stackbite 0.5.60 → 0.5.62

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stackbite",
-  "version": "0.5.60",
+  "version": "0.5.62",
   "description": "Verified native Stackbite CLI bootstrapper",
   "license": "UNLICENSED",
   "engines": {

package/packaging/npm/lib/bootstrap.js

@@ -223,6 +223,7 @@ async function launchNative(executable, argv, environment, { spawnImpl = spawn,
 }
 async function main(argv = process.argv.slice(2), options = {}) {
   const setup = parseSetup(argv);
+  const removing = ['uninstall', 'delete'].includes(argv[0]);
   const manifest = options.manifest || require('../release.json');
   const platform = options.platform || process.platform;
   const environment = options.environment || process.env;
@@ -230,12 +231,15 @@ async function main(argv = process.argv.slice(2), options = {}) {
   // Every launch still verifies the full pinned payload; timing only observes it.
   const installed = await timing.phase(environment, 'launcher.ensure', () => ensureBinary(spec, { ...options,
     cache: options.cache || cacheDirectory(environment, platform),
-    checkOnly: setup?.checkOnly || false, reportCached: Boolean(setup),
+    checkOnly: removing || setup?.checkOnly || false, reportCached: Boolean(setup),
     progress: options.progress || stageReporter(options.stderr || process.stderr) }));
   if (setup) return { code: 0, signal: null };
   timing.mark(environment, 'launcher.exec');
   // The bundled runtime owns state discovery and migration for every entrypoint.
-  return launchNative(installed.executable, argv, { ...environment,
+  const result = await launchNative(installed.executable, argv, { ...environment,
     STACKBITE_HOME: path.resolve(installed.home) }, options);
+  if (!removing) return result;
+  const { removeRegistration } = require('./uninstall-registration');
+  return removeRegistration(argv, result, environment, launchNative, options);
 }
 module.exports = { releaseSpec, validatePayload, ensureBinary, launchNative, main };

package/packaging/npm/lib/uninstall-registration.js

@@ -0,0 +1,67 @@
+'use strict';
+// Let npm remove only this exact global registration. Never delete a shared prefix.
+const fs = require('node:fs/promises');
+const path = require('node:path');
+
+async function registration(packageRoot, platform = process.platform) {
+  const root = path.resolve(packageRoot);
+  const modules = path.dirname(root);
+  if (path.basename(root) !== 'stackbite' || path.basename(modules) !== 'node_modules') return null;
+  const info = await fs.lstat(root);
+  if (!info.isDirectory() || info.isSymbolicLink() || await fs.realpath(root) !== root) {
+    throw new Error('Linked npm registration preserved; remove it through its original package manager');
+  }
+  const metadata = JSON.parse(await fs.readFile(path.join(root, 'package.json'), 'utf8'));
+  if (metadata.name !== 'stackbite') throw new Error('Foreign npm package registration preserved');
+  // npx owns its own cache, which is not a global registration.
+  const prefix = globalPrefix(modules, platform);
+  if (prefix === null || await projectLocal(prefix)) return null;
+  return prefix;
+}
+
+function globalPrefix(modules, platform) {
+  const prefix = path.dirname(modules);
+  if (prefix.split(path.sep).includes('_npx')) return null;
+  if (platform === 'win32') return prefix;
+  return path.basename(prefix) === 'lib' ? path.dirname(prefix) : null;
+}
+
+async function projectLocal(prefix) {
+  // A project-local node_modules tree is source, even when its package name matches.
+  for (const name of ['package.json', '.git']) {
+    try { await fs.lstat(path.join(prefix, name)); return true; }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+  }
+  return false;
+}
+
+function npmProgram(packageRoot, nodeExecutable, resolve = require.resolve) {
+  const metadata = resolve('npm/package.json', { paths: [packageRoot, path.dirname(nodeExecutable)] });
+  return path.join(path.dirname(metadata), 'bin', 'npm-cli.js');
+}
+
+async function removeRegistration(argv, result, environment, launch, options = {}) {
+  if (!acceptedRemoval(argv, result)) return result;
+  const root = options.packageRoot || path.resolve(__dirname, '../../..');
+  const prefix = await registration(root, options.platform || process.platform);
+  if (prefix === null) return result;
+  const node = options.nodeExecutable || process.execPath;
+  const cli = options.npmCli || npmProgram(root, node);
+  const removed = await launch(node, [cli, 'uninstall', '--global', '--prefix', prefix,
+    'stackbite', '--ignore-scripts', '--offline', '--no-audit', '--no-fund'],
+  { ...environment, npm_config_update_notifier: 'false' }, options);
+  if (removed.code !== 0 || removed.signal) throw new Error('Product removal was accepted; npm registration removal failed');
+  return result;
+}
+
+function acceptedRemoval(argv, result) {
+  return explicitApply(argv) && !result.signal && [0, 2].includes(result.code);
+}
+
+function explicitApply(argv) {
+  const choices = new Set(['--all', '--keep-data', '--resume']);
+  return argv.length === 3 && ['uninstall', 'delete'].includes(argv[0])
+    && argv.slice(1).includes('--apply') && argv.slice(1).some(arg => choices.has(arg));
+}
+
+module.exports = { registration, npmProgram, removeRegistration, explicitApply };

package/packaging/npm/release.json

@@ -1,26 +1,26 @@
 {
   "schema": 1,
-  "version": "0.5.60",
-  "commit": "e12e69b0968e9bd697f4ab6d44f93bc6b2f38a9f",
+  "version": "0.5.62",
+  "commit": "260b221b2c12353b0ceb783b895ee31a00efc7f6",
   "repository": "Shinick-Han/stackbite",
   "platforms": {
     "win32-x64": {
-      "asset": "stackbite-0.5.60-windows-x64-e12e69b0968e.zip",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.60/stackbite-0.5.60-windows-x64-e12e69b0968e.zip",
-      "sha256": "446e80236afe8aba9265201af9c99de4b6e4596a1cdbe3da6a122c679b3f3abb",
-      "size": 89262353,
-      "root": "stackbite-0.5.60-windows-x64-e12e69b0968e",
-      "manifestSha256": "b5b6aee05a2264673acc26c5fcb4117f5bbe8ee5123b8be10adee592ed4b3f7c",
-      "metadataSha256": "87f1cf5af7e9ea4f70ebb54cd771ffac64d87bf9fa7759975cb6ab632f68058f"
+      "asset": "stackbite-0.5.62-windows-x64-260b221b2c12.zip",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.62/stackbite-0.5.62-windows-x64-260b221b2c12.zip",
+      "sha256": "7b7b98fb6051344ef1314b44b472d78e94d8f682d616d7dd33ec620f6d5f96b4",
+      "size": 89516359,
+      "root": "stackbite-0.5.62-windows-x64-260b221b2c12",
+      "manifestSha256": "9aa0a9d09ed360b4306c6c0d5ca6923b468e2fd55197c2b2a5a3d66cdf00b709",
+      "metadataSha256": "74f38d2b1f13a9464cc669a3fa7b1ef2f139d1194fdd36256483cb38e673befb"
     },
     "linux-x64": {
-      "asset": "stackbite-0.5.60-linux-x86_64-e12e69b0968e.tar.gz",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.60/stackbite-0.5.60-linux-x86_64-e12e69b0968e.tar.gz",
-      "sha256": "572020160907f2dd8306718a897cf3fa323a68174d832150276055301062f6f8",
-      "size": 69691055,
-      "root": "stackbite-0.5.60-linux-x86_64-e12e69b0968e",
-      "manifestSha256": "1cf5d5f34b996756869cbbf170de73634a093a2b40d81b66f7bcb119573687f1",
-      "metadataSha256": "67bc02c03472fb185682ae8a1bfede779be9ea989be6a193ead8eed9158edcb3"
+      "asset": "stackbite-0.5.62-linux-x86_64-260b221b2c12.tar.gz",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.62/stackbite-0.5.62-linux-x86_64-260b221b2c12.tar.gz",
+      "sha256": "7c39e638e6d0b8ed0b0018fb78e705615246d7d64eda7085169bc83d6f6fec5b",
+      "size": 70976395,
+      "root": "stackbite-0.5.62-linux-x86_64-260b221b2c12",
+      "manifestSha256": "a11b098846f4bafc49101c976acf30ce95bec366150a9489b0d19f4cf63d6991",
+      "metadataSha256": "291e27e2251ad99173c5aacc0decdac4efab00b4804131d3d45d7db926a1fd11"
     }
   }
 }