feral-agent 2026.7.19 → 2026.8.1

package/bin/feral.js

@@ -15,33 +15,109 @@
 import { spawnSync } from "node:child_process";
 import { createRequire } from "node:module";
 import { join, dirname } from "node:path";
-import { existsSync, readFileSync } from "node:fs";
+import { accessSync, constants, existsSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 
 const here = dirname(fileURLToPath(import.meta.url));
 const require = createRequire(import.meta.url);
 const ext = process.platform === "win32" ? ".exe" : "";
 
-// 1. Production: the matching per-platform package (an optionalDependency).
-const platformPkg = `@bloommedia/feral-agent-${process.platform}-${process.arch}`;
-let exe = null;
-try {
-  exe = require.resolve(`${platformPkg}/feral-cli${ext}`);
-} catch {
-  /* package not installed for this platform — fall through to the dev path */
+// `feral update` is handled HERE and never reaches the Rust binary. Two reasons,
+// both fatal if we delegated: on Windows npm cannot overwrite a running .exe, and
+// a half-installed machine (platform package missing) has no Rust binary to run —
+// which is exactly when you most want to re-install. This shim is the one file in
+// the install that is never locked.
+if (process.argv[2] === "update") {
+  const win = process.platform === "win32";
+  // Was a gateway serving before the update? If so it is running the OLD binary,
+  // and a Discord/Slack connector keeps running it until something restarts it.
+  // Checked BEFORE the install so we never start a daemon the user didn't have.
+  const old = exeFor();
+  const wasOnline =
+    !!old && spawnSync(old, ["gateway", "status"], { stdio: "ignore" }).status === 0;
+
+  const install = spawnSync(win ? "npm.cmd" : "npm", ["install", "-g", "feral-agent@latest"], {
+    stdio: "inherit",
+    shell: win, // npm.cmd is a batch file; Node needs a shell to exec it
+  });
+  if (install.error || install.status !== 0) {
+    process.stderr.write(`feral: update failed.\n${updateFailureHint(win)}`);
+    process.exit(install.status ?? 1);
+  }
+  if (!wasOnline) {
+    process.stdout.write("feral: updated. Start it with: feral gateway start\n");
+    process.exit(0);
+  }
+  // Re-run THIS file — npm has just replaced it with the new version, so the
+  // restart is driven by the new shim and starts the new binary.
+  process.stdout.write("feral: updated — restarting the gateway…\n");
+  const restart = spawnSync(
+    process.execPath,
+    [fileURLToPath(import.meta.url), "gateway", "restart"],
+    { stdio: "inherit" },
+  );
+  process.exit(restart.status ?? 1);
 }
 
-// 2. Dev / manual build: binaries staged in ./vendor next to this shim
-//    (what `node scripts/package-win.mjs` produces for a local Windows build).
-if (!exe || !existsSync(exe)) {
+/**
+ * What to print when `npm install -g` fails. NOT "run the command that just
+ * failed": the common Unix failure is EACCES on a root-owned global prefix, and
+ * repeating it there fails identically forever — which is how a working update
+ * path reads as a broken product.
+ *
+ * The cause is diagnosed, not guessed: ask npm where its global prefix is and
+ * test whether we can write to it. Guessing from uid instead would tell every
+ * nvm/homebrew user to `sudo`, and `sudo npm -g` on those installs is the one
+ * thing that actually breaks them.
+ */
+function updateFailureHint(win) {
+  const manual = "Install manually with:\n  npm install -g feral-agent@latest\n";
+  if (win) return manual; // no EACCES-on-prefix equivalent worth guessing at
+
+  const prefix = spawnSync("npm", ["prefix", "-g"], { encoding: "utf8" });
+  if (prefix.error || prefix.status !== 0) return manual;
+  const root = prefix.stdout.trim();
+  // Global packages land in <prefix>/lib/node_modules; fall back outward for
+  // layouts that differ, and give up rather than invent a diagnosis.
+  const target = [join(root, "lib", "node_modules"), join(root, "lib"), root].find(existsSync);
+  if (!target) return manual;
+
+  try {
+    accessSync(target, constants.W_OK);
+  } catch {
+    return (
+      `No write access to npm's global directory (${target}).\n` +
+      "Either install as root:\n" +
+      "  sudo npm install -g feral-agent@latest\n" +
+      "or point npm at a prefix you own — this also makes every future\n" +
+      "`feral update` work without sudo:\n" +
+      "  npm config set prefix ~/.npm-global\n" +
+      "  export PATH=~/.npm-global/bin:$PATH   # add this to your shell rc\n" +
+      "  npm install -g feral-agent@latest\n"
+    );
+  }
+  return manual;
+}
+
+/** Resolve the platform binary, or null when this install has none. */
+function exeFor() {
+  const pkg = `@bloommedia/feral-agent-${process.platform}-${process.arch}`;
+  try {
+    const p = require.resolve(`${pkg}/feral-cli${ext}`);
+    if (existsSync(p)) return p;
+  } catch {
+    /* fall through to the dev path */
+  }
   const local = join(here, "..", "vendor", `feral-cli${ext}`);
-  if (existsSync(local)) exe = local;
+  return existsSync(local) ? local : null;
 }
 
-if (!exe || !existsSync(exe)) {
+const exe = exeFor();
+
+if (!exe) {
   process.stderr.write(
     `Feral could not find its runtime for ${process.platform}-${process.arch}.\n` +
-      `The matching package \`${platformPkg}\` may have failed to install ` +
+      `The matching package \`@bloommedia/feral-agent-${process.platform}-${process.arch}\` may have failed to install ` +
       "(a blocked optional dependency, an unsupported platform, or " +
       "`--ignore-optional`).\n" +
       "Reinstall with: npm install -g feral-agent\n" +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "feral-agent",
-  "version": "2026.7.19",
+  "version": "2026.8.1",
   "description": "Feral Agent — proactive, portable AI agent with a native security sandbox",
   "type": "module",
   "module": "src/index.ts",
@@ -46,10 +46,10 @@
     "package:win": "node scripts/package-win.mjs"
   },
   "optionalDependencies": {
-    "@bloommedia/feral-agent-win32-x64": "2026.7.19",
-    "@bloommedia/feral-agent-darwin-arm64": "2026.7.19",
-    "@bloommedia/feral-agent-darwin-x64": "2026.7.19",
-    "@bloommedia/feral-agent-linux-x64": "2026.7.19"
+    "@bloommedia/feral-agent-win32-x64": "2026.8.1",
+    "@bloommedia/feral-agent-darwin-arm64": "2026.8.1",
+    "@bloommedia/feral-agent-darwin-x64": "2026.8.1",
+    "@bloommedia/feral-agent-linux-x64": "2026.8.1"
   },
   "devDependencies": {
     "@slack/socket-mode": "^2.0.7",
@@ -61,7 +61,7 @@
     "discord.js": "^14.26.4",
     "gpt-tokenizer": "^3.4.0",
     "qrcode-terminal": "^0.12.0",
-    "typescript": "^5.6.0"
+    "typescript": "^7.0.0"
   },
   "overrides": {
     "undici": ">=6.27.0"