nebula-ai 0.0.15 → 0.0.16

package/bin/nebula-ai.js

@@ -46,6 +46,10 @@ import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { pipeline } from "node:stream/promises";
 import { fileURLToPath } from "node:url";
+import { detectInstallMethod, getChannel, getUpdateCheckCachePath, getUpgradeCommand, isNewerVersion, isNpx, isUpdateCheckDisabled, UPDATE_CHECK_TTL_MS, } from "./update-check-lib.js";
+// Re-export the pure update-check helpers so older tests / downstream
+// importers that still reach for `./launcher.js` keep working.
+export { detectInstallMethod, getChannel, getUpdateCheckCachePath, getUpgradeCommand, isNewerVersion, isNpx, isUpdateCheckDisabled, } from "./update-check-lib.js";
 // The public half of the ed25519 key that signs `checksums.json`. The
 // private half lives only in the `NEBULA_AI_SIGNING_PRIVATE_KEY` GitHub
 // Actions secret.
@@ -66,68 +70,11 @@ const SUPPORTED_PLATFORMS = new Set([
     "linux-arm64",
     "win32-x64",
 ]);
-// ─── update-check constants ────────────────────────────────────────────────
-const UPDATE_CHECK_TTL = 4 * 60 * 60 * 1000; // 4 hours
 // ─── pure helpers (exported for tests) ─────────────────────────────────────
-/**
- * Return the path to the update-check cache file. Lives at the top of the
- * cache directory (NOT under a version-specific subdirectory) so it persists
- * across version upgrades.
- */
-export function getUpdateCheckCachePath() {
-    const base = process.env.NEBULA_AI_CACHE_DIR ||
-        (process.platform === "win32"
-            ? process.env.LOCALAPPDATA || join(homedir(), "AppData", "Local")
-            : process.env.XDG_CACHE_HOME || join(homedir(), ".cache"));
-    return join(base, "nebula-ai", "update-check.json");
-}
-/**
- * Determine the release channel from a version string.
- * Dev versions look like `x.y.z-dev.YYYYMMDDHHMMSS.sha`.
- */
-export function getChannel(version) {
-    return version.includes("-dev.") ? "dev" : "prod";
-}
-/**
- * Return true if `latest` is a newer semver than `current` (prod), or simply
- * different (dev — timestamps are monotonically increasing).
- */
-export function isNewerVersion(latest, current) {
-    if (current.includes("-dev.")) {
-        return latest !== current;
-    }
-    // Strip any prerelease suffix (e.g., "-beta.1") before parsing.
-    const clean = (v) => v.replace(/-.*$/, "");
-    const [a1, a2, a3] = clean(latest).split(".").map(Number);
-    const [b1, b2, b3] = clean(current).split(".").map(Number);
-    if (a1 !== b1)
-        return a1 > b1;
-    if (a2 !== b2)
-        return a2 > b2;
-    if (a3 !== b3)
-        return a3 > b3;
-    // Same numeric version: a stable release is newer than a prerelease
-    // (e.g. 1.0.0 is newer than 1.0.0-beta.1).
-    if (current.includes("-") && !latest.includes("-"))
-        return true;
-    return false;
-}
-/**
- * Return true when the update check should be suppressed entirely.
- */
-export function isUpdateCheckDisabled() {
-    return (process.env.NEBULA_AI_NO_UPDATE_CHECK === "1" ||
-        process.env.NEBULA_AI_NO_UPDATE_CHECK === "true" ||
-        process.env.CI === "true" ||
-        !process.stderr.isTTY);
-}
-/**
- * Return true when running under `npx` (which always fetches the latest
- * wrapper, making the check redundant).
- */
-export function isNpx() {
-    return process.env.npm_command === "exec";
-}
+//
+// Version/update-check helpers live in ./update-check-lib.ts and are
+// re-exported above. Supply-chain helpers remain here because they import
+// node:crypto and aren't used outside the launcher.
 export function sha256HexSync(buffer) {
     return createHash("sha256").update(buffer).digest("hex");
 }
@@ -288,7 +235,7 @@ function maybeSpawnUpdateCheck(currentVersion) {
     const cachePath = getUpdateCheckCachePath();
     // Skip if the cache is still fresh (stat is cheaper than read + parse).
     try {
-        if (Date.now() - statSync(cachePath).mtimeMs < UPDATE_CHECK_TTL)
+        if (Date.now() - statSync(cachePath).mtimeMs < UPDATE_CHECK_TTL_MS)
             return;
     }
     catch {
@@ -331,16 +278,22 @@ function maybeSpawnUpdateCheck(currentVersion) {
 /**
  * Read the cached check result (written by a *previous* invocation's
  * background process) and print a one-line update notification to stderr
- * if a newer version is available.
+ * if a newer version is available. The suggested upgrade command is
+ * chosen based on the detected install method so pnpm/yarn/bun/brew users
+ * see an actually-applicable command.
  */
-function maybeShowUpdateNotification(currentVersion) {
+function maybeShowUpdateNotification(currentVersion, installMethod) {
     try {
         const raw = readFileSync(getUpdateCheckCachePath(), "utf8");
         const cached = JSON.parse(raw);
         if (cached.latest && isNewerVersion(cached.latest, currentVersion)) {
-            const cmd = currentVersion.includes("-dev.")
-                ? "npm install -g nebula-ai@dev"
-                : "npm install -g nebula-ai";
+            const channel = getChannel(currentVersion);
+            // Fall back to the canonical npm command when the install method
+            // is unknown — matches the wrapper's install-time docs.
+            const cmd = getUpgradeCommand(installMethod, channel) ||
+                (channel === "dev"
+                    ? "npm install -g nebula-ai@dev"
+                    : "npm install -g nebula-ai");
             process.stderr.write(`\nnebula-ai: update available ${currentVersion} \u2192 ${cached.latest}\n` +
                 `  Run: ${cmd}\n`);
         }
@@ -404,12 +357,23 @@ async function main() {
     if (!isUpdateCheckDisabled() && !isNpx()) {
         maybeSpawnUpdateCheck(version);
     }
+    // Figure out how the user installed us (npm/pnpm/yarn/bun/npx/...) from
+    // the wrapper's own launch path + env. We forward the result to the Bun
+    // binary via NEBULA_AI_INSTALL_METHOD so the in-TUI "What's new" banner
+    // can surface the right upgrade command without redoing the detection.
+    const installMethod = detectInstallMethod({
+        execPath: fileURLToPath(import.meta.url),
+        argv0: process.argv[0],
+        npmCommand: process.env.npm_command,
+        npmUserAgent: process.env.npm_config_user_agent,
+    });
     const result = spawnSync(binaryPath, process.argv.slice(2), {
         stdio: "inherit",
+        env: { ...process.env, NEBULA_AI_INSTALL_METHOD: installMethod },
     });
     // Show update notification (reads PREVIOUS check's cached result).
     if (!isUpdateCheckDisabled() && !isNpx()) {
-        maybeShowUpdateNotification(version);
+        maybeShowUpdateNotification(version, installMethod);
     }
     if (result.error) {
         console.error(`nebula-ai: unable to start the application.\n` +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nebula-ai",
-  "version": "0.0.15",
+  "version": "0.0.16",
   "description": "CLI/TUI for the nebula.gg AI task orchestration platform",
   "type": "module",
   "bin": {