@agent-sh/agent-workspace-linux 0.1.1 → 0.1.3

package/README.md

@@ -8,7 +8,9 @@ npm distribution wrapper for the [`agent-workspace-linux`](https://github.com/ag
 npm install -g @agent-sh/agent-workspace-linux
 ```
 
-The installer automatically downloads the prebuilt binary for your architecture from the matching [GitHub Release](https://github.com/agent-sh/agent-workspace-linux/releases).
+The installer automatically downloads the prebuilt binary for your architecture
+from the matching [GitHub Release](https://github.com/agent-sh/agent-workspace-linux/releases),
+then verifies the required `<asset>.sha256` sidecar before installing it.
 
 **Linux only.** `x64` (x86_64) and `arm64` (aarch64) are supported.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-sh/agent-workspace-linux",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Isolated Linux desktop workspaces for AI agents — MCP server binary wrapper.",
   "license": "MIT",
   "publishConfig": {

package/scripts/postinstall.js

@@ -7,16 +7,16 @@
 // error at runtime. To recover, re-run installation with scripts enabled or
 // invoke this file directly: `node node_modules/@agent-sh/agent-workspace-linux/scripts/postinstall.js`
 //
-// Checksum verification is not wired in because the release workflow contract
-// does not publish .sha256 sidecar files. If that changes, add a step here that
-// downloads <asset>.sha256 and verifies it against the tmp file before rename.
+// Release contract: every prebuilt binary asset must have a matching
+// `<asset>.sha256` sidecar, generated by the GitHub release workflow. The
+// installer verifies the sidecar before moving the binary into place.
 
 "use strict";
 
+const crypto = require("crypto");
 const https = require("https");
 const fs = require("fs");
 const path = require("path");
-const { execFileSync } = require("child_process");
 
 // ── Platform / arch guard ────────────────────────────────────────────────────
 
@@ -50,10 +50,12 @@ const assetName = `agent-workspace-linux-${rustTarget}`;
 const downloadUrl =
   `https://github.com/agent-sh/agent-workspace-linux/releases/download/` +
   `v${version}/${assetName}`;
+const checksumUrl = `${downloadUrl}.sha256`;
 
 const binDir = path.join(__dirname, "..", "bin");
 const destPath = path.join(binDir, "agent-workspace-linux");
 const tmpPath = destPath + ".tmp";
+const tmpChecksumPath = tmpPath + ".sha256";
 
 // ── Download helper (follows redirects, max 5 hops) ─────────────────────────
 
@@ -83,7 +85,8 @@ function download(url, tmpFile, maxRedirects = 5) {
             return reject(
               new Error(
                 `Failed to download ${url}: HTTP ${statusCode}. ` +
-                  "Check that the release exists and the version in package.json matches."
+                  "Check that the release exists, includes the binary and .sha256 sidecar, " +
+                  "and the version in package.json matches."
               )
             );
           }
@@ -110,17 +113,83 @@ function download(url, tmpFile, maxRedirects = 5) {
   });
 }
 
+function removeFileQuietly(file) {
+  try {
+    fs.unlinkSync(file);
+  } catch (_) {}
+}
+
+function parseSha256Sidecar(contents, expectedAssetName) {
+  const lines = contents
+    .split(/\r?\n/)
+    .map((line) => line.trim())
+    .filter(Boolean);
+
+  if (lines.length === 0) {
+    throw new Error("checksum sidecar is empty");
+  }
+
+  const candidates = [];
+  for (const line of lines) {
+    const match = line.match(/^([a-fA-F0-9]{64})(?:\s+(?:\*)?(.+))?$/);
+    if (!match) {
+      throw new Error(`invalid checksum sidecar line: ${line}`);
+    }
+
+    const [, checksum, fileName] = match;
+    candidates.push({
+      checksum: checksum.toLowerCase(),
+      fileName: fileName ? fileName.trim() : null,
+    });
+  }
+
+  const namedMatch = candidates.find(
+    ({ fileName }) => fileName && path.basename(fileName) === expectedAssetName
+  );
+  if (namedMatch) {
+    return namedMatch.checksum;
+  }
+
+  throw new Error(
+    `checksum sidecar does not contain an entry for ${expectedAssetName}`
+  );
+}
+
+function fileSha256(file) {
+  return new Promise((resolve, reject) => {
+    const hash = crypto.createHash("sha256");
+    const input = fs.createReadStream(file);
+
+    input.on("error", reject);
+    input.on("data", (chunk) => hash.update(chunk));
+    input.on("end", () => resolve(hash.digest("hex")));
+  });
+}
+
+async function verifyChecksum(binaryFile, sidecarFile, expectedAssetName) {
+  const expected = parseSha256Sidecar(
+    fs.readFileSync(sidecarFile, "utf8"),
+    expectedAssetName
+  );
+  const actual = await fileSha256(binaryFile);
+
+  if (actual !== expected) {
+    throw new Error(
+      `checksum mismatch for ${expectedAssetName}: expected ${expected}, got ${actual}`
+    );
+  }
+}
+
 // ── Main ─────────────────────────────────────────────────────────────────────
 
-(async () => {
+async function main() {
   // Ensure bin/ directory exists (it should, tracked by git via .gitkeep, but
   // be defensive for edge-case installs).
   fs.mkdirSync(binDir, { recursive: true });
 
   // Remove stale tmp file from a previous interrupted install.
-  try {
-    fs.unlinkSync(tmpPath);
-  } catch (_) {}
+  removeFileQuietly(tmpPath);
+  removeFileQuietly(tmpChecksumPath);
 
   console.log(
     `agent-workspace-linux: downloading ${assetName} v${version}…`
@@ -131,13 +200,35 @@ function download(url, tmpFile, maxRedirects = 5) {
     await download(downloadUrl, tmpPath);
   } catch (err) {
     // Clean up in case the file was partially created.
-    try {
-      fs.unlinkSync(tmpPath);
-    } catch (_) {}
-    console.error(`\nagent-workspace-linux: download failed — ${err.message}`);
+    removeFileQuietly(tmpPath);
+    // The download error text embeds the request URL (built from
+    // package.json's version + the target triple). Log a fixed message rather
+    // than interpolating that value, to avoid a log-injection sink; the URL
+    // itself is already printed above for debugging.
+    console.error(
+      "\nagent-workspace-linux: download failed. Verify the release exists " +
+        "for your platform and that the version in package.json matches " +
+        "(see the URL logged above)."
+    );
     process.exit(1);
   }
 
+  console.log(`agent-workspace-linux: downloading checksum for ${assetName}`);
+  console.log(`  URL: ${checksumUrl}`);
+
+  try {
+    await download(checksumUrl, tmpChecksumPath);
+    await verifyChecksum(tmpPath, tmpChecksumPath, assetName);
+  } catch (err) {
+    removeFileQuietly(tmpPath);
+    removeFileQuietly(tmpChecksumPath);
+    console.error(
+      `\nagent-workspace-linux: checksum verification failed — ${err.message}`
+    );
+    process.exit(1);
+  }
+  removeFileQuietly(tmpChecksumPath);
+
   // Atomic rename: avoids leaving a half-written binary.
   try {
     fs.renameSync(tmpPath, destPath);
@@ -160,4 +251,17 @@ function download(url, tmpFile, maxRedirects = 5) {
   }
 
   console.log(`agent-workspace-linux: binary installed at ${destPath}`);
-})();
+}
+
+if (require.main === module) {
+  main().catch((err) => {
+    console.error(`agent-workspace-linux: postinstall failed — ${err.message}`);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  parseSha256Sidecar,
+  fileSha256,
+  verifyChecksum,
+};