farhand 0.2.8 → 0.2.11

package/README.md

@@ -6,6 +6,21 @@ your platform. On first run it downloads
 verifies it against `SHA256SUMS`, and keeps it inside this package. The
 version of this package always equals the binary version it fetches.
 
+Install it globally to set up an agent:
+
+```
+npm i -g farhand
+farhand install claude-code    # or opencode, codex
+```
+
+The agent's config then launches this package's entry (`bin/farhand.js`),
+not the versioned binary, so `npm i -g farhand@latest` upgrades the agent
+too; the first run after an upgrade downloads the new binary. The agent
+needs `node` on its `PATH`. `npx farhand init` / `npx farhand check` work
+for a try, but `farhand install` refuses to run from npx's cache (or
+`pnpm dlx`, `bunx`): the agent would lose FarHand when the cache is
+cleared.
+
 Everything else — what FarHand is, how to configure it, how it plugs into
 OpenCode, Claude Code and Codex — is in the
 [main README](https://github.com/CogFlux/farhand).

package/bin/farhand.js

@@ -58,21 +58,34 @@ async function ensureBinary() {
   const actual = crypto.createHash("sha256").update(tarball).digest("hex");
   if (expected !== actual) throw new Error("checksum mismatch; refusing to install");
 
+  // Unpacked into a private folder and renamed into place, so an agent
+  // starting the server and its hook at once never runs a half-written
+  // binary; whichever process finishes second keeps the first one's copy.
   fs.mkdirSync(vendor, { recursive: true });
   const tmp = path.join(os.tmpdir(), `${name}-${process.pid}.tar.gz`);
+  const stage = fs.mkdtempSync(path.join(vendor, ".unpack-"));
   fs.writeFileSync(tmp, tarball);
   try {
-    execFileSync("tar", ["-C", vendor, "-xzf", tmp]);
+    execFileSync("tar", ["-C", stage, "-xzf", tmp]);
+    fs.chmodSync(path.join(stage, name, "farhand"), 0o755);
+    try {
+      fs.renameSync(path.join(stage, name), path.join(vendor, name));
+    } catch (e) {
+      if (!fs.existsSync(bin)) throw e;
+    }
   } finally {
     fs.rmSync(tmp, { force: true });
+    fs.rmSync(stage, { recursive: true, force: true });
   }
-  fs.chmodSync(bin, 0o755);
   return bin;
 }
 
 ensureBinary()
   .then((bin) => {
-    const r = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });
+    // `farhand install` writes this script, not the versioned binary, into
+    // the agent's config, so an upgrade does not leave it pointing nowhere.
+    const env = { ...process.env, FARHAND_LAUNCHER: fs.realpathSync(__filename) };
+    const r = spawnSync(bin, process.argv.slice(2), { stdio: "inherit", env });
     if (r.error) throw r.error;
     process.exit(r.status === null ? 1 : r.status);
   })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "farhand",
-  "version": "0.2.8",
+  "version": "0.2.11",
   "description": "Remote hands for coding agents: run OpenCode / Claude Code / Codex work on a remote host over SSH, keep credentials local, audit everything",
   "license": "MIT",
   "repository": { "type": "git", "url": "https://github.com/CogFlux/farhand.git" },