freecode-sh 0.1.0-alpha.22 → 0.1.0-alpha.23

package/README.md

@@ -10,6 +10,9 @@ are not shipped in the npm package.
 
 Both `freecode` and `freecode-sh` launch the same Free Code CLI.
 
+The signed native `alpha` channel is the canonical current release. npm
+`latest` mirrors that version; npm `alpha` is intentionally not used.
+
 ## Install
 
 ```bash
@@ -19,6 +22,13 @@ freecode doctor
 freecode
 ```
 
+For a reproducible clean install of this immutable release:
+
+```bash
+npm install -g freecode-sh@0.1.0-alpha.23
+freecode --version
+```
+
 ```bash
 freecode logout
 npm uninstall -g freecode-sh

package/freecode.mjs

@@ -2,7 +2,7 @@
 
 import { spawn } from 'node:child_process'
 import { constants } from 'node:fs'
-import { access, readFile, realpath } from 'node:fs/promises'
+import { access, chmod, lstat, mkdir, readFile, realpath, writeFile } from 'node:fs/promises'
 import { homedir } from 'node:os'
 import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path'
 import { fileURLToPath } from 'node:url'
@@ -12,7 +12,13 @@ const packageDirectory = dirname(fileURLToPath(import.meta.url))
 const bootstrapPath = fileURLToPath(import.meta.url)
 const packageMetadata = JSON.parse(await readFile(join(packageDirectory, 'package.json'), 'utf8'))
 
-if (packageMetadata.name !== 'freecode-sh' || !/^\d+\.\d+\.\d+-alpha\.\d+$/.test(packageMetadata.version)) {
+const releaseContract = packageMetadata.freecodeRelease
+if (
+  packageMetadata.name !== 'freecode-sh'
+  || !/^\d+\.\d+\.\d+-alpha\.\d+$/.test(packageMetadata.version)
+  || releaseContract?.channel !== 'alpha'
+  || releaseContract?.nativeVersion !== packageMetadata.version
+) {
   fail('The npm package metadata is invalid. Reinstall freecode-sh and try again.')
 }
 
@@ -59,15 +65,16 @@ if (nativeVersion && compareAlphaVersions(nativeVersion, packageMetadata.version
   const installer = windows
     ? {
         command: 'powershell.exe',
-        args: ['-NoLogo', '-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', join(packageDirectory, 'install.ps1'), '-Version', packageMetadata.version],
+        args: ['-NoLogo', '-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', join(packageDirectory, 'install.ps1'), '-Channel', releaseContract.channel, '-Version', releaseContract.nativeVersion],
       }
-    : { command: '/bin/sh', args: [join(packageDirectory, 'install.sh'), '--version', packageMetadata.version] }
+    : { command: '/bin/sh', args: [join(packageDirectory, 'install.sh'), '--channel', releaseContract.channel, '--version', releaseContract.nativeVersion] }
   const installerEnvironment = {
     ...process.env,
     FREECODE_INSTALL_ROOT: installRoot,
     FREECODE_BIN_DIR: binDirectory,
     FREECODE_INSTALL_EMBEDDED: 'true',
   }
+  const installStartedAt = Date.now()
   const installStatus = await run(
     installer.command,
     installer.args,
@@ -78,6 +85,11 @@ if (nativeVersion && compareAlphaVersions(nativeVersion, packageMetadata.version
   if (!nativeVersion || compareAlphaVersions(nativeVersion, packageMetadata.version) < 0) {
     fail('The signed installer completed without creating a managed Free Code executable.')
   }
+  await writeInstallTelemetryReceipt({
+    releaseId: packageMetadata.version,
+    platform: ['darwin', 'linux', 'win32'].includes(platform) ? platform : 'unknown',
+    durationMs: Math.min(86_400_000, Math.max(0, Date.now() - installStartedAt)),
+  })
   process.exitCode = await runManaged(nativeExecutable, nativeVersion, process.argv.slice(2))
 }
 
@@ -116,6 +128,29 @@ function runManaged(path, version, args) {
   return run(command, args)
 }
 
+async function writeInstallTelemetryReceipt({ releaseId, platform: receiptPlatform, durationMs }) {
+  const configRoot = windows && process.env.APPDATA ? process.env.APPDATA : join(homeDirectory, '.config')
+  const directory = resolve(configRoot, 'freecode')
+  const path = join(directory, 'install-receipt.json')
+  try {
+    await mkdir(directory, { recursive: true, mode: 0o700 })
+    if ((await lstat(directory)).isSymbolicLink()) return
+    try {
+      if ((await lstat(path)).isSymbolicLink()) return
+    } catch (error) {
+      if (error?.code !== 'ENOENT') return
+    }
+    if (!windows) await chmod(directory, 0o700)
+    await writeFile(path, `${JSON.stringify({ version: 1, releaseId, platform: receiptPlatform, durationMs })}\n`, {
+      encoding: 'utf8',
+      mode: 0o600,
+    })
+    if (!windows) await chmod(path, 0o600)
+  } catch {
+    // Install telemetry is best effort and must never fail a verified install.
+  }
+}
+
 function compareAlphaVersions(left, right) {
   const parse = (version) => {
     const match = version.match(/^(\d+)\.(\d+)\.(\d+)-alpha\.(\d+)$/)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freecode-sh",
-  "version": "0.1.0-alpha.22",
+  "version": "0.1.0-alpha.23",
   "description": "A free coding agent for your terminal.",
   "license": "UNLICENSED",
   "author": "Free Code",
@@ -44,5 +44,9 @@
   "publishConfig": {
     "access": "public",
     "tag": "latest"
+  },
+  "freecodeRelease": {
+    "channel": "alpha",
+    "nativeVersion": "0.1.0-alpha.23"
   }
 }