@postman-cse/cse-toold 4.11.0 → 4.11.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postman-cse/cse-toold",
-  "version": "4.11.0",
+  "version": "4.11.3",
   "description": "CSE tools daemon: signed Node SEA launcher mediating MCP traffic for Claude/Codex/Droid; pure-JS cred store plus signed cse-se-unwrap helper own credential custody",
   "main": "src/index.js",
   "bin": {
@@ -22,9 +22,9 @@
     "bin/"
   ],
   "optionalDependencies": {
-    "@postman-cse/cse-toold-darwin-arm64": "4.11.0",
-    "@postman-cse/cse-toold-linux-arm64": "4.11.0",
-    "@postman-cse/cse-toold-linux-x64": "4.11.0",
-    "@postman-cse/cse-toold-win32-arm64": "4.11.0"
+    "@postman-cse/cse-toold-darwin-arm64": "4.11.3",
+    "@postman-cse/cse-toold-linux-arm64": "4.11.3",
+    "@postman-cse/cse-toold-linux-x64": "4.11.3",
+    "@postman-cse/cse-toold-win32-arm64": "4.11.3"
   }
 }

package/src/index.js

@@ -5,6 +5,10 @@ const fs = require('fs');
 const os = require('os');
 const child_process = require('child_process');
 
+/// Commands that must prefer the packaged platform launcher over a possibly
+/// stale stable install (install / session provisioning).
+const BUNDLED_FIRST_COMMANDS = new Set(['install', 'session-start-hook']);
+
 function platformPackageName() {
   return `@postman-cse/cse-toold-${process.platform}-${process.arch}`;
 }
@@ -28,7 +32,12 @@ function executableCandidate(candidate) {
   }
 }
 
-function resolveCoreBinary() {
+function preferBundledFirst(argv) {
+  const command = Array.isArray(argv) ? argv[0] : undefined;
+  return typeof command === 'string' && BUNDLED_FIRST_COMMANDS.has(command);
+}
+
+function resolveBundledBinary() {
   const platformKey = `${process.platform}-${process.arch}`;
   const supportedPlatforms = new Set([
     'darwin-arm64',
@@ -36,42 +45,43 @@ function resolveCoreBinary() {
     'linux-x64',
     'win32-arm64',
   ]);
+  if (!supportedPlatforms.has(platformKey)) return undefined;
   const binaryName = nativeBinaryName(process.platform);
-  const stable = executableCandidate(stableBinaryPath());
-  if (stable) return stable;
-
-  if (supportedPlatforms.has(platformKey)) {
-    try {
-      const pkgJson = require.resolve(`${platformPackageName()}/package.json`);
-      const candidate = path.join(path.dirname(pkgJson), 'bin', binaryName);
-      if (fs.existsSync(candidate)) {
-        try {
-          fs.accessSync(candidate, fs.constants.X_OK);
-          return candidate;
-        } catch (_) {
-          throw new Error('native runtime is not executable');
-        }
-      }
-    } catch (e) {
-      if (e.message === 'native runtime is not executable') throw e;
-    }
+  try {
+    const pkgJson = require.resolve(`${platformPackageName()}/package.json`);
+    const candidate = path.join(path.dirname(pkgJson), 'bin', binaryName);
+    return executableCandidate(candidate);
+  } catch (e) {
+    if (e.message === 'native runtime is not executable') throw e;
+    return undefined;
   }
+}
 
+function resolveVendorBinary() {
+  const binaryName = nativeBinaryName(process.platform);
   const vendorCandidate = path.resolve(__dirname, '..', 'vendor', binaryName);
-  if (fs.existsSync(vendorCandidate)) {
-    try {
-      fs.accessSync(vendorCandidate, fs.constants.X_OK);
-      return vendorCandidate;
-    } catch (_) {
-      throw new Error('native runtime is not executable');
-    }
-  }
+  return executableCandidate(vendorCandidate);
+}
 
+/// Resolve the native launcher. Ordinary commands keep stable-first resolution;
+/// `install` and `session-start-hook` prefer the packaged platform binary so a
+/// stale LaunchAgent install can still activate a newer bundled release.
+function resolveCoreBinary(argv) {
+  const platformKey = `${process.platform}-${process.arch}`;
+  const bundled = resolveBundledBinary();
+  const stable = executableCandidate(stableBinaryPath());
+  const order = preferBundledFirst(argv) ? [bundled, stable] : [stable, bundled];
+  for (const candidate of order) {
+    if (candidate) return candidate;
+  }
+  const vendor = resolveVendorBinary();
+  if (vendor) return vendor;
   throw new Error(`native runtime is unavailable for this platform: ${platformKey}`);
 }
 
 function spawnRaw(args, options) {
-  return child_process.spawnSync(resolveCoreBinary(), args || [], {
+  const argv = args || [];
+  return child_process.spawnSync(resolveCoreBinary(argv), argv, {
     stdio: 'inherit',
     ...(options || {}),
   });