@tasksai/install 0.1.5 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tasksai/install",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Shared TasksAI MCP installer CLI",
   "type": "module",
   "bin": {

package/src/index.js

@@ -9,7 +9,7 @@ import readline from "node:readline/promises";
 import { spawnSync } from "node:child_process";
 import { stdin as input, stdout as output } from "node:process";
 
-const INSTALLER_VERSION = "0.1.5";
+const INSTALLER_VERSION = "0.1.7";
 const DEFAULT_SOURCES = {
   lawtasksai: "https://github.com/laudoluxDev/lawtasksai-mcp",
   farmer: "https://github.com/laudoluxDev/farmertasksai-mcp",
@@ -477,7 +477,7 @@ function formatPermissionRecovery({ operation, failures, options, vertical, sour
 }
 
 function buildInstallCommand({ options, source }) {
-  const parts = ["npx", "@tasksai/install", options.productId];
+  const parts = ["npm", "exec", "--package=@tasksai/install", "--", "tasksai-install", options.productId];
   const sourceUrl = source?.repoUrl || options.source;
   if (sourceUrl) parts.push("--source", sourceUrl);
   if (options.client) parts.push("--client", options.client);
@@ -486,7 +486,7 @@ function buildInstallCommand({ options, source }) {
 }
 
 function buildDoctorCommand(options) {
-  const parts = ["npx", "@tasksai/install", options.productId, "doctor"];
+  const parts = ["npm", "exec", "--package=@tasksai/install", "--", "tasksai-install", options.productId, "doctor"];
   if (options.client) parts.push("--client", options.client);
   if (options.installDir) parts.push("--install-dir", resolveUserPath(options.installDir));
   return parts.map(shellToken).join(" ");
@@ -663,15 +663,18 @@ function verifySource({ options, source, manifest, vertical }) {
   if (!manifest.official_domain || !vertical.website_url?.includes(manifest.official_domain)) {
     throw new Error("Manifest official domain does not match vertical website URL.");
   }
-  const npxInstaller = getNpxInstaller(manifest);
-  const command = npxInstaller?.command;
-  const args = npxInstaller?.args || [];
-  if (command !== "npx" || !Array.isArray(args) || args[0] !== "@tasksai/install") {
-    throw new Error("Manifest installer command is not the approved @tasksai/install npx command.");
+  const installer = getInstaller(manifest);
+  const command = installer?.command;
+  const args = installer?.args || [];
+  const isLegacyNpx = command === "npx" && Array.isArray(args) && args[0] === "@tasksai/install";
+  const isNpmExec = command === "npm" && Array.isArray(args) && args.includes("--package=@tasksai/install") && args.includes("tasksai-install");
+  if (!isLegacyNpx && !isNpmExec) {
+    throw new Error("Manifest installer command is not an approved @tasksai/install command.");
   }
 }
 
-function getNpxInstaller(manifest) {
+function getInstaller(manifest) {
+  if (manifest.installer?.npm_exec) return manifest.installer.npm_exec;
   if (manifest.installer?.npx) return manifest.installer.npx;
   return manifest.installer;
 }