agentplane 0.2.1 → 0.2.2

package/dist/commands/upgrade.d.ts

@@ -9,15 +9,37 @@ export type UpgradeFlags = {
     backup: boolean;
     yes: boolean;
 };
+type GitHubRelease = {
+    assets?: {
+        name?: string;
+        browser_download_url?: string;
+    }[];
+    tarball_url?: string;
+};
 export declare function normalizeFrameworkSourceForUpgrade(source: string): {
     source: string;
     owner: string;
     repo: string;
     migrated: boolean;
 };
+export declare function resolveUpgradeDownloadFromRelease(opts: {
+    release: GitHubRelease;
+    owner: string;
+    repo: string;
+    assetName: string;
+    checksumName: string;
+}): {
+    kind: "assets";
+    bundleUrl: string;
+    checksumUrl: string;
+} | {
+    kind: "tarball";
+    tarballUrl: string;
+};
 export declare function cmdUpgradeParsed(opts: {
     cwd: string;
     rootOverride?: string;
     flags: UpgradeFlags;
 }): Promise<number>;
+export {};
 //# sourceMappingURL=upgrade.d.ts.map

package/dist/commands/upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAuBA,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAmBF,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB,CAWA;AAkOD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuQlB"}
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAuBA,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAmBF,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB,CAWA;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GACG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAqB1C;AAkOD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgSlB"}

package/dist/commands/upgrade.js

@@ -42,6 +42,27 @@ export function normalizeFrameworkSourceForUpgrade(source) {
     }
     return { source: `https://github.com/${owner}/${repo}`, owner, repo, migrated: false };
 }
+export function resolveUpgradeDownloadFromRelease(opts) {
+    const assets = Array.isArray(opts.release.assets) ? opts.release.assets : [];
+    const asset = assets.find((a) => a?.name === opts.assetName);
+    const checksumAsset = assets.find((a) => a?.name === opts.checksumName);
+    if (asset?.browser_download_url && checksumAsset?.browser_download_url) {
+        return {
+            kind: "assets",
+            bundleUrl: asset.browser_download_url,
+            checksumUrl: checksumAsset.browser_download_url,
+        };
+    }
+    const tarballUrl = typeof opts.release.tarball_url === "string" ? opts.release.tarball_url : "";
+    if (!tarballUrl) {
+        throw new CliError({
+            exitCode: exitCodeForError("E_NETWORK"),
+            code: "E_NETWORK",
+            message: `Upgrade assets not found in ${opts.owner}/${opts.repo} release`,
+        });
+    }
+    return { kind: "tarball", tarballUrl };
+}
 async function resolveUpgradeRoot(extractedDir) {
     const entries = await readdir(extractedDir, { withFileTypes: true });
     const dirs = entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
@@ -293,6 +314,9 @@ export async function cmdUpgradeParsed(opts) {
         tempRoot = await mkdtemp(path.join(os.tmpdir(), "agentplane-upgrade-"));
         let bundlePath = "";
         let checksumPath = "";
+        // GitHub release tarballs contain the full repository. When we fall back to tarball_url,
+        // we must ignore non-upgrade paths instead of failing validation.
+        let allowNonUpgradePaths = false;
         if (flags.bundle) {
             const isUrl = flags.bundle.startsWith("http://") || flags.bundle.startsWith("https://");
             bundlePath = isUrl ? path.join(tempRoot, "bundle.tar.gz") : path.resolve(flags.bundle);
@@ -316,39 +340,47 @@ export async function cmdUpgradeParsed(opts) {
                 ? `https://api.github.com/repos/${owner}/${repo}/releases/tags/${flags.tag}`
                 : `https://api.github.com/repos/${owner}/${repo}/releases/latest`;
             await ensureApproved("upgrade fetches release metadata and downloads assets from the network");
-            const release = (await fetchJson(releaseUrl));
-            const assets = Array.isArray(release.assets) ? release.assets : [];
             const assetName = flags.asset ?? DEFAULT_UPGRADE_ASSET;
             const checksumName = flags.checksumAsset ?? DEFAULT_UPGRADE_CHECKSUM_ASSET;
-            const asset = assets.find((entry) => entry.name === assetName);
-            const checksumAsset = assets.find((entry) => entry.name === checksumName);
-            if (!asset?.browser_download_url || !checksumAsset?.browser_download_url) {
+            const release = (await fetchJson(releaseUrl));
+            const download = resolveUpgradeDownloadFromRelease({
+                release,
+                owner,
+                repo,
+                assetName,
+                checksumName,
+            });
+            if (download.kind === "assets") {
+                bundlePath = path.join(tempRoot, assetName);
+                checksumPath = path.join(tempRoot, checksumName);
+                await downloadToFile(download.bundleUrl, bundlePath);
+                await downloadToFile(download.checksumUrl, checksumPath);
+            }
+            else {
+                process.stderr.write(`${warnMessage(`upgrade release does not include ${assetName}/${checksumName}; falling back to tarball_url without checksum verification`)}\n`);
+                allowNonUpgradePaths = true;
+                bundlePath = path.join(tempRoot, "source.tar.gz");
+                await downloadToFile(download.tarballUrl, bundlePath);
+                checksumPath = "";
+            }
+        }
+        if (checksumPath) {
+            const expected = parseSha256Text(await readFile(checksumPath, "utf8"));
+            if (!expected) {
                 throw new CliError({
-                    exitCode: exitCodeForError("E_NETWORK"),
-                    code: "E_NETWORK",
-                    message: `Upgrade assets not found in ${owner}/${repo} release`,
+                    exitCode: 3,
+                    code: "E_VALIDATION",
+                    message: "Upgrade checksum file is empty or invalid",
+                });
+            }
+            const actual = await sha256File(bundlePath);
+            if (actual !== expected) {
+                throw new CliError({
+                    exitCode: 3,
+                    code: "E_VALIDATION",
+                    message: `Upgrade checksum mismatch (expected ${expected}, got ${actual})`,
                 });
             }
-            bundlePath = path.join(tempRoot, assetName);
-            checksumPath = path.join(tempRoot, checksumName);
-            await downloadToFile(asset.browser_download_url, bundlePath);
-            await downloadToFile(checksumAsset.browser_download_url, checksumPath);
-        }
-        const expected = parseSha256Text(await readFile(checksumPath, "utf8"));
-        if (!expected) {
-            throw new CliError({
-                exitCode: 3,
-                code: "E_VALIDATION",
-                message: "Upgrade checksum file is empty or invalid",
-            });
-        }
-        const actual = await sha256File(bundlePath);
-        if (actual !== expected) {
-            throw new CliError({
-                exitCode: 3,
-                code: "E_VALIDATION",
-                message: `Upgrade checksum mismatch (expected ${expected}, got ${actual})`,
-            });
         }
         extractRoot = await mkdtemp(path.join(os.tmpdir(), "agentplane-upgrade-extract-"));
         await extractArchive({
@@ -387,6 +419,9 @@ export async function cmdUpgradeParsed(opts) {
                 });
             }
             if (!isAllowedUpgradePath(rel)) {
+                if (allowNonUpgradePaths) {
+                    continue;
+                }
                 throw new CliError({
                     exitCode: 3,
                     code: "E_VALIDATION",
@@ -452,6 +487,13 @@ export async function cmdUpgradeParsed(opts) {
                 }
             }
         }
+        if (fileContents.size === 0) {
+            throw new CliError({
+                exitCode: 3,
+                code: "E_VALIDATION",
+                message: "Upgrade bundle contains no applicable files (expected AGENTS.md and/or .agentplane/).",
+            });
+        }
         if (flags.dryRun) {
             process.stdout.write(`Upgrade dry-run: ${additions.length} add, ${updates.length} update, ${skipped.length} unchanged\n`);
             for (const rel of additions)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentplane",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Agent Plane CLI for task workflows, recipes, and project automation.",
   "keywords": [
     "agentplane",
@@ -54,7 +54,7 @@
     "prepublishOnly": "npm run prepack"
   },
   "dependencies": {
-    "@agentplaneorg/core": "0.2.1",
+    "@agentplaneorg/core": "0.2.2",
     "yauzl": "^2.10.0"
   },
   "devDependencies": {