Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork 72
feat(claude-code): install from script as npm is deprecated by Anthropic#211
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Uh oh!
There was an error while loading. Please reload this page.
Changes from all commits
File filter
Filter by extension
Conversations
Uh oh!
There was an error while loading. Please reload this page.
Jump to
Uh oh!
There was an error while loading. Please reload this page.
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,158 @@ | ||
| #!/bin/bash | ||
| set -e | ||
| # Parse command line arguments | ||
| TARGET="$1" # Optional target parameter | ||
| # Validate target if provided | ||
| if [[ -n "$TARGET" ]] && [[ ! "$TARGET" =~ ^(stable|latest|[0-9]+\.[0-9]+\.[0-9]+(-[^[:space:]]+)?)$ ]]; then | ||
| echo "Usage: $0 [stable|latest|VERSION]" >&2 | ||
| exit 1 | ||
| fi | ||
| GCS_BUCKET="https://storage.googleapis.com/claude-code-dist-86c565f3-f756-42ad-8dfa-d59b1c096819/claude-code-releases" | ||
| DOWNLOAD_DIR="$HOME/.claude/downloads" | ||
| # Check for required dependencies | ||
| DOWNLOADER="" | ||
| if command -v curl >/dev/null 2>&1; then | ||
| DOWNLOADER="curl" | ||
| elif command -v wget >/dev/null 2>&1; then | ||
| DOWNLOADER="wget" | ||
| else | ||
| echo "Either curl or wget is required but neither is installed" >&2 | ||
| exit 1 | ||
| fi | ||
| # Check if jq is available (optional) | ||
| HAS_JQ=false | ||
| if command -v jq >/dev/null 2>&1; then | ||
| HAS_JQ=true | ||
| fi | ||
| # Download function that works with both curl and wget | ||
| download_file() { | ||
| local url="$1" | ||
| local output="$2" | ||
| if [ "$DOWNLOADER" = "curl" ]; then | ||
| if [ -n "$output" ]; then | ||
| curl -fsSL -o "$output" "$url" | ||
| else | ||
| curl -fsSL "$url" | ||
| fi | ||
| elif [ "$DOWNLOADER" = "wget" ]; then | ||
| if [ -n "$output" ]; then | ||
| wget -q -O "$output" "$url" | ||
| else | ||
| wget -q -O - "$url" | ||
| fi | ||
| else | ||
| return 1 | ||
| fi | ||
| } | ||
| # Simple JSON parser for extracting checksum when jq is not available | ||
| get_checksum_from_manifest() { | ||
| local json="$1" | ||
| local platform="$2" | ||
| # Normalize JSON to single line and extract checksum | ||
| json=$(echo "$json" | tr -d '\n\r\t' | sed 's/ \+/ /g') | ||
| # Extract checksum for platform using bash regex | ||
| if [[ $json =~ \"$platform\"[^}]*\"checksum\"[[:space:]]*:[[:space:]]*\"([a-f0-9]{64})\" ]]; then | ||
| echo "${BASH_REMATCH[1]}" | ||
| return 0 | ||
| fi | ||
| return 1 | ||
| } | ||
| # Detect platform | ||
| case "$(uname -s)" in | ||
| Darwin) os="darwin" ;; | ||
| Linux) os="linux" ;; | ||
| MINGW*|MSYS*|CYGWIN*) echo "Windows is not supported by this script. See https://code.claude.com/docs for installation options." >&2; exit 1 ;; | ||
| *) echo "Unsupported operating system: $(uname -s). See https://code.claude.com/docs for supported platforms." >&2; exit 1 ;; | ||
| esac | ||
| case "$(uname -m)" in | ||
| x86_64|amd64) arch="x64" ;; | ||
| arm64|aarch64) arch="arm64" ;; | ||
| *) echo "Unsupported architecture: $(uname -m)" >&2; exit 1 ;; | ||
| esac | ||
| # Detect Rosetta 2 on macOS: if the shell is running as x64 under Rosetta on an ARM Mac, | ||
| # download the native arm64 binary instead of the x64 one | ||
| if [ "$os" = "darwin" ] && [ "$arch" = "x64" ]; then | ||
| if [ "$(sysctl -n sysctl.proc_translated 2>/dev/null)" = "1" ]; then | ||
| arch="arm64" | ||
| fi | ||
| fi | ||
| # Check for musl on Linux and adjust platform accordingly | ||
| if [ "$os" = "linux" ]; then | ||
| if [ -f /lib/libc.musl-x86_64.so.1 ] || [ -f /lib/libc.musl-aarch64.so.1 ] || ldd /bin/ls 2>&1 | grep -q musl; then | ||
| platform="linux-${arch}-musl" | ||
| else | ||
| platform="linux-${arch}" | ||
| fi | ||
| else | ||
| platform="${os}-${arch}" | ||
| fi | ||
| mkdir -p "$DOWNLOAD_DIR" | ||
| # Always download latest version (which has the most up-to-date installer) | ||
| version=$(download_file "$GCS_BUCKET/latest") | ||
| # Download manifest and extract checksum | ||
| manifest_json=$(download_file "$GCS_BUCKET/$version/manifest.json") | ||
| # Use jq if available, otherwise fall back to pure bash parsing | ||
| if [ "$HAS_JQ" = true ]; then | ||
| checksum=$(echo "$manifest_json" | jq -r ".platforms[\"$platform\"].checksum // empty") | ||
| else | ||
| checksum=$(get_checksum_from_manifest "$manifest_json" "$platform") | ||
| fi | ||
| # Validate checksum format (SHA256 = 64 hex characters) | ||
| if [ -z "$checksum" ] || [[ ! "$checksum" =~ ^[a-f0-9]{64}$ ]]; then | ||
| echo "Platform $platform not found in manifest" >&2 | ||
| exit 1 | ||
| fi | ||
| # Download and verify | ||
| binary_path="$DOWNLOAD_DIR/claude-$version-$platform" | ||
| if ! download_file "$GCS_BUCKET/$version/$platform/claude" "$binary_path"; then | ||
| echo "Download failed" >&2 | ||
| rm -f "$binary_path" | ||
| exit 1 | ||
| fi | ||
| # Pick the right checksum tool | ||
| if [ "$os" = "darwin" ]; then | ||
| actual=$(shasum -a 256 "$binary_path" | cut -d' ' -f1) | ||
| else | ||
| actual=$(sha256sum "$binary_path" | cut -d' ' -f1) | ||
| fi | ||
| if [ "$actual" != "$checksum" ]; then | ||
| echo "Checksum verification failed" >&2 | ||
| rm -f "$binary_path" | ||
| exit 1 | ||
| fi | ||
| chmod +x "$binary_path" | ||
| # Run claude install to set up launcher and shell integration | ||
| echo "Setting up Claude Code..." | ||
| "$binary_path" install ${TARGET:+"$TARGET"} | ||
| # Clean up downloaded file | ||
| rm -f "$binary_path" | ||
| echo "" | ||
| echo "✅ Installation complete!" | ||
| echo "" | ||
This file was deleted.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
where did we get this url? who own this bucket?
Can we please not normalize putting random bucket url? Isn't this how a supply-chain attack works? :(
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi! Thanks for raising your concerns.
I think in this case we should be fine. The recommended way of Claude Code installation is:
curl -fsSL https://claude.ai/install.sh | bashWhile working on migration from npm installed Claude Code to the script based installation, I decided to simply save that
install.shscript assrc/claude-code/bootstrap.shand run it like here - I'm not a fan of downloading a script and piping it into bash right away.So the whole content of
src/claude-code/bootstrap.shis the actual Claude Code installation script, and the bucket is owned (or at least should be) by Anthropic.To be honest, I must have missed this part of the documentation about native Linux repos being supported, maybe that's the better way - I will take look into that in free time and test