esprit-cli 0.7.13 → 0.7.15

package/npm/postinstall.mjs

@@ -14,10 +14,19 @@ const installerPath = path.resolve(
   isWindows ? "install.ps1" : "install.sh"
 );
 
+const majorNode = Number.parseInt(process.versions.node.split(".")[0], 10);
+if (!Number.isFinite(majorNode) || majorNode < 18) {
+  console.error(
+    `Node.js 18+ is required for esprit-cli npm install (detected ${process.versions.node}).`
+  );
+  process.exit(1);
+}
+
 const installEnv = {
   ...process.env,
   // npm installs should be fast/predictable; sandbox image is pulled at first scan.
   ESPRIT_SKIP_DOCKER_WARM: "1",
+  ESPRIT_INSTALL_CHANNEL: "npm",
 };
 
 const result = isWindows

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "esprit-cli",
-  "version": "0.7.13",
+  "version": "0.7.15",
   "description": "AI-powered penetration testing agent",
   "license": "Apache-2.0",
   "homepage": "https://esprit.dev",

package/scripts/install.ps1

@@ -27,6 +27,7 @@ $RUNTIME_DIR  = Join-Path $INSTALL_ROOT 'runtime'
 $VENV_DIR     = Join-Path $INSTALL_ROOT 'venv'
 $LAUNCHER_CMD = Join-Path $BIN_DIR 'esprit.cmd'
 $ESPRIT_IMAGE = if ($env:ESPRIT_IMAGE)     { $env:ESPRIT_IMAGE }     else { 'improdead/esprit-sandbox:latest' }
+$INSTALL_CHANNEL = if ($env:ESPRIT_INSTALL_CHANNEL) { $env:ESPRIT_INSTALL_CHANNEL } else { 'manual' }
 
 function Print-Message {
     param([string]$Level, [string]$Message)
@@ -85,6 +86,30 @@ function Invoke-Python {
     }
 }
 
+function Validate-PythonRuntime {
+    param([string]$PyBin)
+
+    $parts = $PyBin -split ' ', 2
+    $exe = $parts[0]
+    $prefix = @()
+    if ($parts.Length -gt 1) { $prefix += $parts[1] }
+
+    $moduleCheck = @()
+    $moduleCheck += $prefix
+    $moduleCheck += '-c'
+    $moduleCheck += 'import importlib.util; required=("venv","ensurepip","ssl"); missing=[m for m in required if importlib.util.find_spec(m) is None]; print(",".join(missing)); raise SystemExit(0 if not missing else 1)'
+
+    $missingModules = (& $exe @moduleCheck 2>$null | Out-String).Trim()
+    if ($LASTEXITCODE -ne 0) {
+        if (-not $missingModules) { $missingModules = 'unknown' }
+        Print-Message 'error' "Python runtime is missing required stdlib modules: $missingModules."
+        Print-Message 'info'  'Install a full Python 3.12+ build (with venv + ensurepip) and retry.'
+        exit 1
+    }
+
+    Invoke-Python $PyBin @('-m', 'pip', '--version')
+}
+
 function Sync-RuntimeRepo {
     Print-Message 'info' 'Syncing Esprit runtime source...'
 
@@ -202,14 +227,22 @@ function Warm-DockerImage {
 # ── Main ──────────────────────────────────────────────────────────────────────
 
 try {
+    Print-Message 'info' 'Running install preflight checks...'
     Require-Command 'git' 'Install git and re-run the installer.'
 
+    if ($INSTALL_CHANNEL -eq 'npm') {
+        Require-Command 'node' 'Install Node.js 18+ and re-run npm install.'
+        Require-Command 'npm'  'Install npm and re-run npm install.'
+    }
+
     $pyBin = Choose-Python
     if (-not $pyBin) {
         Print-Message 'error' 'Python 3.12+ is required.'
         Print-Message 'info'  'Install Python 3.12 and re-run this installer.'
         exit 1
     }
+    Validate-PythonRuntime -PyBin $pyBin
+    Print-Message 'success' '✓ Preflight checks passed'
 
     Print-Message 'info' "Installing Esprit (source mode)"
     Print-Message 'info' "Runtime source: $REPO_URL@$REPO_REF"

package/scripts/install.sh

@@ -48,6 +48,61 @@ require_command() {
   fi
 }
 
+validate_python_runtime() {
+  local py_bin="$1"
+  local missing_modules
+
+  if ! missing_modules=$("$py_bin" - <<'PY'
+import importlib.util
+required = ("venv", "ensurepip", "ssl")
+missing = [name for name in required if importlib.util.find_spec(name) is None]
+if missing:
+    print(",".join(missing))
+    raise SystemExit(1)
+print("")
+PY
+  ); then
+    print_message error "Python runtime is missing required stdlib modules: ${missing_modules:-unknown}."
+    print_message info "Install a full Python 3.12+ build (with venv + ensurepip) and retry."
+    exit 1
+  fi
+
+  if ! "$py_bin" -m pip --version >/dev/null 2>&1; then
+    print_message error "pip is unavailable for ${py_bin}."
+    print_message info "Install pip/ensurepip for your Python distribution and retry."
+    exit 1
+  fi
+}
+
+warn_if_musl_build_toolchain_missing() {
+  if [ "$(uname -s)" != "Linux" ]; then
+    return
+  fi
+
+  if ! command -v ldd >/dev/null 2>&1; then
+    return
+  fi
+
+  if ! ldd --version 2>&1 | grep -qi "musl"; then
+    return
+  fi
+
+  local missing=()
+  local cmd
+  for cmd in gcc g++ make cargo rustc; do
+    if ! command -v "$cmd" >/dev/null 2>&1; then
+      missing+=("$cmd")
+    fi
+  done
+
+  if [ "${#missing[@]}" -gt 0 ]; then
+    print_message warning "Detected musl-based Linux (for example Alpine)."
+    print_message warning "Some Python dependencies may compile from source."
+    print_message info "Missing build tools: ${missing[*]}"
+    print_message info "Recommended: apk add --no-cache build-base linux-headers rust cargo"
+  fi
+}
+
 verify_signature() {
     if ! command -v gpg &> /dev/null; then
         echo "⚠ gpg not found — skipping signature verification"
@@ -259,9 +314,16 @@ warm_docker_image() {
 }
 
 main() {
+  local install_channel="${ESPRIT_INSTALL_CHANNEL:-curl}"
+  print_message info "${MUTED}Running install preflight checks...${NC}"
   require_command git "Install git and re-run the installer."
   require_command curl "Install curl and re-run the installer."
 
+  if [ "$install_channel" = "npm" ]; then
+    require_command node "Install Node.js 18+ and re-run npm install."
+    require_command npm "Install npm and re-run npm install."
+  fi
+
   local py_bin
   py_bin=$(choose_python || true)
   if [ -z "$py_bin" ]; then
@@ -269,6 +331,9 @@ main() {
     print_message info "Install Python 3.12 and re-run this installer."
     exit 1
   fi
+  validate_python_runtime "$py_bin"
+  warn_if_musl_build_toolchain_missing
+  print_message success "✓ Preflight checks passed"
 
   print_message info "${CYAN}Installing Esprit${NC} ${MUTED}(source mode)${NC}"
   print_message info "${MUTED}Runtime source:${NC} $REPO_URL@$REPO_REF"