hirify-cli 0.4.7 → 0.5.0

package/bin/lib/update.js

@@ -0,0 +1,171 @@
+import { realpathSync, readFileSync, existsSync, mkdirSync, mkdtempSync, renameSync, rmSync, writeFileSync, openSync, fsyncSync, closeSync, lstatSync } from 'node:fs'
+import { join, dirname, resolve, relative, isAbsolute } from 'node:path'
+import { createHash, randomUUID } from 'node:crypto'
+import spawn from 'cross-spawn'
+import semver from 'semver'
+import lockfile from 'proper-lockfile'
+import { CliError, aborted } from './errors.js'
+import { makePrivate } from './store.js'
+import { requireJSON, delay } from './http.js'
+
+export const PACKAGE_NAME = 'hirify-cli'
+export function runProcess(command, args, { signal, timeout = 120000, env = process.env, cwd } = {}) {
+  aborted(signal)
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, { env, cwd, detached: process.platform !== 'win32', windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] })
+    let stdout = '', stderr = '', expired = false
+    let forceTimer
+    const stop = () => {
+      if (!child.pid) return
+      if (process.platform === 'win32') spawn('taskkill.exe', ['/PID', String(child.pid), '/T', '/F'], { windowsHide: true, stdio: 'ignore' }).on('error', () => child.kill())
+      else { try { process.kill(-child.pid, 'SIGTERM') } catch {}; forceTimer = setTimeout(() => { try { process.kill(-child.pid, 'SIGKILL') } catch {} }, 800); forceTimer.unref() }
+    }
+    const timer = setTimeout(() => { expired = true; stop() }, timeout)
+    const cancel = stop
+    signal?.addEventListener('abort', cancel, { once: true })
+    child.stdout?.on('data', v => { if (stdout.length < 1024 * 1024) stdout += v })
+    child.stderr?.on('data', v => { if (stderr.length < 1024 * 1024) stderr += v })
+    child.once('error', () => { clearTimeout(timer); signal?.removeEventListener('abort', cancel); reject(new CliError('process_start_failed', 'Could not start the package manager. Check npm on PATH.')) })
+    child.once('close', (code, childSignal) => { clearTimeout(timer); clearTimeout(forceTimer); signal?.removeEventListener('abort', cancel); if (signal?.aborted) reject(signal.reason); else if (expired) reject(new CliError('update_timeout', 'The package manager did not finish in time. The active CLI was not replaced.')); else resolve({ code, signal: childSignal, stdout, stderr }) })
+  })
+}
+const real = path => { try { return realpathSync(path) } catch { return resolve(path) } }
+export function updateDirectory(configDir, baseRoot) {
+  return join(configDir, 'updates', createHash('sha256').update(real(baseRoot)).digest('hex').slice(0, 24))
+}
+function readJSON(file) { try { return JSON.parse(readFileSync(file, 'utf8')) } catch { return null } }
+async function privateDirectory(path, signal) { mkdirSync(path, { recursive: true, mode: 0o700 }); await makePrivate(path, true, signal) }
+async function atomicJSON(file, value, signal) {
+  await privateDirectory(dirname(file), signal)
+  const temp = file + '.' + randomUUID() + '.tmp'
+  let fd
+  try {
+    fd = openSync(temp, 'wx', 0o600); writeFileSync(fd, JSON.stringify(value, null, 2) + '\n'); fsyncSync(fd); closeSync(fd); fd = undefined
+    if (process.platform === 'win32') await makePrivate(temp, false, signal)
+    renameSync(temp, file)
+    if (process.platform !== 'win32') { const dir = openSync(dirname(file), 'r'); try { fsyncSync(dir) } finally { closeSync(dir) } }
+  } finally { if (fd !== undefined) closeSync(fd); try { rmSync(temp) } catch {} }
+}
+export function activeInstallation(configDir, baseRoot, baseVersion, pin = '') {
+  const dir = updateDirectory(configDir, baseRoot)
+  const state = readJSON(join(dir, 'active.json'))
+  if (!state || state.base_version !== baseVersion || !semver.valid(state.version) || (pin && pin !== state.version)) return null
+  if (!state.pinned && !semver.gt(state.version, baseVersion)) return null
+  // The pointer contains only a validated version, never an arbitrary executable path.
+  const root = join(dir, 'versions', state.version, 'node_modules', PACKAGE_NAME)
+  const pkg = readJSON(join(root, 'package.json'))
+  if (pkg?.name !== PACKAGE_NAME || pkg.version !== state.version || !semver.satisfies(process.version, pkg.engines?.node || '*') || !existsSync(join(root, 'bin', 'lib', 'main.js'))) return null
+  // Selection is read-only, including for offline version. ACLs are set during installation.
+  for (const directory of [configDir, join(configDir, 'updates'), dir, join(dir, 'versions'), dirname(dirname(root))]) {
+    const stat = lstatSync(directory)
+    if (!stat.isDirectory() || stat.isSymbolicLink() || (process.platform !== 'win32' && (stat.uid !== process.getuid() || (stat.mode & 0o022)))) throw new CliError('unsafe_storage', 'The managed CLI directory must be private and owned by this user.')
+  }
+  const canonical = real(root)
+  if (relative(real(dir), canonical).startsWith('..') || isAbsolute(relative(real(dir), canonical)) || lstatSync(root).isSymbolicLink()) return null
+  return { root, version: state.version, pinned: Boolean(state.pinned), previous: state.previous || null }
+}
+export function createUpdater({ config, http, signal, output, event, packageRoot, baseRoot = packageRoot, baseVersion = config.version, run = runProcess }) {
+  const dir = updateDirectory(config.dir, baseRoot)
+  const stateFile = join(dir, 'active.json')
+  async function installation() {
+    // A checkout or a local/npx dependency is never modified or auto-managed.
+    const canonical = real(baseRoot)
+    if (!canonical.includes('node_modules') || config.env.npm_command === 'exec' || config.env.npm_lifecycle_event === 'npx') return { owner: 'unmanaged', reason: 'checkout_or_ephemeral' }
+    try {
+      const answer = await run('npm', ['root', '--global'], { signal, timeout: 3000 })
+      if (answer.code !== 0) return { owner: 'unknown', reason: 'npm_root_failed' }
+      return real(join(answer.stdout.trim(), PACKAGE_NAME)) === canonical ? { owner: 'npm-global', reason: 'verified' } : { owner: 'unmanaged', reason: 'different_prefix' }
+    } catch (error) { if (signal?.aborted) throw error; return { owner: 'unknown', reason: error.code || 'npm_unavailable' } }
+  }
+  async function registry() {
+    const answer = await run('npm', ['config', 'get', 'registry'], { signal, timeout: 3000 })
+    if (answer.code !== 0) throw new CliError('update_registry', 'Could not determine the npm registry.')
+    let url
+    try { url = new URL(answer.stdout.trim()) } catch { throw new CliError('update_registry', 'The npm registry URL is invalid.') }
+    if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash) throw new CliError('update_registry', 'Use an HTTPS npm registry without credentials in its URL.')
+    return url.href.replace(/\/$/, '')
+  }
+  async function check(version = 'latest') {
+    if (version !== 'latest' && !semver.valid(version)) throw new CliError('invalid_arguments', 'Use an exact semantic version, such as hirify update 0.5.0.')
+    const registryURL = await registry()
+    const res = await http.request(`${registryURL}/${PACKAGE_NAME}/${encodeURIComponent(version)}`, { safe: true, timeout: 3000 })
+    if (!res.ok) throw new CliError('update_check_failed', 'Could not check the requested CLI version.', { status: res.status })
+    const pkg = requireJSON(res)
+    if (pkg.name !== PACKAGE_NAME || !semver.valid(pkg.version) || (version !== 'latest' && pkg.version !== version) || !pkg.dist?.integrity || !semver.satisfies(process.version, pkg.engines?.node || '*')) throw new CliError('update_incompatible', 'The requested CLI release is invalid or does not support this Node version.')
+    return { version: pkg.version, registry: registryURL, integrity: pkg.dist.integrity, available: semver.gt(pkg.version, config.version) }
+  }
+  async function install(target, { pin = false } = {}) {
+    const owner = await installation()
+    if (owner.owner !== 'npm-global') throw new CliError('update_owner_unknown', 'This installation is managed elsewhere. Update it with the package manager that installed it, or run npx hirify-cli@<version>.')
+    await privateDirectory(config.dir, signal); await privateDirectory(dir, signal); await privateDirectory(join(dir, 'versions'), signal)
+    let release
+    while (!release) {
+      aborted(signal)
+      try { release = await lockfile.lock(stateFile, { realpath: false, stale: 600000, update: 10000 }) }
+      catch (error) { if (error.code !== 'ELOCKED') throw new CliError('update_lock_failed', 'Could not lock the update directory.'); await delay(100, signal) }
+    }
+    let staging
+    try {
+      const previousState = readJSON(stateFile)
+      const destination = join(dir, 'versions', target.version)
+      if (!existsSync(destination)) {
+        // npm misidentifies its root when --prefix contains an ancestor symlink (macOS /var).
+        staging = realpathSync(mkdtempSync(join(dir, '.staging-'))); await makePrivate(staging, true, signal)
+        const result = await run('npm', ['install', '--prefix', staging, '--global=false', '--save=true', '--package-lock=true', '--ignore-scripts', '--no-audit', '--no-fund', '--strict-ssl=true', '--registry', target.registry, `${PACKAGE_NAME}@${target.version}`], { signal, timeout: 180000, env: { ...config.env, HIRIFY_NO_AUTO_UPDATE: '1' } })
+        if (result.code !== 0) throw new CliError('update_install_failed', 'The update could not be installed. The active CLI was not replaced.')
+        const pkgPath = join(staging, 'node_modules', PACKAGE_NAME)
+        const pkg = readJSON(join(pkgPath, 'package.json'))
+        const lock = readJSON(join(staging, 'package-lock.json'))
+        if (pkg?.name !== PACKAGE_NAME || pkg.version !== target.version || !existsSync(join(pkgPath, 'bin', 'lib', 'main.js')) || lock?.packages?.[`node_modules/${PACKAGE_NAME}`]?.integrity !== target.integrity) throw new CliError('update_verification_failed', 'The installed package did not match the selected release. The active CLI was not replaced.')
+        const verify = await run(process.execPath, [join(pkgPath, 'bin', 'hirify.js'), 'version'], { signal, timeout: 10000, env: { ...config.env, HIRIFY_NO_AUTO_UPDATE: '1', HIRIFY_INTERNAL_REEXEC: '1' } })
+        if (verify.code !== 0 || verify.stdout.trim() !== target.version) throw new CliError('update_verification_failed', 'The new CLI could not start. The active CLI was not replaced.')
+        renameSync(staging, destination); staging = null
+      }
+      const cachedRoot = join(destination, 'node_modules', PACKAGE_NAME)
+      const cachedPackage = readJSON(join(cachedRoot, 'package.json'))
+      const cachedLock = readJSON(join(destination, 'package-lock.json'))
+      if (cachedPackage?.name !== PACKAGE_NAME || cachedPackage.version !== target.version || !semver.satisfies(process.version, cachedPackage.engines?.node || '*') || !existsSync(join(cachedRoot, 'bin', 'lib', 'main.js')) || cachedLock?.packages?.[`node_modules/${PACKAGE_NAME}`]?.integrity !== target.integrity) throw new CliError('update_verification_failed', 'The cached artifact does not match the selected release. The active CLI was not replaced.')
+      aborted(signal)
+      const previous = previousState?.base_version === baseVersion ? (previousState.version === target.version ? previousState.previous : previousState.version) : baseVersion
+      const pinned = pin || Boolean(previousState?.version === target.version && previousState.pinned)
+      await atomicJSON(stateFile, { schema_version: 1, base_version: baseVersion, version: target.version, integrity: target.integrity, pinned, previous: previous || baseVersion }, signal)
+      return { version: target.version, previous: previous || baseVersion, pinned }
+    } finally { if (staging) rmSync(staging, { recursive: true, force: true }); await release().catch(() => {}) }
+  }
+  async function rollback() {
+    const state = readJSON(stateFile)
+    if (!state || state.base_version !== baseVersion || !semver.valid(state.previous)) throw new CliError('update_no_previous', 'No previous managed CLI version is available. Install an exact package version with npm instead.')
+    if (state.previous !== baseVersion && !existsSync(join(dir, 'versions', state.previous, 'node_modules', PACKAGE_NAME, 'bin', 'lib', 'main.js'))) throw new CliError('update_no_previous', 'The previous CLI artifact is unavailable. Install its exact package version with npm instead.')
+    let release
+    while (!release) {
+      aborted(signal)
+      try { release = await lockfile.lock(stateFile, { realpath: false, stale: 600000, update: 10000 }) }
+      catch (error) { if (error.code !== 'ELOCKED') throw new CliError('update_lock_failed', 'Could not lock the update directory.'); await delay(100, signal) }
+    }
+    try {
+      const current = readJSON(stateFile)
+      if (current?.version !== state.version) throw new CliError('update_changed', 'Another process changed the active version. Check hirify version before retrying.')
+      await atomicJSON(stateFile, { ...state, version: state.previous, previous: state.version, integrity: null, pinned: true }, signal)
+      return { version: state.previous, previous: state.version, pinned: true }
+    } finally { await release().catch(() => {}) }
+  }
+  async function automatic() {
+    if (config.env.HIRIFY_NO_AUTO_UPDATE === '1' || config.env.HIRIFY_INTERNAL_REEXEC === '1' || config.env.HIRIFY_VERSION_PIN || readJSON(stateFile)?.pinned) return null
+    const owner = await installation()
+    if (owner.owner !== 'npm-global') { event('update', { code: owner.reason }); return null }
+    try {
+      const target = await check()
+      if (!target.available) { event('update', { code: 'up_to_date' }); return null }
+      output.progress(`Installing Hirify CLI ${target.version} in a separate directory...`)
+      const result = await install(target)
+      output.progress(`Hirify CLI ${result.version} is ready.`)
+      return activeInstallation(config.dir, baseRoot, baseVersion)
+    } catch (error) {
+      if (signal?.aborted) throw error
+      event('update', { code: error.code })
+      output.progress(`Update check or installation did not complete (${error.code || 'update_failed'}). Continuing with ${config.version}. Run hirify update --check for details.`)
+      return null
+    }
+  }
+  return { installation, check, install, rollback, automatic, dir }
+}

package/bin/open-browser.js

@@ -1,13 +1,2 @@
-/**
- * Commands that ask the operating system to open a URL in the default browser.
- *
- * Windows must not receive the URL through cmd.exe: `&` is command syntax there, so an
- * OAuth URL would be cut off after its first query parameter. Explorer receives the URL
- * as one process argument and leaves every parameter intact.
- */
-export function browserCandidates(url, platform = process.platform, browser = process.env.BROWSER) {
-  if (browser) return [[browser, [url]]]
-  if (platform === 'darwin') return [['open', [url]]]
-  if (platform === 'win32') return [['explorer.exe', [url]]]
-  return [['xdg-open', [url]], ['gio', ['open', url]], ['sensible-browser', [url]], ['x-www-browser', [url]]]
-}
+// Compatibility export for consumers of the browser adapter.
+export { canOpenBrowser, openBrowser } from './lib/browser.js'

package/npm-shrinkwrap.json

@@ -0,0 +1,349 @@
+{
+  "name": "hirify-cli",
+  "version": "0.5.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "hirify-cli",
+      "version": "0.5.0",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "cross-spawn": "7.0.6",
+        "http-proxy-agent": "7.0.2",
+        "https-proxy-agent": "7.0.6",
+        "open": "10.2.0",
+        "proper-lockfile": "4.1.2",
+        "proxy-from-env": "1.1.0",
+        "semver": "7.8.5"
+      },
+      "bin": {
+        "hirify": "bin/hirify.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/bundle-name": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz",
+      "integrity": "sha512-tjwM5exMg6BGRI+kNmTntNsvdZS1X8BFYS6tnJ2hdH0kVxM6/eVZ2xy+FqStSWvYmtfFMDLIxurorHwDKfDz5Q==",
+      "license": "MIT",
+      "dependencies": {
+        "run-applescript": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/cross-spawn": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
+      "license": "MIT",
+      "dependencies": {
+        "path-key": "^3.1.0",
+        "shebang-command": "^2.0.0",
+        "which": "^2.0.1"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/default-browser": {
+      "version": "5.5.1",
+      "resolved": "https://registry.npmjs.org/default-browser/-/default-browser-5.5.1.tgz",
+      "integrity": "sha512-m1pAzaJgZ/gssEqlOhJkPJp8Xly7QyW6xcrkUa2KKcDeDSEMP7X8xipU3snUcfisTQx0w1AGae+9UtJSfVnXGw==",
+      "license": "MIT",
+      "dependencies": {
+        "bundle-name": "^4.1.0",
+        "default-browser-id": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/default-browser-id": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/default-browser-id/-/default-browser-id-5.0.1.tgz",
+      "integrity": "sha512-x1VCxdX4t+8wVfd1so/9w+vQ4vx7lKd2Qp5tDRutErwmR85OgmfX7RlLRMWafRMY7hbEiXIbudNrjOAPa/hL8Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/define-lazy-prop": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-3.0.0.tgz",
+      "integrity": "sha512-N+MeXYoqr3pOgn8xfyRPREN7gHakLYjhsHhWGT3fWAiL4IkAt0iDw14QiiEm2bE30c5XX5q0FtAA3CK5f9/BUg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/graceful-fs": {
+      "version": "4.2.11",
+      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
+      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
+      "license": "ISC"
+    },
+    "node_modules/http-proxy-agent": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/is-docker": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-3.0.0.tgz",
+      "integrity": "sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==",
+      "license": "MIT",
+      "bin": {
+        "is-docker": "cli.js"
+      },
+      "engines": {
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/is-inside-container": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/is-inside-container/-/is-inside-container-1.0.0.tgz",
+      "integrity": "sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==",
+      "license": "MIT",
+      "dependencies": {
+        "is-docker": "^3.0.0"
+      },
+      "bin": {
+        "is-inside-container": "cli.js"
+      },
+      "engines": {
+        "node": ">=14.16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/is-wsl": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-3.1.1.tgz",
+      "integrity": "sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==",
+      "license": "MIT",
+      "dependencies": {
+        "is-inside-container": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/isexe": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
+      "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
+      "license": "ISC"
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/open": {
+      "version": "10.2.0",
+      "resolved": "https://registry.npmjs.org/open/-/open-10.2.0.tgz",
+      "integrity": "sha512-YgBpdJHPyQ2UE5x+hlSXcnejzAvD0b22U2OuAP+8OnlJT+PjWPxtgmGqKKc+RgTM63U9gN0YzrYc71R2WT/hTA==",
+      "license": "MIT",
+      "dependencies": {
+        "default-browser": "^5.2.1",
+        "define-lazy-prop": "^3.0.0",
+        "is-inside-container": "^1.0.0",
+        "wsl-utils": "^0.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/path-key": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
+      "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/proper-lockfile": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/proper-lockfile/-/proper-lockfile-4.1.2.tgz",
+      "integrity": "sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==",
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.4",
+        "retry": "^0.12.0",
+        "signal-exit": "^3.0.2"
+      }
+    },
+    "node_modules/proxy-from-env": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
+      "license": "MIT"
+    },
+    "node_modules/retry": {
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz",
+      "integrity": "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
+    "node_modules/run-applescript": {
+      "version": "7.1.0",
+      "resolved": "https://registry.npmjs.org/run-applescript/-/run-applescript-7.1.0.tgz",
+      "integrity": "sha512-DPe5pVFaAsinSaV6QjQ6gdiedWDcRCbUuiQfQa2wmWV7+xC9bGulGI8+TdRmoFkAPaBXk8CrAbnlY2ISniJ47Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/shebang-command": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
+      "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
+      "license": "MIT",
+      "dependencies": {
+        "shebang-regex": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/shebang-regex": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
+      "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/signal-exit": {
+      "version": "3.0.7",
+      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
+      "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==",
+      "license": "ISC"
+    },
+    "node_modules/which": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
+      "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
+      "license": "ISC",
+      "dependencies": {
+        "isexe": "^2.0.0"
+      },
+      "bin": {
+        "node-which": "bin/node-which"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/wsl-utils": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/wsl-utils/-/wsl-utils-0.1.0.tgz",
+      "integrity": "sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw==",
+      "license": "MIT",
+      "dependencies": {
+        "is-wsl": "^3.1.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    }
+  }
+}

package/package.json

@@ -1,15 +1,27 @@
 {
   "name": "hirify-cli",
-  "version": "0.4.7",
+  "version": "0.5.0",
   "description": "Hirify CLI for AI agents: browser sign-in, job feeds, search, reading a vacancy in full, contacts to apply to, and applying on Hirify.",
   "bin": {
     "hirify": "bin/hirify.js"
   },
   "scripts": {
-    "test": "node scripts/test.mjs",
-    "prepublishOnly": "node scripts/prepublish-check.mjs"
+    "test": "node --test scripts/test.mjs scripts/runtime.test.mjs scripts/network.test.mjs scripts/update.test.mjs scripts/storage.test.mjs",
+    "build": "node scripts/build.mjs",
+    "test:package": "node scripts/verify-package.mjs",
+    "prepublishOnly": "node scripts/prepublish-check.mjs",
+    "test:install": "node scripts/install-update-smoke.mjs"
   },
   "type": "module",
+  "dependencies": {
+    "cross-spawn": "7.0.6",
+    "http-proxy-agent": "7.0.2",
+    "https-proxy-agent": "7.0.6",
+    "open": "10.2.0",
+    "proper-lockfile": "4.1.2",
+    "proxy-from-env": "1.1.0",
+    "semver": "7.8.5"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -17,7 +29,8 @@
     "bin",
     "skills",
     "README.md",
-    "NOTICE"
+    "NOTICE",
+    "npm-shrinkwrap.json"
   ],
   "keywords": [
     "hirify",