@mutmutco/installer-face 0.4.3 → 0.4.5

package/dist/install.ps1

@@ -0,0 +1,250 @@
+#Requires -Version 5.1
+# One-line installer for %%PRODUCT%% (launcher %%VERSION%%).
+# Served at %%BASE%% -- run with:
+#   irm %%BASE%% | iex
+#
+# The origin substitutes %%PRODUCT%%, %%BASE%% and %%VERSION%% before serving this file.
+# The product name is never read from an argument, an environment variable or a prompt.
+#
+# Windows PowerShell 5.1 compatible: no ternary operator, no null-coalescing, no pwsh-only cmdlets.
+
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+
+$Product = '%%PRODUCT%%'
+$Base = '%%BASE%%'
+$Version = '%%VERSION%%'
+
+%%FACE%%
+
+# A refusal wears the face too (#6789): `Write-FaceRefusal` draws it, so an install that succeeds
+# looks like the product and one that fails does not read as a bare shell error — the moment a
+# person most needs to see who is talking. Still stderr, still plain when piped or NO_COLOR; the
+# package's block sets [Console]::OutputEncoding to UTF-8 before the first glyph.
+function Write-Refusal {
+    param([string] $Message)
+    Write-FaceRefusal $Message
+}
+
+# Maps the running Windows architecture to the artifact token. Returns '' when unsupported.
+# SHA-256 without a cmdlet (#6803). `Get-FileHash` lives in Microsoft.PowerShell.Utility and is
+# normally autoloaded — but this script is pasted into WHATEVER shell the person happens to have,
+# and a PSModulePath inherited from PowerShell 7 left Windows PowerShell 5.1 unable to resolve its
+# own Utility cmdlets: the install downloaded, then died at the checksum. The verification step is
+# the one place that must never depend on luck, so it uses .NET, which exists wherever PowerShell
+# runs at all. Returns lowercase hex, or '' when the file cannot be read.
+function Get-Sha256Hex {
+    param([string] $Path)
+    $sha = $null
+    $stream = $null
+    try {
+        $sha = [System.Security.Cryptography.SHA256]::Create()
+        $stream = [System.IO.File]::OpenRead($Path)
+        $bytes = $sha.ComputeHash($stream)
+        $builder = New-Object System.Text.StringBuilder
+        foreach ($b in $bytes) { [void] $builder.Append($b.ToString('x2')) }
+        return $builder.ToString()
+    }
+    catch {
+        return ''
+    }
+    finally {
+        if ($null -ne $stream) { $stream.Dispose() }
+        if ($null -ne $sha) { $sha.Dispose() }
+    }
+}
+
+# Download without a cmdlet, for the same reason (#6803): `Invoke-WebRequest` is Utility too, and a
+# shell that cannot autoload it cannot install at all. TLS 1.2 is forced because 5.1 still defaults
+# to SSL3/TLS1 on older builds and the box refuses those. Returns $true on success.
+function Save-Download {
+    param([string] $Uri, [string] $OutFile, [string] $UserAgent)
+    try {
+        [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12
+    }
+    catch {
+        # An older .NET without the enum value: leave the default and let the request decide.
+    }
+    $client = $null
+    try {
+        $client = New-Object System.Net.WebClient
+        $client.Headers.Add('User-Agent', $UserAgent)
+        $client.DownloadFile($Uri, $OutFile)
+        return $true
+    }
+    catch {
+        return $false
+    }
+    finally {
+        if ($null -ne $client) { $client.Dispose() }
+    }
+}
+
+function Get-InstallerArch {
+    $raw = $env:PROCESSOR_ARCHITEW6432
+    if ([string]::IsNullOrEmpty($raw)) {
+        $raw = $env:PROCESSOR_ARCHITECTURE
+    }
+    if ($raw -eq 'AMD64') {
+        return 'x64'
+    }
+    return ''
+}
+
+# True when $Directory is already one of the entries in the ';'-separated $PathValue.
+function Test-PathEntry {
+    param([string] $PathValue, [string] $Directory)
+    if ([string]::IsNullOrEmpty($PathValue)) {
+        return $false
+    }
+    $wanted = $Directory.TrimEnd('\')
+    foreach ($entry in $PathValue.Split(';')) {
+        $candidate = $entry.Trim().TrimEnd('\')
+        if ($candidate.Length -gt 0 -and $candidate -ieq $wanted) {
+            return $true
+        }
+    }
+    return $false
+}
+
+function Install-Launcher {
+    [Net.ServicePointManager]::SecurityProtocol =
+        [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
+
+    Write-FaceWelcome
+
+    $arch = Get-InstallerArch
+    if ($arch -ne 'x64') {
+        Write-Refusal "Unsupported CPU architecture for $Product on Windows; only x64 is supported."
+        return 1
+    }
+    Write-FaceStep "Checked this machine: Windows $arch" ([DateTime]::UtcNow)
+
+    $url = "https://$Base/dl/$Product/win-$arch"
+    $userAgent = "$Product-installer/$Version"
+    $tmpDir = Join-Path $env:TEMP ("$Product-install-" + [Guid]::NewGuid().ToString('N'))
+    $exitCode = 1
+
+    try {
+        [void] [System.IO.Directory]::CreateDirectory($tmpDir)
+        $payload = Join-Path $tmpDir 'payload'
+        $sumFile = Join-Path $tmpDir 'payload.sha256'
+
+        $stepStarted = [DateTime]::UtcNow
+        if (-not (Save-Download $url $payload $userAgent)) {
+            Write-Refusal "Could not download $Product from $url."
+            return 1
+        }
+
+        if (-not (Save-Download "$url.sha256" $sumFile $userAgent)) {
+            Write-Refusal "Could not download the checksum from $url.sha256."
+            return 1
+        }
+        Write-FaceStep 'Downloaded the launcher' $stepStarted
+
+        $expected = ''
+        try {
+            $firstLine = [System.IO.File]::ReadAllLines($sumFile) | Select-Object -First 1
+            if ($null -ne $firstLine) {
+                $fields = ([string] $firstLine).Trim() -split '\s+'
+                $expected = $fields[0]
+            }
+        }
+        catch {
+            $expected = ''
+        }
+        if ([string]::IsNullOrEmpty($expected)) {
+            Write-Refusal "The checksum published for $Product is empty or malformed."
+            return 1
+        }
+
+        $stepStarted = [DateTime]::UtcNow
+        $actual = Get-Sha256Hex $payload
+        if ([string]::IsNullOrEmpty($actual)) {
+            Write-Refusal "Could not read the downloaded file to verify it; nothing was installed."
+            return 1
+        }
+        if ($actual.ToLowerInvariant() -ne $expected.ToLowerInvariant()) {
+            Write-Refusal "Checksum mismatch for $Product; the download was discarded and nothing was installed."
+            return 1
+        }
+        Write-FaceStep 'Verified the SHA-256 checksum' $stepStarted
+
+        $stepStarted = [DateTime]::UtcNow
+        $binDir = Join-Path $env:LOCALAPPDATA (Join-Path $Product 'bin')
+        $exePath = Join-Path $binDir "$Product.exe"
+        try {
+            [void] [System.IO.Directory]::CreateDirectory($binDir)
+            if ([System.IO.File]::Exists($exePath)) { [System.IO.File]::Delete($exePath) }
+            [System.IO.File]::Move($payload, $exePath)
+        }
+        catch {
+            Write-Refusal "Could not install $Product into $binDir."
+            return 1
+        }
+
+        try {
+            $userPath = [Environment]::GetEnvironmentVariable('Path', 'User')
+            if ($null -eq $userPath) {
+                $userPath = ''
+            }
+            if (-not (Test-PathEntry $userPath $binDir)) {
+                if ($userPath.Length -eq 0) {
+                    $newPath = $binDir
+                }
+                elseif ($userPath.EndsWith(';')) {
+                    $newPath = $userPath + $binDir
+                }
+                else {
+                    $newPath = $userPath + ';' + $binDir
+                }
+                [Environment]::SetEnvironmentVariable('Path', $newPath, 'User')
+            }
+        }
+        catch {
+            Write-Refusal "Could not add $binDir to your user PATH."
+            return 1
+        }
+
+        $env:Path = $binDir + ';' + $env:Path
+        Write-FaceStep 'Installed the launcher' $stepStarted
+
+        $script:MMInstallerLauncherPath = $exePath
+        $exitCode = 0
+    }
+    finally {
+        Remove-Item -LiteralPath $tmpDir -Recurse -Force -ErrorAction SilentlyContinue
+    }
+
+    return $exitCode
+}
+
+$installerExitCode = Install-Launcher
+if ($installerExitCode -eq 0) {
+    # Invoke outside the setup function's captured return pipeline so the native launcher inherits
+    # the terminal. It continues our welcome and owns the only final receipt.
+    $previousOuter = [Environment]::GetEnvironmentVariable('MM_OUTER_CONSOLE', 'Process')
+    $previousContinues = [Environment]::GetEnvironmentVariable('MM_FACE_CONTINUES', 'Process')
+    try {
+        [Environment]::SetEnvironmentVariable('MM_OUTER_CONSOLE', $null, 'Process')
+        $env:MM_FACE_CONTINUES = 'welcome,preflight'
+        $global:LASTEXITCODE = 0
+        & $script:MMInstallerLauncherPath install
+        $installerExitCode = $LASTEXITCODE
+    }
+    catch {
+        if ($LASTEXITCODE -ne 0) {
+            $installerExitCode = $LASTEXITCODE
+        }
+        else {
+            Write-Refusal "Could not start the $Product launcher; installation did not finish."
+            $installerExitCode = 1
+        }
+    }
+    finally {
+        [Environment]::SetEnvironmentVariable('MM_OUTER_CONSOLE', $previousOuter, 'Process')
+        [Environment]::SetEnvironmentVariable('MM_FACE_CONTINUES', $previousContinues, 'Process')
+    }
+}
+# IEX may run inside a caller script too. Never terminate that caller's session.
+$global:LASTEXITCODE = $installerExitCode

package/dist/install.sh

@@ -0,0 +1,157 @@
+#!/bin/sh
+# One-line installer for %%PRODUCT%% (launcher %%VERSION%%).
+# Served at %%BASE%% — run with:
+#   curl -fsSL %%BASE%% | sh
+#
+# The origin substitutes %%PRODUCT%%, %%BASE%% and %%VERSION%% before serving this file.
+# The product name is never read from an argument, an environment variable or a prompt.
+#
+# POSIX sh only (dash-safe): no bashisms, no eval of downloaded content, curl only.
+
+set -u
+
+PRODUCT='%%PRODUCT%%'
+BASE='%%BASE%%'
+VERSION='%%VERSION%%'
+
+%%FACE%%
+
+# A refusal wears the face too (#6789): `face_refusal` draws it, so an install that succeeds looks
+# like the product and one that fails does not read as a bare shell error — the moment a person
+# most needs to see who is talking. Still stderr, still plain when piped or NO_COLOR.
+fail() {
+  face_refusal "$1"
+  exit 1
+}
+
+# >>> installer-common:begin
+# Pure mapping helpers. installer/scripts/test/run-tests.sh extracts this block and
+# unit-tests it on any host, so keep it free of side effects and of $PRODUCT/$BASE.
+
+# detect_arch <uname -m output> -> arm64 | x64, non-zero exit when unsupported.
+detect_arch() {
+  case "${1:-}" in
+    arm64|aarch64) printf '%s\n' 'arm64' ;;
+    x86_64) printf '%s\n' 'x64' ;;
+    *) return 1 ;;
+  esac
+}
+
+# map_platform <uname -s output> -> darwin | win, non-zero exit when unsupported.
+map_platform() {
+  case "${1:-}" in
+    Darwin) printf '%s\n' 'darwin' ;;
+    MINGW*|MSYS*|CYGWIN*|Windows_NT) printf '%s\n' 'win' ;;
+    *) return 1 ;;
+  esac
+}
+# <<< installer-common:end
+
+# sha256_of <file> -> lowercase hex digest on stdout, empty when no tool is available.
+sha256_of() {
+  if command -v shasum >/dev/null 2>&1; then
+    shasum -a 256 "$1" | cut -d' ' -f1
+  elif command -v sha256sum >/dev/null 2>&1; then
+    sha256sum "$1" | cut -d' ' -f1
+  fi
+}
+
+# ensure_path_entry <rc file> — append one marked block, only when the marker is absent.
+ensure_path_entry() {
+  ensure_rc="$1"
+  ensure_marker="# >>> $PRODUCT installer >>>"
+  if [ -f "$ensure_rc" ] && grep -Fq "$ensure_marker" "$ensure_rc"; then
+    return 0
+  fi
+  {
+    printf '\n%s\n' "$ensure_marker"
+    printf '%s\n' 'case ":$PATH:" in'
+    printf '%s\n' '  *":$HOME/.local/bin:"*) ;;'
+    printf '%s\n' '  *) PATH="$HOME/.local/bin:$PATH" ;;'
+    printf '%s\n' 'esac'
+    printf '%s\n' 'export PATH'
+    printf '%s\n' "# <<< $PRODUCT installer <<<"
+  } >>"$ensure_rc" || fail "Could not add $PRODUCT to your PATH in $ensure_rc."
+}
+
+main() {
+  face_welcome
+
+  if ! command -v curl >/dev/null 2>&1; then
+    fail "curl is required to install $PRODUCT and was not found."
+  fi
+
+  uname_s=$(uname -s)
+  uname_m=$(uname -m)
+
+  platform=$(map_platform "$uname_s") || platform=''
+  if [ "$platform" = 'win' ]; then
+    fail "This script installs $PRODUCT on macOS. On Windows run: irm $BASE | iex"
+  fi
+  if [ -z "$platform" ]; then
+    if [ "$uname_s" = 'Linux' ]; then
+      fail "$PRODUCT does not ship a Linux build; it supports macOS and Windows only."
+    fi
+    fail "Unsupported operating system: $uname_s. $PRODUCT supports macOS and Windows only."
+  fi
+
+  arch=$(detect_arch "$uname_m") ||
+    fail "Unsupported CPU architecture: $uname_m. $PRODUCT supports arm64 and x64."
+  if [ "$platform" = 'darwin' ] && [ "$arch" = 'x64' ]; then
+    fail "Intel Macs are not supported — use an Apple Silicon Mac or Windows."
+  fi
+
+  step_started=$(date +%s)
+  case "$platform" in
+    darwin) face_step "Checked this machine: macOS $arch" "$step_started" ;;
+    *)      face_step "Checked this machine: $platform $arch" "$step_started" ;;
+  esac
+
+  url="https://$BASE/dl/$PRODUCT/$platform-$arch"
+
+  tmpdir=$(mktemp -d) || fail "Could not create a temporary directory."
+  trap 'rm -rf "$tmpdir"' EXIT
+  trap 'rm -rf "$tmpdir"; exit 1' INT TERM
+
+  step_started=$(date +%s)
+  curl -fsSL --proto '=https' --tlsv1.2 -A "$PRODUCT-installer/$VERSION" \
+    -o "$tmpdir/payload" "$url" || fail "Could not download $PRODUCT from $url."
+  curl -fsSL --proto '=https' --tlsv1.2 -A "$PRODUCT-installer/$VERSION" \
+    -o "$tmpdir/payload.sha256" "$url.sha256" || fail "Could not download the checksum from $url.sha256."
+  face_step 'Downloaded the launcher' "$step_started"
+
+  step_started=$(date +%s)
+  expected=$(head -n 1 "$tmpdir/payload.sha256" | cut -d' ' -f1 | tr -d '\r')
+  [ -n "$expected" ] || fail "The checksum published for $PRODUCT is empty or malformed."
+
+  actual=$(sha256_of "$tmpdir/payload")
+  [ -n "$actual" ] || fail "No SHA-256 tool was found; install shasum or sha256sum and retry."
+
+  if [ "$expected" != "$actual" ]; then
+    fail "Checksum mismatch for $PRODUCT; the download was discarded and nothing was installed."
+  fi
+  face_step 'Verified the SHA-256 checksum' "$step_started"
+
+  step_started=$(date +%s)
+  bindir="$HOME/.local/bin"
+  mkdir -p "$bindir" || fail "Could not create $bindir."
+  chmod 0755 "$tmpdir/payload" || fail "Could not make $PRODUCT executable."
+  mv -f "$tmpdir/payload" "$bindir/$PRODUCT" || fail "Could not install $PRODUCT into $bindir."
+
+  ensure_path_entry "$HOME/.zshenv"
+  ensure_path_entry "$HOME/.bashrc"
+
+  rm -rf "$tmpdir"
+  trap - EXIT INT TERM
+  face_step 'Installed the launcher' "$step_started"
+
+  PATH="$bindir:$PATH"
+  export PATH
+
+  # The bootstrap opened the run; the shared launcher owns its actual outcome and receipt.
+  # Exit zero may mean deferred, so the shell must never translate it into a ready claim.
+  MM_OUTER_CONSOLE='' MM_FACE_CONTINUES='welcome,preflight' "$bindir/$PRODUCT" install
+  return "$?"
+}
+
+main

package/dist/maintenance.d.ts

@@ -8,6 +8,8 @@ export interface MaintenanceArm {
     detail: string;
     repeatFailure?: boolean;
     launchStaged?: boolean;
+    /** Engine-measured surface work, excluding discovery and time between callbacks. */
+    durationMs?: number;
 }
 export interface MaintenanceSummary {
     target: string | null;

package/dist/run.d.ts

@@ -22,6 +22,7 @@ declare const PHASES: {
     readonly 'verify-release': readonly ["Checking the release version", "Verified the release version"];
     readonly verify: readonly ["Verifying the payload", "Verified the payload"];
     readonly install: readonly ["Installing the product", "Installed the product"];
+    readonly configure: readonly ["Configuring the product", "Configured the product"];
     readonly activate: readonly ["Activating surfaces", "Activated surfaces"];
     readonly doctor: readonly ["Checking health", "Checked health"];
     readonly rollback: readonly ["Restoring the previous version", "Restored the previous version"];
@@ -76,16 +77,18 @@ export declare function createInstallerRun(value: unknown, options?: InstallerRu
     start: () => void;
     phase(id: InstallerPhase, facts?: InstallerPhaseFacts): void;
     surface(facts: InstallerSurfaceFacts): void;
-    milestone({ step, state, ms }: {
+    milestone({ step, state, ms, measure }: {
         step: string;
-        state: StepKind;
+        state: StepKind | "running";
         ms?: number;
+        measure?: string;
     }): void;
     signIn({ url, code }: {
         url: string;
         code: string;
     }): void;
     relay(text: string, channel?: InstallerChannel, record?: boolean): void;
+    relayChunk(text: string, channel?: InstallerChannel): void;
     cancel(): void;
     finish(facts: InstallerFinish): void;
     stop(): void;

package/dist/spinner.d.ts

@@ -6,6 +6,8 @@ export interface Spinner {
     say(text: string, measure?: StepMeasure): void;
     /** Stop and CLEAR the line. Always call before writing the durable step line. */
     stop(): void;
+    pause(): void;
+    resume(): void;
 }
 export interface SpinnerOptions {
     /** False writes nothing at all: no frames, no escape codes, no cleared lines. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/installer-face",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "The MM Terminal Line installer face: one renderer, the canonical product table, shell/PowerShell fragments for served one-liners, and the drift guard every surface runs.",
   "type": "module",
   "license": "UNLICENSED",
@@ -8,6 +8,9 @@
     "node": ">=22"
   },
   "exports": {
+    "./install.html.template": "./dist/install.html.template",
+    "./install.sh": "./dist/install.sh",
+    "./install.ps1": "./dist/install.ps1",
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",