agent-relay 7.1.1 → 8.0.2

package/scripts/postinstall.js

@@ -1,615 +0,0 @@
-#!/usr/bin/env node
-/**
- * Postinstall Script for agent-relay
- *
- * This script runs after npm install to:
- * 1. Install dashboard-server and relay-acp binaries (parity with curl installer)
- * 2. Rebuild better-sqlite3 / confirm SQLite driver
- * 3. Patch agent-trajectories CLI
- * 4. Patch @relayauth/core exports for CommonJS require()
- *
- * The agent-relay-broker binary is no longer installed here — it ships as a
- * platform-specific optional dependency of @agent-relay/sdk
- * (`@agent-relay/broker-<platform>-<arch>`), resolved at runtime by the SDK.
- */
-
-import { execSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import { createRequire } from 'node:module';
-import https from 'node:https';
-import path from 'node:path';
-import fs from 'node:fs';
-import os from 'node:os';
-import { fileURLToPath } from 'node:url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-/** Get package root directory (parent of scripts/) */
-function getPackageRoot() {
-  return path.resolve(__dirname, '..');
-}
-
-// Colors for console output
-const colors = {
-  reset: '\x1b[0m',
-  green: '\x1b[32m',
-  yellow: '\x1b[33m',
-  blue: '\x1b[34m',
-};
-
-function info(msg) {
-  console.log(`${colors.blue}[info]${colors.reset} ${msg}`);
-}
-
-function success(msg) {
-  console.log(`${colors.green}[success]${colors.reset} ${msg}`);
-}
-
-function warn(msg) {
-  console.log(`${colors.yellow}[warn]${colors.reset} ${msg}`);
-}
-
-const nodeRequire = createRequire(import.meta.url);
-
-function formatExecError(err) {
-  if (!err) return 'Unknown error';
-
-  const stderr = err.stderr ? String(err.stderr).trim() : '';
-  const stdout = err.stdout ? String(err.stdout).trim() : '';
-  if (stderr) return stderr.split('\n').slice(-8).join('\n');
-  if (stdout) return stdout.split('\n').slice(-8).join('\n');
-  if (err.message) return err.message;
-  return String(err);
-}
-
-function writeStorageStatus(lines) {
-  const statusDir = path.join(getPackageRoot(), '.agent-relay');
-  const statusPath = path.join(statusDir, 'storage-status.txt');
-
-  try {
-    fs.mkdirSync(statusDir, { recursive: true });
-    fs.writeFileSync(statusPath, `${lines.join('\n')}\n`, 'utf-8');
-    return statusPath;
-  } catch (err) {
-    warn(
-      `Failed to write storage status file: ${
-        err instanceof Error ? err.message : String(err)
-      }`
-    );
-    return null;
-  }
-}
-
-function hasBuiltInNodeSqlite() {
-  try {
-    nodeRequire('node:sqlite');
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-function rebuildBetterSqlite3() {
-  info('Rebuilding better-sqlite3 (SQLite driver)...');
-  try {
-    execSync('npm rebuild better-sqlite3', {
-      cwd: getPackageRoot(),
-      stdio: 'inherit',
-    });
-    success('better-sqlite3 rebuilt successfully');
-    return { ok: true };
-  } catch (err) {
-    const message = formatExecError(err);
-    warn(`better-sqlite3 rebuild failed: ${message}`);
-    return { ok: false, message };
-  }
-}
-
-function ensureSqliteDriver() {
-  const rebuildResult = rebuildBetterSqlite3();
-  const builtInAvailable = hasBuiltInNodeSqlite();
-  const timestamp = new Date().toISOString();
-  const baseStatus = [
-    `node: ${process.version}`,
-    `platform: ${os.platform()}-${os.arch()}`,
-    `timestamp: ${timestamp}`,
-  ];
-
-  if (rebuildResult.ok) {
-    const statusPath = writeStorageStatus([
-      'status: ok',
-      'driver: better-sqlite3',
-      'detail: better-sqlite3 rebuilt successfully',
-      ...baseStatus,
-    ]);
-    return { ok: true, driver: 'better-sqlite3', statusPath };
-  }
-
-  if (builtInAvailable) {
-    const statusPath = writeStorageStatus([
-      'status: degraded',
-      'driver: node:sqlite',
-      `detail: better-sqlite3 rebuild failed (${rebuildResult.message ?? 'unknown error'}), using built-in node:sqlite`,
-      ...baseStatus,
-    ]);
-    return {
-      ok: true,
-      driver: 'node:sqlite',
-      statusPath,
-      error: rebuildResult.message,
-    };
-  }
-
-  const detail = rebuildResult.message ?? 'unknown error';
-  const statusPath = writeStorageStatus([
-    'status: failed',
-    'driver: none',
-    `detail: better-sqlite3 rebuild failed (${detail}); no built-in node:sqlite available`,
-    'fallback: in-memory storage',
-    ...baseStatus,
-  ]);
-
-  return { ok: false, driver: 'none', statusPath, error: detail };
-}
-
-/** Read the package version from package.json */
-function getPackageVersion(pkgRoot) {
-  const packageJsonPath = path.join(pkgRoot, 'package.json');
-  try {
-    const pkgJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
-    return pkgJson.version;
-  } catch (err) {
-    warn(
-      `Unable to read package version from package.json: ${
-        err instanceof Error ? err.message : String(err)
-      }`
-    );
-    return null;
-  }
-}
-
-/**
- * Verify SHA-256 checksum of a downloaded file.
- * Downloads a checksums file from the same release directory and verifies.
- * Returns true if verified, false if checksums file not found (graceful fallback).
- * Throws if checksums file exists but verification fails.
- */
-async function verifyChecksum(filePath, downloadUrl) {
-  const checksumUrl = downloadUrl.replace(/\/[^/]+$/, '/checksums.sha256');
-  const binaryName = path.basename(downloadUrl);
-
-  try {
-    const checksumContent = await new Promise((resolve, reject) => {
-      const fetchWithRedirects = (url, remaining = 5) => {
-        const chunks = [];
-        const request = https.get(url, res => {
-          if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-            if (remaining <= 0) { res.resume(); reject(new Error('Too many redirects fetching checksums')); return; }
-            res.resume();
-            fetchWithRedirects(new URL(res.headers.location, url).toString(), remaining - 1);
-            return;
-          }
-          if (res.statusCode !== 200) {
-            res.resume();
-            reject(new Error(`Checksums file not available (HTTP ${res.statusCode})`));
-            return;
-          }
-          res.on('data', chunk => chunks.push(chunk));
-          res.on('end', () => resolve(Buffer.concat(chunks).toString('utf-8')));
-          res.on('error', reject);
-        });
-        request.on('error', reject);
-      };
-      fetchWithRedirects(checksumUrl);
-    });
-
-    // Parse checksums file (format: "<hash>  <filename>" per line)
-    const expectedHash = checksumContent
-      .split('\n')
-      .map(line => line.trim())
-      .filter(line => line.endsWith(binaryName))
-      .map(line => line.split(/\s+/)[0])[0];
-
-    if (!expectedHash) {
-      warn(`No checksum entry found for ${binaryName} in checksums file`);
-      return false;
-    }
-
-    const fileBuffer = fs.readFileSync(filePath);
-    const actualHash = createHash('sha256').update(fileBuffer).digest('hex');
-
-    if (actualHash !== expectedHash) {
-      throw new Error(
-        `Checksum mismatch for ${binaryName}: expected ${expectedHash}, got ${actualHash}`
-      );
-    }
-
-    info(`Checksum verified for ${binaryName}`);
-    return true;
-  } catch (err) {
-    if (err.message.includes('Checksum mismatch')) {
-      throw err; // Re-throw verification failures — this is a supply chain risk
-    }
-    // Checksums file not available — log warning but allow installation
-    warn(`Checksum verification skipped for ${binaryName}: ${err.message}`);
-    return false;
-  }
-}
-
-/**
- * Download a file via HTTPS, following redirects
- * Uses only built-in https module (no deps)
- */
-function downloadBinary(url, destPath, maxRedirects = 5) {
-  fs.mkdirSync(path.dirname(destPath), { recursive: true });
-
-  const attemptDownload = (currentUrl, redirectsRemaining, resolve, reject) => {
-    const request = https.get(currentUrl, res => {
-      const status = res.statusCode ?? 0;
-      const location = res.headers.location;
-      const isRedirect = status >= 300 && status < 400 && location;
-
-      if (isRedirect) {
-        if (redirectsRemaining <= 0) {
-          res.resume();
-          reject(new Error('Too many redirects while downloading binary'));
-          return;
-        }
-
-        const nextUrl = new URL(location, currentUrl).toString();
-        res.resume();
-        attemptDownload(nextUrl, redirectsRemaining - 1, resolve, reject);
-        return;
-      }
-
-      if (status !== 200) {
-        res.resume();
-        reject(new Error(`Download failed with status ${status}`));
-        return;
-      }
-
-      const fileStream = fs.createWriteStream(destPath);
-      res.pipe(fileStream);
-      fileStream.on('finish', () => {
-        fileStream.close(resolve);
-      });
-      fileStream.on('error', err => reject(err));
-      res.on('error', err => reject(err));
-    });
-
-    request.on('error', err => reject(err));
-  };
-
-  return new Promise((resolve, reject) => {
-    attemptDownload(url, maxRedirects, resolve, reject);
-  }).catch(err => {
-    try {
-      fs.unlinkSync(destPath);
-    } catch {
-      // Ignore cleanup errors
-    }
-    throw err;
-  });
-}
-
-/**
- * Re-sign a binary with ad-hoc signature on macOS.
- * This is required because macOS code signature validation can fail
- * when binaries are copied/downloaded, causing SIGKILL on execution.
- *
- * The codesign tool is always available on macOS (part of the system).
- * This is a common solution for npm packages distributing native binaries.
- * Similar approach is used by esbuild, swc, and other Rust/Go tools.
- *
- * @param {string} binaryPath - Path to the binary to sign
- * @returns {boolean} - Whether signing succeeded
- */
-function resignBinaryForMacOS(binaryPath) {
-  if (os.platform() !== 'darwin') {
-    return true; // Only needed on macOS
-  }
-
-  try {
-    // codesign is always available on macOS as a system utility
-    execSync(`codesign --remove-signature "${binaryPath}"`, { stdio: 'pipe' });
-  } catch {
-    // Unsigned binaries are fine here; malformed signatures are removed when present.
-  }
-
-  try {
-    execSync(`codesign --force --sign - "${binaryPath}"`, { stdio: 'pipe' });
-    return true;
-  } catch (err) {
-    // This shouldn't happen on a normal macOS system, but handle gracefully
-    warn(`Failed to re-sign binary: ${err.message}`);
-    warn('The binary may fail to execute due to code signature issues.');
-    warn('You can manually fix this by running: codesign --remove-signature ' + binaryPath + ' && codesign --force --sign - ' + binaryPath);
-    return false;
-  }
-}
-
-/**
- * Install the standalone dashboard-server binary.
- *
- * The curl-based installer downloads this binary, but npm install does not.
- * This brings the npm install path to parity so `agent-relay up` can start
- * the dashboard without falling back to `npx @agent-relay/dashboard-server@latest`.
- */
-async function installDashboardBinary() {
-  const homeDir = os.homedir();
-  const targetPath = path.join(homeDir, '.local', 'bin', 'relay-dashboard-server');
-
-  // Already installed?
-  if (fs.existsSync(targetPath)) {
-    try {
-      execSync(`"${targetPath}" --version`, { stdio: 'pipe' });
-      info('Dashboard server binary already installed');
-      return true;
-    } catch {
-      // Binary exists but broken — reinstall
-    }
-  }
-
-  const platform = os.platform();
-  const arch = os.arch();
-  const platformMap = { darwin: 'darwin', linux: 'linux' };
-  const archMap = { arm64: 'arm64', x64: 'x64' };
-  const targetPlatform = platformMap[platform];
-  const targetArch = archMap[arch];
-
-  if (!targetPlatform || !targetArch) {
-    info(`No prebuilt dashboard binary for ${platform}-${arch}`);
-    return false;
-  }
-
-  const binaryName = `relay-dashboard-server-${targetPlatform}-${targetArch}`;
-  const downloadUrl = `https://github.com/AgentWorkforce/relay-dashboard/releases/latest/download/${binaryName}`;
-
-  info(`Downloading dashboard-server binary...`);
-  try {
-    fs.mkdirSync(path.dirname(targetPath), { recursive: true });
-    await downloadBinary(downloadUrl, targetPath);
-    await verifyChecksum(targetPath, downloadUrl);
-    fs.chmodSync(targetPath, 0o755);
-    resignBinaryForMacOS(targetPath);
-    success('Downloaded dashboard-server binary');
-    return true;
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    info(`Dashboard binary not available (${message}) — will use npx fallback`);
-    try { fs.unlinkSync(targetPath); } catch { /* ignore */ }
-    return false;
-  }
-}
-
-/**
- * Install the relay-acp binary (Zed editor integration).
- *
- * The curl-based installer downloads this binary, but npm install does not.
- * This brings the npm install path to parity.
- */
-async function installRelayAcpBinary() {
-  const homeDir = os.homedir();
-  const targetPath = path.join(homeDir, '.local', 'bin', 'relay-acp');
-
-  // Already installed and functional?
-  if (fs.existsSync(targetPath)) {
-    try {
-      execSync(`"${targetPath}" --version`, { stdio: 'pipe' });
-      info('relay-acp binary already installed');
-      return true;
-    } catch {
-      // Binary exists but broken or outdated — reinstall
-    }
-  }
-
-  const platform = os.platform();
-  const arch = os.arch();
-  const platformMap = { darwin: 'darwin', linux: 'linux' };
-  const archMap = { arm64: 'arm64', x64: 'x64' };
-  const targetPlatform = platformMap[platform];
-  const targetArch = archMap[arch];
-
-  if (!targetPlatform || !targetArch) {
-    return false;
-  }
-
-  const pkgRoot = getPackageRoot();
-  const version = getPackageVersion(pkgRoot);
-  if (!version) return false;
-
-  const binaryName = `relay-acp-${targetPlatform}-${targetArch}`;
-  const downloadUrl = `https://github.com/AgentWorkforce/relay/releases/download/v${version}/${binaryName}`;
-
-  info('Downloading relay-acp binary (Zed editor integration)...');
-  try {
-    fs.mkdirSync(path.dirname(targetPath), { recursive: true });
-    await downloadBinary(downloadUrl, targetPath);
-    await verifyChecksum(targetPath, downloadUrl);
-    fs.chmodSync(targetPath, 0o755);
-    resignBinaryForMacOS(targetPath);
-    success('Downloaded relay-acp binary');
-    return true;
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    info(`relay-acp binary not available (${message}) — Zed integration requires manual install`);
-    try { fs.unlinkSync(targetPath); } catch { /* ignore */ }
-    return false;
-  }
-}
-
-/**
- * Install dashboard dependencies
- */
-function installDashboardDeps() {
-  const dashboardDir = path.join(getPackageRoot(), 'src', 'dashboard');
-
-  if (!fs.existsSync(dashboardDir)) {
-    info('Dashboard directory not found, skipping');
-    return;
-  }
-
-  const dashboardNodeModules = path.join(dashboardDir, 'node_modules');
-  if (fs.existsSync(dashboardNodeModules)) {
-    info('Dashboard dependencies already installed');
-    return;
-  }
-
-  info('Installing dashboard dependencies...');
-  try {
-    execSync('npm install', { cwd: dashboardDir, stdio: 'inherit' });
-    success('Dashboard dependencies installed');
-  } catch (err) {
-    warn(`Failed to install dashboard dependencies: ${err.message}`);
-  }
-}
-
-/**
- * Patch agent-trajectories CLI to record agent info on start
- */
-function patchAgentTrajectories() {
-  const pkgRoot = getPackageRoot();
-  const cliPath = path.join(pkgRoot, 'node_modules', 'agent-trajectories', 'dist', 'cli', 'index.js');
-
-  if (!fs.existsSync(cliPath)) {
-    info('agent-trajectories not installed, skipping patch');
-    return;
-  }
-
-  const content = fs.readFileSync(cliPath, 'utf-8');
-
-  // If already patched, exit early
-  if (content.includes('--agent <name>') && content.includes('trajectory.agents.push')) {
-    info('agent-trajectories already patched');
-    return;
-  }
-
-  const optionNeedle = '.option("-t, --task <id>", "External task ID").option("-s, --source <system>", "Task system (github, linear, jira, beads)").option("--url <url>", "URL to external task")';
-  const optionReplacement = `${optionNeedle}.option("-a, --agent <name>", "Agent name starting the trajectory").option("-r, --role <role>", "Agent role (lead, contributor, reviewer)")`;
-
-  const createNeedle = `    const trajectory = createTrajectory({
-      title,
-      source
-    });
-    await storage.save(trajectory);`;
-
-  const createReplacement = `    const agentName = options.agent || process.env.AGENT_NAME || process.env.AGENT_RELAY_NAME || process.env.USER || process.env.USERNAME;
-    const agentRole = options.role || "lead";
-    const trajectory = createTrajectory({
-      title,
-      source
-    });
-    if (agentName) {
-      trajectory.agents.push({
-        name: agentName,
-        role: ["lead", "contributor", "reviewer"].includes(agentRole) ? agentRole : "lead",
-        joinedAt: (/* @__PURE__ */ new Date()).toISOString()
-      });
-    }
-    await storage.save(trajectory);`;
-
-  if (!content.includes(optionNeedle) || !content.includes(createNeedle)) {
-    warn('agent-trajectories CLI format changed, skipping patch (expected needle not found)');
-    return;
-  }
-
-  const updated = content
-    .replace(optionNeedle, optionReplacement)
-    .replace(createNeedle, createReplacement);
-
-  // Verify the patch produced exactly the expected changes (no double-application or corruption)
-  if (updated === content) {
-    warn('agent-trajectories patch produced no changes, skipping write');
-    return;
-  }
-
-  fs.writeFileSync(cliPath, updated, 'utf-8');
-  success('Patched agent-trajectories to record agent on trail start');
-}
-
-function patchRelayauthCoreExports() {
-  const pkgRoot = getPackageRoot();
-  const packageJsonPath = path.join(pkgRoot, 'node_modules', '@relayauth', 'core', 'package.json');
-
-  try {
-    const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
-    const rootExport = packageJson?.exports?.['.'];
-
-    if (!rootExport || typeof rootExport !== 'object' || Array.isArray(rootExport)) {
-      warn('@relayauth/core exports format changed, skipping require() compatibility patch');
-      return;
-    }
-
-    if (rootExport.require === './dist/index.js' && rootExport.default === './dist/index.js') {
-      info('@relayauth/core already supports require()');
-      return;
-    }
-
-    packageJson.exports['.'] = {
-      ...rootExport,
-      require: rootExport.require ?? './dist/index.js',
-      default: rootExport.default ?? './dist/index.js',
-    };
-
-    fs.writeFileSync(packageJsonPath, `${JSON.stringify(packageJson, null, 2)}\n`, 'utf-8');
-    success('Patched @relayauth/core package exports for require() compatibility');
-  } catch (err) {
-    if (err.code === 'ENOENT') {
-      info('@relayauth/core not installed, skipping require() compatibility patch');
-    } else {
-      warn(`Failed to patch @relayauth/core package exports: ${err.message}`);
-    }
-  }
-}
-
-function logPostinstallDiagnostics(sqliteStatus) {
-  if (sqliteStatus.ok && sqliteStatus.driver === 'better-sqlite3') {
-    console.log('✓ SQLite ready (better-sqlite3)');
-  } else if (sqliteStatus.ok && sqliteStatus.driver === 'node:sqlite') {
-    console.log('⚠ better-sqlite3 rebuild failed - using built-in node:sqlite');
-    console.log('  To fix: npm rebuild better-sqlite3 or upgrade to Node 22+');
-  } else {
-    console.log('⚠ SQLite installation failed - using fallback storage');
-    console.log('  To fix: npm rebuild better-sqlite3 or upgrade to Node 22+');
-  }
-
-  if (sqliteStatus.statusPath) {
-    info(`SQLite status written to ${sqliteStatus.statusPath}`);
-  }
-}
-
-/**
- * Main postinstall routine
- */
-async function main() {
-  // Ensure SQLite driver is available (better-sqlite3 or node:sqlite)
-  const sqliteStatus = ensureSqliteDriver();
-
-  // Ensure trail CLI captures agent info on start
-  patchAgentTrajectories();
-
-  // Make the published @relayauth/core package work with CommonJS require()
-  patchRelayauthCoreExports();
-
-  // Always install dashboard dependencies (needed for build)
-  installDashboardDeps();
-
-  // Install dashboard-server and relay-acp binaries for parity with curl installer
-  const hasDashboardBinary = await installDashboardBinary();
-  const hasAcpBinary = await installRelayAcpBinary();
-
-  // Always print diagnostics (even in CI)
-  logPostinstallDiagnostics(sqliteStatus);
-
-  if (hasDashboardBinary) {
-    console.log('✓ dashboard-server binary installed');
-  }
-  if (hasAcpBinary) {
-    console.log('✓ relay-acp binary installed (Zed editor integration)');
-  }
-}
-
-main().catch((err) => {
-  warn(`Postinstall warning: ${err.message}`);
-});