@previewio/cli 0.2.0-fd47087 → 0.2.1

package/install.mjs

@@ -1,3 +1,4 @@
+import { createHash, createPublicKey, verify } from 'node:crypto';
 import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -6,6 +7,11 @@ const PUBLIC_DOWNLOAD_ORIGIN = 'https://download.preview.io';
 const VERSION_PATTERN = /^[A-Za-z0-9._-]+$/;
 const RESERVED_VERSIONS = new Set(['latest', 'install', '.', '..']);
 const BINARY_FETCH_TIMEOUT_MS = 120_000;
+// Keep in sync with RELEASE_PUBLIC_KEY in ../lib/releaseManifest.ts.
+export const RELEASE_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEARY3NBSxJGOGpQ/PSsPGwETOBdI2Nw3s8Gl6LTEuQDLE=
+-----END PUBLIC KEY-----
+`;
 
 export function binaryObjectName(platform, arch) {
   if (platform === 'darwin' && arch === 'arm64') return 'preview-darwin-arm64';
@@ -81,6 +87,28 @@ function packageVersion(packageRoot) {
   return JSON.parse(readFileSync(join(packageRoot, 'package.json'), 'utf8')).version;
 }
 
+async function fetchBytes(url, fetchImpl) {
+  const response = await fetchImpl(url, { signal: AbortSignal.timeout(BINARY_FETCH_TIMEOUT_MS) });
+  if (!response.ok) throw new Error(`Failed to download ${url} (${response.status})`);
+  return new Uint8Array(await response.arrayBuffer());
+}
+
+async function signedDigest(origin, version, object, fetchImpl, publicKey) {
+  const [manifest, signature] = await Promise.all([
+    fetchBytes(downloadUrl(origin, version, 'manifest.json'), fetchImpl),
+    fetchBytes(downloadUrl(origin, version, 'manifest.json.sig'), fetchImpl),
+  ]);
+  const decoded = Buffer.from(new TextDecoder().decode(signature).trim(), 'base64');
+  if (!verify(null, manifest, createPublicKey(publicKey), decoded)) {
+    throw new Error(`Refused Preview CLI ${version}: the release signature did not verify`);
+  }
+  const parsed = JSON.parse(new TextDecoder().decode(manifest));
+  const digest = parsed?.version === version ? parsed.files?.[object] : undefined;
+  if (typeof digest !== 'string')
+    throw new Error(`Refused Preview CLI ${version}: ${object} is not in the signed release`);
+  return digest;
+}
+
 async function fetchBinary(url, fetchImpl) {
   const response = await fetchImpl(url, { signal: AbortSignal.timeout(BINARY_FETCH_TIMEOUT_MS) });
   if (!response.ok) {
@@ -104,10 +132,23 @@ export async function install(opts = {}) {
   }
   const url = downloadUrl(opts.origin ?? PUBLIC_DOWNLOAD_ORIGIN, version, object);
   const dest = join(opts.binDir ?? join(packageRoot, 'bin'), installedBinaryName(platform));
-  const bytes = await fetchBinary(url, opts.fetch ?? globalThis.fetch);
+  const fetchImpl = opts.fetch ?? globalThis.fetch;
+  const [bytes, digest] = await Promise.all([
+    fetchBinary(url, fetchImpl),
+    signedDigest(
+      opts.origin ?? PUBLIC_DOWNLOAD_ORIGIN,
+      version,
+      object,
+      fetchImpl,
+      opts.publicKey ?? RELEASE_PUBLIC_KEY,
+    ),
+  ]);
   if (bytes.byteLength === 0 || !looksLikePublishedBinary(bytes, platform)) {
     throw new Error(`Refused non-binary body from ${url}`);
   }
+  if (createHash('sha256').update(bytes).digest('hex') !== digest) {
+    throw new Error(`Refused ${url}: it does not match the signed release`);
+  }
   mkdirSync(dirname(dest), { recursive: true });
   const tmp = `${dest}.download`;
   writeFileSync(tmp, bytes);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@previewio/cli",
-  "version": "0.2.0-fd47087",
+  "version": "0.2.1",
   "description": "Preview CLI — JSON-first client for agentic tooling",
   "license": "UNLICENSED",
   "repository": {