From bcf380564f88dc458a8292e749291e5a5d5ef22f Mon Sep 17 00:00:00 2001
From: AnAverageBeing <placeholder@users.noreply.github.com>
Date: Wed, 27 May 2026 21:07:16 +0530
Subject: [PATCH] add confirmation prompt before running custom extension
 scripts

extensions that ship a custom install, update or removal script now
show a 10 second countdown before the script runs. press enter to
continue immediately or ctrl+c to cancel. non-interactive sessions
skip the wait automatically.
---
 scripts/commands/extensions/install.sh |  4 ++--
 scripts/commands/extensions/remove.sh  |  2 +-
 scripts/libraries/misc.sh              | 22 ++++++++++++++++++++++
 3 files changed, 25 insertions(+), 3 deletions(-)

diff --git a/scripts/commands/extensions/install.sh b/scripts/commands/extensions/install.sh
index e9f27f83..ba33724f 100644
--- a/scripts/commands/extensions/install.sh
+++ b/scripts/commands/extensions/install.sh
@@ -178,7 +178,7 @@ InstallExtension() {
     # run extension update script
     if [[ -f ".blueprint/extensions/$identifier/private/update.sh" ]]; then
       PRINT WARNING "Extension uses a custom update script, proceed with caution."
-      hide_progress
+      blueprint_custom_script_confirm "update"
       chmod --silent +x ".blueprint/extensions/$identifier/private/update.sh" 2>> "$BLUEPRINT__DEBUG"
 
 
@@ -1308,7 +1308,7 @@ InstallExtension() {
   if [[ ( $F_developerIgnoreInstallScript == false ) || ( $dev != true ) ]]; then
     if [[ -f ".blueprint/extensions/$identifier/private/install.sh" ]]; then
       PRINT WARNING "Extension uses a custom installation script, proceed with caution."
-      hide_progress
+      blueprint_custom_script_confirm "installation"
       chmod --silent +x ".blueprint/extensions/$identifier/private/install.sh" 2>> "$BLUEPRINT__DEBUG"
 
       # Run script while also parsing some useful variables for the install script to use.
diff --git a/scripts/commands/extensions/remove.sh b/scripts/commands/extensions/remove.sh
index 5d013090..a41ffc89 100644
--- a/scripts/commands/extensions/remove.sh
+++ b/scripts/commands/extensions/remove.sh
@@ -91,7 +91,7 @@ RemoveExtension() {
 
   if [[ -f ".blueprint/extensions/$identifier/private/remove.sh" ]]; then
     PRINT WARNING "Extension uses a custom removal script, proceed with caution."
-    hide_progress
+    blueprint_custom_script_confirm "removal"
     chmod +x ".blueprint/extensions/$identifier/private/remove.sh"
 
     # Run script while also parsing some useful variables for the uninstall script to use.
diff --git a/scripts/libraries/misc.sh b/scripts/libraries/misc.sh
index b4e7b5af..0686e977 100644
--- a/scripts/libraries/misc.sh
+++ b/scripts/libraries/misc.sh
@@ -103,3 +103,25 @@ extract_extension() {
 
   return 0
 }
+
+
+blueprint_custom_script_confirm() {
+  local phase="$1"
+  local deadline remaining
+
+  if [[ ! -t 0 ]] || [[ -n "${BLUEPRINT_SKIP_SCRIPT_CONFIRM:-}" ]]; then
+    return 0
+  fi
+
+  hide_progress
+
+  deadline=$((SECONDS + 10))
+
+  while [[ $SECONDS -lt $deadline ]]; do
+    remaining=$((deadline - SECONDS))
+    printf "\r\033[2m%s\033[0m \x1b[35;1mInput:\x1b[0m Extension has a custom %s script. Press \x1b[32;1m[ENTER]\x1b[0m to continue or \x1b[31;1m^C\x1b[0m to abort. \x1b[2m(auto-proceeding in %ds)\x1b[0m   " "$(date +"%H:%M:%S")" "$phase" "$remaining"
+    read -r -t 1 && { printf "\r\033[K"; return 0; }
+  done
+
+  printf "\r\033[K"
+}