fix: use original-fs and temp dir for lightweight update on macOS

- Download update files to temp directory first
- Use original-fs to bypass Electron ASAR interception when copying
- Fallback to cp command for macOS permission issues
- Clean up temp files after update

Author: kylefu8

electron/main.cjs

@@ -1,4 +1,5 @@
 const fs = require('node:fs')
+const originalFs = require('original-fs') // bypass Electron's ASAR interception
 const os = require('node:os')
 const path = require('node:path')
 const https = require('node:https')
@@ -713,6 +714,12 @@ async function applyLightweightUpdate() {
       throw new Error('No downloadable assets found in release')
     }
 
+    // Download all files to a temp directory first
+    const tempDir = path.join(app.getPath('temp'), 'copilot-proxy-update')
+    if (!fs.existsSync(tempDir)) fs.mkdirSync(tempDir, { recursive: true })
+
+    const downloadedFiles = []
+
     for (const { asset, key } of filesToUpdate) {
       const progressBase = (filesDone / filesToUpdate.length) * 100
       const progressRange = 100 / filesToUpdate.length
@@ -730,11 +737,31 @@ async function applyLightweightUpdate() {
         }
       }
 
-      const dest = path.join(resourcesPath, key)
-      fs.writeFileSync(dest, data)
+      const tempFile = path.join(tempDir, key)
+      fs.writeFileSync(tempFile, data)
+      downloadedFiles.push({ tempFile, destFile: path.join(resourcesPath, key), key })
       filesDone++
     }
 
+    // Copy files from temp to resources using original-fs (bypasses ASAR interception)
+    for (const { tempFile, destFile, key } of downloadedFiles) {
+      try {
+        originalFs.copyFileSync(tempFile, destFile)
+      } catch (copyErr) {
+        // On macOS, /Applications may need elevated permissions
+        if (process.platform === 'darwin' && (copyErr.code === 'EACCES' || copyErr.code === 'EPERM')) {
+          // Use cp command with shell as fallback
+          const { execSync } = require('node:child_process')
+          execSync(`cp "${tempFile}" "${destFile}"`)
+        } else {
+          throw copyErr
+        }
+      }
+    }
+
+    // Clean up temp files
+    try { fs.rmSync(tempDir, { recursive: true, force: true }) } catch { /* ignore */ }
+
     updateState = { ...updateState, downloading: false, progress: 100 }
     notifyUpdateState()
 

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "copilot-proxy-gui",
   "private": true,
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Desktop GUI for copilot-proxy — Electron + React + Vite",
   "type": "module",
   "main": "electron/main.cjs",