claudekit-cli 3.34.1-dev.4 → 3.34.1-dev.5

package/dist/index.js

@@ -44585,10 +44585,38 @@ var init_pnpm_detector = __esm(() => {
 });
 
 // src/domains/installation/package-managers/detection-core.ts
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync17, realpathSync } from "node:fs";
 import { chmod as chmod2, mkdir as mkdir6, readFile as readFile13, writeFile as writeFile7 } from "node:fs/promises";
 import { platform as platform4 } from "node:os";
-import { join as join23 } from "node:path";
+import { join as join23, sep } from "node:path";
+function detectFromBinaryPath() {
+  try {
+    const scriptPath = process.argv[1];
+    if (!scriptPath)
+      return "unknown";
+    let resolvedPath;
+    try {
+      resolvedPath = realpathSync(scriptPath);
+    } catch {
+      resolvedPath = scriptPath;
+    }
+    const normalized = resolvedPath.split(sep).join("/").toLowerCase();
+    logger.verbose(`Binary path resolved: ${normalized}`);
+    if (normalized.includes("/.bun/install/") || normalized.includes("/bun/install/global/")) {
+      return "bun";
+    }
+    if (normalized.includes("/pnpm/global/") || normalized.includes("/.local/share/pnpm/")) {
+      return "pnpm";
+    }
+    if (normalized.includes("/yarn/global/") || normalized.includes("/.config/yarn/")) {
+      return "yarn";
+    }
+    if (normalized.includes("/npm/node_modules/") || normalized.includes("/usr/local/lib/node_modules/") || normalized.includes("/usr/lib/node_modules/") || normalized.includes("/opt/homebrew/lib/node_modules/") || normalized.includes("/.nvm/versions/node/") || normalized.includes("/n/versions/node/") || normalized.includes("/appdata/roaming/npm/")) {
+      return "npm";
+    }
+  } catch {}
+  return "unknown";
+}
 function detectFromEnv() {
   const userAgent = process.env.npm_config_user_agent;
   if (userAgent) {
@@ -44605,13 +44633,14 @@ function detectFromEnv() {
   const execPath = process.env.npm_execpath;
   if (execPath) {
     logger.debug(`Detected exec path: ${execPath}`);
-    if (execPath.includes("bun"))
+    const normalizedExec = execPath.replace(/\\/g, "/").toLowerCase();
+    if (/\/bun([/.]|$)/.test(normalizedExec) || normalizedExec.startsWith("bun"))
       return "bun";
-    if (execPath.includes("yarn"))
+    if (/\/yarn([/.]|$)/.test(normalizedExec) || normalizedExec.startsWith("yarn"))
       return "yarn";
-    if (execPath.includes("pnpm"))
+    if (/\/pnpm([/.]|$)/.test(normalizedExec) || normalizedExec.startsWith("pnpm"))
       return "pnpm";
-    if (execPath.includes("npm"))
+    if (/\/npm([/.]|$)/.test(normalizedExec) || normalizedExec.startsWith("npm"))
       return "npm";
   }
   return "unknown";
@@ -44629,8 +44658,8 @@ async function readCachedPm() {
       return null;
     }
     const age = Date.now() - data.detectedAt;
-    if (age > CACHE_TTL) {
-      logger.debug("Cache expired, will re-detect");
+    if (age < 0 || age > CACHE_TTL) {
+      logger.debug(age < 0 ? "Cache timestamp in future, ignoring" : "Cache expired, will re-detect");
       return null;
     }
     const validPms = ["npm", "bun", "yarn", "pnpm"];
@@ -44739,6 +44768,18 @@ var init_package_manager_detector = __esm(() => {
   PackageManagerDetector = class PackageManagerDetector {
     static async detect() {
       logger.verbose("PackageManagerDetector: Starting detection");
+      const binaryPm = detectFromBinaryPath();
+      if (binaryPm !== "unknown") {
+        logger.verbose(`PackageManagerDetector: Detected from binary path: ${binaryPm}`);
+        const cachedPm2 = await readCachedPm();
+        if (cachedPm2 && cachedPm2 !== binaryPm) {
+          logger.verbose(`PackageManagerDetector: Cache says ${cachedPm2}, binary says ${binaryPm} — updating cache`);
+          await saveCachedPm(binaryPm, PackageManagerDetector.getVersion);
+        } else if (!cachedPm2) {
+          await saveCachedPm(binaryPm, PackageManagerDetector.getVersion);
+        }
+        return binaryPm;
+      }
       const envPm = detectFromEnv();
       if (envPm !== "unknown") {
         logger.verbose(`PackageManagerDetector: Detected from env: ${envPm}`);
@@ -45236,7 +45277,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "claudekit-cli",
-    version: "3.34.1-dev.4",
+    version: "3.34.1-dev.5",
     description: "CLI tool for bootstrapping and updating ClaudeKit projects",
     type: "module",
     repository: {
@@ -45551,12 +45592,15 @@ Run 'ck update' to install`, "Update Check");
       s.stop("Update failed");
       const errorMessage = error instanceof Error ? error.message : "Unknown error";
       if (errorMessage.includes("EACCES") || errorMessage.includes("EPERM") || errorMessage.includes("permission") || errorMessage.includes("Access is denied")) {
-        throw new CliUpdateError(`Permission denied. Try: sudo ${updateCmd}
+        const permHint = pm === "npm" ? `
 
-Or fix npm permissions: https://docs.npmjs.com/resolving-eacces-permissions-errors-when-installing-packages-globally`);
+Or fix npm permissions: https://docs.npmjs.com/resolving-eacces-permissions-errors-when-installing-packages-globally` : "";
+        const isWindows3 = process.platform === "win32";
+        const elevationHint = isWindows3 ? `Run your terminal as Administrator and retry: ${updateCmd}` : `sudo ${updateCmd}`;
+        throw new CliUpdateError(`Permission denied. Try: ${elevationHint}${permHint}`);
       }
       logger.error(`Update failed: ${errorMessage}`);
-      logger.info("Try running: npm install -g claudekit-cli@latest");
+      logger.info(`Try running: ${updateCmd}`);
       throw new CliUpdateError(`Update failed: ${errorMessage}
 
 Manual update: ${updateCmd}`);
@@ -66041,7 +66085,7 @@ init_types2();
 
 // src/domains/installation/utils/path-security.ts
 init_types2();
-import { lstatSync as lstatSync2, realpathSync } from "node:fs";
+import { lstatSync as lstatSync2, realpathSync as realpathSync2 } from "node:fs";
 import { relative as relative5, resolve as resolve10 } from "node:path";
 var MAX_EXTRACTION_SIZE = 500 * 1024 * 1024;
 function isPathSafe(basePath, targetPath) {
@@ -66049,7 +66093,7 @@ function isPathSafe(basePath, targetPath) {
   try {
     const stat10 = lstatSync2(targetPath);
     if (stat10.isSymbolicLink()) {
-      const realTarget = realpathSync(targetPath);
+      const realTarget = realpathSync2(targetPath);
       if (!realTarget.startsWith(resolvedBase)) {
         return false;
       }
@@ -73832,7 +73876,7 @@ import { join as join77 } from "node:path";
 
 // src/domains/installation/deletion-handler.ts
 import { existsSync as existsSync35, lstatSync as lstatSync3, readdirSync as readdirSync2, rmSync as rmSync2, rmdirSync, unlinkSync as unlinkSync3 } from "node:fs";
-import { dirname as dirname14, join as join64, relative as relative7, resolve as resolve12, sep } from "node:path";
+import { dirname as dirname14, join as join64, relative as relative7, resolve as resolve12, sep as sep2 } from "node:path";
 
 // src/services/file-operations/manifest/manifest-reader.ts
 init_metadata_migration();
@@ -74071,7 +74115,7 @@ function cleanupEmptyDirectories(filePath, claudeDir2) {
 function deletePath(fullPath, claudeDir2) {
   const normalizedPath = resolve12(fullPath);
   const normalizedClaudeDir = resolve12(claudeDir2);
-  if (!normalizedPath.startsWith(`${normalizedClaudeDir}${sep}`) && normalizedPath !== normalizedClaudeDir) {
+  if (!normalizedPath.startsWith(`${normalizedClaudeDir}${sep2}`) && normalizedPath !== normalizedClaudeDir) {
     throw new Error(`Path traversal detected: ${fullPath}`);
   }
   try {
@@ -74145,7 +74189,7 @@ async function handleDeletions(sourceMetadata, claudeDir2) {
     const fullPath = join64(claudeDir2, path11);
     const normalizedPath = resolve12(fullPath);
     const normalizedClaudeDir = resolve12(claudeDir2);
-    if (!normalizedPath.startsWith(`${normalizedClaudeDir}${sep}`)) {
+    if (!normalizedPath.startsWith(`${normalizedClaudeDir}${sep2}`)) {
       logger.warning(`Skipping invalid path: ${path11}`);
       result.errors.push(path11);
       continue;
@@ -75168,8 +75212,8 @@ var path11 = {
   win32: { sep: "\\" },
   posix: { sep: "/" }
 };
-var sep2 = defaultPlatform === "win32" ? path11.win32.sep : path11.posix.sep;
-minimatch.sep = sep2;
+var sep3 = defaultPlatform === "win32" ? path11.win32.sep : path11.posix.sep;
+minimatch.sep = sep3;
 var GLOBSTAR = Symbol("globstar **");
 minimatch.GLOBSTAR = GLOBSTAR;
 var qmark2 = "[^/]";
@@ -82330,7 +82374,7 @@ async function detectInstallations() {
 
 // src/commands/uninstall/removal-handler.ts
 import { readdirSync as readdirSync5, rmSync as rmSync5 } from "node:fs";
-import { join as join99, resolve as resolve19, sep as sep3 } from "node:path";
+import { join as join99, resolve as resolve19, sep as sep4 } from "node:path";
 init_logger();
 init_safe_prompts();
 init_safe_spinner();
@@ -82473,7 +82517,7 @@ async function isPathSafeToRemove(filePath, baseDir) {
   try {
     const resolvedPath = resolve19(filePath);
     const resolvedBase = resolve19(baseDir);
-    if (!resolvedPath.startsWith(resolvedBase + sep3) && resolvedPath !== resolvedBase) {
+    if (!resolvedPath.startsWith(resolvedBase + sep4) && resolvedPath !== resolvedBase) {
       logger.debug(`Path outside installation directory: ${filePath}`);
       return false;
     }
@@ -82481,7 +82525,7 @@ async function isPathSafeToRemove(filePath, baseDir) {
     if (stats.isSymbolicLink()) {
       const realPath = await import_fs_extra37.realpath(filePath);
       const resolvedReal = resolve19(realPath);
-      if (!resolvedReal.startsWith(resolvedBase + sep3) && resolvedReal !== resolvedBase) {
+      if (!resolvedReal.startsWith(resolvedBase + sep4) && resolvedReal !== resolvedBase) {
         logger.debug(`Symlink points outside installation directory: ${filePath} -> ${realPath}`);
         return false;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "claudekit-cli",
-	"version": "3.34.1-dev.4",
+	"version": "3.34.1-dev.5",
 	"description": "CLI tool for bootstrapping and updating ClaudeKit projects",
 	"type": "module",
 	"repository": {