codo-ai 2.23.12 → 2.23.13

package/README.md

@@ -100,6 +100,8 @@ npx codo-ai
 
 Requirements: Node 18+ or Bun · macOS / Linux / Windows · any provider API key (Anthropic, OpenAI, NVIDIA free tier, Google, or OpenAI-compatible).
 
+> No extra flags needed: the install works out of the box even when install scripts are blocked (`allowScripts` policies, `--ignore-scripts`), because the launcher resolves the prebuilt platform binary automatically on first run.
+
 > Migrating from `@codo-ai/cli`? That package is deprecated — `codo-ai` replaces it.
 
 ## Documentation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codo-ai",
-  "description": "The security-native AI coding agent. Six Sec-Test security personas, compliance-first /scraper, a business documents & research suite, and multi-agent Compose orchestration — spec-driven workflow engines in one terminal-first CLI.",
+  "description": "The security-native AI coding agent. Six Sec-Test security personas, compliance-first /scraper, a business documents & research suite, and multi-agent Compose orchestration - spec-driven workflow engines in one terminal-first CLI.",
   "keywords": [
     "ai",
     "coding-agent",
@@ -32,7 +32,7 @@
   "scripts": {
     "postinstall": "node ./postinstall.mjs"
   },
-  "version": "2.23.12",
+  "version": "2.23.13",
   "license": "MIT",
   "os": [
     "darwin",
@@ -44,17 +44,17 @@
     "x64"
   ],
   "optionalDependencies": {
-    "@codo-ai/codo-windows-x64-baseline": "2.23.12",
-    "@codo-ai/codo-windows-x64": "2.23.12",
-    "@codo-ai/codo-windows-arm64": "2.23.12",
-    "@codo-ai/codo-linux-x64-musl": "2.23.12",
-    "@codo-ai/codo-linux-x64-baseline-musl": "2.23.12",
-    "@codo-ai/codo-linux-x64-baseline": "2.23.12",
-    "@codo-ai/codo-linux-x64": "2.23.12",
-    "@codo-ai/codo-linux-arm64-musl": "2.23.12",
-    "@codo-ai/codo-linux-arm64": "2.23.12",
-    "@codo-ai/codo-darwin-x64-baseline": "2.23.12",
-    "@codo-ai/codo-darwin-x64": "2.23.12",
-    "@codo-ai/codo-darwin-arm64": "2.23.12"
+    "@codo-ai/codo-windows-x64-baseline": "2.23.13",
+    "@codo-ai/codo-windows-x64": "2.23.13",
+    "@codo-ai/codo-windows-arm64": "2.23.13",
+    "@codo-ai/codo-linux-x64-musl": "2.23.13",
+    "@codo-ai/codo-linux-x64-baseline-musl": "2.23.13",
+    "@codo-ai/codo-linux-x64-baseline": "2.23.13",
+    "@codo-ai/codo-linux-x64": "2.23.13",
+    "@codo-ai/codo-linux-arm64-musl": "2.23.13",
+    "@codo-ai/codo-linux-arm64": "2.23.13",
+    "@codo-ai/codo-darwin-x64-baseline": "2.23.13",
+    "@codo-ai/codo-darwin-x64": "2.23.13",
+    "@codo-ai/codo-darwin-arm64": "2.23.13"
   }
-}
+}

package/postinstall.mjs

@@ -171,22 +171,39 @@ function copyBinary(source, target) {
   fs.chmodSync(target, 0o755)
 }
 
-function verifyBinary() {
-  const result = childProcess.spawnSync(targetBinary, ["--version"], {
-    encoding: "utf8",
-    stdio: "ignore",
-    windowsHide: true,
-  })
-  return result.status === 0
+function verifyBinary(target = targetBinary) {
+  try {
+    const result = childProcess.spawnSync(target, ["--version"], {
+      encoding: "utf8",
+      stdio: "ignore",
+      windowsHide: true,
+    })
+    return result.status === 0
+  } catch {
+    return false
+  }
 }
 
 function main() {
+  // Fast path: npm installs optionalDependencies by default, so the platform
+  // binary is usually already on disk. The launcher resolves it at runtime,
+  // so there is nothing to copy — just validate it actually runs.
   for (const name of packageNames()) {
     try {
-      copyBinary(resolveBinary(name), targetBinary)
-      if (verifyBinary()) return
+      if (verifyBinary(resolveBinary(name))) return
     } catch {
+      // Package not installed; try the next candidate, then the fallback below.
+    }
+  }
+
+  // Fallback: the platform package is missing (isolated pnpm layouts,
+  // --no-optional installs). Fetch it into a temp dir and stage the binary
+  // next to the launcher, where the launcher looks for it.
+  for (const name of packageNames()) {
+    try {
       if (installPackage(name) && verifyBinary()) return
+    } catch {
+      // Try the next candidate.
     }
   }