@genesis-agent/channel-slack 0.5.9 → 0.5.10

package/install.js

@@ -5,6 +5,7 @@
 const fs = require("fs");
 const path = require("path");
 const https = require("https");
+const crypto = require("crypto");
 const { execSync } = require("child_process");
 
 const VERSION = require("./package.json").version;
@@ -42,6 +43,60 @@ function getDownloadUrl(binaryName) {
   return `https://github.com/${REPO}/releases/download/v${VERSION}/${binaryName}`;
 }
 
+function getChecksumUrl() {
+  return `https://github.com/${REPO}/releases/download/v${VERSION}/sha256sums.txt`;
+}
+
+function fetchText(url) {
+  return new Promise((resolve, reject) => {
+    const follow = (url, redirects) => {
+      if (redirects > 5) return reject(new Error("Too many redirects"));
+
+      https
+        .get(url, (res) => {
+          if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+            return follow(res.headers.location, redirects + 1);
+          }
+          if (res.statusCode !== 200) {
+            return reject(new Error(`Download failed: HTTP ${res.statusCode}`));
+          }
+
+          res.setEncoding("utf8");
+          let body = "";
+          res.on("data", (chunk) => {
+            body += chunk;
+          });
+          res.on("end", () => resolve(body));
+        })
+        .on("error", reject);
+    };
+
+    follow(url, 0);
+  });
+}
+
+function checksumFor(text, binaryName) {
+  for (const line of text.split(/\r?\n/)) {
+    const fields = line.trim().split(/\s+/);
+    if (fields.length >= 2 && fields[1] === binaryName) return fields[0].toLowerCase();
+  }
+  return null;
+}
+
+function sha256File(filePath) {
+  const hash = crypto.createHash("sha256");
+  hash.update(fs.readFileSync(filePath));
+  return hash.digest("hex");
+}
+
+async function verifyChecksum(binaryName, dest) {
+  const sums = await fetchText(getChecksumUrl());
+  const expected = checksumFor(sums, binaryName);
+  if (!expected) throw new Error(`Missing checksum for ${binaryName}`);
+  const actual = sha256File(dest);
+  if (actual !== expected) throw new Error(`Checksum mismatch for ${binaryName}`);
+}
+
 function download(url, dest) {
   return new Promise((resolve, reject) => {
     const follow = (url, redirects) => {
@@ -100,6 +155,7 @@ async function main() {
 
   try {
     await download(url, dest);
+    await verifyChecksum(binaryName, dest);
     if (process.platform !== "win32") {
       fs.chmodSync(dest, 0o755);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@genesis-agent/channel-slack",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "Slack channel adapter for Genesis — DMs, file uploads, threads",
   "license": "MIT",
   "repository": {