Avoided downloading a browser.

Author: uhop

.npmrc

@@ -0,0 +1,4 @@
+# tape-six-puppeteer's postinstall downloads Chrome; a corrupt download once failed
+# `npm ci` in CI before any test ran. Install the browser by hand instead:
+# `npm run browser:install`.
+ignore-scripts=true

AGENTS.md

@@ -23,7 +23,7 @@ npm install
 - **Test (Bun):** `npm run test:bun`
 - **Test (Deno):** `npm run test:deno`
 - **Test (sequential):** `npm run test:seq` (also `test:seq:bun`, `test:seq:deno`)
-- **Test (browser):** `npm run test:browser` — drives headless Chromium via `tape-six-puppeteer`; auto-starts `tape6-server` on port `55555` (env-overridable, avoids the default `3000` collision). Browser-safe test set is selected by `tape6.tests` (`tests/core/` + `tests/web/`); `tape6.cli` (`tests/node/`) is skipped in browser context. Nothing downloads at install time: `allowScripts` explicitly denies the `tape-six-puppeteer` / `puppeteer` postinstalls (npm's unreviewed-script warning is advisory — only explicit `false` blocks; denial also unlinks those packages' bins, hence the script's direct-path invocation) and `.puppeteerrc.cjs` sets `skipDownload`. The browser resolves from puppeteer's cache (one-time `npx puppeteer browsers install chrome`) or `PUPPETEER_EXECUTABLE_PATH`.
+- **Test (browser):** `npm run test:browser` — drives headless Chromium via `tape-six-puppeteer`; auto-starts `tape6-server` on port `55555` (env-overridable, avoids the default `3000` collision). Browser-safe test set is selected by `tape6.tests` (`tests/core/` + `tests/web/`); `tape6.cli` (`tests/node/`) is skipped in browser context. Nothing downloads at install time: `.npmrc` sets `ignore-scripts=true`, which blocks the `tape-six-puppeteer` / `puppeteer` postinstalls on every npm version, and `.puppeteerrc.cjs` sets `skipDownload`. Do not swap it for `package.json`'s `allowScripts` — that field needs npm 11.16+, so it is silently ignored by the npm 10.9 that Node 22 bundles, and the CI matrix still tests Node 22. The browser resolves from puppeteer's cache (one-time `npm run browser:install`) or `PUPPETEER_EXECUTABLE_PATH`.
 - **Test (single file):** `node tests/<bucket>/test-<name>.js` (bucket is `core`, `web`, or `node`)
 - **TypeScript check:** `npm run ts-check`
 - **JavaScript type check (dual tsconfig):** `npm run js-check`

package.json

@@ -24,7 +24,8 @@
     "test:seq": "tape6-seq --flags FO",
     "test:seq:bun": "bun run `tape6-seq --self` --flags FO",
     "test:seq:deno": "deno run -A `tape6-seq --self` --flags FO",
-    "test:browser": "node node_modules/tape-six-puppeteer/bin/tape6-puppeteer.js --server-url http://localhost:55555 --start-server --flags FO",
+    "test:browser": "tape6-puppeteer --server-url http://localhost:55555 --start-server --flags FO",
+    "browser:install": "npx puppeteer browsers install chrome",
     "ts-check": "tsc --noEmit",
     "js-check": "tsc --project tsconfig.check.json",
     "ts-test": "tape6 --flags FO 'tests/**/test-*.*ts'",
@@ -92,9 +93,5 @@
     "tape-six-proc": "^1.3.1",
     "tape-six-puppeteer": "^1.2.2",
     "typescript": "^7.0.2"
-  },
-  "allowScripts": {
-    "tape-six-puppeteer": false,
-    "puppeteer": false
   }
 }