tesseract-agent 0.11.13 → 0.11.14

package/dist-bundle/launch.mjs

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+/**
+ * Run the bundled CLI with the APP's node_modules behind it.
+ *
+ * The CLI bundle leaves its heavy dependencies external — the agent SDK, node-pty, mesh-core
+ * (esbuild.mjs). An npm install puts them in a node_modules beside cli.js. The desktop app ships
+ * cli.js under Resources/cli, and those packages live inside app.asar instead, beside nothing
+ * cli.js can see. So the packaged `ts` and `tm` died on their first import:
+ *
+ *   Cannot find package '@anthropic-ai/claude-agent-sdk' imported from …/Resources/cli/cli.js
+ *
+ * — on every install, for every command, including ones that never touch the SDK.
+ *
+ * This launcher retries a failed BARE import from inside the app's own node_modules, and changes
+ * nothing else: a package that resolves normally still does, and one that exists nowhere still
+ * fails exactly as before. Where there is no app beside it (an npm install), it registers nothing
+ * and simply runs cli.js.
+ */
+import { registerHooks, createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { existsSync } from 'node:fs';
+
+const here = dirname(fileURLToPath(import.meta.url));
+// Overrides exist for the test; the shipped layout needs neither.
+const cliJs = process.env.TESSERACT_CLI_JS || join(here, 'cli.js');
+const appRoot = process.env.TESSERACT_APP_ROOT || join(dirname(cliJs), '..', 'app.asar');
+
+if (typeof registerHooks === 'function' && existsSync(appRoot)) {
+  // A file inside the app's node_modules: resolution only uses its location, it need not exist.
+  const anchor = join(appRoot, 'node_modules', '.tesseract-cli-anchor.js');
+  const appRequire = createRequire(anchor);
+  const isBare = (s) => !s.startsWith('.') && !s.startsWith('/') && !/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(s) && !/^[a-zA-Z]:[\\/]/.test(s);
+  const missing = (e) => e && (e.code === 'ERR_MODULE_NOT_FOUND' || e.code === 'MODULE_NOT_FOUND');
+  // createRequire().resolve() RUNS the registered hooks, this one included. Without this guard the
+  // CommonJS retry re-enters itself (measured in the patch channel's module overlay).
+  let nested = false;
+  registerHooks({
+    resolve(specifier, context, next) {
+      if (nested) return next(specifier, context);
+      try {
+        return next(specifier, context);
+      } catch (e) {
+        if (!isBare(specifier) || !missing(e)) throw e;
+        const c = context.conditions;
+        const cjs = Array.isArray(c) ? c.includes('require') : !!(c && c.has && c.has('require'));
+        if (cjs) {
+          nested = true;
+          try { return { url: pathToFileURL(appRequire.resolve(specifier)).href, shortCircuit: true }; } finally { nested = false; }
+        }
+        return next(specifier, { ...context, parentURL: pathToFileURL(anchor).href });
+      }
+    },
+  });
+}
+
+await import(pathToFileURL(cliJs).href);

package/dist-bundle/mesh-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fineguide-tesseract/mesh-core",
-  "version": "0.11.13",
+  "version": "0.11.14",
   "main": "index.js",
   "types": "index.d.ts"
 }

package/dist-bundle/mesh-core/scripts/fetch-prebuilt.mjs

@@ -150,6 +150,17 @@ if (existsSync(netdOut) && statSync(netdOut).size > 0) {
     // permission error naming the binary, which reads as a corrupt download.
     if (process.platform !== 'win32') chmodSync(netdOut, 0o755);
     console.log(`[mesh-core] fetched ${what}`);
+    // ITS UPDATE SIGNATURE, beside it. An installed helper replaces itself only with a build whose
+    // .sig verifies (crates/tsmesh-netd/src/update.rs), so without this a CLI upgrade leaves the
+    // installed helper where it was. Optional: a release older than signing has none, and the
+    // helper then updates the old way — reinstalled, with a prompt. Not checked against a .sha256:
+    // the signature IS the integrity check, made by the helper that trusts nothing else.
+    try {
+      await fetchTo(`${base}/${netdAsset}.sig`, `${netdOut}.sig`);
+      console.log(`[mesh-core] fetched ${netdAsset}.sig`);
+    } catch {
+      rmSync(`${netdOut}.sig`, { force: true });
+    }
     // WINTUN, and only on Windows. `tun-rs` does not link it — it LoadLibrary's `wintun.dll`
     // from the helper's OWN directory at runtime — so a netd.exe without it fails with
     // `open tun: LoadLibraryExW failed` and the machine carries no packets. It is fetched
@@ -161,6 +172,7 @@ if (existsSync(netdOut) && statSync(netdOut).size > 0) {
     }
   } catch (e) {
     rmSync(netdOut, { force: true });
+    rmSync(`${netdOut}.sig`, { force: true });
     // Remove the DLL too. Half a helper on disk is worse than none: `netdBinaryPath()` would
     // find the exe and the installer would register a service that cannot open a device.
     rmSync(join(outDir, 'netd', 'wintun.dll'), { force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tesseract-agent",
-  "version": "0.11.13",
+  "version": "0.11.14",
   "license": "UNLICENSED",
   "publishConfig": {
     "access": "public",