#include #include #include #include #include #include #include #include "MainWindow.h" #include "../Common/ConfigHelper.h" #include "../Common/PolicyHelper.h" #include "../Common/LocalStateHelper.h" #include "../Common/TicketHelper.h" #include "../Common/IntegrityHelper.h" #include "../Common/DeviceIdentityHelper.h" int main(int argc, char* argv[]) { QApplication a(argc, argv); QTranslator translator; if (translator.load(":/i18n/update-client_zh_CN.qm")) a.installTranslator(&translator); const int elevatedWriteExitCode = ConfigHelper::runElevatedWriteCommandIfRequested(); if (elevatedWriteExitCode >= 0) return elevatedWriteExitCode; qDebug() << Qt::endl << "entered main app" << Qt::endl; ConfigHelper& config = ConfigHelper::instance(); QString launcherExecutable = config.getValue("Runtime", "launcher_executable").trimmed(); launcherExecutable = ConfigHelper::executableNameForCurrentPlatform(launcherExecutable, "Launcher"); QString ticketFilePath; QString healthFilePath; for (int i = 1; i < argc; ++i) { const QString arg(argv[i]); if (arg.startsWith("--ticket-file=")) ticketFilePath = arg.mid(QString("--ticket-file=").size()); else if (arg.startsWith("--health-file=")) healthFilePath = arg.mid(QString("--health-file=").size()); } QString ticketError; if (ticketFilePath.isEmpty() || !TicketHelper::consumeAndVerify(ticketFilePath, config.getValue("App", "app_id"), config.getValue("Update", "device_id"), config.getValue("App", "current_version"), config.getValue("App", "launch_token"), &ticketError)) { QMessageBox::critical(nullptr, "Startup Restriction", QString("Invalid or missing one-time launch ticket: %1\nPlease use %2.") .arg(ticketError, launcherExecutable)); return -1; } QString appDir = QApplication::applicationDirPath(); const QString installRoot = config.installRoot(); DeviceIdentityHelper identity(appDir); if (!identity.verifyLocal(config.getValue("App", "app_id"), config.getValue("App", "channel"))) { QMessageBox::critical(nullptr, "License Error", QString("Local license invalid: %1").arg(identity.errorString())); return -1; } PolicyHelper policy(appDir); if (!policy.loadPolicy("config/version_policy.dat") || !policy.isValid()) { QMessageBox::critical(nullptr, "Policy Error", QString("Local policy invalid: %1").arg(policy.errorString())); return -1; } if (policy.isExpired()) { QMessageBox::critical(nullptr, "Policy Error", "Policy expired, cannot start the application."); return -1; } LocalStateHelper state(appDir); if (!state.loadState()) { QMessageBox::critical(nullptr, "State Error", QString("Cannot load local state: %1").arg(state.errorString())); return -1; } if (state.isPolicySeqRolledBack(policy.policySeq())) { QMessageBox::critical(nullptr, "Policy Error", "Detected policy sequence rollback, startup blocked."); return -1; } if (state.isSystemTimeRewound()) { QMessageBox::critical(nullptr, "Policy Error", "System time appears to be rewound, startup blocked."); return -1; } IntegrityHelper integrity(installRoot); if (!integrity.verifyInstalledVersion( config.getValue("App", "app_id"), config.getValue("App", "channel"), config.getValue("App", "current_version"))) { QMessageBox::critical(nullptr, "Integrity Check Failed", QString("Application files failed signed Manifest verification:\n%1") .arg(integrity.errorString())); return -1; } MainWindow w; w.show(); state.updateAfterSuccessfulRun(ConfigHelper::instance().getValue("App", "current_version"), policy.policySeq()); if (!state.saveState()) { QMessageBox::critical(nullptr, "State Error", QString("Cannot save local state: %1").arg(state.errorString())); return -1; } if (!healthFilePath.isEmpty()) { QDir().mkpath(QFileInfo(healthFilePath).path()); QSaveFile healthFile(healthFilePath); const QByteArray healthy("ok\n"); if (!healthFile.open(QIODevice::WriteOnly) || healthFile.write(healthy) != healthy.size() || !healthFile.commit()) { QMessageBox::critical(nullptr, "Startup Error", "Cannot write update health confirmation file."); return -1; } } qDebug() << "Main program MainApp is running normally"; return a.exec(); }