@pugi/cli 1.0.0-alpha.252 → 1.0.0-alpha.254

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pugi/cli",
-  "version": "1.0.0-alpha.252",
-  "description": "Pugi CLI - terminal-native software execution system",
+  "version": "1.0.0-alpha.254",
+  "description": "Pugi CLI: an AI product team in your terminal that plans, builds, tests, security-checks and publishes from a plain-language brief",
   "license": "MIT",
   "homepage": "https://pugi.io",
   "repository": {
@@ -12,9 +12,13 @@
     "pugi",
     "cli",
     "ai",
-    "agents",
-    "engineering",
-    "orchestrator"
+    "ai-agents",
+    "coding-agent",
+    "website-builder",
+    "app-builder",
+    "security",
+    "mcp",
+    "terminal"
   ],
   "bin": {
     "pugi": "./bin/pugi"
@@ -42,12 +46,12 @@
     "THIRD_PARTY_NOTICES.md"
   ],
   "optionalDependencies": {
-    "@pugi/cli-darwin-arm64": "1.0.0-alpha.252",
-    "@pugi/cli-darwin-x64": "1.0.0-alpha.252",
-    "@pugi/cli-linux-arm64": "1.0.0-alpha.252",
-    "@pugi/cli-linux-x64": "1.0.0-alpha.252",
-    "@pugi/cli-windows-arm64": "1.0.0-alpha.252",
-    "@pugi/cli-windows-x64": "1.0.0-alpha.252"
+    "@pugi/cli-darwin-arm64": "1.0.0-alpha.254",
+    "@pugi/cli-darwin-x64": "1.0.0-alpha.254",
+    "@pugi/cli-linux-arm64": "1.0.0-alpha.254",
+    "@pugi/cli-linux-x64": "1.0.0-alpha.254",
+    "@pugi/cli-windows-arm64": "1.0.0-alpha.254",
+    "@pugi/cli-windows-x64": "1.0.0-alpha.254"
   },
-  "gitHead": "8467c4bd932458b0d5de884d3a616ee49467756c"
+  "gitHead": "8d53bb12da5629b20b4cd4cd4e25a59afb762dd9"
 }

package/postinstall.mjs

@@ -1,31 +1,166 @@
 #!/usr/bin/env node
+// Postinstall of the @pugi/cli npm package (PUG-44). `bin/pugi` ships as a Node
+// launcher (launcher.cjs) that works wherever Node is installed. This script
+// swaps it for the native binary where that is safe: on POSIX under npm or bun,
+// whose global bin link is a symlink that stays valid when its target becomes a
+// native binary. That also spares a bun user without Node the launcher's
+// `#!/usr/bin/env node` (review on #363). Elsewhere (Windows, where npm's shims
+// run the launcher with node; pnpm, whose shim fixes the interpreter from the
+// shebang; an unknown or missing user agent, e.g. this script run by hand) it
+// leaves the launcher alone.
+//
+// It never fails the install: the launcher already works without it. Until the
+// final rename succeeds, `bin/pugi` is the original launcher.
+import childProcess from "child_process"
 import fs from "fs"
 import os from "os"
 import path from "path"
 import { createRequire } from "module"
 import { fileURLToPath } from "url"
 
-const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const require = createRequire(import.meta.url)
-
-const platformMap = { darwin: "darwin", linux: "linux", win32: "windows" }
-const archMap = { x64: "x64", arm64: "arm64", arm: "arm" }
-const platform = platformMap[os.platform()] ?? os.platform()
-const arch = archMap[os.arch()] ?? os.arch()
-const sourceBinary = platform === "windows" ? "pugi.exe" : "pugi"
-const targetBinary = path.join(__dirname, "bin", "pugi")
-
-const pkgName = `@pugi/cli-${platform}-${arch}`
-
-try {
-  const pkgJsonPath = require.resolve(`${pkgName}/package.json`)
-  const binary = path.join(path.dirname(pkgJsonPath), "bin", sourceBinary)
-  if (!fs.existsSync(binary)) throw new Error(`Binary not found: ${binary}`)
-  if (fs.existsSync(targetBinary)) fs.unlinkSync(targetBinary)
-  try { fs.linkSync(binary, targetBinary) } catch { fs.copyFileSync(binary, targetBinary) }
-  fs.chmodSync(targetBinary, 0o755)
-} catch (err) {
-  console.error(`@pugi/cli: unable to install native binary for ${platform}-${arch}: ${err.message}`)
-  console.error(`Try installing manually: npm install -g ${pkgName}@${require("./package.json").version}`)
-  process.exit(1)
+const PLATFORMS = { darwin: "darwin", linux: "linux", win32: "windows" }
+const ARCHES = { x64: "x64", arm64: "arm64" }
+const VERIFY_TIMEOUT_MS = 20_000
+
+export function shouldReplaceLauncher({ platform, userAgent }) {
+  return platform !== "win32" && typeof userAgent === "string" && /^(npm|bun)\//.test(userAgent)
+}
+
+/**
+ * The env for the `--version` check. The engine creates its XDG directories
+ * and `<tmpdir>/pugi` as soon as it loads (core/src/global.ts), before it reads
+ * its arguments. Under `sudo npm i -g` with HOME kept (the macOS default) they
+ * would be created as root in the user's home and /tmp, and the user's own
+ * `pugi` would later fail with EACCES (review on #363). So the check runs with
+ * all of them inside a throwaway directory.
+ */
+export function sandboxEnv(dir, env = process.env) {
+  return {
+    ...env,
+    HOME: dir,
+    USERPROFILE: dir,
+    XDG_CONFIG_HOME: path.join(dir, "config"),
+    XDG_DATA_HOME: path.join(dir, "data"),
+    XDG_CACHE_HOME: path.join(dir, "cache"),
+    XDG_STATE_HOME: path.join(dir, "state"),
+    TMPDIR: path.join(dir, "tmp"),
+  }
+}
+
+/**
+ * Put `source` in place of `binDir/pugi` atomically: prepare a temp file beside
+ * it, check that it runs, then rename it over the launcher. Returns the step
+ * that failed, or ok. On failure the launcher is untouched and the temp file is
+ * removed.
+ */
+export function replaceLauncher({ binDir, source, pid = process.pid, fsApi = fs, spawnSync = childProcess.spawnSync }) {
+  const target = path.join(binDir, "pugi")
+  const tmp = path.join(binDir, `.pugi-native-${pid}.tmp`)
+  const cleanup = () => {
+    try {
+      fsApi.rmSync(tmp, { force: true })
+    } catch {
+      // Nothing more to do; the launcher is still in place.
+    }
+  }
+
+  try {
+    fsApi.rmSync(tmp, { force: true })
+    try {
+      fsApi.linkSync(source, tmp)
+    } catch {
+      fsApi.copyFileSync(source, tmp)
+    }
+    fsApi.chmodSync(tmp, 0o755)
+  } catch (error) {
+    cleanup()
+    return { ok: false, step: "prepare", error }
+  }
+
+  const removeDir = (dir) => {
+    try {
+      fsApi.rmSync(dir, { recursive: true, force: true })
+    } catch {
+      // A leftover directory under the system temp dir is harmless.
+    }
+  }
+  const sandbox = (() => {
+    const dir = (() => {
+      try {
+        return fsApi.mkdtempSync(path.join(os.tmpdir(), "pugi-postinstall-"))
+      } catch {
+        return undefined
+      }
+    })()
+    if (!dir) return undefined
+    try {
+      fsApi.mkdirSync(path.join(dir, "tmp"))
+      return dir
+    } catch {
+      // Created but unusable: remove it too (Codex review, round 3).
+      removeDir(dir)
+      return undefined
+    }
+  })()
+  if (!sandbox) {
+    cleanup()
+    return { ok: false, step: "verify" }
+  }
+  const check = spawnSync(tmp, ["--version"], {
+    stdio: "ignore",
+    timeout: VERIFY_TIMEOUT_MS,
+    killSignal: "SIGKILL",
+    env: sandboxEnv(sandbox),
+  })
+  removeDir(sandbox)
+  if (check.error || check.status !== 0) {
+    cleanup()
+    return { ok: false, step: "verify", error: check.error }
+  }
+
+  try {
+    fsApi.renameSync(tmp, target)
+  } catch (error) {
+    cleanup()
+    return { ok: false, step: "rename", error }
+  }
+  // When the target is already a hard link to the same file (a second run,
+  // e.g. `npm rebuild`), POSIX rename succeeds without moving anything and
+  // leaves the temp name behind (Codex review F2).
+  cleanup()
+  return { ok: true }
+}
+
+function main() {
+  if (!shouldReplaceLauncher({ platform: process.platform, userAgent: process.env.npm_config_user_agent })) return
+  const here = path.dirname(fileURLToPath(import.meta.url))
+  const require = createRequire(import.meta.url)
+  const name = `@pugi/cli-${PLATFORMS[process.platform] || process.platform}-${ARCHES[process.arch] || process.arch}`
+  const source = (() => {
+    try {
+      return path.join(path.dirname(require.resolve(`${name}/package.json`)), "bin", "pugi")
+    } catch {
+      return undefined
+    }
+  })()
+  if (!source) {
+    console.warn(`@pugi/cli: ${name} is not installed; pugi will report it when it starts.`)
+    return
+  }
+  const result = replaceLauncher({ binDir: path.join(here, "bin"), source })
+  if (!result.ok) {
+    const reason = result.error && result.error.message ? `: ${result.error.message}` : ""
+    console.warn(`@pugi/cli: kept the Node launcher (the native binary failed at "${result.step}"${reason}). pugi still works.`)
+  }
+}
+
+// Run only as the lifecycle script, not when a test imports this module. Real
+// paths, because a package manager may start it through a symlink.
+const realpath = (file) => {
+  try {
+    return fs.realpathSync(file)
+  } catch {
+    return undefined
+  }
 }
+if (process.argv[1] && realpath(process.argv[1]) === realpath(fileURLToPath(import.meta.url))) main()

package/release.json

@@ -1,8 +1,8 @@
 {
-  "version": "1.0.0-alpha.252",
+  "version": "1.0.0-alpha.254",
   "channel": "latest",
-  "coreCommit": "8467c4bd932458b0d5de884d3a616ee49467756c",
-  "sandboxCommit": "1394afad1891404435ea06a67736ccde68e63f32",
-  "consoleCommit": "1a471076ead12717f2d4695186da392cadffd9c2",
-  "consoleWebVersion": "1.14.46"
+  "coreCommit": "8d53bb12da5629b20b4cd4cd4e25a59afb762dd9",
+  "sandboxCommit": "f0aefee3583ea1ce1e0ed2294eb7dfa4695023e2",
+  "consoleCommit": "4fb73cff00fc758549d8e5cd421bdace8eef0f15",
+  "consoleWebVersion": "1.14.48"
 }