pi-web-ui 0.94.1 → 0.96.0

package/dist/server/plugin-updater.js

@@ -11,6 +11,7 @@ import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, cpSync, write
 import { join } from "node:path";
 import { execFile } from "node:child_process";
 import { pick } from "./i18n.js";
+import { parseInstallSpec, manifestCandidateUrls } from "./plugin-install-spec.js";
 const PLUGIN_ID_RE = /^[A-Za-z0-9_-]+$/;
 /** 保留的备份份数（超出删除最旧的）。 */
 export const BACKUP_KEEP = 3;
@@ -150,10 +151,66 @@ export async function resolveRemoteSha(spec, exec = execGit) {
     const sha = res.stdout.match(/^([0-9a-f]{40,64})\s+HEAD/m)?.[1] ?? null;
     return sha ? sha.slice(0, 12) : null;
 }
-/** 扫描全部已装插件，对比本地 sha 与远端 sha，报告更新状态。 */
+/** 简易数字 semver 比较：>0 代表 a 比 b 新。 */
+export function compareVersions(a, b) {
+    const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+    const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+    for (let i = 0; i < 3; i++) {
+        const x = pa[i] ?? 0;
+        const y = pb[i] ?? 0;
+        if (x !== y)
+            return x - y;
+    }
+    return 0;
+}
+/** 判断某个插件是否属于随包维护的内置插件（官方插件）。 */
+export function isBuiltinPlugin(id, source, builtinCatalogPath) {
+    if (source && /xing-shuyin\/pi-web-ui\/plugins\//i.test(source))
+        return true;
+    if (builtinCatalogPath && existsSync(builtinCatalogPath)) {
+        try {
+            const raw = JSON.parse(readFileSync(builtinCatalogPath, "utf8"));
+            if (Array.isArray(raw)) {
+                return raw.some((e) => e?.id === id);
+            }
+        }
+        catch {
+            /* ignore parse errors */
+        }
+    }
+    return false;
+}
+/** 探测远端 manifest 中的版本号（通过 raw.githubusercontent.com 或注入的 fetcher）。 */
+async function fetchRemoteVersion(source, fetcher) {
+    const spec = parseInstallSpec(source);
+    const urls = manifestCandidateUrls(spec);
+    if (urls.length === 0)
+        return null;
+    const fetchImpl = fetcher ?? (typeof fetch === "function" ? fetch : null);
+    if (!fetchImpl)
+        return null;
+    for (const url of urls) {
+        try {
+            const ctrl = new AbortController();
+            const timer = setTimeout(() => ctrl.abort(), 6000);
+            const res = await fetchImpl(url, { signal: ctrl.signal }).finally(() => clearTimeout(timer));
+            if (!res.ok)
+                continue;
+            const data = (await res.json());
+            if (typeof data?.version === "string" && data.version.trim()) {
+                return data.version.trim();
+            }
+        }
+        catch {
+            // 单个 URL 失败继续尝试下一个候选
+        }
+    }
+    return null;
+}
+/** 扫描全部已装插件，对比本地 sha/version 与远端 sha/version，报告更新状态。 */
 export async function checkPluginUpdates(dataDir, exec = execGit, 
 /** error 字段文案语言（默认英文）；调用方可传 () => getLang() 实现跟随。 */
-lang) {
+lang, opts) {
     const l = lang?.() ?? "en";
     const pluginsDir = join(dataDir, "plugins");
     let names = [];
@@ -180,6 +237,42 @@ lang) {
             catch {
                 localSha = null; // 无 sha 记录 → 保守认为可更新（不知道装了哪个版本）
             }
+            let name;
+            let version;
+            try {
+                const m = JSON.parse(readFileSync(join(dir, "manifest.json"), "utf8"));
+                name = m.name;
+                version = m.version;
+            }
+            catch {
+                /* 坏 manifest：仍报告 */
+            }
+            const builtin = isBuiltinPlugin(n, source, opts?.builtinCatalogPath);
+            let latestVersion = null;
+            // 本地开发模式下，如果宿主包自带 plugins/<id>/manifest.json，可直接读本地最新版本号
+            if (opts?.pkgRoot) {
+                const localPkgManifest = join(opts.pkgRoot, "plugins", n, "manifest.json");
+                if (existsSync(localPkgManifest)) {
+                    try {
+                        const rawPkg = JSON.parse(readFileSync(localPkgManifest, "utf8"));
+                        if (typeof rawPkg?.version === "string" && rawPkg.version.trim()) {
+                            latestVersion = rawPkg.version.trim();
+                        }
+                    }
+                    catch {
+                        /* ignore */
+                    }
+                }
+            }
+            // 若本地未取到最新版本号，则尝试通过 fetcher 探测远端 manifest.json
+            if (!latestVersion) {
+                try {
+                    latestVersion = await fetchRemoteVersion(source, opts?.fetcher);
+                }
+                catch {
+                    latestVersion = null;
+                }
+            }
             let remoteSha = null;
             let error;
             try {
@@ -189,27 +282,37 @@ lang) {
                 error = err instanceof Error ? err.message : String(err);
                 remoteSha = null;
             }
-            if (!remoteSha && !error)
+            if (!remoteSha && !latestVersion && !error)
                 error = pick(l, "无法检查（非 git 源或 git 不可用）", "Cannot check (non-git source or git unavailable)", "pluginupdate.cannot.check");
-            let name;
-            let version;
-            try {
-                const m = JSON.parse(readFileSync(join(dir, "manifest.json"), "utf8"));
-                name = m.name;
-                version = m.version;
+            let updatable = false;
+            if (latestVersion && version) {
+                const cmp = compareVersions(latestVersion, version);
+                if (cmp > 0) {
+                    updatable = true;
+                }
+                else if (cmp === 0 && remoteSha && localSha) {
+                    updatable = localSha !== remoteSha;
+                }
+                else if (cmp === 0 && remoteSha && !localSha) {
+                    updatable = true;
+                }
             }
-            catch {
-                /* 坏 manifest：仍报告 */
+            else if (remoteSha) {
+                updatable = !localSha || localSha !== remoteSha;
+            }
+            else if (latestVersion && !version) {
+                updatable = true;
             }
-            const updatable = !!remoteSha && (!localSha || localSha !== remoteSha);
             out.push({
                 id: n,
                 name,
                 version,
+                latestVersion,
                 source,
                 localSha,
                 remoteSha,
                 updatable,
+                builtin,
                 error,
             });
         }