update-client/MainApp/main.cpp

#include <QApplication>
#include <QDebug>
#include <QMessageBox>
#include <QDir>
#include <QFileInfo>
#include <QSaveFile>
#include <QTranslator>
#include "MainWindow.h"
#include "../Common/ConfigHelper.h"
#include "../Common/PolicyHelper.h"
#include "../Common/LocalStateHelper.h"
#include "../Common/TicketHelper.h"
#include "../Common/IntegrityHelper.h"
#include "../Common/DeviceIdentityHelper.h"

int main(int argc, char* argv[])
{
    QApplication a(argc, argv);
    QTranslator translator;
    if (translator.load(":/i18n/update-client_zh_CN.qm"))
        a.installTranslator(&translator);

    const int elevatedWriteExitCode = ConfigHelper::runElevatedWriteCommandIfRequested();
    if (elevatedWriteExitCode >= 0)
        return elevatedWriteExitCode;

    qDebug() << Qt::endl << "entered main app" << Qt::endl;

    ConfigHelper& config = ConfigHelper::instance();
    QString launcherExecutable = config.getValue("Runtime", "launcher_executable").trimmed();
    if (launcherExecutable.isEmpty()) launcherExecutable = "Launcher.exe";
    QString ticketFilePath;
    QString healthFilePath;
    for (int i = 1; i < argc; ++i)
    {
        const QString arg(argv[i]);
        if (arg.startsWith("--ticket-file="))
            ticketFilePath = arg.mid(QString("--ticket-file=").size());
        else if (arg.startsWith("--health-file="))
            healthFilePath = arg.mid(QString("--health-file=").size());
    }

    QString ticketError;
    if (ticketFilePath.isEmpty()
        || !TicketHelper::consumeAndVerify(ticketFilePath,
            config.getValue("App", "app_id"), config.getValue("Update", "device_id"),
            config.getValue("App", "current_version"), config.getValue("App", "launch_token"),
            &ticketError))
    {
        QMessageBox::critical(nullptr, "Startup Restriction",
            QString("Invalid or missing one-time launch ticket: %1\nPlease use %2.")
                .arg(ticketError, launcherExecutable));
        return -1;
    }

    QString appDir = QApplication::applicationDirPath();
    const QString installRoot = config.installRoot();
    DeviceIdentityHelper identity(appDir);
    if (!identity.verifyLocal(config.getValue("App", "app_id"), config.getValue("App", "channel")))
    {
        QMessageBox::critical(nullptr, "License Error", QString("Local license invalid: %1").arg(identity.errorString()));
        return -1;
    }
    PolicyHelper policy(appDir);
    if (!policy.loadPolicy("config/version_policy.dat") || !policy.isValid())
    {
        QMessageBox::critical(nullptr, "Policy Error", QString("Local policy invalid: %1").arg(policy.errorString()));
        return -1;
    }

    if (policy.isExpired())
    {
        QMessageBox::critical(nullptr, "Policy Error", "Policy expired, cannot start the application.");
        return -1;
    }

    LocalStateHelper state(appDir);
    if (!state.loadState())
    {
        QMessageBox::critical(nullptr, "State Error", QString("Cannot load local state: %1").arg(state.errorString()));
        return -1;
    }

    if (state.isPolicySeqRolledBack(policy.policySeq()))
    {
        QMessageBox::critical(nullptr, "Policy Error", "Detected policy sequence rollback, startup blocked.");
        return -1;
    }

    if (state.isSystemTimeRewound())
    {
        QMessageBox::critical(nullptr, "Policy Error", "System time appears to be rewound, startup blocked.");
        return -1;
    }

    IntegrityHelper integrity(installRoot);
    if (!integrity.verifyInstalledVersion(
            config.getValue("App", "app_id"), config.getValue("App", "channel"),
            config.getValue("App", "current_version")))
    {
        QMessageBox::critical(nullptr, "Integrity Check Failed",
            QString("Application files failed signed Manifest verification:\n%1")
                .arg(integrity.errorString()));
        return -1;
    }

    MainWindow w;
    w.show();

    state.updateAfterSuccessfulRun(ConfigHelper::instance().getValue("App", "current_version"), policy.policySeq());
    if (!state.saveState())
    {
        QMessageBox::critical(nullptr, "State Error", QString("Cannot save local state: %1").arg(state.errorString()));
        return -1;
    }

    if (!healthFilePath.isEmpty())
    {
        QDir().mkpath(QFileInfo(healthFilePath).path());
        QSaveFile healthFile(healthFilePath);
        const QByteArray healthy("ok\n");
        if (!healthFile.open(QIODevice::WriteOnly)
            || healthFile.write(healthy) != healthy.size()
            || !healthFile.commit())
        {
            QMessageBox::critical(nullptr, "Startup Error", "Cannot write update health confirmation file.");
            return -1;
        }
    }

    qDebug() << "Main program MainApp is running normally";
    return a.exec();
}