contextecf-codeledger 0.10.18 → 0.10.20

package/README.md

@@ -1,13 +1,13 @@
-# contextecf-codeledger — CodeLedger by ContextECF
+# contextecf-codeledger — CodeLedger
 
 **Deterministic, bounded context selection for AI coding agents.**
-Published by [ContextECF](https://codeledger.dev) (Intelligent Context AI, Inc.).
+Published by [Intelligent Context AI, Inc.](https://codeledger.dev).
 
 This is the **unscoped mirror** of [`@codeledger/cli`](https://www.npmjs.com/package/@codeledger/cli). Both packages install the exact same binary. Use whichever you prefer:
 
 ```bash
-npm install -g contextecf-codeledger   # this package
-npm install -g @codeledger/cli          # scoped original
+npm install -g contextecf-codeledger@latest   # this package
+npm install -g @codeledger/cli@latest          # scoped original
 ```
 
 ## Why two packages?
@@ -22,6 +22,15 @@ codeledger activate --task "describe your task"
 codeledger mcp start   # for Claude Desktop / Cursor MCP integration
 ```
 
+If you installed an earlier CodeLedger version and `codeledger vendor`
+cannot find the standalone runtime, upgrade first and rerun the command:
+
+```bash
+npm install -g contextecf-codeledger@latest
+codeledger init
+codeledger vendor
+```
+
 ## Links
 
 - Website: https://codeledger.dev

package/bin/codeledger.js

@@ -5,8 +5,8 @@
  * This is the unscoped mirror of @codeledger/cli. Both packages install
  * the exact same hardened binary. You can install either:
  *
- *   npm install -g contextecf-codeledger   (this package)
- *   npm install -g @codeledger/cli          (scoped original)
+ *   npm install -g contextecf-codeledger@latest   (this package)
+ *   npm install -g @codeledger/cli@latest          (scoped original)
  *
  * This file contains no engine code. All CodeLedger functionality lives
  * inside the hardened binary downloaded during postinstall.
@@ -52,8 +52,9 @@ if (!existsSync(BINARY_PATH)) {
         '',
         'Options:',
         '  1. Use Rosetta 2 (recommended):',
-        '       arch -arm64 npm install -g contextecf-codeledger',
-        '  2. Use the vendored standalone CLI:',
+        '       arch -arm64 npm install -g contextecf-codeledger@latest',
+        '  2. Update CodeLedger, then use the vendored standalone CLI:',
+        '       npm install -g contextecf-codeledger@latest',
         '       codeledger init   # in your repo, sets up vendored Node.js-based CLI',
         '       ./.codeledger/bin/codeledger --version',
         '  3. Download a binary manually from:',
@@ -67,9 +68,10 @@ if (!existsSync(BINARY_PATH)) {
         '',
         'The postinstall step may have been skipped (e.g. --ignore-scripts).',
         'Recover with one of:',
-        `  1. npm rebuild contextecf-codeledger`,
-        `  2. node "${installerPath}"`,
-        `  3. Re-run the install without --ignore-scripts`,
+        `  1. Upgrade: npm install -g contextecf-codeledger@latest`,
+        `  2. Retry this install: npm rebuild contextecf-codeledger`,
+        `  3. node "${installerPath}"`,
+        `  4. Re-run the install without --ignore-scripts`,
         '',
         'Or download the binary manually from:',
         `  https://github.com/codeledgerECF/codeledger/releases/tag/v${version}`,

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "contextecf-codeledger",
-  "version": "0.10.18",
+  "version": "0.10.20",
   "mcpName": "io.github.codeledgerECF/codeledger",
-  "description": "CodeLedger by ContextECF — deterministic context selection for AI coding agents. This is the unscoped mirror of @codeledger/cli; both install the same binary.",
+  "description": "CodeLedger — deterministic context selection for AI coding agents. This is the unscoped mirror of @codeledger/cli; both install the same binary.",
   "type": "commonjs",
   "bin": {
     "codeledger": "./bin/codeledger.js"
@@ -22,7 +22,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "github:codeledgerECF/codeledger-blackbox"
+    "url": "github:codeledgerECF/codeledger"
   },
   "license": "SEE LICENSE IN LICENSE",
   "keywords": [

package/scripts/postinstall.js

@@ -46,11 +46,10 @@ if (process.env.CODELEDGER_SKIP_POSTINSTALL === '1') {
   process.exit(0);
 }
 
-// Skip when running inside the blackbox monorepo itself (dev mode). The
-// presence of pnpm-workspace.yaml two directories up is a reliable signal
-// that we're not a real end-user install — we're running during `pnpm
-// install` from the workspace root, and the release binary for this
-// version may not even exist yet.
+// Skip when running inside this source workspace (dev mode). The presence of
+// pnpm-workspace.yaml two directories up is a reliable signal that this is not
+// a real end-user install, and the release binary for this version may not
+// exist yet.
 try {
   const path = require('node:path');
   const fs = require('node:fs');
@@ -69,8 +68,7 @@ try {
 // Mac runner on the release CI plan as of 2026-04-09. Intel Mac
 // users hit the "unsupported platform" soft-fail below, which tells
 // them to download manually from the GitHub Release. Re-add when a
-// working Intel Mac runner label exists (see release-dispatch.yml
-// matrix comment).
+// working Intel Mac binary is available.
 const PLATFORM_MAP = {
   'darwin-arm64': 'darwin-arm64',
   'linux-x64': 'linux-x64',
@@ -87,9 +85,9 @@ if (!platformSuffix) {
     console.log('');
     console.log('Options:');
     console.log('  1. Use Rosetta 2 (recommended):');
-    console.log('       arch -arm64 npm install -g contextecf-codeledger');
+    console.log('       arch -arm64 npm install -g contextecf-codeledger@latest');
     console.log('  2. Use the vendored standalone CLI after init:');
-    console.log('       CODELEDGER_SKIP_POSTINSTALL=1 npm install -g contextecf-codeledger');
+    console.log('       CODELEDGER_SKIP_POSTINSTALL=1 npm install -g contextecf-codeledger@latest');
     console.log('       codeledger init   # sets up vendored Node.js-based CLI');
     console.log('  3. Download a binary manually from:');
     console.log(`       https://github.com/codeledgerECF/codeledger/releases/tag/v${version}`);
@@ -104,7 +102,7 @@ if (!platformSuffix) {
       `codeledger: v${version} does not provide a hardened binary for ${platformKey}.`,
     );
     console.error(
-      'codeledger: you can still run from source by cloning the blackbox repo.',
+      'codeledger: you can still use the published source package or a supported release asset.',
     );
   }
   // Fail softly: don't block `npm install` for unsupported platforms. The
@@ -112,13 +110,8 @@ if (!platformSuffix) {
   process.exit(0);
 }
 
-// Binaries are hosted on the PUBLIC codeledgerECF/codeledger repo
-// releases (not the private codeledger-blackbox repo — its release
-// assets are not anonymously downloadable). The release pipeline in
-// codeledger-blackbox builds the binaries, then a promote_binaries
-// job uploads them cross-repo to the public release using a PAT.
-// Users' `npm install -g @codeledger/cli` fetches from the public
-// URL with no auth required.
+// Binaries are hosted on the public CodeLedger GitHub Releases page so
+// `npm install -g @codeledger/cli` can fetch them without authentication.
 const RELEASE_BASE =
   process.env.CODELEDGER_BINARY_URL ||
   `https://github.com/codeledgerECF/codeledger/releases/download/v${version}`;
@@ -181,18 +174,9 @@ function fetchBufferOnce(url, redirectDepth = 0) {
   });
 }
 
-// Retry wrapper that tolerates the post-publish race window.
-//
-// The release pipeline publishes the npm wrapper BEFORE the hardened
-// binaries land on the public GitHub release (see the Phase 1d comment
-// in release-dispatch.yml). For up to ~10 minutes after a user first
-// sees @codeledger/cli@<version> on npm, the hardened binary URL may
-// 404. This wrapper retries 404s with exponential backoff (10s, 20s,
-// 40s, 60s, 60s, 60s, 60s, 60s, 60s, 60s → 450s total) so installs
-// during the race window eventually succeed instead of hard-failing.
-//
-// Non-404 errors (DNS, network, timeouts) fail fast — retrying a DNS
-// failure won't help.
+// Retry wrapper that tolerates the short propagation window where a freshly
+// published package may be visible before all release assets are available.
+// A 404 is retried with exponential backoff; non-404 errors fail fast.
 async function fetchBuffer(url) {
   const backoffs = [10, 20, 40, 60, 60, 60, 60, 60, 60, 60]; // seconds
   let lastErr;
@@ -206,8 +190,9 @@ async function fetchBuffer(url) {
       if (i === backoffs.length) break;
       const wait = backoffs[i];
       console.log(
-        `codeledger:   404 fetching ${url.split('/').pop()} — retrying in ${wait}s ` +
-          `(attempt ${i + 1}/${backoffs.length + 1}, ride race window)`,
+        `codeledger:   Binary pending — new release detected, retrying in ${wait}s ` +
+          `(attempt ${i + 1}/${backoffs.length + 1}). ` +
+          `This is normal for the first ~10 minutes after a release.`,
       );
       await new Promise((r) => setTimeout(r, wait * 1000));
     }
@@ -283,16 +268,17 @@ if (require.main === module) {
     console.error(`codeledger: postinstall failed — ${err.message}`);
     console.error('');
     console.error('Recovery options:');
-    console.error('  1. Retry: npm rebuild @codeledger/cli');
-    console.error('  2. Air-gapped install:');
-    console.error('       CODELEDGER_SKIP_POSTINSTALL=1 npm install -g @codeledger/cli');
+    console.error('  1. Upgrade: npm install -g contextecf-codeledger@latest');
+    console.error('  2. Retry this install: npm rebuild contextecf-codeledger');
+    console.error('  3. Air-gapped install:');
+    console.error('       CODELEDGER_SKIP_POSTINSTALL=1 npm install -g contextecf-codeledger@latest');
     console.error('     then manually place the binary at:');
     console.error(`       ${BINARY_LOCAL_PATH}`);
-    console.error('  3. Use a mirror:');
-    console.error('       CODELEDGER_BINARY_URL=https://your-mirror/path npm install -g @codeledger/cli');
+    console.error('  4. Use a mirror:');
+    console.error('       CODELEDGER_BINARY_URL=https://your-mirror/path npm install -g contextecf-codeledger@latest');
     console.error('');
     console.error(
-      `Manual download: https://github.com/codeledgerECF/codeledger-blackbox/releases/tag/v${version}`,
+      `Manual download: https://github.com/codeledgerECF/codeledger/releases/tag/v${version}`,
     );
     process.exit(1);
   });