@bash0816/claude-code 2.1.159-9 → 2.1.161-1

package/lib/prepare-native.js

@@ -2,6 +2,7 @@
 'use strict';
 
 const cp = require('child_process');
+const crypto = require('crypto');
 const fs = require('fs');
 const os = require('os');
 const path = require('path');
@@ -9,9 +10,11 @@ const path = require('path');
 const packageDir = path.resolve(__dirname, '..');
 const config = require(path.join(packageDir, 'config', 'claude-native-audited-versions.json'));
 const pkg = require(path.join(packageDir, 'package.json'));
-const manifest = require(path.join(packageDir, 'config', 'claude-termux-release-manifest.json'));
-const version = process.argv[2] || manifest.default_native_version || manifest.latest_audited_version || pkg.version;
+const version = process.argv[2] || pkg.version;
 const item = config.versions[version];
+const curlRetries = process.env.CLAUDE_TERMUX_FETCH_RETRIES || '4';
+const curlConnectTimeout = process.env.CLAUDE_TERMUX_FETCH_CONNECT_TIMEOUT || '20';
+const curlMaxTime = process.env.CLAUDE_TERMUX_FETCH_MAX_TIME || '300';
 
 if (!item) {
   console.error(`Unsupported audited Claude Code version: ${version}`);
@@ -29,18 +32,15 @@ if (fs.existsSync(sourceBin)) {
 }
 
 fs.mkdirSync(versionDir, { recursive: true });
-const packDir = fs.mkdtempSync(path.join(os.tmpdir(), `cluade-code-${version}-`));
+const packDir = fs.mkdtempSync(path.join(os.tmpdir(), `claude-code-${version}-`));
 
 try {
-  run('npm', ['pack', item.native_spec, '--pack-destination', packDir]);
-  const tgz = fs.readdirSync(packDir).find(name => name.endsWith('.tgz'));
-  if (!tgz) {
-    throw new Error('npm pack did not produce a tgz');
-  }
+  const tgzPath = fetchNativeTarball(item.native_spec, packDir);
+  verifyTarball(tgzPath, item);
 
   const extractDir = path.join(packDir, 'native');
   fs.mkdirSync(extractDir, { recursive: true });
-  run('tar', ['-xzf', path.join(packDir, tgz), '-C', extractDir]);
+  run('tar', ['-xzf', tgzPath, '-C', extractDir]);
 
   fs.rmSync(nativeDest, { recursive: true, force: true });
   fs.mkdirSync(path.dirname(nativeDest), { recursive: true });
@@ -57,6 +57,76 @@ function run(command, args) {
   }
 }
 
+function runCapture(command, args) {
+  const result = cp.spawnSync(command, args, {
+    stdio: ['ignore', 'pipe', 'inherit'],
+    encoding: 'utf8',
+  });
+  if (result.status !== 0) {
+    throw new Error(`${command} ${args.join(' ')} failed`);
+  }
+  return result.stdout.trim();
+}
+
+function fetchNativeTarball(spec, packDir) {
+  const directTarball = path.join(packDir, 'native-package.tgz');
+
+  try {
+    const tarballUrl = runCapture('npm', ['view', spec, 'dist.tarball', '--json']).replace(/^"|"$/g, '');
+    if (!tarballUrl) {
+      throw new Error(`npm view did not return dist.tarball for ${spec}`);
+    }
+    run('curl', [
+      '--fail',
+      '--location',
+      '--retry', String(curlRetries),
+      '--connect-timeout', String(curlConnectTimeout),
+      '--max-time', String(curlMaxTime),
+      '--output', directTarball,
+      tarballUrl,
+    ]);
+    if (fs.existsSync(directTarball)) {
+      return directTarball;
+    }
+  } catch (error) {
+    console.error(`Direct tarball fetch failed for ${spec}; falling back to npm pack.`);
+    console.error(error && error.message ? error.message : String(error));
+    fs.rmSync(directTarball, { force: true });
+  }
+
+  const packJson = runCapture('npm', ['pack', spec, '--pack-destination', packDir, '--json']);
+  let packEntries;
+  try {
+    packEntries = JSON.parse(packJson);
+  } catch (error) {
+    throw new Error(`npm pack did not return valid JSON for ${spec}`);
+  }
+  const packEntry = Array.isArray(packEntries) ? packEntries.find(entry => entry && entry.filename) : null;
+  if (!packEntry || !packEntry.filename) {
+    throw new Error('npm pack did not produce a tgz');
+  }
+  return path.join(packDir, packEntry.filename);
+}
+
+function verifyTarball(file, audited) {
+  const buf = fs.readFileSync(file);
+  if (audited.tarball_sha256) {
+    const sha256 = crypto.createHash('sha256').update(buf).digest('hex');
+    if (sha256 !== audited.tarball_sha256) {
+      throw new Error(`tarball sha256 mismatch for ${version}`);
+    }
+  }
+  if (audited.tarball_integrity) {
+    const sha512 = `sha512-${crypto.createHash('sha512').update(buf).digest('base64')}`;
+    if (sha512 !== audited.tarball_integrity) {
+      throw new Error(`tarball integrity mismatch for ${version}`);
+    }
+  }
+  if (audited.tarball_size !== undefined && Number(audited.tarball_size) !== buf.length) {
+    throw new Error(`tarball size mismatch for ${version}`);
+  }
+}
+
 function validateOffsets(file, audited) {
   const buf = fs.readFileSync(file);
   const start = Number(audited.entry_js_offset);