@osvaldoandrade/codeq 0.2.2

package/README.md

@@ -0,0 +1,28 @@
+# codeq (npm)
+
+This package installs the `codeq` native CLI from GitHub Releases and exposes it on your PATH via npm.
+
+## Install (npmjs)
+
+```bash
+npm i -g @osvaldoandrade/codeq
+codeq --help
+```
+
+## Upgrade
+
+```bash
+npm i -g @osvaldoandrade/codeq@latest
+```
+
+or:
+
+```bash
+npm update -g @osvaldoandrade/codeq
+```
+
+## Overrides
+
+- `CODEQ_GITHUB_REPO` (default `osvaldoandrade/codeq`): download binaries from another repo/fork.
+- `CODEQ_RELEASE_TAG` (default `v<packageVersion>`): download from a specific tag.
+- `CODEQ_GITHUB_TOKEN`: required when downloading binaries from a private repo release.

package/bin/codeq.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+"use strict";
+
+const fs = require("fs");
+const path = require("path");
+const { spawnSync } = require("child_process");
+
+const exe = process.platform === "win32" ? ".exe" : "";
+const binPath = path.join(__dirname, "..", "native", `codeq${exe}`);
+
+if (!fs.existsSync(binPath)) {
+  console.error("[codeq] Native binary not found.");
+  console.error("[codeq] Reinstall the package to trigger download:");
+  console.error("  npm i -g @osvaldoandrade/codeq@latest");
+  process.exit(1);
+}
+
+const res = spawnSync(binPath, process.argv.slice(2), { stdio: "inherit" });
+if (res.error) {
+  console.error(`[codeq] Failed to run native binary: ${res.error.message}`);
+  process.exit(1);
+}
+process.exit(typeof res.status === "number" ? res.status : 1);
+

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@osvaldoandrade/codeq",
+  "version": "0.2.2",
+  "description": "codeQ CLI (installs a native binary from GitHub Releases)",
+  "license": "MIT",
+  "homepage": "https://github.com/osvaldoandrade/codeq",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/osvaldoandrade/codeq.git"
+  },
+  "bugs": {
+    "url": "https://github.com/osvaldoandrade/codeq/issues"
+  },
+  "bin": {
+    "codeq": "bin/codeq.js"
+  },
+  "scripts": {
+    "postinstall": "node scripts/postinstall.js"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "bin/",
+    "scripts/",
+    "README.md"
+  ]
+}

package/scripts/postinstall.js

@@ -0,0 +1,214 @@
+#!/usr/bin/env node
+"use strict";
+
+const fs = require("fs");
+const https = require("https");
+const path = require("path");
+
+const pkg = require("../package.json");
+
+function goosFromPlatform(platform) {
+  switch (platform) {
+    case "darwin":
+      return "darwin";
+    case "linux":
+      return "linux";
+    case "win32":
+      return "windows";
+    default:
+      return null;
+  }
+}
+
+function goarchFromArch(arch) {
+  switch (arch) {
+    case "x64":
+      return "amd64";
+    case "arm64":
+      return "arm64";
+    default:
+      return null;
+  }
+}
+
+function githubToken() {
+  const t = (process.env.CODEQ_GITHUB_TOKEN || process.env.GITHUB_TOKEN || "").trim();
+  return t || null;
+}
+
+function githubAPIHeaders(extra) {
+  const headers = {
+    "User-Agent": "codeq-npm-installer",
+    ...extra,
+  };
+  const tok = githubToken();
+  if (tok) {
+    headers.Authorization = `Bearer ${tok}`;
+  }
+  return headers;
+}
+
+function getJSON(url, redirectsLeft) {
+  return new Promise((resolve, reject) => {
+    const req = https.get(
+      url,
+      {
+        headers: githubAPIHeaders({ Accept: "application/vnd.github+json" }),
+      },
+      (res) => {
+        const code = res.statusCode || 0;
+        if (code >= 300 && code < 400 && res.headers.location) {
+          if (redirectsLeft <= 0) {
+            reject(new Error(`too many redirects while fetching ${url}`));
+            res.resume();
+            return;
+          }
+          const next = res.headers.location.startsWith("http")
+            ? res.headers.location
+            : new URL(res.headers.location, url).toString();
+          res.resume();
+          getJSON(next, redirectsLeft - 1).then(resolve, reject);
+          return;
+        }
+        if (code !== 200) {
+          let body = "";
+          res.setEncoding("utf8");
+          res.on("data", (d) => {
+            body += d;
+          });
+          res.on("end", () => {
+            const msg = body.trim() ? `: ${body.trim()}` : "";
+            reject(new Error(`HTTP ${code} fetching ${url}${msg}`));
+          });
+          return;
+        }
+
+        let body = "";
+        res.setEncoding("utf8");
+        res.on("data", (d) => {
+          body += d;
+        });
+        res.on("end", () => {
+          try {
+            resolve(JSON.parse(body));
+          } catch (err) {
+            reject(new Error(`invalid JSON from ${url}`));
+          }
+        });
+      }
+    );
+    req.on("error", reject);
+  });
+}
+
+function downloadToFile(url, filePath, redirectsLeft) {
+  return new Promise((resolve, reject) => {
+    const req = https.get(
+      url,
+      {
+        headers: githubAPIHeaders({ Accept: "application/octet-stream" }),
+      },
+      (res) => {
+        const code = res.statusCode || 0;
+        if (code >= 300 && code < 400 && res.headers.location) {
+          if (redirectsLeft <= 0) {
+            reject(new Error(`too many redirects while downloading ${url}`));
+            res.resume();
+            return;
+          }
+          const next = res.headers.location.startsWith("http")
+            ? res.headers.location
+            : new URL(res.headers.location, url).toString();
+          res.resume();
+          downloadToFile(next, filePath, redirectsLeft - 1).then(resolve, reject);
+          return;
+        }
+        if (code !== 200) {
+          let body = "";
+          res.setEncoding("utf8");
+          res.on("data", (d) => {
+            body += d;
+          });
+          res.on("end", () => {
+            const msg = body.trim() ? `: ${body.trim()}` : "";
+            reject(new Error(`HTTP ${code} downloading ${url}${msg}`));
+          });
+          return;
+        }
+
+        fs.mkdirSync(path.dirname(filePath), { recursive: true });
+        const f = fs.createWriteStream(filePath, { mode: 0o755 });
+        res.pipe(f);
+        f.on("finish", () => f.close(resolve));
+        f.on("error", (err) => {
+          try {
+            fs.unlinkSync(filePath);
+          } catch (_) {}
+          reject(err);
+        });
+      }
+    );
+    req.on("error", reject);
+  });
+}
+
+async function main() {
+  const repo = process.env.CODEQ_GITHUB_REPO || "osvaldoandrade/codeq";
+  const tag = process.env.CODEQ_RELEASE_TAG || `v${pkg.version}`;
+
+  const goos = goosFromPlatform(process.platform);
+  const goarch = goarchFromArch(process.arch);
+  if (!goos || !goarch) {
+    console.error(`[codeq] Unsupported platform for prebuilt binaries: ${process.platform}/${process.arch}`);
+    console.error("[codeq] Fallback: install from source using install.sh:");
+    console.error("  curl -fsSL https://raw.githubusercontent.com/osvaldoandrade/codeq/main/install.sh | sh");
+    process.exit(1);
+  }
+
+  const exe = goos === "windows" ? ".exe" : "";
+  const assetName = `codeq-${goos}-${goarch}${exe}`;
+  const url = `https://github.com/${repo}/releases/download/${tag}/${assetName}`;
+
+  const outPath = path.join(__dirname, "..", "native", `codeq${exe}`);
+  const tmpPath = `${outPath}.tmp`;
+
+  console.log(`[codeq] Installing ${assetName} (${tag})`);
+
+  // Prefer GitHub API when token is available (required for private repos).
+  const tok = githubToken();
+  if (tok) {
+    const release = await getJSON(`https://api.github.com/repos/${repo}/releases/tags/${tag}`, 5);
+    const assets = Array.isArray(release.assets) ? release.assets : [];
+    const asset = assets.find((a) => a && a.name === assetName);
+    if (!asset || !asset.url) {
+      throw new Error(`asset not found in release ${tag}: ${assetName}`);
+    }
+    await downloadToFile(asset.url, tmpPath, 5);
+  } else {
+    console.log(`[codeq] Downloading from ${url}`);
+    await downloadToFile(url, tmpPath, 5);
+  }
+
+  try {
+    fs.renameSync(tmpPath, outPath);
+  } catch (err) {
+    // Windows can fail to replace an existing file in use; try to remove and retry.
+    try {
+      fs.unlinkSync(outPath);
+    } catch (_) {}
+    fs.renameSync(tmpPath, outPath);
+  }
+
+  if (goos !== "windows") {
+    try {
+      fs.chmodSync(outPath, 0o755);
+    } catch (_) {}
+  }
+
+  console.log("[codeq] Installed native binary");
+}
+
+main().catch((err) => {
+  console.error(`[codeq] Install failed: ${err && err.message ? err.message : String(err)}`);
+  process.exit(1);
+});