purescript-alexandrite/install.ps1 at main · purefunctor/purescript-alexandrite · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
$ErrorActionPreference = "Stop"

$Repository = "purefunctor/purescript-alexandrite"
$Binary = "purescript-alexandrite.exe"
$InstallDirectory = if ($env:ALEXANDRITE_INSTALL_DIR) {
    $env:ALEXANDRITE_INSTALL_DIR
} else {
    Join-Path $env:LOCALAPPDATA "Alexandrite\bin"
}
$Version = if ($env:ALEXANDRITE_VERSION) { $env:ALEXANDRITE_VERSION } else { "latest" }

if (-not [Environment]::Is64BitOperatingSystem) {
    throw "Alexandrite supports only 64-bit Windows"
}

if ($Version -eq "latest") {
    $Release = Invoke-RestMethod -Uri "https://api.github.com/repos/$Repository/releases/latest"
    $Version = $Release.tag_name
}

if ($Version -notmatch '^v[0-9]') {
    throw "Invalid release version: $Version"
}

$Target = "x86_64-pc-windows-msvc"
$ArchiveName = "purescript-alexandrite-$Target.zip"
$ArchiveUrl = "https://github.com/$Repository/releases/download/$Version/$ArchiveName"
$TemporaryDirectory = Join-Path ([System.IO.Path]::GetTempPath()) ("alexandrite-install-" + [guid]::NewGuid())
$Archive = Join-Path $TemporaryDirectory $ArchiveName

New-Item -ItemType Directory -Path $TemporaryDirectory | Out-Null
try {
    Write-Host "Downloading purescript-alexandrite $Version for $Target"
    Invoke-WebRequest -Uri $ArchiveUrl -OutFile $Archive

    if ($Version -match '^v0\.0\.([0-9]|1[0-3])$') {
        Write-Warning "$Version predates release attestations and cannot be verified."
    } else {
        $GitHubAttestationsAvailable = if (Get-Command gh -ErrorAction SilentlyContinue) {
            & gh attestation verify --help 2>$null | Out-Null
            $LASTEXITCODE -eq 0
        } else {
            $false
        }

        if ($GitHubAttestationsAvailable) {
            Write-Host "Verifying GitHub release attestation"
            & gh attestation verify $Archive --repo $Repository | Out-Null
            if ($LASTEXITCODE -ne 0) {
                throw "GitHub release attestation verification failed"
            }
        } else {
            Write-Warning "A GitHub CLI with attestation support is not installed; release provenance was not verified."
            Write-Warning "Install or update gh from https://cli.github.com/ to verify future installations."
        }
    }

    Expand-Archive -LiteralPath $Archive -DestinationPath $TemporaryDirectory
    $ExtractedBinary = Join-Path $TemporaryDirectory "purescript-alexandrite-$Target\$Binary"
    if (-not (Test-Path -LiteralPath $ExtractedBinary -PathType Leaf)) {
        throw "Release archive does not contain $Binary"
    }

    New-Item -ItemType Directory -Force -Path $InstallDirectory | Out-Null
    $Destination = Join-Path $InstallDirectory $Binary
    $InstallationFile = Join-Path $InstallDirectory (".alexandrite-install-" + [guid]::NewGuid() + ".exe")
    Copy-Item -LiteralPath $ExtractedBinary -Destination $InstallationFile
    Move-Item -Force -LiteralPath $InstallationFile -Destination $Destination

    Write-Host "Installed $Version to $Destination"
    if ($env:PATH.Split([IO.Path]::PathSeparator) -notcontains $InstallDirectory) {
        Write-Host "Add $InstallDirectory to PATH to run purescript-alexandrite."
    }
} finally {
    Remove-Item -Recurse -Force -ErrorAction SilentlyContinue $TemporaryDirectory
}