git0 0.3.65 → 0.3.67

package/README.md

@@ -5,7 +5,7 @@
 <!-- template-git-repo:badges:start -->
 <p align="center">
     <a href="https://git0.js.org"><img height="20px" src="https://img.shields.io/badge/App-blueviolet?style=for-the-badge&logo=googlechrome&logoColor=white" alt="Website" /></a>
-    <a href="https://starterdocs.vtempest.workers.dev/docs/packages/git0-repo-downloader"><img src="https://img.shields.io/badge/Docs-blue?logo=ReadTheDocs&logoColor=white" alt="Documentation" /></a>
+    <a href="https://1computer.online/docs/packages/git0-repo-downloader"><img src="https://img.shields.io/badge/Docs-blue?logo=ReadTheDocs&logoColor=white" alt="Documentation" /></a>
     <br />
     <a href="https://github.com/OpenSourceAGI/dev-tools-starter-agent/stargazers"><img src="https://img.shields.io/github/stars/OpenSourceAGI/dev-tools-starter-agent" alt="GitHub Stars" /></a>
     <a href="https://www.npmjs.com/package/git0"><img src="https://img.shields.io/npm/dm/git0.svg" alt="NPM Monthly Downloads" /></a>
@@ -61,6 +61,7 @@ bun install -g git0
 - **Partial paths** - paste a `/tree/` or `/blob/` link and download just that folder or file
 - **Optional `.git` history** - `--history` attaches the full history *after* the source is already on disk
 - **Faster than git** - skips `.git` history and uncompresses while downloading
+- **One-click install service** - `--service=install` lets website download buttons install the right release for your system and show progress in the button
 
 ## 🎯 Usage
 
@@ -218,6 +219,53 @@ git0 automatically detects and opens projects in your preferred IDE:
 - **Neovim**
 - **Webstorm**
 
+## ⚡ Background Install Service
+
+git0 can run as a small background service that turns any website's download button into a one-click installer. The button hands the service a repository; the service picks the release asset built for your OS and CPU, downloads it, installs it, and opens the app, while the button fills up as a progress bar.
+
+```bash
+git0 --service=install     # start at login and register git0:// links
+git0 --service=status      # is it running, and what is it installing
+git0 --service=uninstall   # remove it
+git0 --service            # or run it in the foreground, on 127.0.0.1:47100
+```
+
+It installs as a **per-user** service, because launching a desktop app has to happen inside your session: a `systemd --user` unit on Linux, a LaunchAgent on macOS, and a logon task on Windows. No admin rights are needed to install it.
+
+### Add the button to a site
+
+```html
+<a href="https://github.com/owner/repo/releases/latest" data-git0-repo="owner/repo">Download</a>
+<script src="https://unpkg.com/git0/demo/git0-button.js"></script>
+```
+
+When the service is running, clicking the link does not download a file. The button morphs into a progress bar showing the download, then the install, then the launch. When the service is not running, the link behaves as a normal link. `demo/index.html` has a live and a simulated example.
+
+Links also work without the script: `git0://install/owner/repo` is registered with the OS on Linux and Windows, and `http://127.0.0.1:47100/install?repo=owner/repo` works everywhere.
+
+### What it installs
+
+| OS | Preferred asset, in order | Result |
+| --- | --- | --- |
+| Linux | `.AppImage`, `.deb`, `.rpm`, `.tar.gz`, bare binary | AppImage and binaries go to `~/.git0/apps`; `.deb`/`.rpm` install through the desktop's password prompt (`pkexec`) |
+| macOS | `.dmg`, `.pkg`, `.zip`/`.tar.gz` | The `.app` is copied to `~/Applications`; a `.pkg` opens Installer |
+| Windows | setup `.exe`, `.msi`, `.zip` | The installer runs with its own UI; a portable `.zip` is extracted to `~/.git0/apps` |
+
+Asset names are matched on whole words, so `darwin` is never mistaken for `win`. An exact CPU match beats an unlabelled build, and an unlabelled build beats Rosetta or 32-bit fallbacks. Checksums, signatures and source archives are never picked. A command-line tool is installed but not launched, because it would start with no terminal attached.
+
+### Security
+
+Any website can ask, but only you can say yes. The first install of a repository opens a git0 page from `127.0.0.1` asking you to allow it, and the website cannot answer that prompt for you: the page carries a one-time token, is served without CORS headers so other sites can't read it, and refuses to be framed. Tick "Always allow" to skip the prompt for that repository next time (stored in `~/.git0/service.json`). The service listens on loopback only, rejects requests whose `Host` isn't loopback (DNS rebinding), and caps pending prompts at five.
+
+### HTTP API
+
+| Route | Returns |
+| --- | --- |
+| `GET /health` | `{ ok, name: "git0", version, os, arch }` |
+| `POST /install` `{ "repo": "owner/repo" }` | the job, plus `statusUrl` and `approveUrl` |
+| `GET /status/:id` | `status` (`awaiting-approval`, `resolving`, `downloading`, `installing`, `launching`, `done`, `error`, `denied`), `progress` 0–1, `receivedBytes`, `totalBytes`, `asset`, `tag`, `installedPath`, `launched`, `error` |
+| `GET /jobs` | every job |
+
 ## 🔧 Configuration
 
 ### What Happens After Download

package/demo/git0-button.js

@@ -0,0 +1,237 @@
+/**
+ * git0 install button.
+ *
+ * Turns any link or button carrying `data-git0-repo="owner/repo"` into a
+ * one-click installer. When the git0 background service is running on the
+ * visitor's machine, a click does not download a file: the button asks the
+ * service to install the right release for that machine, then morphs into a
+ * progress bar that fills as the service downloads, installs and launches it.
+ * When the service is not running, the link behaves exactly as before — it
+ * still points at your normal download page.
+ *
+ *   <a href="https://github.com/owner/repo/releases/latest"
+ *      data-git0-repo="owner/repo" class="git0-button">Download</a>
+ *   <script src="git0-button.js"></script>
+ *
+ * Options, as attributes on the element:
+ *   data-git0-port="47100"   the service port, if changed with --port
+ *   data-git0-simulate       run the animation without the service (demos)
+ *
+ * The first install of a repository opens a small git0 page from 127.0.0.1
+ * asking the visitor to allow it. That prompt is the service's, not the
+ * website's, and a website cannot answer it.
+ */
+(function () {
+  const DEFAULT_PORT = 47100;
+  const TERMINAL = ['done', 'error', 'denied'];
+
+  const css = `
+.git0-button{--g0-accent:#6d28d9;--g0-track:rgba(109,40,217,.18);--g0-fg:#fff;
+  position:relative;display:inline-flex;align-items:center;justify-content:center;
+  min-width:220px;height:48px;padding:0 24px;border:0;border-radius:24px;
+  background:var(--g0-accent);color:var(--g0-fg);font:600 15px/1 system-ui,sans-serif;
+  text-decoration:none;cursor:pointer;overflow:hidden;isolation:isolate;
+  transition:min-width .45s cubic-bezier(.2,.8,.2,1),border-radius .45s,background-color .3s,box-shadow .3s}
+.git0-button:hover{box-shadow:0 6px 20px rgba(109,40,217,.35)}
+.git0-button:focus-visible{outline:3px solid var(--g0-track);outline-offset:3px}
+.git0-button .g0-label{position:relative;z-index:2;white-space:nowrap;transition:opacity .2s}
+.git0-button .g0-fill{position:absolute;inset:0;width:0;z-index:1;background:var(--g0-accent);
+  transition:width .35s ease}
+.git0-button.g0-busy{min-width:320px;border-radius:12px;background:var(--g0-track);color:inherit;cursor:default;box-shadow:none}
+.git0-button .g0-label-on{position:absolute;inset:0;z-index:3;display:none;align-items:center;justify-content:center;
+  color:#fff;white-space:nowrap;clip-path:inset(0 calc(100% - var(--g0-p,0%)) 0 0);transition:clip-path .35s ease}
+.git0-button.g0-busy .g0-label{color:#3b0764}
+.git0-button.g0-busy:not(.g0-indeterminate) .g0-label-on{display:flex}
+.git0-button.g0-indeterminate .g0-fill{width:35%!important;animation:g0-slide 1.1s ease-in-out infinite}
+.git0-button.g0-done{background:#15803d;min-width:260px;border-radius:24px}
+.git0-button.g0-done .g0-fill{opacity:0}
+.git0-button.g0-done .g0-label{color:#fff}
+.git0-button.g0-error{background:#b91c1c;border-radius:24px}
+.git0-button.g0-error .g0-fill{opacity:0}
+.git0-button.g0-error .g0-label{color:#fff}
+@keyframes g0-slide{0%{transform:translateX(-100%)}100%{transform:translateX(300%)}}
+@media (prefers-reduced-motion:reduce){.git0-button,.git0-button .g0-fill{transition:none}
+  .git0-button.g0-indeterminate .g0-fill{animation:none;width:100%!important;opacity:.4}}`;
+
+  function injectCss() {
+    if (document.getElementById('git0-button-css')) return;
+    const style = document.createElement('style');
+    style.id = 'git0-button-css';
+    style.textContent = css;
+    document.head.appendChild(style);
+  }
+
+  const mb = n => (n / 1048576).toFixed(1);
+
+  function labelFor(job) {
+    switch (job.status) {
+      case 'awaiting-approval': return 'Allow the install in the git0 tab…';
+      case 'resolving':         return 'Finding your build…';
+      case 'downloading':       return job.totalBytes
+        ? `Downloading ${Math.round((job.receivedBytes / job.totalBytes) * 100)}% · ${mb(job.receivedBytes)} / ${mb(job.totalBytes)} MB`
+        : 'Downloading…';
+      case 'installing':        return 'Installing…';
+      case 'launching':         return 'Launching…';
+      case 'done':              return job.launched ? 'Installed · opened ✓' : 'Installed ✓';
+      case 'denied':            return 'Install cancelled';
+      default:                  return `Failed — ${job.error || 'try again'}`;
+    }
+  }
+
+  /** Paints a job onto the button. */
+  function render(el, job) {
+    const fill = el.querySelector('.g0-fill');
+    const label = el.querySelector('.g0-label');
+    const busy = !TERMINAL.includes(job.status);
+    const indeterminate = job.status === 'awaiting-approval' || job.status === 'resolving' ||
+      (job.status === 'downloading' && !job.totalBytes);
+
+    el.classList.toggle('g0-busy', busy);
+    el.classList.toggle('g0-indeterminate', busy && indeterminate);
+    el.classList.toggle('g0-done', job.status === 'done');
+    el.classList.toggle('g0-error', job.status === 'error' || job.status === 'denied');
+    el.setAttribute('aria-busy', String(busy));
+    const pct = `${Math.round(job.progress * 100)}%`;
+    if (!indeterminate) fill.style.width = pct;
+    // A white copy of the label, clipped to the filled part, keeps the text
+    // readable on both sides of the bar's edge.
+    el.style.setProperty('--g0-p', pct);
+    label.textContent = labelFor(job);
+    el.querySelector('.g0-label-on').textContent = label.textContent;
+    fill.setAttribute('aria-valuenow', String(Math.round(job.progress * 100)));
+  }
+
+  function prepare(el) {
+    if (el.querySelector('.g0-label')) return;
+    const text = el.textContent.trim();
+    el.textContent = '';
+    const fill = document.createElement('span');
+    fill.className = 'g0-fill';
+    fill.setAttribute('role', 'progressbar');
+    fill.setAttribute('aria-valuemin', '0');
+    fill.setAttribute('aria-valuemax', '100');
+    const label = document.createElement('span');
+    label.className = 'g0-label';
+    label.setAttribute('aria-live', 'polite');
+    label.textContent = text;
+    const labelOn = document.createElement('span');
+    labelOn.className = 'g0-label-on';
+    labelOn.setAttribute('aria-hidden', 'true');
+    el.append(fill, label, labelOn);
+    el.dataset.git0Label = text;
+  }
+
+  function reset(el) {
+    el.className = el.className.replace(/\bg0-\S+/g, '').trim();
+    el.querySelector('.g0-fill').style.width = '0';
+    el.style.removeProperty('--g0-p');
+    el.querySelector('.g0-label').textContent = el.dataset.git0Label;
+    el.removeAttribute('aria-busy');
+    delete el.dataset.git0Running;
+  }
+
+  async function serviceUp(base) {
+    try {
+      const ctl = new AbortController();
+      const t = setTimeout(() => ctl.abort(), 700);
+      const res = await fetch(`${base}/health`, { signal: ctl.signal });
+      clearTimeout(t);
+      return res.ok && (await res.json()).name === 'git0';
+    } catch {
+      return false;
+    }
+  }
+
+  /** Plays the whole sequence with fake numbers, for demo pages. */
+  async function simulate(el) {
+    const total = 48 * 1048576;
+    const job = { status: 'resolving', progress: 0, receivedBytes: 0, totalBytes: 0, launched: false };
+    render(el, job);
+    await new Promise(r => setTimeout(r, 900));
+    job.status = 'downloading';
+    job.totalBytes = total;
+    while (job.receivedBytes < total) {
+      job.receivedBytes = Math.min(total, job.receivedBytes + total * (0.015 + Math.random() * 0.035));
+      job.progress = (job.receivedBytes / total) * 0.9;
+      render(el, job);
+      await new Promise(r => setTimeout(r, 90));
+    }
+    for (const [status, progress, wait] of [['installing', 0.94, 900], ['launching', 0.98, 600]]) {
+      Object.assign(job, { status, progress });
+      render(el, job);
+      await new Promise(r => setTimeout(r, wait));
+    }
+    Object.assign(job, { status: 'done', progress: 1, launched: true });
+    render(el, job);
+  }
+
+  async function onClick(event) {
+    const el = event.currentTarget;
+    if (el.dataset.git0Running) { event.preventDefault(); return; }
+
+    if (el.hasAttribute('data-git0-simulate')) {
+      event.preventDefault();
+      el.dataset.git0Running = '1';
+      await simulate(el);
+      setTimeout(() => reset(el), 4000);
+      return;
+    }
+
+    const base = `http://127.0.0.1:${el.dataset.git0Port || DEFAULT_PORT}`;
+    // Decide synchronously that we own the click, so the browser does not
+    // start the plain download while we check for the service. If it turns
+    // out not to be running, follow the link ourselves.
+    event.preventDefault();
+    el.dataset.git0Running = '1';
+    // Opened now, inside the click, so pop-up blockers allow it; pointed at
+    // the approval page once we know there is one, closed if there is not.
+    let approval = null;
+
+    if (!(await serviceUp(base))) {
+      reset(el);
+      const href = el.getAttribute('href');
+      if (href) window.location.href = href;
+      return;
+    }
+
+    try {
+      approval = window.open('', 'git0-approval', 'popup,width=480,height=420');
+      const res = await fetch(`${base}/install`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ repo: el.dataset.git0Repo }),
+      });
+      let job = await res.json();
+      if (!res.ok) throw new Error(job.error || `HTTP ${res.status}`);
+
+      if (job.approveUrl && approval) approval.location.href = job.approveUrl;
+      else if (approval) approval.close();
+
+      while (!TERMINAL.includes(job.status)) {
+        render(el, job);
+        await new Promise(r => setTimeout(r, 400));
+        job = await (await fetch(`${base}/status/${job.id}`)).json();
+      }
+      render(el, job);
+    } catch (err) {
+      if (approval) approval.close();
+      render(el, { status: 'error', progress: 0, error: err.message });
+    }
+    setTimeout(() => reset(el), 6000);
+  }
+
+  function init(root) {
+    injectCss();
+    for (const el of (root || document).querySelectorAll('[data-git0-repo]')) {
+      if (el.dataset.git0Bound) continue;
+      el.dataset.git0Bound = '1';
+      el.classList.add('git0-button');
+      prepare(el);
+      el.addEventListener('click', onClick);
+    }
+  }
+
+  window.git0Button = { init, render };
+  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', () => init());
+  else init();
+})();

package/demo/index.html

@@ -0,0 +1,71 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>git0 install button</title>
+<style>
+  :root { --bg:#fafafa; --fg:#18181b; --muted:#52525b; --card:#fff; --line:#e4e4e7; }
+  @media (prefers-color-scheme: dark) {
+    :root:not([data-theme="light"]) { --bg:#0b0b0f; --fg:#f4f4f5; --muted:#a1a1aa; --card:#18181b; --line:#27272a; }
+  }
+  :root[data-theme="dark"] { --bg:#0b0b0f; --fg:#f4f4f5; --muted:#a1a1aa; --card:#18181b; --line:#27272a; }
+  body { margin:0; background:var(--bg); color:var(--fg); font:16px/1.6 system-ui,sans-serif; }
+  main { max-width:720px; margin:0 auto; padding:48px 16px; }
+  h1 { font-size:28px; margin:0 0 8px; }
+  p { color:var(--muted); margin:0 0 16px; }
+  .card { background:var(--card); border:1px solid var(--line); border-radius:16px; padding:28px; margin:24px 0; }
+  .card h2 { font-size:17px; margin:0 0 6px; }
+  .stage { display:flex; flex-wrap:wrap; gap:16px; align-items:center; margin-top:18px; }
+  code, pre { font:13px/1.5 ui-monospace,SFMono-Regular,Menlo,monospace; }
+  pre { background:var(--bg); border:1px solid var(--line); border-radius:10px; padding:14px; overflow-x:auto; }
+  .status { font-size:13px; }
+</style>
+</head>
+<body>
+<main>
+  <h1>One-click install from any website</h1>
+  <p>
+    With the git0 background service running, a download button installs the right
+    release for the visitor's OS and CPU, shows the progress inside the button,
+    and opens the app when it is done.
+  </p>
+
+  <section class="card">
+    <h2>Simulated</h2>
+    <p>Plays the full sequence with fake numbers, no service needed.</p>
+    <div class="stage">
+      <a href="#" data-git0-repo="junegunn/fzf" data-git0-simulate>Download for your system</a>
+    </div>
+  </section>
+
+  <section class="card">
+    <h2>Live, through your local service</h2>
+    <p class="status" id="svc">Checking for the git0 service on 127.0.0.1:47100…</p>
+    <div class="stage">
+      <a href="https://github.com/obsidianmd/obsidian-releases/releases/latest"
+         data-git0-repo="obsidianmd/obsidian-releases">Install Obsidian</a>
+      <a href="https://github.com/junegunn/fzf/releases/latest"
+         data-git0-repo="junegunn/fzf">Install fzf</a>
+    </div>
+    <p style="margin-top:16px">Without the service these links fall back to the normal releases page. Start it with:</p>
+    <pre>npx git0 --service=install   # start at login, register git0:// links
+npx git0 --service           # or just run it in this terminal</pre>
+  </section>
+
+  <section class="card">
+    <h2>Add it to your site</h2>
+<pre>&lt;a href="https://github.com/owner/repo/releases/latest"
+   data-git0-repo="owner/repo"&gt;Download&lt;/a&gt;
+&lt;script src="https://unpkg.com/git0/demo/git0-button.js"&gt;&lt;/script&gt;</pre>
+  </section>
+</main>
+<script src="git0-button.js"></script>
+<script>
+  fetch('http://127.0.0.1:47100/health')
+    .then(r => r.json())
+    .then(h => { document.getElementById('svc').textContent = `git0 service ${h.version ?? ''} is running (${h.os} ${h.arch}).`; })
+    .catch(() => { document.getElementById('svc').textContent = 'The git0 service is not running, so these buttons fall back to the releases page.'; });
+</script>
+</body>
+</html>