@abacus-ai/cli 2.10.15 → 2.10.16-canary.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abacus-ai/cli",
-  "version": "2.10.15",
+  "version": "2.10.16-canary.1",
   "description": "Coding agent for your terminal, with any model: one Abacus AI plan, your ChatGPT subscription, your own API keys, or local models.",
   "keywords": [
     "abacus",

package/scripts/npm-wrapper/install.cjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 "use strict";
 
+const crypto = require("node:crypto");
 const fs = require("node:fs");
 const path = require("node:path");
 const os = require("node:os");
@@ -212,6 +213,8 @@ async function main() {
 
   const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "abacusai-install-"));
   const archivePath = path.join(tmpDir, archiveName);
+  // Unique per install: two concurrent installs of one version must not copy into one file.
+  const stagedPath = `${targetPath}.${process.pid}.${crypto.randomBytes(6).toString("hex")}.new`;
 
   process.stdout.write(`abacusai: downloading v${version} for ${target}...\n`);
 
@@ -220,7 +223,6 @@ async function main() {
     extract(archivePath, tmpDir, ext);
 
     const sourceBinary = path.join(tmpDir, binaryName);
-    const stagedPath = `${targetPath}.new`;
     fs.copyFileSync(sourceBinary, stagedPath);
     if (process.platform !== "win32") fs.chmodSync(stagedPath, 0o755);
     fs.renameSync(stagedPath, targetPath); // atomic within the version dir
@@ -230,6 +232,9 @@ async function main() {
 
     process.stdout.write(`abacusai: installed v${version} to ${targetPath}\n`);
   } finally {
+    try {
+      fs.rmSync(stagedPath, { force: true });
+    } catch {}
     try {
       fs.rmSync(tmpDir, { recursive: true, force: true });
     } catch {}