From b111fffeaacb2a111900d24f4f8ec1ac83301ec5 Mon Sep 17 00:00:00 2001
From: Laan Tungir <laantungir@proton.md>
Date: Fri, 17 Jul 2026 11:55:42 -0400
Subject: [PATCH] v0.0.37 - Fix install.sh: read confirmation from /dev/tty,
 fix color rendering in summary

---
 VERSION       |  2 +-
 install.sh    | 28 ++++++++++++++++++----------
 src/version.h |  4 ++--
 3 files changed, 21 insertions(+), 13 deletions(-)

diff --git a/VERSION b/VERSION
index e85669f..1435d6c 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.0.36
+0.0.37
diff --git a/install.sh b/install.sh
index b373745..9bbf638 100755
--- a/install.sh
+++ b/install.sh
@@ -413,18 +413,26 @@ main() {
     local method="prebuilt binary from Gitea"
     $BUILD_FROM_SOURCE && method="source build from $SB_REPO"
 
-    cat >&2 <<EOF
-${BLUE}[INFO]${NC} sovereign_browser will be installed:
-${BLUE}[INFO]${NC}   Install prefix : $INSTALL_PREFIX
-${BLUE}[INFO]${NC}   Binary method  : $method
-${BLUE}[INFO]${NC}   FIPS           : built from source ($FIPS_REPO), CAP_NET_ADMIN set
-${BLUE}[INFO]${NC}   Tor            : apt package 'tor'
-${BLUE}[INFO]${NC}   apt deps       : ${APT_PACKAGES[*]}
-EOF
+    # Use print_info so colors render via `echo -e` (a plain `cat` heredoc
+    # would print the literal \033 escape sequences).
+    print_info "sovereign_browser will be installed:"
+    print_info "  Install prefix : $INSTALL_PREFIX"
+    print_info "  Binary method  : $method"
+    print_info "  FIPS           : built from source ($FIPS_REPO), CAP_NET_ADMIN set"
+    print_info "  Tor            : apt package 'tor'"
+    print_info "  apt deps       : ${APT_PACKAGES[*]}"
 
     if ! $ASSUME_YES; then
-        echo -e "${YELLOW}[WARNING]${NC} This will run apt-get install (sudo) and clone/build FIPS. Continue? [y/N] " >&2
-        read -r reply || reply=""
+        print_warning "This will run apt-get install (sudo) and clone/build FIPS. Continue? [y/N]"
+        # Read from /dev/tty, not stdin: in `curl | bash` mode stdin is the
+        # curl pipe (the script text), so a plain `read` would hit EOF and
+        # abort immediately. /dev/tty is the user's terminal.
+        if [[ -r /dev/tty ]]; then
+            read -r reply < /dev/tty || reply=""
+        else
+            # No tty available (e.g. non-interactive CI) — require --yes.
+            die "No tty available for confirmation. Re-run with --yes to skip prompts."
+        fi
         reply="${reply:-n}"
         if [[ ! "${reply,,}" =~ ^y(es)?$ ]]; then
             die "Aborted by user."
diff --git a/src/version.h b/src/version.h
index a8c4dce..b0b8f42 100644
--- a/src/version.h
+++ b/src/version.h
@@ -11,9 +11,9 @@
 #ifndef SOVEREIGN_BROWSER_VERSION_H
 #define SOVEREIGN_BROWSER_VERSION_H
 
-#define SB_VERSION         "v0.0.36"
+#define SB_VERSION         "v0.0.37"
 #define SB_VERSION_MAJOR   0
 #define SB_VERSION_MINOR   0
-#define SB_VERSION_PATCH   36
+#define SB_VERSION_PATCH   37
 
 #endif /* SOVEREIGN_BROWSER_VERSION_H */