@cybedefend/vibedefend 1.4.4 → 1.4.6

package/dist/global-cli.js

@@ -0,0 +1,138 @@
+/**
+ * Make `npx @cybedefend/vibedefend install` leave a real `vibedefend` command.
+ *
+ * Run through npx (or pnpm / yarn `dlx`), the CLI lives in a throwaway cache:
+ * the installer wired the MCP + hooks but left nothing on PATH (`vibedefend:
+ * command not found`), the hook runner was a frozen copy, and background
+ * auto-update was off. So on an ephemeral run the installer first installs the
+ * same version globally (`npm install -g`), then hands the rest of the install
+ * to that global binary — which renders the self-resolving shim exactly like a
+ * regular global install would.
+ *
+ * Never fatal: if the global install fails (root-owned prefix → EACCES,
+ * offline, no npm), the caller carries on with the ephemeral install and the
+ * user gets the one-line command to run themselves.
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { posix, win32 } from 'node:path';
+import { detectInstallMode, resolveScriptPath } from './self-update.js';
+import { log } from './utils.js';
+import { pkg } from './version.js';
+/** Set on the handed-off child so it can never hand off a second time. */
+export const HANDOFF_ENV = 'VIBEDEFEND_GLOBAL_HANDOFF';
+/**
+ * On an npx / dlx run: `npm install -g` this version, then run
+ * `vibedefend install <installArgs>` from the global package.
+ */
+export function installGlobalCliAndHandOff(installArgs, deps = {}) {
+    const env = deps.env ?? process.env;
+    if (env[HANDOFF_ENV])
+        return { kind: 'not-needed' };
+    const mode = deps.installMode ?? detectInstallMode(resolveScriptPath());
+    if (mode !== 'npx-cache')
+        return { kind: 'not-needed' };
+    const platform = deps.platform ?? process.platform;
+    const runNpm = deps.runNpm ?? ((args) => defaultRunNpm(args, platform));
+    const spec = `${pkg.name}@${deps.version ?? pkg.version}`;
+    log.step('Installing the vibedefend CLI globally');
+    log.hint(`npm install -g ${spec}`);
+    const res = runNpm(['install', '-g', spec]);
+    if (res.status !== 0) {
+        const detail = lastLine(res.stderr);
+        log.warn(`Could not install the CLI globally (npm exited with ${res.status})` +
+            (detail ? `: ${detail}` : '.'));
+        hintManualInstall(spec, platform);
+        return { kind: 'failed' };
+    }
+    // <root>/@cybedefend/vibedefend/bin/vibedefend.js
+    const root = runNpm(['root', '-g']);
+    const rootDir = root.status === 0 ? root.stdout.trim() : '';
+    const { join } = platform === 'win32' ? win32 : posix;
+    const cliEntry = rootDir
+        ? join(rootDir, ...pkg.name.split('/'), 'bin', 'vibedefend.js')
+        : null;
+    if (!cliEntry || !(deps.exists ?? existsSync)(cliEntry)) {
+        log.warn('The CLI was installed globally, but its location could not be resolved ' +
+            '(`npm root -g`). Continuing with this one-off copy.');
+        return { kind: 'failed' };
+    }
+    log.ok('`vibedefend` CLI installed globally.');
+    warnIfBinNotOnPath(rootDir, platform, env);
+    const exitCode = (deps.runCli ?? defaultRunCli)(cliEntry, ['install', ...installArgs]);
+    return { kind: 'handed-off', exitCode };
+}
+/**
+ * npm puts global bins in `<prefix>/bin` on Unix (root = `<prefix>/lib/node_modules`)
+ * and in `<prefix>` itself on Windows (root = `<prefix>\node_modules`). A custom
+ * prefix that is not on PATH (e.g. `~/.npm-global`) installs fine but leaves the
+ * command unreachable — say so instead of letting `command not found` surprise.
+ */
+function warnIfBinNotOnPath(rootDir, platform, env) {
+    const win = platform === 'win32';
+    const { dirname, join } = win ? win32 : posix;
+    const binDir = win ? dirname(rootDir) : join(dirname(dirname(rootDir)), 'bin');
+    const norm = (p) => {
+        const trimmed = p.replace(/[\\/]+$/, '');
+        return win ? trimmed.toLowerCase() : trimmed;
+    };
+    const entries = (env.PATH ?? env.Path ?? '')
+        .split(win ? ';' : ':')
+        .filter(Boolean)
+        .map(norm);
+    if (entries.includes(norm(binDir)))
+        return;
+    log.warn(`npm's global bin directory (${binDir}) is not on your PATH — ` +
+        'add it to your shell profile to use the `vibedefend` command.');
+}
+function hintManualInstall(spec, platform) {
+    log.hint('Hooks and MCP are still set up below. For the `vibedefend` command, run:');
+    log.hint(`  npm install -g ${spec}`);
+    if (platform !== 'win32') {
+        log.hint('(prefix it with `sudo` if your global npm directory is root-owned)');
+    }
+}
+function lastLine(text) {
+    const lines = text.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+    return lines.at(-1) ?? '';
+}
+/**
+ * The argv to run `npm <args>` WITHOUT a shell. Windows `npm` is a `.cmd` shim
+ * that spawn can only resolve through `cmd.exe` (CWE-78 surface), so there we
+ * run the npm CLI that every Windows Node distribution (official installer,
+ * nvm-windows, Volta, Scoop) bundles next to `node.exe`. Null when it is absent.
+ */
+export function npmInvocation(args, platform = process.platform, execPath = process.execPath, exists = existsSync) {
+    if (platform !== 'win32')
+        return { command: 'npm', args };
+    const npmCli = win32.join(win32.dirname(execPath), 'node_modules', 'npm', 'bin', 'npm-cli.js');
+    return exists(npmCli) ? { command: execPath, args: [npmCli, ...args] } : null;
+}
+function defaultRunNpm(args, platform) {
+    const inv = npmInvocation(args, platform);
+    if (!inv) {
+        return { status: 1, stdout: '', stderr: `npm not found next to ${process.execPath}` };
+    }
+    const r = spawnSync(inv.command, inv.args, {
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        windowsHide: true,
+    });
+    return {
+        status: r.status ?? 1,
+        stdout: r.stdout ?? '',
+        stderr: (r.stderr ?? '') + (r.error ? `\n${r.error.message}` : ''),
+    };
+}
+function defaultRunCli(cliEntry, args) {
+    // By absolute path, not via PATH — that can resolve to a stale binary (or
+    // nothing) right after a global install.
+    const r = spawnSync(process.execPath, [cliEntry, ...args], {
+        stdio: 'inherit',
+        env: { ...process.env, [HANDOFF_ENV]: '1' },
+    });
+    if (r.status !== null)
+        return r.status;
+    return r.signal === 'SIGINT' ? 130 : 1;
+}
+//# sourceMappingURL=global-cli.js.map

package/dist/global-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-cli.js","sourceRoot":"","sources":["../src/global-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAoB,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,2BAA2B,CAAC;AA8BvD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAqB,EACrB,OAAsB,EAAE;IAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACxE,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAExD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAE1D,GAAG,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACnD,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAEnC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CACN,uDAAuD,GAAG,CAAC,MAAM,GAAG;YAClE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACjC,CAAC;QACF,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,kDAAkD;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO;QACtB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CACN,yEAAyE;YACvE,qDAAqD,CACxD,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC;IAC/C,kBAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IACvF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CACzB,OAAe,EACf,QAAyB,EACzB,GAAsB;IAEtB,MAAM,GAAG,GAAG,QAAQ,KAAK,OAAO,CAAC;IACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACzC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO;IAC3C,GAAG,CAAC,IAAI,CACN,+BAA+B,MAAM,0BAA0B;QAC7D,+DAA+D,CAClE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAyB;IAChE,GAAG,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACrF,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAc,EACd,WAA4B,OAAO,CAAC,QAAQ,EAC5C,WAAmB,OAAO,CAAC,QAAQ,EACnC,SAAoC,UAAU;IAE9C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,SAAS,aAAa,CAAC,IAAc,EAAE,QAAyB;IAC9D,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,yBAAyB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;QACzC,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;QACtB,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAc;IACrD,0EAA0E;IAC1E,yCAAyC;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,EAAE;QACzD,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE;KAC5C,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC"}