PreIndexedPackageSourceFactory.cpp

// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.
#include "pch.h"
#include "Microsoft/PreIndexedPackageSourceFactory.h"
#include "Microsoft/SQLiteIndex.h"
#include "Microsoft/SQLiteIndexSource.h"
#include "SourceUpdateChecks.h"

#include <AppInstallerDateTime.h>
#include <AppInstallerDeployment.h>
#include <AppInstallerDownloader.h>
#include <AppInstallerMsixInfo.h>
#include <winget/ManagedFile.h>
#include <winget/ExperimentalFeature.h>

using namespace std::string_literals;
using namespace std::string_view_literals;

namespace AppInstaller::Repository::Microsoft
{
    namespace
    {
        // To use an unsigned source, set AICLI_ALLOW_UNSIGNED_SOURCE and use a debug build.
        // Ex: set CL=/DAICLI_ALLOW_UNSIGNED_SOURCE
#if ! defined( AICLI_DISABLE_TEST_HOOKS ) && defined( AICLI_ALLOW_UNSIGNED_SOURCE )
        static bool s_AllowUnsignedSource = true;
#else
        static bool s_AllowUnsignedSource = false;
#endif

        static constexpr std::string_view s_PreIndexedPackageSourceFactory_PackageFileName = "source.msix"sv;
        static constexpr std::string_view s_PreIndexedPackageSourceFactory_V2_PackageFileName = "source2.msix"sv;
        static constexpr std::string_view s_PreIndexedPackageSourceFactory_PackageVersionHeader = "x-ms-meta-sourceversion"sv;
        static constexpr std::string_view s_PreIndexedPackageSourceFactory_IndexFileName = "index.db"sv;
        // TODO: This being hard coded to force using the Public directory name is not ideal.
        static constexpr std::string_view s_PreIndexedPackageSourceFactory_IndexFilePath = "Public\\index.db"sv;

        // Construct the package location from the given details.
        // Currently expects that the arg is an https uri pointing to the root of the data.
        std::string GetPackageLocation(const std::string& basePath, std::string_view fileName)
        {
            std::string result = basePath;
            if (result.back() != '/')
            {
                result += '/';
            }
            result += fileName;
            return result;
        }

        // Gets the set of package locations that should be tried, in order.
        std::vector<std::string> GetPackageLocations(const SourceDetails& details)
        {
            THROW_HR_IF(E_INVALIDARG, details.Arg.empty());

            std::vector<std::string> result;

            result.emplace_back(GetPackageLocation(details.Arg, s_PreIndexedPackageSourceFactory_V2_PackageFileName));
            result.emplace_back(GetPackageLocation(details.Arg, s_PreIndexedPackageSourceFactory_PackageFileName));

            if (!details.AlternateArg.empty())
            {
                result.emplace_back(GetPackageLocation(details.AlternateArg, s_PreIndexedPackageSourceFactory_V2_PackageFileName));
                result.emplace_back(GetPackageLocation(details.AlternateArg, s_PreIndexedPackageSourceFactory_PackageFileName));
            }

            return result;
        }

        // Abstracts the fallback for package location when the MsixInfo is needed.
        struct PreIndexedPackageInfo
        {
            template <typename LocationCheck>
            PreIndexedPackageInfo(const SourceDetails& details, LocationCheck&& locationCheck)
            {
                std::vector<std::string> potentialLocations = GetPackageLocations(details);

                for (const auto& location : potentialLocations)
                {
                    locationCheck(location);
                }

                std::exception_ptr primaryException;

                for (const auto& location : potentialLocations)
                {
                    try
                    {
                        m_msixInfo = std::make_unique<Msix::MsixInfo>(location);
                        m_packageLocation = location;
                        return;
                    }
                    catch (...)
                    {
                        LOG_CAUGHT_EXCEPTION_MSG("PreIndexedPackageInfo failed on location: %hs", location.c_str());
                        if (!primaryException)
                        {
                            primaryException = std::current_exception();
                        }
                    }
                }

                std::rethrow_exception(primaryException);
            }

            const std::string& PackageLocation() const { return m_packageLocation; }
            Msix::MsixInfo& MsixInfo() { return *m_msixInfo; }

        private:
            std::string m_packageLocation;
            std::unique_ptr<Msix::MsixInfo> m_msixInfo;
        };

        // Abstracts the fallback for package location when an update is being done.
        struct PreIndexedPackageUpdateCheck
        {
            PreIndexedPackageUpdateCheck(const SourceDetails& details)
            {
                std::vector<std::string> potentialLocations = GetPackageLocations(details);

                std::exception_ptr primaryException;

                for (const auto& location : potentialLocations)
                {
                    try
                    {
                        m_availableVersion = GetAvailableVersionFrom(location);
                        m_packageLocation = location;
                        return;
                    }
                    catch (...)
                    {
                        LOG_CAUGHT_EXCEPTION_MSG("PreIndexedPackageUpdateCheck failed on location: %hs", location.c_str());
                        if (!primaryException)
                        {
                            primaryException = std::current_exception();
                        }
                    }
                }

                std::rethrow_exception(primaryException);
            }

            const std::string& PackageLocation() const { return m_packageLocation; }
            const Msix::PackageVersion& AvailableVersion() const { return m_availableVersion; }

        private:
            std::string m_packageLocation;
            Msix::PackageVersion m_availableVersion;

            Msix::PackageVersion GetAvailableVersionFrom(const std::string& packageLocation)
            {
                if (Utility::IsUrlRemote(packageLocation))
                {
                    std::map<std::string, std::string> headers = Utility::GetHeaders(packageLocation);
                    auto itr = headers.find(std::string{ s_PreIndexedPackageSourceFactory_PackageVersionHeader });
                    if (itr != headers.end())
                    {
                        AICLI_LOG(Repo, Verbose, << "Header indicates version is: " << itr->second);
                        return { itr->second };
                    }

                    // We did not find the header we were looking for, log the ones we did find
                    AICLI_LOG(Repo, Verbose, << "Did not find " << s_PreIndexedPackageSourceFactory_PackageVersionHeader << " in:\n" << [&]()
                        {
                            std::ostringstream headerLog;
                            for (const auto& header : headers)
                            {
                                headerLog << "  " << header.first << " : " << header.second << '\n';
                            }
                            return std::move(headerLog).str();
                        }());
                }

                AICLI_LOG(Repo, Verbose, << "Reading package data to determine version");
                Msix::MsixInfo info{ packageLocation };
                auto manifest = info.GetAppPackageManifests();

                THROW_HR_IF(APPINSTALLER_CLI_ERROR_PACKAGE_IS_BUNDLE, manifest.size() > 1);
                THROW_HR_IF(E_UNEXPECTED, manifest.size() == 0);

                return manifest[0].GetIdentity().GetVersion();
            }
        };

        // Gets the package family name from the details.
        std::string GetPackageFamilyNameFromDetails(const SourceDetails& details)
        {
            THROW_HR_IF(E_UNEXPECTED, details.Data.empty());
            return details.Data;
        }

        // Creates a name for the cross process reader-writer lock given the details.
        std::string CreateNameForCPL(const SourceDetails& details)
        {
            // The only relevant data is the package family name
            return "PreIndexedSourceCPL_"s + GetPackageFamilyNameFromDetails(details);
        }

        // The base class for a package that comes from a preindexed packaged source.
        struct PreIndexedFactoryBase : public ISourceFactory
        {
            std::string_view TypeName() const override final
            {
                return PreIndexedPackageSourceFactory::Type();
            }

            std::shared_ptr<ISourceReference> Create(const SourceDetails& details) override final
            {
                // With more than one source implementation, we will probably need to probe first
                THROW_HR_IF(E_INVALIDARG, !details.Type.empty() && details.Type != PreIndexedPackageSourceFactory::Type());

                return CreateInternal(details);
            }

            virtual std::shared_ptr<ISourceReference> CreateInternal(const SourceDetails& details) = 0;

            bool Add(SourceDetails& details, IProgressCallback& progress) override final
            {
                if (details.Type.empty())
                {
                    // With more than one source implementation, we will probably need to probe first
                    details.Type = PreIndexedPackageSourceFactory::Type();
                    AICLI_LOG(Repo, Info, << "Initializing source type: " << details.Name << " => " << details.Type);
                }
                else
                {
                    THROW_HR_IF(E_INVALIDARG, details.Type != PreIndexedPackageSourceFactory::Type());
                }

                PreIndexedPackageInfo packageInfo(details, [](const std::string& packageLocation)
                    {
                        THROW_HR_IF(APPINSTALLER_CLI_ERROR_SOURCE_NOT_SECURE, Utility::IsUrlRemote(packageLocation) && !Utility::IsUrlSecure(packageLocation));
                    });

                AICLI_LOG(Repo, Info, << "Initializing source from: " << details.Name << " => " << packageInfo.PackageLocation());

                THROW_HR_IF(APPINSTALLER_CLI_ERROR_PACKAGE_IS_BUNDLE, packageInfo.MsixInfo().GetIsBundle());

                auto fullName = packageInfo.MsixInfo().GetPackageFullName();
                AICLI_LOG(Repo, Info, << "Found package full name: " << details.Name << " => " << fullName);

                details.Data = Msix::GetPackageFamilyNameFromFullName(fullName);
                details.Identifier = Msix::GetPackageFamilyNameFromFullName(fullName);

                auto lock = LockExclusive(details, progress);
                if (!lock)
                {
                    return false;
                }

                return UpdateInternal(packageInfo.PackageLocation(), details, progress);
            }

            bool Update(const SourceDetails& details, IProgressCallback& progress) override final
            {
                return UpdateBase(details, false, progress);
            }

            bool BackgroundUpdate(const SourceDetails& details, IProgressCallback& progress) override final
            {
                return UpdateBase(details, true, progress);
            }

            // Retrieves the currently cached version of the package.
            virtual std::optional<Msix::PackageVersion> GetCurrentVersion(const SourceDetails& details) = 0;

            virtual bool UpdateInternal(const std::string& packageLocation, const SourceDetails& details, IProgressCallback& progress) = 0;

            bool Remove(const SourceDetails& details, IProgressCallback& progress) override final
            {
                THROW_HR_IF(E_INVALIDARG, details.Type != PreIndexedPackageSourceFactory::Type());
                auto lock = LockExclusive(details, progress);
                if (!lock)
                {
                    return false;
                }

                return RemoveInternal(details, progress);
            }

            virtual bool RemoveInternal(const SourceDetails& details, IProgressCallback&) = 0;

        private:
            Synchronization::CrossProcessLock LockExclusive(const SourceDetails& details, IProgressCallback& progress, bool isBackground = false)
            {
                Synchronization::CrossProcessLock result(CreateNameForCPL(details));

                if (isBackground)
                {
                    // If this is a background update, don't wait on the lock.
                    result.TryAcquireNoWait();
                }
                else
                {
                    result.Acquire(progress);
                }

                return result;
            }

            bool UpdateBase(const SourceDetails& details, bool isBackground, IProgressCallback& progress)
            {
                THROW_HR_IF(E_INVALIDARG, details.Type != PreIndexedPackageSourceFactory::Type());

                std::optional<Msix::PackageVersion> currentVersion = GetCurrentVersion(details);
                PreIndexedPackageUpdateCheck updateCheck(details);

                if (currentVersion)
                {
                    if (currentVersion.value() >= updateCheck.AvailableVersion())
                    {
                        AICLI_LOG(Repo, Verbose, << "Remote source data (" << updateCheck.AvailableVersion().ToString() <<
                            ") was not newer than existing (" << currentVersion.value().ToString() << "), no update needed");
                        return true;
                    }
                    else
                    {
                        AICLI_LOG(Repo, Verbose, << "Remote source data (" << updateCheck.AvailableVersion().ToString() <<
                            ") was newer than existing (" << currentVersion.value().ToString() << "), updating");
                    }
                }

                if (progress.IsCancelledBy(CancelReason::Any))
                {
                    AICLI_LOG(Repo, Info, << "Cancelling update upon request");
                    return false;
                }

                auto lock = LockExclusive(details, progress, isBackground);
                if (!lock)
                {
                    return false;
                }

                return UpdateInternal(updateCheck.PackageLocation(), details, progress);
            }
        };

        // *Should only be called when under a CrossProcessReaderWriteLock*
        std::optional<Deployment::Extension> GetExtensionFromDetails(const SourceDetails& details)
        {
            Deployment::ExtensionCatalog catalog(Deployment::SourceExtensionName);
            return catalog.FindByPackageFamilyAndId(GetPackageFamilyNameFromDetails(details), Deployment::IndexDBId);
        }

        std::optional<Msix::PackageVersion> PackagedContextGetCurrentVersion(const SourceDetails& details)
        {
            auto extension = GetExtensionFromDetails(details);

            if (extension)
            {
                auto version = extension->GetPackageVersion();
                return Msix::PackageVersion{ version.Major, version.Minor, version.Build, version.Revision };
            }
            else
            {
                return std::nullopt;
            }
        }

        // Constructs the location that we will write files to.
        std::filesystem::path GetStatePathFromDetails(const SourceDetails& details)
        {
            std::filesystem::path result = Runtime::GetPathTo(Runtime::PathName::LocalState);
            result /= PreIndexedPackageSourceFactory::Type();
            result /= GetPackageFamilyNameFromDetails(details);
            return result;
        }

        std::optional<Msix::PackageVersion> DesktopContextGetCurrentVersion(const SourceDetails& details)
        {
            std::filesystem::path packageState = GetStatePathFromDetails(details);
            std::filesystem::path packagePath = packageState / s_PreIndexedPackageSourceFactory_PackageFileName;

            if (std::filesystem::exists(packagePath))
            {
                // If we already have a trusted index package, use it to determine if we need to update or not.
                Msix::WriteLockedMsixFile indexPackage{ packagePath };
                if (indexPackage.ValidateTrustInfo(WI_IsFlagSet(details.TrustLevel, SourceTrustLevel::StoreOrigin)))
                {
                    Msix::MsixInfo msixInfo{ packagePath };
                    auto manifest = msixInfo.GetAppPackageManifests();

                    if (manifest.size() == 1)
                    {
                        return manifest[0].GetIdentity().GetVersion();
                    }
                }
            }

            return std::nullopt;
        }

        bool CheckForUpdateBeforeOpen(const SourceDetails& details, std::optional<Msix::PackageVersion> currentVersion, const std::optional<TimeSpan>& requestedUpdateInterval)
        {
            // If we can't find a good package, then we have to update to operate
            if (!currentVersion)
            {
                AICLI_LOG(Repo, Verbose, << "Source `" << details.Name << "` has no data");
                return true;
            }

            using namespace std::chrono_literals;
            using clock = std::chrono::system_clock;

            // Attempt to convert the package version to a time_point
            clock::time_point versionTime = Utility::GetTimePointFromVersion(currentVersion.value());

            // Since we expect that the version time indicates creation time, don't let it be far in the future.
            auto now = clock::now();
            if (versionTime > now && versionTime - now > 24h)
            {
                versionTime = clock::time_point::min();
            }

            // Use the later of the version and last update times
            clock::time_point timeToCheck = (versionTime > details.LastUpdateTime ? versionTime : details.LastUpdateTime);

            return IsAfterUpdateCheckTime(details.Name, timeToCheck, requestedUpdateInterval);
        }

        struct PackagedContextSourceReference : public ISourceReference
        {
            PackagedContextSourceReference(const SourceDetails& details) : m_details(details)
            {
                if (!m_details.Data.empty())
                {
                    m_details.Identifier = GetPackageFamilyNameFromDetails(details);
                }
            }

            std::string GetIdentifier() override { return m_details.Identifier; }

            SourceDetails& GetDetails() override { return m_details; };

            bool ShouldUpdateBeforeOpen(const std::optional<TimeSpan>& requestedUpdateInterval) override
            {
                return CheckForUpdateBeforeOpen(m_details, PackagedContextGetCurrentVersion(m_details), requestedUpdateInterval);
            }

            std::shared_ptr<ISource> Open(IProgressCallback& progress) override
            {
                Synchronization::CrossProcessLock lock(CreateNameForCPL(m_details));
                if (!lock.Acquire(progress))
                {
                    return {};
                }

                auto extension = GetExtensionFromDetails(m_details);
                if (!extension)
                {
                    AICLI_LOG(Repo, Info, << "Package not found " << m_details.Data);
                    THROW_HR(APPINSTALLER_CLI_ERROR_SOURCE_DATA_MISSING);
                }

                THROW_HR_IF(HRESULT_FROM_WIN32(ERROR_NEEDS_REMEDIATION), !extension->VerifyContentIntegrity(progress));

                // To work around an issue with accessing the public folder, we are temporarily
                // constructing the location ourself.  This was already the case for the non-packaged
                // runtime, and we can fix both in the future.  The only problem with this is that
                // the directory in the extension *must* be Public, rather than one set by the creator.
                std::filesystem::path indexLocation = extension->GetPackagePath();
                indexLocation /= s_PreIndexedPackageSourceFactory_IndexFilePath;

                SQLiteIndex index = SQLiteIndex::Open(indexLocation.u8string(), SQLiteIndex::OpenDisposition::Immutable);

                // We didn't use to store the source identifier, so we compute it here in case it's
                // missing from the details.
                m_details.Identifier = GetPackageFamilyNameFromDetails(m_details);
                return std::make_shared<SQLiteIndexSource>(m_details, std::move(index), false, true);
            }

        private:
            SourceDetails m_details;
        };

        // Source factory for running within a packaged context
        struct PackagedContextFactory : public PreIndexedFactoryBase
        {
            std::shared_ptr<ISourceReference> CreateInternal(const SourceDetails& details) override
            {
                return std::make_shared<PackagedContextSourceReference>(details);
            }

            std::optional<Msix::PackageVersion> GetCurrentVersion(const SourceDetails& details) override
            {
                return PackagedContextGetCurrentVersion(details);
            }

            bool UpdateInternal(const std::string& packageLocation, const SourceDetails& details, IProgressCallback& progress) override
            {
                // Due to complications with deployment, download the file and deploy from
                // a local source while we investigate further.
                bool download = Utility::IsUrlRemote(packageLocation);
                std::filesystem::path localFile;

                if (download)
                {
                    localFile = Runtime::GetPathTo(Runtime::PathName::Temp);
                    localFile /= GetPackageFamilyNameFromDetails(details) + ".msix";

                    Utility::Download(packageLocation, localFile, Utility::DownloadType::Index, progress);
                }
                else
                {
                    localFile = Utility::ConvertToUTF16(packageLocation);
                }

                // Verify the local file
                Msix::WriteLockedMsixFile fileLock{ localFile };
                Msix::MsixInfo localMsixInfo{ localFile };

                // The package should not be a bundle
                THROW_HR_IF(APPINSTALLER_CLI_ERROR_PACKAGE_IS_BUNDLE, localMsixInfo.GetIsBundle());

                // Ensure that family name has not changed
                THROW_HR_IF(APPINSTALLER_CLI_ERROR_SOURCE_DATA_INTEGRITY_FAILURE,
                    GetPackageFamilyNameFromDetails(details) != Msix::GetPackageFamilyNameFromFullName(localMsixInfo.GetPackageFullName()));

                if (!fileLock.ValidateTrustInfo(WI_IsFlagSet(details.TrustLevel, SourceTrustLevel::StoreOrigin)))
                {
                    AICLI_LOG(Repo, Error, << "Source update failed. Source package failed trust validation.");
                    THROW_HR(APPINSTALLER_CLI_ERROR_SOURCE_DATA_INTEGRITY_FAILURE);
                }

                winrt::Windows::Foundation::Uri uri = winrt::Windows::Foundation::Uri(localFile.c_str());
                Deployment::AddPackage(
                    uri,
                    Deployment::Options{ WI_IsFlagSet(details.TrustLevel, SourceTrustLevel::Trusted) },
                    progress);

                if (download)
                {
                    try
                    {
                        // If successful, delete the file
                        std::filesystem::remove(localFile);
                    }
                    CATCH_LOG();
                }

                return true;
            }

            bool RemoveInternal(const SourceDetails& details, IProgressCallback& callback) override
            {
                auto fullName = Msix::GetPackageFullNameFromFamilyName(GetPackageFamilyNameFromDetails(details));

                if (!fullName)
                {
                    AICLI_LOG(Repo, Info, << "No full name found for family name: " << GetPackageFamilyNameFromDetails(details));
                }
                else
                {
                    AICLI_LOG(Repo, Info, << "Removing package: " << *fullName);
                    Deployment::RemovePackage(*fullName, winrt::Windows::Management::Deployment::RemovalOptions::None, callback);
                }

                return true;
            }
        };

        struct DesktopContextSourceReference : public ISourceReference
        {
            DesktopContextSourceReference(const SourceDetails& details) : m_details(details)
            {
                if (!m_details.Data.empty())
                {
                    m_details.Identifier = GetPackageFamilyNameFromDetails(details);
                }
            }

            std::string GetIdentifier() override { return m_details.Identifier; }

            SourceDetails& GetDetails() override { return m_details; };

            bool ShouldUpdateBeforeOpen(const std::optional<TimeSpan>& requestedUpdateInterval) override
            {
                return CheckForUpdateBeforeOpen(m_details, DesktopContextGetCurrentVersion(m_details), requestedUpdateInterval);
            }

            std::shared_ptr<ISource> Open(IProgressCallback& progress) override
            {
                Synchronization::CrossProcessLock lock(CreateNameForCPL(m_details));
                if (!lock.Acquire(progress))
                {
                    return {};
                }

                std::filesystem::path packageLocation = GetStatePathFromDetails(m_details);
                packageLocation /= s_PreIndexedPackageSourceFactory_PackageFileName;

                if (!std::filesystem::exists(packageLocation))
                {
                    AICLI_LOG(Repo, Info, << "Data not found at " << packageLocation);
                    THROW_HR(APPINSTALLER_CLI_ERROR_SOURCE_DATA_MISSING);
                }

                // Put a write exclusive lock on the index package.
                Msix::WriteLockedMsixFile indexPackage{ packageLocation };

                // Validate index package trust info.
                THROW_HR_IF(APPINSTALLER_CLI_ERROR_SOURCE_DATA_INTEGRITY_FAILURE, !s_AllowUnsignedSource && !indexPackage.ValidateTrustInfo(WI_IsFlagSet(m_details.TrustLevel, SourceTrustLevel::StoreOrigin)));

                // Create a temp lock exclusive index file.
                auto tempIndexFilePath = Runtime::GetNewTempFilePath();
                auto tempIndexFile = Utility::ManagedFile::CreateWriteLockedFile(tempIndexFilePath, GENERIC_WRITE, true);

                // Populate temp index file.
                Msix::MsixInfo packageInfo(packageLocation);
                packageInfo.WriteToFileHandle(s_PreIndexedPackageSourceFactory_IndexFilePath, tempIndexFile.GetFileHandle(), progress);

                if (progress.IsCancelledBy(CancelReason::Any))
                {
                    AICLI_LOG(Repo, Info, << "Cancelling open upon request");
                    return {};
                }

                SQLiteIndex index = SQLiteIndex::Open(tempIndexFile.GetFilePath().u8string(), SQLiteIndex::OpenDisposition::Immutable, std::move(tempIndexFile));

                // We didn't use to store the source identifier, so we compute it here in case it's
                // missing from the details.
                m_details.Identifier = GetPackageFamilyNameFromDetails(m_details);
                return std::make_shared<SQLiteIndexSource>(m_details, std::move(index), false, true);
            }

        private:
            SourceDetails m_details;
        };

        // Source factory for running outside of a package.
        struct DesktopContextFactory : public PreIndexedFactoryBase
        {
            std::shared_ptr<ISourceReference> CreateInternal(const SourceDetails& details) override
            {
                return std::make_shared<DesktopContextSourceReference>(details);
            }

            std::optional<Msix::PackageVersion> GetCurrentVersion(const SourceDetails& details) override
            {
                return DesktopContextGetCurrentVersion(details);
            }

            bool UpdateInternal(const std::string& packageLocation, const SourceDetails& details, IProgressCallback& progress) override
            {
                // We will extract the manifest and index files directly to this location
                std::filesystem::path packageState = GetStatePathFromDetails(details);
                std::filesystem::create_directories(packageState);

                std::filesystem::path packagePath = packageState / s_PreIndexedPackageSourceFactory_PackageFileName;

                std::filesystem::path tempPackagePath = packagePath.u8string() + ".dnld.msix";
                auto removeTempFileOnExit = wil::scope_exit([&]()
                    {
                        try
                        {
                            std::filesystem::remove(tempPackagePath);
                        }
                        catch (...)
                        {
                            AICLI_LOG(Repo, Info, << "Failed to remove temp index file at: " << tempPackagePath);
                        }
                    });

                if (Utility::IsUrlRemote(packageLocation))
                {
                    AppInstaller::Utility::Download(packageLocation, tempPackagePath, AppInstaller::Utility::DownloadType::Index, progress);
                }
                else
                {
                    std::filesystem::copy(packageLocation, tempPackagePath);
                    progress.OnProgress(100, 100, ProgressType::Percent);
                }

                if (progress.IsCancelledBy(CancelReason::Any))
                {
                    AICLI_LOG(Repo, Info, << "Cancelling update upon request");
                    return false;
                }

                {
                    // Extra scope to release the file lock right after trust validation.
                    Msix::WriteLockedMsixFile tempIndexPackage{ tempPackagePath };
                    Msix::MsixInfo tempMsixInfo{ tempPackagePath };

                    // The package should not be a bundle
                    THROW_HR_IF(APPINSTALLER_CLI_ERROR_PACKAGE_IS_BUNDLE, tempMsixInfo.GetIsBundle());

                    // Ensure that family name has not changed
                    THROW_HR_IF(APPINSTALLER_CLI_ERROR_SOURCE_DATA_INTEGRITY_FAILURE,
                        GetPackageFamilyNameFromDetails(details) != Msix::GetPackageFamilyNameFromFullName(tempMsixInfo.GetPackageFullName()));

                    if (!s_AllowUnsignedSource && !tempIndexPackage.ValidateTrustInfo(WI_IsFlagSet(details.TrustLevel, SourceTrustLevel::StoreOrigin)))
                    {
                        AICLI_LOG(Repo, Error, << "Source update failed. Source package failed trust validation.");
                        THROW_HR(APPINSTALLER_CLI_ERROR_SOURCE_DATA_INTEGRITY_FAILURE);
                    }
                }

                std::filesystem::rename(tempPackagePath, packagePath);
                AICLI_LOG(Repo, Info, << "Source update success.");

                removeTempFileOnExit.release();

                return true;
            }

            bool RemoveInternal(const SourceDetails& details, IProgressCallback&) override
            {
                std::filesystem::path packageState = GetStatePathFromDetails(details);

                if (!std::filesystem::exists(packageState))
                {
                    AICLI_LOG(Repo, Info, << "No state found for source: " << packageState.u8string());
                }
                else
                {
                    AICLI_LOG(Repo, Info, << "Removing state found for source: " << packageState.u8string());
                    std::filesystem::remove_all(packageState);
                }

                return true;
            }
        };
    }

    std::unique_ptr<ISourceFactory> PreIndexedPackageSourceFactory::Create()
    {
        if (!s_AllowUnsignedSource && Runtime::IsRunningInPackagedContext())
        {
            return std::make_unique<PackagedContextFactory>();
        }
        else
        {
            return std::make_unique<DesktopContextFactory>();
        }
    }
}