@agentuity/cli 0.0.15 → 0.0.16

package/dist/cmd/project/download.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../../src/cmd/project/download.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,UAAU,eAAe;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,YAAY;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CACf;AAsBD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD9E;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCvE"}
+{"version":3,"file":"download.d.ts","sourceRoot":"","sources":["../../../src/cmd/project/download.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,UAAU,eAAe;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,YAAY;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CACf;AAsBD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAoD9E;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCvE"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@agentuity/cli",
-	"version": "0.0.15",
+	"version": "0.0.16",
 	"type": "module",
 	"main": "./src/index.ts",
 	"types": "./dist/index.d.ts",

package/src/cmd/project/download.ts

@@ -1,6 +1,6 @@
 import { join, resolve } from 'node:path';
-import { existsSync, mkdirSync, renameSync, readdirSync, cpSync, rmSync } from 'node:fs';
-import { homedir } from 'node:os';
+import { existsSync, mkdirSync, mkdtempSync, renameSync, readdirSync, cpSync, rmSync } from 'node:fs';
+import { homedir, tmpdir } from 'node:os';
 import { pipeline } from 'node:stream/promises';
 import { createGunzip } from 'node:zlib';
 import { extract, type Headers } from 'tar-fs';
@@ -68,41 +68,38 @@ export async function downloadTemplate(options: DownloadOptions): Promise<void>
 	const branch = templateBranch || GITHUB_BRANCH;
 	const templatePath = `templates/${template.directory}`;
 	const url = `https://codeload.github.com/${GITHUB_REPO}/tar.gz/${branch}`;
-	const tempDir = join(dest, '.temp-download');
-	mkdirSync(tempDir, { recursive: true });
-
-	await downloadWithSpinner(
-		{
-			url,
-			message: templateBranch
-				? `Downloading template files from branch ${branch}...`
-				: 'Downloading template files...',
-		},
-		async (stream) => {
-			// Extract only the template directory from tarball
-			const prefix = `sdk-${branch}/${templatePath}/`;
-			await pipeline(
-				stream,
-				createGunzip(),
-				extract(tempDir, {
-					filter: (name: string) => name.startsWith(prefix),
-					map: (header: Headers) => {
-						header.name = header.name.substring(prefix.length);
-						return header;
-					},
-				})
-			);
-		}
-	);
-
-	await cleanup(tempDir, dest);
+	const tempDir = mkdtempSync(join(tmpdir(), 'agentuity-'));
+
+	try {
+		await downloadWithSpinner(
+			{
+				url,
+				message: templateBranch
+					? `Downloading template files from branch ${branch}...`
+					: 'Downloading template files...',
+			},
+			async (stream) => {
+				// Extract only the template directory from tarball
+				const prefix = `sdk-${branch}/${templatePath}/`;
+				await pipeline(
+					stream,
+					createGunzip(),
+					extract(tempDir, {
+						filter: (name: string) => name.startsWith(prefix),
+						map: (header: Headers) => {
+							header.name = header.name.substring(prefix.length);
+							return header;
+						},
+					})
+				);
+			}
+		);
 
-	// Extra safety: refuse to delete root or home directories
-	const home = homedir();
-	if (tempDir === '/' || tempDir === home) {
-		throw new Error(`Refusing to delete protected path: ${tempDir}`);
+		await cleanup(tempDir, dest);
+	} finally {
+		// Clean up temp directory
+		rmSync(tempDir, { recursive: true, force: true });
 	}
-	rmSync(tempDir, { recursive: true, force: true });
 }
 
 export async function setupProject(options: SetupOptions): Promise<void> {