crabot 0.1.3 → 0.1.5

package/README.md

@@ -4,13 +4,16 @@ Local-first AI agent runtime with a gateway, operator console, and CLI.
 
 ## Requirements
 
-`crabot` runs as a self-contained standalone binary with the runtime embedded —
-the program itself needs no Bun or Node install. The package ships no install
-script; on the first `crabot` run a small launcher (running under the Node that
-npm already provides) downloads the prebuilt binary matching your platform from
-the matching GitHub release, verifies its checksum, and caches it for later runs.
-
-Supported platforms: Linux (x64, arm64), macOS (x64, arm64), Windows (x64).
+`crabot` is a self-contained standalone binary with the runtime embedded — it
+needs no Bun or Node install. The package bundles the binary directly (a small
+Node launcher execs it), so installing it downloads nothing extra and runs no
+install scripts.
+
+**Currently macOS arm64 only.** Other platforms are not yet published; build
+from source at [the repository](https://github.com/gotry-io/Crabot). A macOS
+arm64 binary is also attached to each
+[GitHub release](https://github.com/gotry-io/Crabot/releases) for direct
+download.
 
 ## Install
 

package/bin/crabot.mjs

@@ -1,31 +1,32 @@
 #!/usr/bin/env node
-// Launcher for the `crabot` distribution. The real program is a standalone executable (the Bun
-// runtime is embedded) downloaded from the matching GitHub release lazily here on first run (the
-// package ships no install script). No Bun or Node runtime is required to run crabot.
+// Launcher for the `crabot` distribution. The macOS arm64 standalone binary (the Bun runtime is
+// embedded) is bundled in this package under vendor/, so there is nothing to download and crabot
+// needs no extra runtime. Only macOS arm64 is shipped today; other platforms build from source.
 import { spawn } from "node:child_process";
+import { chmodSync } from "node:fs";
+import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ensureBinary } from "../scripts/install.mjs";
 
-let binaryPath;
-try {
-  binaryPath = await ensureBinary();
-} catch (error) {
-  process.stderr.write(`${error.message}\n`);
+if (process.platform !== "darwin" || process.arch !== "arm64") {
+  process.stderr.write(
+    `crabot currently ships only a macOS arm64 build (detected ${process.platform}-${process.arch}). ` +
+    `Build from source: https://github.com/gotry-io/Crabot\n`
+  );
   process.exit(1);
 }
 
-// The downloaded binary lives at a version-pinned cache path that `npm update` orphans, so its own
-// process.execPath is not a stable launch target. Expose the stable command that re-launches crabot —
-// this launcher under Node, which re-resolves the matching binary on demand — so `crabot service
-// install` writes a service unit that survives upgrades. This launcher path is stable across upgrades
-// (npm replaces the package in place).
-const child = spawn(binaryPath, process.argv.slice(2), {
-  stdio: "inherit",
-  env: {
-    ...process.env,
-    CRABOT_LAUNCH_VECTOR: JSON.stringify([process.execPath, fileURLToPath(import.meta.url)])
-  }
-});
+const binaryPath = join(dirname(fileURLToPath(import.meta.url)), "..", "vendor", "crabot");
+
+// npm does not reliably preserve the executable bit on bundled (non-bin) files, so set it before
+// launching; ignore failures (already executable, or a read-only install — spawn will surface a real
+// problem).
+try {
+  chmodSync(binaryPath, 0o755);
+} catch {
+  // best effort
+}
+
+const child = spawn(binaryPath, process.argv.slice(2), { stdio: "inherit" });
 
 // Forward termination signals so `crabot serve` shuts the gateway down gracefully when a process
 // manager signals this wrapper. Unsupported signal names throw on registration; ignore those.

package/package.json

@@ -1,14 +1,20 @@
 {
   "name": "crabot",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Local-first AI agent runtime with a gateway, operator console, and CLI.",
   "type": "module",
   "bin": {
     "crabot": "bin/crabot.mjs"
   },
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "arm64"
+  ],
   "files": [
     "bin",
-    "scripts",
+    "vendor",
     "README.md",
     "LICENSE"
   ],

package/scripts/install.mjs

@@ -1,76 +0,0 @@
-#!/usr/bin/env node
-// Downloads the crabot standalone binary for the host platform from the GitHub release that matches
-// this package's version, verifies its SHA-256, and caches it. Invoked by the launcher on first run
-// when the binary is not cached yet; the package ships no install script, so nothing runs at install
-// time. The binary embeds the Bun runtime, so running crabot needs no Bun or Node install.
-import { createHash } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
-const { version } = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
-const repository = "gotry-io/Crabot";
-
-// process.platform-process.arch -> GitHub release asset name.
-const assets = {
-  "linux-x64": "crabot-linux-x64",
-  "linux-arm64": "crabot-linux-arm64",
-  "darwin-x64": "crabot-macos-x64",
-  "darwin-arm64": "crabot-macos-arm64",
-  "win32-x64": "crabot-windows-x64.exe"
-};
-
-function cachedBinaryPath() {
-  const base = process.platform === "win32"
-    ? process.env.LOCALAPPDATA || join(homedir(), "AppData", "Local")
-    : process.env.XDG_CACHE_HOME || join(homedir(), ".cache");
-  const name = process.platform === "win32" ? "crabot.exe" : "crabot";
-  return join(base, "crabot", `v${version}`, name);
-}
-
-async function fetchBuffer(url) {
-  const response = await fetch(url, { redirect: "follow" });
-  if (!response.ok) {
-    throw new Error(`request failed (${response.status}) for ${url}`);
-  }
-
-  return Buffer.from(await response.arrayBuffer());
-}
-
-export async function ensureBinary() {
-  const target = cachedBinaryPath();
-  if (existsSync(target)) {
-    return target;
-  }
-
-  const key = `${process.platform}-${process.arch}`;
-  const asset = assets[key];
-  if (asset === undefined) {
-    throw new Error(`crabot: no prebuilt binary for ${key}. See https://github.com/${repository}/releases`);
-  }
-
-  const base = `https://github.com/${repository}/releases/download/v${version}`;
-  process.stderr.write(`crabot: downloading ${asset} (v${version})...\n`);
-  const [binary, checksum] = await Promise.all([
-    fetchBuffer(`${base}/${asset}`),
-    fetchBuffer(`${base}/${asset}.sha256`).then((buffer) => buffer.toString("utf8"))
-  ]);
-
-  const expected = checksum.trim().split(/\s+/u)[0];
-  const actual = createHash("sha256").update(binary).digest("hex");
-  if (expected !== actual) {
-    throw new Error(`crabot: checksum mismatch for ${asset} (expected ${expected}, got ${actual})`);
-  }
-
-  mkdirSync(dirname(target), { recursive: true });
-  // Write to a sibling temp file then rename, so a concurrent install never sees a partial binary.
-  const temporary = `${target}.${process.pid}.download`;
-  writeFileSync(temporary, binary);
-  if (process.platform !== "win32") {
-    chmodSync(temporary, 0o755);
-  }
-  renameSync(temporary, target);
-  return target;
-}