gitdone-agent 0.8.6 → 0.8.7

package/index.js

@@ -29,7 +29,7 @@ import { randomUUID, createHash } from 'node:crypto'
 // Reported to the server on every sync so the web UI can flag outdated agents.
 // Keep in lockstep with packages/agent/package.json. The server's offline
 // fallback is bumped only after this release has actually reached npm.
-const AGENT_VERSION = '0.8.6'
+const AGENT_VERSION = '0.8.7'
 
 const AGENT_DIR = join(homedir(), '.gitdone-agent')
 const CONFIG_PATH = join(AGENT_DIR, 'config.json')
@@ -547,6 +547,77 @@ function uninstallStartup() {
 
 // ─── Doctor ────────────────────────────────────────────────────────────────────
 
+// Each sync heartbeat returns the version, URL and SHA-256 of the exact agent
+// script deployed on the server. A supervised stable install downloads it,
+// verifies both checksum and embedded version, atomically replaces itself, and
+// exits; run-agent.cmd then starts the new version within about ten seconds.
+function compareVersions(a, b) {
+  const pa = String(a).split('.').map((n) => parseInt(n, 10) || 0)
+  const pb = String(b).split('.').map((n) => parseInt(n, 10) || 0)
+  const len = Math.max(pa.length, pb.length)
+  for (let i = 0; i < len; i++) {
+    const difference = (pa[i] ?? 0) - (pb[i] ?? 0)
+    if (difference !== 0) return difference > 0 ? 1 : -1
+  }
+  return 0
+}
+
+const UPDATE_RETRY_MS = 60 * 60 * 1000
+let updateInFlight = false
+let lastUpdateAttempt = { version: null, at: 0 }
+
+async function selfUpdate(cfg, latestVersion, downloadUrl, expectedSha256) {
+  if (updateInFlight || !latestVersion || !downloadUrl) return
+  if (compareVersions(latestVersion, AGENT_VERSION) <= 0) return
+  if (lastUpdateAttempt.version === latestVersion && Date.now() - lastUpdateAttempt.at < UPDATE_RETRY_MS) return
+
+  // A foreground/dev invocation has no supervisor to bring it back after the
+  // swap. Announce the update there, but only self-replace a stable install.
+  const runningStable = resolve(process.argv[1] || '') === STABLE_AGENT
+  const supervised = existsSync(join(AGENT_DIR, 'run-agent.cmd'))
+  if (!runningStable || !supervised) {
+    log(`↑ налична е нова версия ${latestVersion} (текуща ${AGENT_VERSION}) — пусни „gitdone-agent --install“ еднократно, за да включиш автообновяването`)
+    lastUpdateAttempt = { version: latestVersion, at: Date.now() }
+    return
+  }
+
+  updateInFlight = true
+  lastUpdateAttempt = { version: latestVersion, at: Date.now() }
+  const url = downloadUrl.startsWith('http') ? downloadUrl : `${cfg.url}${downloadUrl}`
+  const tmp = STABLE_AGENT + '.next'
+  log(`↑ автообновяване ${AGENT_VERSION} → ${latestVersion}`)
+  try {
+    if (!/^[a-f0-9]{64}$/i.test(String(expectedSha256 || ''))) {
+      throw new Error('сървърът не върна валиден sha256')
+    }
+    const response = await fetch(url, { headers: { Authorization: `Bearer ${cfg.key}` } })
+    if (!response.ok) throw new Error(`HTTP ${response.status}`)
+    const buffer = Buffer.from(await response.arrayBuffer())
+    if (buffer.length < 1000) throw new Error(`подозрително малък файл (${buffer.length} B)`)
+
+    const actualSha256 = createHash('sha256').update(buffer).digest('hex')
+    if (actualSha256.toLowerCase() !== String(expectedSha256).toLowerCase()) {
+      throw new Error(`sha256 несъвпадение (очаквано ${expectedSha256}, получено ${actualSha256})`)
+    }
+    const embeddedVersion = buffer
+      .subarray(0, 12_000)
+      .toString('utf8')
+      .match(/const AGENT_VERSION\s*=\s*['"]([^'"]+)['"]/)?.[1]
+    if (embeddedVersion !== latestVersion) {
+      throw new Error(`файлът е v${embeddedVersion || '?'}, а сървърът обяви v${latestVersion}`)
+    }
+
+    writeFileSync(tmp, buffer)
+    renameSync(tmp, STABLE_AGENT)
+    log(`✓ обновено до ${latestVersion} — supervisor-ът ще рестартира агента`)
+    process.exit(0)
+  } catch (err) {
+    updateInFlight = false
+    try { if (existsSync(tmp)) unlinkSync(tmp) } catch { /* best-effort cleanup */ }
+    log(`✗ автообновяването се провали: ${err?.message || err} — оставам на ${AGENT_VERSION}, ще опитам пак до 1 час`)
+  }
+}
+
 function runDoctor() {
   const cfg = readConfig()
   console.log('gitdone-agent doctor')
@@ -2795,7 +2866,12 @@ async function sync(cfg, discovered) {
   })
   if (full) { syncRepoSig = sig; syncFullCountdown = SYNC_FULL_TICKS }
   else syncFullCountdown--
-  return data.tracked ?? []
+  return {
+    tracked: data.tracked ?? [],
+    latestVersion: data.latestVersion,
+    downloadUrl: data.downloadUrl,
+    downloadSha256: data.downloadSha256,
+  }
 }
 
 // Per-repo cache of the last snapshot we actually SENT, so an idle repo whose
@@ -2969,7 +3045,11 @@ async function runLoop(cfg) {
   async function tick() {
     try {
       const discovered = scanRepos(cfg.roots)
-      const tracked = await sync(cfg, discovered)
+      const state = await sync(cfg, discovered)
+      // A successful update exits here; the supervisor starts the new stable
+      // script before any more repo work is performed.
+      await selfUpdate(cfg, state.latestVersion, state.downloadUrl, state.downloadSha256)
+      const tracked = state.tracked
       let pushed = 0
       let skipped = 0
       for (const repo of tracked) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name":  "gitdone-agent",
-    "version":  "0.8.6",
+    "version":  "0.8.7",
     "description":  "Local git agent for gitdone — watches a local repo and sends snapshots to gitdone.eu",
     "type":  "module",
     "bin":  {