@compressius/cmx 0.1.19

package/README.md

@@ -0,0 +1,21 @@
+# CMX
+
+This package installs the CMX binary for your platform from its matching GitHub Release and verifies it against that release's `SHA256SUMS` file.
+
+```sh
+npm install --global @compressius/cmx
+# or
+pnpm add --global @compressius/cmx
+```
+
+The `latest` npm tag tracks stable CMX releases. The `nightly` tag tracks prereleases:
+
+```sh
+npm install --global @compressius/cmx@nightly
+# or
+pnpm add --global @compressius/cmx@nightly
+```
+
+Supported platforms are macOS and Linux on x64 or ARM64, plus Windows on x64 or ARM64. The package requires Node.js 18 or newer only during installation; `cmx` itself is a standalone native binary.
+
+Some pnpm configurations block dependency lifecycle scripts by default. In that case, the first `cmx` command downloads and verifies the same matching binary automatically.

package/bin/cmx.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawnSync } = require('node:child_process');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const platforms = { darwin: 'darwin', linux: 'linux', win32: 'windows' };
+const architectures = { x64: 'amd64', arm64: 'arm64' };
+const os = platforms[process.platform];
+const arch = architectures[process.arch];
+
+if (!os || !arch) {
+  console.error(`CMX does not support ${process.platform}/${process.arch}.`);
+  process.exit(1);
+}
+
+async function main() {
+  const extension = os === 'windows' ? '.exe' : '';
+  const binary = path.join(__dirname, '..', 'platform', `cmx-${os}-${arch}${extension}`);
+  if (!fs.existsSync(binary)) await require('../scripts/install').install();
+
+  const result = spawnSync(binary, process.argv.slice(2), { stdio: 'inherit' });
+  if (result.error) {
+    console.error(`Unable to run CMX: ${result.error.message}`);
+    process.exit(1);
+  }
+  process.exit(result.status ?? 1);
+}
+
+main().catch((error) => {
+  console.error(`CMX installation failed: ${error.message}`);
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@compressius/cmx",
+  "version": "0.1.19",
+  "description": "CMX local context-compression gateway",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/administrakt0r/cmx2.git"
+  },
+  "homepage": "https://compressi.us",
+  "bugs": {
+    "url": "https://github.com/administrakt0r/cmx2/issues"
+  },
+  "bin": {
+    "cmx": "bin/cmx.js"
+  },
+  "scripts": {
+    "postinstall": "node scripts/install.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "bin",
+    "scripts",
+    "README.md"
+  ]
+}

package/scripts/install.js

@@ -0,0 +1,76 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const https = require('node:https');
+const path = require('node:path');
+
+const packageJson = require('../package.json');
+const platforms = { darwin: 'darwin', linux: 'linux', win32: 'windows' };
+const architectures = { x64: 'amd64', arm64: 'arm64' };
+const os = platforms[process.platform];
+const arch = architectures[process.arch];
+
+if (!os || !arch) {
+  throw new Error(`CMX does not support ${process.platform}/${process.arch}.`);
+}
+
+const asset = `cmx-${os}-${arch}${os === 'windows' ? '.exe' : ''}`;
+const tag = `v${packageJson.version}`;
+const releaseBase = `https://github.com/administrakt0r/cmx/releases/download/${tag}`;
+
+function download(url, redirects = 0) {
+  if (redirects > 5) return Promise.reject(new Error(`Too many redirects downloading ${url}.`));
+  return new Promise((resolve, reject) => {
+    const request = https.get(url, { headers: { 'User-Agent': 'cmx-npm-installer' } }, (response) => {
+      if (response.statusCode >= 300 && response.statusCode < 400 && response.headers.location) {
+        response.resume();
+        resolve(download(new URL(response.headers.location, url), redirects + 1));
+        return;
+      }
+      if (response.statusCode !== 200) {
+        response.resume();
+        reject(new Error(`Download failed for ${url}: HTTP ${response.statusCode}.`));
+        return;
+      }
+      const chunks = [];
+      response.on('data', (chunk) => chunks.push(chunk));
+      response.on('end', () => resolve(Buffer.concat(chunks)));
+    });
+    request.setTimeout(60_000, () => request.destroy(new Error(`Timed out downloading ${url}.`)));
+    request.on('error', reject);
+  });
+}
+
+function checksumFor(sums) {
+  const escapedAsset = asset.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  const expression = new RegExp(`^([a-fA-F0-9]{64})\\s+\\*?${escapedAsset}$`, 'm');
+  const match = sums.toString('utf8').match(expression);
+  if (!match) throw new Error(`Release checksum is missing for ${asset}.`);
+  return match[1].toLowerCase();
+}
+
+async function install() {
+  const [binary, sums] = await Promise.all([
+    download(`${releaseBase}/${asset}`),
+    download(`${releaseBase}/SHA256SUMS`),
+  ]);
+  const actual = crypto.createHash('sha256').update(binary).digest('hex');
+  if (actual !== checksumFor(sums)) throw new Error(`Checksum mismatch for ${asset}; CMX was not installed.`);
+
+  const platformDir = path.join(__dirname, '..', 'platform');
+  fs.mkdirSync(platformDir, { recursive: true });
+  const destination = path.join(platformDir, asset);
+  fs.writeFileSync(destination, binary, { mode: 0o755 });
+  if (os !== 'windows') fs.chmodSync(destination, 0o755);
+  console.log(`Installed CMX ${tag} for ${os}/${arch}.`);
+}
+
+module.exports = { install };
+
+if (require.main === module) {
+  install().catch((error) => {
+    console.error(`CMX installation failed: ${error.message}`);
+    process.exitCode = 1;
+  });
+}