Function installUpdate

apps/kimi-code/src/cli/update/preflight.ts:484–509

(
  source: InstallSource,
  version: string,
  platform: NodeJS.Platform,
)

}

export async function installUpdate(
  source: InstallSource,
  version: string,
  platform: NodeJS.Platform,
): Promise<void> {
  const { cmd, args } = spawnForSource(source, version, platform);
  await new Promise<void>((resolve, reject) => {
    // Windows package managers (npm/pnpm/yarn) are .cmd shims. Since the
    // CVE-2024-27980 fix, Node throws EINVAL when spawning a .cmd/.bat without
    // a shell, so run through the shell on win32. The version is a validated
    // semver and the package name is a constant, so args are shell-safe.
    const child = spawn(cmd, [...args], {
      stdio: 'inherit',
      shell: platform === 'win32' ? true : undefined,
    });
    child.once('error', reject);
    child.once('exit', (code, signal) => {
      if (code === 0) {
        resolve();
        return;
      }
      const detail = signal !== null ? `signal ${signal}` : `code ${String(code)}`;
      reject(new Error(`${cmd} exited with ${detail}`));
    });
  });
}

async function startBackgroundInstall(
  state: UpdateInstallState,