pytxo 1.2.5 → 1.3.1

package/bin/pytxo.js

@@ -3,26 +3,43 @@
 
 const { spawnSync } = require("node:child_process");
 const fs = require("node:fs");
-const path = require("node:path");
 
-const binName = process.platform === "win32" ? "pytxo.exe" : "pytxo";
-const vendor = path.join(__dirname, "..", "vendor", binName);
-const envBin = process.env.PYTXO_BINARY;
+const { dest, install } = require("../postinstall");
 
-const candidates = [envBin, vendor].filter(Boolean);
+function run(bin) {
+  const result = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });
+  if (result.error) {
+    console.error(result.error.message);
+    process.exit(1);
+  }
+  process.exit(result.status ?? 1);
+}
+
+async function main() {
+  const envBin = process.env.PYTXO_BINARY;
+  if (envBin && fs.existsSync(envBin)) run(envBin);
+  if (fs.existsSync(dest)) run(dest);
+
+  if (process.env.PYTXO_SKIP_DOWNLOAD === "1") {
+    console.error("pytxo binary not found. Unset PYTXO_SKIP_DOWNLOAD or set PYTXO_BINARY to a local build.");
+    process.exit(1);
+  }
 
-for (const bin of candidates) {
-  if (fs.existsSync(bin)) {
-    const result = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });
-    if (result.error) {
-      console.error(result.error.message);
+  // Install scripts were skipped (pnpm 10 blocks them by default, and so does
+  // `npm i --ignore-scripts`): fetch and verify the binary now, once.
+  try {
+    await install();
+  } catch (error) {
+    // A concurrent first run may have installed it in the meantime.
+    if (!fs.existsSync(dest)) {
+      console.error(`pytxo: could not install the pytxo binary: ${error.message}`);
+      console.error(
+        "pytxo: nothing was installed. Check your network and run pytxo again, or set PYTXO_BINARY to a local build.",
+      );
       process.exit(1);
     }
-    process.exit(result.status ?? 1);
   }
+  run(dest);
 }
 
-console.error(
-  "pytxo binary not found. Re-run npm install or set PYTXO_BINARY to a local build.",
-);
-process.exit(1);
+main();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pytxo",
-  "version": "1.2.5",
+  "version": "1.3.1",
   "description": "Pytxo agent hypervisor CLI — local-first PTY orchestration",
   "license": "MIT",
   "repository": {

package/postinstall.js

@@ -15,6 +15,7 @@ const TAG = VERSION.startsWith("v") ? VERSION : `v${VERSION}`;
 const NORMALIZED_VERSION = VERSION.replace(/^v/, "");
 const MAX_DOWNLOAD_BYTES = 200 * 1024 * 1024;
 const MAX_REDIRECTS = 8;
+const DOWNLOAD_IDLE_TIMEOUT_MS = 30_000;
 
 const vendorDir = process.env.PYTXO_VENDOR_DIR || path.join(__dirname, "vendor");
 const destName = process.platform === "win32" ? "pytxo.exe" : "pytxo";
@@ -23,7 +24,7 @@ const dest = path.join(vendorDir, destName);
 function downloadBuffer(url, redirects = 0) {
   return new Promise((resolve, reject) => {
     const transport = new URL(url).protocol === "https:" ? https : http;
-    transport
+    const request = transport
       .get(url, (res) => {
         if (res.statusCode === 302 || res.statusCode === 301) {
           const loc = res.headers.location;
@@ -52,7 +53,11 @@ function downloadBuffer(url, redirects = 0) {
         res.on("end", () => resolve(Buffer.concat(chunks)));
         res.on("error", reject);
       })
-      .on("error", reject);
+      .on("error", (error) => reject(new Error(`could not download ${url}: ${error.message}`)));
+    // Without this, a dead network can leave the first `pytxo` run hanging.
+    request.setTimeout(DOWNLOAD_IDLE_TIMEOUT_MS, () => {
+      request.destroy(new Error(`no response for ${DOWNLOAD_IDLE_TIMEOUT_MS / 1000}s`));
+    });
   });
 }
 
@@ -109,11 +114,9 @@ function installAtomically(tempPath, destination) {
   }
 }
 
-async function main() {
-  if (process.env.PYTXO_SKIP_DOWNLOAD === "1") {
-    console.log("pytxo: PYTXO_SKIP_DOWNLOAD=1, skipping binary download (development only)");
-    return;
-  }
+// Shared by postinstall and by bin/pytxo.js, which calls it on first run when
+// install scripts were skipped (pnpm 10, `npm i --ignore-scripts`).
+async function install() {
   const asset = getAssetName();
   fs.mkdirSync(vendorDir, { recursive: true });
   const releaseBase = process.env.PYTXO_RELEASE_BASE_URL
@@ -121,7 +124,7 @@ async function main() {
     : `https://github.com/${REPO}/releases/download/${TAG}`;
   const checksumUrl = `${releaseBase}/SHA256SUMS.txt`;
   const url = `${releaseBase}/${asset}`;
-  console.log(`pytxo: downloading ${asset} from ${TAG}…`);
+  console.error(`pytxo: downloading ${asset} ${TAG} and checking it against SHA256SUMS.txt…`);
   const checksumText = (await downloadBuffer(checksumUrl)).toString("utf8");
   const checksum = expectedChecksum(checksumText, asset);
 
@@ -150,6 +153,15 @@ async function main() {
   } finally {
     fs.rmSync(temp, { force: true });
   }
+  console.error(`pytxo: installed ${dest}`);
+}
+
+async function main() {
+  if (process.env.PYTXO_SKIP_DOWNLOAD === "1") {
+    console.log("pytxo: PYTXO_SKIP_DOWNLOAD=1, skipping binary download (development only)");
+    return;
+  }
+  await install();
 }
 
 if (require.main === module) {
@@ -161,7 +173,9 @@ if (require.main === module) {
 
 module.exports = {
   assertChecksum,
+  dest,
   expectedChecksum,
+  install,
   installAtomically,
   sha256,
 };