@clovapi/cli 0.1.0

package/README.md

@@ -0,0 +1,19 @@
+# @clovapi/cli
+
+Install `clovapi` as a global npm command:
+
+```bash
+npm i -g @clovapi/cli
+clovapi version
+```
+
+The package downloads platform binaries and verifies SHA256 checksums.
+By default it tries:
+
+1. `https://downloads.clovapi.com/clovapi/vX.Y.Z` (R2 public mirror)
+2. GitHub Releases fallback
+
+## Environment override
+
+- `CLOVAPI_CLI_BASE_URL`: override download base URL for mirrors or local testing.
+- `CLOVAPI_R2_BASE_URL`: override the default R2 base URL (versioned path).

package/bin/clovapi.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+
+const { spawnSync } = require("node:child_process");
+const fs = require("node:fs");
+const path = require("node:path");
+
+const exeName = process.platform === "win32" ? "clovapi.exe" : "clovapi";
+const binPath = path.join(__dirname, "..", "vendor", exeName);
+
+if (!fs.existsSync(binPath)) {
+  console.error("clovapi binary is not installed.");
+  console.error("Reinstall with: npm i -g @clovapi/cli");
+  process.exit(1);
+}
+
+const result = spawnSync(binPath, process.argv.slice(2), {
+  stdio: "inherit",
+});
+
+if (result.error) {
+  console.error(result.error.message);
+  process.exit(1);
+}
+
+process.exit(result.status ?? 0);

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@clovapi/cli",
+  "version": "0.1.0",
+  "description": "Install clovapi CLI from GitHub Releases",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/joohw/clovapi.git",
+    "directory": "switcher/npm"
+  },
+  "license": "MIT",
+  "bin": {
+    "clovapi": "bin/clovapi.js"
+  },
+  "scripts": {
+    "postinstall": "node scripts/install.js"
+  },
+  "files": [
+    "bin",
+    "scripts",
+    "vendor",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "adm-zip": "^0.5.16",
+    "tar": "^7.4.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/scripts/install.js

@@ -0,0 +1,173 @@
+const crypto = require("node:crypto");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+const AdmZip = require("adm-zip");
+const tar = require("tar");
+
+const pkg = require("../package.json");
+
+const PLATFORM_MAP = {
+  darwin: "darwin",
+  linux: "linux",
+  win32: "windows",
+};
+
+const ARCH_MAP = {
+  x64: "amd64",
+  arm64: "arm64",
+};
+
+function fail(message) {
+  console.error(`[clovapi install] ${message}`);
+  process.exit(1);
+}
+
+function getReleaseCoordinates() {
+  const osName = PLATFORM_MAP[process.platform];
+  if (!osName) {
+    fail(`unsupported platform: ${process.platform}`);
+  }
+
+  const archName = ARCH_MAP[process.arch];
+  if (!archName) {
+    fail(`unsupported arch: ${process.arch}`);
+  }
+
+  const versionTag = `v${pkg.version}`;
+  const ext = osName === "windows" ? "zip" : "tar.gz";
+  const archiveName = `clovapi_${versionTag}_${osName}_${archName}.${ext}`;
+
+  return {
+    osName,
+    archName,
+    versionTag,
+    archiveName,
+  };
+}
+
+async function download(url) {
+  const response = await fetch(url);
+  if (!response.ok) {
+    throw new Error(`download failed ${response.status} for ${url}`);
+  }
+  const arr = await response.arrayBuffer();
+  return Buffer.from(arr);
+}
+
+function trimTrailingSlash(input) {
+  return String(input || "").replace(/\/+$/, "");
+}
+
+function buildBaseUrlCandidates(versionTag) {
+  if (process.env.CLOVAPI_CLI_BASE_URL) {
+    return [trimTrailingSlash(process.env.CLOVAPI_CLI_BASE_URL)];
+  }
+
+  const bases = [];
+  const r2Base = trimTrailingSlash(
+    process.env.CLOVAPI_R2_BASE_URL || `https://downloads.clovapi.com/clovapi/${versionTag}`
+  );
+  if (r2Base) bases.push(r2Base);
+  bases.push(`https://github.com/joohw/clovapi/releases/download/${versionTag}`);
+  return bases;
+}
+
+function parseChecksum(checksumContent, fileName) {
+  const line = checksumContent
+    .split(/\r?\n/)
+    .map((v) => v.trim())
+    .find((v) => v.endsWith(` ${fileName}`));
+
+  if (!line) {
+    throw new Error(`checksum not found for ${fileName}`);
+  }
+
+  return line.split(/\s+/)[0];
+}
+
+function sha256(buffer) {
+  return crypto.createHash("sha256").update(buffer).digest("hex");
+}
+
+async function extractArchive(archivePath, archiveName, outDir) {
+  if (archiveName.endsWith(".zip")) {
+    const zip = new AdmZip(archivePath);
+    zip.extractAllTo(outDir, true);
+    return;
+  }
+
+  if (archiveName.endsWith(".tar.gz")) {
+    await tar.x({
+      file: archivePath,
+      cwd: outDir,
+      gzip: true,
+    });
+    return;
+  }
+
+  throw new Error(`unsupported archive format: ${archiveName}`);
+}
+
+async function main() {
+  const { versionTag, archiveName } = getReleaseCoordinates();
+  const baseCandidates = buildBaseUrlCandidates(versionTag);
+  let checksumBuffer = null;
+  let archiveBuffer = null;
+  let usedBaseUrl = "";
+  let lastError = null;
+
+  for (const baseUrl of baseCandidates) {
+    const checksumUrl = `${baseUrl}/checksums.txt`;
+    const archiveUrl = `${baseUrl}/${archiveName}`;
+    try {
+      console.log(`[clovapi install] trying ${baseUrl}`);
+      [checksumBuffer, archiveBuffer] = await Promise.all([
+        download(checksumUrl),
+        download(archiveUrl),
+      ]);
+      const expected = parseChecksum(checksumBuffer.toString("utf8"), archiveName);
+      const actual = sha256(archiveBuffer);
+      if (expected !== actual) {
+        throw new Error(`checksum mismatch for ${archiveName}`);
+      }
+      usedBaseUrl = baseUrl;
+      break;
+    } catch (error) {
+      lastError = error;
+      console.warn(`[clovapi install] source failed: ${baseUrl}`);
+    }
+  }
+
+  if (!checksumBuffer || !archiveBuffer) {
+    throw new Error(`all sources failed: ${lastError ? lastError.message : "unknown error"}`);
+  }
+
+  console.log(`[clovapi install] downloading ${archiveName} from ${usedBaseUrl}`);
+
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "clovapi-install-"));
+  const archivePath = path.join(tmpDir, archiveName);
+  fs.writeFileSync(archivePath, archiveBuffer);
+
+  const vendorDir = path.join(__dirname, "..", "vendor");
+  fs.mkdirSync(vendorDir, { recursive: true });
+
+  await extractArchive(archivePath, archiveName, vendorDir);
+
+  const exeName = process.platform === "win32" ? "clovapi.exe" : "clovapi";
+  const binaryPath = path.join(vendorDir, exeName);
+  if (!fs.existsSync(binaryPath)) {
+    throw new Error(`binary not found after extraction: ${exeName}`);
+  }
+
+  if (process.platform !== "win32") {
+    fs.chmodSync(binaryPath, 0o755);
+  }
+
+  console.log("[clovapi install] install complete");
+}
+
+main().catch((err) => {
+  fail(err.message);
+});

package/vendor/.gitkeep

@@ -0,0 +1 @@
+