code-aide 1.18.0__tar.gz → 1.18.2__tar.gz

code_aide-1.18.2/CLAUDE.md

@@ -0,0 +1 @@
+@AGENTS.md

{code_aide-1.18.0 → code_aide-1.18.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code-aide
-Version: 1.18.0
+Version: 1.18.2
 Summary: Manage AI coding CLI tools (Claude, Antigravity, Copilot, Cursor, Gemini, Amp, Codex)
 Project-URL: Homepage, https://github.com/dajobe/code-aide
 Project-URL: Repository, https://github.com/dajobe/code-aide

{code_aide-1.18.0 → code_aide-1.18.2}/script-archive/amp-install.sh

@@ -347,6 +347,8 @@ install_amp_binary() {
 	fi
 
 	local binary_path="$BIN_DIR/$binary_name"
+	local staged_binary_path
+	staged_binary_path=$(mktemp "$BIN_DIR/tmp.XXXXXX")
 	local checksum_path="$AMP_HOME/amp-install-checksum.txt"
 
 	# Download checksum first
@@ -356,21 +358,22 @@ install_amp_binary() {
 
 	if has_gzip_support; then
 		# Download compressed binary and verify the decompressed bytes against checksum
-		download_gzipped_file "${binary_url}.gz" "$binary_path" 'Amp binary'
+		download_gzipped_file "${binary_url}.gz" "$staged_binary_path" 'Amp binary'
 	else
 		warn "gzip not found; downloading uncompressed binary"
-		download_file "$binary_url" "$binary_path" 'Amp binary'
+		download_file "$binary_url" "$staged_binary_path" 'Amp binary'
 	fi
 
 	# Verify checksum
-	verify_checksum "$binary_path" "$expected_checksum"
+	verify_checksum "$staged_binary_path" "$expected_checksum"
 
 	# Verify signature (optional, only if minisign is installed)
 	# Disabled until release signing is enabled
-	# verify_signature "$binary_path" "$minisign_signature_url"
+	# verify_signature "$staged_binary_path" "$minisign_signature_url"
 
-	# Make executable
-	chmod +x "$binary_path"
+	# Make executable before atomically replacing the installed binary
+	chmod 0755 "$staged_binary_path"
+	mv "$staged_binary_path" "$binary_path"
 
 	# Clean up checksum file
 	rm -f "$checksum_path"

{code_aide-1.18.0 → code_aide-1.18.2}/script-archive/claude-install.sh

@@ -55,6 +55,11 @@ if command -v jq >/dev/null 2>&1; then
     HAS_JQ=true
 fi
 
+HAS_ZSTD=false
+if command -v zstd >/dev/null 2>&1; then
+    HAS_ZSTD=true
+fi
+
 # Download function that works with both curl and wget
 download_file() {
     local url="$1"
@@ -85,8 +90,9 @@ get_checksum_from_manifest() {
     # Normalize JSON to single line and extract checksum
     json=$(echo "$json" | tr -d '\n\r\t' | sed 's/ \+/ /g')
     
-    # Extract checksum for platform using bash regex
-    if [[ $json =~ \"$platform\"[^}]*\"checksum\"[[:space:]]*:[[:space:]]*\"([a-f0-9]{64})\" ]]; then
+    # Extract checksum for platform using bash regex. [^{}] keeps the match
+    # inside the platform's own object (manifest.zst.json nests a darwin bundle).
+    if [[ $json =~ \"$platform\"[[:space:]]*:[[:space:]]*[{][^{}]*\"checksum\"[[:space:]]*:[[:space:]]*\"([a-f0-9]{64})\" ]]; then
         echo "${BASH_REMATCH[1]}"
         return 0
     fi
@@ -94,6 +100,17 @@ get_checksum_from_manifest() {
     return 1
 }
 
+get_size_from_manifest() {
+    local json="$1"
+    local platform="$2"
+    json=$(echo "$json" | tr -d '\n\r\t' | sed 's/ \+/ /g')
+    if [[ $json =~ \"$platform\"[[:space:]]*:[[:space:]]*[{][^{}]*\"size\"[[:space:]]*:[[:space:]]*([0-9]+) ]]; then
+        echo "${BASH_REMATCH[1]}"
+        return 0
+    fi
+    return 1
+}
+
 # Detect platform
 case "$(uname -s)" in
     Darwin) os="darwin" ;;
@@ -144,8 +161,10 @@ manifest_json=$(download_file "$DOWNLOAD_BASE_URL/$version/manifest.json")
 # Use jq if available, otherwise fall back to pure bash parsing
 if [ "$HAS_JQ" = true ]; then
     checksum=$(echo "$manifest_json" | jq -r ".platforms[\"$platform\"].checksum // empty")
+    size=$(echo "$manifest_json" | jq -r ".platforms[\"$platform\"].size // empty")
 else
-    checksum=$(get_checksum_from_manifest "$manifest_json" "$platform")
+    checksum=$(get_checksum_from_manifest "$manifest_json" "$platform" || true)
+    size=$(get_size_from_manifest "$manifest_json" "$platform" || true)
 fi
 
 # Validate checksum format (SHA256 = 64 hex characters)
@@ -154,25 +173,49 @@ if [ -z "$checksum" ] || [[ ! "$checksum" =~ ^[a-f0-9]{64}$ ]]; then
     exit 1
 fi
 
-# Download and verify
-binary_path="$DOWNLOAD_DIR/claude-$version-$platform"
-if ! download_file "$DOWNLOAD_BASE_URL/$version/$platform/claude" "$binary_path"; then
-    echo "Download failed" >&2
-    rm -f "$binary_path"
-    exit 1
-fi
+checksum_matches() {
+    local actual
+    if [ "$os" = "darwin" ]; then
+        actual=$(shasum -a 256 "$1" | cut -d' ' -f1)
+    else
+        actual=$(sha256sum "$1" | cut -d' ' -f1)
+    fi
+    [ "$actual" = "$2" ]
+}
 
-# Pick the right checksum tool
-if [ "$os" = "darwin" ]; then
-    actual=$(shasum -a 256 "$binary_path" | cut -d' ' -f1)
-else
-    actual=$(sha256sum "$binary_path" | cut -d' ' -f1)
+zst_checksum=""
+if [ "$HAS_ZSTD" = true ] && [[ "$size" =~ ^[1-9][0-9]*$ ]]; then
+    zst_manifest_json=$(download_file "$DOWNLOAD_BASE_URL/$version/manifest.zst.json" 2>/dev/null || true)
+    if [ "$HAS_JQ" = true ]; then
+        zst_checksum=$(echo "$zst_manifest_json" | jq -r ".platforms[\"$platform\"].checksum // empty" 2>/dev/null || true)
+    else
+        zst_checksum=$(get_checksum_from_manifest "$zst_manifest_json" "$platform" || true)
+    fi
 fi
 
-if [ "$actual" != "$checksum" ]; then
-    echo "Checksum verification failed" >&2
-    rm -f "$binary_path"
-    exit 1
+binary_path="$DOWNLOAD_DIR/claude-$version-$platform"
+verified=false
+if [[ "$zst_checksum" =~ ^[a-f0-9]{64}$ ]]; then
+    if download_file "$DOWNLOAD_BASE_URL/$version/$platform/claude.zst" "$binary_path.zst" \
+        && checksum_matches "$binary_path.zst" "$zst_checksum"; then
+        zstd -d -q -c "$binary_path.zst" 2>/dev/null | head -c "$size" > "$binary_path" || true
+        if checksum_matches "$binary_path" "$checksum"; then
+            verified=true
+        fi
+    fi
+    rm -f "$binary_path.zst"
+fi
+if [ "$verified" = false ]; then
+    if ! download_file "$DOWNLOAD_BASE_URL/$version/$platform/claude" "$binary_path"; then
+        echo "Download failed" >&2
+        rm -f "$binary_path"
+        exit 1
+    fi
+    if ! checksum_matches "$binary_path" "$checksum"; then
+        echo "Checksum verification failed" >&2
+        rm -f "$binary_path"
+        exit 1
+    fi
 fi
 
 chmod +x "$binary_path"

{code_aide-1.18.0 → code_aide-1.18.2}/src/code_aide/__init__.py

@@ -1,3 +1,3 @@
 """code-aide - Manage AI coding CLI tools."""
 
-__version__ = "1.18.0"
+__version__ = "1.18.2"

{code_aide-1.18.0 → code_aide-1.18.2}/src/code_aide/data/tools.json

@@ -33,7 +33,7 @@
       "command": "claude",
       "install_type": "script",
       "install_url": "https://claude.ai/install.sh",
-      "install_sha256": "cde4f1702d3b1695f92b73d26888364e17bca476e17f0fd676484c951d36c125",
+      "install_sha256": "3a68d3406cf674e17bed1733a4dcf37805e2e47d87417700007d7e1aa766a944",
       "version_url": "https://storage.googleapis.com/claude-code-dist-86c565f3-f756-42ad-8dfa-d59b1c096819/claude-code-releases/latest",
       "prerequisites": [],
       "min_node_version": null,
@@ -89,7 +89,7 @@
       "command": "amp",
       "install_type": "script",
       "install_url": "https://ampcode.com/install.sh",
-      "install_sha256": "832d67ed6b6b4414a1578ec8064c258532703a7c4ff675bab7408a17d847c291",
+      "install_sha256": "07bea1669144a5191c873a61a3244266ca046557bff7123f0be41d0723592297",
       "install_script_path_prepend": [
         "~/.local/bin"
       ],

code_aide-1.18.0/CLAUDE.md

@@ -1 +0,0 @@
-See AGENTS.md for project instructions.