browser4-cli 0.1.6 → 0.1.7

package/README.md

@@ -1,4 +1,4 @@
-# Browser4 CLI
+# Browser4
 
 Make websites accessible for AI agents. Automate tasks online with ease.
 
@@ -53,16 +53,6 @@ pnpm link --global  # Makes browser4-cli available globally
 - **Java 17+** - Required to run the Browser4 backend (`Browser4.jar`).
 - **Rust** - Only needed when building from source (see From Source above).
 
-
-
-
-
-
-
-
-
-
-
 ## Usage
 
 ```
@@ -365,6 +355,41 @@ cargo test --test e2e -- --nocapture
 cargo test --test e2e -- --nocapture --scenario=test_e2e_batch_form_submission
 ```
 
+## Publishing the CLI package
+
+For maintainers, the CLI package now uses an npm version guard before publish.
+
+The GitHub release workflow publishes the npm package via npm trusted publishing
+(GitHub Actions OIDC) instead of `NODE_AUTH_TOKEN`. This avoids CI failures caused
+by npm one-time-password challenges (`EOTP`).
+
+- Local release entrypoint: `npm run release`
+- Direct guarded publish entrypoint: `npm run publish:if-needed`
+- GitHub release workflow: re-checks npm immediately before the publish step
+
+If the local version in `cli/package.json` already matches the version currently
+published on npm, the publish step is skipped automatically.
+
+Examples:
+
+```bash
+# Check whether npm publish is needed
+node scripts/check-npm-publish-needed.js --json
+
+# Publish only when the local version differs from npm
+npm run publish:if-needed
+
+# Standard maintainer release command (also guarded)
+npm run release
+```
+
+For local testing, you can override the detected remote version:
+
+```bash
+BROWSER4_CLI_NPM_REMOTE_VERSION=0.1.7 node scripts/check-npm-publish-needed.js --json
+BROWSER4_CLI_NPM_REMOTE_VERSION=0.1.7 node scripts/publish-if-needed.js --dry-run
+```
+
 ## License
 
 Apache-2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser4-cli",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Browser automation CLI for AI agents",
   "type": "module",
   "files": [
@@ -22,7 +22,8 @@
     "build:windows": "npm run version:sync && docker compose -f docker/docker-compose.yml run --rm build-windows",
     "build:all-platforms": "npm run version:sync && (npm run build:linux & npm run build:windows & wait)",
     "build:docker": "docker build -t browser4-builder -f docker/Dockerfile.build .",
-    "release": "npm run version:sync && npm run build:all-platforms && npm publish",
+    "publish:if-needed": "node scripts/publish-if-needed.js",
+    "release": "npm run publish:if-needed",
     "postinstall": "node scripts/postinstall.js"
   },
   "keywords": [
@@ -45,8 +46,5 @@
     "url": "https://github.com/platonai/Browser4/issues"
   },
   "homepage": "https://browser4.io",
-  "packageManager": "pnpm@10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be",
-  "dependencies": {
-    "browser4-cli": "^0.1.5"
-  }
+  "packageManager": "pnpm@10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be"
 }

package/scripts/check-npm-publish-needed.js

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+
+import { appendFileSync } from 'fs';
+import { getPublishDecision, logPublishDecision } from './npm-publish-check.js';
+
+const args = new Set(process.argv.slice(2));
+const shouldWriteGithubOutput = args.has('--github-output');
+const shouldPrintJson = args.has('--json');
+const shouldPrintJsonOnly = args.has('--json-only');
+const shouldPrintShell = args.has('--shell');
+const decision = getPublishDecision();
+
+if (!shouldPrintJsonOnly && !shouldPrintShell) {
+  logPublishDecision('check', decision);
+}
+
+if (shouldPrintJson) {
+  console.log(JSON.stringify(decision));
+}
+
+if (shouldPrintJsonOnly) {
+  console.log(JSON.stringify(decision));
+}
+
+if (shouldPrintShell) {
+  console.log(`PACKAGE_NAME='${decision.packageName}'`);
+  console.log(`CLI_VERSION='${decision.cliVersion}'`);
+  console.log(`REMOTE_VERSION='${decision.remoteVersion}'`);
+  console.log(`LOOKUP_STATUS='${decision.lookupStatus}'`);
+  console.log(`SHOULD_PUBLISH='${decision.shouldPublish ? 'true' : 'false'}'`);
+}
+
+if (shouldWriteGithubOutput) {
+  const githubOutputPath = process.env.GITHUB_OUTPUT;
+  if (!githubOutputPath) {
+    console.error('GITHUB_OUTPUT is required when using --github-output');
+    process.exit(1);
+  }
+
+  appendFileSync(
+    githubOutputPath,
+    [
+      `package_name=${decision.packageName}`,
+      `cli_version=${decision.cliVersion}`,
+      `remote_version=${decision.remoteVersion}`,
+      `lookup_status=${decision.lookupStatus}`,
+      `should_publish=${decision.shouldPublish ? 'true' : 'false'}`,
+      '',
+    ].join('\n')
+  );
+}
+
+if (!decision.shouldPublish && !shouldPrintJsonOnly && !shouldPrintShell) {
+  console.log(`Skipping publish because ${decision.packageName}@${decision.cliVersion} already exists on npm.`);
+}
+

package/scripts/npm-publish-check.js

@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+
+import { execSync } from 'child_process';
+import { readFileSync } from 'fs';
+import { dirname, join } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export const cliRootDir = join(__dirname, '..');
+const packageJsonPath = join(cliRootDir, 'package.json');
+
+/**
+ * Reads browser4-cli package metadata.
+ *
+ * @returns {{name: string, version: string}}
+ */
+export function readPackageMetadata() {
+  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf-8'));
+  return {
+    name: packageJson.name,
+    version: packageJson.version,
+  };
+}
+
+/**
+ * Queries npm for the published version of the package.
+ *
+ * @param {string} packageName Package name to inspect.
+ * @returns {{status: string, version: string}}
+ */
+export function getRemoteVersion(packageName) {
+  const overriddenVersion = process.env.BROWSER4_CLI_NPM_REMOTE_VERSION;
+  if (overriddenVersion) {
+    console.log(`Using overridden npm version from BROWSER4_CLI_NPM_REMOTE_VERSION=${overriddenVersion}`);
+    return {
+      status: 'overridden',
+      version: overriddenVersion,
+    };
+  }
+
+  try {
+    const version = execSync(`npm view "${packageName}" version`, {
+      cwd: cliRootDir,
+      stdio: ['ignore', 'pipe', 'pipe'],
+      encoding: 'utf-8',
+    }).trim();
+
+    return {
+      status: 'success',
+      version,
+    };
+  } catch (error) {
+    const stderr = error.stderr?.toString().trim();
+    const stdout = error.stdout?.toString().trim();
+    const message = stderr || stdout || error.message;
+
+    console.warn(`Warning: unable to query npm version for ${packageName}: ${message}`);
+    return {
+      status: 'failed',
+      version: 'unknown',
+    };
+  }
+}
+
+/**
+ * Computes whether npm publish should proceed.
+ *
+ * @returns {{packageName: string, cliVersion: string, remoteVersion: string, lookupStatus: string, shouldPublish: boolean}}
+ */
+export function getPublishDecision() {
+  const metadata = readPackageMetadata();
+  const remoteInfo = getRemoteVersion(metadata.name);
+
+  return {
+    packageName: metadata.name,
+    cliVersion: metadata.version,
+    remoteVersion: remoteInfo.version,
+    lookupStatus: remoteInfo.status,
+    shouldPublish: remoteInfo.version === 'unknown' || metadata.version !== remoteInfo.version,
+  };
+}
+
+/**
+ * Logs a human-readable publish decision.
+ *
+ * @param {string} phase Current phase label.
+ * @param {{packageName: string, cliVersion: string, remoteVersion: string, lookupStatus: string, shouldPublish: boolean}} decision Publish decision.
+ */
+export function logPublishDecision(phase, decision) {
+  console.log(
+    `[${phase}] package=${decision.packageName} local=${decision.cliVersion} remote=${decision.remoteVersion} status=${decision.lookupStatus} shouldPublish=${decision.shouldPublish}`
+  );
+}
+

package/scripts/publish-if-needed.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+
+/**
+ * Publishes browser4-cli only when the local package version differs from npm.
+ *
+ * Usage:
+ *   node scripts/publish-if-needed.js
+ *   node scripts/publish-if-needed.js --dry-run
+ *
+ * Optional env for testing:
+ *   BROWSER4_CLI_NPM_REMOTE_VERSION=<version>
+ */
+
+import { execSync } from 'child_process';
+import { cliRootDir, getPublishDecision, logPublishDecision } from './npm-publish-check.js';
+
+const args = new Set(process.argv.slice(2));
+const isDryRun = args.has('--dry-run');
+
+function runCommand(command) {
+  console.log(`> ${command}`);
+  execSync(command, {
+    cwd: cliRootDir,
+    stdio: 'inherit',
+  });
+}
+
+function main() {
+  const initialDecision = getPublishDecision();
+  logPublishDecision('pre-check', initialDecision);
+
+  if (!initialDecision.shouldPublish) {
+    console.log(`Skipping publish because ${initialDecision.packageName}@${initialDecision.cliVersion} already exists on npm.`);
+    return;
+  }
+
+  if (isDryRun) {
+    console.log('Dry run enabled; version differs, so publish would proceed.');
+    return;
+  }
+
+  runCommand('npm run version:sync');
+
+  const postSyncDecision = getPublishDecision();
+  logPublishDecision('post-sync-check', postSyncDecision);
+
+  if (!postSyncDecision.shouldPublish) {
+    console.log(`Skipping publish after sync because ${postSyncDecision.packageName}@${postSyncDecision.cliVersion} already exists on npm.`);
+    return;
+  }
+
+  runCommand('npm run build:all-platforms');
+
+  const prePublishDecision = getPublishDecision();
+  logPublishDecision('pre-publish-check', prePublishDecision);
+
+  if (!prePublishDecision.shouldPublish) {
+    console.log(`Skipping publish before npm publish because ${prePublishDecision.packageName}@${prePublishDecision.cliVersion} already exists on npm.`);
+    return;
+  }
+
+  runCommand('npm publish');
+}
+
+main();
+