@hasna/models 0.0.1 → 0.0.3

package/dist/cli/index.js

@@ -2574,13 +2574,13 @@ var source_default = chalk;
 
 // src/cli/index.ts
 import { randomUUID as randomUUID2 } from "crypto";
-import { existsSync, readFileSync as readFileSync2, rmSync, statSync } from "fs";
+import { existsSync, readFileSync as readFileSync2, rmSync, statSync as statSync2 } from "fs";
 import { dirname as dirname4, join as join3 } from "path";
 import { fileURLToPath } from "url";
 
 // src/version.ts
 function getPackageVersion() {
-  return "0.0.1";
+  return "0.0.2";
 }
 
 // src/auth.ts
@@ -2778,7 +2778,7 @@ function safePathSegment(value) {
 }
 
 // src/huggingface.ts
-import { createWriteStream, mkdirSync as mkdirSync2, renameSync, unlinkSync } from "fs";
+import { createWriteStream, mkdirSync as mkdirSync2, renameSync, statSync, unlinkSync } from "fs";
 import { dirname as dirname2, isAbsolute, join as join2, resolve, sep } from "path";
 import { pipeline } from "stream/promises";
 import { Readable } from "stream";
@@ -3045,8 +3045,11 @@ async function downloadPlannedFiles(plan) {
     }
     try {
       await pipeline(Readable.fromWeb(response.body), createWriteStream(tempDestination));
+      const bytes = statSync(tempDestination).size;
+      if (file.size != null && bytes !== file.size) {
+        throw new Error(`Downloaded size mismatch for ${file.path}: expected ${file.size} bytes, got ${bytes}`);
+      }
       renameSync(tempDestination, destination);
-      const bytes = file.size ?? Bun.file(destination).size;
       downloaded.push({ path: file.path, bytes, destination });
     } catch (error) {
       try {
@@ -3314,8 +3317,11 @@ function planBlockedReason(plan) {
   return null;
 }
 function parsePositiveInt(value) {
-  const parsed = Number.parseInt(value, 10);
-  if (!Number.isFinite(parsed) || parsed < 1)
+  const trimmed = value.trim();
+  if (!/^\d+$/.test(trimmed))
+    throw new Error(`Expected a positive integer, got ${value}`);
+  const parsed = Number(trimmed);
+  if (!Number.isSafeInteger(parsed) || parsed < 1)
     throw new Error(`Expected a positive integer, got ${value}`);
   return parsed;
 }
@@ -3730,7 +3736,7 @@ program2.command("goals").description("Print the implementation goal chain").opt
   const path = join3(cliDir, "..", "..", "docs", "GOALS.md");
   const text = existsSync(path) ? readFileSync2(path, "utf8") : "Goal chain not found.";
   if (isJson(opts)) {
-    printJson({ path, bytes: existsSync(path) ? statSync(path).size : 0, text });
+    printJson({ path, bytes: existsSync(path) ? statSync2(path).size : 0, text });
   } else {
     console.log(text);
   }

package/dist/index.js

@@ -424,7 +424,7 @@ function saveHuggingFaceSecretRef(secretKey) {
   return redactAuthStatus({ provider: "huggingface", available: Boolean(readSecret(secretKey)), source: "secrets", secretKey });
 }
 // src/huggingface.ts
-import { createWriteStream, mkdirSync as mkdirSync3, renameSync, unlinkSync } from "fs";
+import { createWriteStream, mkdirSync as mkdirSync3, renameSync, statSync, unlinkSync } from "fs";
 import { dirname as dirname3, isAbsolute, join as join2, resolve, sep } from "path";
 import { pipeline } from "stream/promises";
 import { Readable } from "stream";
@@ -691,8 +691,11 @@ async function downloadPlannedFiles(plan) {
     }
     try {
       await pipeline(Readable.fromWeb(response.body), createWriteStream(tempDestination));
+      const bytes = statSync(tempDestination).size;
+      if (file.size != null && bytes !== file.size) {
+        throw new Error(`Downloaded size mismatch for ${file.path}: expected ${file.size} bytes, got ${bytes}`);
+      }
       renameSync(tempDestination, destination);
-      const bytes = file.size ?? Bun.file(destination).size;
       downloaded.push({ path: file.path, bytes, destination });
     } catch (error) {
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/models",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "CLI-first local model and dataset lifecycle tool for open-source/open-weight catalogs",
   "type": "module",
   "license": "Apache-2.0",