@gjsify/cli 0.38.0 → 0.38.1

package/lib/commands/showcase.js

@@ -7,18 +7,19 @@ import { ensurePkgDir } from './dlx.js';
 import { fetchPackument } from '@gjsify/npm-registry';
 import { loadNpmrc } from '../utils/load-npmrc.js';
 import { parseSpec } from '../utils/parse-spec.js';
+import { cliVersion } from '../utils/publish-headers.js';
 import { resolveNodeEntry } from '../utils/resolve-gjs-entry.js';
 import { runRuntimeBundle } from '../utils/run-node.js';
 import { EXAMPLE_RUNTIMES, isExampleRuntime, readDeclaredRuntimes, checkRuntimeSupported, defaultExampleRuntime, requiresGjsSystemDeps, } from '../utils/runtimes.js';
+/**
+ * This CLI's own version, or `undefined` when it genuinely cannot be told.
+ *
+ * The shared resolver, never a local fixed-depth manifest read — that misses from
+ * `dist/`, unpinning `dlxSpec`. Incident: `docs/code-anti-patterns.md`.
+ */
 function readCliVersion() {
-    try {
-        const pkgUrl = new URL('../../package.json', import.meta.url);
-        const pkg = JSON.parse(readFileSync(pkgUrl, 'utf8'));
-        return typeof pkg.version === 'string' ? pkg.version : undefined;
-    }
-    catch {
-        return undefined;
-    }
+    const version = cliVersion();
+    return version === 'unknown' ? undefined : version;
 }
 /**
  * `[gjsify <version>] ` for the banner — the CLI naming ITSELF.

package/lib/templates/install.mjs.tmpl

@@ -20,9 +20,70 @@
 
 import GLib from 'gi://GLib';
 import Gio from 'gi://Gio';
-import Soup from 'gi://Soup?version=3.0';
 import system, { exit } from 'system';
 
+/**
+ * Soup, loaded late and — on a macOS that cannot find it — through one re-exec.
+ *
+ * WHY THIS IS NOT A PLAIN IMPORT. GI resolves a typelib's shared library with a
+ * bare-leaf `dlopen("libsoup-3.0.0.dylib")`. Homebrew installs that dylib in
+ * `/usr/local/lib` (Intel) or `/opt/homebrew/lib` (arm64), and `gjs` carries an
+ * rpath only for glib's own directory, so on a stock Homebrew macOS dyld never
+ * looks where the library actually is. Measured 2026-08-13 on macOS 15.7.9:
+ *
+ *     $ curl -fsSL .../install.mjs -o /tmp/g.mjs && gjs -m /tmp/g.mjs
+ *     Failed to load shared library 'libsoup-3.0.0.dylib' referenced by the typelib
+ *     JS ERROR: Error: Unsupported type void, deriving from fundamental void
+ *
+ * That is the DOCUMENTED install path for a platform this project advertises,
+ * and it fails before the first byte is downloaded — the bootstrap's own fetcher
+ * is Soup. `DYLD_FALLBACK_LIBRARY_PATH=/usr/local/lib` fixes it, but nothing can
+ * export that on the user's behalf from inside this process: the variable is
+ * read by dyld at image load, long before any JS runs. Hence a re-exec.
+ *
+ * Repaired ONLY when the load actually fails, so a healthy host (arm64 Homebrew,
+ * a distro-packaged gjs, anything with a working rpath) re-execs never.
+ *
+ * Note the probe touches `Session` rather than just importing the namespace:
+ * `imports.gi.Soup` SUCCEEDS on a broken host — the library is resolved lazily,
+ * when a type is first needed. A namespace-only check reports a healthy
+ * environment and is the reason this looked like a network bug for so long.
+ */
+const DYLD_REEXEC_MARKER = 'GJSIFY_INSTALL_DYLD_REEXEC';
+
+/** dyld's documented default fallback list, plus both Homebrew prefixes. */
+function dyldFallbackDirs() {
+    const home = GLib.get_home_dir();
+    return [`${home}/lib`, '/usr/local/lib', '/opt/homebrew/lib', '/lib', '/usr/lib'].join(':');
+}
+
+async function loadSoup() {
+    const mod = await import('gi://Soup?version=3.0');
+    void mod.default.Session; // forces the dlopen; see above
+    return mod.default;
+}
+
+let Soup;
+try {
+    Soup = await loadSoup();
+} catch (error) {
+    const onMacos = GLib.file_test('/usr/lib/dyld', GLib.FileTest.EXISTS);
+    if (!onMacos || GLib.getenv(DYLD_REEXEC_MARKER)) throw error;
+
+    const self = GLib.filename_from_uri(import.meta.url)[0];
+    const gjs = GLib.find_program_in_path('gjs');
+    if (!gjs) throw error;
+
+    // SIP strips an INHERITED DYLD_* when a protected binary is exec'd, but a
+    // value this process sets itself survives into Homebrew's unprotected `gjs`.
+    const launcher = new Gio.SubprocessLauncher({ flags: Gio.SubprocessFlags.NONE });
+    launcher.setenv('DYLD_FALLBACK_LIBRARY_PATH', dyldFallbackDirs(), true);
+    launcher.setenv(DYLD_REEXEC_MARKER, '1', true);
+    const child = launcher.spawnv([gjs, '-m', self, ...(system?.programArgs ?? [])]);
+    child.wait(null);
+    exit(child.get_exit_status() === 0 ? 0 : 1);
+}
+
 Gio._promisify(Soup.Session.prototype, 'send_and_read_async');
 Gio._promisify(Gio.Subprocess.prototype, 'wait_check_async');
 

package/lib/utils/publish-headers.d.ts

@@ -38,3 +38,4 @@ export interface PublishHeaderOptions {
  * and a wildcard here misses the create route.
  */
 export declare function buildPublishHeaders(url: string, opts: PublishHeaderOptions): Record<string, string>;
+export declare function cliVersion(): string;

package/lib/utils/publish-headers.js

@@ -82,9 +82,14 @@ export function buildPublishHeaders(url, opts) {
  *    `lib/`, `dist/` and an installed `node_modules/@gjsify/cli/**` alike.
  *
  * `GJSIFY_CLI_PACKAGE_JSON` overrides both, matching `self-update.ts`.
+ *
+ * Exported because `showcase` needs the SAME answer rather than a fourth
+ * resolver: it PINS the showcase package to this version, so a version it cannot
+ * read is a showcase left unpinned and `dlx` serves a stale cached one
+ * (`docs/code-anti-patterns.md`). Returns `'unknown'`, never `undefined`.
  */
 let cachedCliVersion;
-function cliVersion() {
+export function cliVersion() {
     if (cachedCliVersion !== undefined)
         return cachedCliVersion;
     cachedCliVersion =

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/cli",
-    "version": "0.38.0",
+    "version": "0.38.1",
     "description": "CLI for Gjsify",
     "type": "module",
     "main": "lib/index.js",
@@ -134,20 +134,20 @@
         "cli"
     ],
     "dependencies": {
-        "@gjsify/buffer": "^0.38.0",
-        "@gjsify/create-app": "^0.38.0",
-        "@gjsify/node-globals": "^0.38.0",
-        "@gjsify/node-polyfills": "^0.38.0",
-        "@gjsify/npm-registry": "^0.38.0",
-        "@gjsify/resolve-npm": "^0.38.0",
-        "@gjsify/rolldown-plugin-gjsify": "^0.38.0",
-        "@gjsify/vite-plugin-blueprint": "^0.38.0",
-        "@gjsify/rolldown-plugin-pnp": "^0.38.0",
-        "@gjsify/semver": "^0.38.0",
-        "@gjsify/tar": "^0.38.0",
-        "@gjsify/tsc": "^0.38.0",
-        "@gjsify/web-polyfills": "^0.38.0",
-        "@gjsify/workspace": "^0.38.0",
+        "@gjsify/buffer": "^0.38.1",
+        "@gjsify/create-app": "^0.38.1",
+        "@gjsify/node-globals": "^0.38.1",
+        "@gjsify/node-polyfills": "^0.38.1",
+        "@gjsify/npm-registry": "^0.38.1",
+        "@gjsify/resolve-npm": "^0.38.1",
+        "@gjsify/rolldown-plugin-gjsify": "^0.38.1",
+        "@gjsify/vite-plugin-blueprint": "^0.38.1",
+        "@gjsify/rolldown-plugin-pnp": "^0.38.1",
+        "@gjsify/semver": "^0.38.1",
+        "@gjsify/tar": "^0.38.1",
+        "@gjsify/tsc": "^0.38.1",
+        "@gjsify/web-polyfills": "^0.38.1",
+        "@gjsify/workspace": "^0.38.1",
         "cosmiconfig": "^9.0.2",
         "get-tsconfig": "^4.14.0",
         "pkg-types": "^2.3.1",
@@ -155,13 +155,13 @@
         "yargs": "^18.0.0"
     },
     "devDependencies": {
-        "@gjsify/unit": "^0.38.0",
+        "@gjsify/unit": "^0.38.1",
         "@types/yargs": "^17.0.35",
         "typescript": "^6.0.3"
     },
     "peerDependencies": {
-        "@gjsify/oxfmt-native": "^0.38.0",
-        "@gjsify/rolldown-native": "^0.38.0"
+        "@gjsify/oxfmt-native": "^0.38.1",
+        "@gjsify/rolldown-native": "^0.38.1"
     },
     "peerDependenciesMeta": {
         "@gjsify/oxfmt-native": {