@standardagents/code 0.14.3-canary.6cc75f → 0.14.5-branch.9e48e914.ded17d

package/lib/artifact.mjs

@@ -26,6 +26,9 @@ export const BUNDLE_ARTIFACT_FILES = Object.freeze([
   'licenses/THIRD-PARTY.txt',
 ])
 
+// The Node plugin runner that native releases from before plugin runtime v2
+// bundled. Builds no longer produce it; installed launchers keep verifying
+// the releases that carry it, which carry either all of these files or none.
 export const RUNNER_ASSET_NAMES = Object.freeze([
   'index.mjs', 'worker.mjs', 'loader.mjs', 'sdk.mjs', 'runtime.json', 'THIRD-PARTY.txt',
 ])
@@ -129,8 +132,9 @@ export const WEB_ARTIFACT_OPTIONAL_FILES = Object.freeze([
 export const WEB_ARTIFACT_DIRECTORIES = Object.freeze({ fonts: /\.ttf$/, licenses: /\.txt$/ })
 export const WEB_ARTIFACT_FILE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/
 // The sample plugins' browser artifacts (packages/web/scripts/build-plugins.mjs),
-// optional: the Worker runtime and index at plugins/, and one directory per
-// plugin id holding its manifest, component, transpiled glue and core modules.
+// optional: the Worker runtime and index at plugins/, the reference glue at
+// plugins/host/, jco's transpiler at plugins/jco/, and one directory per
+// sample plugin id holding its manifest, component and world core module.
 export const WEB_ARTIFACT_PLUGIN_FILES = Object.freeze([
   'plugins/worker.js', 'plugins/runtime.js', 'plugins/samples.json',
 ])

package/lib/launcher.mjs

@@ -6,7 +6,7 @@ import process from 'node:process'
 
 import { platformPackage } from './platform.mjs'
 import { artifactBinaryPath, requireCompatibleGlibc, verifyNativeArtifact } from './artifact.mjs'
-import { artifactPointer, installNativeArtifact, installedArtifact, nativeDirectory, packageMetadata } from './install.mjs'
+import { artifactPointer, installNativeArtifact, installedArtifact, packageMetadata } from './install.mjs'
 
 const require = createRequire(import.meta.url)
 const COMMANDS = new Set(['standard', 'standardd'])
@@ -60,6 +60,17 @@ export function stableBinary(command, options = {}) {
   }
 }
 
+// The executable this npm package itself carries, never the daemon's
+// native-releases slot behind the stable link. Postinstall marks only this
+// one executable: a slot's files are verified as release state, and a chmod
+// through the stable link would loosen the running release's executables.
+export function packagedBinary(command, options = {}) {
+  if (!COMMANDS.has(command)) {
+    throw new Error(`Unknown Standard executable: ${command}`)
+  }
+  return resolvePackagedBinary(command, options)
+}
+
 function resolvePackagedBinary(command, options) {
   const platform = platformPackage(
     options.platform,
@@ -99,9 +110,8 @@ export function spawnBinary(command, args, options = {}) {
 }
 
 // Install this platform's signed R2 archive when the package names one and
-// has no binaries installed yet. The package has no install script, so npm
-// and pnpm install it without an allow-scripts prompt, and the first launch
-// downloads and verifies the native build here (#684).
+// has no binaries installed yet. Package managers that skip install scripts
+// (pnpm by default) reach this on the first launch instead of postinstall.
 export async function ensureNativeBinaries(options = {}) {
   if (options.environment?.STANDARD_CODE_BINARY_DIR ?? process.env.STANDARD_CODE_BINARY_DIR) return
   const platform = platformPackage(options.platform, options.architecture, options.report)
@@ -114,20 +124,7 @@ export async function ensureNativeBinaries(options = {}) {
   } catch {
     // No npm platform package: download the archive.
   }
-  const log = options.log ?? (message => console.error(message))
-  log(`standard: installing the native build for ${platform.rustTarget} (first launch)`)
-  try {
-    await installNativeArtifact({ target: platform.rustTarget, root: options.packageRoot, fetchImplementation: options.fetchImplementation })
-  } catch (error) {
-    if (error?.code === 'EACCES' || error?.code === 'EPERM') {
-      throw new Error(
-        `cannot write the native build under ${nativeDirectory(platform.rustTarget, options.packageRoot)}. `
-        + 'The package belongs to another user (for example an npm install run with sudo); '
-        + 'reinstall @standardagents/code with an npm prefix you own.',
-      )
-    }
-    throw error
-  }
+  await installNativeArtifact({ target: platform.rustTarget, root: options.packageRoot, fetchImplementation: options.fetchImplementation })
 }
 
 export async function main(command) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@standardagents/code",
-  "version": "0.14.3-canary.6cc75f",
+  "version": "0.14.5-branch.9e48e914.ded17d",
   "description": "Platform launcher for the Standard universal terminal network.",
   "type": "module",
   "license": "UNLICENSED",
@@ -21,20 +21,24 @@
   },
   "files": [
     "bin",
-    "lib"
+    "lib",
+    "postinstall.mjs"
   ],
+  "scripts": {
+    "postinstall": "node postinstall.mjs"
+  },
   "standardArtifacts": {
     "schema": 1,
     "targets": {
       "aarch64-apple-darwin": {
-        "url": "https://builds.standardcode.ai/artifacts/0.14.3-canary.6cc75f/aarch64-apple-darwin.tar.gz",
-        "sha256": "45f9458727aae1a6ed80dad7f8bff778d271a56b5148e3cdc9fceb22fafa2410",
-        "size": 22931785
+        "url": "https://builds.standardcode.ai/artifacts/0.14.5-branch.9e48e914.ded17d/aarch64-apple-darwin.tar.gz",
+        "sha256": "97319a7ce9afb9ee725dfabeb4f5ad3ab447f6fae4d6c5f34d3569e6980c915c",
+        "size": 26202924
       },
       "x86_64-unknown-linux-gnu": {
-        "url": "https://builds.standardcode.ai/artifacts/0.14.3-canary.6cc75f/x86_64-unknown-linux-gnu.tar.gz",
-        "sha256": "ef44b1a6a2c3623143f2dcb0505b56cce65d8649d21441cfe4373ed59bf5f6de",
-        "size": 28560078
+        "url": "https://builds.standardcode.ai/artifacts/0.14.5-branch.9e48e914.ded17d/x86_64-unknown-linux-gnu.tar.gz",
+        "sha256": "696e7c000df3fda3092c8d1dbcb7a1a85f61f541ccd5cc3e3cfd380b66ca83c3",
+        "size": 35029154
       }
     }
   },