lupine.api 1.1.58 → 1.1.60

package/src/admin-api/admin-release.ts

@@ -1,700 +1,706 @@
-import { ServerResponse } from 'http';
-import {
-  IApiBase,
-  Logger,
-  apiCache,
-  ServerRequest,
-  ApiRouter,
-  ApiHelper,
-  langHelper,
-  FsUtils,
-  adminApiHelper,
-  processRefreshCache,
-  apiStorage,
-  processRestartApp,
-  processShell,
-} from 'lupine.api';
-import path from 'path';
-import { needDevAdminSession } from './admin-auth';
-import { adminTokenHelper } from './admin-token-helper';
-
-const releaseProgress = 'admin-release-progress';
-export class AdminRelease implements IApiBase {
-  private logger = new Logger('release-api');
-  protected router = new ApiRouter();
-
-  constructor() {
-    this.mountDashboard();
-  }
-
-  public getRouter(): ApiRouter {
-    return this.router;
-  }
-
-  protected mountDashboard() {
-    // called by FE
-    this.router.use('/check', needDevAdminSession, this.check.bind(this));
-    this.router.use('/update', needDevAdminSession, this.callUpdate.bind(this));
-    this.router.use('/view-log', needDevAdminSession, this.viewLog.bind(this));
-    // called online or by clients
-    this.router.use('/refresh-cache', needDevAdminSession, this.refreshCache.bind(this));
-    this.router.use('/restart-app', needDevAdminSession, this.restartApp.bind(this));
-
-    this.router.use('/shell', needDevAdminSession, this.shell.bind(this));
-
-    // ...ByClient will verify credentials from post, so it doesn't need AdminSession
-    this.router.use('/byClientCheck', this.byClientCheck.bind(this));
-    this.router.use('/byClientUpdate', this.byClientUpdate.bind(this));
-    this.router.use('/byClientRefreshCache', this.byClientRefreshCache.bind(this));
-    this.router.use('/byClientRestartApp', this.byClientRestartApp.bind(this));
-    this.router.use('/byClientViewLog', this.byClientViewLog.bind(this));
-
-    this.router.use('/byClientShell', this.byClientShell.bind(this));
-  }
-
-  async viewLog(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    let targetUrl = data.targetUrl as string;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientViewLog', {
-      method: 'POST',
-      body: JSON.stringify(data),
-    });
-    // (remoteData.body as any).pipe(res);
-    const data2 = await remoteData.text();
-    // res.setHeader('Content-Disposition', 'attachment; filename="log.txt"');
-    res.writeHead(200, { 'Content-Type': 'application/octet-stream' });
-    res.write(data2);
-    res.end();
-    return true;
-  }
-
-  async byClientViewLog(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    const appData = apiCache.getAppData();
-    const logFile = path.join(appData.apiPath, '../../log', data.logName);
-    if (!(await FsUtils.pathExist(logFile))) {
-      const response = {
-        status: 'error',
-        message: 'Log file not found.',
-      };
-      ApiHelper.sendJson(req, res, response);
-      return true;
-    }
-    ApiHelper.sendFile(req, res, logFile);
-    return true;
-  }
-
-  async refreshCache(req: ServerRequest, res: ServerResponse) {
-    // check whether it's from online admin
-    const json = await adminApiHelper.getDevAdminFromCookie(req, res, false);
-    const jsonData = req.locals.json();
-    if (json && jsonData && !Array.isArray(jsonData) && jsonData.isLocal) {
-      await processRefreshCache(req);
-      const response = {
-        status: 'ok',
-        message: 'Cache refreshed successfully.',
-      };
-      ApiHelper.sendJson(req, res, response);
-      return true;
-    }
-
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    let targetUrl = data.targetUrl as string;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientRefreshCache', {
-      method: 'POST',
-      body: JSON.stringify(data),
-    });
-    const resultText = await remoteData.text();
-    let remoteResult: any;
-    try {
-      remoteResult = JSON.parse(resultText);
-    } catch (e: any) {
-      remoteResult = { status: 'error', message: resultText };
-    }
-    const response = {
-      status: 'ok',
-      message: 'check.',
-      ...remoteResult,
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  async restartApp(req: ServerRequest, res: ServerResponse) {
-    // check whether it's from online admin
-    const json = await adminApiHelper.getDevAdminFromCookie(req, res, false);
-    const jsonData = req.locals.json();
-    if (json && jsonData && !Array.isArray(jsonData) && jsonData.isLocal) {
-      await processRestartApp(req);
-      const response = {
-        status: 'ok',
-        message: 'Restart app successfully.',
-      };
-      ApiHelper.sendJson(req, res, response);
-      return true;
-    }
-
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    let targetUrl = data.targetUrl as string;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientRestartApp', {
-      method: 'POST',
-      body: JSON.stringify(data),
-    });
-    const resultText = await remoteData.text();
-    let remoteResult: any;
-    try {
-      remoteResult = JSON.parse(resultText);
-    } catch (e: any) {
-      remoteResult = { status: 'error', message: resultText };
-    }
-    const response = {
-      status: 'ok',
-      message: 'check.',
-      ...remoteResult,
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  async shell(req: ServerRequest, res: ServerResponse) {
-    // check whether it's from online admin
-    const json = await adminApiHelper.getDevAdminFromCookie(req, res, false);
-    const jsonData = req.locals.json();
-    if (json && jsonData && !Array.isArray(jsonData) && jsonData.isLocal) {
-      const result = await processShell(req);
-      const response = {
-        status: 'ok',
-        message: 'Shell executed successfully.',
-        result,
-      };
-      ApiHelper.sendJson(req, res, response);
-      return true;
-    }
-
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    let targetUrl = data.targetUrl as string;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientShell', {
-      method: 'POST',
-      body: JSON.stringify(data),
-    });
-    const resultText = await remoteData.text();
-    let remoteResult: any;
-    try {
-      remoteResult = JSON.parse(resultText);
-    } catch (e: any) {
-      remoteResult = { status: 'error', message: resultText };
-    }
-    const response = {
-      status: 'ok',
-      message: 'check.',
-      ...remoteResult,
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  public async chkData(data: any, req: ServerRequest, res: ServerResponse, chkCredential: boolean) {
-    // add access token
-    if (!data || Array.isArray(data) || typeof data !== 'object' || !data.accessToken || !data.targetUrl) {
-      const response = {
-        status: 'error',
-        message: 'Wrong data [missing parameters].', //langHelper.getLang('shared:wrong_data'),
-      };
-      ApiHelper.sendJson(req, res, response);
-      return false;
-    }
-    if (chkCredential) {
-      if (await adminTokenHelper.validateToken(data.accessToken)) {
-        return data;
-      } else if (
-        process.env['DEV_ADMIN_PASS'] !== '' &&
-        (data.accessToken === `${process.env['DEV_ADMIN_USER']}@${process.env['DEV_ADMIN_PASS']}` ||
-          data.accessToken === `${process.env['DEV_ADMIN_USER']}:${process.env['DEV_ADMIN_PASS']}`)
-      ) {
-        return data;
-      } else {
-        const response = {
-          status: 'error',
-          message: 'Wrong data [wrong token].', //langHelper.getLang('shared:wrong_data'),
-        };
-        ApiHelper.sendJson(req, res, response);
-        return false;
-      }
-    }
-    return data;
-  }
-
-  // this is called by the FE, then call byClientCheck to get remote server's information
-  async check(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, false);
-    if (!data) return true;
-
-    // From app list is from local
-    const appData = apiCache.getAppData();
-    const folders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '..'));
-    const apps = folders.filter((app: string) => app.endsWith('_web')).map((app: string) => app.replace('_web', ''));
-
-    let targetUrl = data.targetUrl as string;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientCheck', {
-      method: 'POST',
-      body: JSON.stringify(data),
-    });
-    const resultText = await remoteData.text();
-    let remoteResult: any;
-    try {
-      remoteResult = JSON.parse(resultText);
-    } catch (e: any) {
-      remoteResult = { status: 'error', message: resultText };
-    }
-
-    // local dirs under _web
-    const webSub: string[] = [];
-    for (let j = 0; j < apps.length; j++) {
-      const e = apps[j];
-      const p0 = path.join(appData.apiPath, '..');
-      const subFolders = await FsUtils.getDirsFullpath(path.join(p0, e + '_web'), 5);
-      webSub.push(
-        ...subFolders
-          .filter((i) => i.isDirectory())
-          .map((i) => path.join(i.parentPath.substring(p0.length + 1), i.name).replace(/\\/g, '/'))
-      );
-    }
-    // const webSub = webSubFolders.filter(i => i.isDirectory()).map(i => path.join(i.parentPath.substring(appData.webPath.length + 1), i.name).replace(/\\/g, '/')).sort();
-
-    const response = {
-      releaseProgress: await apiStorage.get(releaseProgress),
-      status: 'ok',
-      message: 'check.',
-      appsFrom: apps,
-      ...remoteResult,
-      webSub: webSub, // webSubFolders.filter((folder) => folder.isDirectory()).map((folder) => folder.name),
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  async getFileList(parentPath: string, subFolders: string[]) {
-    const subFoldersWithTime = [];
-    for (let j = 0; j < subFolders.length; j++) {
-      const subFolder = subFolders[j];
-      const fileInfo = await FsUtils.fileInfo(path.join(parentPath, subFolder));
-      subFoldersWithTime.push({
-        name: subFolder,
-        time: new Date(fileInfo!.mtime).toLocaleString(),
-        size: fileInfo?.size,
-        dir: fileInfo?.isDir,
-      });
-    }
-    return subFoldersWithTime;
-  }
-
-  // called by clients
-  async byClientCheck(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    const appData = apiCache.getAppData();
-    const folders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '..'));
-    const apps = folders.filter((app: string) => app.endsWith('_web')).map((app: string) => app.replace('_web', ''));
-
-    const foldersWithTime = [];
-    for (let i = 0; i < folders.length; i++) {
-      const folder = folders[i];
-      const subFolders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '..', folder));
-      const subFoldersWithTime = await this.getFileList(path.join(appData.apiPath, '..', folder), subFolders);
-      const fileInfo = await FsUtils.fileInfo(path.join(appData.apiPath, '..', folder));
-      foldersWithTime.push({
-        name: folder,
-        time: new Date(fileInfo!.mtime).toLocaleString(),
-        items: subFoldersWithTime,
-        dir: fileInfo?.isDir,
-      });
-    }
-
-    const logFolders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '../../log'));
-    const logFoldersWithTime = await this.getFileList(path.join(appData.apiPath, '../../log'), logFolders);
-    const response = {
-      status: 'ok',
-      message: 'Remote server information called from a client.',
-      appData: appData as any,
-      apps,
-      folders,
-      foldersWithTime,
-      logs: logFoldersWithTime,
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  async callUpdate(req: ServerRequest, res: ServerResponse) {
-    // when remote server is slow, then local update call may be timeout.
-    // so we set a flag to prevent multiple update calls
-    apiStorage.set(releaseProgress, 'update started: ' + new Date().toLocaleString());
-    let result = true;
-    try {
-      result = await this.update(req, res);
-    } catch (e: any) {
-      const response = {
-        status: 'error',
-        message: e.message,
-      };
-      ApiHelper.sendJson(req, res, response);
-    }
-    apiStorage.set(releaseProgress, undefined);
-    return result;
-  }
-
-  async update(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, false);
-    if (!data) return true;
-
-    if (!data.chkServer && !data.chkApi && !data.chkWeb && !data.chkEnv) {
-      const response = {
-        status: 'error',
-        message: langHelper.getLang('shared:wrong_data'),
-      };
-      ApiHelper.sendJson(req, res, response);
-      return true;
-    }
-
-    const appData = apiCache.getAppData();
-    let targetUrl = data.targetUrl as string;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    if (data.chkEnv) {
-      const result = await this.updateSendFile(data, '.env');
-      if (!result || result.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result);
-        return true;
-      }
-      const result2 = await this.updateSendFile(data, '.env.development');
-      if (!result2 || result2.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result2);
-        return true;
-      }
-      const result3 = await this.updateSendFile(data, '.env.production');
-      if (!result3 || result3.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result3);
-        return true;
-      }
-    }
-    if (data.chkWeb) {
-      const result = await this.updateSendFile(data, 'web');
-      if (!result || result.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result);
-        return true;
-      }
-      // if (data.webSub) {
-      //   const result2 = await this.updateSendFile(data, 'web-sub');
-      //   if (!result2 || result2.status !== 'ok') {
-      //     ApiHelper.sendJson(req, res, result2);
-      //     return true;
-      //   }
-      // }
-
-      if (data.webSubs && data.webSubs.length > 0) {
-        const subTop = path.join(appData.apiPath, '..', data.fromList + '_web/');
-        for (let i = 0; i < data.webSubs.length; i++) {
-          if (!data.webSubs[i].startsWith(data.fromList + '_web/')) {
-            const response = {
-              status: 'error',
-              message: `Error: ${data.webSubs[i]} is not under ${data.fromList}`,
-            };
-            ApiHelper.sendJson(req, res, response);
-            return true;
-          }
-          const subFolders = await FsUtils.getDirsFullpath(path.join(appData.apiPath, '..', data.webSubs[i]));
-          const subFiles = subFolders
-            .filter((e) => e.isFile())
-            .map((e) => path.join(e.parentPath.substring(subTop.length), e.name).replace(/\\/g, '/'))
-            .sort();
-          for (let j = 0; j < subFiles.length; j++) {
-            if (subFiles[j].endsWith('.js.map')) {
-              continue;
-            }
-            data.webSub = subFiles[j];
-            this.logger.info(`update, webSubs: ${data.webSubs[i]}, subFiles: ${subFiles[j]})`);
-            const result2 = await this.updateSendFile(data, 'web-sub');
-            if (!result2 || result2.status !== 'ok') {
-              ApiHelper.sendJson(req, res, result2);
-              return true;
-            }
-          }
-        }
-      }
-    }
-    if (data.chkApi) {
-      const result = await this.updateSendFile(data, 'api');
-      if (!result || result.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result);
-        return true;
-      }
-    }
-    // update server at the last
-    if (data.chkServer) {
-      const result = await this.updateSendFile(data, 'server');
-      if (!result || result.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result);
-        return true;
-      }
-      const result2 = await this.updateSendFile(data, 'app-loader');
-      if (!result2 || result2.status !== 'ok') {
-        ApiHelper.sendJson(req, res, result2);
-        return true;
-      }
-    }
-
-    const response = {
-      status: 'ok',
-      message: 'updated',
-    };
-    ApiHelper.sendJson(req, res, response);
-    this.logger.info(`updated, successful`);
-    return true;
-  }
-
-  async updateSendFile(data: any, chkOption: string) {
-    let targetUrl = data.targetUrl;
-    if (targetUrl.endsWith('/')) {
-      targetUrl = targetUrl.slice(0, -1);
-    }
-    const fromList = data.fromList;
-    const appData = apiCache.getAppData();
-    let sendFile = '';
-    if (chkOption === 'server') {
-      sendFile = path.join(appData.apiPath, '..', 'server', 'index.js');
-    } else if (chkOption === 'app-loader') {
-      sendFile = path.join(appData.apiPath, '..', 'server', 'app-loader.js');
-    } else if (chkOption === 'api') {
-      sendFile = path.join(appData.apiPath, '..', fromList + '_api', 'index.js');
-    } else if (chkOption === 'web') {
-      sendFile = path.join(appData.apiPath, '..', fromList + '_web', 'index.js');
-    } else if (chkOption === 'web-sub' && data.webSub) {
-      // sendFile = path.join(appData.apiPath, '..', fromList + '_web', data.webSub, 'index.js');
-      sendFile = path.join(appData.apiPath, '..', fromList + '_web', data.webSub);
-    } else if (chkOption.startsWith('.env')) {
-      sendFile = path.join(appData.apiPath, '../../..', chkOption);
-    }
-    if (!(await FsUtils.pathExist(sendFile))) {
-      this.logger.error(`updateSendFile, not found: ${sendFile}`);
-      return { status: 'error', message: 'Client file not found: ' + sendFile };
-    }
-    apiStorage.set(releaseProgress, 'updateSendFile: ' + sendFile);
-    const fileContent = (await FsUtils.readFile(sendFile))!;
-    // const compressedContent = await new Promise<Buffer>((resolve, reject) => {
-    //     zlib.gzip(fileContent, (err, buffer) => {
-    //         if (err) {
-    //             reject(err);
-    //         } else {
-    //             resolve(buffer);
-    //         }
-    //     });
-    // })
-    const chunkSize = 1024 * 500;
-    let cnt = 0;
-    this.logger.info(`updateSendFile, sendFile: ${sendFile}, len: ${fileContent.length}`);
-    for (let i = 0; i < fileContent.length; i += chunkSize) {
-      const chunk = fileContent.slice(i, i + chunkSize);
-      if (!chunk) break;
-
-      const postData = {
-        method: 'POST',
-        body: JSON.stringify({ ...data, chkOption, index: cnt, size: fileContent.length }) + '\n\n' + chunk,
-      };
-      this.logger.info(
-        `updateSendFile, index: ${cnt}, sending: ${chunk.length} (${i + chunk.length} / ${fileContent.length
-        }), f: ${sendFile}`
-      );
-      apiStorage.set(
-        releaseProgress,
-        `updateSendFile, index: ${cnt}, sending: ${chunk.length} (${i + chunk.length} / ${fileContent.length
-        }), f: ${sendFile}`
-      );
-      i > 0 && (await new Promise((resolve) => setTimeout(resolve, 1000)));
-      const remoteData = await fetch(targetUrl + '/api/admin/release/byClientUpdate', postData);
-      const resultText = await remoteData.text();
-      this.logger.info(`updateSendFile, index: ${cnt}, resultText: ${resultText}`);
-      let remoteResult: any;
-      try {
-        remoteResult = JSON.parse(resultText);
-      } catch (e: any) {
-        remoteResult = { status: 'error', message: resultText };
-      }
-      if (!remoteResult || remoteResult.status !== 'ok') {
-        return remoteResult;
-      }
-      cnt++;
-    }
-
-    const remoteResult = { status: 'ok', message: 'updated' };
-    return remoteResult;
-  }
-
-  // called by clients
-  async byClientUpdate(req: ServerRequest, res: ServerResponse) {
-    const body = req.locals.body as Buffer;
-    let jsonData = {};
-    let fileContent = null;
-    try {
-      const index = body.indexOf('\n\n');
-      if (index !== -1) {
-        jsonData = JSON.parse(body.subarray(0, index).toString());
-        fileContent = body.subarray(index + 2);
-      }
-      const data = await this.chkData(jsonData, req, res, true);
-      if (!data) return true;
-
-      const toList = data.toList as string;
-      const chkOption = data.chkOption as string;
-      if (
-        !chkOption ||
-        !toList ||
-        (chkOption !== 'server' &&
-          chkOption !== 'app-loader' &&
-          chkOption !== 'api' &&
-          chkOption !== 'web' &&
-          chkOption !== 'web-sub' &&
-          !chkOption.startsWith('.env'))
-      ) {
-        const response = {
-          status: 'error',
-          message: 'Wrong data.',
-        };
-        ApiHelper.sendJson(req, res, response);
-        return true;
-      }
-
-      const appData = apiCache.getAppData();
-      let saveFile = '';
-      if (chkOption === 'server') {
-        saveFile = path.join(appData.apiPath, '..', 'server', 'index.js');
-      } else if (chkOption === 'app-loader') {
-        saveFile = path.join(appData.apiPath, '..', 'server', 'app-loader.js');
-      } else if (chkOption === 'api') {
-        saveFile = path.join(appData.apiPath, '..', toList + '_api', 'index.js');
-      } else if (chkOption === 'web') {
-        saveFile = path.join(appData.apiPath, '..', toList + '_web', 'index.js');
-      } else if (chkOption === 'web-sub' && data.webSub) {
-        const folder = path.join(appData.apiPath, '..', toList + '_web', path.basename(data.webSub));
-        if (!(await FsUtils.pathExist(folder))) {
-          await FsUtils.mkdir(folder);
-        }
-        saveFile = path.join(appData.apiPath, '..', toList + '_web', data.webSub);
-      } else if ((chkOption as string).startsWith('.env')) {
-        saveFile = path.join(appData.apiPath, '../../..', chkOption);
-      }
-      if (chkOption !== 'web-sub' && !(await FsUtils.pathExist(saveFile))) {
-        const response = {
-          status: 'error',
-          message: 'Server file not found: ' + saveFile,
-        };
-        ApiHelper.sendJson(req, res, response);
-        return true;
-      }
-      if (data.chkBackup && data.index === 0) {
-        const bakContent = await FsUtils.readFile(saveFile);
-        if (bakContent) {
-          const bakFile = saveFile + '.bak-' + new Date().toISOString().replace(/:/g, '-');
-          await FsUtils.writeFile(bakFile, bakContent);
-        }
-      }
-
-      this.logger.info(
-        `byClientUpdate, index: ${data.index}, saveFile: ${saveFile}, received len: ${(fileContent || '').length}`
-      );
-      if (data.index === 0) {
-        await FsUtils.writeFile(saveFile, fileContent || '');
-      } else {
-        await FsUtils.appendFile(saveFile, fileContent || '');
-      }
-
-      const response = {
-        status: 'ok',
-        message: 'Remote server updated by a client.',
-      };
-      ApiHelper.sendJson(req, res, response);
-    } catch (e: any) {
-      console.log('byClientUpdate failed', e);
-      const response = {
-        status: 'error',
-        message: 'byClientUpdate failed',
-      };
-      ApiHelper.sendJson(req, res, response);
-    }
-    return true;
-  }
-
-  async byClientRefreshCache(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    await processRefreshCache(req);
-    const response = {
-      status: 'ok',
-      message: 'Cache refreshed successfully.',
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  async byClientRestartApp(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    await processRestartApp(req);
-    const response = {
-      status: 'ok',
-      message: 'Restart app successfully.',
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-
-  async byClientShell(req: ServerRequest, res: ServerResponse) {
-    const jsonData = req.locals.json();
-    const data = await this.chkData(jsonData, req, res, true);
-    if (!data) return true;
-
-    const result = await processShell(req);
-    const response = {
-      status: 'ok',
-      message: 'Shell executed successfully.',
-      result,
-    };
-    ApiHelper.sendJson(req, res, response);
-    return true;
-  }
-}
+import { ServerResponse } from 'http';
+import {
+  IApiBase,
+  Logger,
+  apiCache,
+  ServerRequest,
+  ApiRouter,
+  ApiHelper,
+  langHelper,
+  FsUtils,
+  adminApiHelper,
+  processRefreshCache,
+  apiStorage,
+  processRestartApp,
+  processShell,
+} from 'lupine.api';
+import path from 'path';
+import { needDevAdminSession } from './admin-auth';
+import { adminTokenHelper } from './admin-token-helper';
+
+const releaseProgress = 'admin-release-progress';
+export class AdminRelease implements IApiBase {
+  private logger = new Logger('release-api');
+  protected router = new ApiRouter();
+
+  constructor() {
+    this.mountDashboard();
+  }
+
+  public getRouter(): ApiRouter {
+    return this.router;
+  }
+
+  protected mountDashboard() {
+    // called by FE
+    this.router.use('/check', needDevAdminSession, this.check.bind(this));
+    this.router.use('/update', needDevAdminSession, this.callUpdate.bind(this));
+    this.router.use('/view-log', needDevAdminSession, this.viewLog.bind(this));
+    // called online or by clients
+    this.router.use('/refresh-cache', needDevAdminSession, this.refreshCache.bind(this));
+    this.router.use('/restart-app', needDevAdminSession, this.restartApp.bind(this));
+
+    this.router.use('/shell', needDevAdminSession, this.shell.bind(this));
+
+    // ...ByClient will verify credentials from post, so it doesn't need AdminSession
+    this.router.use('/byClientCheck', this.byClientCheck.bind(this));
+    this.router.use('/byClientUpdate', this.byClientUpdate.bind(this));
+    this.router.use('/byClientRefreshCache', this.byClientRefreshCache.bind(this));
+    this.router.use('/byClientRestartApp', this.byClientRestartApp.bind(this));
+    this.router.use('/byClientViewLog', this.byClientViewLog.bind(this));
+
+    this.router.use('/byClientShell', this.byClientShell.bind(this));
+  }
+
+  async viewLog(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    let targetUrl = data.targetUrl as string;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientViewLog', {
+      method: 'POST',
+      body: JSON.stringify(data),
+    });
+    // (remoteData.body as any).pipe(res);
+    const data2 = await remoteData.text();
+    // res.setHeader('Content-Disposition', 'attachment; filename="log.txt"');
+    res.writeHead(200, { 'Content-Type': 'application/octet-stream' });
+    res.write(data2);
+    res.end();
+    return true;
+  }
+
+  async byClientViewLog(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    const appData = apiCache.getAppData();
+    const logFile = path.join(appData.apiPath, '../../log', data.logName);
+    if (!(await FsUtils.pathExist(logFile))) {
+      const response = {
+        status: 'error',
+        message: 'Log file not found.',
+      };
+      ApiHelper.sendJson(req, res, response);
+      return true;
+    }
+    ApiHelper.sendFile(req, res, logFile);
+    return true;
+  }
+
+  async refreshCache(req: ServerRequest, res: ServerResponse) {
+    // check whether it's from online admin
+    const json = await adminApiHelper.getDevAdminFromCookie(req, res, false);
+    const jsonData = req.locals.json();
+    if (json && jsonData && !Array.isArray(jsonData) && jsonData.isLocal) {
+      await processRefreshCache(req);
+      const response = {
+        status: 'ok',
+        message: 'Cache refreshed successfully.',
+      };
+      ApiHelper.sendJson(req, res, response);
+      return true;
+    }
+
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    let targetUrl = data.targetUrl as string;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientRefreshCache', {
+      method: 'POST',
+      body: JSON.stringify(data),
+    });
+    const resultText = await remoteData.text();
+    let remoteResult: any;
+    try {
+      remoteResult = JSON.parse(resultText);
+    } catch (e: any) {
+      remoteResult = { status: 'error', message: resultText };
+    }
+    const response = {
+      status: 'ok',
+      message: 'check.',
+      ...remoteResult,
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  async restartApp(req: ServerRequest, res: ServerResponse) {
+    // check whether it's from online admin
+    const json = await adminApiHelper.getDevAdminFromCookie(req, res, false);
+    const jsonData = req.locals.json();
+    if (json && jsonData && !Array.isArray(jsonData) && jsonData.isLocal) {
+      await processRestartApp();
+      const response = {
+        status: 'ok',
+        message: 'Restart app successfully.',
+      };
+      ApiHelper.sendJson(req, res, response);
+      return true;
+    }
+
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    let targetUrl = data.targetUrl as string;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientRestartApp', {
+      method: 'POST',
+      body: JSON.stringify(data),
+    });
+    const resultText = await remoteData.text();
+    let remoteResult: any;
+    try {
+      remoteResult = JSON.parse(resultText);
+    } catch (e: any) {
+      remoteResult = { status: 'error', message: resultText };
+    }
+    const response = {
+      status: 'ok',
+      message: 'check.',
+      ...remoteResult,
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  async shell(req: ServerRequest, res: ServerResponse) {
+    // check whether it's from online admin
+    const json = await adminApiHelper.getDevAdminFromCookie(req, res, false);
+    const jsonData = req.locals.json();
+    if (json && jsonData && !Array.isArray(jsonData) && jsonData.isLocal) {
+      const result = await processShell(req);
+      const response = {
+        status: 'ok',
+        message: 'Shell executed successfully.',
+        result,
+      };
+      ApiHelper.sendJson(req, res, response);
+      return true;
+    }
+
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    let targetUrl = data.targetUrl as string;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientShell', {
+      method: 'POST',
+      body: JSON.stringify(data),
+    });
+    const resultText = await remoteData.text();
+    let remoteResult: any;
+    try {
+      remoteResult = JSON.parse(resultText);
+    } catch (e: any) {
+      remoteResult = { status: 'error', message: resultText };
+    }
+    const response = {
+      status: 'ok',
+      message: 'check.',
+      ...remoteResult,
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  public async chkData(data: any, req: ServerRequest, res: ServerResponse, chkCredential: boolean) {
+    // add access token
+    if (!data || Array.isArray(data) || typeof data !== 'object' || !data.accessToken || !data.targetUrl) {
+      const response = {
+        status: 'error',
+        message: 'Wrong data [missing parameters].', //langHelper.getLang('shared:wrong_data'),
+      };
+      ApiHelper.sendJson(req, res, response);
+      return false;
+    }
+    if (chkCredential) {
+      if (await adminTokenHelper.validateToken(data.accessToken)) {
+        return data;
+      } else if (
+        process.env['DEV_ADMIN_PASS'] !== '' &&
+        (data.accessToken === `${process.env['DEV_ADMIN_USER']}@${process.env['DEV_ADMIN_PASS']}` ||
+          data.accessToken === `${process.env['DEV_ADMIN_USER']}:${process.env['DEV_ADMIN_PASS']}`)
+      ) {
+        return data;
+      } else {
+        const response = {
+          status: 'error',
+          message: 'Wrong data [wrong token].', //langHelper.getLang('shared:wrong_data'),
+        };
+        ApiHelper.sendJson(req, res, response);
+        return false;
+      }
+    }
+    return data;
+  }
+
+  // this is called by the FE, then call byClientCheck to get remote server's information
+  async check(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, false);
+    if (!data) return true;
+
+    // From app list is from local
+    const appData = apiCache.getAppData();
+    const folders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '..'));
+    const apps = folders.filter((app: string) => app.endsWith('_web')).map((app: string) => app.replace('_web', ''));
+
+    let targetUrl = data.targetUrl as string;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    const remoteData = await fetch(targetUrl + '/api/admin/release/byClientCheck', {
+      method: 'POST',
+      body: JSON.stringify(data),
+    });
+    const resultText = await remoteData.text();
+    let remoteResult: any;
+    try {
+      remoteResult = JSON.parse(resultText);
+    } catch (e: any) {
+      remoteResult = { status: 'error', message: resultText };
+    }
+
+    // local dirs under _web
+    const webSub: string[] = [];
+    for (let j = 0; j < apps.length; j++) {
+      const app = apps[j];
+      const appRoot = path.join(appData.apiPath, '..');
+      const subFolders = await FsUtils.getDirentFullpath(path.join(appRoot, app + '_web'), 5);
+      webSub.push(app + '_web/');
+      webSub.push(
+        ...subFolders
+          .filter((i) => i.isDirectory())
+          .map((i) => path.join(i.parentPath.substring(appRoot.length + 1), i.name).replace(/\\/g, '/'))
+      );
+    }
+    // const webSub = webSubFolders.filter(i => i.isDirectory()).map(i => path.join(i.parentPath.substring(appData.webPath.length + 1), i.name).replace(/\\/g, '/')).sort();
+
+    const response = {
+      releaseProgress: await apiStorage.get(releaseProgress),
+      status: 'ok',
+      message: 'check.',
+      appsFrom: apps,
+      ...remoteResult,
+      webSub: webSub, // webSubFolders.filter((folder) => folder.isDirectory()).map((folder) => folder.name),
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  async getFileList(parentPath: string, subFolders: string[]) {
+    const subFoldersWithTime = [];
+    for (let j = 0; j < subFolders.length; j++) {
+      const subFolder = subFolders[j];
+      const fileInfo = await FsUtils.fileInfo(path.join(parentPath, subFolder));
+      subFoldersWithTime.push({
+        name: subFolder,
+        time: new Date(fileInfo!.mtime).toLocaleString(),
+        size: fileInfo?.size,
+        dir: fileInfo?.isDir,
+      });
+    }
+    return subFoldersWithTime;
+  }
+
+  // called by clients
+  async byClientCheck(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    const appData = apiCache.getAppData();
+    const folders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '..'));
+    const apps = folders.filter((app: string) => app.endsWith('_web')).map((app: string) => app.replace('_web', ''));
+
+    const foldersWithTime = [];
+    for (let i = 0; i < folders.length; i++) {
+      const folder = folders[i];
+      const subFolders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '..', folder));
+      const subFoldersWithTime = await this.getFileList(path.join(appData.apiPath, '..', folder), subFolders);
+      const fileInfo = await FsUtils.fileInfo(path.join(appData.apiPath, '..', folder));
+      foldersWithTime.push({
+        name: folder,
+        time: new Date(fileInfo!.mtime).toLocaleString(),
+        items: subFoldersWithTime,
+        dir: fileInfo?.isDir,
+      });
+    }
+
+    const logFolders = await FsUtils.getDirAndFiles(path.join(appData.apiPath, '../../log'));
+    const logFoldersWithTime = await this.getFileList(path.join(appData.apiPath, '../../log'), logFolders);
+    const response = {
+      status: 'ok',
+      message: 'Remote server information called from a client.',
+      appData: appData as any,
+      apps,
+      folders,
+      foldersWithTime,
+      logs: logFoldersWithTime,
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  async callUpdate(req: ServerRequest, res: ServerResponse) {
+    // when remote server is slow, then local update call may be timeout.
+    // so we set a flag to prevent multiple update calls
+    apiStorage.set(releaseProgress, 'update started: ' + new Date().toLocaleString());
+    let result = true;
+    try {
+      result = await this.update(req, res);
+    } catch (e: any) {
+      const response = {
+        status: 'error',
+        message: e.message,
+      };
+      ApiHelper.sendJson(req, res, response);
+    }
+    apiStorage.set(releaseProgress, undefined);
+    return result;
+  }
+
+  async update(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, false);
+    if (!data) return true;
+
+    if (!data.chkServer && !data.chkApi && !data.chkWeb && !data.chkEnv) {
+      const response = {
+        status: 'error',
+        message: langHelper.getLang('shared:wrong_data'),
+      };
+      ApiHelper.sendJson(req, res, response);
+      return true;
+    }
+
+    const appData = apiCache.getAppData();
+    let targetUrl = data.targetUrl as string;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    if (data.chkEnv) {
+      const result = await this.updateSendFile(data, '.env');
+      if (!result || result.status !== 'ok') {
+        ApiHelper.sendJson(req, res, result);
+        return true;
+      }
+      const result2 = await this.updateSendFile(data, '.env.development');
+      if (!result2 || result2.status !== 'ok') {
+        ApiHelper.sendJson(req, res, result2);
+        return true;
+      }
+      const result3 = await this.updateSendFile(data, '.env.production');
+      if (!result3 || result3.status !== 'ok') {
+        ApiHelper.sendJson(req, res, result3);
+        return true;
+      }
+    }
+    // if (data.chkWeb) {
+    // const result = await this.updateSendFile(data, 'web');
+    // if (!result || result.status !== 'ok') {
+    //   ApiHelper.sendJson(req, res, result);
+    //   return true;
+    // }
+    // if (data.webSub) {
+    //   const result2 = await this.updateSendFile(data, 'web-sub');
+    //   if (!result2 || result2.status !== 'ok') {
+    //     ApiHelper.sendJson(req, res, result2);
+    //     return true;
+    //   }
+    // }
+
+    if (data.webSubs && data.webSubs.length > 0) {
+      const subTop = path.join(appData.apiPath, '..', data.fromList + '_web/');
+      for (let i = 0; i < data.webSubs.length; i++) {
+        if (!data.webSubs[i].startsWith(data.fromList + '_web/')) {
+          const response = {
+            status: 'error',
+            message: `Error: ${data.webSubs[i]} is not under ${data.fromList}`,
+          };
+          ApiHelper.sendJson(req, res, response);
+          return true;
+        }
+        const subFolders = await FsUtils.getDirentFullpath(path.join(appData.apiPath, '..', data.webSubs[i]));
+        const subFiles = subFolders
+          .filter((e) => e.isFile())
+          .map((e) => path.join(e.parentPath.substring(subTop.length), e.name).replace(/\\/g, '/'))
+          .sort();
+        for (let j = 0; j < subFiles.length; j++) {
+          if (subFiles[j].endsWith('.js.map') || subFiles[j].endsWith('.css.map')) {
+            continue;
+          }
+          data.webSub = subFiles[j];
+          this.logger.info(`update, webSubs: ${data.webSubs[i]}, subFiles: ${subFiles[j]})`);
+          const result2 = await this.updateSendFile(data, 'web-sub');
+          if (!result2 || result2.status !== 'ok') {
+            ApiHelper.sendJson(req, res, result2);
+            return true;
+          }
+        }
+      }
+    }
+    // }
+    if (data.chkApi) {
+      const result = await this.updateSendFile(data, 'api');
+      if (!result || result.status !== 'ok') {
+        ApiHelper.sendJson(req, res, result);
+        return true;
+      }
+    }
+    // update server at the last
+    if (data.chkServer) {
+      const result = await this.updateSendFile(data, 'server');
+      if (!result || result.status !== 'ok') {
+        ApiHelper.sendJson(req, res, result);
+        return true;
+      }
+      const result2 = await this.updateSendFile(data, 'app-loader');
+      if (!result2 || result2.status !== 'ok') {
+        ApiHelper.sendJson(req, res, result2);
+        return true;
+      }
+    }
+
+    const response = {
+      status: 'ok',
+      message: 'updated',
+    };
+    ApiHelper.sendJson(req, res, response);
+    this.logger.info(`updated, successful`);
+    return true;
+  }
+
+  async updateSendFile(data: any, chkOption: string) {
+    let targetUrl = data.targetUrl;
+    if (targetUrl.endsWith('/')) {
+      targetUrl = targetUrl.slice(0, -1);
+    }
+    const fromList = data.fromList;
+    const appData = apiCache.getAppData();
+    let sendFile = '';
+    if (chkOption === 'server') {
+      sendFile = path.join(appData.apiPath, '..', 'server', 'index.js');
+    } else if (chkOption === 'app-loader') {
+      sendFile = path.join(appData.apiPath, '..', 'server', 'app-loader.js');
+    } else if (chkOption === 'api') {
+      sendFile = path.join(appData.apiPath, '..', fromList + '_api', 'index.js');
+      // } else if (chkOption === 'web') {
+      //   sendFile = path.join(appData.apiPath, '..', fromList + '_web', 'index.js');
+    } else if (chkOption === 'web-sub' && data.webSub) {
+      // sendFile = path.join(appData.apiPath, '..', fromList + '_web', data.webSub, 'index.js');
+      sendFile = path.join(appData.apiPath, '..', fromList + '_web', data.webSub);
+    } else if (chkOption.startsWith('.env')) {
+      sendFile = path.join(appData.apiPath, '../../..', chkOption);
+    }
+    if (!(await FsUtils.pathExist(sendFile))) {
+      this.logger.error(`updateSendFile, not found: ${sendFile}`);
+      return { status: 'error', message: 'Client file not found: ' + sendFile };
+    }
+    apiStorage.set(releaseProgress, 'updateSendFile: ' + sendFile);
+    const fileContent = (await FsUtils.readFile(sendFile))!;
+    // const compressedContent = await new Promise<Buffer>((resolve, reject) => {
+    //     zlib.gzip(fileContent, (err, buffer) => {
+    //         if (err) {
+    //             reject(err);
+    //         } else {
+    //             resolve(buffer);
+    //         }
+    //     });
+    // })
+    const chunkSize = 1024 * 500;
+    let cnt = 0;
+    this.logger.info(`updateSendFile, sendFile: ${sendFile}, len: ${fileContent.length}`);
+    for (let i = 0; i < fileContent.length; i += chunkSize) {
+      const chunk = fileContent.slice(i, i + chunkSize);
+      if (!chunk) break;
+
+      const postData = {
+        method: 'POST',
+        body: JSON.stringify({ ...data, chkOption, index: cnt, size: fileContent.length }) + '\n\n' + chunk,
+      };
+      this.logger.info(
+        `updateSendFile, index: ${cnt}, sending: ${chunk.length} (${i + chunk.length} / ${
+          fileContent.length
+        }), f: ${sendFile}`
+      );
+      apiStorage.set(
+        releaseProgress,
+        `updateSendFile, index: ${cnt}, sending: ${chunk.length} (${i + chunk.length} / ${
+          fileContent.length
+        }), f: ${sendFile}`
+      );
+      i > 0 && (await new Promise((resolve) => setTimeout(resolve, 1000)));
+      const remoteData = await fetch(targetUrl + '/api/admin/release/byClientUpdate', postData);
+      const resultText = await remoteData.text();
+      this.logger.info(`updateSendFile, index: ${cnt}, resultText: ${resultText}`);
+      let remoteResult: any;
+      try {
+        remoteResult = JSON.parse(resultText);
+      } catch (e: any) {
+        remoteResult = { status: 'error', message: resultText };
+      }
+      if (!remoteResult || remoteResult.status !== 'ok') {
+        return remoteResult;
+      }
+      cnt++;
+    }
+
+    const remoteResult = { status: 'ok', message: 'updated' };
+    return remoteResult;
+  }
+
+  // called by clients
+  async byClientUpdate(req: ServerRequest, res: ServerResponse) {
+    const body = req.locals.body as Buffer;
+    let jsonData = {};
+    let fileContent = null;
+    try {
+      const index = body.indexOf('\n\n');
+      if (index !== -1) {
+        jsonData = JSON.parse(body.subarray(0, index).toString());
+        fileContent = body.subarray(index + 2);
+      }
+      const data = await this.chkData(jsonData, req, res, true);
+      if (!data) return true;
+
+      const toList = data.toList as string;
+      const chkOption = data.chkOption as string;
+      if (
+        !chkOption ||
+        !toList ||
+        (chkOption !== 'server' &&
+          chkOption !== 'app-loader' &&
+          chkOption !== 'api' &&
+          // chkOption !== 'web' &&
+          chkOption !== 'web-sub' &&
+          !chkOption.startsWith('.env'))
+      ) {
+        const response = {
+          status: 'error',
+          message: 'Wrong data.',
+        };
+        ApiHelper.sendJson(req, res, response);
+        return true;
+      }
+
+      const appData = apiCache.getAppData();
+      let saveFile = '';
+      if (chkOption === 'server') {
+        saveFile = path.join(appData.apiPath, '..', 'server', 'index.js');
+      } else if (chkOption === 'app-loader') {
+        saveFile = path.join(appData.apiPath, '..', 'server', 'app-loader.js');
+      } else if (chkOption === 'api') {
+        saveFile = path.join(appData.apiPath, '..', toList + '_api', 'index.js');
+        // } else if (chkOption === 'web') {
+        //   saveFile = path.join(appData.apiPath, '..', toList + '_web', 'index.js');
+      } else if (chkOption === 'web-sub' && data.webSub) {
+        const baseName = path.basename(data.webSub);
+        if (baseName !== data.webSub) {
+          const folder = path.join(appData.apiPath, '..', toList + '_web', baseName);
+          if (!(await FsUtils.pathExist(folder))) {
+            await FsUtils.mkdir(folder);
+          }
+        }
+        saveFile = path.join(appData.apiPath, '..', toList + '_web', data.webSub);
+      } else if ((chkOption as string).startsWith('.env')) {
+        saveFile = path.join(appData.apiPath, '../../..', chkOption);
+      }
+      if (chkOption !== 'web-sub' && !(await FsUtils.pathExist(saveFile))) {
+        const response = {
+          status: 'error',
+          message: 'Server file not found: ' + saveFile,
+        };
+        ApiHelper.sendJson(req, res, response);
+        return true;
+      }
+      if (data.chkBackup && data.index === 0) {
+        const bakContent = await FsUtils.readFile(saveFile);
+        if (bakContent) {
+          const bakFile = saveFile + '.bak-' + new Date().toISOString().replace(/:/g, '-');
+          await FsUtils.writeFile(bakFile, bakContent);
+        }
+      }
+
+      this.logger.info(
+        `byClientUpdate, index: ${data.index}, saveFile: ${saveFile}, received len: ${(fileContent || '').length}`
+      );
+      if (data.index === 0) {
+        await FsUtils.writeFile(saveFile, fileContent || '');
+      } else {
+        await FsUtils.appendFile(saveFile, fileContent || '');
+      }
+
+      const response = {
+        status: 'ok',
+        message: 'Remote server updated by a client.',
+      };
+      ApiHelper.sendJson(req, res, response);
+    } catch (e: any) {
+      console.log('byClientUpdate failed', e);
+      const response = {
+        status: 'error',
+        message: 'byClientUpdate failed',
+      };
+      ApiHelper.sendJson(req, res, response);
+    }
+    return true;
+  }
+
+  async byClientRefreshCache(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    await processRefreshCache(req);
+    const response = {
+      status: 'ok',
+      message: 'Cache refreshed successfully.',
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  async byClientRestartApp(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    await processRestartApp();
+    const response = {
+      status: 'ok',
+      message: 'Restart app successfully.',
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+
+  async byClientShell(req: ServerRequest, res: ServerResponse) {
+    const jsonData = req.locals.json();
+    const data = await this.chkData(jsonData, req, res, true);
+    if (!data) return true;
+
+    const result = await processShell(req);
+    const response = {
+      status: 'ok',
+      message: 'Shell executed successfully.',
+      result,
+    };
+    ApiHelper.sendJson(req, res, response);
+    return true;
+  }
+}