yaoyao/scripts/verify-npm-update.mjs

import { test } from 'node:test'
import assert from 'node:assert/strict'
import { execFileSync } from 'node:child_process'
import { mkdtempSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { createServer } from 'node:http'
import { createHash, randomUUID } from 'node:crypto'
import { stageNpmRelease, verifyPreparedRelease } from '../bin/hermes-yaoyao-updater.mjs'
import { currentRelease, LaunchAgentService, localRequest, switchRelease, transitionService } from '../bin/lib/service-update.mjs'
import { writeNpmFixture } from '../tests/fixtures/npm-release.mjs'

test('real npm archives prepare alongside a live service; explicit switching and failed-start recovery preserve data', { skip: process.platform !== 'darwin', timeout: 90000 }, async () => {
  const root = realpathSync(mkdtempSync(join(tmpdir(), 'yaoyao-npm-live-'))), home = join(root, 'data'), releaseRoot = join(root, 'programs')
  mkdirSync(home); mkdirSync(join(home, 'updates')); mkdirSync(releaseRoot)
  let archive
  const registry = createServer((req, res) => {
    if (req.url !== '/release.tgz') { res.statusCode = 404; res.end(); return }
    res.setHeader('Content-Length', archive.length); res.end(archive)
  })
  await new Promise(done => registry.listen(0, '127.0.0.1', done))
  const probe = createServer(); await new Promise(done => probe.listen(0, '127.0.0.1', done))
  const port = probe.address().port; await new Promise(done => probe.close(done))
  const label = `cn.samien.yaoyao.npm-test.${randomUUID()}`
  class FixtureService extends LaunchAgentService {
    verify(expected) { return super.verify(expected, expected?.version === '0.3.1' ? 1500 : 10000) }
  }
  const driver = new FixtureService({ home, releaseRoot, port, label, plistPath: join(home, 'updates/service.plist') })
  const old = join(root, 'old'); writeNpmFixture(old, '0.2.0')
  function packageJob(version, broken = false) {
    const source = join(root, `package-${version}`), target = writeNpmFixture(source, version, broken)
    const [packed] = JSON.parse(execFileSync('npm', ['pack', '--json', '--ignore-scripts', '--pack-destination', root], { cwd: source, encoding: 'utf8' }))
    archive = readFileSync(join(root, packed.filename))
    const npm = { version, integrity: `sha512-${createHash('sha512').update(archive).digest('base64')}`, tarball: `http://127.0.0.1:${registry.address().port}/release.tgz` }
    const id = randomUUID(), jobPath = join(home, 'updates', `${id}.json`)
    const job = { id, operation: 'update', state: 'queued', target, plan: { home, releaseRoot, port, source: 'npm:@lsamien/yaoyao', npm, target } }
    writeFileSync(jobPath, JSON.stringify(job))
    return { job, jobPath }
  }
  try {
    switchRelease(releaseRoot, old); await driver.start(old); await driver.verify()
    const initialPID = driver.pid()
    writeFileSync(join(home, 'user.txt'), 'original data')
    const first = packageJob('0.3.0')
    const prepared = await stageNpmRelease(first.job, first.jobPath)
    assert.equal(JSON.parse(readFileSync(first.jobPath)).state, 'prepared')
    assert.equal(driver.pid(), initialPID, 'preparation must leave the old service running')
    assert.equal(currentRelease(releaseRoot), old)
    assert.equal((await localRequest(`http://127.0.0.1:${port}/api/status`)).body.version, '0.2.0')
    const finalRoot = verifyPreparedRelease({ ...first.job.plan, prepared }, first.job.target)
    await transitionService({ home, releaseRoot, driver, finalRoot })
    assert.notEqual(driver.pid(), initialPID)
    assert.equal(currentRelease(releaseRoot), finalRoot)
    assert.equal((await localRequest(`http://127.0.0.1:${port}/api/status`)).body.version, '0.3.0')
    assert.equal(readFileSync(join(home, 'user.txt'), 'utf8'), 'original data')
    assert.ok(readFileSync(join(old, 'release.json')), 'retain the old release')

    const second = packageJob('0.3.1', true), healthyPID = driver.pid()
    const bad = await stageNpmRelease(second.job, second.jobPath)
    assert.equal(driver.pid(), healthyPID)
    await assert.rejects(transitionService({ home, releaseRoot, driver, finalRoot: bad.root }), /核验失败/)
    assert.equal(currentRelease(releaseRoot), finalRoot)
    assert.equal((await localRequest(`http://127.0.0.1:${port}/api/status`)).body.version, '0.3.0')
    assert.equal(readFileSync(join(home, 'user.txt'), 'utf8'), 'original data', 'failed startup must restore the pre-switch data snapshot')

    const third = packageJob('0.3.2'), survivingPID = driver.pid()
    third.job.plan.npm.integrity = `sha512-${Buffer.alloc(64).toString('base64')}`
    await assert.rejects(stageNpmRelease(third.job, third.jobPath), /完整性校验失败/)
    assert.equal(driver.pid(), survivingPID)
    assert.equal(currentRelease(releaseRoot), finalRoot)
    console.log('Verified npm preparation, explicit restart, data recovery and integrity rejection in an isolated LaunchAgent.')
  } finally {
    await driver.stop().catch(() => {})
    await new Promise(done => { registry.close(done); registry.closeAllConnections() })
    rmSync(root, { recursive: true, force: true })
  }
})