electron-updater-for-render 1.1.2-beta.7 → 1.1.3

package/dist/main/index.cjs

@@ -35,7 +35,6 @@ __export(main_exports, {
 module.exports = __toCommonJS(main_exports);
 var import_path2 = __toESM(require("path"), 1);
 var import_original_fs = __toESM(require("original-fs"), 1);
-var import_crypto = __toESM(require("crypto"), 1);
 var import_semver = __toESM(require("semver"), 1);
 var import_electron2 = require("electron");
 var import_promises = require("stream/promises");
@@ -158,7 +157,45 @@ var RouterHandler = class _RouterHandler {
   }
 };
 
+// src/main/utils.ts
+var import_fs2 = require("fs");
+var import_crypto = __toESM(require("crypto"), 1);
+function verifyFileStream(filePath, info, publicKey) {
+  return new Promise((resolve, reject) => {
+    const hash = import_crypto.default.createHash("sha256");
+    const verify = publicKey && info.signature ? import_crypto.default.createVerify("RSA-SHA256") : null;
+    const stream = (0, import_fs2.createReadStream)(filePath);
+    stream.on("data", (chunk) => {
+      hash.update(chunk);
+      if (verify) {
+        verify.update(chunk);
+      }
+    });
+    stream.on("end", () => {
+      const sha256 = hash.digest("hex");
+      if (info.sha256 && sha256 !== info.sha256) {
+        console.error(`[RenderUpdater] SHA256 mismatch! Expected ${info.sha256}, got ${sha256}`);
+        return resolve(false);
+      }
+      if (verify && publicKey && info.signature) {
+        verify.end();
+        const isValid = verify.verify(publicKey, info.signature, "base64");
+        if (!isValid) {
+          console.error("[RenderUpdater] RSA Signature verification failed.");
+          return resolve(false);
+        }
+      }
+      resolve(true);
+    });
+    stream.on("error", (err) => {
+      console.error("[RenderUpdater] Stream error during file verification:", err);
+      reject(err);
+    });
+  });
+}
+
 // src/main/index.ts
+var fsPromises = import_original_fs.default.promises;
 var RenderUpdater = class {
   versionsDir;
   currentVersionFile;
@@ -206,7 +243,7 @@ var RenderUpdater = class {
     if (!import_original_fs.default.existsSync(this.versionsDir)) {
       import_original_fs.default.mkdirSync(this.versionsDir, { recursive: true });
     }
-    const savedVersion = this.readCurrentVersionFromFile();
+    const savedVersion = this.readCurrentVersionFromFileSync();
     this._activeVersion = savedVersion || "0.0.0";
     this._diskVersion = savedVersion || "0.0.0";
     console.log("[RenderUpdater] Initialized. Active version:", this._activeVersion);
@@ -221,7 +258,8 @@ var RenderUpdater = class {
       });
     }
   }
-  readCurrentVersionFromFile() {
+  // 初始化使用一次的同步方法（可接受）
+  readCurrentVersionFromFileSync() {
     if (import_original_fs.default.existsSync(this.currentVersionFile)) {
       try {
         const data = JSON.parse(import_original_fs.default.readFileSync(this.currentVersionFile, "utf-8"));
@@ -234,35 +272,33 @@ var RenderUpdater = class {
     }
     return "0.0.0";
   }
-  cleanOldVersions() {
+  // 全面异步替换原同步清理操作
+  async cleanOldVersions() {
     try {
       if (!this.versionsDir) return;
-      const versionDirs = import_original_fs.default.readdirSync(this.versionsDir).filter((v) => {
-        return import_original_fs.default.statSync(import_path2.default.join(this.versionsDir, v)).isDirectory() && import_semver.default.valid(v);
-      });
+      const files = await fsPromises.readdir(this.versionsDir, { withFileTypes: true });
+      const versionDirs = files.filter((dirent) => dirent.isDirectory() && import_semver.default.valid(dirent.name)).map((dirent) => dirent.name);
       versionDirs.sort((a, b) => import_semver.default.compare(import_semver.default.coerce(b) ?? b, import_semver.default.coerce(a) ?? a));
-      const activeIdx = versionDirs.indexOf(this._activeVersion);
-      const diskIdx = versionDirs.indexOf(this._diskVersion);
       const safeVersions = /* @__PURE__ */ new Set();
-      if (activeIdx !== -1) safeVersions.add(this._activeVersion);
-      if (diskIdx !== -1) safeVersions.add(this._diskVersion);
+      safeVersions.add(this._activeVersion);
+      safeVersions.add(this._diskVersion);
       let kept = 0;
       for (const v of versionDirs) {
         if (!safeVersions.has(v)) {
-          console.info(`[RenderUpdater] Cleaning up old version: ${v}`);
-          try {
-            import_original_fs.default.rmSync(import_path2.default.join(this.versionsDir, v), { recursive: true, force: true });
-          } catch (e) {
-            if (e.code === "EBUSY") {
-              console.warn(`[RenderUpdater] Version ${v} is locked, skipping.`);
-            } else {
-              console.error(`[RenderUpdater] Failed to remove version ${v}:`, e);
+          if (kept >= this.maxVersionsToKeep) {
+            console.info(`[RenderUpdater] Cleaning up old version: ${v}`);
+            try {
+              await fsPromises.rm(import_path2.default.join(this.versionsDir, v), { recursive: true, force: true });
+            } catch (e) {
+              if (e.code === "EBUSY") {
+                console.warn(`[RenderUpdater] Version ${v} is locked, skipping.`);
+              } else {
+                console.error(`[RenderUpdater] Failed to remove version ${v}:`, e);
+              }
             }
+          } else {
+            kept++;
           }
-        } else {
-          kept++;
-        }
-        if (kept >= this.maxVersionsToKeep && !safeVersions.has(v)) {
         }
       }
     } catch (e) {
@@ -333,25 +369,21 @@ var RenderUpdater = class {
     try {
       console.log("[RenderUpdater] download() entry. current this.versionsDir:", this.versionsDir);
       const infoToUse = providedInfo || await (await fetch(`${this.baseUrl}/latest.json?t=${Date.now()}`)).json();
-      if (!this.versionsDir) {
-        throw new Error("[RenderUpdater] CRITICAL: this.versionsDir lost in download.");
-      }
-      if (!infoToUse || !infoToUse.version) {
-        throw new Error(`[RenderUpdater] CRITICAL: infoToUse or version missing. info: ${JSON.stringify(infoToUse)}`);
-      }
+      if (!this.versionsDir) throw new Error("[RenderUpdater] CRITICAL: this.versionsDir lost in download.");
+      if (!infoToUse || !infoToUse.version) throw new Error(`[RenderUpdater] CRITICAL: infoToUse or version missing. info: ${JSON.stringify(infoToUse)}`);
       const versionDir = import_path2.default.join(this.versionsDir, infoToUse.version);
-      const asarPath = import_path2.default.join(versionDir, "renderer.asar");
-      if (import_original_fs.default.existsSync(asarPath) && this.verifyFile(asarPath, infoToUse)) {
+      const finalAsarPath = import_path2.default.join(versionDir, "renderer.asar");
+      const tmpAsarPath = import_path2.default.join(versionDir, "renderer.asar.tmp");
+      if (import_original_fs.default.existsSync(finalAsarPath) && await verifyFileStream(finalAsarPath, infoToUse, this.publicKey)) {
         console.log("[RenderUpdater] File already exists and verified. Skipping download.");
         onProgress?.(100);
         return;
       }
-      if (!import_original_fs.default.existsSync(versionDir)) {
-        import_original_fs.default.mkdirSync(versionDir, { recursive: true });
-      }
+      await fsPromises.mkdir(versionDir, { recursive: true });
       let downloadedBytes = 0;
-      if (import_original_fs.default.existsSync(asarPath)) {
-        downloadedBytes = import_original_fs.default.statSync(asarPath).size;
+      if (import_original_fs.default.existsSync(tmpAsarPath)) {
+        const stats = await fsPromises.stat(tmpAsarPath);
+        downloadedBytes = stats.size;
       }
       const fetchOptions = {};
       if (downloadedBytes > 0) {
@@ -372,7 +404,7 @@ var RenderUpdater = class {
       const incomingTotal = contentLength ? parseInt(contentLength, 10) : 0;
       const total = downloadedBytes + incomingTotal;
       if (!downloadResponse.body) throw new Error("Response body is empty");
-      const fileStream = import_original_fs.default.createWriteStream(asarPath, { flags: downloadResponse.status === 206 ? "a" : "w" });
+      const fileStream = import_original_fs.default.createWriteStream(tmpAsarPath, { flags: downloadResponse.status === 206 ? "a" : "w" });
       const progressTransform = new import_stream.Transform({
         transform(chunk, _encoding, callback) {
           downloadedBytes += chunk.length;
@@ -387,62 +419,34 @@ var RenderUpdater = class {
         progressTransform,
         fileStream
       );
-      if (!this.verifyFile(asarPath, infoToUse)) {
-        import_original_fs.default.rmSync(versionDir, { recursive: true, force: true });
+      if (!await verifyFileStream(tmpAsarPath, infoToUse, this.publicKey)) {
+        await fsPromises.rm(tmpAsarPath, { force: true });
         throw new Error("[RenderUpdater] Verification failed after download (SHA256 or RSA Mismatch)");
       }
-      this.setUpdatePending(infoToUse.version);
-      this.cleanOldVersions();
+      await fsPromises.rename(tmpAsarPath, finalAsarPath);
+      await this.setUpdatePending(infoToUse.version);
+      await this.cleanOldVersions();
     } finally {
       this.isDownloading = false;
     }
   }
-  verifyFile(filePath, info) {
-    const fileBuffer = import_original_fs.default.readFileSync(filePath);
-    const hashSum = import_crypto.default.createHash("sha256");
-    hashSum.update(fileBuffer);
-    const sha256 = hashSum.digest("hex");
-    if (sha256 !== info.sha256 && info.sha256 !== "") {
-      console.error(`[RenderUpdater] SHA256 mismatch! Expected ${info.sha256}, got ${sha256}`);
-      return false;
-    }
-    if (this.publicKey && info.signature) {
-      try {
-        const verify = import_crypto.default.createVerify("RSA-SHA256");
-        verify.update(fileBuffer);
-        verify.end();
-        const isValid = verify.verify(this.publicKey, info.signature, "base64");
-        if (!isValid) {
-          console.error("[RenderUpdater] RSA Signature verification failed.");
-          return false;
-        }
-      } catch (err) {
-        console.error("[RenderUpdater] RSA verification error:", err);
-        return false;
-      }
-    }
-    return true;
-  }
-  useVersion(version) {
-    this.updateDiskVersion(version);
-    this.updateMemoryVersion(version);
+  async useVersion(version) {
+    await this.updateDiskVersion(version);
+    this._activeVersion = version;
   }
-  setUpdatePending(version) {
-    this.updateDiskVersion(version);
+  async setUpdatePending(version) {
+    await this.updateDiskVersion(version);
     if (this.onStatusChanged) {
       this.onStatusChanged({ status: "ready", version });
     }
   }
-  updateDiskVersion(version) {
-    import_original_fs.default.writeFileSync(
+  async updateDiskVersion(version) {
+    await fsPromises.writeFile(
       this.currentVersionFile,
       JSON.stringify({ version, date: (/* @__PURE__ */ new Date()).toISOString() })
     );
     this._diskVersion = version;
   }
-  updateMemoryVersion(version) {
-    this._activeVersion = version;
-  }
   async installAndRestart() {
     if (this.onBeforeRestart) {
       await this.onBeforeRestart();
@@ -450,104 +454,130 @@ var RenderUpdater = class {
     import_electron2.app.relaunch();
     import_electron2.app.quit();
   }
+  // --- 改版后切分的上帝函数 ---
   async checkForUpdatesAndNotify() {
     try {
       const checkRes = await this.check();
-      if (checkRes.updateAvailable && checkRes.info) {
-        const info = checkRes.info;
-        const isReady = checkRes.status === "ready";
-        const doDownload = async () => {
-          try {
-            if (!isReady) {
-              await this.download(info, this.onDownloadProgress);
-            }
-            const performInstall = async (shouldRestart) => {
-              if (shouldRestart) {
-                this.useVersion(info.version);
-                await this.installAndRestart();
-              } else {
-                this.setUpdatePending(info.version);
-                console.info(`[RenderUpdater] Update v${info.version} ready, will apply on next launch.`);
-              }
-            };
-            if (this.onDownloadComplete) {
-              this.onDownloadComplete(info, () => {
-                performInstall(true).catch(console.error);
-              });
-            } else {
-              if (info.forceUpdate || isReady) {
-                if (isReady) {
-                  const { response } = await import_electron2.dialog.showMessageBox({
-                    type: "info",
-                    title: "\u66F4\u65B0\u5C31\u7EEA",
-                    message: `\u65B0\u7248\u672C v${info.version} \u5DF2\u51C6\u5907\u5C31\u7EEA\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u5E94\u7528\uFF1F`,
-                    buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
-                    defaultId: 0,
-                    cancelId: 1
-                  });
-                  await performInstall(response === 0);
-                } else {
-                  if (info.forceUpdate === "prompt") {
-                    import_electron2.dialog.showMessageBoxSync({
-                      type: "warning",
-                      title: "\u4E0B\u8F7D\u5B8C\u6210",
-                      message: `\u6700\u65B0\u7248\u672C v${info.version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u5373\u5C06\u91CD\u542F\u7A0B\u5E8F\u4EE5\u5E94\u7528\u66F4\u65B0\u3002`,
-                      buttons: ["\u6211\u77E5\u9053\u4E86"]
-                    });
-                  }
-                  await performInstall(true);
-                }
-              } else if (this.autoPrompt) {
-                const { response } = await import_electron2.dialog.showMessageBox({
-                  type: "info",
-                  title: "\u4E0B\u8F7D\u5B8C\u6210",
-                  message: `\u6700\u65B0\u7248\u672C v${info.version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u4EE5\u5E94\u7528\u66F4\u65B0\uFF1F`,
-                  buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
-                  defaultId: 0,
-                  cancelId: 1
-                });
-                await performInstall(response === 0);
-              }
-            }
-          } catch (e) {
-            if (this.onError) {
-              this.onError(e);
-            } else {
-              console.error("[RenderUpdater] Download/Install error:", e);
-            }
-          }
-        };
-        if (this.onUpdateAvailable) {
-          this.onUpdateAvailable(info, doDownload);
+      if (!checkRes.updateAvailable || !checkRes.info) return;
+      const info = checkRes.info;
+      if (checkRes.status === "ready") {
+        await this.handleReadyUpdate(info);
+      } else {
+        await this.handleNewUpdate(info);
+      }
+    } catch (e) {
+      this.handleError(e);
+    }
+  }
+  async handleReadyUpdate(info) {
+    if (this.onUpdateAvailable) {
+      this.onUpdateAvailable(info, async () => {
+        if (this.onDownloadComplete) {
+          this.onDownloadComplete(info, () => this.performInstall(info, true).catch(this.handleError.bind(this)));
         } else {
-          if (info.forceUpdate || isReady) {
-            await doDownload();
-          } else if (this.autoDownload) {
-            await doDownload();
-          } else if (this.autoPrompt) {
-            const { response } = await import_electron2.dialog.showMessageBox({
-              type: "info",
-              title: "\u53D1\u73B0\u65B0\u7248\u672C",
-              message: `\u53D1\u73B0\u53EF\u7528\u66F4\u65B0 (v${info.version})\u3002\u662F\u5426\u7ACB\u5373\u4E0B\u8F7D\u66F4\u65B0\uFF1F
-
-\u66F4\u65B0\u65E5\u5FD7\uFF1A
-${info.releaseNotes || "\u65E0\u8BE6\u7EC6\u8BB0\u5F55\u3002"}`,
-              buttons: ["\u7ACB\u5373\u66F4\u65B0", "\u7A0D\u540E\u518D\u8BF4"],
-              cancelId: 1
-            });
-            if (response === 0) {
-              await doDownload();
-            }
-          }
+          await this.performInstall(info, true);
         }
+      });
+      return;
+    }
+    if (info.forceUpdate || !this.autoPrompt) {
+      await this.performInstall(info, true);
+      return;
+    }
+    const response = await this.showReadyDialog(info.version);
+    await this.performInstall(info, response === 0);
+  }
+  async handleNewUpdate(info) {
+    if (this.onUpdateAvailable) {
+      this.onUpdateAvailable(info, () => this.executeAutoDownload(info));
+      return;
+    }
+    if (info.forceUpdate || this.autoDownload) {
+      await this.executeAutoDownload(info);
+    } else if (this.autoPrompt) {
+      const response = await this.showNewUpdateDialog(info);
+      if (response === 0) {
+        await this.executeAutoDownload(info);
       }
-    } catch (e) {
-      if (this.onError) {
-        this.onError(e);
+    }
+  }
+  async executeAutoDownload(info) {
+    try {
+      await this.download(info, this.onDownloadProgress);
+      const doInstall = (shouldRestart) => this.performInstall(info, shouldRestart).catch(this.handleError.bind(this));
+      if (this.onDownloadComplete) {
+        this.onDownloadComplete(info, () => doInstall(true));
       } else {
-        console.error("[RenderUpdater] Error in checkForUpdatesAndNotify:", e);
+        const isSilent = info.forceUpdate === "silent";
+        const shouldRestart = isSilent || await this.showDownloadCompleteDialog(info.version, info.forceUpdate === "prompt") === 0;
+        await doInstall(shouldRestart);
       }
+    } catch (e) {
+      this.handleError(e);
+    }
+  }
+  async performInstall(info, shouldRestart) {
+    if (shouldRestart) {
+      await this.useVersion(info.version);
+      await this.installAndRestart();
+    } else {
+      await this.setUpdatePending(info.version);
+      console.info(`[RenderUpdater] Update v${info.version} ready, will apply on next launch.`);
+    }
+  }
+  handleError(error) {
+    if (this.onError) {
+      this.onError(error);
+    } else {
+      console.error("[RenderUpdater] Error:", error);
+    }
+  }
+  // UI 分发抽离
+  async showReadyDialog(version) {
+    const { response } = await import_electron2.dialog.showMessageBox({
+      type: "info",
+      title: "\u66F4\u65B0\u5C31\u7EEA",
+      message: `\u65B0\u7248\u672C v${version} \u5DF2\u51C6\u5907\u5C31\u7EEA\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u5E94\u7528\uFF1F`,
+      buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
+      defaultId: 0,
+      cancelId: 1
+    });
+    return response;
+  }
+  async showNewUpdateDialog(info) {
+    const { response } = await import_electron2.dialog.showMessageBox({
+      type: "info",
+      title: "\u53D1\u73B0\u65B0\u7248\u672C",
+      message: `\u53D1\u73B0\u53EF\u7528\u66F4\u65B0 (v${info.version})\u3002\u662F\u5426\u7ACB\u5373\u4E0B\u8F7D\u66F4\u65B0\uFF1F
+
+\u66F4\u65B0\u65E5\u5FD7\uFF1A
+${info.releaseNotes || "\u65E0\u8BE6\u7EC6\u8BB0\u5F55\u3002"}`,
+      buttons: ["\u7ACB\u5373\u66F4\u65B0", "\u7A0D\u540E\u518D\u8BF4"],
+      cancelId: 1
+    });
+    return response;
+  }
+  async showDownloadCompleteDialog(version, forcePrompt) {
+    if (forcePrompt) {
+      import_electron2.dialog.showMessageBoxSync({
+        type: "warning",
+        title: "\u4E0B\u8F7D\u5B8C\u6210",
+        message: `\u6700\u65B0\u7248\u672C v${version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u5373\u5C06\u91CD\u542F\u7A0B\u5E8F\u4EE5\u5E94\u7528\u66F4\u65B0\u3002`,
+        buttons: ["\u6211\u77E5\u9053\u4E86"]
+      });
+      return 0;
+    } else if (this.autoPrompt) {
+      const { response } = await import_electron2.dialog.showMessageBox({
+        type: "info",
+        title: "\u4E0B\u8F7D\u5B8C\u6210",
+        message: `\u6700\u65B0\u7248\u672C v${version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u4EE5\u5E94\u7528\u66F4\u65B0\uFF1F`,
+        buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
+        defaultId: 0,
+        cancelId: 1
+      });
+      return response;
     }
+    return 0;
   }
 };
 // Annotate the CommonJS export names for ESM import in node:

package/dist/main/index.d.ts

@@ -22,7 +22,7 @@ export declare class RenderUpdater {
     onError?: (error: Error) => void;
     onBeforeRestart?: () => void | Promise<void>;
     constructor(options: UpdaterOptions);
-    private readCurrentVersionFromFile;
+    private readCurrentVersionFromFileSync;
     private cleanOldVersions;
     get activeVersion(): string;
     get pendingVersion(): string;
@@ -35,11 +35,17 @@ export declare class RenderUpdater {
         status: 'idle' | 'available' | 'ready';
     }>;
     download(providedInfo?: UpdateInfo, onProgress?: (percent: number) => void): Promise<void>;
-    private verifyFile;
-    useVersion(version: string): void;
-    setUpdatePending(version: string): void;
+    useVersion(version: string): Promise<void>;
+    setUpdatePending(version: string): Promise<void>;
     private updateDiskVersion;
-    private updateMemoryVersion;
     installAndRestart(): Promise<void>;
     checkForUpdatesAndNotify(): Promise<void>;
+    private handleReadyUpdate;
+    private handleNewUpdate;
+    private executeAutoDownload;
+    private performInstall;
+    private handleError;
+    private showReadyDialog;
+    private showNewUpdateDialog;
+    private showDownloadCompleteDialog;
 }

package/dist/main/index.js

@@ -1,7 +1,6 @@
 // src/main/index.ts
 import path2 from "path";
 import fs2 from "original-fs";
-import crypto from "crypto";
 import semver from "semver";
 import { app as app2, dialog } from "electron";
 import { pipeline } from "stream/promises";
@@ -124,7 +123,45 @@ var RouterHandler = class _RouterHandler {
   }
 };
 
+// src/main/utils.ts
+import { createReadStream } from "fs";
+import crypto from "crypto";
+function verifyFileStream(filePath, info, publicKey) {
+  return new Promise((resolve, reject) => {
+    const hash = crypto.createHash("sha256");
+    const verify = publicKey && info.signature ? crypto.createVerify("RSA-SHA256") : null;
+    const stream = createReadStream(filePath);
+    stream.on("data", (chunk) => {
+      hash.update(chunk);
+      if (verify) {
+        verify.update(chunk);
+      }
+    });
+    stream.on("end", () => {
+      const sha256 = hash.digest("hex");
+      if (info.sha256 && sha256 !== info.sha256) {
+        console.error(`[RenderUpdater] SHA256 mismatch! Expected ${info.sha256}, got ${sha256}`);
+        return resolve(false);
+      }
+      if (verify && publicKey && info.signature) {
+        verify.end();
+        const isValid = verify.verify(publicKey, info.signature, "base64");
+        if (!isValid) {
+          console.error("[RenderUpdater] RSA Signature verification failed.");
+          return resolve(false);
+        }
+      }
+      resolve(true);
+    });
+    stream.on("error", (err) => {
+      console.error("[RenderUpdater] Stream error during file verification:", err);
+      reject(err);
+    });
+  });
+}
+
 // src/main/index.ts
+var fsPromises = fs2.promises;
 var RenderUpdater = class {
   versionsDir;
   currentVersionFile;
@@ -172,7 +209,7 @@ var RenderUpdater = class {
     if (!fs2.existsSync(this.versionsDir)) {
       fs2.mkdirSync(this.versionsDir, { recursive: true });
     }
-    const savedVersion = this.readCurrentVersionFromFile();
+    const savedVersion = this.readCurrentVersionFromFileSync();
     this._activeVersion = savedVersion || "0.0.0";
     this._diskVersion = savedVersion || "0.0.0";
     console.log("[RenderUpdater] Initialized. Active version:", this._activeVersion);
@@ -187,7 +224,8 @@ var RenderUpdater = class {
       });
     }
   }
-  readCurrentVersionFromFile() {
+  // 初始化使用一次的同步方法（可接受）
+  readCurrentVersionFromFileSync() {
     if (fs2.existsSync(this.currentVersionFile)) {
       try {
         const data = JSON.parse(fs2.readFileSync(this.currentVersionFile, "utf-8"));
@@ -200,35 +238,33 @@ var RenderUpdater = class {
     }
     return "0.0.0";
   }
-  cleanOldVersions() {
+  // 全面异步替换原同步清理操作
+  async cleanOldVersions() {
     try {
       if (!this.versionsDir) return;
-      const versionDirs = fs2.readdirSync(this.versionsDir).filter((v) => {
-        return fs2.statSync(path2.join(this.versionsDir, v)).isDirectory() && semver.valid(v);
-      });
+      const files = await fsPromises.readdir(this.versionsDir, { withFileTypes: true });
+      const versionDirs = files.filter((dirent) => dirent.isDirectory() && semver.valid(dirent.name)).map((dirent) => dirent.name);
       versionDirs.sort((a, b) => semver.compare(semver.coerce(b) ?? b, semver.coerce(a) ?? a));
-      const activeIdx = versionDirs.indexOf(this._activeVersion);
-      const diskIdx = versionDirs.indexOf(this._diskVersion);
       const safeVersions = /* @__PURE__ */ new Set();
-      if (activeIdx !== -1) safeVersions.add(this._activeVersion);
-      if (diskIdx !== -1) safeVersions.add(this._diskVersion);
+      safeVersions.add(this._activeVersion);
+      safeVersions.add(this._diskVersion);
       let kept = 0;
       for (const v of versionDirs) {
         if (!safeVersions.has(v)) {
-          console.info(`[RenderUpdater] Cleaning up old version: ${v}`);
-          try {
-            fs2.rmSync(path2.join(this.versionsDir, v), { recursive: true, force: true });
-          } catch (e) {
-            if (e.code === "EBUSY") {
-              console.warn(`[RenderUpdater] Version ${v} is locked, skipping.`);
-            } else {
-              console.error(`[RenderUpdater] Failed to remove version ${v}:`, e);
+          if (kept >= this.maxVersionsToKeep) {
+            console.info(`[RenderUpdater] Cleaning up old version: ${v}`);
+            try {
+              await fsPromises.rm(path2.join(this.versionsDir, v), { recursive: true, force: true });
+            } catch (e) {
+              if (e.code === "EBUSY") {
+                console.warn(`[RenderUpdater] Version ${v} is locked, skipping.`);
+              } else {
+                console.error(`[RenderUpdater] Failed to remove version ${v}:`, e);
+              }
             }
+          } else {
+            kept++;
           }
-        } else {
-          kept++;
-        }
-        if (kept >= this.maxVersionsToKeep && !safeVersions.has(v)) {
         }
       }
     } catch (e) {
@@ -299,25 +335,21 @@ var RenderUpdater = class {
     try {
       console.log("[RenderUpdater] download() entry. current this.versionsDir:", this.versionsDir);
       const infoToUse = providedInfo || await (await fetch(`${this.baseUrl}/latest.json?t=${Date.now()}`)).json();
-      if (!this.versionsDir) {
-        throw new Error("[RenderUpdater] CRITICAL: this.versionsDir lost in download.");
-      }
-      if (!infoToUse || !infoToUse.version) {
-        throw new Error(`[RenderUpdater] CRITICAL: infoToUse or version missing. info: ${JSON.stringify(infoToUse)}`);
-      }
+      if (!this.versionsDir) throw new Error("[RenderUpdater] CRITICAL: this.versionsDir lost in download.");
+      if (!infoToUse || !infoToUse.version) throw new Error(`[RenderUpdater] CRITICAL: infoToUse or version missing. info: ${JSON.stringify(infoToUse)}`);
       const versionDir = path2.join(this.versionsDir, infoToUse.version);
-      const asarPath = path2.join(versionDir, "renderer.asar");
-      if (fs2.existsSync(asarPath) && this.verifyFile(asarPath, infoToUse)) {
+      const finalAsarPath = path2.join(versionDir, "renderer.asar");
+      const tmpAsarPath = path2.join(versionDir, "renderer.asar.tmp");
+      if (fs2.existsSync(finalAsarPath) && await verifyFileStream(finalAsarPath, infoToUse, this.publicKey)) {
         console.log("[RenderUpdater] File already exists and verified. Skipping download.");
         onProgress?.(100);
         return;
       }
-      if (!fs2.existsSync(versionDir)) {
-        fs2.mkdirSync(versionDir, { recursive: true });
-      }
+      await fsPromises.mkdir(versionDir, { recursive: true });
       let downloadedBytes = 0;
-      if (fs2.existsSync(asarPath)) {
-        downloadedBytes = fs2.statSync(asarPath).size;
+      if (fs2.existsSync(tmpAsarPath)) {
+        const stats = await fsPromises.stat(tmpAsarPath);
+        downloadedBytes = stats.size;
       }
       const fetchOptions = {};
       if (downloadedBytes > 0) {
@@ -338,7 +370,7 @@ var RenderUpdater = class {
       const incomingTotal = contentLength ? parseInt(contentLength, 10) : 0;
       const total = downloadedBytes + incomingTotal;
       if (!downloadResponse.body) throw new Error("Response body is empty");
-      const fileStream = fs2.createWriteStream(asarPath, { flags: downloadResponse.status === 206 ? "a" : "w" });
+      const fileStream = fs2.createWriteStream(tmpAsarPath, { flags: downloadResponse.status === 206 ? "a" : "w" });
       const progressTransform = new Transform({
         transform(chunk, _encoding, callback) {
           downloadedBytes += chunk.length;
@@ -353,62 +385,34 @@ var RenderUpdater = class {
         progressTransform,
         fileStream
       );
-      if (!this.verifyFile(asarPath, infoToUse)) {
-        fs2.rmSync(versionDir, { recursive: true, force: true });
+      if (!await verifyFileStream(tmpAsarPath, infoToUse, this.publicKey)) {
+        await fsPromises.rm(tmpAsarPath, { force: true });
         throw new Error("[RenderUpdater] Verification failed after download (SHA256 or RSA Mismatch)");
       }
-      this.setUpdatePending(infoToUse.version);
-      this.cleanOldVersions();
+      await fsPromises.rename(tmpAsarPath, finalAsarPath);
+      await this.setUpdatePending(infoToUse.version);
+      await this.cleanOldVersions();
     } finally {
       this.isDownloading = false;
     }
   }
-  verifyFile(filePath, info) {
-    const fileBuffer = fs2.readFileSync(filePath);
-    const hashSum = crypto.createHash("sha256");
-    hashSum.update(fileBuffer);
-    const sha256 = hashSum.digest("hex");
-    if (sha256 !== info.sha256 && info.sha256 !== "") {
-      console.error(`[RenderUpdater] SHA256 mismatch! Expected ${info.sha256}, got ${sha256}`);
-      return false;
-    }
-    if (this.publicKey && info.signature) {
-      try {
-        const verify = crypto.createVerify("RSA-SHA256");
-        verify.update(fileBuffer);
-        verify.end();
-        const isValid = verify.verify(this.publicKey, info.signature, "base64");
-        if (!isValid) {
-          console.error("[RenderUpdater] RSA Signature verification failed.");
-          return false;
-        }
-      } catch (err) {
-        console.error("[RenderUpdater] RSA verification error:", err);
-        return false;
-      }
-    }
-    return true;
-  }
-  useVersion(version) {
-    this.updateDiskVersion(version);
-    this.updateMemoryVersion(version);
+  async useVersion(version) {
+    await this.updateDiskVersion(version);
+    this._activeVersion = version;
   }
-  setUpdatePending(version) {
-    this.updateDiskVersion(version);
+  async setUpdatePending(version) {
+    await this.updateDiskVersion(version);
     if (this.onStatusChanged) {
       this.onStatusChanged({ status: "ready", version });
     }
   }
-  updateDiskVersion(version) {
-    fs2.writeFileSync(
+  async updateDiskVersion(version) {
+    await fsPromises.writeFile(
       this.currentVersionFile,
       JSON.stringify({ version, date: (/* @__PURE__ */ new Date()).toISOString() })
     );
     this._diskVersion = version;
   }
-  updateMemoryVersion(version) {
-    this._activeVersion = version;
-  }
   async installAndRestart() {
     if (this.onBeforeRestart) {
       await this.onBeforeRestart();
@@ -416,104 +420,130 @@ var RenderUpdater = class {
     app2.relaunch();
     app2.quit();
   }
+  // --- 改版后切分的上帝函数 ---
   async checkForUpdatesAndNotify() {
     try {
       const checkRes = await this.check();
-      if (checkRes.updateAvailable && checkRes.info) {
-        const info = checkRes.info;
-        const isReady = checkRes.status === "ready";
-        const doDownload = async () => {
-          try {
-            if (!isReady) {
-              await this.download(info, this.onDownloadProgress);
-            }
-            const performInstall = async (shouldRestart) => {
-              if (shouldRestart) {
-                this.useVersion(info.version);
-                await this.installAndRestart();
-              } else {
-                this.setUpdatePending(info.version);
-                console.info(`[RenderUpdater] Update v${info.version} ready, will apply on next launch.`);
-              }
-            };
-            if (this.onDownloadComplete) {
-              this.onDownloadComplete(info, () => {
-                performInstall(true).catch(console.error);
-              });
-            } else {
-              if (info.forceUpdate || isReady) {
-                if (isReady) {
-                  const { response } = await dialog.showMessageBox({
-                    type: "info",
-                    title: "\u66F4\u65B0\u5C31\u7EEA",
-                    message: `\u65B0\u7248\u672C v${info.version} \u5DF2\u51C6\u5907\u5C31\u7EEA\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u5E94\u7528\uFF1F`,
-                    buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
-                    defaultId: 0,
-                    cancelId: 1
-                  });
-                  await performInstall(response === 0);
-                } else {
-                  if (info.forceUpdate === "prompt") {
-                    dialog.showMessageBoxSync({
-                      type: "warning",
-                      title: "\u4E0B\u8F7D\u5B8C\u6210",
-                      message: `\u6700\u65B0\u7248\u672C v${info.version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u5373\u5C06\u91CD\u542F\u7A0B\u5E8F\u4EE5\u5E94\u7528\u66F4\u65B0\u3002`,
-                      buttons: ["\u6211\u77E5\u9053\u4E86"]
-                    });
-                  }
-                  await performInstall(true);
-                }
-              } else if (this.autoPrompt) {
-                const { response } = await dialog.showMessageBox({
-                  type: "info",
-                  title: "\u4E0B\u8F7D\u5B8C\u6210",
-                  message: `\u6700\u65B0\u7248\u672C v${info.version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u4EE5\u5E94\u7528\u66F4\u65B0\uFF1F`,
-                  buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
-                  defaultId: 0,
-                  cancelId: 1
-                });
-                await performInstall(response === 0);
-              }
-            }
-          } catch (e) {
-            if (this.onError) {
-              this.onError(e);
-            } else {
-              console.error("[RenderUpdater] Download/Install error:", e);
-            }
-          }
-        };
-        if (this.onUpdateAvailable) {
-          this.onUpdateAvailable(info, doDownload);
+      if (!checkRes.updateAvailable || !checkRes.info) return;
+      const info = checkRes.info;
+      if (checkRes.status === "ready") {
+        await this.handleReadyUpdate(info);
+      } else {
+        await this.handleNewUpdate(info);
+      }
+    } catch (e) {
+      this.handleError(e);
+    }
+  }
+  async handleReadyUpdate(info) {
+    if (this.onUpdateAvailable) {
+      this.onUpdateAvailable(info, async () => {
+        if (this.onDownloadComplete) {
+          this.onDownloadComplete(info, () => this.performInstall(info, true).catch(this.handleError.bind(this)));
         } else {
-          if (info.forceUpdate || isReady) {
-            await doDownload();
-          } else if (this.autoDownload) {
-            await doDownload();
-          } else if (this.autoPrompt) {
-            const { response } = await dialog.showMessageBox({
-              type: "info",
-              title: "\u53D1\u73B0\u65B0\u7248\u672C",
-              message: `\u53D1\u73B0\u53EF\u7528\u66F4\u65B0 (v${info.version})\u3002\u662F\u5426\u7ACB\u5373\u4E0B\u8F7D\u66F4\u65B0\uFF1F
-
-\u66F4\u65B0\u65E5\u5FD7\uFF1A
-${info.releaseNotes || "\u65E0\u8BE6\u7EC6\u8BB0\u5F55\u3002"}`,
-              buttons: ["\u7ACB\u5373\u66F4\u65B0", "\u7A0D\u540E\u518D\u8BF4"],
-              cancelId: 1
-            });
-            if (response === 0) {
-              await doDownload();
-            }
-          }
+          await this.performInstall(info, true);
         }
+      });
+      return;
+    }
+    if (info.forceUpdate || !this.autoPrompt) {
+      await this.performInstall(info, true);
+      return;
+    }
+    const response = await this.showReadyDialog(info.version);
+    await this.performInstall(info, response === 0);
+  }
+  async handleNewUpdate(info) {
+    if (this.onUpdateAvailable) {
+      this.onUpdateAvailable(info, () => this.executeAutoDownload(info));
+      return;
+    }
+    if (info.forceUpdate || this.autoDownload) {
+      await this.executeAutoDownload(info);
+    } else if (this.autoPrompt) {
+      const response = await this.showNewUpdateDialog(info);
+      if (response === 0) {
+        await this.executeAutoDownload(info);
       }
-    } catch (e) {
-      if (this.onError) {
-        this.onError(e);
+    }
+  }
+  async executeAutoDownload(info) {
+    try {
+      await this.download(info, this.onDownloadProgress);
+      const doInstall = (shouldRestart) => this.performInstall(info, shouldRestart).catch(this.handleError.bind(this));
+      if (this.onDownloadComplete) {
+        this.onDownloadComplete(info, () => doInstall(true));
       } else {
-        console.error("[RenderUpdater] Error in checkForUpdatesAndNotify:", e);
+        const isSilent = info.forceUpdate === "silent";
+        const shouldRestart = isSilent || await this.showDownloadCompleteDialog(info.version, info.forceUpdate === "prompt") === 0;
+        await doInstall(shouldRestart);
       }
+    } catch (e) {
+      this.handleError(e);
+    }
+  }
+  async performInstall(info, shouldRestart) {
+    if (shouldRestart) {
+      await this.useVersion(info.version);
+      await this.installAndRestart();
+    } else {
+      await this.setUpdatePending(info.version);
+      console.info(`[RenderUpdater] Update v${info.version} ready, will apply on next launch.`);
+    }
+  }
+  handleError(error) {
+    if (this.onError) {
+      this.onError(error);
+    } else {
+      console.error("[RenderUpdater] Error:", error);
+    }
+  }
+  // UI 分发抽离
+  async showReadyDialog(version) {
+    const { response } = await dialog.showMessageBox({
+      type: "info",
+      title: "\u66F4\u65B0\u5C31\u7EEA",
+      message: `\u65B0\u7248\u672C v${version} \u5DF2\u51C6\u5907\u5C31\u7EEA\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u5E94\u7528\uFF1F`,
+      buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
+      defaultId: 0,
+      cancelId: 1
+    });
+    return response;
+  }
+  async showNewUpdateDialog(info) {
+    const { response } = await dialog.showMessageBox({
+      type: "info",
+      title: "\u53D1\u73B0\u65B0\u7248\u672C",
+      message: `\u53D1\u73B0\u53EF\u7528\u66F4\u65B0 (v${info.version})\u3002\u662F\u5426\u7ACB\u5373\u4E0B\u8F7D\u66F4\u65B0\uFF1F
+
+\u66F4\u65B0\u65E5\u5FD7\uFF1A
+${info.releaseNotes || "\u65E0\u8BE6\u7EC6\u8BB0\u5F55\u3002"}`,
+      buttons: ["\u7ACB\u5373\u66F4\u65B0", "\u7A0D\u540E\u518D\u8BF4"],
+      cancelId: 1
+    });
+    return response;
+  }
+  async showDownloadCompleteDialog(version, forcePrompt) {
+    if (forcePrompt) {
+      dialog.showMessageBoxSync({
+        type: "warning",
+        title: "\u4E0B\u8F7D\u5B8C\u6210",
+        message: `\u6700\u65B0\u7248\u672C v${version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u5373\u5C06\u91CD\u542F\u7A0B\u5E8F\u4EE5\u5E94\u7528\u66F4\u65B0\u3002`,
+        buttons: ["\u6211\u77E5\u9053\u4E86"]
+      });
+      return 0;
+    } else if (this.autoPrompt) {
+      const { response } = await dialog.showMessageBox({
+        type: "info",
+        title: "\u4E0B\u8F7D\u5B8C\u6210",
+        message: `\u6700\u65B0\u7248\u672C v${version} \u5DF2\u4E0B\u8F7D\u5B8C\u6BD5\u3002\u662F\u5426\u7ACB\u5373\u91CD\u542F\u4EE5\u5E94\u7528\u66F4\u65B0\uFF1F`,
+        buttons: ["\u7ACB\u5373\u91CD\u542F", "\u7A0D\u540E\u518D\u8BF4"],
+        defaultId: 0,
+        cancelId: 1
+      });
+      return response;
     }
+    return 0;
   }
 };
 export {

package/dist/main/utils.d.ts

@@ -0,0 +1,6 @@
+import type { UpdateInfo } from '../types';
+/**
+ * 采用流式（Stream）的方式读取大文件计算 SHA256 与 RSA 签名
+ * 确保即使文件达到数百MB，V8内存也不会暴涨，不阻塞主线程
+ */
+export declare function verifyFileStream(filePath: string, info: UpdateInfo, publicKey?: string): Promise<boolean>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "electron-updater-for-render",
-  "version": "1.1.2-beta.7",
+  "version": "1.1.3",
   "description": "A lightweight incremental updater for Electron renderer processes",
   "type": "module",
   "bin": {