@fission-ai/openspec 1.14.3 → 1.15.0

package/dist/core/version-check.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Called by the standalone binary's entry point. That copy has no package
+ * manager behind it, so a package-manager command is the wrong upgrade advice.
+ */
+export declare function markStandaloneBinary(executablePath: string): void;
+/** The standalone binary's own path, or null when running from a package. */
+export declare function getStandaloneBinaryPath(): string | null;
 /**
  * The registry to ask. A configured registry is honored only over TLS: a
  * cleartext hop would aim the request at a link-local or internal address and
@@ -79,7 +86,7 @@ export declare function isNpmGlobalInstall(installDir: string | null, roots?: st
  */
 export declare function isSourceCheckout(installDir: string | null): boolean;
 export type PackageManager = 'npm' | 'pnpm' | 'bun' | 'yarn' | 'volta';
-export type InstallScope = 'global' | 'project' | 'temporary' | 'source';
+export type InstallScope = 'global' | 'project' | 'temporary' | 'source' | 'standalone';
 export interface CliInstallInfo {
     location: string | null;
     packageManager: PackageManager | null;

package/dist/core/version-check.js

@@ -3,11 +3,13 @@ import http from 'http';
 import https from 'https';
 import path from 'path';
 import { createRequire } from 'module';
+import { fileURLToPath } from 'url';
 import chalk from 'chalk';
 import { isCiEnvironment } from '../utils/ci.js';
 import { isTelemetryOptedOutByEnv } from '../telemetry/opt-out.js';
 import { FileSystemUtils } from '../utils/file-system.js';
 import { getGlobalConfig, isGlobalConfigUnreadable } from './global-config.js';
+import { findCopiesOnPath, samePath } from '../utils/executable-path.js';
 const require = createRequire(import.meta.url);
 const { name: PACKAGE_NAME, version: OPENSPEC_VERSION } = require('../../package.json');
 const DEFAULT_REGISTRY = 'https://registry.npmjs.org';
@@ -22,6 +24,34 @@ const MAX_REDIRECTS = 3;
  * one could smuggle ANSI cursor controls and repaint the lines around it.
  */
 const SAFE_VERSION = /^\d{1,10}\.\d{1,10}\.\d{1,10}(?:-[0-9A-Za-z.-]{1,64})?(?:\+[0-9A-Za-z.-]{1,64})?$/;
+let standaloneBinaryPath = null;
+/**
+ * Called by the standalone binary's entry point. That copy has no package
+ * manager behind it, so a package-manager command is the wrong upgrade advice.
+ */
+export function markStandaloneBinary(executablePath) {
+    standaloneBinaryPath = executablePath;
+}
+/** The standalone binary's own path, or null when running from a package. */
+export function getStandaloneBinaryPath() {
+    return standaloneBinaryPath;
+}
+/**
+ * `openspec install` reinstalls the standalone binary where it already is,
+ * under its own name, so the new copy cannot end up shadowed by the old one.
+ * Spelled with the full path when `openspec` on PATH is some other copy.
+ * Null when this is not the binary.
+ */
+function standaloneUpgradeCommand() {
+    if (!standaloneBinaryPath)
+        return null;
+    const first = findCopiesOnPath()[0];
+    if (first && samePath(first, standaloneBinaryPath))
+        return 'openspec install';
+    return process.platform === 'win32'
+        ? `& '${standaloneBinaryPath.replace(/'/g, "''")}' install`
+        : `'${standaloneBinaryPath.replace(/'/g, `'\\''`)}' install`;
+}
 /**
  * The check is opt-out and must never get in the way: no network in CI or
  * tests, an explicit escape hatch for anyone offline or air-gapped, and the
@@ -304,12 +334,14 @@ export async function getAvailableCliUpdate() {
  * which copy is actually answering.
  */
 export function getInstallDir() {
-    try {
-        return path.dirname(require.resolve('../../package.json'));
-    }
-    catch {
+    // The binary is not a package install, so no package-manager logic applies.
+    if (standaloneBinaryPath)
         return null;
-    }
+    // Resolved at runtime from this module's own (symlink-resolved) location.
+    // require.resolve would be resolved by the binary's bundler at build time,
+    // baking the build machine's path into it.
+    const packageJson = fileURLToPath(new URL('../../package.json', import.meta.url));
+    return fs.existsSync(packageJson) ? path.dirname(packageJson) : null;
 }
 /**
  * True when the running CLI resolves from a `node_modules` belonging to the
@@ -508,6 +540,9 @@ function detectGlobalPackageManager(installDir) {
 }
 /** Describes the running copy without guessing when its owner is ambiguous. */
 export function getCliInstallInfo(installDir = getInstallDir(), projectPath = '.') {
+    if (standaloneBinaryPath) {
+        return { location: path.dirname(standaloneBinaryPath), packageManager: null, scope: 'standalone' };
+    }
     if (!installDir) {
         return { location: null, packageManager: null, scope: null };
     }
@@ -537,6 +572,8 @@ export function getCliInstallInfo(installDir = getInstallDir(), projectPath = '.
 }
 /** Returns a safe update command only for an install with known global ownership. */
 export function getCliUpdateCommand(install) {
+    if (install.scope === 'standalone')
+        return standaloneUpgradeCommand();
     if (install.scope !== 'global' || install.packageManager === null)
         return null;
     return GLOBAL_UPGRADE_COMMANDS[install.packageManager];
@@ -585,6 +622,12 @@ export function buildCliUpdateLines(latestVersion, installDir, projectPath, opti
  */
 export function buildUpgradeCommandLines(installDir, projectPath) {
     const lines = [];
+    const standalone = standaloneUpgradeCommand();
+    if (standalone) {
+        lines.push(`  ${standalone}`);
+        lines.push('  Then run "openspec update" again to pick up new workflows.');
+        return lines;
+    }
     if (isEphemeralRunnerInstall(installDir)) {
         // That command *is* the update, so there is nothing to run afterwards.
         lines.push(`  npx ${PACKAGE_NAME}@latest update`);

package/dist/utils/executable-path.d.ts

@@ -0,0 +1,5 @@
+/** Every `openspec` on PATH, in the order a shell would find them. */
+export declare function findCopiesOnPath(pathValue?: string, platform?: NodeJS.Platform): string[];
+/** Whether two paths name the same file once symlinks are resolved. */
+export declare function samePath(a: string, b: string): boolean;
+//# sourceMappingURL=executable-path.d.ts.map

package/dist/utils/executable-path.js

@@ -0,0 +1,44 @@
+import fs from 'node:fs';
+import path from 'node:path';
+/** Every `openspec` on PATH, in the order a shell would find them. */
+export function findCopiesOnPath(pathValue = process.env.PATH ?? '', platform = process.platform) {
+    const names = platform === 'win32' ? ['openspec.exe', 'openspec.cmd'] : ['openspec'];
+    const seen = new Set();
+    const copies = [];
+    for (const dir of pathValue.split(path.delimiter)) {
+        if (!dir)
+            continue;
+        for (const name of names) {
+            const candidate = path.join(dir, name);
+            try {
+                if (!fs.statSync(candidate).isFile())
+                    continue;
+                if (platform !== 'win32')
+                    fs.accessSync(candidate, fs.constants.X_OK);
+                const key = platform === 'win32' ? candidate.toLowerCase() : candidate;
+                if (!seen.has(key)) {
+                    seen.add(key);
+                    copies.push(candidate);
+                }
+            }
+            catch {
+                // Not there, or not runnable: not a copy a shell would run.
+            }
+        }
+    }
+    return copies;
+}
+/** Whether two paths name the same file once symlinks are resolved. */
+export function samePath(a, b) {
+    const real = (value) => {
+        try {
+            return fs.realpathSync(value);
+        }
+        catch {
+            return path.resolve(value);
+        }
+    };
+    const [x, y] = [real(a), real(b)];
+    return process.platform === 'win32' ? x.toLowerCase() === y.toLowerCase() : x === y;
+}
+//# sourceMappingURL=executable-path.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fission-ai/openspec",
-  "version": "1.14.3",
+  "version": "1.15.0",
   "description": "AI-native system for spec-driven development",
   "keywords": [
     "openspec",
@@ -45,12 +45,13 @@
     "@changesets/cli": "^3.0.1",
     "@types/node": "^20.19.43",
     "@types/picomatch": "^4.0.3",
-    "@vitest/ui": "^4.1.11",
+    "@vitest/ui": "^4.1.12",
     "eslint": "^10.5.0",
     "smol-toml": "^1.7.1",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.65.0",
-    "vitest": "^4.1.11"
+    "vite": "^7.3.7",
+    "vitest": "^4.1.12"
   },
   "dependencies": {
     "@inquirer/core": "^12.0.0",