anymous 1.6.8 → 1.6.10

package/bin/anymous.mjs

@@ -1,24 +1,16 @@
 #!/usr/bin/env node
 
 import { spawnSync } from "child_process"
-import fs from "fs"
-import path from "path"
-import { fileURLToPath } from "url"
+import { ensureBinary } from "../postinstall.mjs"
 
-const __dirname = path.dirname(fileURLToPath(import.meta.url))
-const binaryPath = path.join(__dirname, "anymous.exe")
-
-if (!fs.existsSync(binaryPath)) {
-  console.error(
-    "Error: anymous binary not found at",
-    binaryPath,
-    "\n\nThis occurs when using --ignore-scripts during installation, or when using a",
-    "\npackage manager like pnpm that does not run postinstall scripts by default.",
-  )
+const binary = ensureBinary()
+if (!binary) {
+  console.error("Error: no anymous binary is available for this platform.")
+  console.error("Install a supported platform or build from source: https://github.com/anymousdark/anymous")
   process.exit(1)
 }
 
-const result = spawnSync(binaryPath, process.argv.slice(2), {
+const result = spawnSync(binary, process.argv.slice(2), {
   stdio: "inherit",
   windowsHide: true,
 })

package/index.js

@@ -1,10 +1,10 @@
 "use strict";
-// anymous is distributed as native platform binaries selected at install time
-// via optionalDependencies + postinstall. This entry point exists so package
-// analyzers can resolve the module; consumers should use the "anymous" bin.
+// anymous is distributed as native platform binaries resolved at first run
+// via optionalDependencies (no install scripts). This entry point exists so
+// package analyzers can resolve the module; consumers should use the "anymous" bin.
 module.exports = {
   name: "anymous",
-  version: "1.6.8",
+  version: "1.6.10",
   description: "AI-powered reverse engineering platform",
   bin: "bin/anymous.mjs",
 };

package/package.json

@@ -5,10 +5,7 @@
   "bin": {
     "anymous": "./bin/anymous.mjs"
   },
-  "scripts": {
-    "postinstall": "node ./postinstall.mjs"
-  },
-  "version": "1.6.8",
+  "version": "1.6.10",
   "description": "AI-powered reverse engineering platform",
   "license": "MIT",
   "homepage": "https://github.com/anymousdark/anymous",
@@ -26,6 +23,6 @@
     "x64"
   ],
   "optionalDependencies": {
-    "anymous-windows-x64": "1.6.8"
+    "anymous-windows-x64": "1.6.10"
   }
 }

package/postinstall.mjs

@@ -127,14 +127,15 @@ function installPackage(name) {
   const version = packageJson.optionalDependencies?.[name]
   if (!version) return
 
-  // On Windows, bare "npm" is not an executable (npm.cmd is).
+  // NOTE: .cmd launchers require shell:true on Windows (spawnSync fails with
+  // EINVAL otherwise); windowsHide keeps the popup console away.
   const npmBin = process.platform === "win32" ? "npm.cmd" : "npm"
   const temp = fs.mkdtempSync(path.join(os.tmpdir(), "anymous-install-"))
   try {
     const result = childProcess.spawnSync(
       npmBin,
       ["install", "--ignore-scripts", "--no-save", "--loglevel=error", "--prefix", temp, `${name}@${version}`],
-      { stdio: "inherit", windowsHide: true },
+      { stdio: "inherit", windowsHide: true, shell: process.platform === "win32" },
     )
     if (result.status !== 0) return
     const packageDir = path.join(temp, "node_modules", name)
@@ -183,7 +184,19 @@ function copySkills() {
   return true
 }
 
-function main() {
+import { pathToFileURL } from "url"
+
+/**
+ * Ensures a verified platform binary exists at bin/anymous.exe and returns
+ * its path, or undefined when no binary could be obtained.
+ *
+ * Resolution order (no install scripts involved, so npm allow-scripts gating,
+ * pnpm strict mode and --omit=optional all keep working):
+ *  1. optionalDependency installed alongside the wrapper,
+ *  2. previously fetched copy,
+ *  3. on-demand fetch from the npm registry (retried every run until present).
+ */
+export function ensureBinary() {
   for (const name of packageNames()) {
     try {
       copyBinary(resolveBinary(name), targetBinary)
@@ -193,24 +206,40 @@ function main() {
     }
   }
 
-  if (!fs.existsSync(targetBinary)) {
+  if (!fs.existsSync(targetBinary)) return undefined
+
+  try {
+    copySkills()
+  } catch (error) {
+    console.error("anymous: could not install bundled skills:", error.message)
+  }
+  return targetBinary
+}
+
+function main() {
+  const binary = ensureBinary()
+  if (!binary) {
     throw new Error(
       `It seems your package manager failed to install the right anymous CLI package. Try manually installing ${packageNames()
         .map((name) => JSON.stringify(name))
         .join(" or ")}.`,
     )
   }
+}
 
+const invokedDirectly = (() => {
   try {
-    copySkills()
-  } catch (error) {
-    console.error("anymous: could not install bundled skills:", error.message)
+    return !!process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href
+  } catch {
+    return false
   }
-}
+})()
 
-try {
-  main()
-} catch (error) {
-  console.error(error.message)
-  process.exit(1)
+if (invokedDirectly) {
+  try {
+    main()
+  } catch (error) {
+    console.error(error.message)
+    process.exit(1)
+  }
 }