stackbite 0.5.61 → 0.5.63

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stackbite",
-  "version": "0.5.61",
+  "version": "0.5.63",
   "description": "Verified native Stackbite CLI bootstrapper",
   "license": "UNLICENSED",
   "engines": {

package/packaging/npm/lib/bootstrap.js

@@ -223,6 +223,7 @@ async function launchNative(executable, argv, environment, { spawnImpl = spawn,
 }
 async function main(argv = process.argv.slice(2), options = {}) {
   const setup = parseSetup(argv);
+  const removing = ['uninstall', 'delete'].includes(argv[0]);
   const manifest = options.manifest || require('../release.json');
   const platform = options.platform || process.platform;
   const environment = options.environment || process.env;
@@ -230,12 +231,15 @@ async function main(argv = process.argv.slice(2), options = {}) {
   // Every launch still verifies the full pinned payload; timing only observes it.
   const installed = await timing.phase(environment, 'launcher.ensure', () => ensureBinary(spec, { ...options,
     cache: options.cache || cacheDirectory(environment, platform),
-    checkOnly: setup?.checkOnly || false, reportCached: Boolean(setup),
+    checkOnly: removing || setup?.checkOnly || false, reportCached: Boolean(setup),
     progress: options.progress || stageReporter(options.stderr || process.stderr) }));
   if (setup) return { code: 0, signal: null };
   timing.mark(environment, 'launcher.exec');
   // The bundled runtime owns state discovery and migration for every entrypoint.
-  return launchNative(installed.executable, argv, { ...environment,
+  const result = await launchNative(installed.executable, argv, { ...environment,
     STACKBITE_HOME: path.resolve(installed.home) }, options);
+  if (!removing) return result;
+  const { removeRegistration } = require('./uninstall-registration');
+  return removeRegistration(argv, result, environment, launchNative, options);
 }
 module.exports = { releaseSpec, validatePayload, ensureBinary, launchNative, main };

package/packaging/npm/lib/uninstall-registration.js

@@ -0,0 +1,67 @@
+'use strict';
+// Let npm remove only this exact global registration. Never delete a shared prefix.
+const fs = require('node:fs/promises');
+const path = require('node:path');
+
+async function registration(packageRoot, platform = process.platform) {
+  const root = path.resolve(packageRoot);
+  const modules = path.dirname(root);
+  if (path.basename(root) !== 'stackbite' || path.basename(modules) !== 'node_modules') return null;
+  const info = await fs.lstat(root);
+  if (!info.isDirectory() || info.isSymbolicLink() || await fs.realpath(root) !== root) {
+    throw new Error('Linked npm registration preserved; remove it through its original package manager');
+  }
+  const metadata = JSON.parse(await fs.readFile(path.join(root, 'package.json'), 'utf8'));
+  if (metadata.name !== 'stackbite') throw new Error('Foreign npm package registration preserved');
+  // npx owns its own cache, which is not a global registration.
+  const prefix = globalPrefix(modules, platform);
+  if (prefix === null || await projectLocal(prefix)) return null;
+  return prefix;
+}
+
+function globalPrefix(modules, platform) {
+  const prefix = path.dirname(modules);
+  if (prefix.split(path.sep).includes('_npx')) return null;
+  if (platform === 'win32') return prefix;
+  return path.basename(prefix) === 'lib' ? path.dirname(prefix) : null;
+}
+
+async function projectLocal(prefix) {
+  // A project-local node_modules tree is source, even when its package name matches.
+  for (const name of ['package.json', '.git']) {
+    try { await fs.lstat(path.join(prefix, name)); return true; }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+  }
+  return false;
+}
+
+function npmProgram(packageRoot, nodeExecutable, resolve = require.resolve) {
+  const metadata = resolve('npm/package.json', { paths: [packageRoot, path.dirname(nodeExecutable)] });
+  return path.join(path.dirname(metadata), 'bin', 'npm-cli.js');
+}
+
+async function removeRegistration(argv, result, environment, launch, options = {}) {
+  if (!acceptedRemoval(argv, result)) return result;
+  const root = options.packageRoot || path.resolve(__dirname, '../../..');
+  const prefix = await registration(root, options.platform || process.platform);
+  if (prefix === null) return result;
+  const node = options.nodeExecutable || process.execPath;
+  const cli = options.npmCli || npmProgram(root, node);
+  const removed = await launch(node, [cli, 'uninstall', '--global', '--prefix', prefix,
+    'stackbite', '--ignore-scripts', '--offline', '--no-audit', '--no-fund'],
+  { ...environment, npm_config_update_notifier: 'false' }, options);
+  if (removed.code !== 0 || removed.signal) throw new Error('Product removal was accepted; npm registration removal failed');
+  return result;
+}
+
+function acceptedRemoval(argv, result) {
+  return explicitApply(argv) && !result.signal && [0, 2].includes(result.code);
+}
+
+function explicitApply(argv) {
+  const choices = new Set(['--all', '--keep-data', '--resume']);
+  return argv.length === 3 && ['uninstall', 'delete'].includes(argv[0])
+    && argv.slice(1).includes('--apply') && argv.slice(1).some(arg => choices.has(arg));
+}
+
+module.exports = { registration, npmProgram, removeRegistration, explicitApply };

package/packaging/npm/release.json

@@ -1,26 +1,26 @@
-{
-  "schema": 1,
-  "version": "0.5.61",
-  "commit": "5a243ed8845e8cdc2dd199a78008fe3d3217f0fd",
-  "repository": "Shinick-Han/stackbite",
-  "platforms": {
-    "win32-x64": {
-      "asset": "stackbite-0.5.61-windows-x64-5a243ed8845e.zip",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.61/stackbite-0.5.61-windows-x64-5a243ed8845e.zip",
-      "sha256": "b0c7b9439c00a31ff37297b862b6bb59660eec57d9de33ea77abc8362191c3a0",
-      "size": 89484988,
-      "root": "stackbite-0.5.61-windows-x64-5a243ed8845e",
-      "manifestSha256": "4838f1247f11825c4d83e83ba52e4e3fbd939e505f6377ef950179406eb80b6a",
-      "metadataSha256": "65175a5a289ca8397829843ab3b239bf8ad6820fbe53902c65ca3efc5904f8ac"
-    },
-    "linux-x64": {
-      "asset": "stackbite-0.5.61-linux-x86_64-5a243ed8845e.tar.gz",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.61/stackbite-0.5.61-linux-x86_64-5a243ed8845e.tar.gz",
-      "sha256": "11accac9280ed3f2dad40a86205b6117b0891bdbb2410d19fc6303f2858fc267",
-      "size": 70946763,
-      "root": "stackbite-0.5.61-linux-x86_64-5a243ed8845e",
-      "manifestSha256": "2769d060e2eb90216abbdb5dbfe58c18a3e8ebfc1506d5872a5dbbedcbe73a0e",
-      "metadataSha256": "5faf2b13ba3c77a1573482795fdca4999fc05923b9003338e8bf3bb0d3d83fd3"
-    }
-  }
-}
+{
+  "schema": 1,
+  "version": "0.5.63",
+  "commit": "a84f43aadeb7d63807de633186607acdaa1a08ec",
+  "repository": "Shinick-Han/stackbite",
+  "platforms": {
+    "win32-x64": {
+      "asset": "stackbite-0.5.63-windows-x64-a84f43aadeb7.zip",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.63/stackbite-0.5.63-windows-x64-a84f43aadeb7.zip",
+      "sha256": "1204e569fab0cd18f7d1877c2e18fe2db3ec0d8c03a18bbfc2d16a61d6ce1cc7",
+      "size": 89517115,
+      "root": "stackbite-0.5.63-windows-x64-a84f43aadeb7",
+      "manifestSha256": "99ee8519853c5a76dc6ad8ed2ce2f16f3da8d80d3474422f991cb0e2903c4b23",
+      "metadataSha256": "da36339045769b38184dda09de010d1f4ecc91788341167ee6ff805296f81c3d"
+    },
+    "linux-x64": {
+      "asset": "stackbite-0.5.63-linux-x86_64-a84f43aadeb7.tar.gz",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.63/stackbite-0.5.63-linux-x86_64-a84f43aadeb7.tar.gz",
+      "sha256": "63375ec11ecbfe4b234a66233602928c94f09d58b4d99032a5f5354e5a531eb5",
+      "size": 70977528,
+      "root": "stackbite-0.5.63-linux-x86_64-a84f43aadeb7",
+      "manifestSha256": "c95795c21cefc8b8e4394fe2842e60686cd4de5ce0a21aeae7978f747dbba25b",
+      "metadataSha256": "e2fa02381a93f7a5cf7d032ae0b8322f64476f5727963236f31790f2d1c7ba7c"
+    }
+  }
+}