@mutmutco/installer-launcher 1.3.0 → 1.3.1

package/README.md

@@ -245,7 +245,7 @@ atomically only after convergence succeeds. On failure or interrupted startup it
 consumer rollback before allowing another install or forwarding. Failed rollback stays pending.
 A crash after shared commit completes the receipt instead of reverting the committed product.
 Host registration is not atomic: failures can leave host references to retained candidates.
-Candidates are deliberately retained until product-owned reference evidence can permit cleanup.
+After a committed promotion the launcher removes candidate folders `state.json` no longer references (the active one is kept; symlinks and junctions are skipped; a failed delete is logged). A failed activation keeps its candidate.
 An orphan lock-recovery guard fails closed and needs operator diagnosis.
 
 For already-shipped old launchers, copy the exact file exported by

package/dist/launcher.js

@@ -6,7 +6,7 @@ import { randomUUID as randomUUID4 } from "node:crypto";
 
 // src/acquisition.ts
 import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4, unlinkSync, realpathSync as realpathSync2 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4, unlinkSync, realpathSync as realpathSync2, readdirSync, lstatSync, rmSync as rmSync4 } from "node:fs";
 import { join as join4, resolve, relative as relative2, isAbsolute as isAbsolute2, dirname as dirname2 } from "node:path";
 
 // src/runtime.ts
@@ -617,6 +617,28 @@ async function recoverAcquisition(dir, run2, env) {
   else if (existsSync5(statePath(dir))) unlinkSync(statePath(dir));
   unlinkSync(pendingPath(dir));
 }
+function reapCandidates(dir) {
+  const keep = readState(dir)?.acquired?.candidate;
+  if (!keep) return;
+  const base = join4(dir, "candidates");
+  let names;
+  try {
+    names = readdirSync(base);
+  } catch {
+    return;
+  }
+  for (const name of names) {
+    if (name === keep || !/^[a-zA-Z0-9_-]+$/.test(name)) continue;
+    try {
+      const path = join4(base, name);
+      const info = lstatSync(path);
+      if (!info.isDirectory() || info.isSymbolicLink()) continue;
+      rmSync4(path, { recursive: true, force: true });
+    } catch (error) {
+      console.error(`launcher: could not remove old candidate ${name}: ${error.message}`);
+    }
+  }
+}
 async function installAcquisition(dir, candidate, version, acquisition, options) {
   if (!acquisition.platforms.includes(`${process.platform}-${process.arch}`)) throw new Error("this product does not support this platform");
   const root = candidateRoot(dir, candidate);
@@ -673,11 +695,12 @@ async function installAcquisition(dir, candidate, version, acquisition, options)
     throw error;
   }
   unlinkSync(pendingPath(dir));
+  reapCandidates(dir);
 }
 
 // src/index.ts
 import { spawn as spawn2, spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync8, readFileSync as readFileSync8, statSync as statSync2, mkdtempSync as mkdtempSync2, unlinkSync as unlinkSync2, rmdirSync, mkdirSync as mkdirSync6, renameSync as renameSync5, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync8, statSync as statSync2, mkdtempSync as mkdtempSync2, unlinkSync as unlinkSync2, rmdirSync, mkdirSync as mkdirSync6, renameSync as renameSync5, rmSync as rmSync7, writeFileSync as writeFileSync8 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 import { dirname as dirname4, join as join7, resolve as resolve3 } from "node:path";
 import { isSea } from "node:sea";
@@ -1554,7 +1577,7 @@ var rowTitle = (row) => `${row.surface}${row.aspect ? ` ${row.aspect}` : ""}${ro
 
 // src/autoupdate.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync6, rmSync as rmSync5, writeFileSync as writeFileSync6 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
 import { join as join5 } from "node:path";
 function schedulePlatform(override) {
@@ -1649,20 +1672,20 @@ function disableSchedule(config, options = {}) {
     if (result.code !== 0 && !/cannot find|does not exist/i.test(`${result.stdout} ${result.stderr}`)) {
       throw new Error(`Could not turn auto-update off: ${firstLine(result.stdout || result.stderr) || `exit ${result.code}`}`);
     }
-    rmSync4(join5(options.stateDir ?? defaultProductDir(config.product), HIDDEN_SCRIPT), { force: true });
+    rmSync5(join5(options.stateDir ?? defaultProductDir(config.product), HIDDEN_SCRIPT), { force: true });
     return;
   }
   if (platform === "darwin") {
     const label2 = scheduleLabel(config);
     exec("launchctl", ["bootout", `gui/${process.getuid?.() ?? 501}/${label2}`]);
-    rmSync4(join5(home, "Library", "LaunchAgents", `${label2}.plist`), { force: true });
+    rmSync5(join5(home, "Library", "LaunchAgents", `${label2}.plist`), { force: true });
     return;
   }
   const label = scheduleLabel(config);
   const dir = join5(home, ".config", "systemd", "user");
   exec("systemctl", ["--user", "disable", "--now", `${label}.timer`]);
-  rmSync4(join5(dir, `${label}.service`), { force: true });
-  rmSync4(join5(dir, `${label}.timer`), { force: true });
+  rmSync5(join5(dir, `${label}.service`), { force: true });
+  rmSync5(join5(dir, `${label}.timer`), { force: true });
 }
 function querySchedule(config, options = {}) {
   const platform = schedulePlatform(options.platform);
@@ -2041,7 +2064,7 @@ async function ensureFreshToken(config, dir, fetchImpl = fetch) {
 
 // src/refresh.ts
 import { execFile } from "node:child_process";
-import { accessSync, chmodSync, constants, existsSync as existsSync7, lstatSync, readdirSync, readFileSync as readFileSync7, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync5, statSync, writeFileSync as writeFileSync7 } from "node:fs";
+import { accessSync, chmodSync, constants, existsSync as existsSync7, lstatSync as lstatSync2, readdirSync as readdirSync2, readFileSync as readFileSync7, realpathSync as realpathSync3, renameSync as renameSync4, rmSync as rmSync6, statSync, writeFileSync as writeFileSync7 } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname as dirname3, join as join6, resolve as resolve2 } from "node:path";
 var LAUNCHER_RECORD_FILE = "launcher.json";
@@ -2157,14 +2180,14 @@ function removeStale(file) {
   const prefix = `${basename(file)}.old-`;
   let names;
   try {
-    names = readdirSync(dirname3(file));
+    names = readdirSync2(dirname3(file));
   } catch {
     return;
   }
   for (const name of names) {
     if (!name.startsWith(prefix)) continue;
     try {
-      rmSync5(join6(dirname3(file), name), { force: true });
+      rmSync6(join6(dirname3(file), name), { force: true });
     } catch {
     }
   }
@@ -2177,7 +2200,7 @@ async function refreshLauncher(target, options = {}) {
   const productDir = options.productDir ?? defaultProductDir(target.product);
   const recorded = recordedPath(productDir);
   const file = options.path ?? (recorded && existsSync7(recorded) ? recorded : installedPath(target, productDir, platform));
-  if (!existsSync7(file) || lstatSync(file).isSymbolicLink()) return null;
+  if (!existsSync7(file) || lstatSync2(file).isSymbolicLink()) return null;
   if (!options.dryRun) removeStale(file);
   const from = await (options.readVersion ?? ((path) => runVersion(path, target.bin)))(file);
   if (!from) return null;
@@ -2226,7 +2249,7 @@ async function refreshLauncher(target, options = {}) {
         if (moved && !existsSync7(file)) renameSync4(moved, file);
       } catch {
       }
-      rmSync5(next, { force: true });
+      rmSync6(next, { force: true });
       return arm("fail", from, "The launcher could not be replaced.");
     }
     return arm("ok", record.version, "");
@@ -2236,7 +2259,7 @@ async function refreshLauncher(target, options = {}) {
 }
 
 // src/index.ts
-var LAUNCHER_VERSION = true ? "1.3.0" : readVersionFromPackage();
+var LAUNCHER_VERSION = true ? "1.3.1" : readVersionFromPackage();
 function defaultPrint(message) {
   process.stdout.write(`${message}
 `);
@@ -2758,7 +2781,7 @@ async function installOrUpdateRun(config, dir, options, print, update, flags2, m
       }
       const target = join7(dir, "payload");
       mkdirSync6(dir, { recursive: true });
-      rmSync6(target, { recursive: true, force: true });
+      rmSync7(target, { recursive: true, force: true });
       renameSync5(join7(candidateDir, "payload"), target);
       writeState(dir, { version, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
       installer.phase("download", { seconds: (Date.now() - started) / 1e3 });

package/dist/launcher.sea.cjs

@@ -650,6 +650,28 @@ async function recoverAcquisition(dir, run2, env) {
   else if ((0, import_node_fs5.existsSync)(statePath(dir))) (0, import_node_fs5.unlinkSync)(statePath(dir));
   (0, import_node_fs5.unlinkSync)(pendingPath(dir));
 }
+function reapCandidates(dir) {
+  const keep = readState(dir)?.acquired?.candidate;
+  if (!keep) return;
+  const base = (0, import_node_path4.join)(dir, "candidates");
+  let names;
+  try {
+    names = (0, import_node_fs5.readdirSync)(base);
+  } catch {
+    return;
+  }
+  for (const name of names) {
+    if (name === keep || !/^[a-zA-Z0-9_-]+$/.test(name)) continue;
+    try {
+      const path = (0, import_node_path4.join)(base, name);
+      const info = (0, import_node_fs5.lstatSync)(path);
+      if (!info.isDirectory() || info.isSymbolicLink()) continue;
+      (0, import_node_fs5.rmSync)(path, { recursive: true, force: true });
+    } catch (error) {
+      console.error(`launcher: could not remove old candidate ${name}: ${error.message}`);
+    }
+  }
+}
 async function installAcquisition(dir, candidate, version, acquisition, options) {
   if (!acquisition.platforms.includes(`${process.platform}-${process.arch}`)) throw new Error("this product does not support this platform");
   const root = candidateRoot(dir, candidate);
@@ -706,6 +728,7 @@ async function installAcquisition(dir, candidate, version, acquisition, options)
     throw error;
   }
   (0, import_node_fs5.unlinkSync)(pendingPath(dir));
+  reapCandidates(dir);
 }
 
 // src/index.ts
@@ -2269,7 +2292,7 @@ async function refreshLauncher(target, options = {}) {
 }
 
 // src/index.ts
-var LAUNCHER_VERSION = true ? "1.3.0" : readVersionFromPackage();
+var LAUNCHER_VERSION = true ? "1.3.1" : readVersionFromPackage();
 function defaultPrint(message) {
   process.stdout.write(`${message}
 `);

package/dist/refresh.js

@@ -1,12 +1,12 @@
 // src/refresh.ts
 import { execFile } from "node:child_process";
-import { accessSync, chmodSync, constants, existsSync as existsSync2, lstatSync, readdirSync, readFileSync as readFileSync2, realpathSync as realpathSync2, renameSync, rmSync, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { accessSync, chmodSync, constants, existsSync as existsSync2, lstatSync as lstatSync2, readdirSync as readdirSync2, readFileSync as readFileSync2, realpathSync as realpathSync2, renameSync, rmSync as rmSync2, statSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { homedir } from "node:os";
 import { basename, dirname as dirname2, join as join3, resolve as resolve2 } from "node:path";
 
 // src/acquisition.ts
 import { createHash as createHash2, randomUUID } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync, realpathSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync, realpathSync, readdirSync, lstatSync, rmSync } from "node:fs";
 import { join as join2, resolve, relative, isAbsolute, dirname } from "node:path";
 
 // src/download.ts
@@ -290,14 +290,14 @@ function removeStale(file) {
   const prefix = `${basename(file)}.old-`;
   let names;
   try {
-    names = readdirSync(dirname2(file));
+    names = readdirSync2(dirname2(file));
   } catch {
     return;
   }
   for (const name of names) {
     if (!name.startsWith(prefix)) continue;
     try {
-      rmSync(join3(dirname2(file), name), { force: true });
+      rmSync2(join3(dirname2(file), name), { force: true });
     } catch {
     }
   }
@@ -310,7 +310,7 @@ async function refreshLauncher(target, options = {}) {
   const productDir = options.productDir ?? defaultProductDir(target.product);
   const recorded = recordedPath(productDir);
   const file = options.path ?? (recorded && existsSync2(recorded) ? recorded : installedPath(target, productDir, platform));
-  if (!existsSync2(file) || lstatSync(file).isSymbolicLink()) return null;
+  if (!existsSync2(file) || lstatSync2(file).isSymbolicLink()) return null;
   if (!options.dryRun) removeStale(file);
   const from = await (options.readVersion ?? ((path) => runVersion(path, target.bin)))(file);
   if (!from) return null;
@@ -359,7 +359,7 @@ async function refreshLauncher(target, options = {}) {
         if (moved && !existsSync2(file)) renameSync(moved, file);
       } catch {
       }
-      rmSync(next, { force: true });
+      rmSync2(next, { force: true });
       return arm("fail", from, "The launcher could not be replaced.");
     }
     return arm("ok", record.version, "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/installer-launcher",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Single-executable (SEA) launcher: sign-in, gated payload fetch, self-update. One copy ships per product.",
   "type": "module",
   "license": "UNLICENSED",