magpie-gemini-web 0.4.0 → 0.5.0

package/lib/native.mjs

@@ -3,12 +3,16 @@ import path from 'node:path';
 import os from 'node:os';
 import crypto from 'node:crypto';
 import { spawn } from 'node:child_process';
+import release from './backend-release.json' with { type: 'json' };
 
-export const BACKEND_VERSION = 'v4.22.0';
-const RELEASE_BASE = `https://github.com/zexadev/gemini-web2api-go/releases/download/${BACKEND_VERSION}/`;
+export const BACKEND_VERSION = `v${release.version}`;
+const RELEASE_BASE = `https://github.com/${release.repository}/releases/download/${release.tag}/`;
+export const PINNED_BINARIES = release.binaries;
 
-// Upstream release assets by `${process.platform}-${process.arch}`, SHA-256 from the release's SHA256SUMS.txt.
-export const PINNED_BINARIES = {
+const UPSTREAM_VERSION = 'v4.22.0';
+const UPSTREAM_BASE = `https://github.com/zexadev/gemini-web2api-go/releases/download/${UPSTREAM_VERSION}/`;
+// Retained for an explicit, checksum-verified rollback to the upstream release.
+export const UPSTREAM_BINARIES = {
   'darwin-arm64': { asset: 'gemini-web2api-go_v4.22.0_darwin_arm64', sha256: 'c69ca75cf43017cf2a62dbf5c12b07f6bde66f403f714c32209b1ad350ed24c9' },
   'darwin-x64': { asset: 'gemini-web2api-go_v4.22.0_darwin_amd64', sha256: '384e617bcc30aacac6b7c4e4d0490e88d282b13b29f7a0a20d645b69514cd405' },
   'linux-x64': { asset: 'gemini-web2api-go_v4.22.0_linux_amd64', sha256: '21fcc81e0ad8ce0921e6b6c2cafce1089852530142b37e0289355c6e72df5299' },
@@ -17,12 +21,38 @@ export const PINNED_BINARIES = {
   'win32-arm64': { asset: 'gemini-web2api-go_v4.22.0_windows_arm64.exe', sha256: 'b42e951bfc08d7fe8bdb436dca87fc6a1b7948bb8d10e110653bcf13a790756c' }
 };
 
-export function pinnedBinary(platform = process.platform, arch = process.arch) {
-  const pin = PINNED_BINARIES[`${platform}-${arch}`];
+export function pinnedBinary(platform = process.platform, arch = process.arch, channel = 'optimized') {
+  if (channel !== 'optimized' && channel !== 'upstream') throw new Error(`Invalid backend channel: ${channel}`);
+  const pins = channel === 'upstream' ? UPSTREAM_BINARIES : PINNED_BINARIES;
+  const base = channel === 'upstream' ? UPSTREAM_BASE : RELEASE_BASE;
+  const version = channel === 'upstream' ? UPSTREAM_VERSION : BACKEND_VERSION;
+  const pin = pins[`${platform}-${arch}`];
   if (!pin) {
-    throw new Error(`No gemini-web2api-go ${BACKEND_VERSION} build for ${platform}/${arch}. Download one manually from https://github.com/zexadev/gemini-web2api-go/releases/tag/${BACKEND_VERSION}`);
+    throw new Error(`No gemini-web2api-go ${version} build for ${platform}/${arch}. See ${base.slice(0, -1).replace('/download/', '/tag/')}`);
+  }
+  return { url: base + pin.asset, sha256: pin.sha256 };
+}
+
+export function backendChannel(dataDir = getDataDir()) {
+  try {
+    const { channel } = JSON.parse(fs.readFileSync(path.join(dataDir, 'backend-channel.json'), 'utf8'));
+    if (channel !== 'optimized' && channel !== 'upstream') throw new Error('Expected optimized or upstream');
+    return channel;
+  } catch (error) {
+    if (error.code === 'ENOENT') return 'optimized';
+    throw new Error(`Invalid backend-channel.json: ${error.message}`);
+  }
+}
+
+function saveBackendChannel(dataDir, channel) {
+  const file = path.join(dataDir, 'backend-channel.json');
+  const temp = `${file}.${crypto.randomBytes(4).toString('hex')}.tmp`;
+  try {
+    fs.writeFileSync(temp, JSON.stringify({ channel }) + '\n', { mode: 0o600 });
+    fs.renameSync(temp, file);
+  } finally {
+    fs.rmSync(temp, { force: true });
   }
-  return { url: RELEASE_BASE + pin.asset, sha256: pin.sha256 };
 }
 
 export function getDataDir(env = process.env) {
@@ -41,7 +71,8 @@ export function computeFileHash(filePath) {
 export async function installBackend(options = {}) {
   const platform = options.platform || process.platform;
   const arch = options.arch || process.arch;
-  const pin = options.expectedHash && options.url ? null : pinnedBinary(platform, arch);
+  const channel = options.channel ?? 'optimized';
+  const pin = options.expectedHash && options.url ? null : pinnedBinary(platform, arch, channel);
   const expectedHash = options.expectedHash || pin.sha256;
   const downloadUrl = options.url || pin.url;
   const fetchFn = options.fetchFn || globalThis.fetch;
@@ -62,8 +93,6 @@ export async function installBackend(options = {}) {
     if (existingHash === expectedHash) {
       binaryReady = true;
       console.log(`Backend binary verified: ${binPath}`);
-    } else {
-      fs.unlinkSync(binPath);
     }
   }
 
@@ -97,7 +126,11 @@ export async function installBackend(options = {}) {
     }
   }
 
-  return { binPath, ...ensureDataFiles(dataDir) };
+  const files = ensureDataFiles(dataDir);
+  // A local custom build keeps the user's channel. Official installs record their
+  // selection only after verification and replacement succeeded.
+  if ((!options.expectedHash && !options.url) || options.channel !== undefined) saveBackendChannel(dataDir, channel);
+  return { binPath, ...files };
 }
 
 // ensureDataFiles creates config.json and secrets.json when missing; existing ones are kept.
@@ -136,7 +169,7 @@ function ensureDataFiles(dataDir) {
 
 export function startBackend(options = {}) {
   const dataDir = options.dataDir || getDataDir();
-  const expectedHash = options.expectedHash || pinnedBinary().sha256;
+  const expectedHash = options.expectedHash || pinnedBinary(process.platform, process.arch, backendChannel(dataDir)).sha256;
   const spawnFn = options.spawnFn || spawn;
   const { binPath, args, env } = prepareLaunch(dataDir, [expectedHash]);
 
@@ -236,12 +269,11 @@ function prepareLaunch(dataDir, trustedHashes, platform = process.platform) {
   return { binPath, args, env, port: config.port, secrets };
 }
 
-// trustedHashes is what a backend binary in dataDir may hash to: the pinned upstream build for
-// this platform, plus a local Argon build installed by `backend:install:argon`.
+// trustedHashes accepts the selected release channel and any explicitly installed local build.
 function trustedHashes(dataDir, platform, arch) {
   const hashes = [];
   try {
-    hashes.push(pinnedBinary(platform, arch).sha256);
+    hashes.push(pinnedBinary(platform, arch, backendChannel(dataDir)).sha256);
   } catch {}
   try {
     const argon = JSON.parse(fs.readFileSync(path.join(dataDir, 'argon-build.json'), 'utf8'));
@@ -318,7 +350,7 @@ async function withLock(dataDir, fn, timeoutMs) {
 
 // ensureBackend makes sure the local backend is installed and running, and returns how to reach
 // it. A backend already answering with this setup's key is left alone. Otherwise a missing or
-// untrusted binary is (re)installed from the pinned upstream release, config and secrets are
+// untrusted binary is (re)installed from the selected release channel, config and secrets are
 // created when missing, and the backend is started in the background (logging to backend.log)
 // so it outlives the caller.
 export async function ensureBackend(options = {}) {
@@ -344,7 +376,7 @@ export async function ensureBackend(options = {}) {
     const trusted = trustedHashes(dataDir, platform, arch);
     const binPath = binaryPath(dataDir, platform);
     if (!fs.existsSync(binPath) || !trusted.includes(computeFileHash(binPath))) {
-      await installBackend({ dataDir, platform, arch, fetchFn });
+      await installBackend({ dataDir, platform, arch, fetchFn, channel: backendChannel(dataDir) });
     } else {
       ensureDataFiles(dataDir);
     }

package/lib/setup.mjs

@@ -78,7 +78,12 @@ export function parseCookieInput(input) {
   return [...cookies].map(([n, v]) => `${n}=${v}`).join('; ');
 }
 
-async function adminCall(setup, fetchFn, method, path, body) {
+const ADMIN_TIMEOUT_MS = 60000;
+
+// adminCall is one request to the backend's admin API. A request that gets no answer within
+// ADMIN_TIMEOUT_MS fails with timeoutMessage when one is given: the backend was reached, but what
+// it does for the request took too long.
+async function adminCall(setup, fetchFn, method, path, body, timeoutMessage) {
   let res;
   try {
     res = await fetchFn(`${setup.origin}/admin/api/${path}`, {
@@ -89,9 +94,10 @@ async function adminCall(setup, fetchFn, method, path, body) {
       },
       body: body ? JSON.stringify(body) : undefined,
       redirect: 'error',
-      signal: AbortSignal.timeout(60000)
+      signal: AbortSignal.timeout(ADMIN_TIMEOUT_MS)
     });
   } catch (err) {
+    if (timeoutMessage && err?.name === 'TimeoutError') throw new Error(timeoutMessage);
     throw new Error(`连不上本地 Gemini Web 后端（${setup.origin}）：${err?.message || err}`);
   }
   let data = {};
@@ -102,6 +108,22 @@ async function adminCall(setup, fetchFn, method, path, body) {
   return data;
 }
 
+// The check is the backend fetching gemini.google.com with the cookie, directly or through the
+// backend's own proxy pool: neither Magpie's proxy nor HTTP_PROXY reach it.
+function proxyHint(setup) {
+  return `后端不走 Magpie 的代理，也不读系统代理（HTTP_PROXY / HTTPS_PROXY）：需要代理才能访问 Google 的话，请在管理面板 ${setup.origin}/admin 的代理池里添加（登录口令是数据目录 secrets.json 里的 adminToken），然后重试。`;
+}
+
+// checkFailure is the error for a check that came back not ok. The backend words the cookie's
+// own verdicts (signed out, redirected to sign-in, rate limited) itself and prefixes everything
+// else, a failed fetch of gemini.google.com among it, with "检测失败" (explainCookieFailure).
+function checkFailure(setup, detail) {
+  if (detail.startsWith('检测失败')) {
+    return new Error(`后端没能访问 gemini.google.com 来检测这个 Cookie（${detail}）。${proxyHint(setup)}`);
+  }
+  return new Error(`这个 Cookie 无法登录 Gemini：${detail || '检测未通过'}`);
+}
+
 // importCookie adds the cookie to the backend's account pool and checks it signs in. An
 // account that fails the check is removed again, and the error says why.
 export async function importCookie(setup, cookie, options = {}) {
@@ -116,14 +138,15 @@ export async function importCookie(setup, cookie, options = {}) {
 
   let check;
   try {
-    check = await adminCall(setup, fetchFn, 'POST', `cookies/${added.id}/check`);
+    check = await adminCall(setup, fetchFn, 'POST', `cookies/${added.id}/check`, undefined,
+      `后端 ${ADMIN_TIMEOUT_MS / 1000} 秒内没检测完这个 Cookie：检测要由后端访问 gemini.google.com，这一步一直没有返回，多半是后端连不上 Google。${proxyHint(setup)}`);
   } catch (err) {
     await adminCall(setup, fetchFn, 'DELETE', `cookies/${added.id}`).catch(() => {});
     throw err;
   }
   if (!check.ok) {
     await adminCall(setup, fetchFn, 'DELETE', `cookies/${added.id}`).catch(() => {});
-    throw new Error(`这个 Cookie 无法登录 Gemini：${check.detail || '检测未通过'}`);
+    throw checkFailure(setup, check.detail || '');
   }
   return { id: added.id, detail: check.detail || '' };
 }