mega-brain-ai 1.2.2 → 1.2.4

package/bin/lib/installer.js

@@ -13,7 +13,7 @@
  *   6. Post-install summary
  */
 
-import { existsSync, mkdirSync, cpSync, writeFileSync, readFileSync } from 'fs';
+import { existsSync, mkdirSync, cpSync, writeFileSync, readFileSync, readdirSync } from 'fs';
 import { resolve, dirname, join } from 'path';
 import { fileURLToPath } from 'url';
 import { execSync } from 'child_process';
@@ -261,64 +261,65 @@ async function selectEdition() {
  *     This installer runs on other people's machines — we never risk data loss.
  */
 async function fetchPremiumContent(targetDir, token, spinner) {
-  const premiumRepo = 'https://github.com/thiagofinch/mega-brain-premium.git';
   const tempDir = join(targetDir, '.layer-sync', 'premium-fetch');
 
-  // Safety: ensure tempDir is strictly INSIDE targetDir (prevent path traversal)
+  // Safety: ensure tempDir is strictly INSIDE targetDir
   const resolvedTemp = resolve(tempDir);
   const resolvedTarget = resolve(targetDir);
   if (!resolvedTemp.startsWith(resolvedTarget + '/') && !resolvedTemp.startsWith(resolvedTarget + '\\')) {
     throw new Error('Erro interno: caminho de download fora do diretório de instalação.');
   }
 
-  if (!existsSync(dirname(tempDir))) {
-    mkdirSync(dirname(tempDir), { recursive: true });
-  }
+  mkdirSync(dirname(tempDir), { recursive: true });
+
+  // Clone with token in URL — .layer-sync/ is in .gitignore so token stays local
+  const authUrl = `https://x-access-token:${token}@github.com/thiagofinch/mega-brain-premium.git`;
 
-  // If a previous clone exists, reuse it (no delete + re-clone)
   if (!existsSync(join(tempDir, '.git'))) {
     spinner.text = 'Clonando repositório premium...';
 
-    // Use http.extraheader so the token is NEVER written to .git/config.
-    // The -c flag is a runtime-only override — not persisted to disk.
-    const base64Auth = Buffer.from(`x-access-token:${token}`).toString('base64');
-
-    execSync(
-      `git -c "http.https://github.com/.extraheader=AUTHORIZATION: basic ${base64Auth}" clone --depth 1 "${premiumRepo}" "${tempDir}"`,
-      {
+    try {
+      execSync(`git clone --depth 1 "${authUrl}" "${tempDir}"`, {
         stdio: 'pipe',
         encoding: 'utf-8',
         timeout: 120000,
-      }
-    );
+      });
+    } catch (cloneErr) {
+      throw new Error(`Git clone falhou: ${cloneErr.message.split('\n')[0]}`);
+    }
   } else {
     spinner.text = 'Download anterior encontrado, reutilizando...';
   }
 
+  // Verify clone has content
+  if (!existsSync(tempDir) || readdirSync(tempDir).length <= 1) {
+    throw new Error('Repositório premium clonado mas vazio.');
+  }
+
   spinner.text = 'Integrando conteúdo premium na estrutura...';
 
   // Copy premium content over the shell (merge, not replace)
-  const excludeDirs = ['.git', 'node_modules', 'bin', '.layer-sync'];
-  const normalizedTemp = resolve(tempDir);
-  cpSync(tempDir, targetDir, {
-    recursive: true,
-    force: true,
-    filter: (src) => {
-      const rel = resolve(src).slice(normalizedTemp.length);
-      for (const exclude of excludeDirs) {
-        if (rel.includes(`/${exclude}/`) || rel.includes(`\\${exclude}\\`)
-            || rel.endsWith(`/${exclude}`) || rel.endsWith(`\\${exclude}`)) {
-          return false;
-        }
-      }
-      return true;
-    },
-  });
-
-  // NOTE: .layer-sync/ is intentionally NOT deleted.
-  // It is listed in .gitignore and contains no sensitive data
-  // (token was never written to disk thanks to http.extraheader).
-  // We NEVER use recursive delete operations on user machines.
+  const premiumExclude = ['.git', 'node_modules', 'bin', '.layer-sync'];
+  const premiumEntries = readdirSync(tempDir, { withFileTypes: true });
+  let copied = 0;
+
+  for (const entry of premiumEntries) {
+    if (premiumExclude.includes(entry.name)) continue;
+
+    const srcPath = join(tempDir, entry.name);
+    const destPath = join(targetDir, entry.name);
+
+    if (entry.isDirectory()) {
+      cpSync(srcPath, destPath, { recursive: true, force: true });
+    } else {
+      cpSync(srcPath, destPath, { force: true });
+    }
+    copied++;
+  }
+
+  if (copied === 0) {
+    throw new Error('Nenhum conteúdo premium copiado.');
+  }
 }
 
 /**
@@ -369,30 +370,38 @@ function showPostInstallCommunity() {
 }
 
 function copyTemplateFiles(source, target, excludeDirs) {
-  // Normalize source path for reliable relative path computation
-  const normalizedSource = resolve(source);
+  if (!existsSync(source)) {
+    throw new Error(`Template não encontrado: ${source}`);
+  }
 
-  try {
-    cpSync(source, target, {
-      recursive: true,
-      filter: (src) => {
-        // Get the path RELATIVE to the source root.
-        // This is critical because when running via npx, the absolute path
-        // contains "node_modules/" which would match the exclude filter
-        // and block ALL files from being copied.
-        const relativePath = resolve(src).slice(normalizedSource.length);
-
-        for (const exclude of excludeDirs) {
-          if (relativePath.includes(`/${exclude}/`) || relativePath.includes(`\\${exclude}\\`)
-              || relativePath.endsWith(`/${exclude}`) || relativePath.endsWith(`\\${exclude}`)) {
-            return false;
-          }
-        }
-        return true;
-      },
-    });
-  } catch (err) {
-    throw new Error(`Erro ao copiar arquivos: ${err.message}. Certifique-se de usar Node.js 18+.`);
+  const entries = readdirSync(source, { withFileTypes: true });
+
+  if (entries.length === 0) {
+    throw new Error(`Template vazio: ${source}`);
+  }
+
+  let copied = 0;
+  for (const entry of entries) {
+    if (excludeDirs.includes(entry.name)) continue;
+
+    const srcPath = join(source, entry.name);
+    const destPath = join(target, entry.name);
+
+    try {
+      if (entry.isDirectory()) {
+        cpSync(srcPath, destPath, { recursive: true, force: true });
+      } else {
+        mkdirSync(dirname(destPath), { recursive: true });
+        cpSync(srcPath, destPath, { force: true });
+      }
+      copied++;
+    } catch (err) {
+      console.error(`  Aviso: falha ao copiar ${entry.name}: ${err.message}`);
+    }
+  }
+
+  if (copied === 0) {
+    throw new Error(`Nenhum arquivo copiado. Source: ${source} (${entries.length} entries, ${excludeDirs.length} excluded)`);
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mega-brain-ai",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "AI Knowledge Management System - Transform expert materials into actionable playbooks",
   "type": "module",
   "bin": {