Продакшн рефактор без легаси

orchestrator/src/commands/install.ts

@@ -1,4 +1,3 @@
-import { randomBytes } from "node:crypto";
 import type { InstallContext, InstallOptions } from "../types/context";
 import { exists, readText, writeText } from "../lib/fs";
 import { runVisible } from "../lib/process";
@@ -16,10 +15,6 @@ import { applyFirewall } from "../steps/firewall";
 import { writePostInstallEnv } from "../steps/env";
 import { smoke } from "../steps/smoke";
 
-function secret(): string {
-  return randomBytes(24).toString("base64url");
-}
-
 export async function install(options: InstallOptions): Promise<void> {
   const hasSourceConfig = options.sourceConfigPath ? await exists(options.sourceConfigPath) : false;
   if (options.sourceConfigPath && !hasSourceConfig) {
@@ -30,15 +25,22 @@ export async function install(options: InstallOptions): Promise<void> {
   const config = parseRuntimeEnv(sourceConfigRaw);
 
   const context: InstallContext = {
+    mode: "install",
     options,
     config,
     packageVersion: await readPackageValue(options.packageDir, "package.version", "unknown"),
     packageBuildId: await readPackageValue(options.packageDir, "package.build_id", "unknown"),
     installDate: new Date().toISOString(),
-    hysteriaAuthPassword: secret(),
-    hysteriaVersion: "unknown"
+    hysteriaVersion: "unknown",
+    hysteriaTargetVersion: await readPackageValue(options.packageDir, "hysteria.version", ""),
+    hysteriaArtifactUrl: await readPackageValue(options.packageDir, "hysteria.url", ""),
+    hysteriaArtifactSha256: await readPackageValue(options.packageDir, "hysteria.sha256", "")
   };
 
+  if (!context.hysteriaTargetVersion || !context.hysteriaArtifactUrl || !context.hysteriaArtifactSha256) {
+    throw new Error("missing Hysteria lock metadata in package: hysteria.version/hysteria.url/hysteria.sha256");
+  }
+
   step("preflight");
   await preflight(context);
   step("system dependencies");
@@ -48,6 +50,8 @@ export async function install(options: InstallOptions): Promise<void> {
   step("write runtime env");
   await runVisible`mkdir -p /etc/hy2xs`;
   await writeText(options.runtimeConfigPath, renderRuntimeEnv(config), 0o600);
+  await runVisible`chown root:root ${options.runtimeConfigPath}`;
+  await runVisible`chmod 0600 ${options.runtimeConfigPath}`;
   step("bundled UI");
   await deployUi(context);
   step("Hysteria2 upstream install");