brew-tui 0.1.0 → 0.2.0

package/README.md

@@ -100,6 +100,8 @@ xcodebuild -workspace BrewBar.xcworkspace -scheme BrewBar build
 - **Homebrew** installed on your system
 - **macOS** 14+ (for BrewBar)
 
+> **Note:** Brew-TUI is designed for dark terminal backgrounds. Light terminal themes may have reduced visibility.
+
 ## License
 
 [MIT](LICENSE) -- MoLines Designs

package/build/{brewbar-installer-CPCOE3MI.js → brewbar-installer-4Z2WE57I.js}

@@ -1,11 +1,14 @@
 import {
+  fetchWithTimeout,
   t,
+  useLicenseStore,
   verifyPro
-} from "./chunk-P6PTN4HR.js";
+} from "./chunk-KXDTKY3E.js";
 
 // src/lib/brewbar-installer.ts
-import { rm, access } from "fs/promises";
+import { rm, access, readFile } from "fs/promises";
 import { createWriteStream } from "fs";
+import { createHash } from "crypto";
 import { pipeline } from "stream/promises";
 import { execFile } from "child_process";
 import { promisify } from "util";
@@ -25,19 +28,39 @@ async function installBrewBar(force = false) {
   if (process.platform !== "darwin") {
     throw new Error(t("cli_brewbarMacOnly"));
   }
-  if (!verifyPro()) {
+  const { license, status } = useLicenseStore.getState();
+  if (!verifyPro(license, status)) {
     throw new Error(t("cli_brewbarProRequired"));
   }
   if (!force && await isBrewBarInstalled()) {
     throw new Error(t("cli_brewbarAlreadyInstalled"));
   }
   console.log(t("cli_brewbarInstalling"));
-  const res = await fetch(DOWNLOAD_URL);
+  const res = await fetchWithTimeout(DOWNLOAD_URL, {}, 12e4);
   if (!res.ok || !res.body) {
     throw new Error(t("cli_brewbarDownloadFailed", { error: `HTTP ${res.status}` }));
   }
+  const contentLength = Number(res.headers.get("content-length") ?? "0");
+  if (contentLength > 200 * 1024 * 1024) {
+    throw new Error(t("cli_brewbarDownloadFailed", { error: "Download exceeds 200 MB size limit" }));
+  }
   const fileStream = createWriteStream(TMP_ZIP);
   await pipeline(res.body, fileStream);
+  try {
+    const checksumRes = await fetchWithTimeout(`${DOWNLOAD_URL}.sha256`, {}, 15e3);
+    if (checksumRes.ok) {
+      const expected = (await checksumRes.text()).trim().split(/\s+/)[0].toLowerCase();
+      const fileBuffer = await readFile(TMP_ZIP);
+      const actual = createHash("sha256").update(fileBuffer).digest("hex");
+      if (actual !== expected) {
+        await rm(TMP_ZIP, { force: true }).catch(() => {
+        });
+        throw new Error(t("cli_brewbarDownloadFailed", { error: "SHA-256 checksum mismatch" }));
+      }
+    }
+  } catch (err) {
+    if (err instanceof Error && err.message.includes("checksum mismatch")) throw err;
+  }
   if (force && await isBrewBarInstalled()) {
     await rm(BREWBAR_APP_PATH, { recursive: true, force: true });
   }
@@ -61,4 +84,3 @@ export {
   isBrewBarInstalled,
   uninstallBrewBar
 };
-//# sourceMappingURL=brewbar-installer-CPCOE3MI.js.map

package/build/{chunk-P6PTN4HR.js → chunk-KXDTKY3E.js}

@@ -231,13 +231,13 @@ var en = {
   account_nameLabel: "Name:",
   account_planLabel: "Plan:",
   account_monthlyPrice: "9\u20AC/month",
-  account_yearlyPrice: "49\u20AC/year",
+  account_lifetimePrice: "29\u20AC lifetime",
   account_keyLabel: "Key:",
   account_expiresLabel: "Expires:",
   account_activatedLabel: "Activated:",
   account_upgradeTitle: "Upgrade to Brew-TUI Pro",
   account_unlockDesc: "Unlock Profiles, Smart Cleanup, History, Security Audit, and BrewBar (macOS menu bar companion).",
-  account_pricing: "9\u20AC/month or 49\u20AC/year",
+  account_pricing: "9\u20AC/month or 29\u20AC lifetime",
   account_runActivate: "Run:",
   account_activateCmd: "brew-tui activate <key>",
   account_licenseExpired: "Your license has expired. Renew to continue using Pro features.",
@@ -252,10 +252,12 @@ var en = {
   upgrade_historyDesc: "Track every install, uninstall, and upgrade with timestamps. Search and filter your package management history.",
   upgrade_security: "Security Audit",
   upgrade_securityDesc: "Scan installed packages against known vulnerabilities (CVEs). See severity levels, affected versions, and available fixes.",
-  upgrade_pricing: "9\u20AC/month or 49\u20AC/year",
-  upgrade_activateWith: "Activate with:",
+  upgrade_pricing: "9\u20AC/month or 29\u20AC lifetime",
+  upgrade_buyAt: "Buy at:",
+  upgrade_buyUrl: "https://buy.polar.sh/polar_cl_QW1ZJ9887bU74drGr7JfujQfm3RKYnn1fuvc53DqD6D",
+  upgrade_activateWith: "Then activate with:",
   upgrade_activateCmd: "brew-tui activate <your-license-key>",
-  upgrade_proLabel: "Brew-TUI Pro \u2014 9\u20AC/month or 49\u20AC/year \u2014 Includes BrewBar for macOS",
+  upgrade_proLabel: "Brew-TUI Pro \u2014 9\u20AC/month or 29\u20AC lifetime \u2014 Includes BrewBar for macOS",
   // ── Progress Log ──
   progress_noOutput: "No output yet",
   // ── Search Input ──
@@ -290,6 +292,7 @@ var en = {
   cli_brewbarProRequired: "\u2718 BrewBar requires a Pro license.\n  Run: brew-tui activate <key>",
   cli_brewbarMacOnly: "\u2718 BrewBar is only available on macOS.",
   cli_brewbarDownloadFailed: "\u2718 Failed to download BrewBar: {{error}}",
+  cli_deactivateRemoteFailed: "\u26A0 Warning: Could not reach the server to deactivate remotely. The license was removed locally but may still count as active.",
   // ── License degradation (Layer 15) ──
   license_offlineWarning: "Your license has not been validated for {{days}} days. Please connect to the internet.",
   // ── Plurals ──
@@ -533,13 +536,13 @@ var es = {
   account_nameLabel: "Nombre:",
   account_planLabel: "Plan:",
   account_monthlyPrice: "9\u20AC/mes",
-  account_yearlyPrice: "49\u20AC/a\xF1o",
+  account_lifetimePrice: "29\u20AC de por vida",
   account_keyLabel: "Clave:",
   account_expiresLabel: "Expira:",
   account_activatedLabel: "Activado:",
   account_upgradeTitle: "Actualiza a Brew-TUI Pro",
   account_unlockDesc: "Desbloquea Perfiles, Limpieza Inteligente, Historial, Auditor\xEDa de Seguridad y BrewBar (barra de men\xFA macOS).",
-  account_pricing: "9\u20AC/mes o 49\u20AC/a\xF1o",
+  account_pricing: "9\u20AC/mes o 29\u20AC de por vida",
   account_runActivate: "Ejecuta:",
   account_activateCmd: "brew-tui activate <clave>",
   account_licenseExpired: "Tu licencia ha expirado. Renueva para seguir usando las funciones Pro.",
@@ -554,10 +557,12 @@ var es = {
   upgrade_historyDesc: "Rastrea cada instalaci\xF3n, desinstalaci\xF3n y actualizaci\xF3n con marcas de tiempo. Busca y filtra tu historial de gesti\xF3n de paquetes.",
   upgrade_security: "Auditor\xEDa de Seguridad",
   upgrade_securityDesc: "Escanea paquetes instalados contra vulnerabilidades conocidas (CVEs). Ve niveles de severidad, versiones afectadas y correcciones disponibles.",
-  upgrade_pricing: "9\u20AC/mes o 49\u20AC/a\xF1o",
-  upgrade_activateWith: "Activa con:",
+  upgrade_pricing: "9\u20AC/mes o 29\u20AC de por vida",
+  upgrade_buyAt: "Compra en:",
+  upgrade_buyUrl: "https://buy.polar.sh/polar_cl_QW1ZJ9887bU74drGr7JfujQfm3RKYnn1fuvc53DqD6D",
+  upgrade_activateWith: "Luego activa con:",
   upgrade_activateCmd: "brew-tui activate <tu-clave-de-licencia>",
-  upgrade_proLabel: "Brew-TUI Pro \u2014 9\u20AC/mes o 49\u20AC/a\xF1o \u2014 Incluye BrewBar para macOS",
+  upgrade_proLabel: "Brew-TUI Pro \u2014 9\u20AC/mes o 29\u20AC de por vida \u2014 Incluye BrewBar para macOS",
   // ── Progress Log ──
   progress_noOutput: "Sin salida a\xFAn",
   // ── Search Input ──
@@ -592,6 +597,7 @@ var es = {
   cli_brewbarProRequired: "\u2718 BrewBar requiere una licencia Pro.\n  Ejecuta: brew-tui activate <clave>",
   cli_brewbarMacOnly: "\u2718 BrewBar solo est\xE1 disponible en macOS.",
   cli_brewbarDownloadFailed: "\u2718 Error al descargar BrewBar: {{error}}",
+  cli_deactivateRemoteFailed: "\u26A0 Advertencia: No se pudo contactar al servidor para desactivar remotamente. La licencia se elimin\xF3 localmente pero puede seguir contando como activa.",
   // ── License degradation (Layer 15) ──
   license_offlineWarning: "Tu licencia no se ha validado en {{days}} d\xEDas. Por favor con\xE9ctate a internet.",
   // ── Plurals ──
@@ -649,12 +655,17 @@ var PROFILES_DIR = join(DATA_DIR, "profiles");
 var LICENSE_PATH = join(DATA_DIR, "license.json");
 var HISTORY_PATH = join(DATA_DIR, "history.json");
 async function ensureDataDirs() {
-  await mkdir(DATA_DIR, { recursive: true });
-  await mkdir(PROFILES_DIR, { recursive: true });
+  await mkdir(DATA_DIR, { recursive: true, mode: 448 });
+  await mkdir(PROFILES_DIR, { recursive: true, mode: 448 });
+}
+
+// src/lib/fetch-timeout.ts
+function fetchWithTimeout(url, options = {}, timeoutMs = 15e3) {
+  return fetch(url, { ...options, signal: AbortSignal.timeout(timeoutMs) });
 }
 
 // src/lib/license/license-manager.ts
-import { readFile, writeFile, rm } from "fs/promises";
+import { readFile, writeFile, rename, rm } from "fs/promises";
 import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto";
 
 // src/lib/license/polar-api.ts
@@ -673,11 +684,11 @@ function validateApiUrl(url) {
 async function post(endpoint, body, expectEmpty = false) {
   const url = `${BASE_URL}/${endpoint}`;
   validateApiUrl(url);
-  const res = await fetch(url, {
+  const res = await fetchWithTimeout(url, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
-  });
+  }, 15e3);
   if (!res.ok) {
     let message = `Request failed with status ${res.status}`;
     try {
@@ -789,8 +800,9 @@ function recordAttempt(success) {
 }
 var ENCRYPTION_SECRET = "brew-tui-license-aes256gcm-v1";
 var SCRYPT_SALT = "brew-tui-salt-v1";
-var _derivedKey = scryptSync(ENCRYPTION_SECRET, SCRYPT_SALT, 32);
+var _derivedKey = null;
 function deriveEncryptionKey() {
+  if (!_derivedKey) _derivedKey = scryptSync(ENCRYPTION_SECRET, SCRYPT_SALT, 32);
   return _derivedKey;
 }
 function encryptLicenseData(data) {
@@ -824,6 +836,9 @@ async function loadLicense() {
   try {
     const raw = await readFile(LICENSE_PATH, "utf-8");
     const file = JSON.parse(raw);
+    if (file.version !== 1) {
+      throw new Error("Unsupported data version");
+    }
     if (file.encrypted && file.iv && file.tag) {
       const data = decryptLicenseData(file.encrypted, file.iv, file.tag);
       return data;
@@ -842,7 +857,9 @@ async function saveLicense(data) {
   await ensureDataDirs();
   const { encrypted, iv, tag } = encryptLicenseData(data);
   const file = { version: 1, encrypted, iv, tag };
-  await writeFile(LICENSE_PATH, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
+  const tmpPath = LICENSE_PATH + ".tmp";
+  await writeFile(tmpPath, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
+  await rename(tmpPath, LICENSE_PATH);
 }
 async function clearLicense() {
   try {
@@ -930,23 +947,52 @@ async function revalidate(license) {
   }
 }
 async function deactivate(license) {
-  try {
-    await deactivateLicense(license.key, license.instanceId);
-  } catch {
+  let remoteSuccess = false;
+  for (let attempt = 0; attempt < 3; attempt++) {
+    try {
+      await deactivateLicense(license.key, license.instanceId);
+      remoteSuccess = true;
+      break;
+    } catch {
+      if (attempt < 2) await new Promise((r) => setTimeout(r, 1e3));
+    }
   }
   await clearLicense();
+  return { remoteSuccess };
 }
 
 // src/stores/license-store.ts
 import { create as create2 } from "zustand";
+
+// src/lib/license/anti-tamper.ts
+var _originalIsPro = null;
+var _originalGetState = null;
+var _storeApi = null;
+function initStoreIntegrity(store) {
+  _storeApi = store;
+  _originalIsPro = store.getState().isPro;
+  _originalGetState = store.getState;
+}
+function verifyStoreIntegrity() {
+  if (!_storeApi || !_originalIsPro || !_originalGetState) return false;
+  const state = _storeApi.getState();
+  if (state.isPro !== _originalIsPro) return false;
+  if (_storeApi.getState !== _originalGetState) return false;
+  if (state.status === "free" && state.isPro()) return false;
+  return true;
+}
+
+// src/stores/license-store.ts
 var REVALIDATION_CHECK_MS = 60 * 60 * 1e3;
 var _revalidating = false;
+var _revalidationInterval = null;
 var useLicenseStore = create2((set, get) => ({
-  status: "free",
+  status: "validating",
   license: null,
   error: null,
   degradation: "none",
   initialize: async () => {
+    initStoreIntegrity(useLicenseStore);
     await ensureDataDirs();
     const license = await loadLicense();
     if (!license) {
@@ -977,7 +1023,8 @@ var useLicenseStore = create2((set, get) => ({
         _revalidating = false;
       }
     }
-    setInterval(async () => {
+    if (_revalidationInterval) clearInterval(_revalidationInterval);
+    _revalidationInterval = setInterval(async () => {
       const current = get().license;
       if (!current || get().status !== "pro") return;
       if (!needsRevalidation(current)) return;
@@ -994,7 +1041,8 @@ var useLicenseStore = create2((set, get) => ({
       } finally {
         _revalidating = false;
       }
-    }, REVALIDATION_CHECK_MS).unref();
+    }, REVALIDATION_CHECK_MS);
+    _revalidationInterval.unref();
   },
   activate: async (key) => {
     set({ error: null });
@@ -1011,7 +1059,11 @@ var useLicenseStore = create2((set, get) => ({
   deactivate: async () => {
     const { license } = get();
     if (license) {
-      await deactivate(license);
+      const { remoteSuccess } = await deactivate(license);
+      if (!remoteSuccess) {
+        set({ status: "free", license: null, error: "License removed locally but server deactivation failed. It may remain active remotely." });
+        return;
+      }
     }
     set({ status: "free", license: null, error: null });
   },
@@ -1021,24 +1073,13 @@ var useLicenseStore = create2((set, get) => ({
 // src/lib/license/anti-debug.ts
 import inspector from "inspector";
 function isDebuggerAttached() {
-  if (process.env.VITEST || process.env.CI) return false;
+  if (false) return false;
   if (inspector.url()) return true;
   if (process.execArgv.some((a) => a.includes("--inspect") || a.includes("--debug"))) return true;
   if (process.env.NODE_OPTIONS?.includes("--inspect")) return true;
   return false;
 }
 
-// src/lib/license/anti-tamper.ts
-var _originalIsPro = useLicenseStore.getState().isPro;
-var _originalGetState = useLicenseStore.getState;
-function verifyStoreIntegrity() {
-  const state = useLicenseStore.getState();
-  if (state.isPro !== _originalIsPro) return false;
-  if (useLicenseStore.getState !== _originalGetState) return false;
-  if (state.status === "free" && state.isPro()) return false;
-  return true;
-}
-
 // src/lib/license/canary.ts
 var _canaryTripped = false;
 function isProUnlocked() {
@@ -1096,29 +1137,26 @@ function checkBundleIntegrity() {
 }
 
 // src/lib/license/pro-guard.ts
-var _S = String.fromCharCode(115, 116, 97, 116, 117, 115);
 var _P = String.fromCharCode(112, 114, 111);
-function _verify() {
-  const state = useLicenseStore.getState();
-  return state[_S] === _P;
+function _verify(status) {
+  return status === _P;
 }
-function verifyPro() {
+function verifyPro(license, status) {
   if (isDebuggerAttached()) return false;
   if (!checkBundleIntegrity()) return false;
   if (!verifyStoreIntegrity()) return false;
   if (!checkCanaries()) return false;
-  const directCheck = useLicenseStore.getState().status === "pro";
-  const indirectCheck = _verify();
+  const directCheck = status === "pro";
+  const indirectCheck = _verify(status);
   if (!directCheck || !indirectCheck) return false;
-  const license = useLicenseStore.getState().license;
   if (license) {
     const level = getDegradationLevel(license);
     if (level === "expired" || level === "limited") return false;
   }
   return true;
 }
-function requirePro() {
-  if (!verifyPro()) {
+function requirePro(license, status) {
+  if (!verifyPro(license, status)) {
     throw new Error("Pro license required");
   }
 }
@@ -1130,6 +1168,7 @@ export {
   PROFILES_DIR,
   HISTORY_PATH,
   ensureDataDirs,
+  fetchWithTimeout,
   loadLicense,
   activate,
   deactivate,
@@ -1137,4 +1176,3 @@ export {
   verifyPro,
   requirePro
 };
-//# sourceMappingURL=chunk-P6PTN4HR.js.map

package/build/chunk-UBHTQL7T.js

@@ -0,0 +1,76 @@
+import {
+  HISTORY_PATH,
+  ensureDataDirs,
+  requirePro,
+  useLicenseStore
+} from "./chunk-KXDTKY3E.js";
+
+// src/lib/history/history-logger.ts
+import { readFile, writeFile, rename } from "fs/promises";
+import { randomUUID } from "crypto";
+var MAX_ENTRIES = 1e3;
+function detectAction(args) {
+  const cmd = args[0];
+  if (cmd === "install") return { action: "install", packageName: args[1] ?? null };
+  if (cmd === "uninstall") {
+    const name = args.find((a) => !a.startsWith("-")) === "uninstall" ? args.find((a, i) => i > 0 && !a.startsWith("-")) ?? null : args[1] ?? null;
+    return { action: "uninstall", packageName: name };
+  }
+  if (cmd === "upgrade") {
+    if (args.length === 1) return { action: "upgrade-all", packageName: null };
+    return { action: "upgrade", packageName: args[1] ?? null };
+  }
+  return null;
+}
+async function loadHistory() {
+  const { license, status } = useLicenseStore.getState();
+  requirePro(license, status);
+  try {
+    const raw = await readFile(HISTORY_PATH, "utf-8");
+    const file = JSON.parse(raw);
+    if (file.version !== 1) {
+      throw new Error("Unsupported data version");
+    }
+    const entries = file.entries;
+    return Array.isArray(entries) ? entries : [];
+  } catch {
+    return [];
+  }
+}
+async function saveHistory(entries) {
+  await ensureDataDirs();
+  const file = { version: 1, entries };
+  const tmp = HISTORY_PATH + ".tmp";
+  await writeFile(tmp, JSON.stringify(file, null, 2), { encoding: "utf-8", mode: 384 });
+  await rename(tmp, HISTORY_PATH);
+}
+async function appendEntry(action, packageName, success, error = null) {
+  const { license, status } = useLicenseStore.getState();
+  requirePro(license, status);
+  const entries = await loadHistory();
+  const entry = {
+    id: randomUUID(),
+    action,
+    packageName,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    success,
+    error
+  };
+  entries.unshift(entry);
+  if (entries.length > MAX_ENTRIES) {
+    entries.length = MAX_ENTRIES;
+  }
+  await saveHistory(entries);
+}
+async function clearHistory() {
+  const { license, status } = useLicenseStore.getState();
+  requirePro(license, status);
+  await saveHistory([]);
+}
+
+export {
+  detectAction,
+  loadHistory,
+  appendEntry,
+  clearHistory
+};

package/build/{history-logger-LQT622M2.js → history-logger-65UF2R6F.js}

@@ -1,12 +1,13 @@
 import {
   appendEntry,
   clearHistory,
+  detectAction,
   loadHistory
-} from "./chunk-3BK3B53S.js";
-import "./chunk-P6PTN4HR.js";
+} from "./chunk-UBHTQL7T.js";
+import "./chunk-KXDTKY3E.js";
 export {
   appendEntry,
   clearHistory,
+  detectAction,
   loadHistory
 };
-//# sourceMappingURL=history-logger-LQT622M2.js.map