freecode-sh 0.1.0-alpha.36 → 0.1.0-alpha.38

package/README.md

@@ -26,7 +26,7 @@ freecode
 For a reproducible clean install of this immutable release:
 
 ```bash
-npm install -g freecode-sh@0.1.0-alpha.36
+npm install -g freecode-sh@0.1.0-alpha.38
 freecode --version
 ```
 

package/install.ps1

@@ -20,6 +20,9 @@ param(
   [string]$ArchivePath,
   [string]$ChecksumPath,
   [string]$ManifestPath,
+  [string]$ExpectedCurrentVersion,
+  [string]$ExpectedArchiveSha256,
+  [long]$ExpectedArchiveSize,
   [Alias('InstallRoot')]
   [string]$InstallDir,
   [switch]$AllowUnsigned,
@@ -583,6 +586,12 @@ try {
   Assert-PayloadContract $manifest "release $Version"
   Assert-WindowsAssetSecurity $asset "release $Version"
   if ($asset.archive -ne $AssetName) { Fail "release manifest names unexpected asset $($asset.archive)" }
+  if ($ExpectedArchiveSha256 -and [string]$asset.sha256 -ne $ExpectedArchiveSha256) {
+    Fail 'release archive checksum does not match the signed update channel'
+  }
+  if ($ExpectedArchiveSize -and ([long]$asset.size -ne $ExpectedArchiveSize -or (Get-Item -LiteralPath $downloadedArchivePath).Length -ne $ExpectedArchiveSize)) {
+    Fail 'release archive size does not match the signed update channel'
+  }
 
   $checksumLine = (Get-Content -LiteralPath $downloadedChecksumPath | Select-Object -First 1)
   if ($checksumLine -notmatch '^([a-fA-F0-9]{64})\s{1,2}(\*?)([^\s]+)$') {
@@ -595,6 +604,12 @@ try {
   if ($actualChecksum -ne $expectedChecksum) { Fail "checksum verification failed for $AssetName" }
 
   $InstallMutex = Enter-InstallLock
+  if ($ExpectedCurrentVersion) {
+    $activeVersion = if (Test-Path -LiteralPath $CurrentVersionPath) { (Get-Content -LiteralPath $CurrentVersionPath -Raw).Trim() } else { '' }
+    if ($activeVersion -ne $ExpectedCurrentVersion -and $activeVersion -ne $Version) {
+      Fail 'the active installation changed during the update; retry with the current version'
+    }
+  }
   New-Item -ItemType Directory -Path $VersionsDir -Force | Out-Null
   $versionRoot = Join-Path $VersionsDir $Version
   $newInstall = -not (Test-Path -LiteralPath $versionRoot)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freecode-sh",
-  "version": "0.1.0-alpha.36",
+  "version": "0.1.0-alpha.38",
   "description": "A free coding agent for your terminal.",
   "license": "UNLICENSED",
   "author": "freecode",
@@ -47,6 +47,6 @@
   },
   "freecodeRelease": {
     "channel": "alpha",
-    "nativeVersion": "0.1.0-alpha.36"
+    "nativeVersion": "0.1.0-alpha.38"
   }
 }