umadev 1.0.6 → 1.0.8

package/bin/cli.js

@@ -16,6 +16,8 @@
 const { spawnSync } = require('node:child_process');
 const fs = require('node:fs');
 const path = require('node:path');
+const https = require('node:https');
+const os = require('node:os');
 
 // Node platform/arch → our sub-package name.
 const PLATFORM_PACKAGES = {
@@ -105,32 +107,202 @@ function findKnowledgeDir() {
   return null;
 }
 
-const binary = findBinary();
-// npm artifact round-trips (upload/download-artifact in CI) can strip the
-// executable bit off the prebuilt binary; restore it defensively before exec.
-try {
-  fs.chmodSync(binary, 0o755);
-} catch (_) {
-  // read-only install dir or already +x — spawnSync below reports real errors
+// ── Local embedding model — ensure it's on disk, else download it (with a
+// progress bar) from THIS version's GitHub Release. Checked on EVERY launch
+// (a cheap stat); the ~224MB fp16 model is too large for npm, so it's a
+// one-time fetch into ~/.umadev/embed-model. Fail-open: any failure launches
+// anyway and the binary degrades to BM25 lexical retrieval, retrying next time.
+function homeDir() {
+  return process.env.HOME || process.env.USERPROFILE || os.homedir();
 }
-const extraEnv = {};
-const modelDir = findModelDir();
-if (modelDir && !process.env.UMADEV_EMBED_MODEL_DIR) {
-  extraEnv.UMADEV_EMBED_MODEL_DIR = modelDir;
+function modelTargetDir() {
+  return path.join(homeDir(), '.umadev', 'embed-model');
 }
-const knowledgeDir = findKnowledgeDir();
-if (knowledgeDir && !process.env.UMADEV_KNOWLEDGE_DIR) {
-  extraEnv.UMADEV_KNOWLEDGE_DIR = knowledgeDir;
+const MODEL_FILES = ['config.json', 'tokenizer.json', 'model.safetensors'];
+function modelPresent(dir) {
+  return MODEL_FILES.every((f) => {
+    try {
+      return fs.statSync(path.join(dir, f)).size > 0;
+    } catch (_) {
+      return false;
+    }
+  });
 }
-const spawnOpts = { stdio: 'inherit' };
-if (Object.keys(extraEnv).length > 0) {
-  spawnOpts.env = { ...process.env, ...extraEnv };
+// Download one URL to `dest`, following redirects (GitHub → CDN), drawing a
+// progress bar when `withBar`. Resolves on success, rejects on any error.
+function downloadTo(url, dest, withBar, label) {
+  return new Promise((resolve, reject) => {
+    const req = https.get(
+      url,
+      { headers: { 'User-Agent': 'umadev-cli', Accept: 'application/octet-stream' } },
+      (res) => {
+        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+          res.resume();
+          downloadTo(res.headers.location, dest, withBar, label).then(resolve, reject);
+          return;
+        }
+        if (res.statusCode !== 200) {
+          res.resume();
+          reject(new Error('HTTP ' + res.statusCode));
+          return;
+        }
+        const total = parseInt(res.headers['content-length'] || '0', 10);
+        let got = 0;
+        let lastPct = -1;
+        const tmp = dest + '.part';
+        const out = fs.createWriteStream(tmp);
+        res.on('data', (chunk) => {
+          got += chunk.length;
+          if (withBar && total > 0) {
+            const pct = Math.floor((got / total) * 100);
+            if (pct !== lastPct) {
+              lastPct = pct;
+              const w = 24;
+              const fill = Math.round((pct / 100) * w);
+              const bar = '#'.repeat(fill) + '-'.repeat(w - fill);
+              const mb = (got / 1048576).toFixed(0);
+              const tot = (total / 1048576).toFixed(0);
+              process.stderr.write(
+                '\r  ' + label + ' [' + bar + '] ' + pct + '%  (' + mb + '/' + tot + ' MB)',
+              );
+            }
+          }
+        });
+        res.pipe(out);
+        out.on('finish', () =>
+          out.close((e) => {
+            if (e) return reject(e);
+            try {
+              fs.renameSync(tmp, dest);
+            } catch (er) {
+              return reject(er);
+            }
+            if (withBar) process.stderr.write('\n');
+            resolve();
+          }),
+        );
+        out.on('error', reject);
+      },
+    );
+    req.on('error', reject);
+    req.setTimeout(120000, () => req.destroy(new Error('timeout')));
+  });
+}
+// Ordered list of base URLs to try for the release assets. An explicit override
+// (UMADEV_MODEL_BASE_URL) wins; otherwise zh-CN / China-timezone users get GitHub
+// PROXY MIRRORS first (github.com's release CDN is frequently slow or blocked in
+// mainland China), and everyone else gets github.com first — with the others as
+// fallback either way, so a blocked github.com or a down mirror still recovers.
+function releaseBases(version) {
+  if (process.env.UMADEV_MODEL_BASE_URL) {
+    return [process.env.UMADEV_MODEL_BASE_URL.replace(/\/+$/, '')];
+  }
+  const gh = 'https://github.com/umacloud/umadev/releases/download/v' + version;
+  const mirrors = [
+    'https://ghproxy.net/' + gh,
+    'https://ghfast.top/' + gh,
+    'https://gh-proxy.com/' + gh,
+  ];
+  let cn = false;
+  try {
+    const opts = Intl.DateTimeFormat().resolvedOptions();
+    const tz = opts.timeZone || '';
+    const loc = (process.env.LANG || process.env.LC_ALL || '') + ' ' + (opts.locale || '');
+    cn =
+      /Shanghai|Chongqing|Urumqi|Harbin|Hong_Kong|Macau/.test(tz) ||
+      /zh[_-]?(CN|Hans)/i.test(loc);
+  } catch (_) {
+    /* default to direct-first */
+  }
+  return cn ? [...mirrors, gh] : [gh, ...mirrors];
+}
+// Try each base for `name` in order; resolve on first success, throw the last
+// error if all fail. A China mirror can cover a blocked github.com (or vice
+// versa) with zero user configuration.
+async function downloadFile(bases, name, dest, withBar, label) {
+  let lastErr;
+  for (const base of bases) {
+    try {
+      await downloadTo(base + '/' + name, dest, withBar, label);
+      return;
+    } catch (e) {
+      lastErr = e;
+    }
+  }
+  throw lastErr || new Error('no source reachable');
+}
+async function ensureModel() {
+  const dir = modelTargetDir();
+  if (modelPresent(dir)) return dir; // already installed — fast path, no network
+  let version = '0.0.0';
+  try {
+    version = require('../package.json').version;
+  } catch (_) {
+    /* keep default */
+  }
+  const bases = releaseBases(version);
+  try {
+    fs.mkdirSync(dir, { recursive: true });
+    process.stderr.write(
+      '\n  本地向量检索模型缺失,正在下载 (multilingual-e5-small · fp16 · ~224MB)…\n',
+    );
+    process.stderr.write(
+      '  一次性下载;之后完全本地、运行时无需联网。失败不影响使用(降级为 BM25)。\n',
+    );
+    await downloadFile(bases, 'config.json', path.join(dir, 'config.json'), false, '');
+    await downloadFile(bases, 'tokenizer.json', path.join(dir, 'tokenizer.json'), false, '');
+    await downloadFile(
+      bases,
+      'model.safetensors',
+      path.join(dir, 'model.safetensors'),
+      true,
+      '下载向量模型',
+    );
+    process.stderr.write('  本地向量模型就绪 ✓\n\n');
+    return dir;
+  } catch (e) {
+    process.stderr.write(
+      '\n  [提示] 向量模型下载未完成 (' +
+        e.message +
+        ');本次用 BM25 检索,下次启动重试。\n\n',
+    );
+    return null;
+  }
 }
-const result = spawnSync(binary, process.argv.slice(2), spawnOpts);
 
-if (result.error) {
-  console.error(`umadev: failed to exec binary: ${result.error.message}`);
-  process.exit(1);
+async function main() {
+  const binary = findBinary();
+  // npm artifact round-trips (upload/download-artifact in CI) can strip the
+  // executable bit off the prebuilt binary; restore it defensively before exec.
+  try {
+    fs.chmodSync(binary, 0o755);
+  } catch (_) {
+    // read-only install dir or already +x — spawnSync below reports real errors
+  }
+  const extraEnv = {};
+  // Prefer a bundled npm model package (dev / sibling layout); otherwise fetch
+  // it on demand into ~/.umadev/embed-model (the binary's model_dir() fallback).
+  let modelDir = findModelDir();
+  if (!modelDir) modelDir = await ensureModel();
+  if (modelDir && !process.env.UMADEV_EMBED_MODEL_DIR) {
+    extraEnv.UMADEV_EMBED_MODEL_DIR = modelDir;
+  }
+  const knowledgeDir = findKnowledgeDir();
+  if (knowledgeDir && !process.env.UMADEV_KNOWLEDGE_DIR) {
+    extraEnv.UMADEV_KNOWLEDGE_DIR = knowledgeDir;
+  }
+  const spawnOpts = { stdio: 'inherit' };
+  if (Object.keys(extraEnv).length > 0) {
+    spawnOpts.env = { ...process.env, ...extraEnv };
+  }
+  const result = spawnSync(binary, process.argv.slice(2), spawnOpts);
+
+  if (result.error) {
+    console.error(`umadev: failed to exec binary: ${result.error.message}`);
+    process.exit(1);
+  }
+
+  process.exit(result.status === null ? 1 : result.status);
 }
 
-process.exit(result.status === null ? 1 : result.status);
+main();

package/bin/postinstall.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: MIT
+//
+// Post-install PATH check — GLOBAL installs only.
+//
+// Some node setups (notably Homebrew's node) leave npm's global bin dir OFF
+// $PATH. The package installs fine and the `umadev` command is linked, but it
+// lands in a directory the shell doesn't search, so the user later sees a bare
+// "command not found" with no clue why. We cannot change the user's PATH from
+// here, but we can detect the situation and print exactly what happened + how
+// to fix it.
+//
+// FAIL-OPEN BY CONTRACT: every path through this script ends with exit code 0,
+// and the whole body is wrapped in try/catch. A cosmetic PATH check must NEVER
+// break `npm install` — if anything is uncertain, we stay silent.
+'use strict';
+
+function main() {
+  // Only a global install (`npm i -g`) puts a command on PATH. For a local /
+  // dependency install the command is not meant to be on PATH — say nothing.
+  if (process.env.npm_config_global !== 'true') return;
+
+  const path = require('node:path');
+
+  // The prefix npm links global commands under. If npm didn't expose it we
+  // can't reason about PATH — stay quiet rather than risk a false warning.
+  const prefix = process.env.npm_config_prefix;
+  if (!prefix) return;
+
+  const isWin = process.platform === 'win32';
+  // npm links global commands into <prefix>/bin on unix, <prefix> on Windows.
+  const binDir = isWin ? prefix : path.join(prefix, 'bin');
+
+  const sep = isWin ? ';' : ':';
+  const strip = (p) => p.replace(/[\\/]+$/, '');
+  const fold = (p) => (isWin ? strip(p).toLowerCase() : strip(p));
+  const target = fold(binDir);
+  const onPath = (process.env.PATH || '')
+    .split(sep)
+    .filter(Boolean)
+    .some((p) => fold(p) === target);
+
+  // All good — the command will be found. Don't add noise to a clean install.
+  if (onPath) return;
+
+  const w = (s) => process.stderr.write(s + '\n');
+  w('');
+  w('  [warn] umadev installed OK, but its command directory is NOT on your PATH:');
+  w('           ' + binDir);
+  w('         so running `umadev` will say "command not found".');
+  w('         This is your npm/shell setup (common with Homebrew node), not a umadev bug.');
+  w('         umadev 已装好,但命令目录不在 PATH 上,所以敲 umadev 会提示找不到。');
+  w('');
+  w('  Fix — point npm at a prefix already on your PATH, then reinstall:');
+  w('           npm config set prefix ~/.npm-global');
+  w('           # ensure ~/.npm-global/bin is on your PATH, then:');
+  w('           npm i -g umadev@latest');
+  w('         …or just add the directory above to your PATH:');
+  w('           export PATH="' + binDir + (isWin ? ';%PATH%"' : ':$PATH"'));
+  w('');
+}
+
+try {
+  main();
+} catch (_e) {
+  // Never fail the install over a cosmetic PATH check.
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "umadev",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "A project-director Agent for AI coding hosts — drives your logged-in Claude Code / Codex through a 9-phase commercial delivery pipeline with governance. No API key needed.",
   "keywords": [
     "ai",
@@ -30,16 +30,18 @@
     "bin/",
     "README.md"
   ],
+  "scripts": {
+    "postinstall": "node bin/postinstall.js"
+  },
   "engines": {
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@umacloud/cli-darwin-arm64": "1.0.6",
-    "@umacloud/cli-darwin-x64": "1.0.6",
-    "@umacloud/cli-linux-x64": "1.0.6",
-    "@umacloud/cli-linux-arm64": "1.0.6",
-    "@umacloud/cli-win32-x64": "1.0.6",
-    "@umacloud/model-e5-small": "1.0.6",
-    "@umacloud/knowledge": "1.0.6"
+    "@umacloud/cli-darwin-arm64": "1.0.8",
+    "@umacloud/cli-darwin-x64": "1.0.8",
+    "@umacloud/cli-linux-x64": "1.0.8",
+    "@umacloud/cli-linux-arm64": "1.0.8",
+    "@umacloud/cli-win32-x64": "1.0.8",
+    "@umacloud/knowledge": "1.0.8"
   }
 }