feat(desktop): add time-based staged rollout for stable updates

Linear ramp from 0% at publish to 100% at releaseDate + rolloutHours (default 24h, configurable per release). Beta channel and rolloutHours=0 short-circuit to admit everyone. Per-machine bucket derives from a persistent UUID at <userData>/.updaterId and feeds electron-updater's isUserWithinRollout hook. Adds desktop-rollout.yml workflow for in-place rolloutHours edits on already-published releases (hotfix to 0 or extend the ramp), serialized against finalize-rollout in desktop-release.yml via a shared concurrency group keyed on the tag. Replaces the hand-rolled mac manifest merge with a js-yaml round-trip that preserves unknown fields.
2026-04-28 16:48:18 +07:00
parent 932a97e447
commit 25eb26db0f
12 changed files with 760 additions and 204 deletions
@@ -0,0 +1,61 @@
+import assert from "node:assert/strict";
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { test } from "vitest";
+import { stampRollout } from "./stamp-rollout.mjs";
+
+test("rewrites rollout fields and preserves unrelated manifest data", () => {
+  const dir = mkdtempSync(path.join(tmpdir(), "paseo-stamp-rollout-"));
+  try {
+    const firstPath = path.join(dir, "latest.yml");
+    const secondPath = path.join(dir, "latest-mac.yml");
+    writeFileSync(
+      firstPath,
+      "version: 1.2.3\nfiles:\n  - url: app.zip\n    sha512: abc\nreleaseDate: '2026-04-28T00:00:00.000Z'\nrolloutHours: 24\nstagingPercentage: 25\n",
+    );
+    writeFileSync(
+      secondPath,
+      "version: 1.2.3\nfiles:\n  - url: app-arm64.zip\n    sha512: def\nreleaseDate: '2026-04-28T00:00:00.000Z'\npath: app-arm64.zip\n",
+    );
+    stampRollout({ releaseDate: "2026-05-01T12:00:00.000Z", rolloutHours: 6 }, [
+      firstPath,
+      secondPath,
+    ]);
+
+    const first = readFileSync(firstPath, "utf8");
+    const second = readFileSync(secondPath, "utf8");
+
+    assert.match(first, /releaseDate: '2026-05-01T12:00:00.000Z'/);
+    assert.match(first, /rolloutHours: 6/);
+    assert.match(first, /stagingPercentage: 25/);
+    assert.match(second, /releaseDate: '2026-05-01T12:00:00.000Z'/);
+    assert.match(second, /rolloutHours: 6/);
+    assert.match(second, /path: app-arm64\.zip/);
+  } finally {
+    rmSync(dir, { force: true, recursive: true });
+  }
+});
+
+test("only updates rolloutHours when releaseDate is omitted", () => {
+  const dir = mkdtempSync(path.join(tmpdir(), "paseo-stamp-rollout-"));
+  try {
+    const filePath = path.join(dir, "latest.yml");
+    writeFileSync(
+      filePath,
+      "version: 1.2.3\nfiles:\n  - url: app.zip\n    sha512: abc\nreleaseDate: '2026-04-28T00:00:00.000Z'\nrolloutHours: 24\nstagingPercentage: 25\n",
+    );
+    stampRollout({ rolloutHours: 0 }, [filePath]);
+
+    const out = readFileSync(filePath, "utf8");
+    assert.match(out, /releaseDate: '2026-04-28T00:00:00.000Z'/);
+    assert.match(out, /rolloutHours: 0/);
+    assert.match(out, /stagingPercentage: 25/);
+  } finally {
+    rmSync(dir, { force: true, recursive: true });
+  }
+});
+
+test("throws when neither releaseDate nor rolloutHours is provided", () => {
+  assert.throws(() => stampRollout({}, ["/tmp/does-not-matter.yml"]));
+});