@mutmutco/installer-launcher 0.1.0 → 0.1.2

package/README.md

@@ -179,8 +179,9 @@ the fixture's stdout.
 
 The SEA binary must be stamped on a native runner for its target OS/architecture — the Node SEA
 blob embeds the host Node binary, so a macOS arm64 binary cannot be produced on Linux. The reusable
-workflow `.github/workflows/launcher-build.yml` implements exactly the steps above on the three
-supported lanes (`macos-14` arm64, `macos-13` x64, `windows-latest` x64): `npm ci`, install
+workflow `.github/workflows/launcher-build.yml` implements exactly the steps above on the two
+supported lanes (`macos-14` arm64, Apple Silicon, and `windows-latest` x64 — Intel Macs are not
+supported, so there is no `darwin-x64` leg): `npm ci`, install
 `postject`, `node build.mjs --product-config <cfg> --sea`, smoke `--version` then
 `--run test/fixtures/run-hello.mjs a b`, write the `.sha256`,
 and upload `launcher-<product>-<platform>-<arch>`. It is callable (`workflow_call`) and dispatchable,

package/dist/launcher.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { spawnSync } from "node:child_process";
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
-import { join as join3, resolve } from "node:path";
+import { dirname as dirname2, join as join3, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL as pathToFileURL2 } from "node:url";
 
 // src/config.ts
@@ -91,8 +91,8 @@ import { spawn } from "node:child_process";
 var realSleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
 function openBrowser(url) {
   if (process.env.LAUNCHER_NO_OPEN === "1") return;
-  const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : process.platform === "darwin" ? [url] : [url];
+  const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "rundll32" : "xdg-open";
+  const args = process.platform === "win32" ? ["url.dll,FileProtocolHandler", url] : [url];
   try {
     const child = spawn(opener, args, { detached: true, stdio: "ignore", windowsHide: true });
     child.on("error", () => {
@@ -108,10 +108,24 @@ async function postJson(url, body, fetchImpl) {
     body: JSON.stringify(body)
   });
 }
+async function readBody(response) {
+  try {
+    return await response.text();
+  } catch {
+    return "";
+  }
+}
+function gateRefusal(method, url, status, body) {
+  const head = body.replace(/\s+/g, " ").trim().slice(0, 200);
+  return `the sign-in server refused the request \u2014 ${method} ${url} \u2192 ${status}${head ? `: ${head}` : ""}`;
+}
 async function requestDeviceCode(config, fetchImpl) {
   if (!config.githubClientId) throw new Error("this product has no githubClientId configured");
-  const response = await postJson(`${config.host}/gate/device/code`, { client_id: config.githubClientId }, fetchImpl);
-  if (!response.ok) throw new Error(`the sign-in server refused the request (${response.status})`);
+  const url = `${config.host}/gate/device/code`;
+  const response = await postJson(url, { client_id: config.githubClientId }, fetchImpl);
+  if (!response.ok) {
+    throw new Error(gateRefusal("POST", url, response.status, await readBody(response)));
+  }
   const data = await response.json();
   if (typeof data.device_code !== "string" || typeof data.user_code !== "string" || typeof data.verification_uri !== "string" || typeof data.expires_in !== "number" || typeof data.interval !== "number") {
     throw new Error("the sign-in server returned a malformed device code");
@@ -144,8 +158,9 @@ async function loginGithub(config, options = {}) {
   for (; ; ) {
     if (now() >= deadline) throw new Error("the sign-in code expired before you approved it \u2014 run login again.");
     await sleep(intervalMs);
+    const url = `${config.host}/gate/device/token`;
     const response = await postJson(
-      `${config.host}/gate/device/token`,
+      url,
       { client_id: config.githubClientId, device_code: issued.device_code },
       fetchImpl
     );
@@ -156,9 +171,10 @@ async function loginGithub(config, options = {}) {
       }
       return { accessToken: data.access_token, refreshToken: data.refresh_token, expiresIn: data.expires_in };
     }
+    const body = await readBody(response);
     let error = "";
     try {
-      error = (await response.json()).error ?? "";
+      error = JSON.parse(body).error ?? "";
     } catch {
       error = "";
     }
@@ -173,15 +189,16 @@ async function loginGithub(config, options = {}) {
     if (error === "denied") {
       throw new Error("you declined the sign-in request \u2014 nothing was installed.");
     }
-    throw new Error(
-      `the sign-in server refused the request (${response.status}${error ? `: ${error}` : ""})`
-    );
+    throw new Error(gateRefusal("POST", url, response.status, body));
   }
 }
 async function refreshAccessToken(config, refreshToken, fetchImpl = fetch) {
-  const response = await postJson(`${config.host}/gate/refresh`, { refresh_token: refreshToken }, fetchImpl);
+  const url = `${config.host}/gate/refresh`;
+  const response = await postJson(url, { refresh_token: refreshToken }, fetchImpl);
   if (response.status === 403) return null;
-  if (!response.ok) throw new Error(`the sign-in server refused the refresh (${response.status})`);
+  if (!response.ok) {
+    throw new Error(gateRefusal("POST", url, response.status, await readBody(response)));
+  }
   const data = await response.json();
   if (typeof data.access_token !== "string" || typeof data.expires_in !== "number") {
     throw new Error("the sign-in server returned a malformed refresh");
@@ -245,6 +262,10 @@ async function loginGoogle(options) {
         clearTimeout(timer);
         resolve2(received);
       });
+      const print = options.print ?? ((line) => process.stderr.write(`${line}
+`));
+      print(`Sign in at: ${authorize.toString()}`);
+      print("If the browser did not open, open that address yourself.");
       options.open(authorize.toString());
     });
     const exchange = await fetchImpl(`${server}/oauth/token`, {
@@ -294,7 +315,8 @@ async function refreshGoogleToken(host, clientId, refreshToken, fetchImpl = fetc
   };
 }
 function page(title, body) {
-  return `<!doctype html><meta charset="utf-8"><title>${title}</title><style>body{font-family:system-ui;margin:0;padding:12vh 1.5rem}main{max-width:32rem;margin:auto}h1{font-size:1.4rem}</style><main><h1>${title}</h1><p>${body}</p></main>`;
+  const style = "html{color-scheme:dark}body{background:#0a0a0a;color:#ededed;font-family:system-ui,-apple-system,Segoe UI,sans-serif;margin:0;padding:12vh 1.5rem}main{max-width:32rem;margin:auto}h1{font-size:1.4rem;font-weight:700;color:#1fd18a;margin:0 0 .75rem}p{color:#c9c9c9;line-height:1.55;margin:0}";
+  return `<!doctype html><meta charset="utf-8"><meta name="color-scheme" content="dark"><title>${title}</title><style>${style}</style><main><h1>${title}</h1><p>${body}</p></main>`;
 }
 
 // src/payload.ts
@@ -535,7 +557,7 @@ function wipeProductDir(dir) {
 }
 
 // src/index.ts
-var LAUNCHER_VERSION = "0.1.0";
+var LAUNCHER_VERSION = true ? "0.1.2" : readVersionFromPackage();
 function defaultPrint(message) {
   process.stdout.write(`${message}
 `);

package/dist/launcher.sea.cjs

@@ -120,8 +120,8 @@ var import_node_child_process = require("node:child_process");
 var realSleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
 function openBrowser(url) {
   if (process.env.LAUNCHER_NO_OPEN === "1") return;
-  const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : process.platform === "darwin" ? [url] : [url];
+  const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "rundll32" : "xdg-open";
+  const args = process.platform === "win32" ? ["url.dll,FileProtocolHandler", url] : [url];
   try {
     const child = (0, import_node_child_process.spawn)(opener, args, { detached: true, stdio: "ignore", windowsHide: true });
     child.on("error", () => {
@@ -137,10 +137,24 @@ async function postJson(url, body, fetchImpl) {
     body: JSON.stringify(body)
   });
 }
+async function readBody(response) {
+  try {
+    return await response.text();
+  } catch {
+    return "";
+  }
+}
+function gateRefusal(method, url, status, body) {
+  const head = body.replace(/\s+/g, " ").trim().slice(0, 200);
+  return `the sign-in server refused the request \u2014 ${method} ${url} \u2192 ${status}${head ? `: ${head}` : ""}`;
+}
 async function requestDeviceCode(config, fetchImpl) {
   if (!config.githubClientId) throw new Error("this product has no githubClientId configured");
-  const response = await postJson(`${config.host}/gate/device/code`, { client_id: config.githubClientId }, fetchImpl);
-  if (!response.ok) throw new Error(`the sign-in server refused the request (${response.status})`);
+  const url = `${config.host}/gate/device/code`;
+  const response = await postJson(url, { client_id: config.githubClientId }, fetchImpl);
+  if (!response.ok) {
+    throw new Error(gateRefusal("POST", url, response.status, await readBody(response)));
+  }
   const data = await response.json();
   if (typeof data.device_code !== "string" || typeof data.user_code !== "string" || typeof data.verification_uri !== "string" || typeof data.expires_in !== "number" || typeof data.interval !== "number") {
     throw new Error("the sign-in server returned a malformed device code");
@@ -173,8 +187,9 @@ async function loginGithub(config, options = {}) {
   for (; ; ) {
     if (now() >= deadline) throw new Error("the sign-in code expired before you approved it \u2014 run login again.");
     await sleep(intervalMs);
+    const url = `${config.host}/gate/device/token`;
     const response = await postJson(
-      `${config.host}/gate/device/token`,
+      url,
       { client_id: config.githubClientId, device_code: issued.device_code },
       fetchImpl
     );
@@ -185,9 +200,10 @@ async function loginGithub(config, options = {}) {
       }
       return { accessToken: data.access_token, refreshToken: data.refresh_token, expiresIn: data.expires_in };
     }
+    const body = await readBody(response);
     let error = "";
     try {
-      error = (await response.json()).error ?? "";
+      error = JSON.parse(body).error ?? "";
     } catch {
       error = "";
     }
@@ -202,15 +218,16 @@ async function loginGithub(config, options = {}) {
     if (error === "denied") {
       throw new Error("you declined the sign-in request \u2014 nothing was installed.");
     }
-    throw new Error(
-      `the sign-in server refused the request (${response.status}${error ? `: ${error}` : ""})`
-    );
+    throw new Error(gateRefusal("POST", url, response.status, body));
   }
 }
 async function refreshAccessToken(config, refreshToken, fetchImpl = fetch) {
-  const response = await postJson(`${config.host}/gate/refresh`, { refresh_token: refreshToken }, fetchImpl);
+  const url = `${config.host}/gate/refresh`;
+  const response = await postJson(url, { refresh_token: refreshToken }, fetchImpl);
   if (response.status === 403) return null;
-  if (!response.ok) throw new Error(`the sign-in server refused the refresh (${response.status})`);
+  if (!response.ok) {
+    throw new Error(gateRefusal("POST", url, response.status, await readBody(response)));
+  }
   const data = await response.json();
   if (typeof data.access_token !== "string" || typeof data.expires_in !== "number") {
     throw new Error("the sign-in server returned a malformed refresh");
@@ -274,6 +291,10 @@ async function loginGoogle(options) {
         clearTimeout(timer);
         resolve2(received);
       });
+      const print = options.print ?? ((line) => process.stderr.write(`${line}
+`));
+      print(`Sign in at: ${authorize.toString()}`);
+      print("If the browser did not open, open that address yourself.");
       options.open(authorize.toString());
     });
     const exchange = await fetchImpl(`${server}/oauth/token`, {
@@ -323,7 +344,8 @@ async function refreshGoogleToken(host, clientId, refreshToken, fetchImpl = fetc
   };
 }
 function page(title, body) {
-  return `<!doctype html><meta charset="utf-8"><title>${title}</title><style>body{font-family:system-ui;margin:0;padding:12vh 1.5rem}main{max-width:32rem;margin:auto}h1{font-size:1.4rem}</style><main><h1>${title}</h1><p>${body}</p></main>`;
+  const style = "html{color-scheme:dark}body{background:#0a0a0a;color:#ededed;font-family:system-ui,-apple-system,Segoe UI,sans-serif;margin:0;padding:12vh 1.5rem}main{max-width:32rem;margin:auto}h1{font-size:1.4rem;font-weight:700;color:#1fd18a;margin:0 0 .75rem}p{color:#c9c9c9;line-height:1.55;margin:0}";
+  return `<!doctype html><meta charset="utf-8"><meta name="color-scheme" content="dark"><title>${title}</title><style>${style}</style><main><h1>${title}</h1><p>${body}</p></main>`;
 }
 
 // src/payload.ts
@@ -564,7 +586,7 @@ function wipeProductDir(dir) {
 }
 
 // src/index.ts
-var LAUNCHER_VERSION = "0.1.0";
+var LAUNCHER_VERSION = true ? "0.1.2" : readVersionFromPackage();
 function defaultPrint(message) {
   process.stdout.write(`${message}
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/installer-launcher",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Single-executable (SEA) launcher: sign-in, gated payload fetch, self-update. One copy ships per product.",
   "type": "module",
   "license": "UNLICENSED",