Files
CyberStrikeAI/cmd/server/update_cli.go
T
Sycun cb8bc6b824 feat: update this installation's own source in one action
An operator running a fork has no honest way to upgrade: upgrade.sh downloads the
Release tarball of one hard-coded third-party repository and rsyncs it over the
tree, so "upgrade" means "overwrite yourself with somebody else's code", and the
safe alternative is to pull by hand and remember the build command.

internal/update drives the remote the directory already tracks: fetch, fast-forward,
go build into .update-staging, atomic rename of the binary (the previous one kept as
cyberstrike-ai.prev), and a .update-state.json so a rollback has a target that is
not guessed at. Refusals are the point - local source edits and a diverged branch
stop with the file names and commit counts in the error rather than being reset to
match, and operator-owned content (roles/skills/tools/agents/data/config.yaml) is put
aside before the merge and restored over it, with what was kept listed in keptContent
instead of quietly dropped.

Consumers: GET/POST /api/system/update* behind update:read / update:apply (mutations
are process-global, so they need a global-scope session); a console page at
#system-update with an apply button that names why it is blocked, a job polled from
the server and a rollback control; the same three actions as -check-update / -update
/ -update-rollback on the binary; OpenAPI entries for all five endpoints. Permission
gating no longer re-enables a control a page disabled for a reason of its own
(data-state-disabled), which every state-disabled, permission-gated button in the
console was subject to. upgrade.sh becomes a thin shell over the same implementation
and only falls back to the tarball path for installs that are not git work trees.

Docs and the zh/EN/RU dictionaries are updated. The package runs 13 tests against
real temporary git repositories; the HTTP layer, RBAC and the console page each
carry their own contract tests.
2026-10-07 12:07:26 +08:00

107 lines
3.2 KiB
Go

package main
import (
"context"
"cyberstrike-ai/internal/update"
"fmt"
"os"
"path/filepath"
"time"
)
// The same one-click update the console page drives, for the two cases a page cannot
// serve: the process is not running at all, and somebody is ssh'd in with a keyboard.
// Keeping it in the binary rather than only in a shell script means one implementation of
// "fetch, fast-forward, rebuild, swap" instead of two that can disagree.
func updateCommandIfNeeded(configPath string, check, apply, rollback bool) (bool, int) {
if !check && !apply && !rollback {
return false, 0
}
root := filepath.Dir(configPath)
opts := update.Options{Root: root}
ctx, cancel := context.WithTimeout(context.Background(), 45*time.Minute)
defer cancel()
fmt.Printf("安装目录:%s\n", root)
switch {
case check:
snap, err := update.Check(ctx, opts)
if err != nil {
fmt.Fprintf(os.Stderr, "检查更新失败: %v\n", err)
return true, 1
}
printSnapshot(snap)
return true, 0
case apply:
res, err := update.Apply(ctx, opts, func(s update.Step) {
fmt.Printf("[%s] %s\n", s.Phase, s.Message)
})
if res != nil {
printResult(res)
}
if err != nil {
fmt.Fprintf(os.Stderr, "更新未完成: %v\n", err)
return true, 1
}
fmt.Println("源码与二进制已就位;重启服务后新代码生效。")
return true, 0
case rollback:
res, err := update.Rollback(ctx, opts)
if err != nil {
fmt.Fprintf(os.Stderr, "回滚未完成: %v\n", err)
return true, 1
}
printResult(res)
return true, 0
}
return true, 0
}
func printSnapshot(s *update.Snapshot) {
if !s.Installed {
fmt.Printf("这个目录不是 git 工作树(%s),无法自动更新\n", s.Root)
return
}
fmt.Printf("分支 %s / 远端 %s / 提交 %s (%s)\n", s.Branch, s.Remote, s.Commit, s.Subject)
if s.CheckError != "" {
fmt.Printf("检查失败:%s\n", s.CheckError)
return
}
fmt.Printf("远端最新 %s (%s),落后 %d 个提交,本地领先 %d 个提交\n", s.RemoteCommit, s.RemoteSubject, s.Behind, s.Ahead)
for _, c := range s.Incoming {
fmt.Printf(" ○ %s %s\n", c.Commit, c.Subject)
}
if s.Behind > len(s.Incoming) {
fmt.Printf(" …(共 %d 个,只列出 %d 个)\n", s.Behind, len(s.Incoming))
}
if len(s.BlockingChanges) > 0 {
fmt.Printf("本机改过 %d 个源码文件,更新会拒绝执行:\n", len(s.BlockingChanges))
for _, c := range s.BlockingChanges {
fmt.Printf(" ! %s (%s)\n", c.Path, c.Status)
}
}
if !s.CanBuild {
fmt.Println("本机没有 Go 工具链:更新只搬源码,不会重编译")
}
if s.HasRollback {
fmt.Printf("可回滚到 %s\n", s.RollbackTo)
}
}
func printResult(r *update.Result) {
if r.Commits == 0 && r.ToCommit == r.FromCommit {
fmt.Println("已经是最新,没有改动")
return
}
fmt.Printf("%s → %s(%d 个提交,涉及 %d 个文件,用时 %s)\n", r.FromCommit, r.ToCommit, r.Commits, r.FilesTouched, r.Duration)
if len(r.KeptContent) > 0 {
fmt.Printf("保留了 %d 个本机内容文件(roles/skills/tools 等,没有被上游覆盖):\n", len(r.KeptContent))
for _, p := range r.KeptContent {
fmt.Printf(" = %s\n", p)
}
}
if r.BinaryBuilt {
fmt.Printf("二进制已换新:%s(旧版本留在 %s 以便回滚)\n", r.BinaryPath, r.PrevBinary)
}
}