crabot 0.1.1 → 0.1.3

package/README.md

@@ -5,11 +5,10 @@ Local-first AI agent runtime with a gateway, operator console, and CLI.
 ## Requirements
 
 `crabot` runs as a self-contained standalone binary with the runtime embedded —
-the program itself needs no Bun or Node install. On install, the package
-downloads the prebuilt binary matching your platform from the matching GitHub
-release and caches it; a small launcher hands off to it (the launcher runs under
-the Node that npm already provides). If the download is skipped at install time,
-it happens automatically on first run.
+the program itself needs no Bun or Node install. The package ships no install
+script; on the first `crabot` run a small launcher (running under the Node that
+npm already provides) downloads the prebuilt binary matching your platform from
+the matching GitHub release, verifies its checksum, and caches it for later runs.
 
 Supported platforms: Linux (x64, arm64), macOS (x64, arm64), Windows (x64).
 

package/bin/crabot.mjs

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 // Launcher for the `crabot` distribution. The real program is a standalone executable (the Bun
-// runtime is embedded) downloaded from the matching GitHub release by the postinstall hook, or
-// lazily here on first run if that was skipped. No Bun or Node runtime is required to run crabot.
+// runtime is embedded) downloaded from the matching GitHub release lazily here on first run (the
+// package ships no install script). No Bun or Node runtime is required to run crabot.
 import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
 import { ensureBinary } from "../scripts/install.mjs";
 
 let binaryPath;
@@ -13,7 +14,18 @@ try {
   process.exit(1);
 }
 
-const child = spawn(binaryPath, process.argv.slice(2), { stdio: "inherit" });
+// The downloaded binary lives at a version-pinned cache path that `npm update` orphans, so its own
+// process.execPath is not a stable launch target. Expose the stable command that re-launches crabot —
+// this launcher under Node, which re-resolves the matching binary on demand — so `crabot service
+// install` writes a service unit that survives upgrades. This launcher path is stable across upgrades
+// (npm replaces the package in place).
+const child = spawn(binaryPath, process.argv.slice(2), {
+  stdio: "inherit",
+  env: {
+    ...process.env,
+    CRABOT_LAUNCH_VECTOR: JSON.stringify([process.execPath, fileURLToPath(import.meta.url)])
+  }
+});
 
 // Forward termination signals so `crabot serve` shuts the gateway down gracefully when a process
 // manager signals this wrapper. Unsupported signal names throw on registration; ignore those.

package/package.json

@@ -1,14 +1,11 @@
 {
   "name": "crabot",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Local-first AI agent runtime with a gateway, operator console, and CLI.",
   "type": "module",
   "bin": {
     "crabot": "bin/crabot.mjs"
   },
-  "scripts": {
-    "postinstall": "node scripts/install.mjs"
-  },
   "files": [
     "bin",
     "scripts",

package/scripts/install.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 // Downloads the crabot standalone binary for the host platform from the GitHub release that matches
-// this package's version, verifies its SHA-256, and caches it. Run by the postinstall hook and
-// lazily by the launcher if the binary is not present yet (e.g. install ran with --ignore-scripts).
-// The binary embeds the Bun runtime, so running crabot needs no Bun or Node install.
+// this package's version, verifies its SHA-256, and caches it. Invoked by the launcher on first run
+// when the binary is not cached yet; the package ships no install script, so nothing runs at install
+// time. The binary embeds the Bun runtime, so running crabot needs no Bun or Node install.
 import { createHash } from "node:crypto";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -74,11 +74,3 @@ export async function ensureBinary() {
   renameSync(temporary, target);
   return target;
 }
-
-if (process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1]) {
-  // postinstall: pre-warm the cache but never fail the install; the launcher retries on first run.
-  ensureBinary().then(
-    (path) => process.stdout.write(`crabot: ready at ${path}\n`),
-    (error) => process.stderr.write(`crabot: will download on first run (${error.message})\n`)
-  );
-}