@hybridlabor-api/bdb-antigravity-skills 1.0.2 → 1.0.3

package/assets/touchdesigner/bootstrap.py

@@ -0,0 +1,106 @@
+"""One-paste TouchDesigner bridge bootstrap (no clone, no Preferences).
+
+Paste this single line into the Textport (Dialogs -> Textport and DATs) and the
+bridge installs itself and starts:
+
+    import urllib.request; exec(urllib.request.urlopen("https://github.com/Pantani/tdmcp/raw/v0.11.0/td/bootstrap.py").read().decode())
+
+That release-pinned snippet downloads just the bridge modules to
+~/tdmcp-bridge/modules, puts them on sys.path for this session, and runs
+install.run() -> a tdmcp_bridge on port 9980.
+
+Requires the GitHub repo (or release zip) to be reachable. If your repo is
+private, point REPO_ZIP at a public release asset, or use `install-bridge`
+(`node dist/index.js install-bridge`) from a local checkout instead.
+"""
+
+import io
+import os
+import stat
+import sys
+import zipfile
+import urllib.request
+
+REPO_ZIP = "https://github.com/Pantani/tdmcp/archive/refs/tags/v0.11.0.zip"
+DEST = os.path.expanduser("~/tdmcp-bridge")
+_MARKER = "/td/modules/"
+_SKIP_RUN_ENV = "TDMCP_BOOTSTRAP_SKIP_RUN"
+
+
+def _is_symlink(info):
+    return stat.S_ISLNK((info.external_attr >> 16) & 0o170000)
+
+
+def _safe_module_path(name, modules_dir):
+    idx = name.find(_MARKER)
+    if idx == -1:
+        return None
+
+    rel = name[idx + len(_MARKER):].replace("\\", "/")
+    if not rel or rel.endswith("/"):
+        return None
+
+    parts = rel.split("/")
+    if (
+        rel.startswith("/")
+        or rel.startswith("\\")
+        or (len(parts[0]) >= 2 and parts[0][1] == ":")
+        or any(part in ("", ".", "..") for part in parts)
+    ):
+        raise RuntimeError("[tdmcp] Refusing unsafe archive entry: %s" % name)
+
+    root = os.path.realpath(modules_dir)
+    target = os.path.realpath(os.path.join(modules_dir, *parts))
+    if target != root and not target.startswith(root + os.sep):
+        raise RuntimeError("[tdmcp] Refusing archive entry outside modules: %s" % name)
+
+    return target
+
+
+def fetch_modules(repo_zip=REPO_ZIP, dest=DEST):
+    """Download the repo zip and extract only its td/modules tree into dest/modules."""
+    modules_dir = os.path.join(dest, "modules")
+    try:
+        data = urllib.request.urlopen(repo_zip, timeout=30).read()
+    except Exception as exc:  # noqa: BLE001 - surface a friendly hint in the Textport
+        raise RuntimeError(
+            "[tdmcp] Could not download the bridge from %r (%s). If the repo is "
+            "private, use a public release asset or the local 'install-bridge' "
+            "command instead." % (repo_zip, exc)
+        )
+
+    zf = zipfile.ZipFile(io.BytesIO(data))
+    os.makedirs(modules_dir, exist_ok=True)
+    extracted = 0
+    for info in zf.infolist():
+        name = info.filename
+        if name.endswith("/"):
+            continue
+        target = _safe_module_path(name, modules_dir)
+        if target is None:
+            continue
+        if _is_symlink(info):
+            raise RuntimeError("[tdmcp] Refusing symlink archive entry: %s" % name)
+        os.makedirs(os.path.dirname(target), exist_ok=True)
+        with zf.open(name) as src, open(target, "wb") as out:
+            out.write(src.read())
+        extracted += 1
+
+    if extracted == 0:
+        raise RuntimeError("[tdmcp] Downloaded archive had no td/modules — wrong REPO_ZIP?")
+    print("[tdmcp] bridge modules -> %s (%d files)" % (modules_dir, extracted))
+    return modules_dir
+
+
+def run(repo_zip=REPO_ZIP, dest=DEST, port=9980):
+    modules_dir = fetch_modules(repo_zip, dest)
+    if modules_dir not in sys.path:
+        sys.path.insert(0, modules_dir)
+    from mcp import install
+
+    return install.run(port=port, modules_dir=modules_dir)
+
+
+# Running via exec(urlopen(...).read()) or as a script kicks off the install.
+if os.environ.get(_SKIP_RUN_ENV) != "1":
+    run()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hybridlabor-api/bdb-antigravity-skills",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Optimized Antigravity skills and MCP pack for BDB DEV",
   "main": "installer.sh",
   "bin": {
@@ -14,6 +14,7 @@
     "mcp_config.json",
     "GEMINI.md",
     "skilloverview.html",
+    "assets/",
     "skills/"
   ],
   "author": "BDB DEV",