wkappbot-code 0.3.17 → 0.3.19

package/bin/wkappbot-code.js

@@ -200,8 +200,8 @@ function installBin(o) {
   log("bin: bash " + script + " acquire --dest " + target);
   const r = spawnSync("bash", [shPath(script), "acquire", "--dest", shPath(target)], { encoding: "utf8", env: shEnv() });
   for (const line of ((r.stdout || "") + (r.stderr || "")).split("\n").filter(Boolean)) log("  " + line);
-  // rc 3 = the release host could not be reached (a package-registry-only VM): no core, but NOT a failed install --
-  // the hooks and the lite harness need no core and still refuse the risky classes. A sha256 mismatch stays rc 1.
+  // rc 3 = the release host could not be reached (a package-registry-only VM): no core. The hooks and the lite harness
+  // need no core and still refuse the risky classes, but the install reports the missing core as a FAILED part (0.3.13).
   if (r.status === 3) return { ok: false, degraded: true, dest, note: "core not fetched (release host unreachable); hooks + lite harness run without it -- rerun wkappbot-code install once github.com is reachable" };
   if (r.status !== 0) return { ok: false, dest, note: "wk-bin-acquire rc " + r.status };
   // Put `wkappbot` on PATH beside wkappbot-code itself, unless that name is already taken by someone else.
@@ -441,7 +441,7 @@ function install(o) {
     }
   }
   // 0.3.13 (owner 2026-11-08): the famous AI CLIs come along, so a user who knows nothing about LLMs still has them.
-  st.aiClis = (o.npm && o.aiClis) ? installAiClis(log, process.env, undefined, (prev.aiClis && prev.aiClis.installed) || [])
+  st.aiClis = (o.npm && o.aiClis) ? installAiClis(log, process.env, undefined, (prev.aiClis && prev.aiClis.installed) || [], (prev.aiClis && prev.aiClis.prefix) || "")
     : ((prev.aiClis && (prev.aiClis.installed || []).length) ? prev.aiClis : { skipped: true });  // a skip still owns what an earlier install added
   const dest = binDest(o);
   st.bin = o.bin ? installBin(o) : { skipped: true, dest };
@@ -569,7 +569,7 @@ function uninstall(o) {
     else log("shim: kept " + cmdShim + " (it no longer calls " + core + ")");
   }
   // 3d. the AI CLIs this install added (lib/ai-clis.js), never one the user had before
-  removeAiClis((st.aiClis && st.aiClis.installed) || [], log);
+  removeAiClis((st.aiClis && st.aiClis.installed) || [], log, process.env, undefined, (st.aiClis && st.aiClis.prefix) || "");
   // 4. the harness dirs we created, the plugin entry and our config folder
   // Windows frees a closed handle late (ENOTEMPTY): lib/rmtree.js retries ~6 s, then a per-entry pass names the blocker; a failure goes on.
   const rmTree = (p, what) => {

package/lib/ai-clis.js

@@ -23,6 +23,14 @@ export function cliVersion(name, env = process.env) {
   return m ? m[0] : line.slice(0, 40);
 }
 
+// The npm global prefix an install uses RIGHT NOW (npm_config_prefix included: npm exports it to a postinstall worker, so a
+// worker lays the CLIs into the prefix of the `npm install -g wkappbot-code` that started it). Recorded in the state so an
+// uninstall run from another shell takes the CLIs back from THAT prefix, not from whatever its own default prefix is.
+export function npmPrefix(env = process.env) {
+  const r = spawnSync("npm", ["prefix", "-g"], { encoding: "utf8", timeout: 30000, shell: IS_WIN, env });
+  return r.status === 0 ? String(r.stdout || "").trim().split("\n").pop().trim() : "";
+}
+
 function npmGlobal(pkgs, env) {
   const r = spawnSync("npm", ["install", "-g", ...pkgs, "--no-audit", "--no-fund"], { stdio: "inherit", shell: IS_WIN, env });
   return r.status === 0;
@@ -30,13 +38,14 @@ function npmGlobal(pkgs, env) {
 
 // Installs every CLI of AI_CLIS that is not on PATH yet. Returns { installed: [...], present: [...], failed: [...] }.
 // prevInstalled: the names an earlier install added; a rerun keeps owning them, so uninstall still takes them back.
-export function installAiClis(log, env = process.env, list = AI_CLIS, prevInstalled = []) {
+export function installAiClis(log, env = process.env, list = AI_CLIS, prevInstalled = [], prevPrefix = "") {
   const present = [], missing = [];
   for (const c of list) (cliVersion(c.name, env) ? present : missing).push(c);
   if (present.length) log("ai-clis: already installed: " + present.map((c) => c.name).join(", "));
-  const res = { installed: present.map((c) => c.name).filter((n) => prevInstalled.includes(n)), present: present.map((c) => c.name), failed: [] };
+  const res = { installed: present.map((c) => c.name).filter((n) => prevInstalled.includes(n)), present: present.map((c) => c.name), failed: [], prefix: prevPrefix };
   if (!missing.length) return res;
-  log("ai-clis: npm install -g " + missing.map((c) => c.pkg).join(" "));
+  res.prefix = npmPrefix(env) || prevPrefix;
+  log("ai-clis: npm install -g " + missing.map((c) => c.pkg).join(" ") + (res.prefix ? " (prefix " + res.prefix + ")" : ""));
   if (npmGlobal(missing.map((c) => c.pkg), env)) res.installed.push(...missing.map((c) => c.name));
   else {
     log("ai-clis: the one-pass install failed, retrying each CLI alone");
@@ -49,12 +58,14 @@ export function installAiClis(log, env = process.env, list = AI_CLIS, prevInstal
 // uninstall takes back what install added (SDK os-qa 2026-11-09, run 42552244938: the npm prefix bin kept claude, codex,
 // gemini and qwen after uninstall on every leg). Only the names install recorded go; a CLI the user had stays. A failed
 // npm uninstall is a WARN with the command to finish it by hand.
-export function removeAiClis(names, log, env = process.env, list = AI_CLIS) {
+// prefix: the npm global prefix install recorded (SDK os-qa u1-uninstall, 2026-11-09: the worker laid the CLIs into the
+// prefix of the npm that started it, and an uninstall from a shell with another default prefix left them behind).
+export function removeAiClis(names, log, env = process.env, list = AI_CLIS, prefix = "") {
   const pkgs = list.filter((c) => (names || []).includes(c.name)).map((c) => c.pkg);
   if (!pkgs.length) return true;
-  log("ai-clis: npm uninstall -g " + pkgs.join(" "));
-  const r = spawnSync("npm", ["uninstall", "-g", ...pkgs, "--no-audit", "--no-fund"], { stdio: "inherit", shell: IS_WIN, env });
-  if (r.status !== 0) log("ai-clis: WARN npm uninstall rc " + r.status + " -- run: npm uninstall -g " + pkgs.join(" "));
+  log("ai-clis: npm uninstall -g " + pkgs.join(" ") + (prefix ? " (prefix " + prefix + ")" : ""));
+  const r = spawnSync("npm", ["uninstall", "-g", ...pkgs, ...(prefix ? ["--prefix", prefix] : []), "--no-audit", "--no-fund"], { stdio: "inherit", shell: IS_WIN, env });
+  if (r.status !== 0) log("ai-clis: WARN npm uninstall rc " + r.status + " -- run: npm uninstall -g " + pkgs.join(" ") + (prefix ? " --prefix " + prefix : ""));
   return r.status === 0;
 }
 

package/lib/prereq.js

@@ -24,7 +24,7 @@ const realRun = (cmd, args, env) => spawnSync(cmd, args, { stdio: "inherit", env
 export function ensurePrereqs(o = {}) {
   const platform = o.platform || process.platform, env = o.env || process.env, log = o.log || (() => {});
   const which = o.which || realWhich, exists = o.exists || existsSync, run = o.run || realRun;
-  const probe = () => { const found = {}, missing = []; for (const t of TOOLS) { const p = which(t, env); if (p) found[t] = p; else missing.push(t); } return { found, missing }; };
+  let gitDir = ""; const inGit = (t) => { if (!gitDir) return ""; for (const sub of ["bin", join("usr", "bin"), "cmd", join("ucrt64", "bin"), join("mingw64", "bin"), join("clangarm64", "bin")]) { const f = join(gitDir, sub, t + ".exe"); if (exists(f)) return f; } return ""; }; const probe = () => { const found = {}, missing = []; for (const t of TOOLS) { const p = which(t, env) || inGit(t); if (p) found[t] = p; else missing.push(t); } return { found, missing }; };
   let p = probe(), via = "path";
   if (!p.missing.length) return { ok: true, missing: [], found: p.found, via, note: "" };
   if (platform !== "win32") {
@@ -36,17 +36,20 @@ export function ensurePrereqs(o = {}) {
     for (const d of GIT_DIRS(env)) {
       if (!exists(join(d, "bin", "bash.exe"))) continue;
       const key = Object.keys(env).find((k) => k.toUpperCase() === "PATH") || "PATH";
-      env[key] = [join(d, "bin"), join(d, "usr", "bin"), join(d, "cmd")].join(delimiter) + delimiter + (env[key] || "");
+      const dirs = [join(d, "bin"), join(d, "usr", "bin"), join(d, "cmd"), ...[join(d, "ucrt64", "bin"), join(d, "mingw64", "bin"), join(d, "clangarm64", "bin")].filter((x) => exists(x))];
+      env[key] = dirs.join(delimiter) + delimiter + (env[key] || "");
       return d;
     }
     return "";
   };
   let dir = addGit();
+  gitDir = dir;
   if (dir) { p = probe(); via = "git-dir"; log("prereq: Git Bash found at " + dir + " (not on PATH) -- used for this install; add " + join(dir, "bin") + " to your PATH"); }
   if (p.missing.length && !o.noInstall && which("winget", env)) {
     log("prereq: Git for Windows (Git Bash) is missing -- installing it with winget");
     const rc = run("winget", ["install", "--id", "Git.Git", "-e", "--source", "winget", "--silent", "--accept-package-agreements", "--accept-source-agreements"], env);
     dir = addGit();
+    gitDir = dir;
     if (dir) { p = probe(); via = "winget"; log("prereq: winget installed Git for Windows at " + dir + " (rc " + rc + ")"); }
     else log("prereq: winget rc " + rc + " but no Git Bash was found afterwards");
   }

package/lib/setup-run.js

@@ -133,13 +133,25 @@ export function printBanner({ home = homedir(), out = console.log, now = Date.no
 // cannot be started (not on PATH): the caller then prints the usage as before.
 // 0.3.12: `opencode` is looked up on PATH first, then beside this CLI (argv1 = the npm bin dir where `npm i -g opencode-ai`
 // linked it), so a global prefix that is not on the user PATH still opens it.
+// 0.3.19: the binary is resolved BY FILE before spawning. On Windows a shell spawn of a missing name returns status 1
+// with no r.error ("'opencode' is not recognized"), so the old error-only fallback never reached the sibling .cmd shim.
 export function launchOpenCode(env = process.env, argv1 = process.argv[1] || "") {
-  const run = (cmd, e) => spawnSync(cmd, [], { stdio: "inherit", shell: IS_WIN, env: e });
-  let r = run("opencode", env);
-  if (r.error && argv1) r = run("opencode", withPathFirst({ ...env }, dirname(argv1)));
+  const bin = findOpenCode(env, argv1 ? dirname(argv1) : "");
+  if (!bin) return null;
+  const shell = IS_WIN && /\.(?:cmd|bat)$/i.test(bin);
+  const r = spawnSync(shell ? '"' + bin + '"' : bin, [], { stdio: "inherit", shell, env: withPathFirst({ ...env }, dirname(bin)) });
   if (r.error) return null;
   return r.status ?? 1;
 }
+// The opencode file on PATH, else beside this CLI (the npm bin dir); "" when there is none anywhere.
+export function findOpenCode(env = process.env, besideDir = "") {
+  const names = IS_WIN ? ["opencode.cmd", "opencode.exe", "opencode"] : ["opencode"];
+  const k = Object.keys(env).find((x) => x.toLowerCase() === "path") || "PATH";
+  const dirs = String(env[k] || "").split(delimiter).filter(Boolean);
+  if (besideDir) dirs.push(besideDir);
+  for (const d of dirs) for (const n of names) { const p = join(d, n); if (existsSync(p)) return p; }
+  return "";
+}
 
 // The npm global bin dir (where `npm i -g` links binaries): prefix/bin, or the prefix itself on Windows. "" when unknown.
 export function globalBinDir(env = process.env) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wkappbot-code",
-  "version": "0.3.17",
+  "version": "0.3.19",
   "description": "wkappbot-code -- Wisdom Kernel: the pinned OpenCode bridge plus the reflex harness plugin, the wkappbot core, the web harness and the latest public skills in one install",
   "type": "module",
   "scripts": {