Martin Vogel
c1eb3dd2d1
install.sh: - Wrap entire body in main() to prevent partial execution from curl|bash (interrupted download would execute truncated script) install.ps1: - Enforce TLS 1.2+ (older PowerShell defaults to TLS 1.0) PyPI (_cli.py): - Add SHA256 checksum verification against checksums.txt (was the only installer without checksums) npm (install.js): - Add SHA256 checksum verification against checksums.txt - Validate HTTPS on every redirect hop (max 5 redirects) - Replace execSync string interpolation with execFileSync array args (eliminates shell injection vector in tar/PowerShell calls) - Add path traversal check on extracted binary npm (bin.js): - Auto-download binary if missing (handles --ignore-scripts / pnpm) Go wrapper (main.go): - Custom HTTP client with CheckRedirect that rejects non-HTTPS redirects (Go's default http.Get follows redirects without scheme validation) - Fix variable name bug in error message (url → rawURL)
40 lines
1.3 KiB
JavaScript
40 lines
1.3 KiB
JavaScript
#!/usr/bin/env node
|
|
'use strict';
|
|
// CLI shim: resolves the downloaded binary and replaces the current process with it.
|
|
// If the binary is missing (e.g. --ignore-scripts), attempts a one-time download.
|
|
|
|
const path = require('path');
|
|
const fs = require('fs');
|
|
const { spawnSync } = require('child_process');
|
|
|
|
const isWindows = process.platform === 'win32';
|
|
const binName = isWindows ? 'codebase-memory-mcp.exe' : 'codebase-memory-mcp';
|
|
const binPath = path.join(__dirname, 'bin', binName);
|
|
|
|
if (!fs.existsSync(binPath)) {
|
|
// Binary missing — try running the install script (handles --ignore-scripts case)
|
|
process.stderr.write('codebase-memory-mcp: binary not found, downloading...\n');
|
|
const installResult = spawnSync(process.execPath, [path.join(__dirname, 'install.js')], {
|
|
stdio: 'inherit',
|
|
});
|
|
if (installResult.status !== 0 || !fs.existsSync(binPath)) {
|
|
process.stderr.write(
|
|
'codebase-memory-mcp: download failed.\n' +
|
|
'Try reinstalling: npm install -g codebase-memory-mcp\n'
|
|
);
|
|
process.exit(1);
|
|
}
|
|
}
|
|
|
|
const result = spawnSync(binPath, process.argv.slice(2), {
|
|
stdio: 'inherit',
|
|
windowsHide: false,
|
|
});
|
|
|
|
if (result.error) {
|
|
process.stderr.write(`codebase-memory-mcp: ${result.error.message}\n`);
|
|
process.exit(1);
|
|
}
|
|
|
|
process.exit(result.status ?? 0);
|