fix: 최초 설치 진행상태 즉시 표시

설치 시작부터 진행상태를 즉시 표시하고 안정 starter 버전 호환 및 기존 설치 안전성 검증 계보를 main에 통합합니다.

Author: onjsdnjs

.github/workflows/phase-acceptance.yml

@@ -14,6 +14,7 @@ jobs:
   installer-locale:
     name: Installer locale / ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
+    timeout-minutes: 45
     strategy:
       fail-fast: false
       matrix:
@@ -52,13 +53,18 @@ jobs:
           if ($errors.Count) { throw ($errors | Out-String) }
 
       - name: Run installer fault and locale acceptance
+        env:
+          CONTEXA_LIFECYCLE_REPEATS: '20'
+          CONTEXA_FAULT_REPEATS: '5'
         run: >-
           node -e "const f=require('fs'),c=require('child_process');const r=c.spawnSync(process.execPath,['--test','test/installer-runtime.test.js'],{encoding:'utf8',windowsHide:true});const out=(r.stdout||'')+(r.stderr||'');f.writeFileSync('installer-runtime.tap',out);process.stdout.write(out);process.exit(r.status===null?1:r.status)"
 
       - name: Run the full installer fault matrix with PowerShell 7
         if: runner.os == 'Windows'
         env:
           CONTEXA_TEST_POWERSHELL: pwsh.exe
+          CONTEXA_LIFECYCLE_REPEATS: '20'
+          CONTEXA_FAULT_REPEATS: '5'
         run: >-
           node -e "const f=require('fs'),c=require('child_process');const r=c.spawnSync(process.execPath,['--test','test/installer-runtime.test.js'],{encoding:'utf8',windowsHide:true});const out=(r.stdout||'')+(r.stderr||'');f.writeFileSync('installer-runtime-pwsh.tap',out);process.stdout.write(out);process.exit(r.status===null?1:r.status)"
 
@@ -122,6 +128,7 @@ jobs:
           CONTEXA_SKIP_PATH_UPDATE: '1'
         run: |
           set -euo pipefail
+          test "$(id -u)" -ne 0
           expected_current="${CONTEXA_PHASE_TAG#v}"
           expected_previous="${CONTEXA_PREVIOUS_TAG#v}"
           CONTEXA_VERSION="$CONTEXA_PREVIOUS_TAG" sh ./install.sh

install.ps1

@@ -246,8 +246,8 @@ function Get-TargetRelease {
     if ($version -notmatch '^v[0-9A-Za-z][0-9A-Za-z._-]*$' -or $cliVersion -ne $version.Substring(1)) {
         throw 'Signed channel manifest tag and CLI version do not match.'
     }
-    if (-not $starterVersion.EndsWith('-SNAPSHOT')) {
-        throw 'Signed snapshot channel requires a SNAPSHOT starter version.'
+    if ($starterVersion -notmatch '^[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z][0-9A-Za-z.-]*)?$') {
+        throw 'Signed channel manifest starter version is invalid.'
     }
     if ($releaseManifestSha256 -notmatch '^[0-9a-f]{64}$') {
         throw 'Signed channel manifest release digest is invalid.'
@@ -525,11 +525,13 @@ function Invoke-ContexaInstaller {
         throw ((Select-InstallerText 'Unsupported CONTEXA_INSTALL_ACTION' '7KeA7JuQ7ZWY7KeAIOyViuuKlCBDT05URVhBX0lOU1RBTExfQUNUSU9O') + ': ' + $action)
     }
 
+    Write-Host ('  ' + (Select-InstallerText 'Starting Contexa CLI installation.' 'Q29udGV4YSBDTEkg7ISk7LmY66W8IOyLnOyeke2VqeuLiOuLpC4='))
     $downloadBase = if ([string]::IsNullOrWhiteSpace($env:CONTEXA_RELEASE_DOWNLOAD_BASE)) { $script:DefaultDownloadBase } else { $env:CONTEXA_RELEASE_DOWNLOAD_BASE.TrimEnd('/') }
     $targetRelease = Get-TargetRelease $downloadBase
     $version = $targetRelease.ReleaseTag
     $expectedCliVersion = $targetRelease.CliVersion
     $releaseBase = $downloadBase + '/' + $version
+    Write-Host ('  ' + ((Select-InstallerText 'Release {0} found. Checking authenticity...' '66a066as7IqkIHswfeydhCDtmZXsnbjtlojsirXri4jri6QuIOyLoOuisOyEseydhCDqsoDspp3tlZjripQg7KSR7J6F64uI64ukLi4u') -f $version))
 
     $manifestBytes = Invoke-BoundedDownload ($releaseBase + '/release-manifest.json')
     $signatureBytes = Invoke-BoundedDownload ($releaseBase + '/release-manifest.json.sig')
@@ -591,6 +593,7 @@ function Invoke-ContexaInstaller {
     $hadOriginal = Test-Path -LiteralPath $finalPath -PathType Leaf
     $replacementStarted = $false
     try {
+        Write-Host ('  ' + (Select-InstallerText 'Downloading Contexa CLI and verifying the file...' 'Q29udGV4YSBDTEnrpbwg64uk7Jq066Gc65Oc7ZWY6rOgIO2MjOydvCDrrLTqsrDshLHsnYQg6rKA7Kad7ZWY64qUIOykkeyeheuLiOuLpC4uLg=='))
         $binaryBytes = Invoke-BoundedDownload ($releaseBase + '/' + $asset.file)
         [System.IO.File]::WriteAllBytes($temporaryPath, $binaryBytes)
         Write-InstallerTransaction $markerPath 'DOWNLOADED' $finalPath $backupPath $temporaryPath $expectedCliVersion $hadOriginal

install.sh

@@ -496,7 +496,7 @@ else
   CHANNEL_RELEASE_MANIFEST_SHA=$(manifest_string_value "$CHANNEL_MANIFEST_FILE" releaseManifestSha256)
   [ "$RESOLVED_CHANNEL" = snapshot ] || fail "Signed channel manifest is not the snapshot channel."
   [ "$CHANNEL_CLI_VERSION" = "${VERSION#v}" ] || fail "Signed channel manifest tag and CLI version do not match."
-  case "$CHANNEL_STARTER_VERSION" in *-SNAPSHOT) ;; *) fail "Signed snapshot channel requires a SNAPSHOT starter version." ;; esac
+  printf '%s\n' "$CHANNEL_STARTER_VERSION" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z][0-9A-Za-z.-]*)?$' || fail "Signed channel manifest starter version is invalid."
   printf '%s\n' "$CHANNEL_RELEASE_MANIFEST_SHA" | grep -Eq '^[0-9a-f]{64}$' || fail "Signed channel manifest release digest is invalid."
   printf '%s\n' "$CHANNEL_SOURCE_COMMIT" | grep -Eq '^[0-9a-f]{40}$' || fail "Signed channel manifest source commit is invalid."
 fi

package.json

@@ -1,7 +1,7 @@
 {
   "name": "install-ctxa",
   "private": true,
-  "version": "0.1.2-phase5.1",
+  "version": "0.1.3",
   "scripts": {
     "test": "node --test test/*.test.js"
   }