\n'
+ changes={env:replacement.encode(),root/'storage/theme/Stellar/resource-downloads.html':page.encode()}
+ public=root/'public/theme/Stellar'
+ assert public.is_dir(),'Public Stellar directory missing'
+ public_env=public/'env.js';ps=public_env.read_text();pm=re.search(pat,ps,re.S);assert pm
+ pb=pm[2]
+ for key,value in settings.items():
+ pb,n=re.subn(r'([\"\']?'+key+r'[\"\']?\s*:\s*)([\"\'])([^\"\']*)\2',lambda m:m[1]+m[2]+value+m[2],pb)
+ assert n==1,'Public theme field missing: '+key
+ changes[public_env]=(ps[:pm.start(2)]+pb+ps[pm.end(2):]).encode()
+ changes[public/'resource-downloads.html']=page.encode()
+ edits={
+ 'windows/clash-verge': [('https://github.com/clash-verge-rev/clash-verge-rev/releases',PAGE+'#windows'),('官方发布页','客户端下载页')],
+ 'macos/clash-verge': [('https://github.com/clash-verge-rev/clash-verge-rev/releases',PAGE+'#macos'),('官方发布页','客户端下载页')],
+ 'android/flclash': [('https://github.com/chen08209/FlClash/releases',PAGE+'#android'),('官方发布页','客户端下载页')],
+ 'linux/clash-verge': [('打开 Clash Verge Rev 官方发布页。在页面的 Assets 中选择安装包。','打开客户端下载页，按发行版和架构选择安装包。'),('，armv7l 选 armhf 或 armhfp','；当前 Clash Verge Rev 安装包仅提供 x64 与 ARM64'),('2.5.7、x86_64','x64'),('Clash.Verge_2.5.7_amd64.deb','clash-verge-rev-linux-x64.deb'),('Clash.Verge-2.5.7-1.x86_64.rpm','clash-verge-rev-linux-x64.rpm')]
+ }
+ for suffix,pairs in edits.items():
+ p=root/'resources/views/tutorials'/f'{suffix}.blade.php';old=p.read_text();new=old
+ for a,b in pairs:
+ assert a in new or b in new,'Tutorial content changed; review required: '+suffix
+ new=new.replace(a,b)
+ changes[p]=new.encode()
+ return {p:b for p,b in changes.items() if not p.exists() or p.read_bytes()!=b}
+def verify_resources():
+ base=Path('/www/wwwroot/resource-software/app/storage/app/private/software/current');pairs=set(FILES.values())|{(s,n) for _,_,s,n in CHOICES}
+ for sw,name in sorted(pairs):
+ cat=json.loads((base/sw/'catalog.json').read_text());asset=next(a for a in cat['assets'] if a['filename']==name)
+ p=base/sw/name;assert p.is_file() and p.stat().st_size==asset['size']
+ h=hashlib.sha256()
+ with p.open('rb') as f:
+ for chunk in iter(lambda:f.read(1024*1024),b''):h.update(chunk)
+ assert h.hexdigest()==asset['sha256']
+ req=urllib.request.Request(url(sw,name),headers={'Range':'bytes=0-31','User-Agent':'DPL-Resource-Acceptance/1.0'})
+ with urllib.request.urlopen(req,timeout=30) as response:
+ assert response.status==206 and response.geturl()==url(sw,name)
+ with p.open('rb') as source:assert response.read()==source.read(32)
+ print('verified',sw,name,cat['version'])
+def apply(root,backup):
+ changes=prepare(root)
+ if not changes:print('No changes required');return
+ snapshots={p:p.read_bytes() if p.exists() else None for p in changes}
+ if root==Path('/www/wwwroot/dp-link.net'):verify_resources()
+ for p,b in snapshots.items():
+ assert (p.read_bytes() if p.exists() else None)==b,'Concurrent file change: '+str(p)
+ backup.mkdir(parents=True,exist_ok=False);os.chmod(backup,0o700);manifest=[]
+ for i,(p,b) in enumerate(changes.items()):
+ old=snapshots[p];entry={'path':str(p),'before':digest(old) if old is not None else None,'after':digest(b),'backup':str(i)+'.bak' if old is not None else None}
+ if old is not None:(backup/entry['backup']).write_bytes(old)
+ manifest.append(entry)
+ (backup/'manifest.json').write_text(json.dumps(manifest,indent=2))
+ try:
+ for p,b in changes.items():
+ assert (p.read_bytes() if p.exists() else None)==snapshots[p],'Concurrent file change'
+ stat=p.stat() if p.exists() else p.parent.stat();fd,tmp=tempfile.mkstemp(dir=p.parent,prefix='.resource-download-')
+ with os.fdopen(fd,'wb') as f:f.write(b)
+ os.chmod(tmp,stat.st_mode&0o777 if p.exists() else 0o644)
+ if os.geteuid()==0:os.chown(tmp,stat.st_uid,stat.st_gid)
+ os.replace(tmp,p)
+ assert not prepare(root)
+ except Exception:
+ rollback(backup);raise
+ print('Applied',len(changes),'files; backup',backup)
+def rollback(backup):
+ rows=json.loads((backup/'manifest.json').read_text())
+ for row in rows:
+ p=Path(row['path']);assert p.exists() and digest(p.read_bytes())==row['after'],'File changed since deployment; manual merge required'
+ for row in rows:
+ p=Path(row['path'])
+ if row['backup']:p.write_bytes((backup/row['backup']).read_bytes())
+ else:p.unlink()
+ print('Rollback completed')
+if __name__=='__main__':
+ parser=argparse.ArgumentParser();parser.add_argument('mode',choices=['plan','apply','rollback']);parser.add_argument('--root',default='/www/wwwroot/dp-link.net');parser.add_argument('--backup');args=parser.parse_args();root=Path(args.root).resolve()
+ assert root in [Path('/www/wwwroot/dp-link.net'),Path('/Users/hellcat/Documents/GemCodes/xb')],'DPL roots only'
+ if args.mode=='rollback':rollback(Path(args.backup))
+ elif args.mode=='plan':print('\n'.join(str(p) for p in prepare(root)))
+ else:apply(root,Path(args.backup) if args.backup else Path('/root/codex-backups/dpl/resource-downloads-'+datetime.datetime.now(datetime.timezone.utc).strftime('%Y%m%dT%H%M%SZ')))