influx-local-cli 0.1.0 → 0.1.1

package/README.md

@@ -208,11 +208,18 @@ declares a generic `http:` tool with the versioned URL, e.g.:
 
 `setup`/`install` run `mise install` against that file and resolve the resulting
 binaries through `mise where`, so several versions can be installed side by side.
-Every mise call is made with `MISE_CEILING_PATHS`/`MISE_TRUSTED_CONFIG_PATHS`
-set to the instance directory: mise otherwise walks *up* the tree and aborts with
-`Config files ... are not trusted` as soon as an unrelated `.mise.toml` exists in
-`$HOME` (or any parent), and it would also silently pick up a project toolchain
-that has nothing to do with this instance.
+The first install downloads the official tarball (≈52 MB for 1.x, ≈60 MB for 2.x,
+≈100 MB for 3.x); progress is streamed to your terminal.
+
+Every mise call is made with `MISE_CEILING_PATHS` set to the instance's **parent**
+directory and `MISE_TRUSTED_CONFIG_PATHS` to the instance directory. The ceiling
+stops mise's upward config search, so an unrelated (and untrusted) `.mise.toml`
+in `$HOME`, `/tmp` or any project above the data dir can neither abort the call
+with `Config files ... are not trusted` nor inject a foreign toolchain.
+Note the ceiling path itself is excluded from the search, which is why it must
+be the parent and not the instance directory: using the instance dir as ceiling
+makes mise ignore the instance's own `.mise.toml`, and `mise install` then exits
+successfully without installing anything (`test/toolchain.test.js` guards this).
 
 ### Per-line provisioning
 
@@ -226,7 +233,11 @@ that has nothing to do with this instance.
   re-issued (and stale ones deleted) on every `setup`.
 - **3.x** — a single binary (`influxdb3 serve`). The admin token is minted once
   by the server, so it is written to `creds.env` and reused; the database and
-  the initial table are created afterwards.
+  the initial table are created afterwards. Note that 3 Core's SQL endpoint is
+  read/DDL only: writing points goes through line protocol
+  (`influxdb3 write --database <db> '<lp>'`, or `POST /api/v3/write_lp?db=<db>`
+  with the admin token) — `query` relays the server's
+  `DML not supported: Insert Into` error if you try an `INSERT`.
 
 ## Known limitations
 
@@ -253,9 +264,10 @@ npm test
 ```
 
 The unit tests cover the version catalog (URL/bin-path per line, catalog
-integrity) and the credential schema; they need no network and no InfluxDB
-install. For an end-to-end check, create an instance and run `setup` — that is
-the path CI cannot cover without downloading InfluxDB.
+integrity), the credential schema and the mise invocation environment
+(the regression guard for the install path); they need no network and no
+InfluxDB install. For an end-to-end check, create an instance and run `setup` —
+that is the path CI cannot cover without downloading InfluxDB.
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "influx-local-cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Create, start and manage local InfluxDB instances (1.x / 2.x / 3.x) without Docker/Podman. CLI + Web dashboard, powered by mise.",
   "keywords": [
     "influxdb",
@@ -29,7 +29,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "test": "node --test test/catalog.test.js test/creds.test.js",
+    "test": "node --test test/catalog.test.js test/creds.test.js test/toolchain.test.js",
     "start": "node bin/influx-local.js web"
   },
   "engines": {

package/src/manager.js

@@ -51,6 +51,40 @@ function errText(msg, res) {
   return detail ? `${msg}: ${detail}` : msg;
 }
 
+// Like spawnOut, but forwards the child's output to our stderr as it arrives.
+// `mise install` downloads a ~50-150 MB tarball per InfluxDB version and prints
+// progress on stderr; capturing it silently makes the tool look hung, which
+// invites a Ctrl-C halfway through the install.
+function spawnStream(cmd, args, opts = {}) {
+  return new Promise((resolve, reject) => {
+    let child;
+    try {
+      child = spawn(cmd, args, {
+        env: { ...baseEnv(), ...(opts.env || {}) },
+        cwd: opts.cwd,
+        windowsHide: true,
+      });
+    } catch (err) {
+      reject(err);
+      return;
+    }
+    const out = [];
+    const errOut = [];
+    child.stdout.on('data', (d) => {
+      out.push(d);
+      if (opts.forward !== false) process.stderr.write(d);
+    });
+    child.stderr.on('data', (d) => {
+      errOut.push(d);
+      if (opts.forward !== false) process.stderr.write(d);
+    });
+    child.on('error', reject);
+    child.on('close', (code) =>
+      resolve({ code, stdout: Buffer.concat(out).toString('utf8'), stderr: Buffer.concat(errOut).toString('utf8') }),
+    );
+  });
+}
+
 // Environment for every child process: the user's own InfluxDB variables are
 // stripped so an exported INFLUXDB_HTTP_BIND_ADDRESS / INFLUX_TOKEN cannot leak
 // into an instance we manage.
@@ -185,14 +219,19 @@ function clearBinCache(cfg) {
 }
 
 // Environment for every mise invocation. Two things matter:
-//   MISE_CEILING_PATHS      stops the config search at the instance dir, so an
-//                           unrelated (and untrusted) .mise.toml in $HOME or
-//                           any parent directory cannot abort the call with
-//                           "Config files ... are not trusted".
+//   MISE_CEILING_PATHS      stops the config search immediately above the
+//                           instance dir, so an unrelated (and untrusted)
+//                           .mise.toml in $HOME or /tmp cannot abort the call
+//                           with "Config files ... are not trusted".
+//                           The ceiling path itself is EXCLUDED from the search
+//                           (verified against mise 2026.8.11), so it must be the
+//                           PARENT: using the instance dir as the ceiling makes
+//                           mise ignore the instance's own .mise.toml, and then
+//                           `mise install` exits 0 without installing anything.
 //   MISE_TRUSTED_CONFIG_PATHS trusts the .mise.toml we generate per instance.
 function miseEnv(cfg) {
   return {
-    MISE_CEILING_PATHS: cfg.instanceDir,
+    MISE_CEILING_PATHS: path.dirname(cfg.instanceDir),
     MISE_TRUSTED_CONFIG_PATHS: cfg.instanceDir,
   };
 }
@@ -266,14 +305,31 @@ async function findExecutable(root, name, maxDepth = 5) {
 
 // Install (idempotent) the instance's pinned version through mise.
 async function installTools(cfg, log = noopLog) {
+  const artifacts = artifactsFor(cfg.version);
   log(`installing InfluxDB ${cfg.version} (${cfg.flavorLabel}) via ${miseBin()}…`);
+  log(`  (the first run downloads the official tarball: ${artifacts.map((a) => a.url).join(' ')})`);
   await saveMiseToml(cfg.name, cfg.version);
-  const res = await spawnOut(miseBin(), ['install', '-C', cfg.instanceDir], { env: miseEnv(cfg) });
+  const res = await spawnStream(miseBin(), ['install', '-C', cfg.instanceDir], { env: miseEnv(cfg) });
   if (res.code !== 0) {
-    throw new Error(errText(`failed to install InfluxDB ${cfg.version}`, res));
+    throw new Error(
+      errText(
+        `failed to install InfluxDB ${cfg.version} (download interrupted or unavailable?)`,
+        res,
+      ) +
+        `\n  artifact: ${artifacts.map((a) => a.url).join('\n  ')}` +
+        `\n  retry with: influx-local install ${cfg.name}`,
+    );
   }
   clearBinCache(cfg);
-  const bins = await resolveBins(cfg);
+  let bins;
+  try {
+    bins = await resolveBins(cfg);
+  } catch (err) {
+    throw new Error(
+      `mise reported a successful install but InfluxDB ${cfg.version} is still not resolvable.\n` +
+        `  That means mise never read ${cfg.miseTomlPath} — check for MISE_* overrides in your environment.\n  ${err.message}`,
+    );
+  }
   const list = Object.entries(bins).map(([exe, p]) => `${exe} → ${p}`).join(', ');
   log(`toolchain ready: ${list}`);
   return bins;
@@ -1786,6 +1842,7 @@ module.exports = {
   shellInstance,
   queryInstance,
   resolveBins,
+  miseEnv,
   verifyAdmin,
   instanceHasData,
   httpBase,