@cnife/flyer 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CNife
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,33 @@
-# Temporary Holding Version
+# @cnife/flyer
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Publish HTML to a shareable URL. Defaults to a 1-hour page; optional password, permanent pages, and terminal QR code.
+
+```bash
+npx -y @cnife/flyer@latest publish report.html
+npm install -g @cnife/flyer
+```
+
+The package is a small launcher. On first run it downloads the matching `flyer` binary from [GitHub Releases](https://github.com/CNife/flyer/releases), verifies `checksums.txt`, and caches it under `~/.cache/flyer/` (or `%LOCALAPPDATA%\flyer\cache` on Windows). Set `FLYER_CACHE_DIR` to override; set `FLYER_RELEASE_BASE` only for mirrors or testing.
+
+## Usage
+
+```bash
+flyer publish report.html
+flyer publish report.html --ttl 24h
+flyer publish report.html --permanent
+flyer publish report.html --password secret
+cat report.html | flyer publish -
+```
+
+`stdout` is only the URL; metadata and the QR code go to `stderr`. Use `--no-qr` in scripts and `--json` for structured output.
+
+Connect to a server:
+
+```bash
+flyer config set server https://flyer.example.com
+flyer config set key fly_...
+```
+
+Server setup, API, and source: <https://github.com/CNife/flyer>.
+
+MIT licensed.

package/bin/flyer.js

@@ -0,0 +1,41 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawn } = require('node:child_process');
+const { ensureBinary } = require('../lib/install');
+
+async function main() {
+  const binary = await ensureBinary();
+  const child = spawn(binary, process.argv.slice(2), { stdio: 'inherit' });
+
+  for (const signal of ['SIGINT', 'SIGTERM']) {
+    process.on(signal, () => {
+      try {
+        child.kill(signal);
+      } catch {
+        // the child may already be gone
+      }
+    });
+  }
+
+  child.on('error', (err) => {
+    console.error(`flyer: ${err.message}`);
+    process.exit(1);
+  });
+  child.on('exit', (code, signal) => {
+    if (signal) {
+      try {
+        process.kill(process.pid, signal);
+        return;
+      } catch {
+        // fall through to the numeric exit code
+      }
+    }
+    process.exit(code ?? 1);
+  });
+}
+
+main().catch((err) => {
+  console.error(`flyer: ${err.message}`);
+  process.exit(1);
+});

package/lib/install.js

@@ -0,0 +1,217 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const http = require('node:http');
+const https = require('node:https');
+const os = require('node:os');
+const path = require('node:path');
+const { URL } = require('node:url');
+
+const pkg = require('../package.json');
+
+const DEFAULT_RELEASE_BASE = 'https://github.com/CNife/flyer/releases/download';
+const MAX_CHECKSUM_BYTES = 1024 * 1024;
+const MAX_BINARY_BYTES = 128 * 1024 * 1024;
+const MAX_REDIRECTS = 5;
+
+const PLATFORMS = {
+  'linux-x64': { os: 'linux', arch: 'amd64', ext: '' },
+  'linux-arm64': { os: 'linux', arch: 'arm64', ext: '' },
+  'darwin-x64': { os: 'darwin', arch: 'amd64', ext: '' },
+  'darwin-arm64': { os: 'darwin', arch: 'arm64', ext: '' },
+  'win32-x64': { os: 'windows', arch: 'amd64', ext: '.exe' },
+  'win32-arm64': { os: 'windows', arch: 'arm64', ext: '.exe' },
+};
+
+function releaseBase() {
+  return (process.env.FLYER_RELEASE_BASE || DEFAULT_RELEASE_BASE).replace(/\/+$/, '');
+}
+
+function platformInfo(platform = process.platform, arch = process.arch) {
+  const info = PLATFORMS[`${platform}-${arch}`];
+  if (!info) {
+    throw new Error(
+      `unsupported platform ${platform}/${arch}; install a binary from https://github.com/CNife/flyer/releases`,
+    );
+  }
+  return info;
+}
+
+function assetName(version, goos, goarch) {
+  const ext = goos === 'windows' ? '.exe' : '';
+  return `flyer_${version}_${goos}_${goarch}${ext}`;
+}
+
+function checksumsUrl(version) {
+  return `${releaseBase()}/v${version}/checksums.txt`;
+}
+
+function binaryUrl(version, asset) {
+  return `${releaseBase()}/v${version}/${asset}`;
+}
+
+function parseChecksums(text) {
+  const sums = new Map();
+  for (const raw of text.split(/\r?\n/)) {
+    const line = raw.trim();
+    if (!line || line.startsWith('#')) continue;
+    const match = /^([a-fA-F0-9]{64})\s+\*?(.+?)\s*$/.exec(line);
+    if (match) sums.set(match[2], match[1].toLowerCase());
+  }
+  return sums;
+}
+
+function cacheRoot() {
+  if (process.env.FLYER_CACHE_DIR) return process.env.FLYER_CACHE_DIR;
+  if (process.platform === 'win32' && process.env.LOCALAPPDATA) {
+    return path.join(process.env.LOCALAPPDATA, 'flyer', 'cache');
+  }
+  return path.join(process.env.XDG_CACHE_HOME || path.join(os.homedir(), '.cache'), 'flyer');
+}
+
+function binaryPath(version, info) {
+  return path.join(cacheRoot(), version, `${info.os}-${info.arch}`, `flyer${info.ext}`);
+}
+
+function isUsable(file) {
+  try {
+    return fs.statSync(file).size > 0;
+  } catch {
+    return false;
+  }
+}
+
+function request(url, redirects = 0) {
+  if (redirects > MAX_REDIRECTS) {
+    return Promise.reject(new Error(`too many redirects for ${url}`));
+  }
+  const parsed = new URL(url);
+  const transport = parsed.protocol === 'https:' ? https : parsed.protocol === 'http:' ? http : null;
+  if (!transport) {
+    return Promise.reject(new Error(`unsupported URL ${url}`));
+  }
+  return new Promise((resolve, reject) => {
+    const req = transport.get(
+      parsed,
+      { headers: { 'user-agent': `flyer/${pkg.version}` } },
+      (res) => {
+        const status = res.statusCode || 0;
+        if (status >= 300 && status < 400 && res.headers.location) {
+          res.resume();
+          resolve(request(new URL(res.headers.location, parsed).toString(), redirects + 1));
+          return;
+        }
+        if (status !== 200) {
+          res.resume();
+          reject(new Error(`download ${url} failed: HTTP ${status}`));
+          return;
+        }
+        resolve(res);
+      },
+    );
+    req.on('error', reject);
+    req.setTimeout(30000, () => req.destroy(new Error(`download ${url} timed out`)));
+  });
+}
+
+async function readText(url, maxBytes = MAX_CHECKSUM_BYTES) {
+  const res = await request(url);
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of res) {
+    size += chunk.length;
+    if (size > maxBytes) {
+      res.destroy();
+      throw new Error(`download ${url} is too large`);
+    }
+    chunks.push(chunk);
+  }
+  return Buffer.concat(chunks).toString('utf8');
+}
+
+async function download(url, dest) {
+  const res = await request(url);
+  await new Promise((resolve, reject) => {
+    const out = fs.createWriteStream(dest, { mode: 0o700 });
+    let size = 0;
+    res.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > MAX_BINARY_BYTES) {
+        res.destroy(new Error(`download ${url} is too large`));
+      }
+    });
+    res.on('error', reject);
+    out.on('error', reject);
+    out.on('finish', resolve);
+    res.pipe(out);
+  });
+}
+
+function sha256(file) {
+  const hash = crypto.createHash('sha256');
+  hash.update(fs.readFileSync(file));
+  return hash.digest('hex');
+}
+
+function equalHex(leftHex, rightHex) {
+  const left = Buffer.from(leftHex, 'hex');
+  const right = Buffer.from(rightHex, 'hex');
+  return left.length > 0 && left.length === right.length && crypto.timingSafeEqual(left, right);
+}
+
+async function ensureBinary() {
+  const info = platformInfo();
+  const version = pkg.version;
+  const dest = binaryPath(version, info);
+  if (isUsable(dest)) return dest;
+
+  const asset = assetName(version, info.os, info.arch);
+  const sums = parseChecksums(await readText(checksumsUrl(version)));
+  const want = sums.get(asset);
+  if (!want) {
+    throw new Error(`checksum for ${asset} not found in checksums.txt`);
+  }
+
+  const dir = path.dirname(dest);
+  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+  const tmp = path.join(dir, `.${asset}.${process.pid}.${Date.now()}`);
+  try {
+    await download(binaryUrl(version, asset), tmp);
+    const got = sha256(tmp);
+    if (!equalHex(got, want)) {
+      throw new Error(`checksum mismatch for ${asset}: got ${got}, want ${want}`);
+    }
+    if (process.platform !== 'win32') {
+      fs.chmodSync(tmp, 0o755);
+    }
+    try {
+      fs.renameSync(tmp, dest);
+    } catch (err) {
+      if (isUsable(dest)) {
+        fs.unlinkSync(tmp);
+        return dest;
+      }
+      throw err;
+    }
+  } catch (err) {
+    try {
+      fs.unlinkSync(tmp);
+    } catch {
+      // ignore cleanup errors
+    }
+    throw err;
+  }
+  return dest;
+}
+
+module.exports = {
+  assetName,
+  binaryPath,
+  binaryUrl,
+  cacheRoot,
+  checksumsUrl,
+  ensureBinary,
+  parseChecksums,
+  platformInfo,
+};

package/package.json

@@ -1,6 +1,40 @@
 {
   "name": "@cnife/flyer",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Publish HTML to shareable, expiring, password-protected URLs.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/CNife/flyer.git"
+  },
+  "homepage": "https://github.com/CNife/flyer",
+  "bugs": {
+    "url": "https://github.com/CNife/flyer/issues"
+  },
+  "bin": {
+    "flyer": "bin/flyer.js"
+  },
+  "files": [
+    "bin",
+    "lib",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "node --test"
+  },
+  "keywords": [
+    "flyer",
+    "html",
+    "share",
+    "publish",
+    "cli",
+    "agent"
+  ]
+}