wkappbot-code 0.3.11 → 0.3.12

package/bin/postinstall.js

@@ -5,7 +5,7 @@
 // Owner order 2026-11-08: "npm install wkappbot-code should do the initial setup and the tests automatically" -- on
 // Windows, macOS and Linux alike, not only on a cloud VM.
 // CONTRACT: (a) ALWAYS exits 0 and returns within a moment -- the real work runs DETACHED and logs to
-// ~/.wkappbot-code/postinstall.log; (b) the worker runs `wkappbot-code install --no-npm` (lays the web harness, wires
+// ~/.wkappbot-code/postinstall.log; (b) the worker runs `wkappbot-code install` (lays the web harness, wires
 // ~/.claude/settings.json through the lite harness -- PreToolUse, Stop, UserPromptSubmit, SessionStart -- the global git
 // hooks, the wkskill/wk-verify shims and the public skills, keeping every user setting), then `wkappbot-code doctor`,
 // then a short self-test (lib/setup-run.js: core --version, skill read on-load, one hook allow, one hook refuse), and
@@ -23,7 +23,7 @@ import { homedir } from "node:os";
 import { appendFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { buildDone, files, markRunning, parseDoctor, platformOf, selfTest, writeDone } from "../lib/setup-run.js";
+import { buildDone, files, globalBinDir, markRunning, parseDoctor, platformOf, selfTest, withPathFirst, writeDone } from "../lib/setup-run.js";
 
 const HERE = dirname(fileURLToPath(import.meta.url));
 const CLI = join(HERE, "wkappbot-code.js");
@@ -41,12 +41,15 @@ function stamp(msg) { try { mkdirSync(STATE, { recursive: true }); appendFileSyn
 
 // --run: the detached worker. install, then doctor, then the self-test, then the done file.
 async function runWorker() {
-  const args = [CLI, "install", "--no-npm"];
+  // 0.3.12: no --no-npm -- the worker installs the pinned OpenCode (npm -g, so `opencode` lands on PATH beside wkappbot-code);
+  // the selftests keep their machine untouched by adding --no-npm through WKAPPBOT_CODE_INSTALL_ARGS.
+  const args = [CLI, "install"];
   if (process.env.WKAPPBOT_CODE_DEV_SEAT === "1") args.push("--dev-seat");
   // extra install flags, e.g. "--no-bin --no-skills" (the selftest; a seat without the SDK release assets)
   args.push(...String(process.env.WKAPPBOT_CODE_INSTALL_ARGS || "").split(/\s+/).filter((a) => /^--[a-z-]+$/.test(a)));
   // the children are the worker's own: they must not print the first-run banner (it is for the user's next command)
-  const env = { ...process.env, WKAPPBOT_CODE_NO_UPDATE_CHECK: "1", WKAPPBOT_CODE_SETUP_WORKER: "1" };
+  // the global npm bin dir holds `opencode` right after the install, whether or not the user PATH names it yet
+  const env = withPathFirst({ ...process.env, WKAPPBOT_CODE_NO_UPDATE_CHECK: "1", WKAPPBOT_CODE_SETUP_WORKER: "1" }, globalBinDir(process.env));
   stamp("worker start: node " + args.join(" "));
   const out = openSync(LOG, "a");
   const installRc = await new Promise((res) => {

package/bin/wkappbot-code.js

@@ -40,7 +40,7 @@ import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { quietCheck, runUpdate, updateRow } from "../lib/update.js"; import { rmTreeHard } from "../lib/rmtree.js"; import { plainFileUrl } from "../lib/fileurl.js";
 import { applySets, askEach, buildConfig, configRow, detect, lineDiff, printDetected } from "../lib/config.js";
-import { launchOpenCode, printBanner } from "../lib/setup-run.js";
+import { files as setupFiles, launchOpenCode, printBanner } from "../lib/setup-run.js";
 
 const PKG_DIR = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 const PKG = JSON.parse(readFileSync(join(PKG_DIR, "package.json"), "utf8"));
@@ -383,7 +383,21 @@ function recordPrior(prev) {
     hooksDirExisted: existsSync(HOOKS_DIR()), shimsExisting: shimCandidates().filter((p) => existsSync(p) || isSymlink(p)) };
 }
 
+// A user's own `wkappbot-code install` right after `npm i -g` must not race the background setup worker (both wrote the
+// same core file; SDK run 42504778443, install rc 1): wait for a live worker's postinstall.running to go, at most 10 min.
+function waitForSetupWorker() {
+  if (process.env.WKAPPBOT_CODE_SETUP_WORKER === "1") return;   // the worker's own install
+  const f = setupFiles(homedir());
+  const alive = () => { try { const r = JSON.parse(readFileSync(f.running, "utf8")); const age = Date.now() - Date.parse(r.at || 0); return age >= 0 && age < 30 * 60 * 1000; } catch { return false; } };
+  if (!alive()) return;
+  log("waiting for the background setup to finish (log: " + f.log + ")");
+  const nap = (ms) => Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+  for (let i = 0; i < 600 && alive(); i++) nap(1000);
+  log(alive() ? "background setup still running after 10 min; installing anyway" : "background setup finished; continuing");
+}
+
 function install(o) {
+  waitForSetupWorker();
   const prev = readState(o);
   const st = { version: PKG.version, at: new Date().toISOString(), prior: recordPrior(prev) };
   let bad = 0;
@@ -397,7 +411,9 @@ function install(o) {
     if (have === OPENCODE_VERSION) log("opencode " + have + " already installed");
     else {
       log("npm install -g opencode-ai@" + OPENCODE_VERSION + " (was: " + (have || "none") + ")");
-      execFileSync("npm", ["install", "-g", "opencode-ai@" + OPENCODE_VERSION, "--no-audit", "--no-fund"], { shell: process.platform === "win32",  stdio: "inherit" });
+      // 0.3.12: a failed OpenCode install (offline, no npm rights) must not abort the harness, plugin and config parts below.
+      try { execFileSync("npm", ["install", "-g", "opencode-ai@" + OPENCODE_VERSION, "--no-audit", "--no-fund"], { shell: process.platform === "win32",  stdio: "inherit" }); }
+      catch (e) { bad++; log("opencode: npm install FAILED (" + String(e.message).split("\n")[0] + ") -- run: npm install -g opencode-ai@" + OPENCODE_VERSION); }
     }
   }
   const dest = binDest(o);
@@ -495,6 +511,15 @@ function uninstall(o) {
   for (const p of st.shims || []) {
     if (isSymlink(p) || existsSync(p)) { rmSync(p, { force: true }); log("shim: removed " + p); }
   }
+  // 3b. the ~/.local/bin/wkappbot link: removed ONLY when it points at the core this install placed (the core file stays)
+  const core = (st.bin && st.bin.dest) || binDest(o);
+  let linkRemoved = "";
+  for (const p of new Set(shimCandidates().concat([join(homedir(), ".local", "bin", "wkappbot")]))) {
+    if (!isSymlink(p) || (st.shims || []).includes(p)) continue;
+    let tgt = ""; try { tgt = resolve(dirname(p), readlinkSync(p)); } catch {}
+    if (tgt && real(tgt) === real(core)) { rmSync(p, { force: true }); linkRemoved = p; log("shim: removed " + p + " (a link to the core this install placed, " + core + ")"); }
+    else log("shim: kept " + p + " (not a link to " + core + ")");
+  }
   // 4. the harness dirs we created, the plugin entry and our config folder
   // Windows frees a closed handle late (ENOTEMPTY): lib/rmtree.js retries ~6 s, then a per-entry pass names the blocker; a failure goes on.
   const rmTree = (p, what) => {
@@ -516,7 +541,7 @@ function uninstall(o) {
   } catch {}
   rmTree(STATE_HOME());
   rmTree(join(configDir(o), "wkappbot-code"));
-  log("uninstall done. Kept: opencode-ai, the wkappbot core (" + ((st.bin && st.bin.dest) || binDest(o)) + ") and its skills, and this CLI (npm rm -g wkappbot-code)");
+  log("uninstall done." + (linkRemoved ? " Removed the link " + linkRemoved + "." : "") + " Kept: opencode-ai, the wkappbot core (" + core + ") and its skills, and this CLI (npm rm -g wkappbot-code)");
   return rc;
 }
 

package/lib/config.js

@@ -16,6 +16,8 @@ export const PROVIDERS = [
   ["GROQ_API_KEY", "groq", "groq/llama-3.3-70b-versatile"],
   ["OPENROUTER_API_KEY", "openrouter", "openrouter/anthropic/claude-sonnet-4.5"],
 ];
+// The free OpenCode tier: no API key, no login (opencode.ai Zen free models). Used only when the user set nothing.
+export const FREE_MODEL = "opencode/big-pickle";
 const defaultModel = (prov) => { const d = PROVIDERS.find((p) => p[1] === prov); return d ? d[2] : prov + "/default"; };
 
 // Provider ids of an existing `opencode auth login` (key names only).
@@ -34,6 +36,8 @@ export function detect({ env = process.env, user = {}, pluginUrl = "", kih = "",
     else {
       const a = authProviders(env)[0];
       if (a) it.model = { value: defaultModel(a), source: "opencode auth login (" + a + ")" };
+      // 0.3.12: nothing set anywhere -> the free OpenCode tier (no key, no login), so a fresh install opens a working start screen
+      else it.model = { value: FREE_MODEL, source: "OpenCode free default, no key needed" };
     }
   }
   if (it.model) it.provider = { value: it.model.value.split("/")[0], source: it.model.source };

package/lib/setup-run.js

@@ -1,7 +1,7 @@
 // wkappbot-code lib/setup-run.js -- what `npm install wkappbot-code` does after the files land, and what the first
 // `wkappbot-code` run says about it (owner order 2026-11-08: "npm install wkappbot-code should do the initial setup and
 // the tests automatically", "typing wkappbot-code should show the OpenCode start screen").
-//   worker  bin/postinstall.js --run: install --no-npm, then doctor, then selfTest() below, then ONE postinstall.done
+//   worker  bin/postinstall.js --run: install, then doctor, then selfTest() below, then ONE postinstall.done
 //           JSON {version, installRc, rc, doctor:{pass,warn,fail,skip}, selftest:{n,m}, platform, at, items}.
 //   banner  bannerFor() / printBanner(): the one line the first run prints ("setup ok, doctor 9/9, selftest 4/4", the
 //           failing item with the log path, or "setup still running"), shown ONCE per done file (postinstall.seen).
@@ -11,7 +11,7 @@
 import { spawnSync } from "node:child_process";
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
-import { join } from "node:path";
+import { delimiter, dirname, join } from "node:path";
 
 const RUNNING_STALE_MS = 30 * 60 * 1000;   // a worker that left no done file for 30 minutes is dead, not "still running"
 const IS_WIN = process.platform === "win32";
@@ -128,8 +128,26 @@ export function printBanner({ home = homedir(), out = console.log, now = Date.no
 // ---- bare launch ----------------------------------------------------------------------------------
 // `wkappbot-code` with no arguments opens OpenCode (its start screen). Returns the exit code, or null when opencode
 // cannot be started (not on PATH): the caller then prints the usage as before.
-export function launchOpenCode(env = process.env) {
-  const r = spawnSync("opencode", [], { stdio: "inherit", shell: IS_WIN, env });
+// 0.3.12: `opencode` is looked up on PATH first, then beside this CLI (argv1 = the npm bin dir where `npm i -g opencode-ai`
+// linked it), so a global prefix that is not on the user PATH still opens it.
+export function launchOpenCode(env = process.env, argv1 = process.argv[1] || "") {
+  const run = (cmd, e) => spawnSync(cmd, [], { stdio: "inherit", shell: IS_WIN, env: e });
+  let r = run("opencode", env);
+  if (r.error && argv1) r = run("opencode", withPathFirst({ ...env }, dirname(argv1)));
   if (r.error) return null;
   return r.status ?? 1;
 }
+
+// The npm global bin dir (where `npm i -g` links binaries): prefix/bin, or the prefix itself on Windows. "" when unknown.
+export function globalBinDir(env = process.env) {
+  const r = spawnSync("npm", ["prefix", "-g"], { encoding: "utf8", env, shell: IS_WIN, timeout: 30000 });
+  const p = r.status === 0 ? String(r.stdout || "").trim().split(/\r?\n/).pop() : "";
+  return p ? (IS_WIN ? p : join(p, "bin")) : "";
+}
+// env with dir first on PATH (the key is spelled Path on Windows).
+export function withPathFirst(env, dir) {
+  if (!dir) return env;
+  const k = Object.keys(env).find((x) => x.toLowerCase() === "path") || "PATH";
+  env[k] = dir + delimiter + (env[k] || "");
+  return env;
+}

package/lib/wk-bin-acquire.sh

@@ -130,7 +130,9 @@ repo_file() {
   echo "$REPO/bin/$rel"
 }
 
-# install_file SRC DEST LABEL -- copy via .new then mv; "up to date" when DEST already matches.
+# install_file SRC DEST LABEL -- copy via a per-process .new.PID then mv; "up to date" when DEST already matches.
+# The temp name is unique per process: two installs at once (npm's background setup and a user's own
+# `wkappbot-code install`, SDK run 42504778443) both wrote DEST.new and one failed with cp: File exists.
 install_file() {
   command -v wk_stopwatch_lap >/dev/null 2>&1 && wk_stopwatch_lap "install_file" || true
   local src="$1" dest="$2" label="$3" sum verb="installed"
@@ -141,9 +143,11 @@ install_file() {
   fi
   if [ "$WK_DRY" = 1 ]; then verb="would install"; fi
   run mkdir -p "$(dirname "$dest")"
-  run cp "$src" "$dest.new"
-  run chmod +x "$dest.new"
-  run mv -f "$dest.new" "$dest"
+  local tmp="$dest.new.$$"
+  run rm -f "$tmp"
+  run cp "$src" "$tmp"
+  run chmod +x "$tmp"
+  run mv -f "$tmp" "$dest"
   echo "$verb: $dest (source: $label) sha256=$sum"
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wkappbot-code",
-  "version": "0.3.11",
+  "version": "0.3.12",
   "description": "wkappbot-code -- Wisdom Kernel: the pinned OpenCode bridge plus the reflex harness plugin, the wkappbot core, the web harness and the latest public skills in one install",
   "type": "module",
   "scripts": {