electron-incremental-update 1.3.0 → 2.0.0-beta.10

package/dist/vite.js

@@ -1,40 +1,24 @@
-// src/vite.ts
-import { basename as basename2, join as join2, resolve } from "node:path";
-import { cpSync, existsSync as existsSync4, rmSync as rmSync2 } from "node:fs";
-import { mergeConfig as mergeConfig2, normalizePath as normalizePath2 } from "vite";
-import ElectronSimple from "vite-plugin-electron/simple";
-import { startup } from "vite-plugin-electron";
-import { notBundle } from "vite-plugin-electron/plugin";
-import { loadPackageJSON } from "local-pkg";
+import path5 from 'node:path';
+import fs3 from 'node:fs';
+import { createLogger, normalizePath, mergeConfig, createFilter } from 'vite';
+import ElectronSimple from 'vite-plugin-electron/simple';
+import { startup } from 'vite-plugin-electron';
+import { notBundle } from 'vite-plugin-electron/plugin';
+import { getPackageInfoSync, loadPackageJSON } from 'local-pkg';
+import { isCI } from 'ci-info';
+export { isCI } from 'ci-info';
+import Asar from '@electron/asar';
+import { build } from 'esbuild';
+import cp from 'node:child_process';
+import * as babel from '@babel/core';
+import MagicString from 'magic-string';
+import zlib from 'node:zlib';
+import crypto from 'node:crypto';
+import { generate } from 'selfsigned';
 
-// src/build-plugins/build.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { basename, join } from "node:path";
-import Asar from "@electron/asar";
-import { build } from "esbuild";
-import { mergeConfig } from "vite";
+// src/vite/index.ts
 
-// src/crypto/utils.ts
-import { createHash } from "node:crypto";
-function hashString(data, length) {
-  const hash = createHash("SHA256").update(data).digest("binary");
-  return Buffer.from(hash).subarray(0, length);
-}
-
-// src/crypto/enc.ts
-import { createCipheriv, createPrivateKey, createSign } from "node:crypto";
-function encrypt(plainText, key, iv) {
-  const cipher = createCipheriv("aes-256-cbc", key, iv);
-  let encrypted = cipher.update(plainText, "utf8", "base64url");
-  encrypted += cipher.final("base64url");
-  return encrypted;
-}
-var signature = (buffer, privateKey, cert, version) => {
-  const sig = createSign("RSA-SHA256").update(buffer).sign(createPrivateKey(privateKey), "base64");
-  return encrypt(`${sig}%${version}`, hashString(cert, 32), hashString(buffer, 16));
-};
-
-// src/utils/pure.ts
+// src/utils/version.ts
 function parseVersion(version) {
   const match = /^(\d+)\.(\d+)\.(\d+)(?:-([a-z0-9.-]+))?/i.exec(version);
   if (!match) {
@@ -59,125 +43,30 @@ function parseVersion(version) {
   return ret;
 }
 function isUpdateJSON(json) {
-  const is = (j) => !!(j && j.minimumVersion && j.signature && j.size && j.version);
+  const is = (j) => !!(j && j.minimumVersion && j.signature && j.version);
   return is(json) && is(json?.beta);
 }
-
-// src/utils/zip.ts
-import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { brotliCompress, brotliDecompress } from "node:zlib";
-async function zipFile(filePath, targetFilePath = `${filePath}.gz`) {
-  if (!existsSync(filePath)) {
-    throw new Error(`path to be zipped not exist: ${filePath}`);
+function defaultVersionJsonGenerator(existingJson, signature, version, minimumVersion) {
+  existingJson.beta = {
+    version,
+    minimumVersion,
+    signature
+  };
+  if (!parseVersion(version).stage) {
+    existingJson.version = version;
+    existingJson.minimumVersion = minimumVersion;
+    existingJson.signature = signature;
   }
-  const buffer = readFileSync(filePath);
-  return new Promise((resolve2, reject) => {
-    brotliCompress(buffer, (err, buffer2) => {
-      if (err) {
-        reject(err);
-      }
-      writeFileSync(targetFilePath, buffer2);
-      resolve2(null);
-    });
-  });
+  return existingJson;
 }
-
-// src/build-plugins/log.ts
-import { createLogger } from "vite";
-
-// src/build-plugins/constant.ts
 var id = "electron-incremental-updater";
 var bytecodeId = `${id}-bytecode`;
-var loaderId = `${id}-loader`;
-
-// src/build-plugins/log.ts
 var log = createLogger("info", { prefix: `[${id}]` });
 var bytecodeLog = createLogger("info", { prefix: `[${bytecodeId}]` });
 
-// src/build-plugins/bytecode/code.ts
+// src/vite/bytecode/code.ts
 var bytecodeGeneratorScript = "const vm = require('vm')\nconst v8 = require('v8')\nconst wrap = require('module').wrap\nv8.setFlagsFromString('--no-lazy')\nv8.setFlagsFromString('--no-flush-bytecode')\nlet code = ''\nprocess.stdin.setEncoding('utf-8')\nprocess.stdin.on('readable', () => {\n  const data = process.stdin.read()\n  if (data !== null) {\n    code += data\n  }\n})\nprocess.stdin.on('end', () => {\n  try {\n    if (typeof code !== 'string') {\n      throw new Error('javascript code must be string.')\n    }\n    const script = new vm.Script(wrap(code), { produceCachedData: true })\n    const bytecodeBuffer = script.createCachedData()\n    process.stdout.write(bytecodeBuffer)\n  } catch (error) {\n    console.error(error)\n  }\n})\n";
-var bytecodeModuleLoaderCode = [
-  `"use strict";`,
-  `const fs = require("fs");`,
-  `const path = require("path");`,
-  `const vm = require("vm");`,
-  `const v8 = require("v8");`,
-  `const Module = require("module");`,
-  `v8.setFlagsFromString("--no-lazy");`,
-  `v8.setFlagsFromString("--no-flush-bytecode");`,
-  `const FLAG_HASH_OFFSET = 12;`,
-  `const SOURCE_HASH_OFFSET = 8;`,
-  `let dummyBytecode;`,
-  `function setFlagHashHeader(bytecodeBuffer) {`,
-  `  if (!dummyBytecode) {`,
-  `    const script = new vm.Script("", {`,
-  `      produceCachedData: true`,
-  `    });`,
-  `    dummyBytecode = script.createCachedData();`,
-  `  }`,
-  `  dummyBytecode.slice(FLAG_HASH_OFFSET, FLAG_HASH_OFFSET + 4).copy(bytecodeBuffer, FLAG_HASH_OFFSET);`,
-  `};`,
-  `function getSourceHashHeader(bytecodeBuffer) {`,
-  `  return bytecodeBuffer.slice(SOURCE_HASH_OFFSET, SOURCE_HASH_OFFSET + 4);`,
-  `};`,
-  `function buffer2Number(buffer) {`,
-  `  let ret = 0;`,
-  `  ret |= buffer[3] << 24;`,
-  `  ret |= buffer[2] << 16;`,
-  `  ret |= buffer[1] << 8;`,
-  `  ret |= buffer[0];`,
-  `  return ret;`,
-  `};`,
-  `Module._extensions[".jsc"] = Module._extensions[".cjsc"] = function (module, filename) {`,
-  `  const bytecodeBuffer = fs.readFileSync(filename);`,
-  `  if (!Buffer.isBuffer(bytecodeBuffer)) {`,
-  `    throw new Error("BytecodeBuffer must be a buffer object.");`,
-  `  }`,
-  `  setFlagHashHeader(bytecodeBuffer);`,
-  `  const length = buffer2Number(getSourceHashHeader(bytecodeBuffer));`,
-  `  let dummyCode = "";`,
-  `  if (length > 1) {`,
-  `    dummyCode = "\\"" + "\\u200b".repeat(length - 2) + "\\"";`,
-  `  }`,
-  `  const script = new vm.Script(dummyCode, {`,
-  `    filename: filename,`,
-  `    lineOffset: 0,`,
-  `    displayErrors: true,`,
-  `    cachedData: bytecodeBuffer`,
-  `  });`,
-  `  if (script.cachedDataRejected) {`,
-  `    throw new Error("Invalid or incompatible cached data (cachedDataRejected)");`,
-  `  }`,
-  `  const require = function (id) {`,
-  `    return module.require(id);`,
-  `  };`,
-  `  require.resolve = function (request, options) {`,
-  `    return Module._resolveFilename(request, module, false, options);`,
-  `  };`,
-  `  if (process.mainModule) {`,
-  `    require.main = process.mainModule;`,
-  `  }`,
-  `  require.extensions = Module._extensions;`,
-  `  require.cache = Module._cache;`,
-  `  const compiledWrapper = script.runInThisContext({`,
-  `    filename: filename,`,
-  `    lineOffset: 0,`,
-  `    columnOffset: 0,`,
-  `    displayErrors: true`,
-  `  });`,
-  `  const dirname = path.dirname(filename);`,
-  `  const args = [module.exports, require, module, filename, dirname, process, global];`,
-  `  return compiledWrapper.apply(module.exports, args);`,
-  `};`
-].join("\n");
-
-// src/build-plugins/bytecode/utils.ts
-import path from "node:path";
-import fs from "node:fs";
-import { spawn } from "node:child_process";
-import * as babel from "@babel/core";
-import MagicString from "magic-string";
-import { getPackageInfoSync } from "local-pkg";
+var bytecodeModuleLoaderCode = '"use strict";\nconst fs = require("fs");\nconst path = require("path");\nconst vm = require("vm");\nconst v8 = require("v8");\nconst Module = require("module");\nv8.setFlagsFromString("--no-lazy");\nv8.setFlagsFromString("--no-flush-bytecode");\nconst FLAG_HASH_OFFSET = 12;\nconst SOURCE_HASH_OFFSET = 8;\nlet dummyBytecode;\nfunction setFlagHashHeader(bytecodeBuffer) {\n  if (!dummyBytecode) {\n    const script = new vm.Script("", {\n      produceCachedData: true\n    });\n    dummyBytecode = script.createCachedData();\n  }\n  dummyBytecode.slice(FLAG_HASH_OFFSET, FLAG_HASH_OFFSET + 4).copy(bytecodeBuffer, FLAG_HASH_OFFSET);\n};\nfunction getSourceHashHeader(bytecodeBuffer) {\n  return bytecodeBuffer.slice(SOURCE_HASH_OFFSET, SOURCE_HASH_OFFSET + 4);\n};\nfunction buffer2Number(buffer) {\n  let ret = 0;\n  ret |= buffer[3] << 24;\n  ret |= buffer[2] << 16;\n  ret |= buffer[1] << 8;\n  ret |= buffer[0];\n  return ret;\n};\nModule._extensions[".jsc"] = Module._extensions[".cjsc"] = function (module, filename) {\n  const bytecodeBuffer = fs.readFileSync(filename);\n  if (!Buffer.isBuffer(bytecodeBuffer)) {\n    throw new Error("BytecodeBuffer must be a buffer object.");\n  }\n  setFlagHashHeader(bytecodeBuffer);\n  const length = buffer2Number(getSourceHashHeader(bytecodeBuffer));\n  let dummyCode = "";\n  if (length > 1) {\n    dummyCode = "\\"" + "\\u200b".repeat(length - 2) + "\\"";\n  }\n  const script = new vm.Script(dummyCode, {\n    filename: filename,\n    lineOffset: 0,\n    displayErrors: true,\n    cachedData: bytecodeBuffer\n  });\n  if (script.cachedDataRejected) {\n    throw new Error("Invalid or incompatible cached data (cachedDataRejected)");\n  }\n  const require = function (id) {\n    return module.require(id);\n  };\n  require.resolve = function (request, options) {\n    return Module._resolveFilename(request, module, false, options);\n  };\n  if (process.mainModule) {\n    require.main = process.mainModule;\n  }\n  require.extensions = Module._extensions;\n  require.cache = Module._cache;\n  const compiledWrapper = script.runInThisContext({\n    filename: filename,\n    lineOffset: 0,\n    columnOffset: 0,\n    displayErrors: true\n  });\n  const dirname = path.dirname(filename);\n  const args = [module.exports, require, module, filename, dirname, process, global];\n  return compiledWrapper.apply(module.exports, args);\n};\n';
 var electronModulePath = getPackageInfoSync("electron")?.rootPath;
 var useStrict = "'use strict';";
 var bytecodeModuleLoader = "__loader__.js";
@@ -187,13 +76,13 @@ function getElectronPath() {
     if (!electronModulePath) {
       throw new Error("Electron is not installed");
     }
-    const pathFile = path.join(electronModulePath, "path.txt");
+    const pathFile = path5.join(electronModulePath, "path.txt");
     let executablePath;
-    if (fs.existsSync(pathFile)) {
-      executablePath = fs.readFileSync(pathFile, "utf-8");
+    if (fs3.existsSync(pathFile)) {
+      executablePath = fs3.readFileSync(pathFile, "utf-8");
     }
     if (executablePath) {
-      electronExecPath = path.join(electronModulePath, "dist", executablePath);
+      electronExecPath = path5.join(electronModulePath, "dist", executablePath);
       process.env.ELECTRON_EXEC_PATH = electronExecPath;
     } else {
       throw new Error("Electron executable file is not existed");
@@ -202,23 +91,23 @@ function getElectronPath() {
   return electronExecPath;
 }
 function getBytecodeCompilerPath() {
-  const scriptPath = path.join(electronModulePath, "bytenode.cjs");
-  if (!fs.existsSync(scriptPath)) {
-    fs.writeFileSync(scriptPath, bytecodeGeneratorScript);
+  const scriptPath = path5.join(electronModulePath, "EIU_bytenode.cjs");
+  if (!fs3.existsSync(scriptPath)) {
+    fs3.writeFileSync(scriptPath, bytecodeGeneratorScript);
   }
   return scriptPath;
 }
 function toRelativePath(filename, importer) {
-  const relPath = path.posix.relative(path.dirname(importer), filename);
+  const relPath = path5.posix.relative(path5.dirname(importer), filename);
   return relPath.startsWith(".") ? relPath : `./${relPath}`;
 }
 function compileToBytecode(code) {
   let data = Buffer.from([]);
-  const logErr = (...args) => log.error(args.join(" "), { timestamp: true });
+  const logErr = (...args) => bytecodeLog.error(args.join(" "), { timestamp: true });
   const electronPath = getElectronPath();
   const bytecodePath = getBytecodeCompilerPath();
-  return new Promise((resolve2, reject) => {
-    const proc = spawn(electronPath, [bytecodePath], {
+  return new Promise((resolve, reject) => {
+    const proc = cp.spawn(electronPath, [bytecodePath], {
       env: { ELECTRON_RUN_AS_NODE: "1" },
       stdio: ["pipe", "pipe", "pipe", "ipc"]
     });
@@ -229,7 +118,7 @@ function compileToBytecode(code) {
     if (proc.stdout) {
       proc.stdout.on("data", (chunk) => data = Buffer.concat([data, chunk]));
       proc.stdout.on("error", (err) => logErr(err));
-      proc.stdout.on("end", () => resolve2(data));
+      proc.stdout.on("end", () => resolve(data));
     }
     if (proc.stderr) {
       proc.stderr.on("data", (chunk) => logErr("Error: ", chunk.toString()));
@@ -237,54 +126,111 @@ function compileToBytecode(code) {
     }
     proc.addListener("error", (err) => logErr(err));
     proc.on("error", (err) => reject(err));
-    proc.on("exit", () => resolve2(data));
+    proc.on("exit", () => resolve(data));
   });
 }
-function convertArrowToFunction(code) {
+function convertArrowFunctionAndTemplate(code) {
   const result = babel.transform(code, {
-    plugins: ["@babel/plugin-transform-arrow-functions"]
+    plugins: ["@babel/plugin-transform-arrow-functions", "@babel/plugin-transform-template-literals"]
   });
   return {
     code: result?.code || code,
     map: result?.map
   };
 }
-function escapeRegExpString(str) {
-  return str.replace(/\\/g, "\\\\").replace(/[|{}()[\]^$+*?.]/g, "\\$&");
+var decodeFn = ";function _0xstr_(a,b){return String.fromCharCode.apply(0,a.map(function(x){return x-b}))};";
+function obfuscateString(input, offset = ~~(Math.random() * 16) + 1) {
+  const hexArray = input.split("").map((c) => "0x" + (c.charCodeAt(0) + offset).toString(16));
+  return `_0xstr_([${hexArray.join(",")}],${offset})`;
 }
-function convertString(code, strings, sourcemap) {
-  let s = null;
-  for (const str of strings.filter(Boolean)) {
-    const regex = new RegExp(`["']${escapeRegExpString(str)}["']`, "g");
-    s ||= new MagicString(code).replace(regex, (match) => obfuscateString(match.slice(1, -1)));
+function convertLiteral(code, sourcemap, offset) {
+  const s = new MagicString(code);
+  let hasTransformed = false;
+  const ast = babel.parse(code, { ast: true });
+  if (!ast) {
+    throw new Error("Cannot parse code");
+  }
+  babel.traverse(ast, {
+    StringLiteral(path6) {
+      const parent = path6.parent;
+      const node = path6.node;
+      if (parent.type === "CallExpression") {
+        if (parent.callee.type === "Identifier" && parent.callee.name === "require") {
+          return;
+        }
+        if (parent.callee.type === "Import") {
+          return;
+        }
+      }
+      if (parent.type.startsWith("Export")) {
+        return;
+      }
+      if (parent.type.startsWith("Import")) {
+        return;
+      }
+      if (parent.type === "ObjectMethod" && parent.key === node) {
+        return;
+      }
+      if (parent.type === "ObjectProperty" && parent.key === node) {
+        const result2 = `[${obfuscateString(node.value, offset)}]`;
+        const start2 = node.start;
+        const end2 = node.end;
+        if (start2 && end2) {
+          s.overwrite(start2, end2, result2);
+          hasTransformed = true;
+        }
+        return;
+      }
+      if (!node.value.trim()) {
+        return;
+      }
+      const result = obfuscateString(node.value, offset);
+      const start = node.start;
+      const end = node.end;
+      if (start && end) {
+        s.overwrite(start, end, result);
+        hasTransformed = true;
+      }
+    }
+  });
+  if (hasTransformed) {
+    s.append("\n").append(decodeFn);
   }
-  return s ? {
+  return {
     code: s.toString(),
-    map: sourcemap ? s.generateMap({ hires: "boundary" }) : null
-  } : { code };
+    map: sourcemap ? s.generateMap({ hires: true }) : void 0
+  };
 }
-function obfuscateString(input) {
-  const offset = Math.floor(Math.random() * 2 << 4) + 1;
-  const hexArray = Array.from(input).map((c) => "0x" + (c.charCodeAt(0) + offset).toString(16));
-  const decodeFn = `function(a,b){return String.fromCharCode.apply(null,a.map(x=>+x-b))}`;
-  return `(${decodeFn})([${hexArray.join(",")}],${offset})`;
+
+// src/vite/utils.ts
+function readableSize(size) {
+  const units = ["B", "KB", "MB", "GB"];
+  let i = 0;
+  while (size >= 1024 && i < units.length - 1) {
+    size /= 1024;
+    i++;
+  }
+  return `${size.toFixed(2)} ${units[i]}`;
 }
 
-// src/build-plugins/build.ts
+// src/vite/build.ts
 async function buildAsar({
   version,
   asarOutputPath,
   gzipPath,
   electronDistPath,
-  rendererDistPath
+  rendererDistPath,
+  generateGzipFile
 }) {
-  renameSync(rendererDistPath, join(electronDistPath, "renderer"));
-  writeFileSync2(join(electronDistPath, "version"), version);
+  fs3.renameSync(rendererDistPath, path5.join(electronDistPath, "renderer"));
+  fs3.writeFileSync(path5.join(electronDistPath, "version"), version);
   await Asar.createPackage(electronDistPath, asarOutputPath);
-  await zipFile(asarOutputPath, gzipPath);
+  const buf = await generateGzipFile(fs3.readFileSync(asarOutputPath));
+  fs3.writeFileSync(gzipPath, buf);
+  log.info(`Build update asar to '${gzipPath}' [${readableSize(buf.length)}]`, { timestamp: true });
+  return buf;
 }
 async function buildVersion({
-  gzipPath,
   versionPath,
   privateKey,
   cert,
@@ -292,52 +238,35 @@ async function buildVersion({
   minimumVersion,
   generateSignature,
   generateVersionJson
-}) {
+}, asarBuffer) {
   let _json = {
     beta: {
       minimumVersion: version,
       signature: "",
-      size: 0,
       version
     },
     minimumVersion: version,
     signature: "",
-    size: 0,
     version
   };
-  if (existsSync2(versionPath)) {
+  if (fs3.existsSync(versionPath)) {
     try {
-      const oldVersionJson = JSON.parse(readFileSync2(versionPath, "utf-8"));
+      const oldVersionJson = JSON.parse(fs3.readFileSync(versionPath, "utf-8"));
       if (isUpdateJSON(oldVersionJson)) {
         _json = oldVersionJson;
       } else {
-        log.warn("old version json is invalid, ignore it");
+        log.warn("Old version json is invalid, ignore it", { timestamp: true });
       }
-    } catch (error) {
+    } catch {
     }
   }
-  const buffer = readFileSync2(gzipPath);
-  const sig = await (generateSignature ?? signature)(buffer, privateKey, cert, version);
-  if (generateVersionJson) {
-    _json = await generateVersionJson(_json, buffer, sig, version, minimumVersion);
-    if (!isUpdateJSON(_json)) {
-      throw new Error("invalid version info");
-    }
-  } else {
-    _json.beta = {
-      version,
-      minimumVersion,
-      signature: sig,
-      size: buffer.length
-    };
-    if (!parseVersion(version).stage) {
-      _json.version = version;
-      _json.minimumVersion = minimumVersion;
-      _json.signature = sig;
-      _json.size = buffer.length;
-    }
+  const sig = await generateSignature(asarBuffer, privateKey, cert, version);
+  _json = await generateVersionJson(_json, sig, version, minimumVersion);
+  if (!isUpdateJSON(_json)) {
+    throw new Error("Invalid version info");
   }
-  writeFileSync2(versionPath, JSON.stringify(_json, null, 2));
+  fs3.writeFileSync(versionPath, JSON.stringify(_json, null, 2));
+  log.info(`build version info to '${versionPath}'`, { timestamp: true });
 }
 async function buildEntry({
   sourcemap,
@@ -346,7 +275,7 @@ async function buildEntry({
   entryOutputDirPath,
   nativeModuleEntryMap,
   overrideEsbuildOptions
-}, cert, protectedStrings) {
+}, define, bytecodeOptions) {
   const option = mergeConfig(
     {
       entryPoints: {
@@ -362,72 +291,82 @@ async function buildEntry({
       entryNames: "[dir]/[name]",
       assetNames: "[dir]/[name]",
       external: ["electron", "original-fs"],
+      treeShaking: true,
       loader: {
         ".node": "empty"
       },
-      define: {
-        __SIGNATURE_CERT__: JSON.stringify(cert)
-      }
+      define
     },
     overrideEsbuildOptions ?? {}
   );
   const { metafile } = await build(option);
-  if (protectedStrings === void 0) {
+  if (!bytecodeOptions?.enable) {
     return;
   }
-  const filePaths = Object.keys(metafile?.outputs ?? []);
+  const filePaths = Object.keys(metafile?.outputs ?? []).filter((filePath) => filePath.endsWith("js"));
   for (const filePath of filePaths) {
-    let code = readFileSync2(filePath, "utf-8");
-    const fileName = basename(filePath);
+    let code = fs3.readFileSync(filePath, "utf-8");
+    const fileName = path5.basename(filePath);
     const isEntry = fileName.endsWith("entry.js");
-    if (isEntry) {
-      code = code.replace(
-        /(`-----BEGIN CERTIFICATE-----[\s\S]*-----END CERTIFICATE-----\n`)/,
-        (_, cert2) => `"${cert2.slice(1, -1).replace(/\n/g, "\\n")}"`
-      );
+    let transformedCode = convertLiteral(convertArrowFunctionAndTemplate(code).code).code;
+    if (bytecodeOptions.beforeCompile) {
+      const result = await bytecodeOptions.beforeCompile(transformedCode, filePath);
+      if (result) {
+        transformedCode = result;
+      }
     }
-    const transformedCode = convertString(
-      convertArrowToFunction(code).code,
-      [...protectedStrings, ...isEntry ? getCert(code) : []]
-    ).code;
     const buffer = await compileToBytecode(transformedCode);
-    writeFileSync2(`${filePath}c`, buffer);
-    writeFileSync2(
+    fs3.writeFileSync(
       filePath,
       `${isEntry ? bytecodeModuleLoaderCode : useStrict}${isEntry ? "" : "module.exports = "}require("./${fileName}c")`
     );
+    fs3.writeFileSync(`${filePath}c`, buffer);
     bytecodeLog.info(
-      `${filePath} => ${(buffer.byteLength / 1e3).toFixed(2)} kB`,
+      `${filePath} [${(buffer.byteLength / 1e3).toFixed(2)} kB]`,
       { timestamp: true }
     );
   }
-  bytecodeLog.info(`${filePaths.length} bundles compiled into bytecode`, { timestamp: true });
+  bytecodeLog.info(`${filePaths.length} file${filePaths.length > 1 ? "s" : ""} compiled into bytecode`, { timestamp: true });
+}
+async function defaultZipFile(buffer) {
+  return new Promise((resolve, reject) => {
+    zlib.brotliCompress(buffer, (err, buffer2) => {
+      if (err) {
+        reject(err);
+      } else {
+        resolve(buffer2);
+      }
+    });
+  });
 }
-function getCert(code) {
-  const cert = code.match(/-----BEGIN CERTIFICATE-----[\s\S]*-----END CERTIFICATE-----\\n/)?.[0];
-  return cert ? [cert] : [];
+function hashBuffer(data, length) {
+  const hash = crypto.createHash("SHA256").update(data).digest("binary");
+  return Buffer.from(hash).subarray(0, length);
+}
+function aesEncrypt(plainText, key, iv) {
+  const cipher = crypto.createCipheriv("aes-256-cbc", key, iv);
+  return cipher.update(plainText, "utf8", "base64url") + cipher.final("base64url");
+}
+function defaultSignature(buffer, privateKey, cert, version) {
+  const sig = crypto.createSign("RSA-SHA256").update(buffer).sign(crypto.createPrivateKey(privateKey), "base64");
+  return aesEncrypt(`${sig}%${version}`, hashBuffer(cert, 32), hashBuffer(buffer, 16));
 }
-
-// src/build-plugins/key.ts
-import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname } from "node:path";
-import { generate } from "selfsigned";
 function generateKeyPair(keyLength, subject, days, privateKeyPath, certPath) {
-  const privateKeyDir = dirname(privateKeyPath);
-  if (!existsSync3(privateKeyDir)) {
-    mkdirSync(privateKeyDir, { recursive: true });
+  const privateKeyDir = path5.dirname(privateKeyPath);
+  if (!fs3.existsSync(privateKeyDir)) {
+    fs3.mkdirSync(privateKeyDir, { recursive: true });
   }
-  const certDir = dirname(certPath);
-  if (!existsSync3(certDir)) {
-    mkdirSync(certDir, { recursive: true });
+  const certDir = path5.dirname(certPath);
+  if (!fs3.existsSync(certDir)) {
+    fs3.mkdirSync(certDir, { recursive: true });
   }
   const { cert, private: privateKey } = generate(subject, {
     keySize: keyLength,
     algorithm: "sha256",
     days
   });
-  writeFileSync3(privateKeyPath, privateKey.replace(/\r\n?/g, "\n"));
-  writeFileSync3(certPath, cert.replace(/\r\n?/g, "\n"));
+  fs3.writeFileSync(privateKeyPath, privateKey.replace(/\r\n?/g, "\n"));
+  fs3.writeFileSync(certPath, cert.replace(/\r\n?/g, "\n"));
 }
 function parseKeys({
   keyLength,
@@ -436,21 +375,29 @@ function parseKeys({
   subject,
   days
 }) {
-  const keysDir = dirname(privateKeyPath);
-  !existsSync3(keysDir) && mkdirSync(keysDir);
-  if (!existsSync3(privateKeyPath) || !existsSync3(certPath)) {
-    log.warn("no key pair found, generate new key pair");
+  const keysDir = path5.dirname(privateKeyPath);
+  let privateKey = process.env.UPDATER_PK;
+  let cert = process.env.UPDATER_CERT;
+  if (privateKey && cert) {
+    log.info("Use `UPDATER_PK` and `UPDATER_CERT` from environment variables", { timestamp: true });
+    return { privateKey, cert };
+  }
+  if (!fs3.existsSync(keysDir)) {
+    fs3.mkdirSync(keysDir);
+  }
+  if (!fs3.existsSync(privateKeyPath) || !fs3.existsSync(certPath)) {
+    log.info("No key pair found, generate new key pair", { timestamp: true });
     generateKeyPair(keyLength, parseSubjects(subject), days, privateKeyPath, certPath);
   }
-  const privateKey = process.env.UPDATER_PK || readFileSync3(privateKeyPath, "utf-8");
-  const cert = process.env.UPDATER_CERT || readFileSync3(certPath, "utf-8");
+  privateKey = fs3.readFileSync(privateKeyPath, "utf-8");
+  cert = fs3.readFileSync(certPath, "utf-8");
   return { privateKey, cert };
 }
 function parseSubjects(subject) {
   return Object.entries(subject).filter(([_, value]) => !!value).map(([name, value]) => ({ name, value }));
 }
 
-// src/build-plugins/option.ts
+// src/vite/option.ts
 function parseOptions(pkg, sourcemap = false, minify = false, options = {}) {
   const {
     minimumVersion = "0.0.0",
@@ -474,24 +421,27 @@ function parseOptions(pkg, sourcemap = false, minify = false, options = {}) {
       privateKeyPath = "keys/private.pem",
       certPath = "keys/cert.pem",
       keyLength = 2048,
-      certInfo = {},
-      overrideGenerator = {}
+      certInfo: {
+        subject = {
+          commonName: pkg.name,
+          organizationName: `org.${pkg.name}`
+        },
+        days = 3650
+      } = {}
+    } = {},
+    overrideGenerator: {
+      generateGzipFile = defaultZipFile,
+      generateSignature = defaultSignature,
+      generateVersionJson = defaultVersionJsonGenerator
     } = {}
   } = options;
-  const { generateSignature, generateVersionJson } = overrideGenerator;
-  let {
-    subject = {
-      commonName: pkg.name,
-      organizationName: `org.${pkg.name}`
-    },
-    days = 3650
-  } = certInfo;
   const buildAsarOption = {
     version: pkg.version,
     asarOutputPath,
     gzipPath,
     electronDistPath,
-    rendererDistPath
+    rendererDistPath,
+    generateGzipFile
   };
   const buildEntryOption = {
     minify: entryMinify ?? minify,
@@ -511,7 +461,6 @@ function parseOptions(pkg, sourcemap = false, minify = false, options = {}) {
   const buildVersionOption = {
     version: pkg.version,
     minimumVersion,
-    gzipPath,
     privateKey,
     cert,
     versionPath,
@@ -520,22 +469,17 @@ function parseOptions(pkg, sourcemap = false, minify = false, options = {}) {
   };
   return { buildAsarOption, buildEntryOption, buildVersionOption, postBuild, cert };
 }
-
-// src/build-plugins/bytecode/index.ts
-import path2 from "node:path";
-import fs2 from "node:fs";
-import { createFilter, normalizePath } from "vite";
-import MagicString2 from "magic-string";
-function bytecodePlugin(isBuild, env, options = {}) {
-  if (!isBuild) {
-    return null;
-  }
+function bytecodePlugin(env, options) {
   const {
-    protectedStrings = [],
-    enablePreload = false
+    enable,
+    preload = false,
+    beforeCompile
   } = options;
-  if (!enablePreload && env === "preload") {
-    bytecodeLog.warn('bytecodePlugin is skiped in preload. To enable in preload, please manually set the "enablePreload" option to true and set `sandbox: false` when creating the window', { timestamp: true });
+  if (!enable) {
+    return null;
+  }
+  if (!preload && env === "preload") {
+    bytecodeLog.warn('`bytecodePlugin` is skiped in preload. To enable in preload, please manually set the "enablePreload" option to true and set `sandbox: false` when creating the window', { timestamp: true });
     return null;
   }
   const filter = createFilter(/\.(m?[jt]s|[jt]sx)$/);
@@ -550,10 +494,9 @@ function bytecodePlugin(isBuild, env, options = {}) {
       config = resolvedConfig;
     },
     transform(code, id2) {
-      if (protectedStrings.length === 0 || !filter(id2)) {
-        return;
+      if (!filter(id2)) {
+        return convertLiteral(code, !!config.build.sourcemap);
       }
-      return convertString(code, protectedStrings, !!config.build.sourcemap);
     },
     generateBundle(options2) {
       if (options2.format !== "es" && bytecodeRequired) {
@@ -568,14 +511,14 @@ function bytecodePlugin(isBuild, env, options = {}) {
     renderChunk(code, chunk, options2) {
       if (options2.format === "es") {
         bytecodeLog.warn(
-          'bytecodePlugin does not support ES module, please remove "type": "module" in package.json or set the "build.rollupOptions.output.format" option to "cjs".',
+          '`bytecodePlugin` does not support ES module, please remove "type": "module" in package.json or set the "build.rollupOptions.output.format" option to "cjs".',
           { timestamp: true }
         );
         return null;
       }
       if (chunk.type === "chunk") {
         bytecodeRequired = true;
-        return convertArrowToFunction(code);
+        return convertArrowFunctionAndTemplate(code);
       }
       return null;
     },
@@ -590,7 +533,7 @@ function bytecodePlugin(isBuild, env, options = {}) {
         (chunk) => chunk.type === "chunk" && chunk.fileName !== bytecodeModuleLoader
       );
       const bytecodeChunks = chunks.map((chunk) => chunk.fileName);
-      const nonEntryChunks = chunks.filter((chunk) => !chunk.isEntry).map((chunk) => path2.basename(chunk.fileName));
+      const nonEntryChunks = chunks.filter((chunk) => !chunk.isEntry).map((chunk) => path5.basename(chunk.fileName));
       const pattern = nonEntryChunks.map((chunk) => `(${chunk})`).join("|");
       const bytecodeRE = pattern ? new RegExp(`require\\(\\S*(?=(${pattern})\\S*\\))`, "g") : null;
       const getBytecodeLoaderBlock = (chunkFileName) => {
@@ -601,9 +544,15 @@ function bytecodePlugin(isBuild, env, options = {}) {
           const chunk = output[name];
           if (chunk.type === "chunk") {
             let _code = chunk.code;
+            if (beforeCompile) {
+              const cbResult = await beforeCompile(_code, chunk.fileName);
+              if (cbResult) {
+                _code = cbResult;
+              }
+            }
             if (bytecodeRE && _code.match(bytecodeRE)) {
               let match;
-              const s = new MagicString2(_code);
+              const s = new MagicString(_code);
               while (match = bytecodeRE.exec(_code)) {
                 const [prefix, chunkName] = match;
                 const len = prefix.length + chunkName.length;
@@ -613,20 +562,20 @@ function bytecodePlugin(isBuild, env, options = {}) {
               }
               _code = s.toString();
             }
-            const chunkFilePath = path2.resolve(outDir, name);
+            const chunkFilePath = path5.resolve(outDir, name);
             if (bytecodeChunks.includes(name)) {
               const bytecodeBuffer = await compileToBytecode(_code);
-              fs2.writeFileSync(path2.resolve(outDir, name + "c"), bytecodeBuffer);
+              fs3.writeFileSync(chunkFilePath + "c", bytecodeBuffer);
               if (chunk.isEntry) {
                 const bytecodeLoaderBlock = getBytecodeLoaderBlock(chunk.fileName);
-                const bytecodeModuleBlock = `require("./${path2.basename(name) + "c"}");`;
+                const bytecodeModuleBlock = `require("./${path5.basename(name) + "c"}");`;
                 const code = `${useStrict}
 ${bytecodeLoaderBlock}
 module.exports=${bytecodeModuleBlock}
 `;
-                fs2.writeFileSync(chunkFilePath, code);
+                fs3.writeFileSync(chunkFilePath, code);
               } else {
-                fs2.unlinkSync(chunkFilePath);
+                fs3.unlinkSync(chunkFilePath);
               }
               bytecodeFiles.push({ name: name + "c", size: bytecodeBuffer.length });
             } else {
@@ -653,18 +602,17 @@ module.exports=${bytecodeModuleBlock}
                 _code = hasBytecodeMoudle ? _code.replace(useStrict, `${useStrict}
 ${bytecodeLoaderBlock}`) : _code;
               }
-              fs2.writeFileSync(chunkFilePath, _code);
+              fs3.writeFileSync(chunkFilePath, _code);
             }
           }
         })
       );
     },
     closeBundle() {
-      const outDir = `${normalizePath(path2.relative(config.root, path2.resolve(config.root, config.build.outDir)))}/`;
+      const outDir = `${normalizePath(path5.relative(config.root, path5.resolve(config.root, config.build.outDir)))}/`;
       bytecodeFiles.forEach((file) => {
-        const kbs = file.size / 1e3;
         bytecodeLog.info(
-          `${outDir}${file.name} => ${kbs.toFixed(2)} kB`,
+          `${outDir}${file.name} [${readableSize(file.size)}]`,
           { timestamp: true }
         );
       });
@@ -673,10 +621,34 @@ ${bytecodeLoaderBlock}`) : _code;
     }
   };
 }
-
-// src/vite.ts
 function debugStartup(args) {
-  process.env.VSCODE_DEBUG ? console.log("[startup] Electron App") : args.startup();
+  if (process.env.VSCODE_DEBUG) {
+    console.log("[startup] Electron App");
+  } else {
+    args.startup();
+  }
+}
+function getMainFilePath(options) {
+  let mainFilePath;
+  if (typeof options === "string") {
+    mainFilePath = path5.basename(options);
+  } else if (Array.isArray(options)) {
+    mainFilePath = path5.basename(options[0]);
+  } else {
+    const name = options?.index ?? options?.main;
+    if (!name) {
+      throw new Error(`\`options.main.files\` (${options}) must have "index" or "main" key, like \`{ index: "..." }\``);
+    }
+    mainFilePath = options?.index ? "index.js" : "main.js";
+  }
+  return mainFilePath.replace(/\.[cm]?ts$/, ".js");
+}
+function parseVersionPath(versionPath) {
+  versionPath = normalizePath(versionPath);
+  if (!versionPath.startsWith("./")) {
+    versionPath = "./" + versionPath;
+  }
+  return new URL(versionPath, "file://").pathname.slice(1);
 }
 async function electronWithUpdater(options) {
   let {
@@ -686,6 +658,7 @@ async function electronWithUpdater(options) {
     preload: _preload,
     sourcemap = !isBuild,
     minify = isBuild,
+    buildVersionJson,
     updater,
     bytecode,
     useNotBundle = true,
@@ -693,46 +666,56 @@ async function electronWithUpdater(options) {
   } = options;
   if (!pkg) {
     log.error(`package.json not found`, { timestamp: true });
-    return null;
+    return void 0;
   }
   if (!pkg.version || !pkg.name || !pkg.main) {
     log.error(`package.json not valid`, { timestamp: true });
-    return null;
+    return void 0;
   }
   const _options = parseOptions(pkg, sourcemap, minify, updater);
-  const bytecodeOptions = typeof bytecode === "object" ? bytecode : bytecode === true ? { protectedStrings: [] } : void 0;
-  if (bytecodeOptions) {
-    minify = false;
-  }
+  const bytecodeOptions = typeof bytecode === "object" ? bytecode : bytecode === true ? { enable: true } : void 0;
   try {
-    rmSync2(_options.buildAsarOption.electronDistPath, { recursive: true, force: true });
-    rmSync2(_options.buildEntryOption.entryOutputDirPath, { recursive: true, force: true });
-  } catch (ignore) {
+    fs3.rmSync(_options.buildAsarOption.electronDistPath, { recursive: true, force: true });
+    fs3.rmSync(_options.buildEntryOption.entryOutputDirPath, { recursive: true, force: true });
+  } catch {
   }
-  log.info(`remove old files`, { timestamp: true });
+  log.info(`Remove old files`, { timestamp: true });
   const { buildAsarOption, buildEntryOption, buildVersionOption, postBuild, cert } = _options;
   const { entryOutputDirPath, nativeModuleEntryMap, appEntryPath } = buildEntryOption;
   sourcemap ??= isBuild || !!process.env.VSCODE_DEBUG;
-  const _appPath = normalizePath2(join2(entryOutputDirPath, "entry.js"));
-  if (resolve(normalizePath2(pkg.main)) !== resolve(_appPath)) {
-    throw new Error(`wrong "main" field in package.json: "${pkg.main}", it should be "${_appPath}"`);
+  const _appPath = normalizePath(path5.join(entryOutputDirPath, "entry.js"));
+  if (path5.resolve(normalizePath(pkg.main)) !== path5.resolve(_appPath)) {
+    throw new Error(`Wrong "main" field in package.json: "${pkg.main}", it should be "${_appPath}"`);
   }
+  const define = {
+    __EIU_ELECTRON_DIST_PATH__: JSON.stringify(buildAsarOption.electronDistPath),
+    __EIU_ENTRY_DIST_PATH__: JSON.stringify(buildEntryOption.entryOutputDirPath),
+    __EIU_IS_DEV__: JSON.stringify(!isBuild),
+    __EIU_MAIN_DEV_DIR__: JSON.stringify(buildAsarOption.electronDistPath),
+    __EIU_MAIN_FILE__: JSON.stringify(getMainFilePath(_main.files)),
+    __EIU_SIGNATURE_CERT__: JSON.stringify(cert),
+    __EIU_VERSION_PATH__: JSON.stringify(parseVersionPath(buildVersionOption.versionPath))
+  };
   const _buildEntry = async () => {
-    await buildEntry(buildEntryOption, cert, isBuild ? bytecodeOptions?.protectedStrings : void 0);
-    log.info(`vite build entry to '${entryOutputDirPath}'`, { timestamp: true });
+    await buildEntry(
+      buildEntryOption,
+      define,
+      bytecodeOptions
+    );
+    log.info(`Build entry to '${entryOutputDirPath}'`, { timestamp: true });
   };
   const _postBuild = postBuild ? async () => await postBuild({
     getPathFromEntryOutputDir(...paths) {
-      return join2(entryOutputDirPath, ...paths);
+      return path5.join(entryOutputDirPath, ...paths);
     },
     copyToEntryOutputDir({ from, to, skipIfExist = true }) {
-      if (existsSync4(from)) {
-        const target = join2(entryOutputDirPath, to ?? basename2(from));
-        if (!skipIfExist || !existsSync4(target)) {
+      if (fs3.existsSync(from)) {
+        const target = path5.join(entryOutputDirPath, to ?? path5.basename(from));
+        if (!skipIfExist || !fs3.existsSync(target)) {
           try {
-            cpSync(from, target);
+            fs3.cpSync(from, target);
           } catch (error) {
-            log.warn(`copy failed: ${error}`);
+            log.warn(`Copy failed: ${error}`, { timestamp: true });
           }
         }
       }
@@ -741,11 +724,8 @@ async function electronWithUpdater(options) {
   };
   let isInit = false;
   const rollupOptions = {
-    // external: [
-    //   /^node:/,
-    //   ...Object.keys('dependencies' in pkg ? pkg.dependencies as object : {}),
-    // ],
-    external: (src) => src.startsWith("node:") || Object.keys("dependencies" in pkg ? pkg.dependencies : {}).includes(src)
+    external: (src) => src.startsWith("node:") || Object.keys("dependencies" in pkg ? pkg.dependencies : {}).includes(src) || src === "original-fs",
+    treeshake: true
   };
   const electronPluginOptions = {
     main: {
@@ -756,20 +736,25 @@ async function electronWithUpdater(options) {
           await _buildEntry();
           await _postBuild();
         }
-        _main.onstart ? _main.onstart(args) : args.startup();
+        if (_main.onstart) {
+          _main.onstart(args);
+        } else {
+          args.startup();
+        }
       },
-      vite: mergeConfig2(
+      vite: mergeConfig(
         {
           plugins: [
             !isBuild && useNotBundle ? notBundle() : void 0,
-            bytecodeOptions && bytecodePlugin(isBuild, "main", bytecodeOptions)
+            bytecodeOptions && bytecodePlugin("main", bytecodeOptions)
           ],
           build: {
             sourcemap,
             minify,
             outDir: `${buildAsarOption.electronDistPath}/main`,
             rollupOptions
-          }
+          },
+          define
         },
         _main.vite ?? {}
       )
@@ -777,10 +762,10 @@ async function electronWithUpdater(options) {
     preload: {
       input: _preload.files,
       onstart: _preload.onstart,
-      vite: mergeConfig2(
+      vite: mergeConfig(
         {
           plugins: [
-            bytecodeOptions && bytecodePlugin(isBuild, "preload", bytecodeOptions),
+            bytecodeOptions && bytecodePlugin("preload", bytecodeOptions),
             {
               name: `${id}-build`,
               enforce: "post",
@@ -790,10 +775,12 @@ async function electronWithUpdater(options) {
               async closeBundle() {
                 await _buildEntry();
                 await _postBuild();
-                await buildAsar(buildAsarOption);
-                log.info(`build asar to '${buildAsarOption.asarOutputPath}'`, { timestamp: true });
-                await buildVersion(buildVersionOption);
-                log.info(`build version info to '${buildVersionOption.versionPath}'`, { timestamp: true });
+                const buffer = await buildAsar(buildAsarOption);
+                if (!buildVersionJson && !isCI) {
+                  log.warn("No `buildVersionJson` setup, skip build version json. Will build in CI by default", { timestamp: true });
+                } else {
+                  await buildVersion(buildVersionOption, buffer);
+                }
               }
             }
           ],
@@ -802,26 +789,32 @@ async function electronWithUpdater(options) {
             minify,
             outDir: `${buildAsarOption.electronDistPath}/preload`,
             rollupOptions
-          }
+          },
+          define
         },
         _preload.vite ?? {}
       )
     }
   };
-  logParsedOptions && log.info(
-    JSON.stringify(
-      {
-        ...electronPluginOptions,
-        updater: { buildAsarOption, buildEntryOption, buildVersionOption }
-      },
-      (key, value) => (key === "privateKey" || key === "cert") && !(typeof logParsedOptions === "object" && logParsedOptions.showKeys === true) ? "***" : value,
-      2
-    ),
-    { timestamp: true }
-  );
+  if (logParsedOptions) {
+    log.info(
+      JSON.stringify(
+        {
+          ...electronPluginOptions,
+          updater: { buildAsarOption, buildEntryOption, buildVersionOption }
+        },
+        (key, value) => (key === "privateKey" || key === "cert") && !(typeof logParsedOptions === "object" && logParsedOptions.showKeys === true) ? "***" : value,
+        2
+      ),
+      { timestamp: true }
+    );
+  }
   let extraHmrPlugin;
   if (nativeModuleEntryMap) {
-    const files = [...Object.values(nativeModuleEntryMap), appEntryPath].map((file) => resolve(normalizePath2(file)));
+    const files = [
+      ...Object.values(nativeModuleEntryMap),
+      appEntryPath
+    ].map((file) => path5.resolve(normalizePath(file)));
     extraHmrPlugin = {
       name: `${id}-dev`,
       apply() {
@@ -841,7 +834,6 @@ async function electronWithUpdater(options) {
   }
   return [ElectronSimple(electronPluginOptions), extraHmrPlugin];
 }
-export {
-  debugStartup,
-  electronWithUpdater
-};
+var vite_default = electronWithUpdater;
+
+export { debugStartup, vite_default as default, electronWithUpdater };