feat: add /install.sh endpoint and fix alias URL in docs

Author: fullstackjam

src/docs/config-options.md

@@ -99,7 +99,7 @@ Snapshot data attached to this config (auto-populated when creating from `openbo
 
 ### `alias`
 
-Short URL alias for easy sharing. If set, the config is accessible at `openboot.dev/install?alias=<alias>`.
+Short URL alias for easy sharing. If set, the config is accessible at `openboot.dev/<alias>` — for example, `curl -fsSL https://openboot.dev/my-setup | bash`.
 
 - **Type:** string
 - **Required:** no

src/docs/personal.md

@@ -39,7 +39,7 @@ It scans your Homebrew packages, macOS preferences, shell config, and git settin
 After uploading, you get a link:
 
 ```
-curl -fsSL https://openboot.dev/yourname/my-setup | bash
+curl -fsSL https://openboot.dev/yourname/my-setup/install.sh | bash
 ```
 
 Next time you switch machines, run that one command. You can also save locally without uploading:

src/hooks.server.ts

@@ -83,6 +83,42 @@ export const handle: Handle = async ({ event, resolve }) => {
 		}
 	}
 
+	const installShMatch = path.match(/^\/([a-z0-9_-]+)\/([a-z0-9_-]+)\/install\.sh$/i);
+	if (installShMatch) {
+		const env = event.platform?.env;
+		if (env) {
+			const username = installShMatch[1];
+			const slug = installShMatch[2];
+
+			const user = await env.DB.prepare('SELECT id FROM users WHERE username = ?').bind(username).first<{ id: string }>();
+			if (user) {
+				const config = await env.DB.prepare('SELECT custom_script, visibility, dotfiles_repo FROM configs WHERE user_id = ? AND slug = ?')
+					.bind(user.id, slug)
+					.first<{ custom_script: string; visibility: string; dotfiles_repo: string }>();
+
+				if (config) {
+					if (config.visibility === 'private') {
+						const script = generatePrivateInstallScript(env.APP_URL, username, slug);
+						return withSecurityHeaders(new Response(script, {
+							headers: { 'Content-Type': 'text/plain; charset=utf-8', 'Cache-Control': 'no-cache' }
+						}));
+					}
+
+					const script = generateInstallScript(username, slug, config.custom_script, config.dotfiles_repo || '');
+
+					env.DB.prepare('UPDATE configs SET install_count = install_count + 1 WHERE user_id = ? AND slug = ?').bind(user.id, slug).run().catch(() => {});
+
+					return withSecurityHeaders(new Response(script, {
+						headers: {
+							'Content-Type': 'text/plain; charset=utf-8',
+							'Cache-Control': 'no-cache'
+						}
+					}));
+				}
+			}
+		}
+	}
+
 	const twoSegMatch = path.match(/^\/([a-z0-9_-]+)\/([a-z0-9_-]+)$/i);
 	if (twoSegMatch) {
 		const ua = event.request.headers.get('user-agent') || '';