@myapihq/cli 1.0.72 → 1.0.74

package/dist/commands/update.js

@@ -1,11 +1,48 @@
 import { execSync } from 'child_process';
+import { existsSync } from 'fs';
 import { loadConfig } from '../config.js';
 import { info, success } from '../output.js';
 import { installSkills } from './setup.js';
 const REGISTRY_URL = 'https://registry.npmjs.org/@myapihq/cli/latest';
-// Use the npm binary next to the active node — critical for nvm users.
-function npmBin() {
-    return process.execPath.replace(/[/\\]node$/, '/npm');
+const PACKUMENT_URL = 'https://registry.npmjs.org/@myapihq/cli';
+// Verify the version is listed in the full packument — the same data source
+// `npm install` consults. The /latest endpoint and the tarball URL are on
+// different CDN caches and can update before the packument does, causing
+// `npm install` to fail with ETARGET. This check eliminates that race.
+async function isVersionInstallable(version) {
+    try {
+        const res = await fetch(PACKUMENT_URL, {
+            headers: { Accept: 'application/vnd.npm.install-v1+json' },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok)
+            return false;
+        const data = await res.json();
+        return Boolean(data.versions && data.versions[version]);
+    }
+    catch {
+        return false;
+    }
+}
+// Resolve the npm binary and global prefix to use for self-update.
+// We install to the same prefix where the current myapi binary lives,
+// so the update actually replaces the running binary.
+// `--prefer-online` forces npm to revalidate its local packument cache
+// against the registry — without it, a stale local cache can also produce
+// ETARGET even when the registry itself has the version.
+function npmInstallArgs(version) {
+    const npmCandidate = process.execPath.replace(/[/\\]node(\.exe)?$/, '/npm');
+    const bin = existsSync(npmCandidate) ? npmCandidate : 'npm';
+    const baseArgs = ['install', '-g', '--prefer-online', `@myapihq/cli@${version}`];
+    try {
+        const self = process.argv[1];
+        const binDir = self.replace(/[/\\][^/\\]+$/, '');
+        const prefix = binDir.replace(/[/\\]bin$/, '');
+        return { bin, args: ['install', '-g', '--prefer-online', '--prefix', prefix, `@myapihq/cli@${version}`] };
+    }
+    catch {
+        return { bin, args: baseArgs };
+    }
 }
 // checkForUpdate runs silently in the background on every command.
 // Auto-installs if a newer version is available.
@@ -17,20 +54,15 @@ export async function checkForUpdate(currentVersion) {
         const data = await res.json();
         const latest = data.version;
         if (latest && isNewer(latest, currentVersion)) {
-            // Verify the tarball is actually available before attempting install —
-            // the registry metadata can report a new version before the tarball is uploaded.
-            const tarballUrl = `https://registry.npmjs.org/@myapihq/cli/-/cli-${latest}.tgz`;
-            try {
-                const check = await fetch(tarballUrl, { method: 'HEAD', signal: AbortSignal.timeout(3000) });
-                if (!check.ok)
-                    return; // Tarball not ready yet — silently skip, retry next command.
-            }
-            catch {
+            // Verify the version is actually installable before attempting install —
+            // the /latest endpoint can report a new version before the packument
+            // (which `npm install` consults) has propagated through the CDN.
+            if (!(await isVersionInstallable(latest)))
                 return;
-            }
             info(`\n› New version available (${currentVersion} → ${latest}) — installing…`);
             try {
-                execSync(`"${npmBin()}" install -g @myapihq/cli@${latest}`, { stdio: 'pipe' });
+                const { bin, args } = npmInstallArgs(latest);
+                execSync(`"${bin}" ${args.map(a => `"${a}"`).join(' ')}`, { stdio: 'pipe' });
                 const config = loadConfig();
                 if (config?.skills_installed) {
                     await installSkills();
@@ -67,8 +99,9 @@ export async function update(flags = {}) {
     }
     catch { /* proceed anyway */ }
     try {
-        const pkg = latest ? `@myapihq/cli@${latest}` : '@myapihq/cli@latest';
-        execSync(`"${npmBin()}" install -g ${pkg}`, { stdio: 'inherit' });
+        const ver = latest || 'latest';
+        const { bin, args } = npmInstallArgs(ver);
+        execSync(`"${bin}" ${args.map((a) => `"${a}"`).join(' ')}`, { stdio: 'inherit' });
     }
     catch {
         process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myapihq/cli",
-  "version": "1.0.72",
+  "version": "1.0.74",
   "description": "MyAPI command-line interface",
   "type": "module",
   "files": [