exflower-license-server 1.4.0 → 1.4.2

package/db.js

@@ -260,9 +260,10 @@ function setSetting(key, value) {
     .run(key, value);
 }
 
-// Seed demo data if empty
+// Seed demo data if empty（仅显式开启：SEED_DEMO=1。生产部署不应自带有效演示 license——
+// key 会打印在日志里，且客户并不知情）
 const count = db.prepare('SELECT COUNT(*) as c FROM companies').get().c;
-if (count === 0) {
+if (count === 0 && process.env.SEED_DEMO === '1') {
   const { generateLicenseKey } = require('./utils');
   const demoKey = generateLicenseKey();
   db.prepare(`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "exflower-license-server",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "ExFlower License Server - 在线授权验证服务",
   "main": "index.js",
   "bin": {
@@ -12,6 +12,7 @@
     "routes.js",
     "utils.js",
     "activation.js",
+    "updateSync.js",
     "seed-templates.js",
     "central-public.pem",
     "migrate-excard-conventions.js",

package/updateSync.js

@@ -0,0 +1,139 @@
+/**
+ * 客户端版本 manifest 同步 + 后台拉取安装包（PLAN-CDN-DISTRIBUTION S1）
+ *
+ * 实测（2026-09-05）：Vercel Blob 境内直连仅 ~60KB/s，客户端直连 CDN 不可行；
+ * 客户服务器（云主机）拉取 ~317KB/s。因此 Blob 只作中央源——本模块把 manifest
+ * 同步进 client_versions.remote_url 后，后台把最新包拉到本地 updates/ 目录
+ * （.part 断点续传 + sha512 校验后转正）。yml 永远优先本地文件（buildLatestYml），
+ * 客户端体验与纯本地托管完全一致；文件未就绪时 yml 才指向 remote_url 兜底。
+ * 同步/下载失败均维持本地现状（内网/气隙部署不受影响）。
+ */
+
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+const { queryAll, queryGet, queryRun, getSetting, setSetting, DATA_DIR } = require('./db');
+
+const CENTRAL_URL = () => (process.env.CENTRAL_PRIMARY_URL || 'https://license.exflower.pro').replace(/\/$/, '');
+const SYNC_INTERVAL_MS = 60 * 60 * 1000; // 每小时兜底
+const STALE_MS = 55 * 60 * 1000;         // /api/updates 被请求时超过即懒拉
+const DOWNLOAD_CONCURRENCY = 1;          // 串行下载，别挤爆小水管
+
+const PLATFORMS = ['win', 'mac-arm64', 'mac-x64'];
+const UPDATES_DIR = path.join(DATA_DIR, 'updates');
+
+let _inflight = null;
+
+async function syncNow() {
+  if (_inflight) return _inflight;
+  _inflight = (async () => {
+    try {
+      const r = await fetch(`${CENTRAL_URL()}/api/client-manifest`, { signal: AbortSignal.timeout(15000) });
+      if (!r.ok) return false; // 中央尚未发布（404）或故障——维持本地
+      const m = await r.json();
+      if (!m.success || !m.version || !Array.isArray(m.files)) return false;
+      for (const f of m.files) {
+        if (!PLATFORMS.includes(f.platform)) continue;
+        const existing = queryGet('SELECT id FROM client_versions WHERE platform = ? AND version = ?', [f.platform, m.version]);
+        if (existing) {
+          queryRun('UPDATE client_versions SET remote_url = ?, file_size = ?, sha512 = ? WHERE id = ?',
+            [f.url, f.size, f.sha512, existing.id]);
+        } else {
+          queryRun(`INSERT INTO client_versions (id, platform, version, file_path, file_name, file_size, sha512, release_notes, is_latest, remote_url)
+                    VALUES (?, ?, ?, '', ?, ?, ?, '', 0, ?)`,
+            [crypto.randomUUID(), f.platform, m.version, String(f.url).split('/').pop(), f.size, f.sha512, f.url]);
+        }
+        queryRun('UPDATE client_versions SET is_latest = 0 WHERE platform = ?', [f.platform]);
+        queryRun('UPDATE client_versions SET is_latest = 1 WHERE platform = ? AND version = ?', [f.platform, m.version]);
+      }
+      setSetting('manifest_synced_at', new Date().toISOString());
+      console.log(`[UpdateSync] 同步中央 manifest v${m.version}（${m.files.length} 个平台）`);
+      _kickDownloads();
+      return true;
+    } catch (e) {
+      console.warn('[UpdateSync] 同步失败（维持本地版本）:', e.message);
+      return false;
+    } finally {
+      _inflight = null;
+    }
+  })();
+  return _inflight;
+}
+
+// ── 后台下载：把有 remote_url 且本地无文件的最新行拉到 updates/<platform>/ ──
+
+let _downloading = false;
+
+function _fileReady(row) {
+  return row.file_path && fs.existsSync(row.file_path) && fs.statSync(row.file_path).size === row.file_size;
+}
+
+async function _downloadRow(row) {
+  const dir = path.join(UPDATES_DIR, row.platform);
+  fs.mkdirSync(dir, { recursive: true });
+  const finalPath = path.join(dir, row.file_name);
+  const partPath = finalPath + '.part';
+  // 断点续传：.part 有多大就从哪接着要
+  const have = fs.existsSync(partPath) ? fs.statSync(partPath).size : 0;
+  const headers = have > 0 ? { Range: `bytes=${have}-` } : {};
+  const r = await fetch(row.remote_url, { headers, signal: AbortSignal.timeout(30 * 60 * 1000) });
+  if (!r.ok && r.status !== 206) throw new Error(`HTTP ${r.status}`);
+  if (have > 0 && r.status !== 206) {
+    // 服务端不支持 Range：重来
+    fs.unlinkSync(partPath);
+    return _downloadRow(row);
+  }
+  const out = fs.createWriteStream(partPath, { flags: 'a' });
+  const reader = r.body.getReader();
+  for (;;) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    if (!out.write(value)) await new Promise(res => out.once('drain', res));
+  }
+  await new Promise(res => out.end(res));
+  // 校验：size + sha512 都过才转正
+  const got = fs.statSync(partPath).size;
+  if (got !== row.file_size) throw new Error(`大小不符 ${got} != ${row.file_size}`);
+  const h = crypto.createHash('sha512');
+  for await (const chunk of fs.createReadStream(partPath)) h.update(chunk);
+  if (h.digest('base64') !== row.sha512) throw new Error('sha512 不符');
+  fs.renameSync(partPath, finalPath);
+  queryRun('UPDATE client_versions SET file_path = ? WHERE id = ?', [finalPath, row.id]);
+  console.log(`[UpdateSync] ${row.platform} v${row.version} 下载完成并校验通过（${(got / 1048576).toFixed(0)}MB）`);
+}
+
+async function _kickDownloads() {
+  if (_downloading) return;
+  _downloading = true;
+  try {
+    const rows = queryAll(
+      "SELECT * FROM client_versions WHERE is_latest = 1 AND remote_url IS NOT NULL AND remote_url != ''"
+    );
+    for (const row of rows) {
+      if (_fileReady(row)) continue;
+      const tag = `${row.platform} v${row.version}`;
+      try {
+        console.log(`[UpdateSync] 开始后台下载 ${tag}`);
+        await _downloadRow(row);
+      } catch (e) {
+        // 保留 .part 下轮续传；不阻塞其他平台
+        console.warn(`[UpdateSync] ${tag} 下载中断（下轮续传）: ${e.message}`);
+      }
+    }
+  } finally {
+    _downloading = false;
+  }
+}
+
+/** 客户端来检查更新前调用：manifest 过期则先拉一次（失败不阻塞，用本地旧数据） */
+async function ensureFresh() {
+  const last = getSetting('manifest_synced_at');
+  if (!last || Date.now() - new Date(last).getTime() > STALE_MS) await syncNow();
+}
+
+function startUpdateSync() {
+  syncNow();
+  setInterval(syncNow, SYNC_INTERVAL_MS).unref();
+}
+
+module.exports = { startUpdateSync, ensureFresh, syncNow };