@centralu/darwin-arm64 0.1.0-beta.25 → 0.1.0-beta.27

package/Centralu.app/Contents/Resources/resources/host/remote-install.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { createHash, randomBytes } from 'node:crypto'
 import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs'
 import { homedir } from 'node:os'
-import { basename, join } from 'node:path'
+import { basename, join, win32 } from 'node:path'
 import { pathToFileURL } from 'node:url'
 
 const WORD = /^[0-9A-Za-z][0-9A-Za-z.+-]{0,63}$/
@@ -176,9 +176,15 @@ function alive(pid) {
   }
 }
 
-/** The system's tar. On Windows the one in System32 (bsdtar): a GNU tar on PATH reads `C:` as a host */
-function tarProgram() {
-  return process.platform === 'win32' ? join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tar.exe') : 'tar'
+/**
+ * The system's tar. On Windows the one in System32 (bsdtar): a GNU tar on PATH reads `C:` as a host. Named by its whole
+ * path: a `SystemRoot` that is not one from a drive's root is not used (the host's `systemTool` rule, which this script
+ * cannot import), since Windows looks a relative program path up in the working directory first (#428).
+ */
+export function tarProgram(platform = process.platform, env = process.env) {
+  if (platform !== 'win32') return 'tar'
+  const root = /^[A-Za-z]:[\\/]/.test(env.SystemRoot ?? '') ? env.SystemRoot : 'C:\\Windows'
+  return win32.join(root, 'System32', 'tar.exe')
 }
 
 /** The tarball's bytes, refused unless their sha512 is the integrity the hub read from the signed metadata */
@@ -258,15 +264,15 @@ export async function install(p, { dataDir = process.env.CC_DATA_DIR || join(hom
       const partial = join(l.root, `.partial-${p.version}-${process.pid}`)
       rmSync(partial, { recursive: true, force: true })
       try {
-        for (const [i, pkg] of p.packages.entries()) {
+        for (const pkg of p.packages) {
           const bytes = await fetchChecked(pkg)
-          const file = join(partial, `${i}.tgz`)
           const dest = join(partial, 'node_modules', ...pkg.name.split('/'))
           mkdirSync(dest, { recursive: true })
-          writeFileSync(file, bytes)
-          const r = spawnSync(tarProgram(), ['-xzf', file, '-C', dest, '--strip-components', '1'], { encoding: 'utf8', windowsHide: true })
+          // No path among the arguments (#849): Windows' tar takes its arguments in the ANSI code page, so a profile
+          // folder outside it (a name in another script) reached it as "?????" and the unpack failed. The archive comes
+          // on stdin, and the destination is the working folder, which Windows hands over whole
+          const r = spawnSync(tarProgram(), ['-xzf', '-', '--strip-components', '1'], { cwd: dest, input: bytes, encoding: 'utf8', windowsHide: true, maxBuffer: 16 * 1024 * 1024 })
           if (r.status !== 0) throw new Refusal('unpack', `${pkg.name}: ${(r.stderr || r.error?.message || '').trim().split('\n').at(-1)}`)
-          rmSync(file, { force: true })
         }
         const pkgDir = join(partial, 'node_modules', ...parts.pkg.split('/'))
         if (!existsSync(join(pkgDir, parts.host))) throw new Refusal('no_host', p.platform)

package/Centralu.app/Contents/_CodeSignature/CodeResources

@@ -6,15 +6,15 @@
 	<dict>
 		<key>Resources/content/centralu-keeper</key>
 		<data>
-		gzMqc9RLJI3PlraYagPFdHVsdUM=
+		ELf6tNEorvC2otcCB/C9JNtmZGw=
 		</data>
 		<key>Resources/content/content-manifest.json</key>
 		<data>
-		gYU2uKnPBciImSG+nY+7NA3WYBA=
+		QRDgmpzmg7EzWzhZCc5E2qpO4Eg=
 		</data>
 		<key>Resources/content/content-manifest.json.sig</key>
 		<data>
-		iYEqtIq+PBpNgmBAZdNlmqXMGSQ=
+		wJ6YXU3DlPUg2QZ0KmfULODgPkY=
 		</data>
 		<key>Resources/content/host/app-template/AGENTS.md</key>
 		<data>
@@ -58,19 +58,19 @@
 		</data>
 		<key>Resources/content/host/bundle-info.json</key>
 		<data>
-		mosPO6KIHazBep3Cj1FYqaAHMMY=
+		kJUhqmsmZQzBSBYAMqUjpjPPXX0=
 		</data>
 		<key>Resources/content/host/centralu-package.json</key>
 		<data>
-		UMhLykicwtAeG/wJ9zo2b6fPfMs=
+		JsSX0xVPvbBtY47AhG/oo/mM1Rg=
 		</data>
 		<key>Resources/content/host/codex-orchestrator-bridge.mjs</key>
 		<data>
-		zMzraPGmUn21Ey48V+Zc3VuvXzA=
+		FgYNYlPdLBI9ylM3qg+ZG+cIZlY=
 		</data>
 		<key>Resources/content/host/main.mjs</key>
 		<data>
-		m9uTA1f00oqE4Oxc7OTZpfl1+PM=
+		eVPl3d5o4/F3mUIKbPuvJVOIl04=
 		</data>
 		<key>Resources/content/host/node_modules/better-sqlite3/build/Release/better_sqlite3.node</key>
 		<data>
@@ -342,7 +342,7 @@
 		</data>
 		<key>Resources/content/host/remote-install.mjs</key>
 		<data>
-		yl0J+JffsEv7CSEYqn+zj2IPN6g=
+		lzWV3GewxtyDFt+/gtJJAPl2ZoU=
 		</data>
 		<key>Resources/content/host/remote-runtime.json</key>
 		<data>
@@ -398,19 +398,19 @@
 		</data>
 		<key>Resources/resources/host/bundle-info.json</key>
 		<data>
-		mosPO6KIHazBep3Cj1FYqaAHMMY=
+		kJUhqmsmZQzBSBYAMqUjpjPPXX0=
 		</data>
 		<key>Resources/resources/host/centralu-package.json</key>
 		<data>
-		UMhLykicwtAeG/wJ9zo2b6fPfMs=
+		JsSX0xVPvbBtY47AhG/oo/mM1Rg=
 		</data>
 		<key>Resources/resources/host/codex-orchestrator-bridge.mjs</key>
 		<data>
-		zMzraPGmUn21Ey48V+Zc3VuvXzA=
+		FgYNYlPdLBI9ylM3qg+ZG+cIZlY=
 		</data>
 		<key>Resources/resources/host/main.mjs</key>
 		<data>
-		m9uTA1f00oqE4Oxc7OTZpfl1+PM=
+		eVPl3d5o4/F3mUIKbPuvJVOIl04=
 		</data>
 		<key>Resources/resources/host/node_modules/better-sqlite3/build/Release/better_sqlite3.node</key>
 		<data>
@@ -682,7 +682,7 @@
 		</data>
 		<key>Resources/resources/host/remote-install.mjs</key>
 		<data>
-		yl0J+JffsEv7CSEYqn+zj2IPN6g=
+		lzWV3GewxtyDFt+/gtJJAPl2ZoU=
 		</data>
 		<key>Resources/resources/host/remote-runtime.json</key>
 		<data>
@@ -719,30 +719,30 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			zKjaQDeWIfvGZ6FjaOYsLrWkIXQ=
+			J2L5hO1cpmAz/d3bnDpj4yqBU94=
 			</data>
 			<key>requirement</key>
-			<string>cdhash H"cca8da40379621fbc667a16368e62c2eb5a42174"</string>
+			<string>cdhash H"2762f984ed5ca66033fddddb9c3a63e32a8153de"</string>
 		</dict>
 		<key>Resources/content/centralu-keeper</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			SSSIOrDDPP/oyWxPNxANOsOjUhcug6c8YbJMPHCLIfE=
+			aC31cqeAunJAi43Qdjd9df3SfyKjju4pBcI12Oeu5Ts=
 			</data>
 		</dict>
 		<key>Resources/content/content-manifest.json</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			wRt956zmaIwEjkwCphb+XKTGP9/QJBLPuxxVTK+3Ljs=
+			GfgsljLa3byX6UOvFW6zAyppE6AXaeeA28pTPXU46ZA=
 			</data>
 		</dict>
 		<key>Resources/content/content-manifest.json.sig</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			EEVAJrQq5meZzyexiDA5E8kyR3SJnAEeGtE2pofY+zQ=
+			qKhpRfgivlikw86LJSU88moscQqTCFVr3VW9dimuiYE=
 			</data>
 		</dict>
 		<key>Resources/content/host/app-template/AGENTS.md</key>
@@ -819,28 +819,28 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			/QZrIRmquaPAIW1sVhKfi7LfuYhwrvRtbpaBhfCHaVQ=
+			+jhENG+fSPtYVfA2pZuLQlJF0V4AzZHwc8LhKKr56JQ=
 			</data>
 		</dict>
 		<key>Resources/content/host/centralu-package.json</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HZ15EDiZW3B7tkEH79GzVKtyXd03kb2yfJiErjg1nao=
+			RknIuUQ/lION2pI6iqMgBRiEvobyWC6V1xjcHGOZc6s=
 			</data>
 		</dict>
 		<key>Resources/content/host/codex-orchestrator-bridge.mjs</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			H70+BBQCu8rnMC2pSdoFRORk0A4YVTHj3wWnnynDtJM=
+			caNDqli38NahWAZBFoFzv/eKUM/XbZKTJHWN1GP8ZP0=
 			</data>
 		</dict>
 		<key>Resources/content/host/main.mjs</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			rzpjtcjy9ADOJIVKhfa/ksKfwfbN4Y7BQV7hF6OdG6w=
+			sEelFWm715DASvhUJ6XJ6XdjgJ4mV0KD3KGzyz3ewbU=
 			</data>
 		</dict>
 		<key>Resources/content/host/node_modules/better-sqlite3/build/Release/better_sqlite3.node</key>
@@ -1316,7 +1316,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			New4g3YdpbDtGTsBcScEixBPE/i5amL0KBDnwJoahDQ=
+			S38LUFdHBxTKwmxQAR9X0BWNkglwHibVcpsFFQl6AAk=
 			</data>
 		</dict>
 		<key>Resources/content/host/remote-runtime.json</key>
@@ -1414,28 +1414,28 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			/QZrIRmquaPAIW1sVhKfi7LfuYhwrvRtbpaBhfCHaVQ=
+			+jhENG+fSPtYVfA2pZuLQlJF0V4AzZHwc8LhKKr56JQ=
 			</data>
 		</dict>
 		<key>Resources/resources/host/centralu-package.json</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HZ15EDiZW3B7tkEH79GzVKtyXd03kb2yfJiErjg1nao=
+			RknIuUQ/lION2pI6iqMgBRiEvobyWC6V1xjcHGOZc6s=
 			</data>
 		</dict>
 		<key>Resources/resources/host/codex-orchestrator-bridge.mjs</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			H70+BBQCu8rnMC2pSdoFRORk0A4YVTHj3wWnnynDtJM=
+			caNDqli38NahWAZBFoFzv/eKUM/XbZKTJHWN1GP8ZP0=
 			</data>
 		</dict>
 		<key>Resources/resources/host/main.mjs</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			rzpjtcjy9ADOJIVKhfa/ksKfwfbN4Y7BQV7hF6OdG6w=
+			sEelFWm715DASvhUJ6XJ6XdjgJ4mV0KD3KGzyz3ewbU=
 			</data>
 		</dict>
 		<key>Resources/resources/host/node_modules/better-sqlite3/build/Release/better_sqlite3.node</key>
@@ -1911,7 +1911,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			New4g3YdpbDtGTsBcScEixBPE/i5amL0KBDnwJoahDQ=
+			S38LUFdHBxTKwmxQAR9X0BWNkglwHibVcpsFFQl6AAk=
 			</data>
 		</dict>
 		<key>Resources/resources/host/remote-runtime.json</key>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@centralu/darwin-arm64",
-  "version": "0.1.0-beta.25",
+  "version": "0.1.0-beta.27",
   "description": "Centralu app bundle for macOS on Apple Silicon",
   "license": "MIT",
   "author": "ijun17",