stemit-cli 1.0.3 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stemit-cli",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "CLI tool to split audio into stems (vocals/drums/bass/other), analyze BPM & key, and mute/solo tracks",
   "type": "module",
   "bin": {
@@ -9,7 +9,8 @@
   },
   "files": [
     "bin/",
-    "src/"
+    "src/",
+    "README.md"
   ],
   "engines": {
     "node": ">=18"

package/src/commands/setup.js

@@ -102,18 +102,33 @@ async function ensureDemucsVenv(systemPython) {
 
   if (demucsCheck.status !== 0) {
     console.log(chalk.cyan('  Installing demucs (one-time setup, may take a minute) …'))
-    const install = spawnSync(VENV_PIP, ['install', 'demucs', 'soundfile', 'torchcodec'], {
+    const install = spawnSync(VENV_PIP, ['install', 'demucs', 'soundfile', 'torchcodec', 'certifi'], {
       encoding: 'utf8',
       stdio: 'inherit',
     })
     if (install.status !== 0) {
       console.error(chalk.red(
         '\n  Failed to install demucs. Try manually:\n' +
-        '    pip install demucs soundfile torchcodec'
+        '    pip install demucs soundfile torchcodec certifi'
       ))
       process.exit(1)
     }
     console.log(chalk.green('  ✔ demucs installed'))
+
+    // macOS: fix SSL certificate verification (common issue with python.org installer)
+    if (process.platform === 'darwin') {
+      const certScript = spawnSync(
+        VENV_PYTHON,
+        ['-c', 'import certifi, ssl, urllib.request; urllib.request.install_opener(urllib.request.build_opener(urllib.request.HTTPSHandler(context=ssl.create_default_context(cafile=certifi.where()))))'],
+        { encoding: 'utf8', stdio: 'pipe' }
+      )
+      if (certScript.status !== 0) {
+        console.log(chalk.yellow(
+          '  ⚠ SSL cert fix skipped. If you see SSL errors, run:\n' +
+          '    /Applications/Python\\ 3.x/Install\\ Certificates.command'
+        ))
+      }
+    }
   }
 
   return VENV_PYTHON

package/src/lib/splitter.js

@@ -1,4 +1,4 @@
-import { spawn } from 'child_process'
+import { spawn, execFileSync } from 'child_process'
 import path from 'path'
 import fs from 'fs'
 
@@ -35,8 +35,24 @@ export function splitStems(
 ) {
   return new Promise((resolve, reject) => {
     const args = ['-m', 'demucs', '-n', model, '--out', outputDir, inputFile]
+
+    // Resolve certifi's CA bundle path from within the venv (fixes macOS SSL issues)
+    let sslCertFile = process.env.SSL_CERT_FILE
+    try {
+      const certPath = execFileSync(pythonPath, ['-c', 'import certifi; print(certifi.where())'], {
+        encoding: 'utf8',
+      }).trim()
+      if (certPath) sslCertFile = certPath
+    } catch {
+      // certifi not available — fall back to system SSL
+    }
+
     const proc = spawn(pythonPath, args, {
-      env: { ...process.env, TORCHAUDIO_BACKEND: 'soundfile' },
+      env: {
+        ...process.env,
+        TORCHAUDIO_BACKEND: 'soundfile',
+        ...(sslCertFile ? { SSL_CERT_FILE: sslCertFile, REQUESTS_CA_BUNDLE: sslCertFile } : {}),
+      },
     })
 
     const stderrLines = []