@sigmashake/ssg 0.29.100 → 0.29.101

package/bin/ssg.cjs

@@ -16,29 +16,39 @@ let binaryPath;
 // This is checked first so a freshly-installed platform binary always wins over
 // any stale root-level binary that may have survived from a manual build.
 //
-// Resolve from the global root explicitly so a freshly-installed top-level
-// @sigmashake/ssg-<platform>-<arch> wins over a stale nested copy under
-// @sigmashake/ssg/node_modules/. Without { paths: [...] }, Node's default
-// resolution walks UP from this script and picks the nested copy first —
-// which is whatever the published coordinator's optionalDependencies pinned
-// at publish time. If a promote-main race shipped main with stale platform
-// pins (see 0.29.99 postmortem in promote-main.sh), ssg update can recover
-// by installing the platform pkg directly at the global root; this path
-// option ensures the launcher actually picks it up.
+// Resolution order:
+//   a) global root (e.g. /usr/local/lib/node_modules) — lets `npm i -g
+//      @sigmashake/ssg-<plat>-<arch>@latest` install at the top level and
+//      override a stale nested platform pkg. Recovery path for promote-main
+//      races (see 0.29.99 / 0.29.100 postmortems) where the coordinator's
+//      optionalDependencies pin an older platform version than what's on npm.
+//   b) default (walks UP from __dirname) — finds the nested copy at
+//      @sigmashake/ssg/node_modules/@sigmashake/ssg-<plat>-<arch>. Required
+//      because npm does NOT always hoist optionalDependencies of a globally
+//      installed pkg; if (a) misses we MUST find the nested copy or the
+//      launcher falls through to step 4 and errors on the missing src/cli.ts.
 let hookBinPath;
 let evalServerBinPath;
-try {
+{
 	const globalRoot = path.resolve(__dirname, "..", "..", "..");
-	const pkgRoot = path.dirname(
-		require.resolve(`${platformPkg}/package.json`, { paths: [globalRoot] }),
-	);
-	const candidate = path.join(pkgRoot, "bin", `ssg${ext}`);
-	if (fs.existsSync(candidate)) binaryPath = candidate;
-	const hookCandidate = path.join(pkgRoot, "bin", `ssg-hook-fast${ext}`);
-	if (fs.existsSync(hookCandidate)) hookBinPath = hookCandidate;
-	const sidecarCandidate = path.join(pkgRoot, "bin", `ssg-eval-server${ext}`);
-	if (fs.existsSync(sidecarCandidate)) evalServerBinPath = sidecarCandidate;
-} catch {}
+	let pkgRoot;
+	for (const opts of [{ paths: [globalRoot] }, undefined]) {
+		try {
+			pkgRoot = path.dirname(
+				require.resolve(`${platformPkg}/package.json`, opts),
+			);
+			break;
+		} catch {}
+	}
+	if (pkgRoot) {
+		const candidate = path.join(pkgRoot, "bin", `ssg${ext}`);
+		if (fs.existsSync(candidate)) binaryPath = candidate;
+		const hookCandidate = path.join(pkgRoot, "bin", `ssg-hook-fast${ext}`);
+		if (fs.existsSync(hookCandidate)) hookBinPath = hookCandidate;
+		const sidecarCandidate = path.join(pkgRoot, "bin", `ssg-eval-server${ext}`);
+		if (fs.existsSync(sidecarCandidate)) evalServerBinPath = sidecarCandidate;
+	}
+}
 
 // 2. Check if binary was bundled in the root (dev: local npm pack or manual build)
 if (!binaryPath) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sigmashake/ssg",
-  "version": "0.29.100",
+  "version": "0.29.101",
   "description": "AI Agent Governance CLI — evaluate tool calls against rules, block dangerous operations, and surface blocked commands",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -16,8 +16,8 @@
   "optionalDependencies": {
     "@sigmashake/ssg-linux-x64": "0.29.100",
     "@sigmashake/ssg-linux-arm64": "0.29.100",
-    "@sigmashake/ssg-darwin-arm64": "0.29.98",
-    "@sigmashake/ssg-darwin-x64": "0.29.98",
+    "@sigmashake/ssg-darwin-arm64": "0.29.101",
+    "@sigmashake/ssg-darwin-x64": "0.29.101",
     "@sigmashake/ssg-win32-x64": "0.29.99"
   },
   "scripts": {