arena-bridge 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project are documented here.
 The format follows [Keep a Changelog](https://keepachangelog.com/) and the project uses
 [Semantic Versioning](https://semver.org/).
 
+## 0.5.2
+
+### Fixed
+- `arena-bridge update` now replaces the very installation it runs from (the npm prefix is
+  detected), survives a tarball install that left a conflicting link, and retries when the
+  registry metadata is ahead of the tarball.
+
 ## 0.5.1
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arena-bridge",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Give a cloud AI agent (Arena.ai Agent Mode, Claude, Cursor, ...) controlled access to your own machine over HTTP/MCP: files, shell, Chrome and the macOS desktop, with an approval gate, trust windows and an audit log.",
   "type": "module",
   "bin": {

package/src/direct.mjs

@@ -29,7 +29,7 @@ export function createDirectServer(cfg, engine) {
           ok: true,
           mode: 'direct',
           device: cfg.device,
-          version: '0.5.1',
+          version: '0.5.2',
           uptime_sec: Math.round(process.uptime()),
         });
       }

package/src/hub.mjs

@@ -90,7 +90,7 @@ export function createHubServer(cfg) {
         return sendJson(res, 200, {
           ok: true,
           mode: 'hub',
-          version: '0.5.1',
+          version: '0.5.2',
           devices: [...devices.keys()],
         });
       }

package/src/mcp.mjs

@@ -48,7 +48,7 @@ export async function handleMcp(req, res, ctx) {
           mcpResponse(id, {
             protocolVersion: PROTOCOL_VERSION,
             capabilities: { tools: { listChanged: false } },
-            serverInfo: { name: 'arena-bridge', version: '0.5.1' },
+            serverInfo: { name: 'arena-bridge', version: '0.5.2' },
             instructions:
               'Tools operate the user\'s own machine. Dangerous operations may return ' +
               'PROTECTED and require a local human approval.',

package/src/selfupdate.mjs

@@ -6,6 +6,21 @@ import { fileURLToPath } from 'node:url';
 const require = createRequire(import.meta.url);
 const PKG = 'arena-bridge';
 
+/** The npm prefix the current installation lives in, so an update replaces this very copy. */
+export function installPrefix() {
+  try {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const parts = here.split(path.sep);
+    const idx = parts.lastIndexOf('node_modules');
+    if (idx < 1) return null;
+    let prefix = parts.slice(0, idx).join(path.sep);
+    if (prefix.endsWith(`${path.sep}lib`)) prefix = prefix.slice(0, -4);
+    return prefix || null;
+  } catch {
+    return null;
+  }
+}
+
 export function packageInfo() {
   try {
     const here = path.dirname(fileURLToPath(import.meta.url));
@@ -65,7 +80,24 @@ export async function selfUpdate({ dryRun = false } = {}) {
   if (dryRun) {
     return { ok: true, upToDate: false, installed: info.version, latest, command: `npm i -g ${PKG}@latest` };
   }
-  const res = await run('npm', ['i', '-g', `${PKG}@latest`]);
+  const prefix = installPrefix();
+  const install = (extra = []) =>
+    run('npm', ['i', '-g', ...(prefix ? ['--prefix', prefix] : []), ...extra, `${PKG}@${latest}`]);
+
+  let res = await run('npm', ['i', '-g', ...(prefix ? ['--prefix', prefix] : []), `${PKG}@latest`]);
+  if (!res.ok && /notarget|ETARGET|No matching version/i.test(res.stderr || '')) {
+    // the registry metadata can be ahead of the tarball for a moment after a publish
+    await new Promise((r) => setTimeout(r, 15000));
+    res = await install();
+  }
+  if (!res.ok && /EEXIST|already exists/i.test(res.stderr || '')) {
+    // a previous install from a tarball leaves a conflicting link in the global bin
+    res = await run('npm', ['i', '-g', ...(prefix ? ['--prefix', prefix] : []), '--force', `${PKG}@${latest}`]);
+    if (!res.ok) {
+      await run('npm', ['rm', '-g', ...(prefix ? ['--prefix', prefix] : []), PKG]);
+      res = await install();
+    }
+  }
   if (!res.ok) {
     return {
       ok: false,