \${If} $0 == '"$INSTDIR\\\${EXE}" "%1"'
+    DeleteRegKey HKCU "Software\\Classes\\${scheme}"
+  \${EndIf}
+`,
+    )
+    .join("");
+
 export function installerScript(input: InstallerInput): string {
   const version = windowsVersion(input.version, input.build);
   const icon = input.icon ? `!define MUI_ICON "${nsis(input.icon)}"\n!define MUI_UNICON "${nsis(input.icon)}"\n` : "";
@@ -66,11 +88,16 @@ RequestExecutionLevel user
 !define UNINSTALL_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${input.id}"
 !define RUN_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\Run"
 !define STARTUP_APPROVED_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run"
+!define RUN_ONCE_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce"
+!define AUMID_KEY "Software\\Classes\\AppUserModelId\\${input.id}"
 !define WEBVIEW2_KEY "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\${WEBVIEW2_CLIENT}"
+!define APP_MB ${mib(input.space.install)}
+!define UNPACK_MB ${mib(input.space.unpack)}
 
 Name "\${APP_NAME}"
 OutFile "${nsis(input.outFile)}"
 InstallDir "$LOCALAPPDATA\\Programs\\\${APP_NAME}"
+InstallDirRegKey HKCU "\${UNINSTALL_KEY}" "InstallLocation"
 BrandingText "\${APP_NAME} ${nsis(input.version)}"
 VIProductVersion "${version}"
 VIAddVersionKey "ProductName" "\${APP_NAME}"
@@ -109,13 +136,50 @@ FunctionEnd
   Abort
 !macroend
 
+!macro Warn MESSAGE
+  DetailPrint "\${MESSAGE}"
+  \${IfNot} \${Silent}
+    MessageBox MB_ICONEXCLAMATION|MB_OK "\${MESSAGE}"
+  \${EndIf}
+!macroend
+
+; Local\\, not Global\\: another user's setup installs into that user's own folder.
+!macro OnlyOneSetup
+  System::Call 'kernel32::CreateMutex(p 0, i 0, t "Local\\akan-native-setup-\${APP_ID}") p .r0 ?e'
+  Pop $1
+  \${If} $0 = 0
+  \${OrIf} $1 = 183
+    \${IfNot} \${Silent}
+      MessageBox MB_ICONSTOP|MB_OK "Another setup or uninstall of \${APP_NAME} is running."
+    \${EndIf}
+    SetErrorLevel 2
+    Abort
+  \${EndIf}
+!macroend
+
+; RMDir /r walks into a junction and empties its target; rd /s (Vista and later) removes the link itself.
+; The path reaches cmd through the environment, so % ^ & in it stay literal. rd answers 0 even when a file stays.
+!macro RemoveTree PATH
+  StrCpy $R9 "\${PATH}"
+  System::Call 'kernel32::SetEnvironmentVariable(t "AKAN_NATIVE_REMOVE", t R9)'
+  nsExec::Exec '"$SYSDIR\\cmd.exe" /d /c rmdir /s /q "%AKAN_NATIVE_REMOVE%"'
+  Pop $R9
+!macroend
+
+!macro RemoveLeftover PATH
+  !insertmacro RemoveTree "\${PATH}"
+  \${If} \${FileExists} "\${PATH}"
+    !insertmacro Fail "\${PATH}, left by an earlier setup, could not be removed. \${APP_NAME} is left as it was."
+  \${EndIf}
+!macroend
+
 !macro RemoveEntries
 ${removal(input.entries)}
 !macroend
 
 !macro RemoveApp
   \${If} \${FileExists} "$INSTDIR\\\${EXE}"
-    RMDir /r "$INSTDIR"
+    !insertmacro RemoveTree "$INSTDIR"
   \${Else}
     !insertmacro RemoveEntries
   \${EndIf}
@@ -140,12 +204,62 @@ ${removal(input.entries)}
 !macro RemoveSiblings SUFFIX
   FindFirst $R0 $R1 "$INSTDIR.\${SUFFIX}*"
   \${DoWhile} $R1 != ""
-    RMDir /r "$INSTDIR\\..\\$R1"
+    \${If} \${FileExists} "$INSTDIR\\..\\$R1\\*.*"
+      !insertmacro RemoveTree "$INSTDIR\\..\\$R1"
+    \${Else}
+      Delete "$INSTDIR\\..\\$R1"
+    \${EndIf}
     FindNext $R0 $R1
   \${Loop}
   FindClose $R0
 !macroend
 
+!macro CheckStaged
+  \${IfNot} \${FileExists} "$INSTDIR.setup-new\\\${EXE}"
+  \${OrIfNot} \${FileExists} "$INSTDIR.setup-new\\resources\\boot.json"
+    !insertmacro Fail "The files unpacked into $INSTDIR.setup-new are incomplete: another program removed some, or an antivirus took one. \${APP_NAME} is left as it was."
+  \${EndIf}
+!macroend
+
+Function .onInit
+  !insertmacro OnlyOneSetup
+FunctionEnd
+
+; A full disk ends the section inside File; a file that cannot be created only sets the error flag.
+Function .onInstFailed
+  SetOutPath "$LOCALAPPDATA"
+  !insertmacro RemoveTree "$INSTDIR.setup-new"
+  Delete "$INSTDIR.setup-uninstall.exe"
+FunctionEnd
+
+; /SOLID first unpacks what the setup carries into a file in $TEMP, which grows to all of it.
+Function CheckSpace
+  \${GetRoot} "$INSTDIR" $R0
+  \${GetRoot} "$TEMP" $R1
+  StrCpy $R2 \${APP_MB}
+  StrCpy $R3 \${UNPACK_MB}
+  \${If} $R0 == $R1
+    IntOp $R2 $R2 + $R3
+    StrCpy $R3 0
+  \${EndIf}
+  ClearErrors
+  \${DriveSpace} "$R0\\" "/D=F /S=M" $R4
+  \${IfNot} \${Errors}
+    \${If} $R4 < $R2
+      !insertmacro Fail "$R0 has $R4 MB free, and the setup needs $R2 MB there. \${APP_NAME} is left as it was."
+    \${EndIf}
+  \${EndIf}
+  \${If} $R3 > 0
+    ClearErrors
+    \${DriveSpace} "$R1\\" "/D=F /S=M" $R4
+    \${IfNot} \${Errors}
+      \${If} $R4 < $R3
+        !insertmacro Fail "$R1 has $R4 MB free, and the setup needs $R3 MB there to unpack in $TEMP. \${APP_NAME} is left as it was."
+      \${EndIf}
+    \${EndIf}
+  \${EndIf}
+FunctionEnd
+
 Function WebView2Version
   SetRegView 64
   ReadRegStr $0 HKLM "\${WEBVIEW2_KEY}" "pv"
@@ -203,46 +317,56 @@ Section "Install"
   \${AndIf} \${FileExists} "$INSTDIR.setup-old\\\${EXE}"
     Rename "$INSTDIR.setup-old" "$INSTDIR"
   \${EndIf}
-  RMDir /r "$INSTDIR.setup-new"
+  !insertmacro RemoveLeftover "$INSTDIR.setup-new"
   \${If} \${FileExists} "$INSTDIR\\\${EXE}"
   \${OrIfNot} \${FileExists} "$INSTDIR.setup-old\\\${EXE}"
-    RMDir /r "$INSTDIR.setup-old"
+    !insertmacro RemoveLeftover "$INSTDIR.setup-old"
   \${EndIf}
+  Delete "$INSTDIR.setup-uninstall.exe"
   \${DirState} "$INSTDIR" $0
   \${If} $0 == 1
   \${AndIfNot} \${FileExists} "$INSTDIR\\\${EXE}"
   \${AndIf} "$INSTDIR" != "$LOCALAPPDATA\\Programs\\\${APP_NAME}"
     !insertmacro Fail "$INSTDIR holds other files. Install into an empty folder, or where \${APP_NAME} is installed."
   \${EndIf}
+  Call CheckSpace
   InitPluginsDir
   Call EnsureWebView2
   SetOutPath "$INSTDIR.setup-new"
   ClearErrors
   File /r "${nsis(input.folder)}\\*"
   \${If} \${Errors}
-    SetOutPath "$LOCALAPPDATA"
-    RMDir /r "$INSTDIR.setup-new"
-    !insertmacro Fail "Some files could not be written beside $INSTDIR. Windows refuses a path over 260 characters unless long paths are enabled."
+    !insertmacro Fail "Some files could not be written to $INSTDIR.setup-new: the disk is full, this user may not write there, an antivirus holds a file, or a path is over 260 characters and long paths are not enabled."
   \${EndIf}
   ; SetOutPath is also the installer's working folder, which Windows does not let anyone rename.
   SetOutPath "$LOCALAPPDATA"
+  !insertmacro CheckStaged
+  ClearErrors
+  WriteUninstaller "$INSTDIR.setup-uninstall.exe"
+  \${If} \${Errors}
+    !insertmacro Fail "The uninstaller could not be written to $INSTDIR.setup-uninstall.exe. \${APP_NAME} is left as it was."
+  \${EndIf}
   File "/oname=$PLUGINSDIR\\stop-app.ps1" "${nsis(input.stopScript)}"
   nsExec::Exec 'powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "$PLUGINSDIR\\stop-app.ps1" "$INSTDIR"'
   Pop $0
-  StrCpy $AppStopped 1
+  \${If} $0 == 0
+    StrCpy $AppStopped 1
+  \${EndIf}
+  !insertmacro CheckStaged
   \${If} \${FileExists} "$INSTDIR\\\${EXE}"
     !insertmacro RenameRetry "$INSTDIR" "$INSTDIR.setup-old"
     \${If} $R2 != "done"
-      RMDir /r "$INSTDIR.setup-new"
       !insertmacro Fail "$INSTDIR is in use and could not be replaced; \${APP_NAME} is left as it was."
     \${EndIf}
     !insertmacro RenameRetry "$INSTDIR.setup-new" "$INSTDIR"
     \${If} $R2 != "done"
       !insertmacro RenameRetry "$INSTDIR.setup-old" "$INSTDIR"
-      RMDir /r "$INSTDIR.setup-new"
+      \${If} $R2 != "done"
+        !insertmacro Fail "Neither the new files nor the old ones could be moved back to $INSTDIR: \${APP_NAME} is in $INSTDIR.setup-old, which the next setup puts back."
+      \${EndIf}
       !insertmacro Fail "The new files could not take the place of $INSTDIR; \${APP_NAME} is left as it was."
     \${EndIf}
-    RMDir /r "$INSTDIR.setup-old"
+    !insertmacro RemoveTree "$INSTDIR.setup-old"
   \${Else}
     !insertmacro RemoveEntries
     RMDir "$INSTDIR"
@@ -253,19 +377,20 @@ ${moveIn(input.entries)}
       \${If} \${Errors}
         !insertmacro Fail "Some files could not be moved into $INSTDIR."
       \${EndIf}
-      RMDir /r "$INSTDIR.setup-new"
+      !insertmacro RemoveTree "$INSTDIR.setup-new"
     \${Else}
       !insertmacro RenameRetry "$INSTDIR.setup-new" "$INSTDIR"
       \${If} $R2 != "done"
-        RMDir /r "$INSTDIR.setup-new"
         !insertmacro Fail "$INSTDIR could not be made."
       \${EndIf}
     \${EndIf}
   \${EndIf}
   ClearErrors
-  WriteUninstaller "$INSTDIR.uninstall.exe"
-  \${If} \${Errors}
-    !insertmacro Fail "$INSTDIR.uninstall.exe could not be written: install into a folder under one this user may write to."
+  StrCpy $R0 "$INSTDIR.setup-uninstall.exe"
+  StrCpy $R1 "$INSTDIR.uninstall.exe"
+  System::Call 'kernel32::MoveFileEx(t R0, t R1, i 1) i .r0'
+  \${If} $0 = 0
+    SetErrors
   \${EndIf}
   CreateShortcut "$SMPROGRAMS\\\${APP_NAME}.lnk" "$INSTDIR\\\${EXE}"
   WriteRegStr HKCU "\${UNINSTALL_KEY}" "DisplayName" "\${APP_NAME}"
@@ -276,16 +401,22 @@ ${moveIn(input.entries)}
   WriteRegStr HKCU "\${UNINSTALL_KEY}" "QuietUninstallString" '"$INSTDIR.uninstall.exe" /S'
   WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "NoModify" 1
   WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "NoRepair" 1
-  \${GetSize} "$INSTDIR" "/S=0K" $0 $1 $2
-  WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "EstimatedSize" $0
+  WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "EstimatedSize" ${Math.ceil(input.space.install / 1024)}
+  \${If} \${Errors}
+    !insertmacro Warn "\${APP_NAME} is installed, but its uninstaller, Start menu shortcut or uninstall entry could not all be written."
+  \${EndIf}
   \${If} $RunAfter == 1
     Call RunApp
   \${EndIf}
 SectionEnd
 
 Function un.onInit
+  !insertmacro OnlyOneSetup
   ReadRegStr $INSTDIR HKCU "\${UNINSTALL_KEY}" "InstallLocation"
-  \${If} $INSTDIR == ""
+  \${GetRoot} "$INSTDIR" $0
+  \${If} $0 == ""
+  \${OrIf} $INSTDIR == $0
+  \${OrIf} $INSTDIR == "$0\\"
     \${IfNot} \${Silent}
       MessageBox MB_ICONSTOP|MB_OK "\${APP_NAME} is not installed for this user."
     \${EndIf}
@@ -300,33 +431,40 @@ Section "Uninstall"
   nsExec::Exec 'powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "$PLUGINSDIR\\stop-app.ps1" "$INSTDIR"'
   Pop $0
   Delete "$SMPROGRAMS\\\${APP_NAME}.lnk"
-  RMDir /r "$INSTDIR.previous"
+  !insertmacro RemoveTree "$INSTDIR.previous"
   !insertmacro RemoveSiblings "update-"
   !insertmacro RemoveSiblings "failed-"
   !insertmacro RemoveSiblings "setup-"
   !insertmacro RemoveApp
   RMDir "$INSTDIR"
-  Delete "$INSTDIR.uninstall.exe"
   DeleteRegKey HKCU "\${UNINSTALL_KEY}"
   DeleteRegValue HKCU "\${RUN_KEY}" "\${APP_ID}"
   DeleteRegValue HKCU "\${STARTUP_APPROVED_KEY}" "\${APP_ID}"
-  RMDir /r "$LOCALAPPDATA\\\${APP_ID}\\akan-native-updates"
+  DeleteRegValue HKCU "\${RUN_ONCE_KEY}" "akan-native-update \${APP_ID}"
+${unlink(input.schemes)}  DeleteRegKey HKCU "\${AUMID_KEY}"
+  Delete "$LOCALAPPDATA\\\${APP_ID}\\notification-icon.png"
+  !insertmacro RemoveTree "$LOCALAPPDATA\\\${APP_ID}\\akan-native-updates"
+  !insertmacro RemoveTree "$LOCALAPPDATA\\\${APP_ID}\\akan-native-updates-debug"
   Delete "$LOCALAPPDATA\\\${APP_ID}\\akan-native-relaunch.json"
   RMDir "$LOCALAPPDATA\\\${APP_ID}"
+  ; Last: the uninstaller runs as a copy in $TEMP and the one started exits at once, so its file going marks the end.
+  Delete "$INSTDIR.uninstall.exe"
 SectionEnd
 `;
 }
 
 /**
- * Stops every process running from the install folder, and waits (up to 10 s) until they are gone. Through
- * WMI: the installer is a 32-bit program, so its PowerShell is too, and a 32-bit process cannot read a
- * 64-bit one's path (Get-Process's Path comes back empty).
+ * Stops every process running from the install folder, waits (up to 10 s) until they are gone, and exits 1 when
+ * one is left or cannot be seen. Through WMI: the installer is a 32-bit program, so its PowerShell is too, and a
+ * 32-bit process cannot read a 64-bit one's path (Get-Process's Path comes back empty).
  */
 export const STOP_SCRIPT = `param([string]$Dir)
+$ErrorActionPreference = 'Stop'
 $prefix = [IO.Path]::GetFullPath($Dir).TrimEnd('\\') + '\\'
 $running = { Get-CimInstance Win32_Process | Where-Object { $_.ExecutablePath -and $_.ExecutablePath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase) } }
 & $running | ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }
 for ($i = 0; $i -lt 50 -and (& $running); $i++) { Start-Sleep -Milliseconds 200 }
+if (& $running) { exit 1 }
 `;
 
 /** The longest path under `folder`, relative and with Windows separators. Links are not followed. */
@@ -343,9 +481,32 @@ export function deepestPath(folder: string): string {
   return deepest;
 }
 
-/** How long `relative` gets on a typical PC while an update unpacks, the longest it ever is: root, app, staging, app. */
-export function installedPathLength(appName: string, relative: string): number {
-  return INSTALL_ROOT + appName.length + STAGING + appName.length + 1 + relative.length;
+/** The bytes of the files under `folder`, and what they take on disk. Links are not followed. */
+export function folderSize(folder: string): { bytes: number; disk: number } {
+  let bytes = 0;
+  let disk = 0;
+  const walk = (dir: string) => {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      const path = join(dir, entry.name);
+      if (entry.isDirectory()) walk(path);
+      else if (entry.isFile()) {
+        const { size } = statSync(path);
+        bytes += size;
+        disk += Math.ceil(size / CLUSTER) * CLUSTER;
+      }
+    }
+  };
+  walk(folder);
+  return { bytes, disk };
+}
+
+/**
+ * How long `relative` gets on a typical PC while an update unpacks, the longest it ever is: root, app, then
+ * `.update-<bundle>\` and the app again.
+ */
+export function installedPathLength(appName: string, version: string, relative: string): number {
+  const staging = ".update-".length + version.length + 1 + SEQUENCE_DIGITS + 1;
+  return INSTALL_ROOT + appName.length + staging + appName.length + 1 + relative.length;
 }
 
 /** makensis: AKAN_NATIVE_MAKENSIS, PATH, then where the NSIS installer puts it. */
@@ -406,11 +567,13 @@ export async function buildWindowsInstaller(ctx: BuildContext, folder: string):
   const outFile = join(ctx.outDir, `${config.app.fileName}-${config.app.version}-${hostArch()}-setup.exe`);
   const script = join(gen, "installer.nsi");
   const deepest = deepestPath(folder);
-  const longest = installedPathLength(config.app.name, deepest);
+  const longest = installedPathLength(config.app.name, config.app.version, deepest);
   if (longest > WINDOWS_MAX_PATH - 20)
     log.warn(
       `${deepest} reaches about ${longest} characters under %LOCALAPPDATA%\\Programs while an update unpacks: Windows refuses paths over ${WINDOWS_MAX_PATH} unless long paths are enabled, so the installer or an update fails on such a PC. Shorten app.name or that path.`,
     );
+  const bootstrapper = await webview2Bootstrapper();
+  const size = folderSize(folder);
   writeFileSync(
     script,
     `${installerScript({
@@ -421,8 +584,10 @@ export async function buildWindowsInstaller(ctx: BuildContext, folder: string):
       build: config.app.build,
       folder,
       entries: readdirSync(folder).map((name) => ({ name, dir: statSync(join(folder, name)).isDirectory() })),
+      space: { install: size.disk, unpack: size.bytes + statSync(bootstrapper).size },
+      schemes: config.deepLinks.schemes,
       ...(existsSync(icon) ? { icon } : {}),
-      bootstrapper: await webview2Bootstrapper(),
+      bootstrapper,
       stopScript,
       outFile,
     })}`,

package/vendor/@akanjs/native/packages/desktop/src/dispatcher.ts

@@ -218,6 +218,7 @@ export function createDispatcher(
     if (launching) apply();
     else console.warn(`[akan-native] ${plugin.id}: ctx.launch.${what} after the window was created is ignored`);
   };
+  const quit = (code: number) => (services.lifecycle ? void services.lifecycle.quit(code) : services.quit?.(code));
   const contexts = new Map<string, DesktopContext>();
   const context = (plugin: DesktopPlugin): DesktopContext => {
     let ctx = contexts.get(plugin.id);
@@ -252,7 +253,7 @@ export function createDispatcher(
         deepLinkSchemes: services.deepLinkSchemes ?? [],
         externalSchemes: externalSchemes(services.externalSchemes ?? []),
         openLinks: (args) => services.openLinks?.(args),
-        quit: (code = 0) => (services.lifecycle ? void services.lifecycle.quit(code) : services.quit?.(code)),
+        quit: (code = 0) => quit(code),
         onQuit: (fn) => services.lifecycle?.onQuit(fn) ?? (() => {}),
         onDocumentEnd: (fn) => {
           const entry = { fn };
@@ -265,7 +266,13 @@ export function createDispatcher(
           services.lifecycle ? void services.lifecycle.closeWindow(window) : services.quit?.(0),
         launch: {
           setWindow: (bounds) => duringLaunch(plugin, "setWindow", () => Object.assign(launch.window, bounds)),
-          exit: (code = 0) => duringLaunch(plugin, "exit", () => (launch.exit ??= code)),
+          exit: (code = 0) => {
+            if (launching) launch.exit ??= code;
+            else {
+              console.warn(`[akan-native] ${plugin.id}: ctx.launch.exit after the window was created quits the app`);
+              quit(code);
+            }
+          },
         },
       };
       contexts.set(plugin.id, ctx);