JjSrSSKJr SSKrSSKrSSKrSSKrSSKrSSKrSSK r SSK r SSK r SSK J r SSKJr SSKJr SSKJrJr SSKJr SS KJr SS KJr \"S 5r\"S S 55rSrSrSrSr Sr!\\4SSjjr"\RF"S5r$SSjr%SSjr&S Sjr'Sr(S!Sjr)S"Sjr*S#Sjr+S$S%Sjjr,S#Sjr-g)&a^Update check foundation. v1 only DETECTS and REPORTS whether a newer version is available on the configured channel. It does NOT download, swap, or restart anything. The production update pipeline is sketched below as no-op stubs with TODOs so the structure is ready: download -> verify checksum -> stage -> atomic swap -> health check -> rollback. ) annotationsN)Path) dataclass)Any) ApiClientApiError)Config)load_agent_token) get_loggerupdatecz\rSrSr%S\S'S\S'S\S'SrS\S 'SrS\S 'SrS\S 'SrS\S 'Sr S \S'Sr g) UpdateInfo!strcurrentlatestboolupdate_availableNz str | Noneurlsha256 signaturechannelz int | None size_bytes) __name__ __module__ __qualname____firstlineno____annotations__rrrrr__static_attributes__r0D:\Programs\laragon\www\wolf\agent\src\update.pyrr!sD L KCFJ Iz GZ!J !r!rlehm>?fKq"0aw pplkQPo3?% ?!yP[{ 0gs~Ncva -\R!nV5o_W;BtJzAwP9( zDukJVK{gI s x s^SAK9qiU1RD # \tO^skrSW @\47H*@AJj]eQRMz Xey+?))kRcxNu n}vF bXqu.?ilI`2}zkR9t>mt@a %Ax}]}iG[_/ oB|s>+8 Y3 f+R{fp xQw|wB w{KGodxXzmQ NFvX:hdN[a)MQRj>GG2q!RUDy9#-`t`h"u:]3)ZYdWiG\Q'1yy.ZSaz:{ gEr<H/oYE :Wu0!;Sj.VP'>S_H$xVS0Ys~?Ny2vlzP9WJ(pC@I]HLM9yH AG)Eq%U=;'.YubXnP:vL sK"pd2%$0N-4(;n0~S,s4 z g D_S  NN9e , aLJJsE* nnT*113 e 8;FT$$ sB$BA%B B"!B"z^(?P0|[1-9]\d*)\.(?P0|[1-9]\d*)\.(?P0|[1-9]\d*)(?:-(?P[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$c2[RU=(d SR55nU(d[SU<35e[ US5[ US5[ US5pCnUS(a[ USR S55OSnX#XE4$) zIParse a semver.org version string into (major, minor, patch, prerelease).zinvalid semantic version: majorminorpatch prerelease.N) _SEMVER_REmatchstrip ValueErrorr+tuplesplit)versionr8r@rArBrCs r" parse_semverrLhs'-R..01A 5g[ABBaj/3qz?C' O%E67 oq,,S124J  **r!cNUR5(a S[U54$SU4$)Nr)isdigitr+)idents r"_prerelease_identifier_keyrQrs' }}3u: u:r!c~[U5up#pE[U5upgpX&4X74XH44HupX:wdM X:aSs $Ss $ UcU cgUcgU cg[XY5H,up[U 5[U 5pX:wdM!X:aSs $Ss $ [U5[U 5:wa[U5[U 5:aS$S$g)aaReturn -1, 0, or 1 comparing semver strings a and b per semver.org precedence. Core versions compare numerically field-by-field; a version with a pre-release always has lower precedence than the same core version without one (e.g. 1.2.0-rc.1 < 1.2.0); pre-release identifiers compare left-to-right per semver.org rule 11 (e.g. beta.1 < beta.2 < rc.1). rNr)rLziprQr*)aba_majora_minora_patcha_preb_majorb_minorb_patchb_prexykxkys r"compare_semverrc{s(4A$Gg'3A$Gg#g%7'9KL 62 %A %M } } }E!+A.0J10MB 82 'a '" 5zSZZ#e*,r3!3 r!)rNc bURUR5nUR S5nU[ ;a[RSU[ 5 gUR S5nXPR:wa"[RSURU5 gUR SS5n[X`R5S :nUR S 5nU(dUR(aS nUR S 5n Sn U (aC[RR SS5RS5n U SURSU 3n [!URUUU UR S5UUUR S5S9n U(a-[R#SU R$U R&5 U $[R#SU R$5 U $![a n[R SU5 SnAgSnAff=f![a n[RS U5 SnAgSnAff=f)zCFetch the channel manifest and compare against the running version.zupdate check failed: %sNmanifest_versionzCrejecting manifest: unsupported manifest_version %r (supported: %s)rzNrejecting manifest: channel mismatch (agent is on '%s', manifest reports '%s')rKr?rzrejecting manifest: %srmock_signaturefileWOLFPANEL_RELEASE_BASEzhttps://downloads.wolfpanel.net/rr)rrrrrrrrzupdate available: %s -> %szagent is up to date (%s))fetch_manifest manifest_urlrlogwarningget_SUPPORTED_MANIFEST_VERSIONSerrorrelease_channelrc agent_versionrHapi_mockosenvironrstriprinforr) config api_clientmanifestexcremanifest_channelr availablesig manifest_file download_url release_baserws r"checkrs#-#<#@abiijmn &q)?)?(@-Q $$" ||H% << - D -t||T[[I K +T\\: Ke  -s3.  *C0s/G)H H!G<<H H.H))H.c[[S5(aURURS3- nUR 5(dUR 5(aUR 5 [R"X5 [R"X!5 gUR 5(dUR 5(a<UR 5(aUR 5 O[R"U5 [R"X5 g![a n[RSU5 SnANSnAff=f)Nsymlink_tempz$clean_old_versions..s!r!)keyz$Cleaned up old version directory: %sz-Failed to remove old version directory %s: %sz.Failed to clean up old version directories: %s)getattropt_dirrrreadlinkriterdiris_direndswithrrappendstatst_mtimesortr*rrrlrwr1rm) rx retention versions_dircurrent_symlinkcurrent_targetdirsp_r5r{s r"clean_old_versionsrs%KF$6: ~~ 2 ""$$  ..94  % % ' ',557<66V111 Q 1 123( n % t9y [yj)WMM!$HHCQG* ! !WKK OQRVVW K DcJJKsN1F0A(F0 B/F0,F<F0 F- F("F0(F--F00 G:GGcSSKn[RSU5 URR USS0S9nURR XBS9n[ US5nURS 5=n(a+URU5 URS 5=n(aM+SSS5 SSS5 g!,(df  N=f!,(df  g=f) zBDownload a file from url to dest_path with a timeout using urllib.rNz$Downloading file with timeout %ds...z User-Agentwolfpanel-agent)headers)timeoutwb ) urllib.requestrlrwrequestRequesturlopenopenreadwrite)r dest_pathrurllibreqresponsefchunks r"download_with_timeoutrsHH 3W= .. |=N.O PC     5 )T "a#==..%.$==..%.# 6 5 " " 6 5s% CAB2!C2 C <C Cc \'SnSnSn[U5S:aUSn[U[5(aUnOUn[U5S:aUSnU(aURS5OSnU(a [ U5OSnU(a6U(a/[ R SU5 URUSSS 0S .U5 U(d=U(dSS K J n U "U5n[ U5n[X5nU(d [S 5eUR(a~URUR:wadSURSURS3n [ RU 5 U(a U(aURUSSU 0S .U5 [U 5eUR (aU(aUR"(dSUlUR$(a"UR&(aUR"(dISn [ RU 5 U(a U(aURUSSU 0S .U5 [U 5eUR((dX[ R SUR*5 U(a0U(a)URUSSSUR*S3S.S .U5 ggUR,S- n U R/5(a[0R2"U 5 U R5SSS9 U S- n [ R SUR$U 5 UR (GaU S - nUR5SSS9 US!- R5SSS9 US!- S"- R7S#S$S%9 US&- R7UR8S$S%9 US'- R7S(S$S%9 US)- R5SSS9 US)- S*- R7S(S$S%9 [:R<"U S+5nUR?US!- S!S,9 UR?US&- S&S,9 UR?US'- S'S,9 UR?US)- S)S,9 SSS5 [=U S-5nURA5nSSS5 [BR&"5nUREW5 URG5Ul[U5Ul$URK5nS.nS/U-U-n[LROUS05n[QU[R[T5nURWS1S05RY5UlO%[[US2S35n[]UR$U U5 U R_5R`nURHb+UURH:wa[S5URHS6U35e[BR&"5n[=U S-5nURAS75=n(a+UREU5 URAS75=n(aM+SSS5 URG5nUUR&:wa[S8UR&S9U35e[ R S:5 [=U S-5nURA5nSSS5 UR (a[cWUR"[T[dS;9nO[cWUR"5nU(d [S<5e[ R S=5 URfS?- nURfS@- URhSA3- nSn UR/5(a[0R2"U5 URk5(aCURm5n U Ro5(dURfU - Rq5n O%UR/5(aURq5n [ R SBU U5 U (a,U R/5(a[0Rr"U U5 URfS@- UR8- n!U!R/5(a[0R2"U!5 U!R5SSS9 [ R SDU!5 [:R<"U SE5nURuU!SF9 SSS5 U!S&- n"U"Rw5(d [SG5eU"RyS$S%9R{5n#U#UR8:wa[SHUR8SIU#SJ35e[ R SKU#5 U R/5(a[0R2"U 5 U!SL- n$U$R7SM[|R~SN3S$S%9 U$RSO5 [ R SPU!5 [U5 URSR- n%SSn&[RRST5(aSn&O9[R"/SUQSSSV9n'U'RR{5SW:XaSn&U[U5[U5URhUR8[U 5URUU&SX. n([=U%SY5n[R"U(U5 SSS5 [ R SZU(5 SSKLn)U)RGb [ R S\5 SU)RlN[R"5n*[[US]S^5S_- n+U+S_:aS3n+[R"5U*- U+:aU)RR U)RRV,s/sH n,U,U:wdM U,PM n-n,SSS5 W-(dOJ[ R S`U-5 [R"Sa5 [R"5U*- U+:aM[ R Sb5 [U!U5 Sdn.[|R~SeU.[U%5[UR5/n/SSn0U&(a[0R"Sf5(aSgU=(d ShSi[M[R"553n1[ R SjU15 [R"SfSkU1SlSmSn/U/Q[R[RSo9 Sn0U0(dI[ R Sq5 [R"U/S[R[RSr9 St[|R;a;[ R Su5 U%Rw5(aU%R5 gU&(aD[ R Sv5 [R"/SwQ5 [|R"S5 U&(dc[ R Sy5 [R"[|R~[US!- S"- 5Sz/5 [|R"S5 gg![a!n [ RS U 5 Sn A G NdSn A ff=f![a G Nf=f![a G Nf=f![a n [ RSU 5 Sn A gSn A ff=f!,(df  G N\=f!,(df  G NI=f![ayn U R/5(a[0R2"U 5 U(a4U(a-URUSSS4U 30S .U5 O![a Of=f[S4U 35eSn A ff=f!,(df  G NF=f!,(df  GN=f![ayn U R/5(a[0R2"U 5 U(a4U(a-URUSSS>U 30S .U5 O![a Of=f[S>U 35eSn A ff=f![ayn U R/5(a[0R2"U 5 U(a4U(a-URUSSSCU 30S .U5 O![a Of=f[SCU 35eSn A ff=f!,(df  GN=f![an U R/5(a[0R2"U 5 U!R/5(a[0R2"U!5 UR/5(a[0R2"U5 U(a4U(a-URUSSSQU 30S .U5 O![a Of=f[SQU 35eSn A ff=f![a GNGf=f!,(df  GN=f![an U!R/5(a[0R2"U!5 UR/5(a[0R2"U5 U(a4U(a-URUSSS[U 30S .U5 O![a Of=f[S[U 35eSn A ff=fs sn,f!,(df  GN=f![an U!R/5(a[0R2"U!5 UR/5(a[0R2"U5 U%Rw5(aU%R5 U(a4U(a-URUSSScU 30S .U5 O![a Of=f[ScU 35eSn A ff=f![a!n [ RSpU 5 Sn A GNSn A ff=f![a!n [ RSsU 5 Sn A GN_Sn A ff=f![a#n [ RSxU 5 SSn&Sn A GNSn A ff=f![an [ RS{U 5 U eSn A ff=f)|z!Perform self-update of the agent.NrNrjob_idz3Reporting status 'running' to backend for job_id=%srunningmessagezUpdate in progress...)statusresultz#Failed to report running status: %s)get_api_clientzManifest check returned no infoz'channel mismatch: agent is on channel 'z' but manifest is for channel 'z'; refusing to updatefailedrprfz5Manifest missing download_url, checksum, or signaturez!Agent is already up to date (v%s) succeededTzAgent is up to date (v))successrz#Failed to report success status: %szwolfpanel-agent-update)parentsexist_okz agent.tar.gzz(Downloading update archive from %s to %smock_agent_srcsrczmain.pyz import os, sys flag_file = os.environ.get("WOLFPANEL_UPDATE_FLAG_FILE") if flag_file: with open(flag_file, "w") as f: f.write("OK") zutf-8)encodingVERSIONz README.mdmocksystemdzwolfpanel-agent.servicezw:gz)arcnamerbr&r'r%r$download_timeoutzDownload failed: zSize mismatch: expected z bytes, got rzChecksum mismatch: expected z, got zChecksum verified successfully)r4r5zDSignature verification failed: release package signature is invalid!z'Release signature verified successfullyzVerification failed: rrrz(Backing up current version from %s to %szFailed to create backup: zExtracting update to %szr:gz)pathz*staged package is missing its VERSION filez(package VERSION mismatch: manifest says z but extracted package is z; refusing to activate itz+staged package VERSION matches manifest: %srz#!/usr/bin/env bash exec z$ "$(dirname "$0")/src/main.py" "$@" izStaged new version files at %szFailed to stage new files: zupdate_state.jsonF INVOCATION_ID) systemctlz is-activer)capture_outputtextactive) r backup_dirrrollback_versionupdating_to_versiontemp_dirapi_urltokenrwzWrote update_state.json: %szFailed to write update state: zCSelf-update initiated: pausing new command polling and execution...update_timeout< z0Waiting for other running commands to finish: %sg?z1Swapping current directory path to new version...zFailed to swap symlink: a import os, sys, time, json, shutil, urllib.request from pathlib import Path state_file_path = sys.argv[1] timeout = int(sys.argv[2]) if len(sys.argv) > 2 else 60 time.sleep(timeout) if not os.path.exists(state_file_path): sys.exit(0) try: with open(state_file_path, "r") as f: state = json.load(f) except Exception: sys.exit(1) job_id = state.get("job_id") backup_dir = Path(state.get("backup_dir")) current_symlink = Path(state.get("current_symlink")) temp_dir = Path(state.get("temp_dir")) api_url = state.get("api_url") token = state.get("token") use_systemd = state.get("systemd") print("Timeout/failure detected. Restoring backup...", flush=True) try: if backup_dir.exists(): if current_symlink.is_symlink(): current_symlink.unlink() elif current_symlink.exists(): if current_symlink.is_dir(): shutil.rmtree(current_symlink) else: current_symlink.unlink() try: os.symlink(backup_dir, current_symlink) except Exception: shutil.copytree(backup_dir, current_symlink) except Exception as e: print(f"Failed to restore backup: {e}", flush=True) try: if temp_dir.exists(): shutil.rmtree(temp_dir) except Exception: pass try: os.unlink(state_file_path) except Exception: pass if api_url and job_id: try: url = f"{api_url}/api/v1/agent/commands/{job_id}/result" headers = {"Content-Type": "application/json", "User-Agent": "wolfpanel-agent"} if token: headers["X-Agent-Token"] = token payload = {"status": "failed", "result": {"error": "new version failed to connect"}} req = urllib.request.Request(url, data=json.dumps(payload).encode("utf-8"), headers=headers, method="POST") with urllib.request.urlopen(req, timeout=15) as res: pass except Exception as e: print(f"Failed to report failure to backend: {e}", flush=True) if use_systemd: os.system("systemctl restart wolfpanel-agent") else: os.spawnv(os.P_NOWAIT, sys.executable, [sys.executable, str(current_symlink / "src" / "main.py"), "run"]) z-cz systemd-runzwolfpanel-agent-rollback-r -z;Spawning rollback watcher as independent systemd unit %s...z--unitz --collectz--quietz--)stdoutstderrz+Failed to spawn watcher via systemd-run: %sz-Spawning detached rollback watcher process...)start_new_sessionrrz$Failed to spawn detached watcher: %spytestz7Running under pytest; skipping reload and process exit.zERunning under systemd. Executing systemctl restart wolfpanel-agent...)rrestartrzFFailed to run systemctl restart: %s. Falling back to standalone spawn.z3Running standalone. Spawning new version process...runz*Failed to spawn new standalone process: %s)[r* isinstancerrnr rlrwpost_command_resultr1rmryrrrrqrprsrrrrr cache_dirrrrmkdir write_textrtarfileraddrr/r hexdigestrr0r+r,r-TEST_PRIVATE_KEY_DTEST_PUBLIC_KEY_Nr.hexrrrst_sizer=TEST_PUBLIC_KEY_Errrrr is_absoluteresolver extractallis_file read_textrGsys executablechmodrvar_dirrtru subprocessrrrrjsondumpcommand_runner_worker_managerupdatingtimelockactive_commandssleeprrrwhichPopenDEVNULLmodulesexit)2rxargskwargsrwrypayloadfirstrrr{rmsgrtemp_tarmock_srctarr tar_bytesrr:r;paddedr8sig_intr actual_sizeractual_checksumtar_datasig_okrrrnew_version_dirpackage_version_filepackage_version wrapper_path state_file use_systemdres update_stater  start_waitmax_waitcid other_active watcher_code watcher_argvwatcher_spawned unit_names2 r" self_updater7s DJG 4yA~Q eZ ( (DJ 4yA~q'&-W[[ "4F(2 V $Ef D HHJF S  * *$ >  || (>(>>5f6L6L5MN,,0LL>9N P  # & ..v(W^`cVd7eglmn 4) 884;;dnnE # & ..v(W^`cVd7eglmn   4dllC & H..*$UklplxlxkyyzS{6|} "::H@3 ??   MM( #td3n, ;TXXxP ???"22H NN4$N 7   $ $TD $ A  ) 5 57  6  ! - -dkkG - L  # / / / I  ! ( ( ( E  !$= = I I&[b I ch/35(%89,i@;. D9,i@ 0 h%FFH &^^%F MM) $ **,DK!)nDO !--/KiK:[H;VFvu-A!/1BCG$--c59==?DN&v/A2F  !$((H6F G '7mmo-- ?? &;$//+I6t6G|T_S`ab b! (D !Q66$<'%' e$66$<'%'"!**, dkk ):4;;-voM^_` ` 12 (D !QvvxH" ??%hBSWhiF%h?Fbc c :; nny0O*,&2F2F1Gw/OOJN;      MM* %  % % ' ',557N!--//"(..>"A!J!J!L  # # % %,446N ;^ZX n3355 OONJ 7 nnz1DKK?O5=  ! ! # # MM/ *dT: *O< \\(F +s NNN 0, /:#++--HI I.88'8JPPR dkk ):4;;-H((7'88QS  >P ??   MM( #&):: % nn!   5! 1?C6"("55JK zz~~o&&  ..!N_cjnoCzz!X-" *o/"00#{{M>> L@ *c "a IIlA &# . ="%%1 VW26&&/YY[ 6#3R82= b=HiikJ&1//44/=/M/M/]/]o/]adhnan/] o5 HHG V JJsO iikJ&1HH @A:A(GLPNND,JVMbMbIcdLOv||M2200B(/C1SEUDVW  L HHRT] ^   )[)TaT`a!))!))  #O  E HHD E   "&!))!))  3;; JK          XY   H I HHQK  FG    cnnc/E2II2U.VX]^ _ HHQK e D KK=s C C D2     H A3GG HB0/ &%(  3 ??   MM( # & ..'G?PQTPU=V3WX   +C5122 3*" !" !  7 ??   MM( # & ..'G?TUXTY=Z3[\   /u566 7B  ; ??   MM( # & ..'G?XY\X]=^3_`   3C59:: ;,, +> = ??   MM( #  ! ! # # MM/ *      MM* % & ..'G?Z[^Z_=`3ab   5cU;<??@8 p54 :  ! ! # # MM/ *      MM* %          & ..'G?WX[W\=]3^_   23%899!:^ L KKEs K K L E KK> D D E II^`c dK   IIBC HI sv.w2$x x13'y,D!z A y/z.z?B=z=$z#A3|=A|A$|=>|+A5|=5C2A(AA,AA x? y, y''y,/ y>9z z z |9|{32|3 |=|?||| |(#|=+ |:5|== 9~;~~; ~*'~;)~**~;; AA 9AA@A@#@"AA@# A@0@-AA@/A@0@0AAAAAA AAAAAA AD4A%BAD/C5ADDAD/D ADDAD/DADDAD/D/AD4D7 AEEAEE AEEAEE AHE$A$AHG AG%G$AHG% AG2G/AHG1AG2G2AHHAHH AHH AHH" AK5H,B AK0J6AKKAK0K AKKAK0KAKKAK0K0AK5K8 AL#LALLAL#L& AML0AM M AMM ANMAM<M<ANN AN+NAN&N&AN+) r2r(r3rr4r+r5r+returnr)rKrr8z,tuple[int, int, int, tuple[str, ...] | None])rPrr8ztuple[int, Any])rUrrVrr8r+)rxr ryrr8zUpdateInfo | None)rrrr)rxr r8None)r)rrrrrr+r8r9).__doc__ __future__rrtrerrr rrr/r pathlibr dataclassesrtypingrryrrrxr identityr loggerr rlr PUBLIC_KEY_N PUBLIC_KEY_Errrr=compilerErLrQrcrorrrrr7rr!r"rEs# !*% "" ",y  ~ ~ @LVb4ZZ1 + > $6r(('KTur!