@testrigor/testrigor-cli 2.0.1 → 2.0.2

package/appium-server/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "testrigor-cli-appium-server",
+  "private": true,
+  "description": "Appium server installed by the testRigor CLI on the first mobile run. See src/util/appium.ts.",
+  "dependencies": {
+    "appium": "3.8.0"
+  },
+  "overrides": {
+    "shell-quote": "^1.12.0"
+  }
+}

package/bin/dev

@@ -1,7 +1,5 @@
 #!/usr/bin/env node
 
-const oclif = require('@oclif/core')
-
 const path = require('path')
 const project = path.join(__dirname, '..', 'tsconfig.json')
 
@@ -10,9 +8,5 @@ process.env.NODE_ENV = 'development'
 
 require('ts-node').register({project})
 
-// In dev mode, always show stack traces
-oclif.settings.debug = true;
-
-
-// Start the CLI
-oclif.run().then(oclif.flush).catch(oclif.Errors.handle)
+// development: true shows stack traces and loads commands from src/
+require('@oclif/core').execute({development: true, dir: __dirname})

package/bin/run

@@ -1,5 +1,3 @@
 #!/usr/bin/env node
 
-const oclif = require('@oclif/core')
-
-oclif.run().then(require('@oclif/core/flush')).catch(require('@oclif/core/handle'))
+require('@oclif/core').execute({dir: __dirname})

package/dist/command-base.d.ts

@@ -4,10 +4,10 @@ export type CommandFlags<T extends typeof Command> = Interfaces.InferredFlags<(t
 export type Args<T extends typeof Command> = Interfaces.InferredArgs<T["args"]>;
 export declare abstract class CommandBase<T extends typeof Command> extends Command {
     static baseFlags: {
-        "auth-token": Interfaces.OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        token: Interfaces.OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "min-port": Interfaces.OptionFlag<number, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "max-port": Interfaces.OptionFlag<number, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        "auth-token": Interfaces.OptionFlag<string | undefined, Interfaces.CustomOptions>;
+        token: Interfaces.OptionFlag<string | undefined, Interfaces.CustomOptions>;
+        "min-port": Interfaces.OptionFlag<number, Interfaces.CustomOptions>;
+        "max-port": Interfaces.OptionFlag<number, Interfaces.CustomOptions>;
         verbose: Interfaces.BooleanFlag<boolean>;
     };
     protected flags: CommandFlags<T>;

package/dist/commands/authenticate.d.ts

@@ -3,17 +3,15 @@ export default class Authenticate extends Command {
     static description: string;
     static examples: string[];
     static flags: {
-        token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        token: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
     /**
      * Where the token comes from, in order: the --token flag, an interactive
      * hidden prompt, or piped stdin.
      *
-     * The hidden prompt is only usable on a TTY. Without one, @oclif/core falls
-     * back to `sh -c 'read -s ...'`, which fails on any system where /bin/sh is
-     * dash (the Debian and Ubuntu default) with "read: Illegal option -s" and
-     * then silently skips the setup.
+     * The hidden prompt is only usable on a TTY: without one there is nothing
+     * to read keystrokes from, so piped stdin is tried instead.
      */
     private resolveToken;
     private readStdin;

package/dist/commands/authenticate.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
 const core_1 = require("@oclif/core");
 const core_2 = require("@oclif/core");
+const password_1 = tslib_1.__importDefault(require("@inquirer/password"));
 const config_1 = require("../util/config");
 // Time to wait for a token on a piped stdin before giving up. Stdin that is
 // neither a TTY nor a closed/redirected stream would otherwise hang forever.
@@ -20,21 +22,21 @@ class Authenticate extends core_2.Command {
                 if (config.authToken) {
                     delete config.authToken;
                     await (0, config_1.writeConfig)(config);
-                    core_1.ux.info("Authentication token removed");
+                    core_1.ux.stdout("Authentication token removed");
                 }
                 else {
-                    core_1.ux.info("Authentication token setup skipped");
+                    core_1.ux.stdout("Authentication token setup skipped");
                 }
                 return;
             }
             config.authToken = token.trim();
             await (0, config_1.writeConfig)(config);
-            core_1.ux.info("Authentication token successfully saved");
+            core_1.ux.stdout("Authentication token successfully saved");
             if (config.defaultTestSuiteId) {
-                core_1.ux.info("You can now use 'testrigor run' to run your default test suite");
+                core_1.ux.stdout("You can now use 'testrigor run' to run your default test suite");
             }
             else {
-                core_1.ux.info("Use 'testrigor test-suite config --default TEST_SUITE_ID' to set your default test suite ID, then use 'testrigor run'");
+                core_1.ux.stdout("Use 'testrigor test-suite config --default TEST_SUITE_ID' to set your default test suite ID, then use 'testrigor run'");
             }
         }
         catch (error) {
@@ -45,19 +47,19 @@ class Authenticate extends core_2.Command {
      * Where the token comes from, in order: the --token flag, an interactive
      * hidden prompt, or piped stdin.
      *
-     * The hidden prompt is only usable on a TTY. Without one, @oclif/core falls
-     * back to `sh -c 'read -s ...'`, which fails on any system where /bin/sh is
-     * dash (the Debian and Ubuntu default) with "read: Illegal option -s" and
-     * then silently skips the setup.
+     * The hidden prompt is only usable on a TTY: without one there is nothing
+     * to read keystrokes from, so piped stdin is tried instead.
      */
     async resolveToken(flagToken, hasExistingToken) {
         if (flagToken !== undefined) {
             return flagToken;
         }
         if (process.stdin.isTTY) {
-            return core_1.ux.prompt(hasExistingToken
-                ? "Enter your testRigor API token (press enter to remove)"
-                : "Enter your testRigor API token (press enter to skip)", { type: "hide", required: false });
+            return (0, password_1.default)({
+                message: hasExistingToken
+                    ? "Enter your testRigor API token (press enter to remove)"
+                    : "Enter your testRigor API token (press enter to skip)",
+            });
         }
         const piped = await this.readStdin();
         if (piped) {

package/dist/commands/test-suite/config.d.ts

@@ -3,9 +3,9 @@ export default class Config extends Command {
     static description: string;
     static examples: string[];
     static flags: {
-        default: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        delete: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        show: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        default: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        delete: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        show: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
     private setDefaultTestSuite;

package/dist/commands/test-suite/config.js

@@ -32,45 +32,45 @@ class Config extends core_1.Command {
         const config = await (0, config_1.readConfig)();
         config.defaultTestSuiteId = testSuiteId.trim();
         await (0, config_1.writeConfig)(config);
-        core_1.ux.info(`Default test suite ID set to: ${config.defaultTestSuiteId}`);
+        core_1.ux.stdout(`Default test suite ID set to: ${config.defaultTestSuiteId}`);
         if (config.authToken) {
-            core_1.ux.info("You can now use 'testrigor run' to run your default test suite");
+            core_1.ux.stdout("You can now use 'testrigor run' to run your default test suite");
         }
         else {
-            core_1.ux.info("Use 'testrigor authenticate' to set your authentication token");
+            core_1.ux.stdout("Use 'testrigor authenticate' to set your authentication token");
         }
     }
     async deleteDefaultTestSuite() {
         const config = await (0, config_1.readConfig)();
         if (!config.defaultTestSuiteId) {
-            core_1.ux.info("No default test suite ID is currently set");
+            core_1.ux.stdout("No default test suite ID is currently set");
             return;
         }
         delete config.defaultTestSuiteId;
         await (0, config_1.writeConfig)(config);
-        core_1.ux.info("Default test suite ID removed");
+        core_1.ux.stdout("Default test suite ID removed");
         if (config.authToken) {
-            core_1.ux.info("Authentication token preserved");
+            core_1.ux.stdout("Authentication token preserved");
         }
     }
     async showConfiguration() {
         const config = await (0, config_1.readConfig)();
         if (Object.keys(config).length === 0) {
-            core_1.ux.info("No configuration found");
+            core_1.ux.stdout("No configuration found");
             return;
         }
-        core_1.ux.info("Current testRigor configuration:");
+        core_1.ux.stdout("Current testRigor configuration:");
         if (config.defaultTestSuiteId) {
-            core_1.ux.info(`  Default test suite ID: ${config.defaultTestSuiteId}`);
+            core_1.ux.stdout(`  Default test suite ID: ${config.defaultTestSuiteId}`);
         }
         else {
-            core_1.ux.info("  Default test suite ID: not set");
+            core_1.ux.stdout("  Default test suite ID: not set");
         }
         if (config.authToken) {
-            core_1.ux.info("  Authentication token: configured");
+            core_1.ux.stdout("  Authentication token: configured");
         }
         else {
-            core_1.ux.info("  Authentication token: not set");
+            core_1.ux.stdout("  Authentication token: not set");
         }
     }
 }

package/dist/commands/test-suite/run.d.ts

@@ -6,33 +6,33 @@ export default class Run extends CommandBase<typeof Run> {
     private TESTRIGOR_API_URL;
     private TESTRIGOR_API2_URL;
     static flags: {
-        async: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        branch: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        commit: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        localhost: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        url: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "file-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "junit-report-save-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "variables-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "test-cases-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "rules-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "settings-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "local-test-nodes-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "test-case-uuid": import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "auto-create-ai-rules": import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        "explicit-mutations": import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        labels: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "excluded-labels": import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "base-url-web": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "base-url-api": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "chrome-extension": import("@oclif/core/lib/interfaces").OptionFlag<{
+        async: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        branch: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        commit: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        localhost: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        url: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "file-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "junit-report-save-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "variables-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "test-cases-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "rules-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "settings-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "local-test-nodes-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "test-case-uuid": import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "auto-create-ai-rules": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        "explicit-mutations": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        labels: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "excluded-labels": import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "base-url-web": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "base-url-api": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "chrome-extension": import("@oclif/core/interfaces").OptionFlag<{
             name: string;
             file: string;
-        } | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "xray-execution-key": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
+        }[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "xray-execution-key": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     static args: {
-        testSuiteId: import("@oclif/core/lib/interfaces/parser").Arg<string | undefined, Record<string, unknown>>;
+        testSuiteId: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
     };
     private initializeUrls;
     run(): Promise<void>;

package/dist/commands/test-suite/run.js

@@ -194,7 +194,7 @@ class Run extends command_base_1.CommandBase {
         }
         if (filePath) {
             if (url) {
-                core_1.ux.info("WARNING: File path will be ignored because --url is used");
+                core_1.ux.stdout("WARNING: File path will be ignored because --url is used");
                 delete flags["file-path"];
             }
             else {
@@ -231,8 +231,12 @@ class Run extends command_base_1.CommandBase {
                     return task.newListr([
                         {
                             task: async (_ctx, subtask) => {
+                                if (!(await (0, appium_1.isAppiumInstalled)())) {
+                                    subtask.title = `Installing mobile server (appium@${(0, appium_1.getAppiumVersion)()}, first run only)`;
+                                    await (0, appium_1.installAppium)();
+                                }
                                 await (0, appium_1.checkAppiumInstalled)();
-                                subtask.title = "Mobile server binary found";
+                                subtask.title = "Mobile server installed";
                             },
                             rendererOptions: { timer: listr2_1.PRESET_TIMER },
                         },

package/dist/commands/test-suite/validate-syntax.d.ts

@@ -4,14 +4,14 @@ export default class ValidateSyntax extends CommandBase<typeof ValidateSyntax> {
     static examples: string[];
     private TESTRIGOR_API2_URL;
     static flags: {
-        steps: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "test-cases-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "base-url-api": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "rules-path": import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser").CustomOptions>;
-        "explicit-mutations": import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        steps: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "test-cases-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "base-url-api": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "rules-path": import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "explicit-mutations": import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     static args: {
-        testSuiteId: import("@oclif/core/lib/interfaces/parser").Arg<string | undefined, Record<string, unknown>>;
+        testSuiteId: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
     };
     run(): Promise<void>;
     private resolveStepsToValidate;

package/dist/commands/test-suite/validate-syntax.js

@@ -42,20 +42,20 @@ class ValidateSyntax extends command_base_1.CommandBase {
             const response = await this.callValidateSyntax(testSuiteId, testCase.customSteps, token, rules, explicitMutations);
             if (response.data && response.data.length > 0) {
                 const parserErrors = response.data;
-                core_2.ux.info(`${testCase.description}: invalid`);
+                core_2.ux.stdout(`${testCase.description}: invalid`);
                 for (const parserError of parserErrors) {
-                    core_2.ux.info(`  ${parserError.command} - ${parserError.errorMessage}`);
+                    core_2.ux.stdout(`  ${parserError.command} - ${parserError.errorMessage}`);
                 }
                 hasAnyInvalidTestCases = true;
             }
             else {
-                core_2.ux.info(`${testCase.description}: valid`);
+                core_2.ux.stdout(`${testCase.description}: valid`);
             }
         }
         if (hasAnyInvalidTestCases) {
             this.exit(1);
         }
-        core_2.ux.info("All provided steps are valid.");
+        core_2.ux.stdout("All provided steps are valid.");
         this.exit(0);
     }
     async callValidateSyntax(testSuiteId, steps, token, rules, explicitMutations) {

package/dist/flags/chrome-extension.d.ts

@@ -1,4 +1,7 @@
-export declare const ChromeExtensionFlag: import("@oclif/core/lib/interfaces/parser").FlagDefinition<{
+export declare const ChromeExtensionFlag: import("@oclif/core/interfaces").FlagDefinition<{
     name: string;
     file: string;
-}, Record<string, unknown>>;
+}, import("@oclif/core/interfaces").CustomOptions, {
+    multiple: true;
+    requiredOrDefaulted: false;
+}>;

package/dist/util/appium.d.ts

@@ -7,6 +7,15 @@ declare const REQUIRED_DRIVERS: Array<{
     version: string;
 }>;
 export { DEFAULT_PORT, DEFAULT_BASE_PATH, REQUIRED_DRIVERS, PID_DIR, PID_FILE };
+export declare function getAppiumVersion(): string;
+export declare function isAppiumInstalled(): Promise<boolean>;
+/**
+ * Installs the pinned Appium with `npm ci` from the lockfile in appium-server/.
+ * The install runs in a staging directory that is renamed into place, so an
+ * interrupted install never looks complete and two concurrent runs do not
+ * install into the same directory.
+ */
+export declare function installAppium(): Promise<void>;
 export declare function checkAppiumInstalled(): Promise<void>;
 export type DriverStatus = {
     installed: boolean;

package/dist/util/appium.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PID_FILE = exports.PID_DIR = exports.REQUIRED_DRIVERS = exports.DEFAULT_BASE_PATH = exports.DEFAULT_PORT = void 0;
+exports.getAppiumVersion = getAppiumVersion;
+exports.isAppiumInstalled = isAppiumInstalled;
+exports.installAppium = installAppium;
 exports.checkAppiumInstalled = checkAppiumInstalled;
 exports.getDriverStatus = getDriverStatus;
 exports.ensureDriver = ensureDriver;
@@ -36,8 +39,28 @@ const REQUIRED_DRIVERS = [
     { name: "xcuitest", version: "10.43.1" },
 ];
 exports.REQUIRED_DRIVERS = REQUIRED_DRIVERS;
-function getAppiumBin() {
-    return path.resolve(PROJECT_ROOT, "node_modules", ".bin", "appium");
+// Appium is not a dependency of the CLI: its tree pins a vulnerable
+// shell-quote, and npm re-resolves anything forced through our published
+// shrinkwrap to satisfy that pin. appium-server/ instead ships a lockfile with
+// an override, installed on the first mobile run under the CLI home, one
+// directory per Appium version.
+const APPIUM_SERVER_SOURCE = path.join(PROJECT_ROOT, "appium-server");
+let appiumVersion;
+function getAppiumVersion() {
+    if (!appiumVersion) {
+        const pkg = JSON.parse(fs.readFileSync(path.join(APPIUM_SERVER_SOURCE, "package.json"), "utf8"));
+        appiumVersion = pkg.dependencies.appium;
+    }
+    return appiumVersion;
+}
+function getAppiumInstallDir() {
+    return path.join((0, utils_1.getHomeDir)(), "appium-server", getAppiumVersion());
+}
+// Run Appium's entry script with the Node running the CLI rather than through
+// node_modules/.bin, whose shims differ per platform (`appium.cmd` on Windows).
+function getAppiumCommand(args) {
+    const entry = path.join(getAppiumInstallDir(), "node_modules", "appium", "index.js");
+    return [process.execPath, [entry, ...args]];
 }
 function getAppiumEnv() {
     return {
@@ -46,6 +69,13 @@ function getAppiumEnv() {
         CHROMELABS_URL: "https://googlechromelabs.github.io",
     };
 }
+function runAppium(args) {
+    const [command, commandArgs] = getAppiumCommand(args);
+    return execFile(command, commandArgs, {
+        encoding: "utf8",
+        env: getAppiumEnv(),
+    });
+}
 /**
  * Appium refuses to start unless APPIUM_HOME already exists, so create it
  * before any invocation and surface a permission problem as itself rather
@@ -61,25 +91,78 @@ async function ensureAppiumHome() {
             "Check that you own that directory, or point APPIUM_HOME at a writable one.");
     }
 }
+async function isAppiumInstalled() {
+    try {
+        const pkg = JSON.parse(await fs.promises.readFile(path.join(getAppiumInstallDir(), "node_modules", "appium", "package.json"), "utf8"));
+        return pkg.version === getAppiumVersion();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Installs the pinned Appium with `npm ci` from the lockfile in appium-server/.
+ * The install runs in a staging directory that is renamed into place, so an
+ * interrupted install never looks complete and two concurrent runs do not
+ * install into the same directory.
+ */
+async function installAppium() {
+    const target = getAppiumInstallDir();
+    await fs.promises.mkdir(path.dirname(target), { recursive: true });
+    const staging = await fs.promises.mkdtemp(`${target}.tmp-`);
+    for (const file of ["package.json", "package-lock.json"]) {
+        await fs.promises.copyFile(path.join(APPIUM_SERVER_SOURCE, file), path.join(staging, file));
+    }
+    try {
+        // npm is a .cmd on Windows, which Node only spawns through a shell. The
+        // arguments are constants, so the shell adds no injection surface.
+        await execFile("npm", ["ci", "--omit=dev", "--no-audit", "--no-fund"], {
+            cwd: staging,
+            shell: process.platform === "win32",
+            maxBuffer: 64 * 1024 * 1024,
+        });
+    }
+    catch (error) {
+        await fs.promises.rm(staging, { recursive: true, force: true });
+        const detail = error instanceof Error ? error.message : String(error);
+        throw new Error(`Could not install the mobile server (appium@${getAppiumVersion()}) into ${target}. ` +
+            `npm must be installed and able to reach the registry.\n${detail}`);
+    }
+    try {
+        // A damaged install (e.g. files deleted by hand) would block the rename.
+        if (!(await isAppiumInstalled())) {
+            await fs.promises.rm(target, { recursive: true, force: true });
+        }
+        await fs.promises.rename(staging, target);
+    }
+    catch (error) {
+        await fs.promises.rm(staging, { recursive: true, force: true });
+        // Another run finished installing first.
+        if (!(await isAppiumInstalled()))
+            throw error;
+    }
+}
 async function checkAppiumInstalled() {
-    const appiumBin = getAppiumBin();
-    if (!(await fs_1.default.exists(appiumBin))) {
-        throw new Error(`Appium binary not found at ${appiumBin}. ` +
-            "Reinstall the CLI with: npm install -g @testrigor/testrigor-cli");
+    if (!(await isAppiumInstalled())) {
+        throw new Error(`The mobile server (appium@${getAppiumVersion()}) is not installed in ${getAppiumInstallDir()}.`);
     }
     await ensureAppiumHome();
     try {
-        await execFile(appiumBin, ["--version"], { env: getAppiumEnv() });
+        await runAppium(["--version"]);
     }
     catch (error) {
         const detail = error instanceof Error ? error.message : String(error);
-        throw new Error(`Appium binary at ${appiumBin} failed to run (APPIUM_HOME=${APPIUM_HOME}).\n${detail}`);
+        throw new Error(`The mobile server in ${getAppiumInstallDir()} failed to run (APPIUM_HOME=${APPIUM_HOME}).\n${detail}`);
     }
 }
 async function getDriverStatus(driverName, requiredVersion) {
-    const appiumBin = getAppiumBin();
     try {
-        const { stdout } = await execFile(appiumBin, ["driver", "list", "--installed", "--json"], { encoding: "utf8", env: getAppiumEnv() });
+        const { stdout } = await runAppium([
+            "driver",
+            "list",
+            "--installed",
+            "--json",
+        ]);
         const drivers = JSON.parse(stdout);
         const info = drivers[driverName];
         if (!info || !info.installed) {
@@ -96,20 +179,15 @@ async function getDriverStatus(driverName, requiredVersion) {
     }
 }
 async function ensureDriver(driverName, requiredVersion) {
-    const appiumBin = getAppiumBin();
-    const env = getAppiumEnv();
     const status = await getDriverStatus(driverName, requiredVersion);
     if (status.installed && status.upToDate) {
         return null;
     }
     try {
         if (status.installed) {
-            await execFile(appiumBin, ["driver", "uninstall", driverName], {
-                encoding: "utf8",
-                env,
-            });
+            await runAppium(["driver", "uninstall", driverName]);
         }
-        await execFile(appiumBin, ["driver", "install", `${driverName}@${requiredVersion}`], { encoding: "utf8", env });
+        await runAppium(["driver", "install", `${driverName}@${requiredVersion}`]);
         return null;
     }
     catch (error) {
@@ -198,11 +276,10 @@ async function startAppium(port = DEFAULT_PORT, logLevel = "debug") {
     if (existingPid) {
         return { pid: existingPid, alreadyRunning: true };
     }
-    const appiumBin = getAppiumBin();
     await ensureAppiumHome();
     const logStream = fs.openSync(LOG_FILE, "a");
     const logOffset = fs.fstatSync(logStream).size;
-    const appiumProcess = childProcess.spawn(appiumBin, [
+    const [command, args] = getAppiumCommand([
         "--port",
         String(port),
         "--base-path",
@@ -211,7 +288,8 @@ async function startAppium(port = DEFAULT_PORT, logLevel = "debug") {
         "chromedriver_autodownload",
         "--log-level",
         logLevel,
-    ], {
+    ]);
+    const appiumProcess = childProcess.spawn(command, args, {
         detached: true,
         stdio: ["ignore", logStream, logStream],
         env: getAppiumEnv(),