feat: new update function

Author: AandStep

.github/workflows/release.yml

@@ -77,12 +77,22 @@ jobs:
         shell: pwsh
         env:
           SUBSCRIPTION_ENCRYPT_KEY: ${{ secrets.SUBSCRIPTION_ENCRYPT_KEY }}
+          # For pre-release tags (containing '-') point the updater at the dev branch
+          # so test builds don't check the production manifest.
+          MANIFEST_URL_OVERRIDE: ${{ contains(github.ref_name, '-') && 'https://raw.githubusercontent.com/AandStep/ResultV/dev/update.json' || '' }}
         run: |
           $key = $env:SUBSCRIPTION_ENCRYPT_KEY
+          $ldflags = ""
           if ($key) {
-            wails build -clean -nsis -platform windows/amd64 -ldflags "-X resultproxy-wails/internal/proxy.subscriptionEncryptKey=$key"
+            $ldflags = "-X resultproxy-wails/internal/proxy.subscriptionEncryptKey=$key"
+          }
+          $manifestOverride = $env:MANIFEST_URL_OVERRIDE
+          if ($manifestOverride) {
+            $ldflags = "$ldflags -X resultproxy-wails/internal/updater.ManifestURLOverride=$manifestOverride".Trim()
+          }
+          if ($ldflags) {
+            wails build -clean -nsis -platform windows/amd64 -ldflags $ldflags
           } else {
-            Write-Warning "Secret SUBSCRIPTION_ENCRYPT_KEY not set — building without decryption key"
             wails build -clean -nsis -platform windows/amd64
           }
 
@@ -157,6 +167,7 @@ jobs:
           APPLE_NOTARY_APPLE_ID: ${{ secrets.APPLE_NOTARY_APPLE_ID }}
           APPLE_NOTARY_TEAM_ID: ${{ secrets.APPLE_NOTARY_TEAM_ID }}
           APPLE_NOTARY_PASSWORD: ${{ secrets.APPLE_NOTARY_PASSWORD }}
+          MANIFEST_URL_OVERRIDE: ${{ contains(github.ref_name, '-') && 'https://raw.githubusercontent.com/AandStep/ResultV/dev/update.json' || '' }}
         run: |
           chmod +x build-macos.sh
           ./build-macos.sh
@@ -215,6 +226,7 @@ jobs:
       - name: Build Linux artifacts
         env:
           SUBSCRIPTION_ENCRYPT_KEY: ${{ secrets.SUBSCRIPTION_ENCRYPT_KEY }}
+          MANIFEST_URL_OVERRIDE: ${{ contains(github.ref_name, '-') && 'https://raw.githubusercontent.com/AandStep/ResultV/dev/update.json' || '' }}
         run: |
           chmod +x build-linux.sh
           ./build-linux.sh
@@ -301,6 +313,84 @@ jobs:
           body_path: RELEASE_BODY.txt
           files: release-assets/*
           draft: false
-          prerelease: false
+          # Tags with a hyphen (e.g. v3.2.0-dev.1) are pre-releases.
+          # Pre-releases are visible on GitHub but not shown as "Latest release",
+          # so production auto-update is unaffected.
+          prerelease: ${{ contains(github.ref_name, '-') }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Compute sha256 and update update.json platforms
+        run: |
+          cat > update_manifest.cjs <<'NODE_EOF'
+          const fs   = require('fs');
+          const path = require('path');
+          const crypto = require('crypto');
+
+          const tag     = process.env.GITHUB_REF_NAME;          // e.g. "v3.2.0"
+          const version = tag.replace(/^v/, '');
+          const repo    = process.env.GITHUB_REPOSITORY;        // "AandStep/ResultV"
+          const baseURL = `https://github.com/${repo}/releases/download/${tag}`;
+          const dir     = 'release-assets';
+
+          function sha256File(p) {
+            return crypto.createHash('sha256').update(fs.readFileSync(p)).digest('hex');
+          }
+
+          const files = fs.readdirSync(dir);
+
+          const portableFile   = files.find(f => /^ResultV.*\.exe$/i.test(f) && !/installer/i.test(f) && !/setup/i.test(f));
+          const installerFile  = files.find(f => /installer.*\.exe$/i.test(f) || /setup.*\.exe$/i.test(f));
+          const dmgFile        = files.find(f => /\.dmg$/i.test(f));
+          const appimageFile   = files.find(f => /\.AppImage$/i.test(f));
+          const debFile        = files.find(f => /\.deb$/i.test(f));
+
+          const update = JSON.parse(fs.readFileSync('update.json', 'utf8'));
+          update.version   = version;
+          update.platforms = {};
+
+          function addPlatform(key, filename) {
+            if (!filename) return;
+            const p = path.join(dir, filename);
+            if (!fs.existsSync(p)) return;
+            const stat = fs.statSync(p);
+            update.platforms[key] = {
+              url:    `${baseURL}/${filename}`,
+              sha256: sha256File(p),
+              size:   stat.size,
+            };
+            console.log(`[${key}] ${filename} sha256=${update.platforms[key].sha256} size=${stat.size}`);
+          }
+
+          addPlatform('windows-amd64-portable',  portableFile);
+          addPlatform('windows-amd64-installer', installerFile);
+          addPlatform('darwin-universal',         dmgFile);
+          addPlatform('linux-amd64-appimage',     appimageFile);
+          addPlatform('linux-amd64-deb',          debFile);
+
+          fs.writeFileSync('update.json', JSON.stringify(update, null, 2) + '\n');
+          console.log('update.json written with platforms:', Object.keys(update.platforms).join(', ') || '(none)');
+          NODE_EOF
+          node update_manifest.cjs
+
+      # For stable releases (no hyphen): commit update.json to main so all users
+      # receive the update notification. For pre-releases (e.g. v3.2.0-dev.1):
+      # commit to dev branch only — production users are unaffected.
+      - name: Commit updated update.json
+        run: |
+          # Choose target branch based on whether this is a pre-release tag.
+          if [[ "${{ github.ref_name }}" == *"-"* ]]; then
+            TARGET_BRANCH="dev"
+          else
+            TARGET_BRANCH="main"
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git fetch origin "$TARGET_BRANCH"
+          git checkout "$TARGET_BRANCH"
+          git add update.json
+          git diff --cached --quiet || \
+            git commit -m "chore: update update.json platforms for ${{ github.ref_name }} [skip ci]"
+          git push origin "$TARGET_BRANCH"
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

app.go

@@ -48,6 +48,7 @@ import (
 	"resultproxy-wails/internal/logger"
 	"resultproxy-wails/internal/proxy"
 	"resultproxy-wails/internal/system"
+	"resultproxy-wails/internal/updater"
 )
 
 var stableHWIDProvider = config.StableHardwareID
@@ -101,6 +102,9 @@ type App struct {
 
 	deepLinkMu      sync.Mutex
 	pendingDeepLink string
+
+	updateMu     sync.Mutex
+	updateCancel context.CancelFunc
 }
 
 func NewApp() *App {
@@ -2164,3 +2168,100 @@ func (a *App) startSmartBlockedRefresh(cachePath string) {
 		}
 	}()
 }
+
+// StartUpdate begins the in-app update: check manifest → download → verify → install.
+// Progress and status are emitted as Wails events:
+//   - update:progress  { downloaded, total, speedBps }
+//   - update:verifying (no payload)
+//   - update:verified  (no payload)
+//   - update:installing (no payload)
+//   - update:failed    { stage, message }
+//
+// If another update is already in progress this call is a no-op.
+func (a *App) StartUpdate() {
+	a.updateMu.Lock()
+	if a.updateCancel != nil {
+		a.updateMu.Unlock()
+		return
+	}
+	ctx, cancel := context.WithCancel(a.ctx)
+	a.updateCancel = cancel
+	a.updateMu.Unlock()
+
+	go func() {
+		defer func() {
+			a.updateMu.Lock()
+			a.updateCancel = nil
+			a.updateMu.Unlock()
+		}()
+
+		emit := func(event string, payload interface{}) {
+			if a.ctx != nil {
+				wailsRuntime.EventsEmit(a.ctx, event, payload)
+			}
+		}
+		failEvent := func(stage, message string) {
+			emit("update:failed", map[string]interface{}{
+				"stage": stage, "message": message,
+			})
+		}
+
+		u := updater.New()
+
+		manifest, err := u.Check(ctx)
+		if err != nil {
+			if ctx.Err() != nil {
+				return
+			}
+			failEvent("check", err.Error())
+			return
+		}
+
+		asset := manifest.ResolveAsset()
+		if asset == nil {
+			failEvent("check", "no in-app update available for this platform")
+			return
+		}
+
+		path, err := u.Download(ctx, asset, func(downloaded, total int64, speedBps float64) {
+			emit("update:progress", map[string]interface{}{
+				"downloaded": downloaded,
+				"total":      total,
+				"speedBps":   speedBps,
+			})
+		})
+		if err != nil {
+			if ctx.Err() != nil {
+				failEvent("download", "download cancelled")
+				return
+			}
+			failEvent("download", err.Error())
+			return
+		}
+
+		emit("update:verifying", nil)
+
+		if err := u.Verify(path, asset.SHA256); err != nil {
+			failEvent("verify", err.Error())
+			return
+		}
+
+		emit("update:verified", nil)
+		emit("update:installing", nil)
+
+		if err := u.Install(path); err != nil {
+			failEvent("install", err.Error())
+		}
+		// Install calls os.Exit on success — execution never reaches here.
+	}()
+}
+
+// CancelUpdate cancels an in-progress update download.
+// Has no effect if no update is running.
+func (a *App) CancelUpdate() {
+	a.updateMu.Lock()
+	defer a.updateMu.Unlock()
+	if a.updateCancel != nil {
+		a.updateCancel()
+	}
+}

build-linux.sh

@@ -21,6 +21,9 @@ LDFLAGS=""
 if [ -n "${SUBSCRIPTION_ENCRYPT_KEY:-}" ]; then
   LDFLAGS="-X resultproxy-wails/internal/proxy.subscriptionEncryptKey=${SUBSCRIPTION_ENCRYPT_KEY}"
 fi
+if [ -n "${MANIFEST_URL_OVERRIDE:-}" ]; then
+  LDFLAGS="${LDFLAGS} -X resultproxy-wails/internal/updater.ManifestURLOverride=${MANIFEST_URL_OVERRIDE}"
+fi
 
 echo "==> wails build (linux/amd64) version=$VERSION"
 # webkit2_41 selects libwebkit2gtk-4.1 (Ubuntu 22.04+/24.04, Debian 12+).

build-macos.sh

@@ -29,6 +29,9 @@ LDFLAGS=""
 if [ -n "${SUBSCRIPTION_ENCRYPT_KEY:-}" ]; then
   LDFLAGS="-X resultproxy-wails/internal/proxy.subscriptionEncryptKey=${SUBSCRIPTION_ENCRYPT_KEY}"
 fi
+if [ -n "${MANIFEST_URL_OVERRIDE:-}" ]; then
+  LDFLAGS="${LDFLAGS} -X resultproxy-wails/internal/updater.ManifestURLOverride=${MANIFEST_URL_OVERRIDE}"
+fi
 
 echo "==> wails build (darwin/universal)"
 if [ -n "$LDFLAGS" ]; then