yaoyao/desktop/windows-upgrade.test.mjs

import { test } from 'node:test'
import assert from 'node:assert/strict'
import { createServer } from 'node:http'
import { execFile } from 'node:child_process'
import { promisify } from 'node:util'
import { mkdtemp, readFile, writeFile, mkdir, rm, readdir, realpath, copyFile, access } from 'node:fs/promises'
import { tmpdir, homedir } from 'node:os'
import { join, resolve, basename } from 'node:path'
import { randomUUID } from 'node:crypto'
import { _electron as electron, expect } from '@playwright/test'
import { powershellArguments } from './windows-shell.mjs'
const execute = promisify(execFile)

test('installed NSIS client rejects a corrupt update, upgrades and preserves settings and cookies', {
  skip: process.platform !== 'win32' || process.env.DESKTOP_TEST_UPGRADE !== '1', timeout: 600000,
}, async () => {
  const root = resolve(import.meta.dirname, '..'), output = join(root, 'desktop-release/windows-x64')
  const evidence = join(root, 'test-results/windows-client'), sandbox = await realpath(await mkdtemp(join(tmpdir(), 'yaoyao-upgrade-')))
  // NSIS relaunches through Explorer, which correctly uses the user's normal
  // environment instead of inheriting Playwright's fixture-only variables.
  // This test may touch the normal profile only on a fresh disposable CI user.
  assert.equal(process.env.GITHUB_ACTIONS, 'true', '安装升级验收只允许在一次性 GitHub Actions 用户下执行')
  assert.ok(!process.env.YAOYAO_HOME && !process.env.HERMES_YAOYAO_HOME && !process.env.HERMES_YAOYAO_DESKTOP_TEST_HOME)
  const home = join(homedir(), '.yaoyao'), installed = join(sandbox, 'app'), feed = join(sandbox, 'feed')
  assert.equal(await access(home).then(() => true).catch(() => false), false, '拒绝覆盖已有用户数据')
  const executablePath = join(installed, 'Yaoyao.exe'), cacheName = 'yaoyao-upgrade-' + randomUUID()
  const originalManifest = await readFile(join(root, '.desktop-build/release.json'), 'utf8')
  const originalPackage = await readFile(join(root, '.desktop-build/shell/package.json'), 'utf8')
  const version = JSON.parse(originalPackage).version, nextVersion = version.replace(/\d+$/, value => String(Number(value) + 1))
  let application, logs, userData, corrupt = true, requireCookie = false, restored = 0
  const server = createServer(async (req, res) => {
    try {
      const path = new URL(req.url, 'http://localhost').pathname
      if (path === '/api/app/desktop-session') {
        res.setHeader('Set-Cookie', 'hermes_yaoyao_session=fixture; Path=/; HttpOnly; Max-Age=31536000')
        res.setHeader('Content-Type', 'application/json'); res.end('{}'); return
      }
      if (path === '/api/app/bootstrap') {
        const authenticated = !requireCookie || String(req.headers.cookie).includes('hermes_yaoyao_session=fixture')
        if (requireCookie && authenticated) restored++
        res.setHeader('content-type', 'application/json')
        res.end(JSON.stringify({ authenticated, csrfToken: 'fixture', user: { role: 'member' }, serverKind: 'yaoyao-web' })); return
      }
      if (path.startsWith('/feed/')) {
        const name = decodeURIComponent(path.slice(6))
        if (basename(name) !== name) { res.writeHead(404).end(); return }
        const bytes = corrupt && name.endsWith('.exe') ? Buffer.from('damaged-installer') : await readFile(join(feed, name))
        res.setHeader('content-length', bytes.length); res.end(bytes); return
      }
      res.setHeader('content-type', 'text/html; charset=utf-8'); res.end('<title>升级验收</title><h1>远程工作区</h1>')
    } catch { res.writeHead(404).end() }
  })
  await new Promise(done => server.listen(0, '127.0.0.1', done))
  const origin = `http://127.0.0.1:${server.address().port}`
  const shell = join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe')
  const stopInstalled = async () => {
    // Only stop this test's executable, never another Yaoyao installation.
    const literal = executablePath.replaceAll("'", "''")
    await execute(shell, powershellArguments(`Get-CimInstance Win32_Process | Where-Object { $_.ExecutablePath -eq '${literal}' } | ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }`), { windowsHide: true }).catch(() => {})
  }
  try {
    await mkdir(home, { recursive: true }); await mkdir(evidence, { recursive: true })
    const { build, Platform, Arch } = await import('electron-builder')
    try {
      await writeFile(join(root, '.desktop-build/release.json'), JSON.stringify({ ...JSON.parse(originalManifest), webVersion: nextVersion }))
      await writeFile(join(root, '.desktop-build/shell/package.json'), JSON.stringify({ ...JSON.parse(originalPackage), version: nextVersion }))
      process.env.CSC_IDENTITY_AUTO_DISCOVERY = 'false'
      await build({ projectDir: root, targets: Platform.WINDOWS.createTarget(['nsis'], Arch.x64), publish: 'never',
        config: { directories: { output: feed }, forceCodeSigning: false, win: { signExecutable: false } } })
    } finally {
      await writeFile(join(root, '.desktop-build/release.json'), originalManifest)
      await writeFile(join(root, '.desktop-build/shell/package.json'), originalPackage)
    }
    await execute(join(output, `Yaoyao-${version}-win-x64-setup.exe`), ['/S', `/D=${installed}`], { timeout: 120000 })
    console.log('NSIS 安装完成，开始测试隔离更新源')
    const preferences = { startupChoice: 'remote', remoteServer: origin, backgroundAtLogin: true }
    await writeFile(join(home, 'desktop-preferences.json'), JSON.stringify(preferences))
    // This installed test copy alone uses the isolated HTTP update source.
    await writeFile(join(installed, 'resources/app-update.yml'), JSON.stringify({ provider: 'generic', url: origin + '/feed/', updaterCacheDirName: cacheName }))
    const launch = () => electron.launch({ executablePath, env: { ...process.env } })
    application = await launch(); let page = await application.firstWindow(); await page.waitForURL(origin + '/**')
    logs = await application.evaluate(({ app }) => app.getPath('logs'))
    userData = await application.evaluate(({ app }) => app.getPath('userData'))
    assert.equal(await application.evaluate(({ app }) => app.getVersion()), version)
    await application.evaluate(async ({ session, safeStorage }, { origin, home }) => {
      await session.defaultSession.cookies.set({ url: origin, name: 'session', value: 'upgrade-fixture', expirationDate: Date.now() / 1000 + 3600 })
      await session.defaultSession.cookies.flushStore()
      const fs = process.getBuiltinModule('node:fs')
      fs.writeFileSync(home + '/upgrade-token.enc', await safeStorage.encryptStringAsync('upgrade-device-identity'))
    }, { origin, home })
    requireCookie = true
    await page.evaluate(() => window.yaoyaoDesktop.openUpdates())
    assert.equal(application.windows().length, 1)
    await expect.poll(() => page.evaluate(() => window.yaoyaoDesktop.updateState().then(state => state.available)), { timeout: 30000 }).toBe(true)
    await page.evaluate(() => window.yaoyaoDesktop.updateAction('download'))
    await expect.poll(() => page.evaluate(() => window.yaoyaoDesktop.updateState().then(state => state.phase)), { timeout: 120000 }).toBe('failed')
    console.log('已拒绝损坏安装包，重试完整下载')
    corrupt = false
    await page.evaluate(() => window.yaoyaoDesktop.updateAction('check'))
    await page.evaluate(() => window.yaoyaoDesktop.updateAction('download'))
    await expect.poll(() => page.evaluate(() => window.yaoyaoDesktop.updateState().then(state => state.phase)), { timeout: 120000 }).toBe('ready')
    await page.screenshot({ path: join(evidence, 'upgrade-ready.png') })
    console.log('完整更新包已就绪，开始重启替换')
    const closed = application.waitForEvent('close')
    await page.evaluate(() => window.yaoyaoDesktop.updateAction('install')).catch(error => { if (!page.isClosed()) throw error })
    await closed; application = undefined
    await expect.poll(async () => readFile(join(installed, 'resources/runtime/release.json'), 'utf8').then(text => JSON.parse(text).webVersion).catch(() => ''),
      { timeout: 120000 }).toBe(nextVersion)
    await expect.poll(() => restored, { timeout: 60000 }).toBeGreaterThan(0)
    console.log('新版本已自动启动，登录 Cookie 保留')
    await stopInstalled()
    application = await launch(); page = await application.firstWindow(); await page.waitForURL(origin + '/**')
    assert.equal(await application.evaluate(({ app }) => app.getVersion()), nextVersion)
    assert.equal(await application.evaluate(async ({ session }, origin) =>
      (await session.defaultSession.cookies.get({ url: origin, name: 'session' }))[0]?.value, origin), 'upgrade-fixture')
    assert.deepEqual(JSON.parse(await readFile(join(home, 'desktop-preferences.json'), 'utf8')), preferences)
    assert.equal(await application.evaluate(async ({ safeStorage }, home) => {
      const fs = process.getBuiltinModule('node:fs'); return (await safeStorage.decryptStringAsync(fs.readFileSync(home + '/upgrade-token.enc'))).result
    }, home), 'upgrade-device-identity')
    await page.screenshot({ path: join(evidence, 'upgrade-restored.png') })
    await application.close(); application = undefined
    const uninstaller = (await readdir(installed)).find(name => /^Uninstall .*\.exe$/.test(name))
    assert.ok(uninstaller)
    await execute(join(installed, uninstaller), ['/S'], { timeout: 120000 })
    await expect.poll(async () => (await readdir(installed).catch(() => [])).includes('Yaoyao.exe'), { timeout: 30000 }).toBe(false)
    assert.deepEqual(JSON.parse(await readFile(join(home, 'desktop-preferences.json'), 'utf8')), preferences)
    await writeFile(join(evidence, 'upgrade.json'), JSON.stringify({ platform: 'win32', from: version, to: nextVersion,
      installed: true, corruptDownloadRejected: true, nsisReplacement: true, automaticRestart: true,
      cookieRestored: true, settingsPreserved: true, dpapiPreserved: true, uninstalled: true, dataRetained: true }, null, 2))
  } catch (error) {
    for (const [index, page] of (application?.windows() || []).entries()) await page.screenshot({ path: join(evidence, `upgrade-failed-${index}.png`) }).catch(() => {})
    throw error
  } finally {
    await application?.close().catch(() => {}); await stopInstalled()
    if (logs) await copyFile(join(logs, 'service/server.log'), join(evidence, 'upgrade-main.log')).catch(() => {})
    server.closeAllConnections(); await new Promise(done => server.close(done))
    await rm(sandbox, { recursive: true, force: true, maxRetries: 10, retryDelay: 500 })
    await rm(home, { recursive: true, force: true })
    if (userData) await rm(userData, { recursive: true, force: true, maxRetries: 10, retryDelay: 500 })
    await rm(join(process.env.LOCALAPPDATA, cacheName), { recursive: true, force: true }).catch(() => {})
  }
})