engineering-memory 0.1.0 → 0.1.1

package/bin/engineering-memory.mjs

@@ -1,14 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { cp, mkdir, mkdtemp, rm } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
+import { rm } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import {
-  exists,
-  readJson,
-  resolveProductionPackagePaths,
-} from '../install/files.mjs';
+import { exists, readJson } from '../install/files.mjs';
+import { stageBridgeRuntime } from '../lib/stage-runtime.mjs';
 import { runInstaller } from '../install/cli.mjs';
 
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
@@ -33,42 +29,6 @@ Choose the hook mode through the Codex or Claude native questionnaire before
 passing a repository. The installer never opens a questionnaire or an
 authentication web page.`;
 
-// The published package cannot carry node_modules, because npm excludes it from
-// every tarball. The bridge runtime is therefore assembled here from the
-// dependencies npm installed for this package, into the exact layout the
-// installer verifies against the bridge lockfile.
-async function stageBridgeRuntime() {
-  const source = join(packageRoot, 'runtime');
-  const packageJson = await readJson(join(source, 'package.json'));
-  const packageLock = await readJson(join(source, 'package-lock.json'));
-  if (!packageJson || !packageLock) {
-    throw new Error(`Bridge runtime metadata is missing in ${source}`);
-  }
-  const staged = await mkdtemp(join(tmpdir(), 'engineering-memory-runtime-'));
-  await cp(join(source, 'dist'), join(staged, 'dist'), { recursive: true });
-  await cp(join(source, 'package.json'), join(staged, 'package.json'));
-  await cp(
-    join(source, 'package-lock.json'),
-    join(staged, 'package-lock.json'),
-  );
-  for (const entry of resolveProductionPackagePaths(packageJson, packageLock)) {
-    const name = entry.path.slice('node_modules/'.length);
-    let installed;
-    try {
-      installed = dirname(require.resolve(`${name}/package.json`));
-    } catch {
-      if (entry.optional) continue;
-      throw new Error(
-        `Bridge dependency ${name} is not installed. Reinstall this package so npm resolves its dependencies.`,
-      );
-    }
-    const destination = join(staged, ...entry.path.split('/'));
-    await mkdir(dirname(destination), { recursive: true });
-    await cp(installed, destination, { recursive: true });
-  }
-  return staged;
-}
-
 // The backend this package was published for. An installation only names one
 // when it points at a different, self-hosted backend.
 async function publishedApiUrl() {
@@ -95,7 +55,7 @@ async function main(argumentList) {
   if (!(await exists(join(skillSource, 'SKILL.md')))) {
     throw new Error(`Skill source is missing in ${skillSource}`);
   }
-  const staged = await stageBridgeRuntime();
+  const staged = await stageBridgeRuntime(packageRoot, require);
   try {
     await runInstaller([
       ...rest,

package/lib/stage-runtime.mjs

@@ -0,0 +1,53 @@
+import { cp, mkdir, mkdtemp, stat } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { readJson, resolveProductionPackagePaths } from '../install/files.mjs';
+
+// The published package cannot carry node_modules, because npm excludes it from
+// every tarball. The bridge runtime is assembled here from the dependencies npm
+// installed for this package, into the exact layout the installer verifies
+// against the bridge lockfile.
+export async function stageBridgeRuntime(packageRoot, resolver) {
+  const source = join(packageRoot, 'runtime');
+  const packageJson = await readJson(join(source, 'package.json'));
+  const packageLock = await readJson(join(source, 'package-lock.json'));
+  if (!packageJson || !packageLock) {
+    throw new Error(`Bridge runtime metadata is missing in ${source}`);
+  }
+  const staged = await mkdtemp(join(tmpdir(), 'engineering-memory-runtime-'));
+  await cp(join(source, 'dist'), join(staged, 'dist'), { recursive: true });
+  await cp(join(source, 'package.json'), join(staged, 'package.json'));
+  await cp(
+    join(source, 'package-lock.json'),
+    join(staged, 'package-lock.json'),
+  );
+  for (const entry of resolveProductionPackagePaths(packageJson, packageLock)) {
+    const name = entry.path.slice('node_modules/'.length);
+    const installed = await locate(name, resolver);
+    if (!installed) {
+      if (entry.optional) continue;
+      throw new Error(
+        `Bridge dependency ${name} is not installed. Reinstall this package so npm resolves its dependencies.`,
+      );
+    }
+    const destination = join(staged, ...entry.path.split('/'));
+    await mkdir(dirname(destination), { recursive: true });
+    await cp(installed, destination, { recursive: true });
+  }
+  return staged;
+}
+
+// A package is free to keep package.json out of its exports map, and several do,
+// so the directory is found on disk rather than through module resolution.
+async function locate(name, resolver) {
+  for (const directory of resolver.resolve.paths(name) ?? []) {
+    const candidate = join(directory, ...name.split('/'));
+    try {
+      await stat(join(candidate, 'package.json'));
+      return candidate;
+    } catch {
+      continue;
+    }
+  }
+  return null;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "engineering-memory",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Installs the Engineering Memory skill and its local MCP bridge. Sign in after installing; your organization and project are resolved from your account.",
   "license": "UNLICENSED",
   "type": "module",
@@ -13,6 +13,7 @@
   "files": [
     "bin",
     "dispatcher",
+    "lib",
     "install",
     "skill",
     "runtime"