@vantaloom/cli 0.3.3 → 0.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vantaloom/cli",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "private": false,
   "type": "module",
   "description": "Vantaloom local runtime manager.",

package/src/cli.mjs

@@ -44,6 +44,8 @@ if (shouldDisableTLS()) {
   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0"
 }
 
+const cliVersion = readJSONIfExists(path.join(cliRoot, "package.json")).version ?? "unknown"
+
 export async function main(argv) {
   const command = argv[0] ?? "help"
   const options = parseOptions(argv.slice(1))
@@ -53,6 +55,10 @@ export async function main(argv) {
     process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0"
   }
 
+  if (command === "install" || command === "update") {
+    console.log(`vantaloom-cli v${cliVersion} (${platformId()})`)
+  }
+
   switch (command) {
     case "install":
       if (options.package) {
@@ -218,9 +224,16 @@ async function applyPackage(packageRoot, prefix, options) {
   // don't write tray.pid, so vantaloomctl stop won't find them).
   killTrayProcess(prefix)
 
+  // Copy package contents to install prefix
   for (const name of ["bin", "web", "cli"]) {
-    removeKnownPath(path.join(prefix, name), prefix)
-    await cp(path.join(packageRoot, name), path.join(prefix, name), {
+    const src = path.join(packageRoot, name)
+    const dst = path.join(prefix, name)
+    if (!existsSync(src)) {
+      console.error(`  warning: package missing ${name}/ directory`)
+      continue
+    }
+    removeKnownPath(dst, prefix)
+    await cp(src, dst, {
       recursive: true,
       force: true,
       dereference: false,
@@ -228,14 +241,28 @@ async function applyPackage(packageRoot, prefix, options) {
   }
 
   // Ensure binaries are executable on Unix (cross-compiled from Windows they lose +x)
-  if (process.platform !== "win32") {
-    const binDir = path.join(prefix, "bin")
+  const binDir = path.join(prefix, "bin")
+  if (process.platform !== "win32" && existsSync(binDir)) {
     for (const entry of readdirSync(binDir)) {
       const binPath = path.join(binDir, entry)
       try { chmodSync(binPath, 0o755) } catch {}
     }
   }
 
+  // Verify vantaloomctl binary exists before trying to run it
+  const ctlBin = path.join(prefix, "bin", binaryName("vantaloomctl"))
+  if (!existsSync(ctlBin)) {
+    const binContents = existsSync(binDir) ? readdirSync(binDir) : []
+    const srcBinContents = existsSync(path.join(packageRoot, "bin")) ? readdirSync(path.join(packageRoot, "bin")) : []
+    throw new Error(
+      `vantaloomctl binary not found at ${ctlBin}\n` +
+      `  installed bin/: [${binContents.join(", ")}]\n` +
+      `  package bin/:   [${srcBinContents.join(", ")}]\n` +
+      `  platform: ${platformId()}\n` +
+      `  This may indicate a corrupt download. Try again or install from source.`
+    )
+  }
+
   await writeLauncher(prefix)
   await writeText(path.join(prefix, "cli", "config.json"), `${JSON.stringify(mergedConfig, null, 2)}\n`)
   await writeText(path.join(prefix, "VERSION"), `${version}\n`)
@@ -243,7 +270,7 @@ async function applyPackage(packageRoot, prefix, options) {
     force: true,
   })
 
-  run(path.join(prefix, "bin", binaryName("vantaloomctl")), [
+  run(ctlBin, [
     "install",
     "--prefix",
     prefix,
@@ -252,7 +279,7 @@ async function applyPackage(packageRoot, prefix, options) {
   ])
 
   if (!options.noStart) {
-    run(path.join(prefix, "bin", binaryName("vantaloomctl")), [
+    run(ctlBin, [
       "start",
       "--prefix",
       prefix,
@@ -265,7 +292,10 @@ async function applyPackage(packageRoot, prefix, options) {
 async function syncFromNpmRegistry(options, action) {
   const prefix = safeDirectory(options.prefix ?? defaultPrefix())
   const installedConfig = readInstalledConfig(prefix)
-  const runtimePackage = options.runtimePackage || installedConfig.runtimePackage || runtimePackageName(platformId())
+  // Always derive runtimePackage from current platform — never trust stale config
+  // from a different platform (e.g. win32 config baked into a darwin package).
+  // Only explicit --runtime-package flag can override.
+  const runtimePackage = options.runtimePackage || runtimePackageName(platformId())
   const runtimeVersion = options.runtimeVersion || installedConfig.runtimeVersion || "latest"
   const explicitRegistry = options.npmRegistry || installedConfig.npmRegistry
   const registry = normalizeRegistry(explicitRegistry || detectNpmRegistry() || defaultNpmRegistry)
@@ -520,11 +550,22 @@ async function resolveNpmPackage({ registry, name, version }) {
 }
 
 async function downloadNpmTarball({ tarballUrl, target, packageName, version }) {
-  const response = await fetch(tarballUrl, {
-    headers: {
-      "User-Agent": "vantaloom-cli",
-    },
-  })
+  console.log(`  downloading ${packageName}@${version}...`)
+  let response
+  try {
+    response = await fetch(tarballUrl, {
+      headers: {
+        "User-Agent": "vantaloom-cli",
+      },
+      signal: AbortSignal.timeout(120000),
+    })
+  } catch (error) {
+    const causeCode = error?.cause?.code || ""
+    const causeMsg = causeCode || error?.cause?.message || error.message || ""
+    const isSsl = causeCode.includes("CERT") || causeCode === "UNABLE_TO_GET_ISSUER_CERT_LOCALLY"
+    const hint = isSsl ? `\n  Fix: run with --no-strict-ssl` : ""
+    throw new Error(`failed to download ${packageName}@${version} from ${tarballUrl}: ${causeMsg}${hint}`)
+  }
   if (!response.ok) {
     const detail = await response.text().catch(() => "")
     throw new Error(`failed to download ${packageName}@${version}: HTTP ${response.status}${detail ? ` ${detail.slice(0, 200)}` : ""}`)
@@ -532,6 +573,7 @@ async function downloadNpmTarball({ tarballUrl, target, packageName, version })
 
   const buffer = Buffer.from(await response.arrayBuffer())
   await writeFile(target, buffer)
+  console.log(`  downloaded ${(buffer.length / 1024 / 1024).toFixed(1)} MB`)
 }
 
 function shouldUseSourceInstall(options) {
@@ -595,9 +637,9 @@ function mergeRuntimeConfig(packageConfig, existingConfig, overrides) {
   if (!merged.releaseTag) {
     merged.releaseTag = defaultReleaseTag
   }
-  if (!merged.runtimePackage) {
-    merged.runtimePackage = runtimePackageName(platformId())
-  }
+  // Always force runtimePackage to match the running platform — a cross-compiled
+  // package may carry a config for a different platform (e.g. win32 inside darwin).
+  merged.runtimePackage = runtimePackageName(platformId())
   if (!merged.runtimeVersion) {
     merged.runtimeVersion = "latest"
   }