@ai-coders/installer 0.3.0 → 0.5.0

package/dist/project-bootstrap.js

@@ -0,0 +1,171 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { lstat, mkdir, mkdtemp, readdir, rm, stat, } from "node:fs/promises";
+import { createReadStream, createWriteStream } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { pipeline } from "node:stream/promises";
+import {} from "./clerk-auth.js";
+import { isDirectoryEffectivelyEmpty } from "./empty-directory.js";
+import { cliMessages } from "./i18n.js";
+import { loadInstallerProject, } from "./product-manifest.js";
+import { extractSafeTarGz } from "./safe-archive.js";
+function checksumMatches(archive, expected) {
+    const received = createHash("sha256").update(archive).digest("hex");
+    const receivedBuffer = Buffer.from(received);
+    const expectedBuffer = Buffer.from(expected);
+    return (receivedBuffer.length === expectedBuffer.length &&
+        timingSafeEqual(receivedBuffer, expectedBuffer));
+}
+function verifyArchive(archive, descriptor) {
+    if (archive.byteLength !== descriptor.byteSize ||
+        !checksumMatches(archive, descriptor.sha256)) {
+        throw new Error(cliMessages.artifactChecksumMismatch);
+    }
+}
+const copyStagedFile = async (source, destination, mode) => {
+    await pipeline(createReadStream(source), createWriteStream(destination, { flags: "wx", mode }));
+};
+async function collectPaths(root, relativePath = "") {
+    const absolutePath = path.join(root, relativePath);
+    const entries = await readdir(absolutePath, { withFileTypes: true });
+    const paths = [];
+    for (const entry of entries) {
+        const childRelativePath = relativePath === "" ? entry.name : `${relativePath}/${entry.name}`;
+        const childAbsolutePath = path.join(root, childRelativePath);
+        if (entry.isDirectory()) {
+            paths.push({
+                relativePath: childRelativePath,
+                absolutePath: childAbsolutePath,
+                kind: "directory",
+            });
+            paths.push(...(await collectPaths(root, childRelativePath)));
+        }
+        else if (entry.isFile()) {
+            const information = await stat(childAbsolutePath);
+            paths.push({
+                relativePath: childRelativePath,
+                absolutePath: childAbsolutePath,
+                kind: "file",
+                mode: information.mode,
+            });
+        }
+        else {
+            throw new Error(cliMessages.archiveInvalid);
+        }
+    }
+    return paths;
+}
+async function ensureParentDirectory(targetRoot, relativePath, createdDirectories) {
+    const parent = path.dirname(path.join(targetRoot, relativePath));
+    const parentRelative = path.relative(targetRoot, parent);
+    if (parentRelative === "")
+        return;
+    const segments = parentRelative.split(path.sep);
+    let currentRoot = targetRoot;
+    let currentRelative = "";
+    for (const segment of segments) {
+        currentRoot = path.join(currentRoot, segment);
+        currentRelative =
+            currentRelative === "" ? segment : `${currentRelative}/${segment}`;
+        let created = false;
+        try {
+            await lstat(currentRoot);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            await mkdir(currentRoot, { mode: 0o755 });
+            created = true;
+        }
+        if (created)
+            createdDirectories.push(currentRoot);
+    }
+}
+async function copyStagedProject(stagingRoot, targetRoot, copyFileImplementation = copyStagedFile) {
+    const stagedPaths = await collectPaths(stagingRoot);
+    const createdFiles = [];
+    const createdDirectories = [];
+    try {
+        for (const directory of stagedPaths
+            .filter((entry) => entry.kind === "directory")
+            .sort((left, right) => left.relativePath.length - right.relativePath.length)) {
+            const target = path.join(targetRoot, directory.relativePath);
+            let created = false;
+            try {
+                await lstat(target);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+                await ensureParentDirectory(targetRoot, directory.relativePath, createdDirectories);
+                await mkdir(target, { mode: 0o755 });
+                created = true;
+            }
+            if (created)
+                createdDirectories.push(target);
+        }
+        for (const file of stagedPaths.filter((entry) => entry.kind === "file")) {
+            const target = path.join(targetRoot, file.relativePath);
+            await ensureParentDirectory(targetRoot, file.relativePath, createdDirectories);
+            createdFiles.push(target);
+            await copyFileImplementation(file.absolutePath, target, (file.mode ?? 0o644) & 0o111 ? 0o755 : 0o644);
+        }
+    }
+    catch (error) {
+        for (const createdFile of createdFiles.reverse()) {
+            await rm(createdFile, { force: true }).catch(() => { });
+        }
+        for (const createdDirectory of [...createdDirectories].reverse()) {
+            await rm(createdDirectory, { force: true, recursive: true }).catch(() => { });
+        }
+        throw error;
+    }
+}
+export async function bootstrapProductProject(options) {
+    if (!(await isDirectoryEffectivelyEmpty(options.cwd))) {
+        throw new Error(cliMessages.bootstrapTargetChanged);
+    }
+    const descriptor = await options.session.withAccessToken(options.requestArtifact);
+    if (descriptor.product !== options.product) {
+        throw new Error(cliMessages.artifactProductMismatch(descriptor.product, options.product));
+    }
+    options.writeOutput(cliMessages.bootstrapPrompt(options.product, descriptor.version));
+    const accepted = await options.confirmBootstrap({
+        product: options.product,
+        version: descriptor.version,
+    });
+    if (!accepted) {
+        options.writeOutput(cliMessages.bootstrapDeclined);
+        return null;
+    }
+    options.writeOutput(cliMessages.bootstrapDownloadStarted(options.product, descriptor.version));
+    const archive = await options.downloadArtifact(descriptor);
+    verifyArchive(archive, descriptor);
+    const stagingRoot = await mkdtemp(path.join(tmpdir(), "ai-coders-bootstrap-"));
+    try {
+        await extractSafeTarGz(archive, stagingRoot);
+        let manifestVersion;
+        try {
+            const stagedProject = await loadInstallerProject(stagingRoot, options.product);
+            manifestVersion = stagedProject.manifest.version;
+        }
+        catch {
+            throw new Error(cliMessages.archiveInvalid);
+        }
+        if (manifestVersion !== descriptor.version) {
+            throw new Error(cliMessages.artifactVersionMismatch(descriptor.version, manifestVersion));
+        }
+        if (!(await isDirectoryEffectivelyEmpty(options.cwd))) {
+            throw new Error(cliMessages.bootstrapTargetChanged);
+        }
+        await copyStagedProject(stagingRoot, options.cwd, options.copyStagedFile === undefined
+            ? copyStagedFile
+            : options.copyStagedFile);
+        options.writeOutput(cliMessages.bootstrapCompleted(options.product, descriptor.version));
+        return { descriptor, sourceArchive: archive };
+    }
+    finally {
+        await rm(stagingRoot, { force: true, recursive: true }).catch(() => { });
+    }
+}
+//# sourceMappingURL=project-bootstrap.js.map

package/dist/project-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-bootstrap.js","sourceRoot":"","sources":["../src/project-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACL,KAAK,EACL,KAAK,EACL,OAAO,EACP,OAAO,EACP,EAAE,EACF,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAkC,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAOrD,SAAS,eAAe,CAAC,OAAe,EAAE,QAAgB;IACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QAC/C,eAAe,CAAC,cAAc,EAAE,cAAc,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,UAAqC;IAErC,IACE,OAAO,CAAC,UAAU,KAAK,UAAU,CAAC,QAAQ;QAC1C,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAeD,MAAM,cAAc,GAAmB,KAAK,EAC1C,MAAM,EACN,WAAW,EACX,IAAI,EACJ,EAAE;IACF,MAAM,QAAQ,CACZ,gBAAgB,CAAC,MAAM,CAAC,EACxB,iBAAiB,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CACtD,CAAC;AACJ,CAAC,CAAC;AAEF,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,YAAY,GAAG,EAAE;IAEjB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,iBAAiB,GACrB,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACrE,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC;gBACT,YAAY,EAAE,iBAAiB;gBAC/B,YAAY,EAAE,iBAAiB;gBAC/B,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC;gBACT,YAAY,EAAE,iBAAiB;gBAC/B,YAAY,EAAE,iBAAiB;gBAC/B,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,WAAW,CAAC,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,YAAoB,EACpB,kBAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,cAAc,KAAK,EAAE;QAAE,OAAO;IAClC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,WAAW,GAAG,UAAU,CAAC;IAC7B,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC9C,eAAe;YACb,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC;QACrE,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,OAAO;YAAE,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAmB,EACnB,UAAkB,EAClB,sBAAsB,GAAmB,cAAc;IAEvD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,WAAW;aAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;aAC7C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBACpE,MAAM,qBAAqB,CACzB,UAAU,EACV,SAAS,CAAC,YAAY,EACtB,kBAAkB,CACnB,CAAC;gBACF,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,OAAO;gBAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;YAC/E,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,sBAAsB,CAC1B,IAAI,CAAC,YAAY,EACjB,MAAM,EACN,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,WAAW,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YACjD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,gBAAgB,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,MAAM,EAAE,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAChE,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAY7C;IACC,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,eAAe,CACtD,OAAO,CAAC,eAAe,CACxB,CAAC;IACF,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,WAAW,CAAC,uBAAuB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,WAAW,CACjB,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CACjE,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,WAAW,CACjB,WAAW,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAC1E,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC3D,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEnC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,IAAI,eAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAC9C,WAAW,EACX,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,eAAe,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,WAAW,CAAC,uBAAuB,CACjC,UAAU,CAAC,OAAO,EAClB,eAAe,CAChB,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,iBAAiB,CACrB,WAAW,EACX,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,cAAc,KAAK,SAAS;YAClC,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,OAAO,CAAC,cAAc,CAC3B,CAAC;QACF,OAAO,CAAC,WAAW,CACjB,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CACpE,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/safe-archive.d.ts

@@ -0,0 +1 @@
+export declare function extractSafeTarGz(archive: Buffer, destination: string): Promise<void>;

package/dist/safe-archive.js

@@ -0,0 +1,201 @@
+import { mkdir, open, rm, stat, writeFile, } from "node:fs/promises";
+import path from "node:path";
+import { Parser } from "tar";
+import { cliMessages } from "./i18n.js";
+const maximumEntries = 10_000;
+const maximumUncompressedBytes = 512 * 1024 * 1024;
+const maximumPathLength = 1024;
+const allowedEntryTypes = new Set([
+    "File",
+    "OldFile",
+    "ContiguousFile",
+    "Directory",
+]);
+function invalidArchive() {
+    return new Error(cliMessages.archiveInvalid);
+}
+function normalizeArchivePath(value) {
+    if (value === "" ||
+        value.length > maximumPathLength ||
+        value.includes("\0") ||
+        value.includes("\\") ||
+        value.includes(":") ||
+        path.posix.isAbsolute(value) ||
+        path.win32.isAbsolute(value)) {
+        throw invalidArchive();
+    }
+    const segments = value.split("/");
+    if (segments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+        throw invalidArchive();
+    }
+    return segments.join("/");
+}
+function isForbidden(relativePath) {
+    const segments = relativePath.split("/");
+    const fileName = segments.at(-1) ?? "";
+    const lowerCaseFileName = fileName.toLowerCase();
+    return (segments.some((segment) => segment === ".git" || segment === "node_modules" || segment === ".output") ||
+        fileName === ".env" ||
+        (fileName.startsWith(".env.") && fileName !== ".env.example") ||
+        fileName === ".installer-state.json" ||
+        (segments[0] === ".claude" && segments[1] === "worktrees") ||
+        (segments[0] === ".eve" && segments[1] === ".workflow-data") ||
+        relativePath === ".claude/settings.local.json" ||
+        relativePath === ".claude/.credentials.json" ||
+        relativePath === ".codex/auth.json" ||
+        fileName === "credentials.json" ||
+        fileName === ".npmrc" ||
+        fileName === "id_rsa" ||
+        fileName === "id_ed25519" ||
+        /\.(?:pem|key|p12|pfx)$/.test(lowerCaseFileName));
+}
+function planEntry(entry) {
+    if (!allowedEntryTypes.has(entry.type) || entry.meta || entry.invalid) {
+        throw invalidArchive();
+    }
+    if (entry.linkpath !== undefined || entry.type === "Directory") {
+        if (entry.linkpath !== undefined)
+            throw invalidArchive();
+    }
+    const relativePath = normalizeArchivePath(entry.path);
+    if (isForbidden(relativePath))
+        throw invalidArchive();
+    const byteSize = entry.type === "Directory" ? 0 : entry.size;
+    if (!Number.isSafeInteger(byteSize) || byteSize < 0) {
+        throw invalidArchive();
+    }
+    return {
+        path: relativePath,
+        type: entry.type === "Directory" ? "directory" : "file",
+        byteSize,
+    };
+}
+function validatePlans(plans) {
+    if (plans.length === 0 || plans.length > maximumEntries) {
+        throw invalidArchive();
+    }
+    const totalBytes = plans.reduce((total, entry) => total + entry.byteSize, 0);
+    if (totalBytes > maximumUncompressedBytes)
+        throw invalidArchive();
+    const seen = new Set();
+    const files = new Set();
+    const directories = new Set();
+    for (const entry of plans) {
+        if (seen.has(entry.path))
+            throw invalidArchive();
+        if (entry.type === "file" && directories.has(entry.path)) {
+            throw invalidArchive();
+        }
+        if (entry.type === "directory" && files.has(entry.path)) {
+            throw invalidArchive();
+        }
+        const segments = entry.path.split("/");
+        for (let index = 1; index < segments.length; index += 1) {
+            const parent = segments.slice(0, index).join("/");
+            if (files.has(parent))
+                throw invalidArchive();
+        }
+        seen.add(entry.path);
+        if (entry.type === "file")
+            files.add(entry.path);
+        else
+            directories.add(entry.path);
+    }
+}
+async function parsePlans(archive) {
+    const parser = new Parser({ strict: true });
+    const plans = [];
+    const finished = new Promise((resolve, reject) => {
+        parser.once("error", reject);
+        parser.once("end", () => resolve());
+    });
+    parser.on("entry", (entry) => {
+        try {
+            plans.push(planEntry(entry));
+            entry.resume();
+        }
+        catch (error) {
+            parser.abort(error instanceof Error ? error : invalidArchive());
+        }
+    });
+    parser.end(archive);
+    await finished;
+    validatePlans(plans);
+    return plans;
+}
+async function safeWrite(destinationRoot, relativePath, execute) {
+    const absolutePath = path.join(destinationRoot, ...relativePath.split("/"));
+    const relative = path.relative(destinationRoot, absolutePath);
+    if (relative === "" ||
+        relative.startsWith("..") ||
+        path.isAbsolute(relative)) {
+        throw invalidArchive();
+    }
+    await execute();
+}
+export async function extractSafeTarGz(archive, destination) {
+    const plans = await parsePlans(archive);
+    await mkdir(destination, { recursive: true, mode: 0o700 });
+    const createdPaths = [];
+    try {
+        const parser = new Parser({ strict: true });
+        const writes = [];
+        const finished = new Promise((resolve, reject) => {
+            parser.once("error", reject);
+            parser.once("end", () => resolve());
+        });
+        parser.on("entry", (entry) => {
+            try {
+                const plan = planEntry(entry);
+                if (plan.type === "directory") {
+                    entry.resume();
+                    writes.push(safeWrite(destination, plan.path, async () => {
+                        await mkdir(path.join(destination, plan.path), {
+                            recursive: true,
+                            mode: 0o755,
+                        });
+                        createdPaths.push(path.join(destination, plan.path));
+                    }));
+                    return;
+                }
+                writes.push(entry
+                    .concat()
+                    .then(async (content) => {
+                    if (content.byteLength !== plan.byteSize)
+                        throw invalidArchive();
+                    await safeWrite(destination, plan.path, async () => {
+                        await mkdir(path.dirname(path.join(destination, plan.path)), {
+                            recursive: true,
+                            mode: 0o755,
+                        });
+                        const handle = await open(path.join(destination, plan.path), "wx", (entry.mode ?? 0o644) & 0o111 ? 0o755 : 0o644);
+                        try {
+                            await writeFile(handle, content);
+                            createdPaths.push(path.join(destination, plan.path));
+                        }
+                        finally {
+                            await handle.close();
+                        }
+                    });
+                })
+                    .catch((error) => {
+                    throw error instanceof Error ? error : invalidArchive();
+                }));
+            }
+            catch (error) {
+                parser.abort(error instanceof Error ? error : invalidArchive());
+            }
+        });
+        parser.end(archive);
+        await finished;
+        await Promise.all(writes);
+        await stat(destination);
+    }
+    catch (error) {
+        for (const createdPath of createdPaths.sort().reverse()) {
+            await rm(createdPath, { force: true, recursive: true }).catch(() => { });
+        }
+        throw error instanceof Error ? error : invalidArchive();
+    }
+}
+//# sourceMappingURL=safe-archive.js.map

package/dist/safe-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-archive.js","sourceRoot":"","sources":["../src/safe-archive.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,IAAI,EACJ,EAAE,EACF,IAAI,EACJ,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAkB,MAAM,KAAK,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,WAAW;CACZ,CAAC,CAAC;AAQH,SAAS,cAAc;IACrB,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IACE,KAAK,KAAK,EAAE;QACZ,KAAK,CAAC,MAAM,GAAG,iBAAiB;QAChC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAC5B,CAAC;QACD,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CACnE,EACD,CAAC;QACD,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,YAAoB;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjD,OAAO,CACL,QAAQ,CAAC,IAAI,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,SAAS,CACvF;QACD,QAAQ,KAAK,MAAM;QACnB,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,KAAK,cAAc,CAAC;QAC7D,QAAQ,KAAK,uBAAuB;QACpC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;QAC1D,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC;QAC5D,YAAY,KAAK,6BAA6B;QAC9C,YAAY,KAAK,2BAA2B;QAC5C,YAAY,KAAK,kBAAkB;QACnC,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,KAAK,QAAQ;QACrB,QAAQ,KAAK,QAAQ;QACrB,QAAQ,KAAK,YAAY;QACzB,wBAAwB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB;IACjC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,cAAc,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,WAAW,CAAC,YAAY,CAAC;QAAE,MAAM,cAAc,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QACvD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAkC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxD,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,EACxC,CAAC,CACF,CAAC;IACF,IAAI,UAAU,GAAG,wBAAwB;QAAE,MAAM,cAAc,EAAE,CAAC;IAElE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,cAAc,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,cAAc,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YAC5C,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAgB,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7B,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpB,MAAM,QAAQ,CAAC;IACf,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,eAAuB,EACvB,YAAoB,EACpB,OAA4B;IAE5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IAC9D,IACE,QAAQ,KAAK,EAAE;QACf,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EACzB,CAAC;QACD,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAgB,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC9B,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;wBAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;4BAC7C,SAAS,EAAE,IAAI;4BACf,IAAI,EAAE,KAAK;yBACZ,CAAC,CAAC;wBACH,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;oBACvD,CAAC,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,KAAK;qBACF,MAAM,EAAE;qBACR,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;oBACtB,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ;wBAAE,MAAM,cAAc,EAAE,CAAC;oBACjE,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;wBACjD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE;4BAC3D,SAAS,EAAE,IAAI;4BACf,IAAI,EAAE,KAAK;yBACZ,CAAC,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EACjC,IAAI,EACJ,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAC9C,CAAC;wBACF,IAAI,CAAC;4BACH,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;4BACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;wBACvD,CAAC;gCAAS,CAAC;4BACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;wBACvB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACxB,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC1D,CAAC,CAAC,CACL,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,QAAQ,CAAC;QACf,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,WAAW,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/dist/terminal-input.d.ts

@@ -0,0 +1 @@
+export declare function confirmBootstrapDownload(): Promise<boolean>;

package/dist/terminal-input.js

@@ -0,0 +1,15 @@
+import { createInterface } from "node:readline/promises";
+export async function confirmBootstrapDownload() {
+    const readline = createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    try {
+        const answer = await readline.question("");
+        return answer.trim().toLowerCase() === "yes";
+    }
+    finally {
+        readline.close();
+    }
+}
+//# sourceMappingURL=terminal-input.js.map

package/dist/terminal-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-input.js","sourceRoot":"","sources":["../src/terminal-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-coders/installer",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "AI Coders product installers.",
   "type": "module",
   "private": false,
@@ -38,6 +38,7 @@
     "@invokta/mcp": "0.5.0",
     "libsodium-wrappers": "^0.8.4",
     "ssh2": "^1.17.0",
+    "tar": "7.5.22",
     "zod": "4.4.3"
   },
   "devDependencies": {