feat: codeblog update command + OAuth username support

- codeblog update: self-update by downloading latest binary from npm
- Auth: save username from OAuth callback
- OAuth: pass username param back from web callback

Author: TIANQIAN1238

packages/codeblog/src/auth/index.ts

@@ -8,6 +8,7 @@ export namespace Auth {
       type: z.enum(["jwt", "apikey"]),
       value: z.string(),
       expires: z.number().optional(),
+      username: z.string().optional(),
     })
     .meta({ ref: "AuthToken" })
   export type Token = z.infer<typeof Token>

packages/codeblog/src/auth/oauth.ts

@@ -13,12 +13,13 @@ export namespace OAuth {
     const { app, port } = Server.createCallbackServer(async (params) => {
       const token = params.get("token")
       const key = params.get("api_key")
+      const username = params.get("username") || undefined
 
       if (key) {
-        await Auth.set({ type: "apikey", value: key })
+        await Auth.set({ type: "apikey", value: key, username })
         log.info("authenticated with api key")
       } else if (token) {
-        await Auth.set({ type: "jwt", value: token })
+        await Auth.set({ type: "jwt", value: token, username })
         log.info("authenticated with jwt")
       } else {
         Server.stop()

packages/codeblog/src/cli/cmd/update.ts

@@ -0,0 +1,75 @@
+import type { CommandModule } from "yargs"
+import { UI } from "../ui"
+
+export const UpdateCommand: CommandModule = {
+  command: "update",
+  describe: "Update codeblog CLI to the latest version",
+  builder: (yargs) =>
+    yargs.option("force", {
+      describe: "Force update even if already on latest",
+      type: "boolean",
+      default: false,
+    }),
+  handler: async (args) => {
+    const pkg = await import("../../../package.json")
+    const current = pkg.version
+
+    UI.info(`Current version: v${current}`)
+    UI.info("Checking for updates...")
+
+    const res = await fetch("https://registry.npmjs.org/codeblog-app/latest")
+    if (!res.ok) {
+      UI.error("Failed to check for updates")
+      process.exitCode = 1
+      return
+    }
+
+    const data = await res.json() as { version: string }
+    const latest = data.version
+
+    if (current === latest && !args.force) {
+      UI.success(`Already on latest version v${current}`)
+      return
+    }
+
+    UI.info(`Updating v${current} → v${latest}...`)
+
+    const os = process.platform === "win32" ? "windows" : process.platform === "darwin" ? "darwin" : "linux"
+    const arch = process.arch === "arm64" ? "arm64" : "x64"
+    const platform = `${os}-${arch}`
+    const pkg_name = `codeblog-app-${platform}`
+    const url = `https://registry.npmjs.org/${pkg_name}/-/${pkg_name}-${latest}.tgz`
+
+    const tmpdir = (await import("os")).tmpdir()
+    const path = await import("path")
+    const fs = await import("fs/promises")
+    const tmp = path.join(tmpdir, `codeblog-update-${Date.now()}`)
+    await fs.mkdir(tmp, { recursive: true })
+
+    const tgz = path.join(tmp, "pkg.tgz")
+    const dlRes = await fetch(url)
+    if (!dlRes.ok) {
+      UI.error(`Failed to download update for ${platform}`)
+      process.exitCode = 1
+      return
+    }
+
+    await Bun.write(tgz, dlRes)
+
+    const proc = Bun.spawn(["tar", "-xzf", tgz, "-C", tmp], { stdout: "ignore", stderr: "ignore" })
+    await proc.exited
+
+    const bin = process.execPath
+    const ext = os === "windows" ? ".exe" : ""
+    const src = path.join(tmp, "package", "bin", `codeblog${ext}`)
+
+    await fs.copyFile(src, bin)
+    if (os !== "windows") {
+      await fs.chmod(bin, 0o755)
+    }
+
+    await fs.rm(tmp, { recursive: true, force: true })
+
+    UI.success(`Updated to v${latest}!`)
+  },
+}

packages/codeblog/src/index.ts

@@ -34,6 +34,7 @@ import { TuiCommand } from "./cli/cmd/tui"
 import { WeeklyDigestCommand } from "./cli/cmd/weekly-digest"
 import { TagsCommand } from "./cli/cmd/tags"
 import { ExploreCommand } from "./cli/cmd/explore"
+import { UpdateCommand } from "./cli/cmd/update"
 
 const VERSION = (await import("../package.json")).version
 
@@ -115,6 +116,8 @@ const cli = yargs(hideBin(process.argv))
   .command(DashboardCommand)
   .command(AgentsCommand)
   .command(MyPostsCommand)
+  // Update
+  .command(UpdateCommand)
   .fail((msg, err) => {
     if (
       msg?.startsWith("Unknown argument") ||