idx-cli/scripts
hermes 907223a838 fix(npm): install to a user cache when the package is read-only; signal-safe first run
- When the package's bin/ is not writable (a root-owned `sudo npm i -g`
  whose postinstall npm 12 skipped), install the binary to a per-user
  cache ($XDG_CACHE_HOME, ~/.cache, ~/Library/Caches on macOS, under
  <package>/<version>/); the launcher looks in both. Previously the first
  run failed with EACCES and advice to rerun npm install.
- Run the first-run installer asynchronously with SIGTERM/SIGHUP
  forwarded, so a supervisor stopping the launcher stops the download;
  the installer removes its partial file and the launcher exits by the
  same signal.
- Verify an IDX_BINARY_URL local file's checksum on the copy, not the
  source, so the installed bytes are the checked ones.
- npm smoke covers the read-only fallback.

The last three come from a Codex review.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3syn2fN2LNo5pvTSqc6eh
2026-10-16 09:54:30 +00:00
..
audit-msn-fundamentals.sh fix: handle non-finite msn key ratios 2026-04-13 23:34:36 +07:00
build-latest-ownership-snapshot.sh fix(ownership): bound snapshot download by manifest size; clean refused builds 2026-09-25 22:31:40 +00:00
build-ownership-snapshot.sh fix(ownership): verify snapshot assets before publishing manifests 2026-09-25 10:37:32 +00:00
check-ownership-snapshot-freshness.sh fix(ownership): make publisher RESULT contract hold on every path 2026-09-24 21:50:51 +00:00
idx.js fix(npm): install to a user cache when the package is read-only; signal-safe first run 2026-10-16 09:54:30 +00:00
install-sh-test.sh ci(nix): unify cached verification and strengthen packaged smoke 2026-10-03 16:22:11 +00:00
install.js fix(npm): install to a user cache when the package is read-only; signal-safe first run 2026-10-16 09:54:30 +00:00
live-smoke.sh test: add golden output parity gate and live A/B compare 2026-10-14 08:33:25 +00:00
npm-smoke.sh fix(npm): install to a user cache when the package is read-only; signal-safe first run 2026-10-16 09:54:30 +00:00
publish-ownership-snapshot-test.sh fix(ownership): update syncs when a same-date snapshot is rebuilt 2026-10-14 18:52:13 +00:00
publish-ownership-snapshot.sh fix: address final review (path traversal, sync races, MCP limits) 2026-10-14 21:58:37 +00:00