@aiviatic/kindling 0.1.0 → 0.1.1

package/bootstrap/kindling.cmd

@@ -1,13 +1,13 @@
-@echo off
-REM Kindling bootstrap entry — Windows. The user downloads THIS ONE FILE and double-clicks it.
-REM It FETCHES + runs the setup script from the host, so no sibling files are needed (the earlier
-REM `-File %~dp0setup.ps1` required setup.ps1 + lib\common.ps1 next to the .cmd, which a lone
-REM download doesn't have). Mirrors the macOS/Linux one-liner `curl -fsSL .../go | bash`.
-REM   -ExecutionPolicy Bypass : lets the unsigned setup script run FOR THIS PROCESS ONLY
-REM                             (it does not change any system-wide policy — safe + reversible).
-REM   -NoProfile              : skips the user's PowerShell profile so nothing interferes (required).
-REM   irm ... | iex           : Invoke-RestMethod fetches setup.ps1 over HTTPS, Invoke-Expression
-REM                             runs it (the PowerShell equivalent of curl|bash). setup.ps1 is
-REM                             self-contained (helpers inlined), so no on-disk siblings are needed.
-powershell -ExecutionPolicy Bypass -NoProfile -Command "irm https://kindling.aiviatic.com/setup.ps1 | iex"
-pause
+@echo off
+REM Kindling bootstrap entry — Windows. The user downloads THIS ONE FILE and double-clicks it.
+REM It FETCHES + runs the setup script from the host, so no sibling files are needed (the earlier
+REM `-File %~dp0setup.ps1` required setup.ps1 + lib\common.ps1 next to the .cmd, which a lone
+REM download doesn't have). Mirrors the macOS/Linux one-liner `curl -fsSL .../install | bash`.
+REM   -ExecutionPolicy Bypass : lets the unsigned setup script run FOR THIS PROCESS ONLY
+REM                             (it does not change any system-wide policy — safe + reversible).
+REM   -NoProfile              : skips the user's PowerShell profile so nothing interferes (required).
+REM   irm ... | iex           : Invoke-RestMethod fetches setup.ps1 over HTTPS, Invoke-Expression
+REM                             runs it (the PowerShell equivalent of curl|bash). setup.ps1 is
+REM                             self-contained (helpers inlined), so no on-disk siblings are needed.
+powershell -ExecutionPolicy Bypass -NoProfile -Command "irm https://kindling.aiviatic.com/setup.ps1 | iex"
+pause

package/bootstrap/setup.ps1

@@ -1,98 +1,111 @@
-# Kindling bootstrap — Windows. FETCHED + run by kindling.cmd (self-fetching one-file entry):
-#   powershell -ExecutionPolicy Bypass -NoProfile -Command "irm https://kindling.aiviatic.com/setup.ps1 | iex"
-# Ensures the pinned Node + Git (portable), then launches Kindling.
-#
-# SELF-CONTAINED for the `irm | iex` delivery path: there is NO file on disk (no $PSScriptRoot), so
-# the helpers are INLINED below rather than dot-sourced — mirroring setup.sh's inline helpers for
-# `curl | bash`. Pinned versions below MUST match engine/pins.ts (a unit test asserts this).
-# NOTE: portable Node/Git provisioning is the Windows SPIKE — validated on real Windows at the
-# dress rehearsal (mirrors engine/provision/node-windows.ts).
-$ErrorActionPreference = 'Stop'
-
-$KindlingNodeVersion = '24.16.0'  # == pins.node
-$KindlingVersion     = '0.1.0'    # == pins.kindling
-$NodeFloorMajor      = 20
-
-# --- Inline helpers (were bootstrap/lib/common.ps1; inlined for the file-less delivery) ----------
-function Say([string]$msg) { Write-Host "`n$msg" -ForegroundColor White }
-function Test-Cmd([string]$name) {
-  return [bool](Get-Command $name -ErrorAction SilentlyContinue)
-}
-# True if a Node on PATH meets the major-version floor.
-function Test-NodeOk([int]$floorMajor) {
-  if (-not (Test-Cmd 'node')) { return $false }
-  try {
-    $v = (& node -v) -replace '^v', ''
-    $major = [int]($v -split '\.')[0]
-    return $major -ge $floorMajor
-  } catch { return $false }
-}
-
-Say "Getting your computer ready. This usually takes about 5 minutes."
-
-# Plain-language guidance for the Windows security prompts (FR-7) - expected / safe / reversible.
-Say "Heads up: Windows may show a couple of security prompts. They're expected and safe:"
-Say " - SmartScreen ('Windows protected your PC'): click 'More info', then 'Run anyway'. Nothing is changed on your PC."
-Say " - This window already runs with -ExecutionPolicy Bypass for THIS process only; it does not change any system setting and is fully reversible."
-
-# --- Node (pinned, portable) --------------------------------------------------
-# $NodeExe stays $null when a system Node is reused (launch via PATH); the portable-install path
-# sets it to the absolute node.exe so the launch never depends on PATH (clean-runtime rule, AR6).
-$NodeExe = $null
-if (Test-NodeOk $NodeFloorMajor) {
-  Say "Node is already installed - reusing it."
-} else {
-  Say "Setting up Node - the engine your project runs on. This downloads about 30 MB, one time."
-  # Portable Node: download the pinned Windows zip from nodejs.org, VERIFY its SHA-256 against Node's
-  # published SHASUMS256.txt before touching it, extract, and point the launch at the absolute
-  # node.exe (clean-runtime rule AR6 — never rely on a mutated PATH). Mirrors node-windows.ts.
-  # NOTE: newly implemented; validate on real Windows (proxy/TLS-interception, extract, non-admin exec).
-  $ProgressPreference = 'SilentlyContinue'  # a visible progress bar makes Invoke-WebRequest ~10x slower
-  [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
-  $arch     = if ($env:PROCESSOR_ARCHITECTURE -eq 'ARM64') { 'arm64' } else { 'x64' }
-  $distName = "node-v$KindlingNodeVersion-win-$arch"
-  $nodeRoot = Join-Path $env:LOCALAPPDATA 'kindling\node'
-  $zipPath  = Join-Path $nodeRoot "$distName.zip"
-  $baseUrl  = "https://nodejs.org/dist/v$KindlingNodeVersion"
-  New-Item -ItemType Directory -Force -Path $nodeRoot | Out-Null
-  try {
-    Invoke-WebRequest -Uri "$baseUrl/$distName.zip" -OutFile $zipPath -UseBasicParsing
-    $shaLine  = ((Invoke-WebRequest -Uri "$baseUrl/SHASUMS256.txt" -UseBasicParsing).Content -split "`n" |
-                 Where-Object { $_ -match [regex]::Escape("$distName.zip") } | Select-Object -First 1)
-    $expected = ($shaLine -split '\s+')[0].ToLower()
-    $actual   = (Get-FileHash -Path $zipPath -Algorithm SHA256).Hash.ToLower()
-    if (-not $expected -or $actual -ne $expected) {
-      throw "downloaded Node failed its integrity check (expected '$expected', got '$actual')"
-    }
-    Expand-Archive -Path $zipPath -DestinationPath $nodeRoot -Force
-  } catch {
-    throw "Couldn't set up Node ($($_.Exception.Message)). Check your internet connection, then run this again - it's safe to re-run."
-  }
-  $NodeExe = Join-Path $nodeRoot "$distName\node.exe"
-  if (-not (Test-Path $NodeExe)) { throw "Node was downloaded but node.exe wasn't found at $NodeExe." }
-  Say "Node is ready."
-}
-
-# --- Git (portable) -----------------------------------------------------------
-if (Test-Cmd 'git') {
-  Say "Git is already installed - reusing it."
-} else {
-  Say "Setting up Git - it keeps the history of your project."
-  # PortableGit download/extract — deferred (needs pinned version + release URL); resolved at rehearsal.
-}
-
-# --- Launch Kindling (clean-runtime: absolute node when portable, else npx on PATH) -----------
-Say "Starting Kindling..."
-if ($null -eq $NodeExe) {
-  & npx -y "@aiviatic/kindling@$KindlingVersion"
-} else {
-  # Invoke npx's CLI through the exact provisioned node binary — no reliance on PATH.
-  $NpxCli = Join-Path (Split-Path $NodeExe) 'node_modules\npm\bin\npx-cli.js'
-  & $NodeExe $NpxCli -y "@aiviatic/kindling@$KindlingVersion"
-}
-# A native exe (npx) does NOT raise a terminating error on failure even with
-# ErrorActionPreference='Stop' — it only sets $LASTEXITCODE. So check that explicitly.
-if ($LASTEXITCODE -ne 0) {
-  Say "Kindling couldn't start. Check that you're connected to the internet, then run it again. It's safe to re-run."
-  exit 1
-}
+# Kindling bootstrap — Windows. FETCHED + run by kindling.cmd (self-fetching one-file entry):
+#   powershell -ExecutionPolicy Bypass -NoProfile -Command "irm https://kindling.aiviatic.com/setup.ps1 | iex"
+# Ensures the pinned Node + Git (portable), then launches Kindling.
+#
+# SELF-CONTAINED for the `irm | iex` delivery path: there is NO file on disk (no $PSScriptRoot), so
+# the helpers are INLINED below rather than dot-sourced — mirroring setup.sh's inline helpers for
+# `curl | bash`. Pinned versions below MUST match engine/pins.ts (a unit test asserts this).
+# NOTE: portable Node/Git provisioning is the Windows SPIKE — validated on real Windows at the
+# dress rehearsal (mirrors engine/provision/node-windows.ts).
+$ErrorActionPreference = 'Stop'
+
+$KindlingNodeVersion = '24.16.0'  # == pins.node
+$KindlingVersion     = '0.1.1'    # == pins.kindling
+$NodeFloorMajor      = 20
+
+# --- Inline helpers (were bootstrap/lib/common.ps1; inlined for the file-less delivery) ----------
+function Say([string]$msg) { Write-Host "`n$msg" -ForegroundColor White }
+function Test-Cmd([string]$name) {
+  return [bool](Get-Command $name -ErrorAction SilentlyContinue)
+}
+# True if a Node on PATH meets the major-version floor.
+function Test-NodeOk([int]$floorMajor) {
+  if (-not (Test-Cmd 'node')) { return $false }
+  try {
+    $v = (& node -v) -replace '^v', ''
+    $major = [int]($v -split '\.')[0]
+    return $major -ge $floorMajor
+  } catch { return $false }
+}
+
+Say "Getting your computer ready. This usually takes about 5 minutes."
+
+# Plain-language guidance for the Windows security prompts (FR-7) - expected / safe / reversible.
+Say "Heads up: Windows may show a couple of security prompts. They're expected and safe:"
+Say " - SmartScreen ('Windows protected your PC'): click 'More info', then 'Run anyway'. Nothing is changed on your PC."
+Say " - This window already runs with -ExecutionPolicy Bypass for THIS process only; it does not change any system setting and is fully reversible."
+
+# --- Node (pinned, portable) --------------------------------------------------
+# $NodeExe stays $null when a system Node is reused (launch via PATH); the portable-install path
+# sets it to the absolute node.exe so the launch never depends on PATH (clean-runtime rule, AR6).
+$NodeExe = $null
+if (Test-NodeOk $NodeFloorMajor) {
+  Say "Node is already installed - reusing it."
+} else {
+  Say "Setting up Node - the engine your project runs on. This downloads about 30 MB, one time."
+  # Portable Node: download the pinned Windows zip from nodejs.org, VERIFY its SHA-256 against Node's
+  # published SHASUMS256.txt before touching it, extract, and point the launch at the absolute
+  # node.exe (clean-runtime rule AR6 — never rely on a mutated PATH). Mirrors node-windows.ts.
+  # NOTE: newly implemented; validate on real Windows (proxy/TLS-interception, extract, non-admin exec).
+  $ProgressPreference = 'SilentlyContinue'  # a visible progress bar makes Invoke-WebRequest ~10x slower
+  [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+  $arch     = if ($env:PROCESSOR_ARCHITECTURE -eq 'ARM64') { 'arm64' } else { 'x64' }
+  $distName = "node-v$KindlingNodeVersion-win-$arch"
+  $nodeRoot = Join-Path $env:LOCALAPPDATA 'kindling\node'
+  $zipPath  = Join-Path $nodeRoot "$distName.zip"
+  $baseUrl  = "https://nodejs.org/dist/v$KindlingNodeVersion"
+  New-Item -ItemType Directory -Force -Path $nodeRoot | Out-Null
+  try {
+    Invoke-WebRequest -Uri "$baseUrl/$distName.zip" -OutFile $zipPath -UseBasicParsing
+    $shaLine  = ((Invoke-WebRequest -Uri "$baseUrl/SHASUMS256.txt" -UseBasicParsing).Content -split "`n" |
+                 Where-Object { $_ -match [regex]::Escape("$distName.zip") } | Select-Object -First 1)
+    $expected = ($shaLine -split '\s+')[0].ToLower()
+    $actual   = (Get-FileHash -Path $zipPath -Algorithm SHA256).Hash.ToLower()
+    if (-not $expected -or $actual -ne $expected) {
+      throw "downloaded Node failed its integrity check (expected '$expected', got '$actual')"
+    }
+    Expand-Archive -Path $zipPath -DestinationPath $nodeRoot -Force
+  } catch {
+    throw "Couldn't set up Node ($($_.Exception.Message)). Check your internet connection, then run this again - it's safe to re-run."
+  }
+  $NodeExe = Join-Path $nodeRoot "$distName\node.exe"
+  if (-not (Test-Path $NodeExe)) { throw "Node was downloaded but node.exe wasn't found at $NodeExe." }
+  Say "Node is ready."
+}
+
+# --- Git (portable) -----------------------------------------------------------
+if (Test-Cmd 'git') {
+  Say "Git is already installed - reusing it."
+} else {
+  Say "Setting up Git - it keeps the history of your project."
+  # PortableGit download/extract — deferred (needs pinned version + release URL); resolved at rehearsal.
+}
+
+# --- Launch Kindling (clean-runtime: absolute node when portable, else npx on PATH) -----------
+Say "Starting Kindling..."
+# Launch from a NEUTRAL directory, never the folder the download was run from. npx runs the
+# package's `kindling` bin BY NAME, and Windows searches the CURRENT directory first — so if the
+# downloaded `kindling.cmd` sits in the cwd, `kindling` resolves to IT instead of npx's shim and
+# re-runs the whole bootstrap forever (dress-rehearsal Windows loop, 2026-07-03). LOCALAPPDATA\kindling
+# holds only the portable Node, never a `kindling.cmd`.
+$launchDir = Join-Path $env:LOCALAPPDATA 'kindling'
+New-Item -ItemType Directory -Force -Path $launchDir | Out-Null
+Set-Location -LiteralPath $launchDir
+if ($null -eq $NodeExe) {
+  & npx -y "@aiviatic/kindling@$KindlingVersion"
+} else {
+  # Put the provisioned Node dir on PATH so bare `node`/`npm`/`npx` resolve by NAME. Launching via the
+  # absolute node binary isn't enough: npx and the launched package (plus the child processes the
+  # engine spawns for provisioning) call `node` by name and inherit this PATH — without it they fail
+  # with "'node' is not recognized" and Kindling never starts. (Dress-rehearsal finding, 2026-07-03.)
+  $env:Path = "$(Split-Path $NodeExe);$env:Path"
+  # Invoke npx's CLI through the exact provisioned node binary — no reliance on PATH for the launch itself.
+  $NpxCli = Join-Path (Split-Path $NodeExe) 'node_modules\npm\bin\npx-cli.js'
+  & $NodeExe $NpxCli -y "@aiviatic/kindling@$KindlingVersion"
+}
+# A native exe (npx) does NOT raise a terminating error on failure even with
+# ErrorActionPreference='Stop' — it only sets $LASTEXITCODE. So check that explicitly.
+if ($LASTEXITCODE -ne 0) {
+  Say "Kindling couldn't start. Check that you're connected to the internet, then run it again. It's safe to re-run."
+  exit 1
+}

package/bootstrap/setup.sh

@@ -1,13 +1,13 @@
 #!/usr/bin/env bash
 # Kindling bootstrap — macOS/Linux. Served by the Landing Page as:
-#   curl -fsSL https://kindling.aiviatic.com/go | bash
+#   curl -fsSL https://kindling.aiviatic.com/install | bash
 # Ensures the pinned Node + Git, then launches Kindling in the SAME shell (no new terminal).
 #
 # Pinned versions below MUST match engine/pins.ts + node-unix.ts (a unit test asserts this).
 set -euo pipefail
 
 KINDLING_NODE_VERSION="24.16.0"  # == pins.node
-KINDLING_VERSION="0.1.0"         # == pins.kindling
+KINDLING_VERSION="0.1.1"         # == pins.kindling
 NVM_VERSION="v0.40.3"            # == NVM_VERSION (engine/provision/node-unix.ts)
 NODE_FLOOR_MAJOR=20
 

package/dist/{chunk-MW7UAGER.js → chunk-6VTQGOJR.js}

@@ -40,7 +40,7 @@ var pins = Object.freeze({
   node: "24.16.0",
   bmad: "6.9.0",
   // frozen for the Cohort #1 cycle (matches this repo's BMad install; tools + install flags verified vs the real 6.9.0 CLI 2026-07-02); bump between cohorts
-  kindling: "0.1.0"
+  kindling: "0.1.1"
 });
 
 // engine/messages.ts
@@ -887,4 +887,4 @@ export {
   writeFailureLog,
   Engine
 };
-//# sourceMappingURL=chunk-MW7UAGER.js.map
+//# sourceMappingURL=chunk-6VTQGOJR.js.map