crabot 0.1.4 → 0.1.5

package/README.md

@@ -4,19 +4,16 @@ Local-first AI agent runtime with a gateway, operator console, and CLI.
 
 ## Requirements
 
-`crabot` runs as a self-contained standalone binary with the runtime embedded —
-the program itself needs no Bun or Node install. The package ships no install
-script; on the first `crabot` run a small launcher (running under the Node that
-npm already provides) downloads the prebuilt binary matching your platform from
-the matching GitHub release, verifies its checksum, unpacks it (the asset is
-zstd-compressed — ~16 MB to download vs ~63 MB on disk), and caches it for later
-runs. Unpacking uses `node:zlib`, so the launcher needs **Node ≥ 22.15**.
-
-Supported platforms: Linux (x64, arm64), macOS (x64, arm64), Windows (x64).
-
-If you are on an older Node, download the standalone binary for your platform
-directly from the [GitHub releases](https://github.com/gotry-io/Crabot/releases)
-(decompress the `.zst` asset) and put it on your `PATH` — it needs no Node.
+`crabot` is a self-contained standalone binary with the runtime embedded — it
+needs no Bun or Node install. The package bundles the binary directly (a small
+Node launcher execs it), so installing it downloads nothing extra and runs no
+install scripts.
+
+**Currently macOS arm64 only.** Other platforms are not yet published; build
+from source at [the repository](https://github.com/gotry-io/Crabot). A macOS
+arm64 binary is also attached to each
+[GitHub release](https://github.com/gotry-io/Crabot/releases) for direct
+download.
 
 ## Install
 

package/bin/crabot.mjs

@@ -1,31 +1,32 @@
 #!/usr/bin/env node
-// Launcher for the `crabot` distribution. The real program is a standalone executable (the Bun
-// runtime is embedded) downloaded from the matching GitHub release lazily here on first run (the
-// package ships no install script). No Bun or Node runtime is required to run crabot.
+// Launcher for the `crabot` distribution. The macOS arm64 standalone binary (the Bun runtime is
+// embedded) is bundled in this package under vendor/, so there is nothing to download and crabot
+// needs no extra runtime. Only macOS arm64 is shipped today; other platforms build from source.
 import { spawn } from "node:child_process";
+import { chmodSync } from "node:fs";
+import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { ensureBinary } from "../scripts/install.mjs";
 
-let binaryPath;
-try {
-  binaryPath = await ensureBinary();
-} catch (error) {
-  process.stderr.write(`${error.message}\n`);
+if (process.platform !== "darwin" || process.arch !== "arm64") {
+  process.stderr.write(
+    `crabot currently ships only a macOS arm64 build (detected ${process.platform}-${process.arch}). ` +
+    `Build from source: https://github.com/gotry-io/Crabot\n`
+  );
   process.exit(1);
 }
 
-// The downloaded binary lives at a version-pinned cache path that `npm update` orphans, so its own
-// process.execPath is not a stable launch target. Expose the stable command that re-launches crabot —
-// this launcher under Node, which re-resolves the matching binary on demand — so `crabot service
-// install` writes a service unit that survives upgrades. This launcher path is stable across upgrades
-// (npm replaces the package in place).
-const child = spawn(binaryPath, process.argv.slice(2), {
-  stdio: "inherit",
-  env: {
-    ...process.env,
-    CRABOT_LAUNCH_VECTOR: JSON.stringify([process.execPath, fileURLToPath(import.meta.url)])
-  }
-});
+const binaryPath = join(dirname(fileURLToPath(import.meta.url)), "..", "vendor", "crabot");
+
+// npm does not reliably preserve the executable bit on bundled (non-bin) files, so set it before
+// launching; ignore failures (already executable, or a read-only install — spawn will surface a real
+// problem).
+try {
+  chmodSync(binaryPath, 0o755);
+} catch {
+  // best effort
+}
+
+const child = spawn(binaryPath, process.argv.slice(2), { stdio: "inherit" });
 
 // Forward termination signals so `crabot serve` shuts the gateway down gracefully when a process
 // manager signals this wrapper. Unsupported signal names throw on registration; ignore those.

package/package.json

@@ -1,17 +1,20 @@
 {
   "name": "crabot",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Local-first AI agent runtime with a gateway, operator console, and CLI.",
   "type": "module",
   "bin": {
     "crabot": "bin/crabot.mjs"
   },
-  "engines": {
-    "node": ">=22.15.0"
-  },
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "arm64"
+  ],
   "files": [
     "bin",
-    "scripts",
+    "vendor",
     "README.md",
     "LICENSE"
   ],

package/scripts/install.mjs

@@ -1,140 +0,0 @@
-#!/usr/bin/env node
-// Downloads the crabot standalone binary for the host platform from the GitHub release that matches
-// this package's version, verifies its SHA-256, decompresses it, and caches it. Invoked by the
-// launcher on first run when the binary is not cached yet; the package ships no install script, so
-// nothing runs at install time. The release asset is zstd-compressed (the binary is ~63 MB raw but
-// ~16 MB compressed), so the launcher's Node must provide node:zlib zstd (Node >= 22.15, per the
-// package `engines`). The binary itself embeds the Bun runtime, so running crabot needs no runtime.
-import { createHash } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import zlib from "node:zlib";
-
-const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
-const { version } = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
-const repository = "gotry-io/Crabot";
-
-// process.platform-process.arch -> GitHub release asset name.
-const assets = {
-  "linux-x64": "crabot-linux-x64",
-  "linux-arm64": "crabot-linux-arm64",
-  "darwin-x64": "crabot-macos-x64",
-  "darwin-arm64": "crabot-macos-arm64",
-  "win32-x64": "crabot-windows-x64.exe"
-};
-
-function cachedBinaryPath() {
-  const base = process.platform === "win32"
-    ? process.env.LOCALAPPDATA || join(homedir(), "AppData", "Local")
-    : process.env.XDG_CACHE_HOME || join(homedir(), ".cache");
-  const name = process.platform === "win32" ? "crabot.exe" : "crabot";
-  return join(base, "crabot", `v${version}`, name);
-}
-
-async function fetchBuffer(url) {
-  const response = await fetch(url, { redirect: "follow" });
-  if (!response.ok) {
-    throw new Error(`request failed (${response.status}) for ${url}`);
-  }
-
-  return Buffer.from(await response.arrayBuffer());
-}
-
-function formatDownloadProgress(received, total) {
-  const mb = (bytes) => (bytes / 1_048_576).toFixed(1);
-  return total > 0
-    ? `${Math.floor((received / total) * 100)}% (${mb(received)}/${mb(total)} MB)`
-    : `${mb(received)} MB`;
-}
-
-// Fetch a URL while reporting progress to stderr: one in-place updating line on a TTY, or milestone
-// lines (every 20%) when output is redirected. The binary is the only large download, so only it
-// streams; the size only grows, so the TTY line never leaves stale characters behind.
-async function downloadWithProgress(url, label) {
-  const response = await fetch(url, { redirect: "follow" });
-  if (!response.ok) {
-    throw new Error(`request failed (${response.status}) for ${url}`);
-  }
-  if (response.body === null) {
-    return Buffer.from(await response.arrayBuffer());
-  }
-
-  const total = Number(response.headers.get("content-length")) || 0;
-  const isTty = process.stderr.isTTY === true;
-  const reader = response.body.getReader();
-  const chunks = [];
-  let received = 0;
-  let nextMilestone = 0;
-  for (;;) {
-    const { done, value } = await reader.read();
-    if (done) {
-      break;
-    }
-
-    chunks.push(value);
-    received += value.length;
-    if (isTty) {
-      process.stderr.write(`\rcrabot: downloading ${label} ${formatDownloadProgress(received, total)}`);
-    } else if (total > 0 && (received / total) * 100 >= nextMilestone) {
-      process.stderr.write(`crabot: downloading ${label} ${formatDownloadProgress(received, total)}\n`);
-      nextMilestone += 20;
-    }
-  }
-
-  if (isTty) {
-    process.stderr.write("\n");
-  } else if (total === 0) {
-    process.stderr.write(`crabot: downloaded ${label} (${formatDownloadProgress(received, total)})\n`);
-  }
-
-  return Buffer.concat(chunks);
-}
-
-export async function ensureBinary() {
-  const target = cachedBinaryPath();
-  if (existsSync(target)) {
-    return target;
-  }
-
-  const key = `${process.platform}-${process.arch}`;
-  const asset = assets[key];
-  if (asset === undefined) {
-    throw new Error(`crabot: no prebuilt binary for ${key}. See https://github.com/${repository}/releases`);
-  }
-
-  if (typeof zlib.zstdDecompressSync !== "function") {
-    throw new Error(
-      `crabot: the prebuilt binary is zstd-compressed and needs Node >= 22.15 to unpack (this is ` +
-      `${process.version}). Upgrade Node, or download the standalone binary for your platform from ` +
-      `https://github.com/${repository}/releases and put it on your PATH.`
-    );
-  }
-
-  const base = `https://github.com/${repository}/releases/download/v${version}`;
-  const [compressed, checksum] = await Promise.all([
-    downloadWithProgress(`${base}/${asset}.zst`, `${asset} (v${version})`),
-    fetchBuffer(`${base}/${asset}.zst.sha256`).then((buffer) => buffer.toString("utf8"))
-  ]);
-
-  // Verify the bytes that crossed the network, then decompress (zstd's frame checksum transitively
-  // integrity-checks the result).
-  const expected = checksum.trim().split(/\s+/u)[0];
-  const actual = createHash("sha256").update(compressed).digest("hex");
-  if (expected !== actual) {
-    throw new Error(`crabot: checksum mismatch for ${asset}.zst (expected ${expected}, got ${actual})`);
-  }
-
-  const binary = zlib.zstdDecompressSync(compressed);
-
-  mkdirSync(dirname(target), { recursive: true });
-  // Write to a sibling temp file then rename, so a concurrent install never sees a partial binary.
-  const temporary = `${target}.${process.pid}.download`;
-  writeFileSync(temporary, binary);
-  if (process.platform !== "win32") {
-    chmodSync(temporary, 0o755);
-  }
-  renameSync(temporary, target);
-  return target;
-}