@bounded-sh/cli 0.0.122

package/README.md

@@ -0,0 +1,23 @@
+# @bounded-sh/cli
+
+The `bounded` CLI for [Bounded](https://bounded.sh), the full-stack app builder
+and policy-enforced runtime for coding agents.
+
+```sh
+npm install -D @bounded-sh/cli
+npx bounded init
+```
+
+This package is a small launcher. npm installs the native binary for your
+platform through one of the optional dependencies (`@bounded-sh/cli-darwin-arm64`,
+`cli-darwin-x64`, `cli-linux-arm64`, `cli-linux-x64`, `cli-win32-x64`), so keep
+optional dependencies enabled. Node 20 or later.
+
+Run every command through npx: `npx bounded verify`, `npx bounded deploy`, and
+so on. Update with `npm install -D @bounded-sh/cli@latest`; `bounded update`
+prints that command instead of replacing a file npm owns.
+
+Without Node, the shell installer installs a global `bounded` on macOS and
+Linux: `curl -fsSL https://get.bounded.sh/install.sh | sh`.
+
+Docs: https://bounded.sh/docs/cli

package/bin/bounded.js

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+'use strict';
+
+// Launcher for the @bounded-sh/cli npm package.
+//
+// The CLI itself is a native Go binary. npm installs exactly one of the
+// per-platform packages listed as optional dependencies (each declares `os` and
+// `cpu`, so npm skips the rest); this file finds that package next to itself and
+// runs the binary with the caller's stdio, forwarding signals and the exit code.
+// It has no dependencies and no install scripts. The child sees
+// BOUNDED_INSTALL_CHANNEL=npm so `bounded update` defers to npm instead of
+// replacing a file npm owns.
+
+const { spawn } = require('node:child_process');
+const path = require('node:path');
+
+const PLATFORMS = {
+  darwin: { arm64: 'darwin-arm64', x64: 'darwin-x64' },
+  linux: { arm64: 'linux-arm64', x64: 'linux-x64' },
+  win32: { x64: 'win32-x64' },
+};
+const OVERRIDE_ENV = 'BOUNDED_CLI_BINARY_OVERRIDE';
+const CHANNEL_ENV = 'BOUNDED_INSTALL_CHANNEL';
+const REINSTALL = 'npm install -D @bounded-sh/cli';
+
+function platformPackage() {
+  const byArch = PLATFORMS[process.platform];
+  const suffix = byArch && byArch[process.arch];
+  if (!suffix) {
+    throw new Error(
+      `@bounded-sh/cli has no prebuilt binary for ${process.platform}-${process.arch}. ` +
+        'Supported: macOS (arm64, x64), Linux (arm64, x64), Windows (x64).',
+    );
+  }
+  return {
+    name: `@bounded-sh/cli-${suffix}`,
+    executable: process.platform === 'win32' ? 'bounded.exe' : 'bounded',
+  };
+}
+
+function resolveBinary() {
+  const override = process.env[OVERRIDE_ENV];
+  if (override) return override;
+  const { name, executable } = platformPackage();
+  let manifest;
+  try {
+    manifest = require.resolve(`${name}/package.json`);
+  } catch {
+    throw new Error(
+      `${name} is not installed next to @bounded-sh/cli. Reinstall with "${REINSTALL}" ` +
+        'with optional dependencies enabled; npm installs only the package for this platform.',
+    );
+  }
+  return path.join(path.dirname(manifest), 'bin', executable);
+}
+
+function main() {
+  let binary;
+  try {
+    binary = resolveBinary();
+  } catch (error) {
+    console.error(`bounded: ${error.message}`);
+    process.exit(1);
+  }
+
+  const child = spawn(binary, process.argv.slice(2), {
+    stdio: 'inherit',
+    env: { ...process.env, [CHANNEL_ENV]: 'npm' },
+  });
+
+  const forwarders = new Map();
+  for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
+    const forward = () => {
+      if (child.exitCode === null && child.signalCode === null) child.kill(signal);
+    };
+    try {
+      process.on(signal, forward);
+      forwarders.set(signal, forward);
+    } catch {
+      // A platform without this signal simply does not forward it.
+    }
+  }
+  const release = () => {
+    for (const [signal, forward] of forwarders) process.removeListener(signal, forward);
+  };
+
+  child.on('error', (error) => {
+    release();
+    console.error(`bounded: could not start ${binary}: ${error.message}`);
+    process.exit(1);
+  });
+  child.on('exit', (code, signal) => {
+    release();
+    if (signal !== null) {
+      if (process.platform !== 'win32') {
+        try {
+          process.kill(process.pid, signal);
+          // Keep the event loop alive for the signal to land; exit 1 otherwise.
+          setTimeout(() => process.exit(1), 1000);
+          return;
+        } catch {
+          // Fall through to a plain failure exit.
+        }
+      }
+      process.exit(1);
+    }
+    process.exit(code === null ? 1 : code);
+  });
+}
+
+main();

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@bounded-sh/cli",
+  "version": "0.0.122",
+  "description": "The bounded CLI (bounded.sh): a full-stack app builder and policy-enforced runtime for coding agents. Installs the native binary for this platform as an optional dependency.",
+  "license": "MIT",
+  "author": "Bounded",
+  "homepage": "https://bounded.sh/docs/cli",
+  "bugs": {
+    "url": "https://github.com/poofdotnew/bounded-cli/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/poofdotnew/bounded-cli.git",
+    "directory": "npm/cli"
+  },
+  "keywords": [
+    "bounded",
+    "cli",
+    "full-stack",
+    "app-builder",
+    "realtime-backend",
+    "policy",
+    "ai-apps"
+  ],
+  "bin": {
+    "bounded": "bin/bounded.js"
+  },
+  "files": [
+    "bin/"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "optionalDependencies": {
+    "@bounded-sh/cli-darwin-arm64": "0.0.122",
+    "@bounded-sh/cli-darwin-x64": "0.0.122",
+    "@bounded-sh/cli-linux-arm64": "0.0.122",
+    "@bounded-sh/cli-linux-x64": "0.0.122",
+    "@bounded-sh/cli-win32-x64": "0.0.122"
+  }
+}