@myapihq/cli 1.0.73 → 1.0.74

package/dist/commands/update.js

@@ -4,21 +4,44 @@ import { loadConfig } from '../config.js';
 import { info, success } from '../output.js';
 import { installSkills } from './setup.js';
 const REGISTRY_URL = 'https://registry.npmjs.org/@myapihq/cli/latest';
+const PACKUMENT_URL = 'https://registry.npmjs.org/@myapihq/cli';
+// Verify the version is listed in the full packument — the same data source
+// `npm install` consults. The /latest endpoint and the tarball URL are on
+// different CDN caches and can update before the packument does, causing
+// `npm install` to fail with ETARGET. This check eliminates that race.
+async function isVersionInstallable(version) {
+    try {
+        const res = await fetch(PACKUMENT_URL, {
+            headers: { Accept: 'application/vnd.npm.install-v1+json' },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!res.ok)
+            return false;
+        const data = await res.json();
+        return Boolean(data.versions && data.versions[version]);
+    }
+    catch {
+        return false;
+    }
+}
 // Resolve the npm binary and global prefix to use for self-update.
 // We install to the same prefix where the current myapi binary lives,
 // so the update actually replaces the running binary.
+// `--prefer-online` forces npm to revalidate its local packument cache
+// against the registry — without it, a stale local cache can also produce
+// ETARGET even when the registry itself has the version.
 function npmInstallArgs(version) {
     const npmCandidate = process.execPath.replace(/[/\\]node(\.exe)?$/, '/npm');
     const bin = existsSync(npmCandidate) ? npmCandidate : 'npm';
-    // Find where the currently-running myapi binary is, derive its npm prefix.
+    const baseArgs = ['install', '-g', '--prefer-online', `@myapihq/cli@${version}`];
     try {
-        const self = process.argv[1]; // e.g. /usr/local/bin/myapi or ~/.nvm/.../bin/myapi
-        const binDir = self.replace(/[/\\][^/\\]+$/, ''); // strip the filename
-        const prefix = binDir.replace(/[/\\]bin$/, ''); // strip /bin
-        return { bin, args: ['install', '-g', '--prefix', prefix, `@myapihq/cli@${version}`] };
+        const self = process.argv[1];
+        const binDir = self.replace(/[/\\][^/\\]+$/, '');
+        const prefix = binDir.replace(/[/\\]bin$/, '');
+        return { bin, args: ['install', '-g', '--prefer-online', '--prefix', prefix, `@myapihq/cli@${version}`] };
     }
     catch {
-        return { bin, args: ['install', '-g', `@myapihq/cli@${version}`] };
+        return { bin, args: baseArgs };
     }
 }
 // checkForUpdate runs silently in the background on every command.
@@ -31,17 +54,11 @@ export async function checkForUpdate(currentVersion) {
         const data = await res.json();
         const latest = data.version;
         if (latest && isNewer(latest, currentVersion)) {
-            // Verify the tarball is actually available before attempting install —
-            // the registry metadata can report a new version before the tarball is uploaded.
-            const tarballUrl = `https://registry.npmjs.org/@myapihq/cli/-/cli-${latest}.tgz`;
-            try {
-                const check = await fetch(tarballUrl, { method: 'HEAD', signal: AbortSignal.timeout(3000) });
-                if (!check.ok)
-                    return; // Tarball not ready yet — silently skip, retry next command.
-            }
-            catch {
+            // Verify the version is actually installable before attempting install —
+            // the /latest endpoint can report a new version before the packument
+            // (which `npm install` consults) has propagated through the CDN.
+            if (!(await isVersionInstallable(latest)))
                 return;
-            }
             info(`\n› New version available (${currentVersion} → ${latest}) — installing…`);
             try {
                 const { bin, args } = npmInstallArgs(latest);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myapihq/cli",
-  "version": "1.0.73",
+  "version": "1.0.74",
   "description": "MyAPI command-line interface",
   "type": "module",
   "files": [