@openlatch/client 0.0.0

package/lib/index.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+
+"use strict";
+
+const { execFileSync } = require("child_process");
+const path = require("path");
+const os = require("os");
+
+// Map Node.js platform/arch to @openlatch/client-{platform} package names
+const PLATFORMS = {
+  "darwin-arm64": "@openlatch/client-darwin-arm64",
+  "darwin-x64": "@openlatch/client-darwin-x64",
+  "linux-x64": "@openlatch/client-linux-x64",
+  "linux-arm64": "@openlatch/client-linux-arm64",
+  "win32-x64": "@openlatch/client-win32-x64",
+};
+
+function getBinaryPath() {
+  const platformKey = `${os.platform()}-${os.arch()}`;
+  const pkg = PLATFORMS[platformKey];
+
+  if (!pkg) {
+    console.error(
+      `openlatch: unsupported platform ${platformKey}. ` +
+        `Supported: ${Object.keys(PLATFORMS).join(", ")}`
+    );
+    process.exit(1);
+  }
+
+  const ext = os.platform() === "win32" ? ".exe" : "";
+  const binaryName = `openlatch${ext}`;
+
+  // Try to resolve from the platform-specific optional dependency
+  try {
+    const pkgDir = path.dirname(require.resolve(`${pkg}/package.json`));
+    return path.join(pkgDir, binaryName);
+  } catch {
+    // Optional dependency not installed (--no-optional, Yarn Plug-n-Play, etc.)
+    // Fall back to postinstall-downloaded binary
+    return path.join(__dirname, "..", "bin", binaryName);
+  }
+}
+
+const binary = getBinaryPath();
+
+try {
+  execFileSync(binary, process.argv.slice(2), {
+    stdio: "inherit",
+    env: process.env,
+  });
+} catch (err) {
+  if (err.status !== null && err.status !== undefined) {
+    process.exit(err.status);
+  }
+  if (err.code === "ENOENT") {
+    console.error(
+      `openlatch: binary not found at ${binary}\n` +
+        `Try reinstalling: npm install -g @openlatch/client`
+    );
+    process.exit(1);
+  }
+  process.exit(1);
+}

package/lib/postinstall.js

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+
+"use strict";
+
+// Postinstall fallback: downloads native binaries from GitHub Releases
+// when the platform-specific optional dependency was not installed
+// (e.g., --no-optional, unsupported package manager, corporate proxy).
+//
+// IMPORTANT: This script must NEVER fail the npm install (fail-open principle).
+
+const os = require("os");
+const fs = require("fs");
+const path = require("path");
+const { execSync } = require("child_process");
+
+const PLATFORM_PACKAGES = {
+  "darwin-arm64": "@openlatch/client-darwin-arm64",
+  "darwin-x64": "@openlatch/client-darwin-x64",
+  "linux-x64": "@openlatch/client-linux-x64",
+  "linux-arm64": "@openlatch/client-linux-arm64",
+  "win32-x64": "@openlatch/client-win32-x64",
+};
+
+const RUST_TARGETS = {
+  "darwin-arm64": "aarch64-apple-darwin",
+  "darwin-x64": "x86_64-apple-darwin",
+  "linux-x64": "x86_64-unknown-linux-gnu",
+  "linux-arm64": "aarch64-unknown-linux-gnu",
+  "win32-x64": "x86_64-pc-windows-msvc",
+};
+
+function isPlatformPackageInstalled() {
+  const platformKey = `${os.platform()}-${os.arch()}`;
+  const pkg = PLATFORM_PACKAGES[platformKey];
+  if (!pkg) return false;
+
+  try {
+    require.resolve(`${pkg}/package.json`);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function downloadBinaries() {
+  if (isPlatformPackageInstalled()) {
+    return; // Platform package already installed, nothing to do
+  }
+
+  const platformKey = `${os.platform()}-${os.arch()}`;
+  const rustTarget = RUST_TARGETS[platformKey];
+
+  if (!rustTarget) {
+    console.warn(
+      `openlatch: postinstall skipped — unsupported platform ${platformKey}`
+    );
+    return;
+  }
+
+  // Read version from own package.json
+  const pkgJson = JSON.parse(
+    fs.readFileSync(path.join(__dirname, "..", "package.json"), "utf8")
+  );
+  const version = pkgJson.version;
+  const ext = os.platform() === "win32" ? ".exe" : "";
+
+  const binDir = path.join(__dirname, "..", "bin");
+  fs.mkdirSync(binDir, { recursive: true });
+
+  const binaries = ["openlatch", "openlatch-hook"];
+
+  for (const binaryName of binaries) {
+    const assetName = `${binaryName}-${rustTarget}${ext}`;
+    const url = `https://github.com/OpenLatch/openlatch-client/releases/download/v${version}/${assetName}`;
+    const dest = path.join(binDir, `${binaryName}${ext}`);
+
+    console.log(`openlatch: downloading ${binaryName} for ${platformKey}...`);
+
+    try {
+      execSync(`curl -fSL --retry 3 -o "${dest}" "${url}"`, {
+        stdio: "pipe",
+        timeout: 30000,
+      });
+      if (os.platform() !== "win32") {
+        fs.chmodSync(dest, 0o755);
+      }
+    } catch {
+      console.warn(
+        `openlatch: failed to download ${binaryName} — ` +
+          `you can download manually from ${url}`
+      );
+      return; // Don't fail the install
+    }
+  }
+
+  console.log("openlatch: binaries installed successfully");
+}
+
+try {
+  downloadBinaries();
+} catch (err) {
+  // Never fail the npm install — fail-open principle
+  console.warn(`openlatch: postinstall warning — ${err.message}`);
+}

package/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@openlatch/client",
+  "version": "0.0.0",
+  "description": "OpenLatch — the open-source security layer for AI agents",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/OpenLatch/openlatch-client"
+  },
+  "homepage": "https://openlatch.ai",
+  "bin": {
+    "openlatch": "lib/index.js"
+  },
+  "files": ["lib/"],
+  "scripts": {
+    "postinstall": "node lib/postinstall.js"
+  },
+  "optionalDependencies": {
+    "@openlatch/client-darwin-arm64": "0.0.0",
+    "@openlatch/client-darwin-x64": "0.0.0",
+    "@openlatch/client-linux-x64": "0.0.0",
+    "@openlatch/client-linux-arm64": "0.0.0",
+    "@openlatch/client-win32-x64": "0.0.0"
+  }
+}