@flare-desktop/cli 0.0.0-stage → 0.1.1

package/src/lib/packaging/macos.js

@@ -0,0 +1,84 @@
+import { chmodSync, cpSync, existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+
+import { escapeXml, msiVersion } from "./common.js";
+import { requireTool, runTool } from "./tools.js";
+
+function copyContents(source, destination) {
+  mkdirSync(destination, { recursive: true });
+  for (const entry of readdirSync(source)) {
+    cpSync(path.join(source, entry), path.join(destination, entry), { recursive: true, force: true });
+  }
+}
+
+export function buildAppBundle({
+  config,
+  productName,
+  version,
+  payload,
+  binaryName,
+  icons,
+  licenseSource,
+  outputDirectory,
+  logger
+}) {
+  const app = path.join(outputDirectory, `${productName.replace(/[\\/:*?"<>|]/g, "-")}.app`);
+  const contents = path.join(app, "Contents");
+  const macOS = path.join(contents, "MacOS");
+  const resources = path.join(contents, "Resources");
+
+  mkdirSync(macOS, { recursive: true });
+  mkdirSync(resources, { recursive: true });
+  copyContents(payload, macOS);
+  cpSync(icons.icns, path.join(resources, "icon.icns"));
+  if (licenseSource) cpSync(licenseSource, path.join(resources, "LICENSE"));
+  chmodSync(path.join(macOS, binaryName), 0o755);
+
+  const plist = [
+    '<?xml version="1.0" encoding="UTF-8"?>',
+    '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">',
+    '<plist version="1.0">',
+    "<dict>",
+    `  <key>CFBundleIdentifier</key><string>${escapeXml(config.app.identifier)}</string>`,
+    `  <key>CFBundleName</key><string>${escapeXml(productName)}</string>`,
+    `  <key>CFBundleDisplayName</key><string>${escapeXml(productName)}</string>`,
+    `  <key>CFBundleExecutable</key><string>${escapeXml(binaryName)}</string>`,
+    "  <key>CFBundleIconFile</key><string>icon</string>",
+    "  <key>CFBundlePackageType</key><string>APPL</string>",
+    `  <key>CFBundleShortVersionString</key><string>${escapeXml(version)}</string>`,
+    `  <key>CFBundleVersion</key><string>${escapeXml(msiVersion(version))}</string>`,
+    `  <key>LSMinimumSystemVersion</key><string>${escapeXml(config.bundle.macos?.minimumSystemVersion || "10.15")}</string>`,
+    "  <key>NSHighResolutionCapable</key><true/>",
+    "</dict>",
+    "</plist>",
+    ""
+  ].join("\n");
+
+  writeFileSync(path.join(contents, "Info.plist"), plist);
+  writeFileSync(path.join(contents, "PkgInfo"), "APPL????");
+  if (logger) logger.info(`[app] wrote ${app}`);
+  return app;
+}
+
+export async function signApp({ app, identity, logger }) {
+  if (!identity) return;
+  const codesign = requireTool("codesign", "install Xcode command line tools");
+  await runTool(codesign, ["--force", "--deep", "--options", "runtime", "--sign", identity, app], { logger });
+}
+
+export async function buildDmg({ app, productName, outputDirectory, logger }) {
+  const hdiutil = requireTool("hdiutil", "run packaging on macOS");
+  mkdirSync(outputDirectory, { recursive: true });
+  const artifact = path.join(outputDirectory, `${productName.replace(/[\\/:*?"<>|]/g, "-")}.dmg`);
+  if (logger) logger.info(`[dmg] compiling ${path.basename(artifact)}`);
+  await runTool(
+    hdiutil,
+    ["create", "-volname", productName, "-srcfolder", app, "-ov", "-format", "UDZO", artifact],
+    { logger }
+  );
+  return artifact;
+}
+
+export function appExists(app) {
+  return existsSync(app);
+}

package/src/lib/packaging/msi.js

@@ -0,0 +1,143 @@
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+
+import { escapeXml, msiVersion, stableGuid } from "./common.js";
+import { requireTool, runTool } from "./tools.js";
+
+function componentId(relative) {
+  return `C_${createHash("sha1").update(relative).digest("hex").slice(0, 16)}`;
+}
+
+function fileId(relative) {
+  return `F_${createHash("sha1").update(relative).digest("hex").slice(0, 16)}`;
+}
+
+function directoryId(relative) {
+  return `D_${createHash("sha1").update(relative).digest("hex").slice(0, 16)}`;
+}
+
+function emitDirectory(directory, relative) {
+  const entries = readdirSync(directory, { withFileTypes: true }).sort((left, right) =>
+    left.name.localeCompare(right.name)
+  );
+  const lines = [];
+  const components = [];
+
+  for (const entry of entries) {
+    if (entry.isDirectory()) {
+      const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+      const child = emitDirectory(path.join(directory, entry.name), childRelative);
+      lines.push(`<Directory Id="${directoryId(childRelative)}" Name="${escapeXml(entry.name)}">`);
+      lines.push(...child.xml);
+      lines.push("</Directory>");
+      components.push(...child.components);
+    }
+  }
+
+  for (const entry of entries) {
+    if (!entry.isFile()) continue;
+    const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+    const id = componentId(childRelative);
+    lines.push(`<Component Id="${id}" Guid="*">`);
+    lines.push(
+      `<File Id="${fileId(childRelative)}" Source="${escapeXml(path.join(directory, entry.name))}" KeyPath="yes" />`
+    );
+    lines.push("</Component>");
+    components.push(id);
+  }
+
+  return { xml: lines, components };
+}
+
+export async function buildMsi({
+  config,
+  productName,
+  version,
+  payload,
+  binaryName,
+  icons,
+  outputDirectory,
+  stageDirectory,
+  logger
+}) {
+  const candle = requireTool("candle", "install WiX Toolset 3.14 and put candle.exe on PATH");
+  const light = requireTool("light", "install WiX Toolset 3.14 and put light.exe on PATH");
+  const architecture = process.arch === "arm64" ? "arm64" : "x64";
+  const source = path.join(stageDirectory, "installer.wxs");
+  const object = path.join(stageDirectory, "installer.wixobj");
+  const artifact = path.join(
+    outputDirectory,
+    `${String(productName).replace(/[^A-Za-z0-9._-]+/g, "-")}_${version}_${architecture}_en-US.msi`
+  );
+  const payloadTree = emitDirectory(payload, "");
+  const upgradeCode = stableGuid(`flare:${config.app.identifier}`);
+  const description = config.bundle.shortDescription || config.app.description || `${productName} built with flare`;
+
+  const lines = [
+    '<?xml version="1.0" encoding="utf-8"?>',
+    '<Wix xmlns="http://schemas.microsoft.com/wix/2006/wi">',
+    `<Product Id="*" Name="${escapeXml(productName)}" Language="1033" Version="${msiVersion(version)}" Manufacturer="${escapeXml(config.bundle.publisher || productName)}" UpgradeCode="${upgradeCode}">`,
+    '<Package InstallerVersion="500" Compressed="yes" InstallScope="perMachine" Platform="' + architecture + '" />',
+    '<MajorUpgrade DowngradeErrorMessage="A newer version is already installed." />',
+    '<MediaTemplate EmbedCab="yes" />',
+    '<Property Id="ARPCOMMENTS" Value="' + escapeXml(description) + '" />',
+    config.bundle.homepage ? `<Property Id="ARPHELPLINK" Value="${escapeXml(config.bundle.homepage)}" />` : "",
+    '<Property Id="ARPPRODUCTICON" Value="AppIcon" />',
+    '<Icon Id="AppIcon" SourceFile="' + escapeXml(icons.ico) + '" />',
+    '<Directory Id="TARGETDIR" Name="SourceDir">',
+    '<Directory Id="ProgramFiles64Folder">',
+    `<Directory Id="INSTALLDIR" Name="${escapeXml(productName)}">`,
+    ...payloadTree.xml,
+    "</Directory>",
+    "</Directory>",
+    '<Directory Id="ProgramMenuFolder">',
+    `<Directory Id="AppMenuFolder" Name="${escapeXml(productName)}">`,
+    '<Component Id="ApplicationShortcut" Guid="*">',
+    `<Shortcut Id="ApplicationStartMenuShortcut" Name="${escapeXml(productName)}" Target="[INSTALLDIR]${escapeXml(binaryName)}" WorkingDirectory="INSTALLDIR" Icon="AppIcon" />`,
+    '<RemoveFolder Id="RemoveAppMenuFolder" On="uninstall" />',
+    '<RegistryValue Root="HKCU" Key="Software\\' + escapeXml(config.app.identifier) + '" Name="installed" Type="integer" Value="1" KeyPath="yes" />',
+    "</Component>",
+    "</Directory>",
+    "</Directory>",
+    "</Directory>",
+    '<Feature Id="Complete" Title="' + escapeXml(productName) + '" Level="1">',
+    ...payloadTree.components.map((id) => `<ComponentRef Id="${id}" />`),
+    '<ComponentRef Id="ApplicationShortcut" />',
+    "</Feature>",
+    '<Property Id="WIXUI_INSTALLDIR" Value="INSTALLDIR" />',
+    '<UIRef Id="WixUI_InstallDir" />',
+    "</Product>",
+    "</Wix>"
+  ].filter(Boolean);
+
+  mkdirSync(outputDirectory, { recursive: true });
+  writeFileSync(source, `${lines.join("\n")}\n`, "utf8");
+
+  if (logger) logger.info(`[msi] compiling ${path.basename(artifact)}`);
+  await runTool(candle, ["-nologo", "-arch", architecture, "-out", object, source], {
+    cwd: stageDirectory,
+    logger
+  });
+
+  const extension = path.join(path.dirname(light), "WixUIExtension.dll");
+  const extensionArgument = existsSync(extension) ? extension : "WixUIExtension";
+  await runTool(
+    light,
+    [
+      "-nologo",
+      "-ext",
+      extensionArgument,
+      "-cultures:en-us",
+      "-spdb",
+      "-out",
+      artifact,
+      object
+    ],
+    {
+      cwd: stageDirectory,
+      logger
+    }
+  );
+  return artifact;
+}

package/src/lib/packaging/nsis.js

@@ -0,0 +1,106 @@
+import { mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+
+import { escapeNsis, fourPartVersion } from "./common.js";
+import { requireTool, runTool } from "./tools.js";
+import { directorySize } from "./staging.js";
+
+export async function buildNsis({
+  config,
+  productName,
+  version,
+  payload,
+  binaryName,
+  icons,
+  licenseSource,
+  outputDirectory,
+  stageDirectory,
+  logger
+}) {
+  const makensis = requireTool("makensis", "install NSIS 3 from https://nsis.sourceforge.io");
+  const packageName = config.app.identifier || productName;
+  const estimatedSize = Math.ceil(directorySize(payload) / 1024);
+  const script = path.join(stageDirectory, "installer.nsi");
+  const artifact = path.join(
+    outputDirectory,
+    `${String(productName).replace(/[^A-Za-z0-9._-]+/g, "-")}_${version}_${process.arch === "arm64" ? "arm64" : "x64"}-setup.exe`
+  );
+
+  const lines = [
+    "Unicode true",
+    '!include "MUI2.nsh"',
+    `!define APP_NAME "${escapeNsis(productName)}"`,
+    `!define APP_VERSION "${escapeNsis(version)}"`,
+    `!define APP_VERSION4 "${fourPartVersion(version)}"`,
+    `!define APP_PUBLISHER "${escapeNsis(config.bundle.publisher || productName)}"`,
+    `!define APP_ID "${escapeNsis(packageName)}"`,
+    `!define APP_EXE "${escapeNsis(binaryName)}"`,
+    `!define APP_PAYLOAD "${escapeNsis(payload)}"`,
+    `!define APP_ICON "${escapeNsis(icons.ico)}"`,
+    `!define APP_SIZE ${estimatedSize}`,
+    `Name "\${APP_NAME}"`,
+    `OutFile "${escapeNsis(artifact)}"`,
+    `InstallDir "$PROGRAMFILES64\\\${APP_NAME}"`,
+    `InstallDirRegKey HKLM "Software\\\${APP_ID}" "InstallDir"`,
+    "RequestExecutionLevel admin",
+    "SetCompressor /SOLID lzma",
+    'VIProductVersion "${APP_VERSION4}"',
+    'VIAddVersionKey "ProductName" "${APP_NAME}"',
+    'VIAddVersionKey "ProductVersion" "${APP_VERSION}"',
+    'VIAddVersionKey "CompanyName" "${APP_PUBLISHER}"',
+    'VIAddVersionKey "FileDescription" "${APP_NAME} installer"',
+    'VIAddVersionKey "FileVersion" "${APP_VERSION4}"',
+    '!define MUI_ABORTWARNING',
+    '!define MUI_ICON "${APP_ICON}"',
+    '!define MUI_UNICON "${APP_ICON}"',
+    '!define MUI_FINISHPAGE_RUN "$INSTDIR\\${APP_EXE}"',
+    "!insertmacro MUI_PAGE_WELCOME"
+  ];
+
+  if (licenseSource) lines.push('!insertmacro MUI_PAGE_LICENSE "${APP_LICENSE}"');
+  lines.push(
+    "!insertmacro MUI_PAGE_DIRECTORY",
+    "!insertmacro MUI_PAGE_INSTFILES",
+    "!insertmacro MUI_PAGE_FINISH",
+    "!insertmacro MUI_UNPAGE_CONFIRM",
+    "!insertmacro MUI_UNPAGE_INSTFILES",
+    '!insertmacro MUI_LANGUAGE "English"',
+    '!insertmacro MUI_LANGUAGE "Russian"',
+    'Section "Install"',
+    "  SetShellVarContext all",
+    '  SetOutPath "$INSTDIR"',
+    '  File /r "${APP_PAYLOAD}\\*"',
+    '  WriteUninstaller "$INSTDIR\\Uninstall.exe"',
+    '  CreateDirectory "$SMPROGRAMS\\${APP_NAME}"',
+    '  CreateShortCut "$SMPROGRAMS\\${APP_NAME}\\${APP_NAME}.lnk" "$INSTDIR\\${APP_EXE}"',
+    '  CreateShortCut "$SMPROGRAMS\\${APP_NAME}\\Uninstall.lnk" "$INSTDIR\\Uninstall.exe"',
+    '  WriteRegStr HKLM "Software\\${APP_ID}" "InstallDir" "$INSTDIR"',
+    '  WriteRegStr HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "DisplayName" "${APP_NAME}"',
+    '  WriteRegStr HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "DisplayVersion" "${APP_VERSION}"',
+    '  WriteRegStr HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "Publisher" "${APP_PUBLISHER}"',
+    '  WriteRegStr HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "DisplayIcon" "$INSTDIR\\${APP_EXE}"',
+    '  WriteRegStr HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "UninstallString" \'"$INSTDIR\\Uninstall.exe"\'',
+    '  WriteRegDWORD HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "EstimatedSize" ${APP_SIZE}',
+    '  WriteRegDWORD HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "NoModify" 1',
+    '  WriteRegDWORD HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}" "NoRepair" 1',
+    "SectionEnd",
+    'Section "Uninstall"',
+    "  SetShellVarContext all",
+    '  Delete "$SMPROGRAMS\\${APP_NAME}\\${APP_NAME}.lnk"',
+    '  Delete "$SMPROGRAMS\\${APP_NAME}\\Uninstall.lnk"',
+    '  RMDir "$SMPROGRAMS\\${APP_NAME}"',
+    '  DeleteRegKey HKLM "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${APP_ID}"',
+    '  DeleteRegKey HKLM "Software\\${APP_ID}"',
+    '  RMDir /r "$INSTDIR"',
+    "SectionEnd"
+  );
+
+  if (licenseSource) lines.splice(lines.indexOf("!insertmacro MUI_PAGE_WELCOME") + 1, 0, `!define APP_LICENSE "${escapeNsis(licenseSource)}"`);
+
+  mkdirSync(outputDirectory, { recursive: true });
+  writeFileSync(script, `${lines.join("\n")}\n`, "utf8");
+
+  if (logger) logger.info(`[nsis] compiling ${path.basename(artifact)}`);
+  await runTool(makensis, ["-V2", "-INPUTCHARSET", "UTF8", script], { cwd: stageDirectory, logger });
+  return artifact;
+}

package/src/lib/packaging/staging.js

@@ -0,0 +1,123 @@
+import { chmodSync, cpSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import path from "node:path";
+
+import { FlareError } from "../errors.js";
+import { buildIconSet } from "../icons.js";
+import { readPng } from "../png.js";
+
+export function targetTriple(platform = process.platform, architecture = process.arch) {
+  if (platform === "win32") return `${architecture === "arm64" ? "aarch64" : "x86_64"}-pc-windows-msvc`;
+  if (platform === "darwin") return `${architecture === "arm64" ? "aarch64" : "x86_64"}-apple-darwin`;
+  if (platform === "linux") return `${architecture === "arm64" ? "aarch64" : "x86_64"}-unknown-linux-gnu`;
+  return `${architecture}-unknown-${platform}`;
+}
+
+function projectPath(projectDirectory, value) {
+  return path.isAbsolute(value) ? value : path.resolve(projectDirectory, value);
+}
+
+function copyEntry(source, destination) {
+  mkdirSync(path.dirname(destination), { recursive: true });
+  cpSync(source, destination, { recursive: true, force: true });
+}
+
+function executableFile(file) {
+  if (process.platform !== "win32") chmodSync(file, 0o755);
+}
+
+export function stageIcons({ config, projectDirectory, stageDirectory }) {
+  const source = projectPath(projectDirectory, config.bundle?.icon || "icons/icon.png");
+  if (!existsSync(source)) {
+    throw new FlareError(`bundle icon '${source}' does not exist; run 'flare icon' or set bundle.icon`);
+  }
+  if (path.extname(source).toLowerCase() !== ".png") {
+    throw new FlareError(`bundle icon '${source}' must be a png file`);
+  }
+
+  const image = readPng(readFileSync(source));
+  const files = buildIconSet(image);
+  const directory = path.join(stageDirectory, "icons");
+  mkdirSync(directory, { recursive: true });
+  for (const file of files) writeFileSync(path.join(directory, file.name), file.data);
+
+  return {
+    source,
+    png: path.join(directory, "icon.png"),
+    ico: path.join(directory, "icon.ico"),
+    icns: path.join(directory, "icon.icns")
+  };
+}
+
+function externalBinary({ entry, projectDirectory, triple }) {
+  const base = projectPath(projectDirectory, entry);
+  const extension = path.extname(base);
+  const stem = extension ? base.slice(0, -extension.length) : base;
+  const candidates = [
+    base,
+    `${stem}-${triple}${extension}`,
+    `${base}-${triple}`,
+    `${stem}-${triple}${extension || ".exe"}`
+  ];
+  const source = candidates.find((candidate) => existsSync(candidate));
+  if (!source) {
+    throw new FlareError(`external binary '${entry}' was not found; expected '${base}' or '${stem}-${triple}${extension}'`);
+  }
+  return { source, name: path.basename(base) };
+}
+
+export function stagePayload({ config, projectDirectory, binary, stageDirectory, logger }) {
+  const payload = path.join(stageDirectory, "payload");
+  rmSync(payload, { recursive: true, force: true });
+  mkdirSync(payload, { recursive: true });
+
+  if (!existsSync(binary)) throw new FlareError(`built binary '${binary}' does not exist`);
+  const binaryName = path.basename(binary);
+  const stagedBinary = path.join(payload, binaryName);
+  copyEntry(binary, stagedBinary);
+  executableFile(stagedBinary);
+
+  for (const resource of config.bundle?.resources ?? []) {
+    const source = projectPath(projectDirectory, resource);
+    if (!existsSync(source)) throw new FlareError(`bundle resource '${resource}' does not exist`);
+    const destination = path.join(payload, path.basename(source));
+    if (logger) logger.debug(`packaging resource ${source}`);
+    copyEntry(source, destination);
+  }
+
+  const triple = targetTriple();
+  for (const entry of config.bundle?.externalBin ?? []) {
+    const { source, name } = externalBinary({ entry, projectDirectory, triple });
+    const destination = path.join(payload, name);
+    if (logger) logger.debug(`packaging external binary ${source}`);
+    copyEntry(source, destination);
+    executableFile(destination);
+  }
+
+  let licenseSource = null;
+  if (config.bundle?.licenseFile) {
+    licenseSource = projectPath(projectDirectory, config.bundle.licenseFile);
+    if (!existsSync(licenseSource) || !statSync(licenseSource).isFile()) {
+      throw new FlareError(`bundle license file '${config.bundle.licenseFile}' does not exist`);
+    }
+    copyEntry(licenseSource, path.join(payload, "LICENSE"));
+  }
+
+  return { directory: payload, binaryName, binary: stagedBinary, licenseSource };
+}
+
+export function directorySize(directory) {
+  let total = 0;
+  const walk = (current) => {
+    for (const entry of readdirSync(current, { withFileTypes: true })) {
+      const target = path.join(current, entry.name);
+      if (entry.isDirectory()) walk(target);
+      else if (entry.isFile()) total += statSync(target).size;
+    }
+  };
+  walk(directory);
+  return total;
+}
+
+export function cleanStage(stageDirectory) {
+  rmSync(stageDirectory, { recursive: true, force: true });
+}

package/src/lib/packaging/tools.js

@@ -0,0 +1,75 @@
+import { spawn } from "node:child_process";
+import { accessSync, constants } from "node:fs";
+import path from "node:path";
+
+import { FlareError } from "../errors.js";
+
+const OVERRIDES = {
+  makensis: "FLARE_MAKENSIS",
+  candle: "FLARE_CANDLE",
+  light: "FLARE_LIGHT",
+  "dpkg-deb": "FLARE_DPKG_DEB",
+  rpmbuild: "FLARE_RPMBUILD",
+  appimagetool: "FLARE_APPIMAGETOOL",
+  hdiutil: "FLARE_HDIUTIL",
+  codesign: "FLARE_CODESIGN"
+};
+
+const WINDOWS_EXTENSIONS = [".exe", ".cmd", ".bat", ""];
+
+function executable(directory, name) {
+  const extensions = process.platform === "win32" ? WINDOWS_EXTENSIONS : [""];
+  for (const extension of extensions) {
+    const candidate = path.join(directory, `${name}${extension}`);
+    try {
+      accessSync(candidate, constants.X_OK);
+      return candidate;
+    } catch {
+      continue;
+    }
+  }
+  return null;
+}
+
+export function findTool(name) {
+  const variable = OVERRIDES[name];
+  if (variable && process.env[variable]) return process.env[variable];
+
+  const directories = String(process.env.PATH ?? "").split(path.delimiter).filter(Boolean);
+  for (const directory of directories) {
+    const candidate = executable(directory, name);
+    if (candidate) return candidate;
+  }
+  return null;
+}
+
+export function requireTool(name, hint) {
+  const location = findTool(name);
+  if (location) return location;
+  const variable = OVERRIDES[name];
+  const suffix = variable ? `, or set ${variable} to its path` : "";
+  throw new FlareError(`'${name}' was not found in PATH; ${hint}${suffix}`);
+}
+
+export async function runTool(command, args, { cwd, env, logger } = {}) {
+  const output = [];
+  const result = await new Promise((resolve, reject) => {
+    const child = spawn(command, args, {
+      cwd,
+      env: env ? { ...process.env, ...env } : process.env,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    child.stdout.on("data", (chunk) => output.push(chunk.toString()));
+    child.stderr.on("data", (chunk) => output.push(chunk.toString()));
+    child.on("error", reject);
+    child.on("close", (code, signal) => resolve({ code: code ?? 1, signal }));
+  });
+
+  const text = output.join("").trim();
+  if (result.code !== 0) {
+    const tail = text.split(/\r?\n/).slice(-20).join("\n");
+    throw new FlareError(`'${path.basename(command)}' exited with code ${result.code}${tail ? `:\n${tail}` : ""}`);
+  }
+  if (logger && text) logger.debug(text);
+  return { command, args, output: text };
+}