SubMiner/src/main/runtime/update/app-updater.ts

import { realpathSync } from 'node:fs';
import { execFile } from 'node:child_process';
import { promisify } from 'node:util';
import { autoUpdater as electronAutoUpdater } from 'electron-updater';
import type { UpdateChannel } from '../../../types/config';
import { compareSemverLike } from './release-assets';

export interface AppUpdateCheckResult {
  available: boolean;
  version: string;
  canUpdate: boolean;
}

export interface ElectronUpdaterLoggerLike {
  info?: (message: string, ...args: unknown[]) => void;
  debug?: (message: string, ...args: unknown[]) => void;
  warn?: (message: string, ...args: unknown[]) => void;
  error?: (message: string, ...args: unknown[]) => void;
}

export interface ElectronAutoUpdaterLike {
  autoDownload: boolean;
  allowPrerelease: boolean;
  allowDowngrade: boolean;
  logger?: ElectronUpdaterLoggerLike | null;
  on?: (event: 'error', listener: (error: unknown) => void) => unknown;
  off?: (event: 'error', listener: (error: unknown) => void) => unknown;
  removeListener?: (event: 'error', listener: (error: unknown) => void) => unknown;
  checkForUpdates: () => Promise<{
    updateInfo?: {
      version?: string;
    };
  } | null>;
  downloadUpdate: () => Promise<unknown>;
  quitAndInstall: (isSilent?: boolean, isForceRunAfter?: boolean) => void;
}

const updaterErrorListeners = new WeakMap<object, (error: unknown) => void>();
const execFileAsync = promisify(execFile);

export function resolveMacAppBundlePath(execPath: string): string | null {
  const marker = '.app/Contents/MacOS/';
  const markerIndex = execPath.indexOf(marker);
  if (markerIndex < 0) return null;
  return execPath.slice(0, markerIndex + '.app'.length);
}

async function readMacCodeSignature(appBundlePath: string): Promise<string | null> {
  try {
    const result = await execFileAsync('/usr/bin/codesign', ['-dv', '--verbose=4', appBundlePath], {
      encoding: 'utf8',
    });
    return `${result.stdout ?? ''}\n${result.stderr ?? ''}`;
  } catch {
    return null;
  }
}

function realpathOrOriginal(filePath: string): string {
  try {
    return realpathSync(filePath);
  } catch {
    return filePath;
  }
}

export function isKnownLinuxPackageManagedAppImage(appImagePath: string): boolean {
  return realpathOrOriginal(appImagePath) === '/opt/SubMiner/SubMiner.AppImage';
}

export async function isNativeUpdaterSupported(options: {
  platform: NodeJS.Platform;
  isPackaged: boolean;
  execPath: string;
  env?: NodeJS.ProcessEnv;
  readCodeSignature?: (appBundlePath: string) => string | null | Promise<string | null>;
  log?: (message: string) => void;
}): Promise<boolean> {
  if (!options.isPackaged) {
    options.log?.('Skipping native updater because this build is not packaged.');
    return false;
  }
  if (options.platform === 'linux') {
    options.log?.(
      'Skipping native Linux updater because Linux tray checks use GitHub release assets.',
    );
    return false;
  }
  if (options.platform !== 'darwin') {
    options.log?.('Skipping native updater because this platform uses GitHub metadata checks.');
    return false;
  }

  const appBundlePath = resolveMacAppBundlePath(options.execPath);
  if (!appBundlePath) {
    options.log?.(
      'Skipping native macOS updater because the app bundle path could not be resolved.',
    );
    return false;
  }

  const signature = await (options.readCodeSignature ?? readMacCodeSignature)(appBundlePath);
  if (!signature) {
    options.log?.(
      'Skipping native macOS updater because the app code signature could not be read.',
    );
    return false;
  }
  if (/Signature=adhoc\b/.test(signature) || /TeamIdentifier=not set\b/.test(signature)) {
    options.log?.('Skipping native macOS updater because this build is ad-hoc signed.');
    return false;
  }

  return true;
}

export function configureAutoUpdater(
  updater: ElectronAutoUpdaterLike,
  log: (message: string) => void = () => {},
  channel: UpdateChannel = 'stable',
): ElectronAutoUpdaterLike {
  updater.autoDownload = false;
  updater.allowPrerelease = channel === 'prerelease';
  updater.allowDowngrade = false;
  updater.logger = {
    info: () => {},
    debug: () => {},
    warn: (message) => log(message),
    error: (message) => log(message),
  };
  const previousErrorListener = updaterErrorListeners.get(updater);
  if (previousErrorListener) {
    if (updater.off) {
      updater.off('error', previousErrorListener);
    } else {
      updater.removeListener?.('error', previousErrorListener);
    }
  }
  if (updater.on) {
    const errorListener = (error: unknown) => {
      const message = error instanceof Error ? error.message : String(error);
      log(`Updater error event: ${message}`);
    };
    updater.on('error', errorListener);
    updaterErrorListeners.set(updater, errorListener);
  }
  return updater;
}

export function createElectronAppUpdater(options: {
  currentVersion: string;
  isPackaged: boolean;
  updater?: ElectronAutoUpdaterLike;
  log: (message: string) => void;
  getChannel?: () => UpdateChannel;
  isNativeUpdaterSupported?: () => boolean | Promise<boolean>;
}) {
  const getChannel = options.getChannel ?? (() => 'stable' as const);
  const updater = configureAutoUpdater(
    options.updater ?? electronAutoUpdater,
    options.log,
    getChannel(),
  );
  let nativeUpdaterSupported: Promise<boolean> | null = null;

  async function getNativeUpdaterSupported(): Promise<boolean> {
    if (!options.isNativeUpdaterSupported) return true;
    if (nativeUpdaterSupported === null) {
      nativeUpdaterSupported = Promise.resolve(options.isNativeUpdaterSupported());
    }
    return nativeUpdaterSupported;
  }

  return {
    async checkForUpdates(channel?: UpdateChannel): Promise<AppUpdateCheckResult> {
      if (!options.isPackaged) {
        return {
          available: false,
          version: options.currentVersion,
          canUpdate: false,
        };
      }
      if (!(await getNativeUpdaterSupported())) {
        options.log('Skipping native app update check because native updater is unsupported.');
        return {
          available: false,
          version: options.currentVersion,
          canUpdate: false,
        };
      }
      configureAutoUpdater(updater, options.log, channel ?? getChannel());
      const result = await updater.checkForUpdates();
      const version = result?.updateInfo?.version ?? options.currentVersion;
      return {
        available: compareSemverLike(version, options.currentVersion) > 0,
        version,
        canUpdate: true,
      };
    },
    async downloadUpdate(): Promise<void> {
      if (!options.isPackaged) {
        options.log('Skipping app update download because this build is not packaged.');
        return;
      }
      if (!(await getNativeUpdaterSupported())) {
        options.log('Skipping app update download because native updater is unsupported.');
        return;
      }
      await updater.downloadUpdate();
    },
    async quitAndInstall(): Promise<void> {
      if (!options.isPackaged) {
        options.log('Skipping app update install because this build is not packaged.');
        return;
      }
      if (!(await getNativeUpdaterSupported())) {
        options.log('Skipping app update install because native updater is unsupported.');
        return;
      }
      updater.quitAndInstall(false, true);
    },
  };
}