yaver-cli - npm Package Compare versions

Comparing version 1.99.263 to 1.99.264

package.json

 {
   "name": "yaver-cli",
-  "version": "1.99.263",
+  "version": "1.99.264",
   "mcpName": "io.github.kivanccakmak/yaver",
@@ -5,0 +5,0 @@ "description": "Unified npm bootstrap for the Yaver agent, SDK injection, and local-first developer runtime",

src/postinstall.js

@@ -230,2 +230,34 @@ #!/usr/bin/env node
 
+// Test-runner tooling. ffmpeg + chromium arrive via the vibe-preview stack;
+// here we ensure the optional Playwright web driver so `yaver test` works with
+// `target: web-playwright` straight after `npm install -g yaver-cli`. The
+// chromedp driver + redroid image are provisioned on demand by the in-app
+// "Install test tools" button (testkit_deps_install), so a run never fails on
+// missing tooling. Best-effort; never fails npm install.
+function installTestRunnerTools() {
+  if (!commandExists("node")) {
+    log("Node not found — skipping Playwright test driver bootstrap.");
+    return;
+  }
+  let hasPW = false;
+  try {
+    execSync("node -e \"require.resolve('playwright')\"", { stdio: ["ignore", "ignore", "ignore"] });
+    hasPW = true;
+  } catch (_) {}
+  if (hasPW) {
+    log("Playwright test driver already present.");
+    return;
+  }
+  const npmCmd = (process.env.npm_execpath || "npm").trim() || "npm";
+  try {
+    execSync(`"${npmCmd}" install -g --no-fund --no-audit playwright`, { stdio: "inherit" });
+    try {
+      execSync("npx --yes playwright install chromium", { stdio: "inherit" });
+    } catch (_) {}
+    log("Installed Playwright test driver (web-playwright target).");
+  } catch (error) {
+    log(`Skipping Playwright test driver bootstrap: ${error.message}`);
+  }
+}
+
 // Make sure `yaver` resolves on PATH for the next shell session. npm's
@@ -523,2 +555,8 @@ // global prefix (e.g. ~/.npm-global/bin) is not on PATH by default on
 
+  // Test runner stack — Playwright web driver (chromium + ffmpeg come from
+  // vibe-preview above). Opt out with YAVER_SKIP_POSTINSTALL_TESTKIT=1.
+  if (!envEnabled("YAVER_SKIP_POSTINSTALL_TESTKIT")) {
+    installTestRunnerTools();
+  }
+
   // Free/offline voice stack — provision ffmpeg + whisper.cpp + a ggml
@@ -525,0 +563,0 @@ // model so `yaver voice test` / `voice listen` (provider=local) work out

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 3 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12796173

0.01%

Lines of code

4788

0.76%

Number of high supply chain risk alerts

1

-50%

Worsened metrics

Number of low supply chain risk alerts

61

3.39%

No dependency changes