mirror of
https://github.com/affaan-m/ECC.git
synced 2026-09-20 16:47:59 +02:00
Geronimo
27667bc746
- orchestrate-codex-worker: drop yolo, default never approval, worktree containment - run-with-flags-shell: add path traversal containment mirroring JS guard - mcp-health-check: gate workspace probe, denylist dangerous env, shell-free reconnect with opt-in - install.sh/ps1: add --ignore-scripts to block postinstall RCE - git hooks: refuse global hooksPath clobber, remove file disable bypass, gate pre-push repo script execution - claw.js: remove Windows shell:true, validate model token - tests: opt into new secure defaults, quote-aware reconnect parsing
35 lines
1.3 KiB
Bash
Executable File
35 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# install.sh — Legacy shell entrypoint for the ECC installer.
|
|
#
|
|
# This wrapper resolves the real repo/package root when invoked through a
|
|
# symlinked npm bin, then delegates to the Node-based installer runtime.
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_PATH="$0"
|
|
while [ -L "$SCRIPT_PATH" ]; do
|
|
link_dir="$(cd "$(dirname "$SCRIPT_PATH")" && pwd)"
|
|
SCRIPT_PATH="$(readlink "$SCRIPT_PATH")"
|
|
[[ "$SCRIPT_PATH" != /* ]] && SCRIPT_PATH="$link_dir/$SCRIPT_PATH"
|
|
done
|
|
SCRIPT_DIR="$(cd "$(dirname "$SCRIPT_PATH")" && pwd)"
|
|
|
|
# Auto-install Node dependencies when running from a git clone.
|
|
# SECURITY: --ignore-scripts blocks preinstall/postinstall RCE from a
|
|
# compromised dependency. ECC deps are pure JS (no native build step).
|
|
if [ ! -d "$SCRIPT_DIR/node_modules" ]; then
|
|
echo "[ECC] Installing dependencies..."
|
|
(cd "$SCRIPT_DIR" && npm install --ignore-scripts --no-audit --no-fund --loglevel=error)
|
|
fi
|
|
|
|
# On MSYS2/Git Bash, convert the POSIX path to a Windows path so Node.js
|
|
# (a native Windows binary) receives a valid path instead of a doubled one
|
|
# like G:\g\projects\... that results from Git Bash's auto path conversion.
|
|
if command -v cygpath &>/dev/null; then
|
|
NODE_SCRIPT="$(cygpath -w "$SCRIPT_DIR/scripts/install-apply.js")"
|
|
else
|
|
NODE_SCRIPT="$SCRIPT_DIR/scripts/install-apply.js"
|
|
fi
|
|
|
|
exec node "$NODE_SCRIPT" "$@"
|