@getxflow/cli 0.6.0 → 0.6.2

package/dist/commands/mcp.js

@@ -1,13 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.mcpInstall = mcpInstall;
-const node_child_process_1 = require("node:child_process");
 const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
 const api_1 = require("../api");
 const args_1 = require("../args");
 const config_1 = require("../config");
 const session_1 = require("../session");
+const spawn_1 = require("../spawn");
 const ui_1 = require("../ui");
 /** Clients with their own server-add command. */
 const CLIENTS = [
@@ -28,23 +28,10 @@ const CLIENTS = [
         reset: ['mcp', 'remove', 'xflow', '-s', 'local'],
     },
 ];
-const WINDOWS = process.platform === 'win32';
-/**
- * Windows needs a shell to resolve npm's .cmd shims, and the shell joins
- * arguments instead of escaping them: quote by hand.
- */
-function quote(value) {
-    return WINDOWS ? `"${value.replace(/"/g, '""')}"` : value;
-}
-function execute(binary, args) {
-    // Capture output: clients may echo the added header together with the key.
-    const options = { encoding: 'utf-8' };
-    return WINDOWS
-        ? (0, node_child_process_1.spawnSync)([binary, ...args.map(quote)].join(' '), { ...options, shell: true })
-        : (0, node_child_process_1.spawnSync)(binary, args, options);
-}
+// Output is captured, not inherited: clients may echo the added header together
+// with the key.
 function hasBinary(binary) {
-    return execute(binary, ['--version']).status === 0;
+    return (0, spawn_1.run)(binary, ['--version']).status === 0;
 }
 async function mcpInstall(args) {
     // The server covers the organization: the command works outside a project folder too.
@@ -62,8 +49,8 @@ async function mcpInstall(args) {
             continue;
         found++;
         (0, ui_1.step)(`Writing into ${target.label}`);
-        execute(target.binary, [...target.reset]);
-        const result = execute(target.binary, target.args(url, client.token));
+        (0, spawn_1.run)(target.binary, [...target.reset]);
+        const result = (0, spawn_1.run)(target.binary, target.args(url, client.token));
         if (result.status === 0) {
             installed++;
             (0, ui_1.ok)(`${target.label}: the xflow server is connected`);

package/dist/commands/update.js

@@ -6,6 +6,7 @@ const node_child_process_1 = require("node:child_process");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const errors_1 = require("../errors");
+const spawn_1 = require("../spawn");
 const ui_1 = require("../ui");
 const version_1 = require("../version");
 const PACKAGE = '@getxflow/cli';
@@ -55,19 +56,14 @@ function projectManifest(dir) {
     return null;
 }
 function npmRoot() {
-    try {
-        const output = (0, node_child_process_1.execFileSync)('npm', ['root', '-g'], {
-            encoding: 'utf-8',
-            shell: WINDOWS,
-            timeout: 60_000,
-            stdio: ['ignore', 'pipe', 'ignore'],
-        });
-        const dir = output.trim();
-        return dir.length > 0 && (0, node_fs_1.existsSync)(dir) ? dir : null;
-    }
-    catch {
+    const result = (0, spawn_1.run)('npm', ['root', '-g'], {
+        timeout: 60_000,
+        stdio: ['ignore', 'pipe', 'ignore'],
+    });
+    if (result.error || result.status !== 0 || typeof result.stdout !== 'string')
         return null;
-    }
+    const dir = result.stdout.trim();
+    return dir.length > 0 && (0, node_fs_1.existsSync)(dir) ? dir : null;
 }
 function packageDir(root) {
     return (0, node_path_1.join)(root, '@getxflow', 'cli');
@@ -133,9 +129,11 @@ function update() {
         return;
     }
     (0, ui_1.step)(`updating ${PACKAGE} from ${version_1.CLI_VERSION}`);
-    const result = (0, node_child_process_1.spawnSync)('npm', ['i', '-g', `${PACKAGE}@latest`], {
+    // --prefer-online: npm trusts its cached package metadata for five minutes, and a
+    // release younger than that installs as "already the latest" while the notice from
+    // the platform keeps saying otherwise. Update means ask the registry.
+    const result = (0, spawn_1.run)('npm', ['i', '-g', `${PACKAGE}@latest`, '--prefer-online'], {
         stdio: 'inherit',
-        shell: WINDOWS,
     });
     if (result.error) {
         throw new errors_1.CliError(`Could not run npm: ${result.error.message}`, `Install by hand: npm i -g ${PACKAGE}@latest`);

package/dist/spawn.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const node_child_process_1 = require("node:child_process");
+const WINDOWS = process.platform === 'win32';
+/**
+ * Windows resolves npm and other .cmd shims only through a shell, and a shell
+ * together with an args array is what Node deprecated in DEP0190: it joins them
+ * itself, without escaping, and says so in the middle of our output. So the command
+ * line is built and quoted here, and no other platform gets a shell at all.
+ */
+function quote(value) {
+    return WINDOWS ? `"${value.replace(/"/g, '""')}"` : value;
+}
+function run(binary, args, options = {}) {
+    const common = { stdio: options.stdio, timeout: options.timeout, encoding: 'utf-8' };
+    return WINDOWS
+        ? (0, node_child_process_1.spawnSync)([binary, ...args.map(quote)].join(' '), { ...common, shell: true })
+        : (0, node_child_process_1.spawnSync)(binary, args, common);
+}

package/dist/version.js

@@ -2,6 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_API_URL = exports.CLI_VERSION = void 0;
 /** Keep in sync with cli/package.json. */
-exports.CLI_VERSION = '0.6.0';
+exports.CLI_VERSION = '0.6.2';
 /** Overridden by XFLOW_API_URL or the `api` field in xflow.json. */
 exports.DEFAULT_API_URL = 'https://app.getxflow.com';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getxflow/cli",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "CLI for the XFlow platform: source sync, deployment and publishing of applications",
   "license": "UNLICENSED",
   "engines": {