Merge pull request #18 from holistics/feat/cli-core-version-env

feat: allow pinning @holistics/cli-core version via HOLISTICS_CLI_CORE_VERSION env

Author: tan-nguyen-holistics

CHANGELOG.md

@@ -1,3 +1,6 @@
+# v0.2.0
+- Support `HOLISTICS_CLI_CORE_VERSION` env to run a specific `@holistics/cli-core` version (defaults to latest)
+
 # v0.1.1
 - Update dependency for security fixes
 

README.md

@@ -18,6 +18,10 @@ The Holistics CLI is built as a lightweight NodeJS wrapper around the `@holistic
 1. Package Management
    - On startup, it automatically downloads the latest version of `@holistics/cli-core` from the npm registry
    - The package is cached locally in `.cache/holistics` for future use
+   - To run a specific version instead of the latest, set the `HOLISTICS_CLI_CORE_VERSION` environment variable:
+     ```bash
+     HOLISTICS_CLI_CORE_VERSION=1.2.3 holistics --help
+     ```
 
 2. Command Execution 
    - Once the core package is loaded, it invokes the `@holistics/cli-core` for the actual command execution

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@holistics/cli-ts",
   "type": "module",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "scripts": {
     "cli": "tsx src/index.ts"
   },

package.json

@@ -1,4 +1,4 @@
-import { writeFile, mkdir, stat } from "fs/promises";
+import { writeFile, mkdir, stat, rm } from "fs/promises";
 import { fetch } from "undici";
 import { extract } from "tar";
 import { join } from "path";
@@ -13,14 +13,20 @@ async function downloadAndExtract(pkg: string, version: string) {
     ? `https://registry.npmjs.org/${pkg.replace("/", "%2F")}/-/${pkg.split("/")[1]}-${encodeURIComponent(version)}.tgz`
     : `https://registry.npmjs.org/${pkg}/-/${pkg}-${version}.tgz`;
 
-  console.log(`Downloading version ${pkg}@${version}...`);
-  const response = await fetch(tarballUrl);
-  if (!response.ok) throw new Error(`Failed to download package: ${response.statusText}`);
-
-  const tarball = await response.arrayBuffer();
-  await writeFile(join(modulePath, "package.tgz"), new Uint8Array(tarball)); // Now safe
-
-  await extract({ file: join(modulePath, "package.tgz"), cwd: modulePath, strip: 1 });
+  try {
+    console.log(`Downloading version ${pkg}@${version}...`);
+    const response = await fetch(tarballUrl);
+    if (!response.ok) throw new Error(`Failed to download package ${pkg}@${version}: ${response.statusText}`);
+
+    const tarball = await response.arrayBuffer();
+    await writeFile(join(modulePath, "package.tgz"), new Uint8Array(tarball)); // Now safe
+
+    await extract({ file: join(modulePath, "package.tgz"), cwd: modulePath, strip: 1 });
+  } catch (err) {
+    // Remove the partial download so the next run doesn't treat it as cached
+    await rm(modulePath, { recursive: true, force: true });
+    throw err;
+  }
 }
 
 async function getLatestVersion(pkg: string): Promise<string> {

src/downloader.ts

@@ -3,7 +3,10 @@ import { Command } from 'commander';
 
 const program = new Command();
 
-const clicore = await loadModule('@holistics/cli-core');
+// Pin a specific @holistics/cli-core version via env, otherwise use the latest
+const cliCoreVersion = process.env.HOLISTICS_CLI_CORE_VERSION?.trim() || undefined;
+
+const clicore = await loadModule('@holistics/cli-core', cliCoreVersion);
 clicore.registerCommands(program);
 
 program.parse(process.argv);