eidoncore 3.7.5 → 3.7.6

package/install.js

@@ -110,41 +110,77 @@ async function fetchAndVerifyManifest(url) {
 
 function downloadFile(url, dest) {
   return new Promise((resolve, reject) => {
-    const file = fs.createWriteStream(dest);
-    function follow(href) {
+    // Follow redirects BEFORE opening the write stream — GitHub releases always
+    // 302-redirect to objects.githubusercontent.com. Creating the WriteStream
+    // before resolving redirects and then calling file.destroy() on redirect
+    // causes the subsequent pipe to write to a destroyed stream (0 bytes, silent).
+    function followRedirects(href, hops) {
+      if (hops > 5) return reject(new Error('Too many redirects downloading binary'));
+      if (!href.startsWith('https://')) return reject(new Error(`Refusing non-HTTPS redirect: ${href}`));
       const req = https.get(href, { timeout: 120000 }, res => {
         if (res.statusCode === 301 || res.statusCode === 302) {
-          file.destroy();
-          return follow(res.headers.location);
+          res.resume(); // drain response body before following redirect
+          const loc = res.headers.location || '';
+          return followRedirects(loc, hops + 1);
         }
         if (res.statusCode !== 200) {
-          file.destroy();
-          fs.unlink(dest, () => {});
-          return reject(new Error(`HTTP ${res.statusCode} downloading binary`));
+          res.resume();
+          return reject(new Error(`HTTP ${res.statusCode} downloading binary from ${href}`));
         }
-        const total = parseInt(res.headers['content-length'] || '0', 10);
-        let received = 0;
-        let lastPct  = -1;
+        // Final URL resolved — now create the write stream.
+        // Do NOT use res.pipe(file) here: adding a 'data' listener puts the
+        // stream in flowing mode before pipe is registered, causing chunks to
+        // be consumed by the progress listener but not written to the file.
+        // Manual write() with backpressure is the only reliable approach on Windows.
+        const total   = parseInt(res.headers['content-length'] || '0', 10);
+        let received  = 0;
+        let lastPct   = -1;
+        const file    = fs.createWriteStream(dest);
+
+        file.on('error', err => {
+          res.destroy();
+          try { fs.unlinkSync(dest); } catch {}
+          reject(new Error(`File write error: ${err.message}`));
+        });
+
+        res.on('error', err => {
+          file.destroy();
+          try { fs.unlinkSync(dest); } catch {}
+          reject(new Error(`Download stream error: ${err.message}`));
+        });
+
         res.on('data', chunk => {
           received += chunk.length;
+          // Backpressure: pause the network stream if the disk is behind
+          const ok = file.write(chunk);
+          if (!ok) res.pause();
+
           if (total > 0) {
-            const pct = Math.floor((received / total) * 20); // 20-char bar
+            const pct = Math.floor((received / total) * 20);
             if (pct !== lastPct) {
               lastPct = pct;
               const bar = '█'.repeat(pct) + '░'.repeat(20 - pct);
-              process.stdout.write(`\r  [${bar}] ${Math.floor(received / 1024)}KB`);
+              const mb  = (received / 1024 / 1024).toFixed(1);
+              const tot = (total    / 1024 / 1024).toFixed(1);
+              process.stdout.write(`\r  [${bar}] ${mb} / ${tot} MB`);
             }
+          } else {
+            process.stdout.write(`\r  Downloading... ${(received / 1024).toFixed(0)} KB`);
           }
         });
-        res.pipe(file);
-        res.on('end', () => { process.stdout.write('\n'); });
-        file.on('finish', () => file.close(resolve));
-        file.on('error', err => { fs.unlink(dest, () => {}); reject(err); });
+
+        // Resume the readable when the writable drains (backpressure relief)
+        file.on('drain', () => res.resume());
+
+        res.on('end', () => {
+          process.stdout.write('\n');
+          file.end(() => resolve());
+        });
       });
-      req.on('error', err => { fs.unlink(dest, () => {}); reject(err); });
+      req.on('error', err => { try { fs.unlinkSync(dest); } catch {} reject(err); });
       req.on('timeout', () => { req.destroy(); reject(new Error('Download timed out')); });
     }
-    follow(url);
+    followRedirects(url, 0);
   });
 }
 
@@ -161,15 +197,20 @@ function sha256File(filePath) {
 
 // ── Main ─────────────────────────────────────────────────────────────────
 async function main() {
-  // Skip if binary already exists and matches (e.g. re-running postinstall)
+  // If binary already exists, check if it matches the npm package version.
+  // If versions match → skip. If outdated or broken → re-download.
   if (fs.existsSync(BINARY_PATH)) {
     try {
-      execFileSync(BINARY_PATH, ['--version'], { stdio: 'ignore' });
-      console.log('  Eidon binary already installed and working.');
-      return;
+      const installedVersion = execFileSync(BINARY_PATH, ['--version'], { encoding: 'utf8' }).trim();
+      const pkgVersion       = require('./package.json').version;
+      if (installedVersion === pkgVersion) {
+        console.log(`  Eidon ${pkgVersion} already installed.`);
+        return;
+      }
+      console.log(`  Upgrading Eidon ${installedVersion} → ${pkgVersion}...`);
     } catch {
       // Binary exists but broken — re-download
-      fs.unlinkSync(BINARY_PATH);
+      try { fs.unlinkSync(BINARY_PATH); } catch {}
     }
   }
 
@@ -178,11 +219,12 @@ async function main() {
   const platform = getPlatform();
   console.log(`  Platform  : ${platform}`);
 
-  // Allow pinning: EIDON_VERSION=3.2.0 npm install -g eidon
-  const requestedVersion = process.env.EIDON_VERSION || '';
-  const manifestUrl = requestedVersion
-    ? `${RELEASES_BASE}/${requestedVersion}.json`
-    : `${RELEASES_BASE}/latest.json`;
+  // Always download the exact version matching this npm package — no race condition
+  // with latest.json (which GitHub Pages may not have updated yet when npm was published).
+  // Allow override: EIDON_VERSION=3.2.0 npm install -g eidoncore
+  const npmVersion     = require('./package.json').version;
+  const requestedVersion = process.env.EIDON_VERSION || npmVersion;
+  const manifestUrl    = `${RELEASES_BASE}/${requestedVersion}.json`;
 
   console.log('  Fetching release manifest...');
   const manifest = await fetchAndVerifyManifest(manifestUrl);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eidoncore",
-  "version": "3.7.5",
+  "version": "3.7.6",
   "description": "Your AI finally knows your whole codebase. Structural graph intelligence for every AI tool you use.",
   "keywords": [
     "ai",