cinto/install.ps1 at master · Jshebb/cinto · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
#Requires -Version 5.1

$ErrorActionPreference = "Stop"

$repo = "Jshebb/cinto"
$version = "latest"
$target = "x86_64-pc-windows-msvc"

$binDir = [Environment]::ExpandEnvironmentVariables("%USERPROFILE%\.local\bin")
$dataDir = [Environment]::ExpandEnvironmentVariables("%USERPROFILE%\.local\share\cinto")

Write-Host "Installing cinto for Windows..."

$asset = "cinto-$target.tar.gz"

if ($version -eq "latest") {
    $url = "https://github.com/$repo/releases/latest/download/$asset"
} else {
    $url = "https://github.com/$repo/releases/download/$version/$asset"
}

$tmpDir = Join-Path ([IO.Path]::GetTempPath()) "cinto-install-$(New-Guid)"
New-Item -ItemType Directory -Force -Path $tmpDir | Out-Null

try {
    $archivePath = Join-Path $tmpDir $asset
    $checksumPath = Join-Path $tmpDir "$asset.sha256"

    Write-Host "Downloading $url..."
    Invoke-WebRequest -Uri $url -OutFile $archivePath -UseBasicParsing
    Invoke-WebRequest -Uri "$url.sha256" -OutFile $checksumPath -UseBasicParsing

    $checksumLine = Get-Content $checksumPath -TotalCount 1
    $expectedHash = ($checksumLine -split '\s+')[0].Trim().ToUpperInvariant()
    $actualHash = (Get-FileHash -Path $archivePath -Algorithm SHA256).Hash

    if ($expectedHash -ne $actualHash) {
        Write-Error "Checksum mismatch! Expected: $expectedHash, Actual: $actualHash"
    }

    $extractDir = Join-Path $tmpDir "extract"
    New-Item -ItemType Directory -Force -Path $extractDir | Out-Null

    # Path traversal and tar bomb protection
    $entries = tar -tzf $archivePath
    foreach ($entry in $entries) {
        if ($entry.Trim() -notin @("cinto", "cinto.exe")) {
            Write-Error "Release archive contains unexpected path: $entry"
        }
    }

    Write-Host "Extracting..."
    tar -xzf $archivePath -C $extractDir

    $binary = Join-Path $extractDir "cinto.exe"
    if (-not (Test-Path $binary)) {
        Write-Error "Release archive did not contain cinto.exe"
    }

    New-Item -ItemType Directory -Force -Path $binDir | Out-Null
    Copy-Item -Path $binary -Destination (Join-Path $binDir "cinto.exe") -Force

    New-Item -ItemType Directory -Force -Path $dataDir | Out-Null
    $installInfo = @"
binary=$binDir\cinto.exe
repo=$repo
version=$version
target=$target
"@
    Set-Content -Path (Join-Path $dataDir "install.toml") -Value $installInfo

    Write-Host "Installed cinto to $binDir\cinto.exe"

    $userPath = [Environment]::GetEnvironmentVariable("PATH", "User")
    if ($userPath -notlike "*$binDir*") {
        Write-Host "Adding $binDir to user PATH..."
        $newPath = "$binDir;$userPath".Trim(";")
        [Environment]::SetEnvironmentVariable("PATH", $newPath, "User")
        $env:PATH = "$binDir;$env:PATH"
        Write-Host "PATH updated. You can now use cinto from your terminal."
    } else {
        Write-Host "cinto is already on your PATH."
    }
} finally {
    Remove-Item -Path $tmpDir -Recurse -Force -ErrorAction Ignore
}