swytchcode 2.20.5 → 2.20.7

package/bin/swytchcode.js

@@ -205,6 +205,34 @@ function apiPost(urlStr, body) {
   });
 }
 
+// describeSpawnError turns a failed spawnSync's `error` into an actionable
+// message. On Windows, antivirus/EDR software quarantining or blocking an
+// unsigned downloaded .exe is by far the most common cause of a launch
+// failure here, and it surfaces through Node as a generic, unhelpful error:
+// EPERM, or - most often - a bare "UNKNOWN" with no further detail, because
+// the OS refused the spawn rather than reporting why. Node's own message for
+// that case ("spawnSync ... UNKNOWN") gives the user nothing to act on, so we
+// add the likely cause and a concrete next step instead of just relaying it.
+function describeSpawnError(binPath, error) {
+  const base = `${error.message} (path: ${binPath})`;
+  if (process.platform !== 'win32') return base;
+
+  const fileIsGone = !fs.existsSync(binPath);
+  if (fileIsGone) {
+    return `${base}\n` +
+      `  The binary is missing from disk - antivirus software may have quarantined it after install.\n` +
+      `  Check your antivirus quarantine, then reinstall: npm install -g swytchcode`;
+  }
+  if (error.code === 'UNKNOWN' || error.code === 'EPERM' || error.code === 'EACCES') {
+    return `${base}\n` +
+      `  Windows refused to run this binary without saying why (code: ${error.code}) - this almost\n` +
+      `  always means antivirus or Windows Defender is blocking it, not a problem with swytchcode.\n` +
+      `  Check your antivirus/Defender quarantine and allow "${binPath}", then try again.\n` +
+      `  Details: https://docs.swytchcode.com/docs/`;
+  }
+  return base;
+}
+
 // ─── Binary resolution (shared by normal pass-through AND onboarding) ────────
 function spawnBin(binPath, args, extraEnv = {}) {
   const env = { ...process.env, ...extraEnv };
@@ -255,7 +283,7 @@ const bareNpxLaunch =
 if (explicitBin && !bareNpxLaunch) {
   const result = spawnBin(explicitBin, process.argv.slice(2));
   if (result.error) {
-    err(`swytchcode: failed to launch SWYTCHCODE_BIN="${explicitBin}": ${result.error.message}`);
+    err(`swytchcode: failed to launch SWYTCHCODE_BIN="${explicitBin}": ${describeSpawnError(explicitBin, result.error)}`);
     process.exit(1);
   }
   process.exit(exitCode(result));
@@ -367,12 +395,30 @@ const isNpx =
   binPath.includes('_npx') ||
   (process.env.npm_execpath || '').includes('npx');
 
+// Top-level subcommands the Go CLI actually registers - see internal/cli/root.go's
+// rootCmd.AddCommand calls (plus cobra's built-in "help"). Keep this in sync with
+// that file: anything NOT in this set is treated below as a mistyped/invalid demo
+// lookup rather than passed through, so a real subcommand missing from this list
+// would silently stop working under npx (e.g. `npx swytchcode examples` would be
+// swallowed into "isn't a demo tool" instead of running the actual command).
+const KNOWN_SUBCOMMANDS = new Set([
+  'init', 'get', 'add', 'bootstrap', 'sync', 'workflow', 'policy',
+  'search', 'list', 'info', 'discover', 'plan',
+  'exec', 'demo', 'examples',
+  'login', 'logout', 'whoami', 'auth',
+  'mcp', 'doctor', 'audit', 'config',
+  'help',
+]);
+
 const userArgs = process.argv.slice(2);
 // Capture original arg BEFORE mutation
 const originalArg = process.argv[2] || '';
 const isCanonicalDemoArg = /^[\w]+\.[\w.]+$/.test(originalArg) && !originalArg.startsWith('-');
-// A single bare word under npx is a potential (invalid) demo lookup - don't pass through to cobra
-const isNpxBareWordArg = isNpx && userArgs.length === 1 && /^[\w]+$/.test(originalArg) && !originalArg.startsWith('-');
+// A single bare word under npx is a potential (invalid) demo lookup - don't pass
+// through to cobra - UNLESS it's a real subcommand, in which case it must reach
+// the actual CLI like any other argument does.
+const isNpxBareWordArg = isNpx && userArgs.length === 1 && /^[\w]+$/.test(originalArg) &&
+  !originalArg.startsWith('-') && !KNOWN_SUBCOMMANDS.has(originalArg);
 // Legacy support: npx swytchcode <canonical_id> → npx swytchcode exec <canonical_id>
 if (userArgs.length > 0 && /^[\w]+\.[\w.]+$/.test(userArgs[0]) && !userArgs[0].startsWith('-')) {
   userArgs.unshift('exec');
@@ -383,7 +429,15 @@ async function runOnboardingDirectDemo(canonicalId) {
   writeln();
   const demoResult = spawnBin(binPath, ['exec', canonicalId], { SWYTCHCODE_ONBOARDING: '1' });
   writeln();
-  if (demoResult.status === 0) {
+  if (demoResult.error) {
+    // The binary itself failed to launch (e.g. antivirus quarantine) - this is
+    // not the same as "not a demo tool" and must not be reported as that.
+    writeln(`  ${c.red}Could not launch swytchcode: ${describeSpawnError(binPath, demoResult.error)}${c.reset}`);
+    writeln();
+    writeln(`  ${c.dim}Let's run a working demo instead.${c.reset}`);
+    writeln();
+    await runDemoSelection();
+  } else if (demoResult.status === 0) {
     writeln(`  ${c.dim}Done - ran through Swytchcode.${c.reset}`);
     writeln();
   } else {
@@ -392,7 +446,7 @@ async function runOnboardingDirectDemo(canonicalId) {
     writeln();
     await runDemoSelection();
   }
-  await runOnboardingSteps2to4();
+  await runOnboardingSteps1to3();
 }
 
 // ─── HTTP helpers (used by both canonical-demo and bare-npx onboarding paths) ─
@@ -440,7 +494,7 @@ const CARD_DESCRIPTION = 'Swytchcode sits between your agent and any API - auth,
 if (!isNpx || (userArgs.length > 0 && !isCanonicalDemoArg && !isNpxBareWordArg)) {
   const result = spawnBin(binPath, userArgs);
   if (result.error) {
-    err(`swytchcode: failed to launch binary: ${result.error.message}`);
+    err(`swytchcode: failed to launch binary: ${describeSpawnError(binPath, result.error)}`);
   }
   process.exit(exitCode(result));
 }
@@ -461,7 +515,7 @@ if (isNpx && isCanonicalDemoArg) {
   writeln();
   Promise.resolve()
     .then(() => runDemoSelection())
-    .then(() => runOnboardingSteps2to4())
+    .then(() => runOnboardingSteps1to3())
     .catch(e => {
       err(`\nswytchcode: onboarding error (${e.message}) - falling back to CLI.\n`);
       process.exit(1);
@@ -475,6 +529,16 @@ if (isNpx && isCanonicalDemoArg) {
   });
 }
 
+// Maps a canonical demo tool ID (as returned by GET /demo/tools) to the short
+// `swytchcode demo <name>` subcommand alias that actually runs it - see
+// internal/cli/demo_commands.go's registered aliases. A tool with no entry
+// here has no runnable `demo <name>` subcommand yet, so it's skipped in
+// runDemoSelection below rather than launching a different demo by mistake.
+const DEMO_TOOL_TO_SUBCOMMAND = {
+  'stripe.create_payment': 'stripe',
+  'fintech.compliance': 'fintech-compliance',
+};
+
 async function runDemoSelection() {
   let demoTools = [];
   try {
@@ -503,12 +567,26 @@ async function runDemoSelection() {
   const chosen = await menuArrow('Choose a demo to run:', demoOptions);
 
   if (chosen !== '__skip__') {
+    const demoSubcommand = DEMO_TOOL_TO_SUBCOMMAND[chosen];
+    if (!demoSubcommand) {
+      // Backend added a demo tool with no matching `demo <name>` subcommand
+      // yet - skip rather than silently running a different demo instead.
+      writeln();
+      writeln(`  ${c.yellow}${chosen} isn't runnable via this onboarding flow yet - skipping.${c.reset}`);
+      return;
+    }
     writeln();
-    writeln(`  ${c.gray}$ swytchcode demo stripe${c.reset}`);
-    spawnBin(binPath, ['demo', 'stripe'], { SWYTCHCODE_ONBOARDING: '1' });
+    writeln(`  ${c.gray}$ swytchcode demo ${demoSubcommand}${c.reset}`);
+    const demoResult = spawnBin(binPath, ['demo', demoSubcommand], { SWYTCHCODE_ONBOARDING: '1' });
     writeln();
-    writeln(`  ${c.dim}Done - ran through Swytchcode's demo account.${c.reset}`);
-    writeln(`  ${c.dim}Every integration runs the same way.${c.reset}`);
+    if (demoResult.error) {
+      writeln(`  ${c.red}Could not launch swytchcode demo: ${describeSpawnError(binPath, demoResult.error)}${c.reset}`);
+    } else if (demoResult.status === 0) {
+      writeln(`  ${c.dim}Done - ran through Swytchcode's demo account.${c.reset}`);
+      writeln(`  ${c.dim}Every integration runs the same way.${c.reset}`);
+    } else {
+      writeln(`  ${c.red}Demo exited with an error (status ${demoResult.status}).${c.reset}`);
+    }
   }
 }
 
@@ -580,7 +658,7 @@ function welcomeCard(cliVersion, auth) {
 }
 
 // cardBelow prints the sign-in line, cwd, and get-started hints. The sign-in
-// line reflects the real auth state so it stays consistent with the Step 3
+// line reflects the real auth state so it stays consistent with the Step 2
 // skip-login logic (no "not signed in" when the user is actually authenticated).
 function cardBelow({ orange, dim, green, auth }) {
   writeln();
@@ -596,7 +674,6 @@ function cardBelow({ orange, dim, green, auth }) {
   const rows = [
     ['swytchcode init', 'set up this project'],
     ['swytchcode get <project>', 'fetch integration bundles'],
-    ['swytchcode exec <canonical_id>', 'run a tool'],
   ];
   for (const [cmd, desc] of rows) writeln(`  ${green('›')}  ${cmd.padEnd(32)}  ${dim(desc)}`);
   writeln();
@@ -622,18 +699,7 @@ async function runOnboarding() {
 
   welcomeCard(cliVersion, authStatus());
 
-  // Divider between the welcome card/info and the interactive walkthrough,
-  // matching the rules drawn between steps below.
-  writeln();
-  writeln('  ' + '─'.repeat(45));
-  writeln();
-
-  // ── Step 1: Demo ──────────────────────────────────────────────────────────
-  writeln(`${c.bold}  Step 1 of 4  -  Try it${c.reset}`);
-  writeln(`${c.dim}  Run an API call through Swytchcode.${c.reset}`);
-  writeln();
-  await runDemoSelection();
-  await runOnboardingSteps2to4();
+  await runOnboardingSteps1to3();
 }
 
 // isGloballyInstalled reports whether a real, persistent global `swytchcode`
@@ -688,12 +754,12 @@ function authStatus() {
   return { authed: false, label: '' };
 }
 
-async function runOnboardingSteps2to4() {
-  // ── Step 2: Install ───────────────────────────────────────────────────────
+async function runOnboardingSteps1to3() {
+  // ── Step 1: Install ───────────────────────────────────────────────────────
   writeln();
   writeln('  ' + '─'.repeat(45));
   writeln();
-  writeln(`${c.bold}  Step 2 of 4  -  Install Swytchcode${c.reset}`);
+  writeln(`${c.bold}  Step 1 of 3  -  Install Swytchcode${c.reset}`);
 
   if (isGloballyInstalled()) {
     // Already installed - don't re-offer the install step.
@@ -731,11 +797,11 @@ async function runOnboardingSteps2to4() {
     }
   }
 
-  // ── Step 3: Account sync ──────────────────────────────────────────────────
+  // ── Step 2: Account sync ──────────────────────────────────────────────────
   writeln();
   writeln('  ' + '─'.repeat(45));
   writeln();
-  writeln(`${c.bold}  Step 3 of 4  -  Connect your account${c.reset}`);
+  writeln(`${c.bold}  Step 2 of 3  -  Connect your account${c.reset}`);
 
   const auth = authStatus();
   if (auth.authed) {
@@ -756,9 +822,11 @@ async function runOnboardingSteps2to4() {
     if (authChoice === 'login') {
       writeln(`  ${c.dim}Opening browser for login ...${c.reset}`);
       writeln();
-      spawnBin(binPath, ['login']);
-      // A zero exit doesn't guarantee a session was created - confirm the token.
-      if (authStatus().authed) {
+      const loginResult = spawnBin(binPath, ['login']);
+      if (loginResult.error) {
+        writeln(`  ${c.red}Could not launch swytchcode login: ${describeSpawnError(binPath, loginResult.error)}${c.reset}`);
+      } else if (authStatus().authed) {
+        // A zero exit doesn't guarantee a session was created - confirm the token.
         writeln(`  ${c.green}›${c.reset}  logged in`);
       } else {
         writeln(`  ${c.yellow}Login didn't complete.${c.reset}`);
@@ -769,8 +837,10 @@ async function runOnboardingSteps2to4() {
       writeln();
       // The browser flow handles both signup and login; verify a session
       // actually exists before claiming the account is connected.
-      spawnBin(binPath, ['login']);
-      if (authStatus().authed) {
+      const registerResult = spawnBin(binPath, ['login']);
+      if (registerResult.error) {
+        writeln(`  ${c.red}Could not launch swytchcode login: ${describeSpawnError(binPath, registerResult.error)}${c.reset}`);
+      } else if (authStatus().authed) {
         writeln(`  ${c.green}›${c.reset}  account connected`);
       } else {
         writeln(`  ${c.yellow}Account not connected yet.${c.reset}`);
@@ -782,11 +852,11 @@ async function runOnboardingSteps2to4() {
     }
   }
 
-  // ── Step 4: Next action ───────────────────────────────────────────────────
+  // ── Step 3: Next action ───────────────────────────────────────────────────
   writeln();
   writeln('  ' + '─'.repeat(45));
   writeln();
-  writeln(`${c.bold}  Step 4 of 4  -  What would you like to do next?${c.reset}`);
+  writeln(`${c.bold}  Step 3 of 3  -  What would you like to do next?${c.reset}`);
   writeln();
 
   const nextAction = await menuArrow('Choose an action:', [
@@ -802,14 +872,14 @@ async function runOnboardingSteps2to4() {
     writeln();
     const result = spawnBin(binPath, ['init']);
     if (result.error) {
-      writeln(`  ${c.red}Could not launch swytchcode init: ${result.error.message}${c.reset}`);
+      writeln(`  ${c.red}Could not launch swytchcode init: ${describeSpawnError(binPath, result.error)}${c.reset}`);
     }
   } else if (nextAction === 'examples') {
     writeln(`  ${c.dim}Loading examples ...${c.reset}`);
     writeln();
     const result = spawnBin(binPath, ['examples']);
     if (result.error) {
-      writeln(`  ${c.red}Could not launch swytchcode examples: ${result.error.message}${c.reset}`);
+      writeln(`  ${c.red}Could not launch swytchcode examples: ${describeSpawnError(binPath, result.error)}${c.reset}`);
     }
   } else {
     writeln(`  ${c.bold}You're all set.${c.reset}`);
@@ -818,7 +888,6 @@ async function runOnboardingSteps2to4() {
     writeln(`  ${c.orange}swytchcode init${c.reset}         ${c.dim}Set up a new project${c.reset}`);
     writeln(`  ${c.orange}swytchcode examples${c.reset}     ${c.dim}Browse example integrations${c.reset}`);
     writeln(`  ${c.orange}swytchcode get <api>${c.reset}    ${c.dim}Install an API integration${c.reset}`);
-    writeln(`  ${c.orange}swytchcode exec <id>${c.reset}    ${c.dim}Execute an API method${c.reset}`);
     writeln(`  ${c.orange}swytchcode --help${c.reset}       ${c.dim}Full command reference${c.reset}`);
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swytchcode",
-  "version": "2.20.5",
+  "version": "2.20.7",
   "repository": {
     "type": "git",
     "url": "git+https://gitlab.com/swytchcode/cli.git"
@@ -28,11 +28,11 @@
     "README.md"
   ],
   "optionalDependencies": {
-    "swytchcode-cli-darwin-arm64": "2.20.5",
-    "swytchcode-cli-darwin-x64": "2.20.5",
-    "swytchcode-cli-linux-arm64": "2.20.5",
-    "swytchcode-cli-linux-x64": "2.20.5",
-    "swytchcode-cli-win32-arm64": "2.20.5",
-    "swytchcode-cli-win32-x64": "2.20.5"
+    "swytchcode-cli-darwin-arm64": "2.20.7",
+    "swytchcode-cli-darwin-x64": "2.20.7",
+    "swytchcode-cli-linux-arm64": "2.20.7",
+    "swytchcode-cli-linux-x64": "2.20.7",
+    "swytchcode-cli-win32-arm64": "2.20.7",
+    "swytchcode-cli-win32-x64": "2.20.7"
   }
 }