xpose-cli 0.1.0 → 0.3.2

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 mt-tunnel-cli Contributors
+Copyright (c) 2026 xpose Contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/bin/install.js

@@ -4,14 +4,21 @@ const fs = require('fs');
 const path = require('path');
 const os = require('os');
 const https = require('https');
+const crypto = require('crypto');
 
 /**
  * xpose binary downloader
  * Fetches the pre-compiled Rust binary for the current platform.
  */
 
-const VERSION = '0.1.0';
-const REPO = 'user/xpose-cli'; // Placeholder
+function getPackageVersion() {
+    const packageJsonPath = path.join(__dirname, '..', 'package.json');
+    const pkg = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));
+    return pkg.version;
+}
+
+const VERSION = getPackageVersion();
+const REPO = 'vkaylee/xpose-cli';
 const BASE_URL = `https://github.com/${REPO}/releases/download/v${VERSION}`;
 
 const BIN_DIR = path.join(os.homedir(), '.xpose', 'bin');
@@ -38,42 +45,127 @@ function getReleaseName() {
     return `xpose-${target}.tar.gz`;
 }
 
+function fetch(url) {
+    return new Promise((resolve, reject) => {
+        https.get(url, (res) => {
+            if (res.statusCode === 301 || res.statusCode === 302) {
+                return fetch(res.headers.location).then(resolve).catch(reject);
+            }
+            if (res.statusCode !== 200) {
+                return reject(new Error(`Failed to fetch ${url} (Status: ${res.statusCode})`));
+            }
+            resolve(res);
+        }).on('error', reject);
+    });
+}
+
+function getFileContent(url) {
+    return new Promise((resolve, reject) => {
+        https.get(url, (res) => {
+            if (res.statusCode === 301 || res.statusCode === 302) {
+                return getFileContent(res.headers.location).then(resolve).catch(reject);
+            }
+            let data = '';
+            res.on('data', hunk => data += hunk);
+            res.on('end', () => resolve(data.trim()));
+            res.on('error', reject);
+        });
+    });
+}
+
 async function download() {
+    let cliProgress;
+    try {
+        cliProgress = require('cli-progress');
+    } catch (e) {
+        console.log('Progress bar library not found, skipping visual progress.');
+    }
+
     if (!fs.existsSync(BIN_DIR)) {
         fs.mkdirSync(BIN_DIR, { recursive: true });
     }
 
     const releaseName = getReleaseName();
     const url = `${BASE_URL}/${releaseName}`;
+    const checksumUrl = `${url}.sha256`;
     const dest = path.join(BIN_DIR, releaseName);
 
-    console.log(`Downloading xpose binary from ${url}...`);
+    try {
+        console.log(`Verifying release for ${releaseName}...`);
 
-    const file = fs.createWriteStream(dest);
-
-    https.get(url, (response) => {
-        if (response.statusCode !== 200) {
-            console.warn(`Binary not yet published to GitHub Releases (${response.statusCode}).`);
-            console.log(`Skipping auto-download. You will need to build manually: cargo build --release`);
-            return;
+        let expectedChecksum;
+        try {
+            const checksumContent = await getFileContent(checksumUrl);
+            expectedChecksum = checksumContent.split(' ')[0];
+        } catch (e) {
+            console.warn(`⚠️  Checksum file not found at ${checksumUrl}. Skipping verification.`);
         }
 
+        console.log(`Downloading xpose binary...`);
+        const response = await fetch(url);
+        const totalSize = parseInt(response.headers['content-length'], 10);
+
+        const file = fs.createWriteStream(dest);
+        const hash = crypto.createHash('sha256');
+
+        const progressBar = cliProgress ? new cliProgress.SingleBar({
+            format: 'Progress |{bar}| {percentage}% | {value}/{total} bytes',
+            barCompleteChar: '\u2588',
+            barIncompleteChar: '\u2591',
+            hideCursor: true
+        }) : null;
+
+        if (progressBar) progressBar.start(totalSize, 0);
+
+        let downloadedSize = 0;
+        response.on('data', (chunk) => {
+            downloadedSize += chunk.length;
+            if (progressBar) progressBar.update(downloadedSize);
+            hash.update(chunk);
+        });
+
         response.pipe(file);
 
-        file.on('finish', () => {
-            file.close();
-            console.log('Download complete.');
-            // Note: In a full implementation, we would extract the tar.gz here.
-            // For now, this establishes the flow.
+        await new Promise((resolve, reject) => {
+            file.on('finish', () => {
+                if (progressBar) progressBar.stop();
+                file.close();
+                resolve();
+            });
+            file.on('error', reject);
         });
-    }).on('error', (err) => {
-        console.error(`Download failed: ${err.message}`);
-    });
+
+        if (expectedChecksum) {
+            const actualChecksum = hash.digest('hex');
+            if (actualChecksum === expectedChecksum) {
+                console.log('✅ Integrity verified: SHA256 matches.');
+            } else {
+                console.error('❌ Integrity check FAILED: Checksum mismatch!');
+                fs.unlinkSync(dest);
+                process.exit(1);
+            }
+        }
+
+        console.log(`Successfully installed to ${dest}`);
+        console.log('Note: Run "xpose" to start the tunnel.');
+
+    } catch (err) {
+        if (err.message.includes('404')) {
+            console.warn(`Binary not yet published to GitHub Releases.`);
+            console.log(`Skipping auto-download. You can build manually: cargo build --release`);
+        } else {
+            console.error(`Download failed: ${err.message}`);
+        }
+    }
 }
 
 // Only download if being installed via NPM (not in local dev)
-if (!process.env.XPOSE_DEV) {
-    download();
-} else {
-    console.log('XPOSE_DEV detected, skipping download.');
+if (require.main === module) {
+    if (!process.env.XPOSE_DEV) {
+        download();
+    } else {
+        console.log('XPOSE_DEV detected, skipping download.');
+    }
 }
+
+module.exports = { download, getReleaseName };

package/bin/test-install.js

@@ -0,0 +1,37 @@
+const assert = require('assert');
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const http = require('http'); // We'll use this to mock
+
+// Mocking dependencies would be complex without a library like proxyquire or jest.
+// For a simple standalone test, we'll use environment variables and temporary paths.
+
+const { download } = require('./install');
+
+async function testSuccessfulDownload() {
+    console.log('Running testSuccessfulDownload...');
+    // This is a minimal test to ensure the script doesn't crash
+    // and correctly identifies dev environment.
+    process.env.XPOSE_DEV = '1';
+    try {
+        await download();
+        console.log('✅ testSuccessfulDownload passed (dev skip)');
+    } catch (e) {
+        console.error('❌ testSuccessfulDownload failed:', e);
+        process.exit(1);
+    }
+}
+
+// In a real scenario, we would mock https.get and fs.createWriteStream.
+// Since we want to stay within standard node tools for now, we'll verify the logic structure.
+
+async function runTests() {
+    await testSuccessfulDownload();
+    console.log('\nAll tests passed!');
+}
+
+runTests().catch(err => {
+    console.error(err);
+    process.exit(1);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "xpose-cli",
-    "version": "0.1.0",
+    "version": "0.3.2",
     "description": "Cloudflare Tunnel CLI for developers - Vivid TUI, auto-copy, and smart defaults.",
     "bin": {
         "xpose": "bin/cli.js"
@@ -11,7 +11,7 @@
     ],
     "repository": {
         "type": "git",
-        "url": "https://github.com/user/xpose-cli"
+        "url": "https://github.com/vkaylee/xpose-cli"
     },
     "keywords": [
         "cloudflare",
@@ -24,9 +24,13 @@
     "author": "",
     "license": "MIT",
     "scripts": {
-        "postinstall": "node bin/install.js"
+        "postinstall": "node bin/install.js",
+        "test:install": "node bin/test-install.js"
     },
     "engines": {
         "node": ">=16.0.0"
+    },
+    "dependencies": {
+        "cli-progress": "^3.12.0"
     }
-}
+}