@ozyman42/ozy-cli 0.4.9-linux-x64.0 → 0.4.9

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Alexander Leung
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,8 @@
+- Set up any git repo to use a passkey-based SSH key. 
+  Auto registers SSH authn and signing keys with github.
+- Auto provision npm packages and set up trusted publishing. Precursor to jive.sh tool
+
+## Follow-up investigations
+
+- Verify Windows package-manager behavior when an entrypoint command name includes literal `.exe` text, including names that already end with `.exe` such as `src/entrypoints/foo.exe.ts`.
+- Define how the build should handle source files that import runtime assets or modules outside `src`.

package/bin/ozy

@@ -0,0 +1,209 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { spawnSync } from "node:child_process";
+import {
+  chmodSync,
+  copyFileSync,
+  existsSync,
+  linkSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const PLATFORM_MAP = {
+  "darwin-arm64": "darwin-arm64",
+  "darwin-x64": "darwin-x64",
+  "linux-arm64": "linux-arm64",
+  "linux-x64": "linux-x64",
+  "win32-x64": "windows-x64"
+};
+const PLATFORM_PACKAGES = {
+  "darwin-arm64": "@ozyman42/ozy-cli-darwin-arm64",
+  "darwin-x64": "@ozyman42/ozy-cli-darwin-x64",
+  "linux-arm64": "@ozyman42/ozy-cli-linux-arm64",
+  "linux-x64": "@ozyman42/ozy-cli-linux-x64",
+  "windows-x64": "@ozyman42/ozy-cli-windows-x64"
+};
+const PLATFORM_BINARIES = {
+  "darwin-arm64": "multi-call-binary",
+  "darwin-x64": "multi-call-binary",
+  "linux-arm64": "multi-call-binary",
+  "linux-x64": "multi-call-binary",
+  "windows-x64": "multi-call-binary.exe"
+};
+const COMMANDS = [
+  "ozy",
+  "ozy-signing-agent",
+  "ozy-ssh-keygen",
+  "ozy-virtual-security-key"
+];
+const BIN_DIR = "bin";
+const INSTALL_SCRIPT = "install.js";
+// Root install.js repairs command targets; bin launchers repair and then execute.
+const IS_INSTALL_SCRIPT = false;
+const WINDOWS_EXECUTABLE_SUFFIX = ".exe";
+const INSTALLED_JSON = "installed.json";
+
+const require = createRequire(import.meta.url);
+const launcherPath = fileURLToPath(import.meta.url);
+const launcherDir = dirname(launcherPath);
+const packageDir = IS_INSTALL_SCRIPT ? launcherDir : dirname(launcherDir);
+const commandTargetDir = join(packageDir, BIN_DIR);
+const rootInstallScriptPath = join(packageDir, INSTALL_SCRIPT);
+
+function fail(message) {
+  console.error(message);
+  process.exit(1);
+}
+
+function currentPlatformKey() {
+  const platformKey = PLATFORM_MAP[`${process.platform}-${process.arch}`];
+  if (!platformKey) {
+    fail(`Unsupported platform: ${process.platform}-${process.arch}`);
+  }
+  return platformKey;
+}
+
+function currentPlatformPackageName() {
+  const platformKey = currentPlatformKey();
+  const packageName = PLATFORM_PACKAGES[platformKey];
+  if (!packageName) {
+    fail(`No platform package is configured for ${platformKey}`);
+  }
+  return packageName;
+}
+
+/**
+ * When a Jive library contains any number of CLIs (entrypoints or agents), then the base package
+ * will have an optional dependency for each possible architecture, with those platform-specific
+ * packages containing a platform build of the CLI.
+ * @returns the path to the platform binary and the exact version of the platform package.
+ */
+function currentPlatformPackage() {
+  const platformKey = currentPlatformKey();
+  const binaryFile = PLATFORM_BINARIES[platformKey];
+  if (!binaryFile) {
+    fail(`No platform binary is configured for ${platformKey}`);
+  }
+
+  const packageName = currentPlatformPackageName();
+  try {
+    const packageJsonPath = require.resolve(`${packageName}/package.json`);
+    const packageDir = dirname(packageJsonPath);
+    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    return {
+      binaryPath: join(packageDir, binaryFile),
+      version: packageJson.version,
+    };
+  } catch (error) {
+    fail(`Could not resolve optional platform package ${packageName}. Reinstall dependencies for ${process.platform}-${process.arch}.`);
+  }
+}
+
+function commandTargetPath(command) {
+  const suffix = process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : "";
+  return join(commandTargetDir, `${command}${suffix}`);
+}
+
+function installedJsonPath() {
+  return join(commandTargetDir, INSTALLED_JSON);
+}
+
+function windowsTargetsAreCurrent(version) {
+  if (process.platform !== "win32") return false;
+  if (!COMMANDS.every((command) => existsSync(commandTargetPath(command)))) return false;
+
+  try {
+    const installed = JSON.parse(readFileSync(installedJsonPath(), "utf-8"));
+    return installed.version === version;
+  } catch {
+    return false;
+  }
+}
+
+function linkOrCopyFirstExecutable(sourcePath, targetPath) {
+  mkdirSync(dirname(targetPath), { recursive: true });
+  const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp${process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : ""}`;
+  rmSync(tempPath, { force: true });
+
+  try {
+    try {
+      linkSync(sourcePath, tempPath);
+    } catch {
+      copyFileSync(sourcePath, tempPath);
+    }
+
+    chmodSync(tempPath, 0o755);
+    rmSync(targetPath, { force: true });
+    renameSync(tempPath, targetPath);
+  } finally {
+    rmSync(tempPath, { force: true });
+  }
+}
+
+function hardLinkCommandTarget(sourcePath, targetPath) {
+  if (sourcePath === targetPath) return;
+
+  const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp${process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : ""}`;
+  rmSync(tempPath, { force: true });
+
+  try {
+    linkSync(sourcePath, tempPath);
+    chmodSync(tempPath, 0o755);
+    rmSync(targetPath, { force: true });
+    renameSync(tempPath, targetPath);
+  } finally {
+    rmSync(tempPath, { force: true });
+  }
+}
+
+function repairCommandTargets() {
+  const platformPackage = currentPlatformPackage();
+
+  if (windowsTargetsAreCurrent(platformPackage.version)) {
+    return;
+  }
+
+  const firstTargetPath = commandTargetPath(COMMANDS[0]);
+  linkOrCopyFirstExecutable(platformPackage.binaryPath, firstTargetPath);
+
+  for (const command of COMMANDS.slice(1)) {
+    hardLinkCommandTarget(firstTargetPath, commandTargetPath(command));
+  }
+
+  if (process.platform === "win32") {
+    writeFileSync(installedJsonPath(), `${JSON.stringify({ version: platformPackage.version }, null, 2)}\n`);
+  }
+}
+
+function runExecutable(executablePath) {
+  const result = spawnSync(executablePath, process.argv.slice(2), { stdio: "inherit" });
+
+  if (result.error) {
+    fail(result.error.message);
+  }
+  if (result.status !== 0) {
+    process.exit(result.status ?? 1);
+  }
+}
+
+function removeInstallScript() {
+  try {
+    rmSync(rootInstallScriptPath, { force: true });
+    // TODO: should we also remove the postinstall script line from package.json?
+  } catch {
+    // Cleanup is best-effort; failing to remove install.js should not fail package installation.
+  }
+}
+
+repairCommandTargets();
+removeInstallScript();
+if (!IS_INSTALL_SCRIPT) {
+  const commandName = basename(launcherPath);
+  runExecutable(commandTargetPath(commandName));
+}

package/bin/ozy-signing-agent

@@ -0,0 +1,209 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { spawnSync } from "node:child_process";
+import {
+  chmodSync,
+  copyFileSync,
+  existsSync,
+  linkSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const PLATFORM_MAP = {
+  "darwin-arm64": "darwin-arm64",
+  "darwin-x64": "darwin-x64",
+  "linux-arm64": "linux-arm64",
+  "linux-x64": "linux-x64",
+  "win32-x64": "windows-x64"
+};
+const PLATFORM_PACKAGES = {
+  "darwin-arm64": "@ozyman42/ozy-cli-darwin-arm64",
+  "darwin-x64": "@ozyman42/ozy-cli-darwin-x64",
+  "linux-arm64": "@ozyman42/ozy-cli-linux-arm64",
+  "linux-x64": "@ozyman42/ozy-cli-linux-x64",
+  "windows-x64": "@ozyman42/ozy-cli-windows-x64"
+};
+const PLATFORM_BINARIES = {
+  "darwin-arm64": "multi-call-binary",
+  "darwin-x64": "multi-call-binary",
+  "linux-arm64": "multi-call-binary",
+  "linux-x64": "multi-call-binary",
+  "windows-x64": "multi-call-binary.exe"
+};
+const COMMANDS = [
+  "ozy",
+  "ozy-signing-agent",
+  "ozy-ssh-keygen",
+  "ozy-virtual-security-key"
+];
+const BIN_DIR = "bin";
+const INSTALL_SCRIPT = "install.js";
+// Root install.js repairs command targets; bin launchers repair and then execute.
+const IS_INSTALL_SCRIPT = false;
+const WINDOWS_EXECUTABLE_SUFFIX = ".exe";
+const INSTALLED_JSON = "installed.json";
+
+const require = createRequire(import.meta.url);
+const launcherPath = fileURLToPath(import.meta.url);
+const launcherDir = dirname(launcherPath);
+const packageDir = IS_INSTALL_SCRIPT ? launcherDir : dirname(launcherDir);
+const commandTargetDir = join(packageDir, BIN_DIR);
+const rootInstallScriptPath = join(packageDir, INSTALL_SCRIPT);
+
+function fail(message) {
+  console.error(message);
+  process.exit(1);
+}
+
+function currentPlatformKey() {
+  const platformKey = PLATFORM_MAP[`${process.platform}-${process.arch}`];
+  if (!platformKey) {
+    fail(`Unsupported platform: ${process.platform}-${process.arch}`);
+  }
+  return platformKey;
+}
+
+function currentPlatformPackageName() {
+  const platformKey = currentPlatformKey();
+  const packageName = PLATFORM_PACKAGES[platformKey];
+  if (!packageName) {
+    fail(`No platform package is configured for ${platformKey}`);
+  }
+  return packageName;
+}
+
+/**
+ * When a Jive library contains any number of CLIs (entrypoints or agents), then the base package
+ * will have an optional dependency for each possible architecture, with those platform-specific
+ * packages containing a platform build of the CLI.
+ * @returns the path to the platform binary and the exact version of the platform package.
+ */
+function currentPlatformPackage() {
+  const platformKey = currentPlatformKey();
+  const binaryFile = PLATFORM_BINARIES[platformKey];
+  if (!binaryFile) {
+    fail(`No platform binary is configured for ${platformKey}`);
+  }
+
+  const packageName = currentPlatformPackageName();
+  try {
+    const packageJsonPath = require.resolve(`${packageName}/package.json`);
+    const packageDir = dirname(packageJsonPath);
+    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    return {
+      binaryPath: join(packageDir, binaryFile),
+      version: packageJson.version,
+    };
+  } catch (error) {
+    fail(`Could not resolve optional platform package ${packageName}. Reinstall dependencies for ${process.platform}-${process.arch}.`);
+  }
+}
+
+function commandTargetPath(command) {
+  const suffix = process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : "";
+  return join(commandTargetDir, `${command}${suffix}`);
+}
+
+function installedJsonPath() {
+  return join(commandTargetDir, INSTALLED_JSON);
+}
+
+function windowsTargetsAreCurrent(version) {
+  if (process.platform !== "win32") return false;
+  if (!COMMANDS.every((command) => existsSync(commandTargetPath(command)))) return false;
+
+  try {
+    const installed = JSON.parse(readFileSync(installedJsonPath(), "utf-8"));
+    return installed.version === version;
+  } catch {
+    return false;
+  }
+}
+
+function linkOrCopyFirstExecutable(sourcePath, targetPath) {
+  mkdirSync(dirname(targetPath), { recursive: true });
+  const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp${process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : ""}`;
+  rmSync(tempPath, { force: true });
+
+  try {
+    try {
+      linkSync(sourcePath, tempPath);
+    } catch {
+      copyFileSync(sourcePath, tempPath);
+    }
+
+    chmodSync(tempPath, 0o755);
+    rmSync(targetPath, { force: true });
+    renameSync(tempPath, targetPath);
+  } finally {
+    rmSync(tempPath, { force: true });
+  }
+}
+
+function hardLinkCommandTarget(sourcePath, targetPath) {
+  if (sourcePath === targetPath) return;
+
+  const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp${process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : ""}`;
+  rmSync(tempPath, { force: true });
+
+  try {
+    linkSync(sourcePath, tempPath);
+    chmodSync(tempPath, 0o755);
+    rmSync(targetPath, { force: true });
+    renameSync(tempPath, targetPath);
+  } finally {
+    rmSync(tempPath, { force: true });
+  }
+}
+
+function repairCommandTargets() {
+  const platformPackage = currentPlatformPackage();
+
+  if (windowsTargetsAreCurrent(platformPackage.version)) {
+    return;
+  }
+
+  const firstTargetPath = commandTargetPath(COMMANDS[0]);
+  linkOrCopyFirstExecutable(platformPackage.binaryPath, firstTargetPath);
+
+  for (const command of COMMANDS.slice(1)) {
+    hardLinkCommandTarget(firstTargetPath, commandTargetPath(command));
+  }
+
+  if (process.platform === "win32") {
+    writeFileSync(installedJsonPath(), `${JSON.stringify({ version: platformPackage.version }, null, 2)}\n`);
+  }
+}
+
+function runExecutable(executablePath) {
+  const result = spawnSync(executablePath, process.argv.slice(2), { stdio: "inherit" });
+
+  if (result.error) {
+    fail(result.error.message);
+  }
+  if (result.status !== 0) {
+    process.exit(result.status ?? 1);
+  }
+}
+
+function removeInstallScript() {
+  try {
+    rmSync(rootInstallScriptPath, { force: true });
+    // TODO: should we also remove the postinstall script line from package.json?
+  } catch {
+    // Cleanup is best-effort; failing to remove install.js should not fail package installation.
+  }
+}
+
+repairCommandTargets();
+removeInstallScript();
+if (!IS_INSTALL_SCRIPT) {
+  const commandName = basename(launcherPath);
+  runExecutable(commandTargetPath(commandName));
+}

package/bin/ozy-ssh-keygen

@@ -0,0 +1,209 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module";
+import { spawnSync } from "node:child_process";
+import {
+  chmodSync,
+  copyFileSync,
+  existsSync,
+  linkSync,
+  mkdirSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const PLATFORM_MAP = {
+  "darwin-arm64": "darwin-arm64",
+  "darwin-x64": "darwin-x64",
+  "linux-arm64": "linux-arm64",
+  "linux-x64": "linux-x64",
+  "win32-x64": "windows-x64"
+};
+const PLATFORM_PACKAGES = {
+  "darwin-arm64": "@ozyman42/ozy-cli-darwin-arm64",
+  "darwin-x64": "@ozyman42/ozy-cli-darwin-x64",
+  "linux-arm64": "@ozyman42/ozy-cli-linux-arm64",
+  "linux-x64": "@ozyman42/ozy-cli-linux-x64",
+  "windows-x64": "@ozyman42/ozy-cli-windows-x64"
+};
+const PLATFORM_BINARIES = {
+  "darwin-arm64": "multi-call-binary",
+  "darwin-x64": "multi-call-binary",
+  "linux-arm64": "multi-call-binary",
+  "linux-x64": "multi-call-binary",
+  "windows-x64": "multi-call-binary.exe"
+};
+const COMMANDS = [
+  "ozy",
+  "ozy-signing-agent",
+  "ozy-ssh-keygen",
+  "ozy-virtual-security-key"
+];
+const BIN_DIR = "bin";
+const INSTALL_SCRIPT = "install.js";
+// Root install.js repairs command targets; bin launchers repair and then execute.
+const IS_INSTALL_SCRIPT = false;
+const WINDOWS_EXECUTABLE_SUFFIX = ".exe";
+const INSTALLED_JSON = "installed.json";
+
+const require = createRequire(import.meta.url);
+const launcherPath = fileURLToPath(import.meta.url);
+const launcherDir = dirname(launcherPath);
+const packageDir = IS_INSTALL_SCRIPT ? launcherDir : dirname(launcherDir);
+const commandTargetDir = join(packageDir, BIN_DIR);
+const rootInstallScriptPath = join(packageDir, INSTALL_SCRIPT);
+
+function fail(message) {
+  console.error(message);
+  process.exit(1);
+}
+
+function currentPlatformKey() {
+  const platformKey = PLATFORM_MAP[`${process.platform}-${process.arch}`];
+  if (!platformKey) {
+    fail(`Unsupported platform: ${process.platform}-${process.arch}`);
+  }
+  return platformKey;
+}
+
+function currentPlatformPackageName() {
+  const platformKey = currentPlatformKey();
+  const packageName = PLATFORM_PACKAGES[platformKey];
+  if (!packageName) {
+    fail(`No platform package is configured for ${platformKey}`);
+  }
+  return packageName;
+}
+
+/**
+ * When a Jive library contains any number of CLIs (entrypoints or agents), then the base package
+ * will have an optional dependency for each possible architecture, with those platform-specific
+ * packages containing a platform build of the CLI.
+ * @returns the path to the platform binary and the exact version of the platform package.
+ */
+function currentPlatformPackage() {
+  const platformKey = currentPlatformKey();
+  const binaryFile = PLATFORM_BINARIES[platformKey];
+  if (!binaryFile) {
+    fail(`No platform binary is configured for ${platformKey}`);
+  }
+
+  const packageName = currentPlatformPackageName();
+  try {
+    const packageJsonPath = require.resolve(`${packageName}/package.json`);
+    const packageDir = dirname(packageJsonPath);
+    const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+    return {
+      binaryPath: join(packageDir, binaryFile),
+      version: packageJson.version,
+    };
+  } catch (error) {
+    fail(`Could not resolve optional platform package ${packageName}. Reinstall dependencies for ${process.platform}-${process.arch}.`);
+  }
+}
+
+function commandTargetPath(command) {
+  const suffix = process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : "";
+  return join(commandTargetDir, `${command}${suffix}`);
+}
+
+function installedJsonPath() {
+  return join(commandTargetDir, INSTALLED_JSON);
+}
+
+function windowsTargetsAreCurrent(version) {
+  if (process.platform !== "win32") return false;
+  if (!COMMANDS.every((command) => existsSync(commandTargetPath(command)))) return false;
+
+  try {
+    const installed = JSON.parse(readFileSync(installedJsonPath(), "utf-8"));
+    return installed.version === version;
+  } catch {
+    return false;
+  }
+}
+
+function linkOrCopyFirstExecutable(sourcePath, targetPath) {
+  mkdirSync(dirname(targetPath), { recursive: true });
+  const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp${process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : ""}`;
+  rmSync(tempPath, { force: true });
+
+  try {
+    try {
+      linkSync(sourcePath, tempPath);
+    } catch {
+      copyFileSync(sourcePath, tempPath);
+    }
+
+    chmodSync(tempPath, 0o755);
+    rmSync(targetPath, { force: true });
+    renameSync(tempPath, targetPath);
+  } finally {
+    rmSync(tempPath, { force: true });
+  }
+}
+
+function hardLinkCommandTarget(sourcePath, targetPath) {
+  if (sourcePath === targetPath) return;
+
+  const tempPath = `${targetPath}.${process.pid}.${Date.now()}.tmp${process.platform === "win32" ? WINDOWS_EXECUTABLE_SUFFIX : ""}`;
+  rmSync(tempPath, { force: true });
+
+  try {
+    linkSync(sourcePath, tempPath);
+    chmodSync(tempPath, 0o755);
+    rmSync(targetPath, { force: true });
+    renameSync(tempPath, targetPath);
+  } finally {
+    rmSync(tempPath, { force: true });
+  }
+}
+
+function repairCommandTargets() {
+  const platformPackage = currentPlatformPackage();
+
+  if (windowsTargetsAreCurrent(platformPackage.version)) {
+    return;
+  }
+
+  const firstTargetPath = commandTargetPath(COMMANDS[0]);
+  linkOrCopyFirstExecutable(platformPackage.binaryPath, firstTargetPath);
+
+  for (const command of COMMANDS.slice(1)) {
+    hardLinkCommandTarget(firstTargetPath, commandTargetPath(command));
+  }
+
+  if (process.platform === "win32") {
+    writeFileSync(installedJsonPath(), `${JSON.stringify({ version: platformPackage.version }, null, 2)}\n`);
+  }
+}
+
+function runExecutable(executablePath) {
+  const result = spawnSync(executablePath, process.argv.slice(2), { stdio: "inherit" });
+
+  if (result.error) {
+    fail(result.error.message);
+  }
+  if (result.status !== 0) {
+    process.exit(result.status ?? 1);
+  }
+}
+
+function removeInstallScript() {
+  try {
+    rmSync(rootInstallScriptPath, { force: true });
+    // TODO: should we also remove the postinstall script line from package.json?
+  } catch {
+    // Cleanup is best-effort; failing to remove install.js should not fail package installation.
+  }
+}
+
+repairCommandTargets();
+removeInstallScript();
+if (!IS_INSTALL_SCRIPT) {
+  const commandName = basename(launcherPath);
+  runExecutable(commandTargetPath(commandName));
+}