Function download_verify_install

src/cli/cli.c:4241–4277

Download, verify checksum, kill old instances, and install binary. Returns 0 on success. */

/* Download, verify checksum, kill old instances, and install binary. Returns 0 on success. */
static int download_verify_install(const char *url, const char *ext, const char *os,
                                   const char *arch, bool want_ui, const char *bin_dest) {
    char tmp_archive[CLI_BUF_256];
    snprintf(tmp_archive, sizeof(tmp_archive), "%s/cbm-update.%s", cbm_tmpdir(), ext);

    int rc = cbm_download_to_file(url, tmp_archive);
    if (rc != 0) {
        (void)fprintf(stderr, "error: download failed (exit %d)\n", rc);
        cbm_unlink(tmp_archive);
        return CLI_TRUE;
    }

    char archive_name[CLI_BUF_256];
    /* Must match build_update_url: linux uses the static "-portable" asset. */
    const char *portable = (strcmp(os, "linux") == 0) ? "-portable" : "";
    snprintf(archive_name, sizeof(archive_name), "codebase-memory-mcp-%s%s-%s%s.%s",
             want_ui ? "ui-" : "", os, arch, portable, ext);
    /* Fail closed: install only a positively-verified download. A mismatch,
     * a missing checksum entry, or an unavailable hash tool (crc != 0) all
     * abort rather than install an unverified binary. */
    int crc = verify_download_checksum(tmp_archive, archive_name);
    if (crc != 0) {
        (void)fprintf(stderr, "error: refusing to install an unverified download\n");
        cbm_unlink(tmp_archive);
        return CLI_TRUE;
    }

    int killed = cbm_kill_other_instances();
    if (killed > 0) {
        printf("Stopped %d running MCP server instance(s).\n", killed);
    }

    if (extract_and_install_binary((extract_install_args_t){tmp_archive, ext, bin_dest}) != 0) {
        return CLI_TRUE;
    }
    return 0;
}

/* Select update variant. Returns 0=standard, 1=ui, -1=error. */
static int select_update_variant(int variant_flag) {