stackbite 0.5.10 → 0.5.11

package/README.md

@@ -7,19 +7,31 @@ and Linux x64 with glibc; macOS, ARM and musl/Alpine builds are not supplied yet
 Python installation and compilation are unnecessary. Archive extraction requires
 `tar` (included in current Windows and common Linux distributions).
 
-## Available without an npm account
+## Install without an account
+
+The public npm package is available as `stackbite`:
+
+```sh
+npx --yes stackbite
+npm install --global stackbite
+stackbite
+```
+
+Update a registry installation with `npm install --global stackbite@latest`.
+
+## Direct GitHub package
 
 Run the package attached to the verified GitHub release:
 
 ```sh
-npx --yes https://github.com/Shinick-Han/stackbite/releases/download/v0.5.10/stackbite-0.5.10.tgz
+npx --yes https://github.com/Shinick-Han/stackbite/releases/download/v0.5.11/stackbite-0.5.11.tgz
 ```
 
 Arguments go after the package URL, for example `--version` or `--status`. For a
 persistent command, install that same package globally:
 
 ```sh
-npm install --global https://github.com/Shinick-Han/stackbite/releases/download/v0.5.10/stackbite-0.5.10.tgz
+npm install --global https://github.com/Shinick-Han/stackbite/releases/download/v0.5.11/stackbite-0.5.11.tgz
 stackbite
 ```
 
@@ -33,28 +45,17 @@ checksums and product identity, then reuses a persistent binary cache. There is
 postinstall download or provider installation. An offline cached launch is possible;
 the first launch needs access to GitHub release downloads.
 
-## Short npm registry commands
-
-Once the package owner publishes `stackbite` to the public npm registry:
-
-```sh
-npx --yes stackbite
-npm install --global stackbite
-stackbite
-```
-
-These short commands require registry publication. Until that happens, use the
-verified GitHub package URL above rather than a similarly named external package.
-Update a registry installation with `npm install --global stackbite@latest`.
 For a GitHub URL installation, install the package URL from the newer release.
 Each npm package pins one native release; the portable app's own `stackbite update`
 does not change the npm package version.
 
 ## Existing data and processes
 
-`HELM_STATE_DIR` remains the explicit state override. Existing Windows installed
-configuration and Linux managed-launcher state are reused; otherwise state stays
-at `%LOCALAPPDATA%\Helm\state` or `${XDG_STATE_HOME:-~/.local/state}/helm`.
+`STACKBITE_STATE_DIR` is the explicit state override. The bundled native runtime
+owns state discovery and migration for both npm and direct launches. It reuses
+existing configured state and keeps live databases, authentication and records
+in place. New state uses `%LOCALAPPDATA%\Stackbite\state` or
+`${XDG_STATE_HOME:-~/.local/state}/stackbite`.
 Rooms, Seats, authentication, provider configuration, journals and Work Stack
 contracts are not renamed or migrated. Binary cache data is separate from this
 state. Installing or launching the npm package does not stop an existing backend.
@@ -71,7 +72,7 @@ Build and verify both native platform archives first. Prepare the pinned manifes
 from their exact extracted bundles and archive bytes:
 
 ```sh
-python scripts/prepare_npm_release.py --version 0.5.10
+python scripts/prepare_npm_release.py --version 0.5.11
 npm test
 npm pack
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stackbite",
-  "version": "0.5.10",
+  "version": "0.5.11",
   "description": "Verified native Stackbite CLI bootstrapper",
   "license": "UNLICENSED",
   "engines": { "node": ">=20" },

package/packaging/npm/lib/bootstrap.js

@@ -6,7 +6,7 @@ const { createHash } = require('node:crypto');
 const { LIMITS, fail, memberPath, inside, hashFile, readSmall, exists, safeDirectory } = require('./common');
 const { download } = require('./download');
 const { extractArchive } = require('./archive');
-const { stateDirectory, cacheDirectory } = require('./state');
+const { cacheDirectory } = require('./cache');
 const packageVersion = require('../../../package.json').version;
 
 function releaseSpec(manifest, platform = process.platform, arch = process.arch, runtime = {}) {
@@ -142,9 +142,9 @@ async function main(argv = process.argv.slice(2), options = {}) {
   const platform = options.platform || process.platform;
   const environment = options.environment || process.env;
   const spec = releaseSpec(manifest, platform, options.arch || process.arch, options);
-  const state = await stateDirectory(environment, platform);
   const installed = await ensureBinary(spec, { ...options, cache: options.cache || cacheDirectory(environment, platform) });
-  return launchNative(installed.executable, argv, { ...environment, HELM_HOME: path.resolve(installed.home),
-    HELM_STATE_DIR: state }, options);
+  // The bundled runtime owns state discovery and migration for every entrypoint.
+  return launchNative(installed.executable, argv, { ...environment,
+    STACKBITE_HOME: path.resolve(installed.home) }, options);
 }
 module.exports = { releaseSpec, validatePayload, ensureBinary, launchNative, main };

package/packaging/npm/lib/cache.js

@@ -0,0 +1,10 @@
+'use strict';
+const path = require('node:path');
+const os = require('node:os');
+
+function cacheDirectory(environment = process.env, platform = process.platform, home = os.homedir()) {
+  return platform === 'win32'
+    ? path.resolve(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'Stackbite', 'cache')
+    : path.resolve(environment.XDG_CACHE_HOME || path.join(environment.HOME || home, '.cache'), 'stackbite');
+}
+module.exports = { cacheDirectory };

package/packaging/npm/release.json

@@ -1,26 +1,26 @@
 {
   "schema": 1,
-  "version": "0.5.10",
-  "commit": "5af83c540e88354a05caa789bb64a663580d5a50",
+  "version": "0.5.11",
+  "commit": "572562d1755f055d2ec343ec431876a2d2838eec",
   "repository": "Shinick-Han/stackbite",
   "platforms": {
     "win32-x64": {
-      "asset": "stackbite-0.5.10-windows-x64-5af83c540e88.zip",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.10/stackbite-0.5.10-windows-x64-5af83c540e88.zip",
-      "sha256": "39308402c837ab602266c3dad0d335c85b0c704773ffcd76c84e0c298d3501d7",
-      "size": 43596699,
-      "root": "stackbite-0.5.10-windows-x64-5af83c540e88",
-      "manifestSha256": "0da0c2d439ae7f4e1d783eb6ebfb19046cbf572b11d31b2e79911b93a85b1fb3",
-      "metadataSha256": "376b458296be12e979c7548bf60bf51aa15c21229f4821889096161c05e31d50"
+      "asset": "stackbite-0.5.11-windows-x64-572562d1755f.zip",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.11/stackbite-0.5.11-windows-x64-572562d1755f.zip",
+      "sha256": "757619ad45c8f20b76e6c2b67e061415d7894e8d8e1cb9ce215a427dcc5c1b8f",
+      "size": 35311793,
+      "root": "stackbite-0.5.11-windows-x64-572562d1755f",
+      "manifestSha256": "179ced3cf7c7cd8aebc9fec5244baa978152730da8d894812e7b4587630e264b",
+      "metadataSha256": "d783e1f17dd31a43521b9b78b62a7c13f3e0193fe07e23b27e078038596a9589"
     },
     "linux-x64": {
-      "asset": "stackbite-0.5.10-linux-x86_64-5af83c540e88.tar.gz",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.10/stackbite-0.5.10-linux-x86_64-5af83c540e88.tar.gz",
-      "sha256": "f997ee78358e5d6ce114fc74a57dc24d0ed65a62a2fd50235eb7de6fdad0f259",
-      "size": 23795505,
-      "root": "stackbite-0.5.10-linux-x86_64-5af83c540e88",
-      "manifestSha256": "fe1f7db461651d825a051e34eea4be85decf30e3daa3d74bb18553b4b7f0e36a",
-      "metadataSha256": "d095f1dbec1b42f0df933f7d1f5c5b98d517b13754dfd5cd552034f47ffc98d1"
+      "asset": "stackbite-0.5.11-linux-x86_64-572562d1755f.tar.gz",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.11/stackbite-0.5.11-linux-x86_64-572562d1755f.tar.gz",
+      "sha256": "500927a33edb6ec567b7b0d20ff40ad9f24646b52d33eebeb23f550907554f6c",
+      "size": 18475500,
+      "root": "stackbite-0.5.11-linux-x86_64-572562d1755f",
+      "manifestSha256": "7b8487f4f29b36d9d584d981dc57dc96da991c2951bd808c67fb158ae1239eba",
+      "metadataSha256": "0490bde5afb5279516b254eb43b25bf228def181cfd4a83cc2c4251993718c8b"
     }
   }
 }

package/packaging/npm/lib/state.js

@@ -1,87 +0,0 @@
-'use strict';
-const path = require('node:path');
-const os = require('node:os');
-const fs = require('node:fs/promises');
-const { readSmall, fail } = require('./common');
-
-function shellLiteral(value) {
-  if (!value.startsWith("'") || !value.endsWith("'")) return null;
-  const parts = value.slice(1, -1).split("'\\''");
-  if (parts.some(part => /['\r\n\0]/.test(part))) return null;
-  return parts.join("'");
-}
-function managedState(content) {
-  const lines = content.split('\n');
-  if (lines.length !== 8 || lines[0] !== '#!/bin/sh' || !/^# (Helm|Stackbite) managed launcher$/.test(lines[1])
-      || lines[2] !== 'if [ -z "${HELM_STATE_DIR:-}" ]; then' || lines[4] !== '  export HELM_STATE_DIR'
-      || lines[5] !== 'fi' || lines[7] !== '' || !lines[3].startsWith('  HELM_STATE_DIR=')
-      || !lines[6].startsWith('exec ') || !lines[6].endsWith(' "$@"')) return null;
-  const state = shellLiteral(lines[3].slice('  HELM_STATE_DIR='.length));
-  const image = shellLiteral(lines[6].slice(5, -5));
-  if (!state || !path.isAbsolute(state) || !image || !path.isAbsolute(image)
-      || !['stackbite', 'helm'].includes(path.basename(image))) return null;
-  return state;
-}
-function windowsManagedState(content, appRoot) {
-  // Exact portable-installer grammar, including the original unmarked Helm
-  // launcher. Values are read literally; no CMD expansion or execution occurs.
-  const match = /^@echo off\r?\n(?:rem Stackbite managed launcher\r?\n)?setlocal\r?\nset "HELM_HOME=(?<home>[^"%\r\n\0]+)"\r?\nset "HELM_STATE_DIR=(?<state>[^"%\r\n\0]+)"\r?\n"\k<home>\\(?:stackbite|helm)\.exe" %\*\r?\nexit \/b %errorlevel%\r?\n$/.exec(content);
-  if (!match || !path.win32.isAbsolute(match.groups.home) || !path.win32.isAbsolute(match.groups.state)) return null;
-  const relative = path.win32.relative(appRoot.toLowerCase(), path.win32.normalize(match.groups.home).toLowerCase());
-  if (!relative || relative === '..' || relative.startsWith('..\\') || path.win32.isAbsolute(relative)) return null;
-  return match.groups.state;
-}
-async function launcherText(filename) {
-  try {
-    const info = await fs.lstat(filename);
-    if (!info.isFile() || info.isSymbolicLink() || info.size > 16384) return null;
-    const bytes = await readSmall(filename, 16384);
-    const content = bytes.toString('utf8');
-    if (content.includes('\uFFFD') && /^@echo off\r?\n(?:rem Stackbite managed launcher\r?\n)?setlocal\r?\nset "HELM_HOME=/.test(content)) {
-      fail('Existing managed Windows launcher is not UTF-8; set HELM_STATE_DIR explicitly to preserve its state.');
-    }
-    return content;
-  } catch (error) { if (error.code === 'ENOENT') return null; throw error; }
-}
-async function stateDirectory(environment = process.env, platform = process.platform, home = os.homedir()) {
-  if (environment.HELM_STATE_DIR) return path.resolve(environment.HELM_STATE_DIR);
-  if (platform === 'win32') {
-    const local = environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local');
-    for (const name of ['default-install.json', 'install.json']) {
-      let bytes;
-      try { bytes = await readSmall(path.join(local, 'Helm', name), 16384); }
-      catch (error) { if (error.code === 'ENOENT') continue; throw error; }
-      let config;
-      try { config = JSON.parse(bytes.toString('utf8').replace(/^\uFEFF/, '')); } catch { fail('Existing Helm install configuration is invalid'); }
-      if (config && typeof config.state === 'string' && config.state && !/[\0\r\n]/.test(config.state)) return path.resolve(config.state);
-    }
-    const profile = environment.USERPROFILE || home;
-    const appRoot = path.resolve(local, 'Helm', 'app');
-    for (const name of ['stackbite.cmd', 'stackbite-portable.cmd', 'helm.cmd', 'helm-portable.cmd']) {
-      const content = await launcherText(path.join(profile, '.local', 'bin', name));
-      const state = content === null ? null : windowsManagedState(content, appRoot);
-      if (state) return path.resolve(state);
-    }
-    return path.resolve(local, 'Helm', 'state');
-  }
-  const userHome = environment.HOME || home;
-  for (const name of ['stackbite', 'helm']) {
-    let bytes;
-    try {
-      const launcher = path.join(userHome, '.local', 'bin', name);
-      const info = await fs.lstat(launcher);
-      if (!info.isFile() || info.isSymbolicLink() || info.size > 16384) continue;
-      bytes = await readSmall(launcher, 16384);
-    }
-    catch (error) { if (error.code === 'ENOENT') continue; throw error; }
-    const state = managedState(bytes.toString('utf8'));
-    if (state) return path.resolve(state);
-  }
-  return path.resolve(environment.XDG_STATE_HOME || path.join(userHome, '.local', 'state'), 'helm');
-}
-function cacheDirectory(environment = process.env, platform = process.platform, home = os.homedir()) {
-  return platform === 'win32'
-    ? path.resolve(environment.LOCALAPPDATA || path.join(home, 'AppData', 'Local'), 'Stackbite', 'cache')
-    : path.resolve(environment.XDG_CACHE_HOME || path.join(environment.HOME || home, '.cache'), 'stackbite');
-}
-module.exports = { shellLiteral, managedState, windowsManagedState, stateDirectory, cacheDirectory };