@rofy/cli 0.0.2

package/README.md

@@ -0,0 +1,22 @@
+# @rofy/cli
+
+Make images and videos with Rofy from a terminal, or let an AI assistant do it.
+
+```bash
+npm i -g @rofy/cli
+rofy auth login
+npx skills add rofy-ai/skills
+```
+
+Installing fetches the `rofy` program for your computer from the
+[GitHub release](https://github.com/rofy-ai/rofy-cli/releases) and checks its
+SHA-256 fingerprint against the list shipped in this package. It refuses to
+install if they differ.
+
+Works on macOS, Linux and Windows, on x64 and arm64.
+
+```bash
+rofy model list
+rofy generate create <model> --prompt "a red fox in the snow" --wait
+rofy help
+```

package/bin/rofy.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+// Hands every argument to the rofy program that install.js put in vendor/.
+const { spawnSync } = require("child_process");
+const path = require("path");
+
+const bin = path.join(__dirname, "..", "vendor", process.platform === "win32" ? "rofy.exe" : "rofy");
+const result = spawnSync(bin, process.argv.slice(2), {
+  stdio: "inherit",
+  // So the program suggests the right command when an update is out.
+  env: { ...process.env, ROFY_INSTALL_METHOD: "npm" },
+});
+if (result.error) {
+  console.error(`@rofy/cli: could not run ${bin}: ${result.error.message}`);
+  console.error("Reinstall with: npm i -g @rofy/cli");
+  process.exit(1);
+}
+process.exit(result.status === null ? 1 : result.status);

package/checksums.json

@@ -0,0 +1,8 @@
+{
+  "rofy_darwin_amd64.gz": "4314b03408c62a898a9c8199e3fac36ba7a7fdab8c83da765a5b76eac741fbd3",
+  "rofy_darwin_arm64.gz": "f44080f393bb2a5f32aa8203edf8cbd3e74b581314cff80658a083009c03127c",
+  "rofy_linux_amd64.gz": "568d6b44e85bddf6d966d6ece7fce2038c1205ed495d85eaf9afc9cf43aebdf0",
+  "rofy_linux_arm64.gz": "a05db3a3fa9e909bfb2e3d99fbf289a4aadd2da186a883aa719a3787f44c186b",
+  "rofy_windows_amd64.gz": "dba6c1052b6bafe823a54326656c86b43255fbacfa8af5135e0024af4840def7",
+  "rofy_windows_arm64.gz": "d6c61c39beb20aa19ed8a58fcf51c6138ba68446be42dbba91f96b3bb42028f0"
+}

package/install.js

@@ -0,0 +1,68 @@
+#!/usr/bin/env node
+// Runs after `npm i -g @rofy/cli`. This package is only a delivery van: it
+// fetches the rofy program built for this computer and installs it, but only
+// if its fingerprint matches the one published inside this package.
+const fs = require("fs");
+const path = require("path");
+const zlib = require("zlib");
+const crypto = require("crypto");
+
+const { version } = require("./package.json");
+
+const os = { darwin: "darwin", linux: "linux", win32: "windows" }[process.platform];
+const arch = { x64: "amd64", arm64: "arm64" }[process.arch];
+const name = `rofy_${os}_${arch}.gz`;
+// The override is for testing and mirrors. It cannot weaken the check below:
+// the expected fingerprint comes from this package, not from the download.
+const base =
+  process.env.ROFY_CLI_DOWNLOAD_BASE ||
+  `https://github.com/rofy-ai/rofy-cli/releases/download/v${version}`;
+
+function get(url, redirects = 0) {
+  return new Promise((resolve, reject) => {
+    if (redirects > 5) return reject(new Error("too many redirects"));
+    const client = url.startsWith("https:") ? require("https") : require("http");
+    client
+      .get(url, (res) => {
+        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+          res.resume();
+          return resolve(get(new URL(res.headers.location, url).toString(), redirects + 1));
+        }
+        if (res.statusCode !== 200) {
+          res.resume();
+          return reject(new Error(`HTTP ${res.statusCode} for ${url}`));
+        }
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => resolve(Buffer.concat(chunks)));
+        res.on("error", reject);
+      })
+      .on("error", reject);
+  });
+}
+
+(async () => {
+  if (!os || !arch) {
+    throw new Error(
+      `unsupported computer ${process.platform}/${process.arch}. Supported: macOS, Linux, Windows on x64 or arm64`
+    );
+  }
+  const expected = require("./checksums.json")[name];
+  if (!expected) throw new Error(`this package lists no fingerprint for ${name}`);
+
+  console.log(`@rofy/cli: downloading ${base}/${name}`);
+  const packed = await get(`${base}/${name}`);
+  const actual = crypto.createHash("sha256").update(packed).digest("hex");
+  if (actual !== expected) {
+    throw new Error(`the download's fingerprint does not match ${name}. Refusing to install`);
+  }
+
+  const dir = path.join(__dirname, "vendor");
+  fs.mkdirSync(dir, { recursive: true });
+  const bin = path.join(dir, os === "windows" ? "rofy.exe" : "rofy");
+  fs.writeFileSync(bin, zlib.gunzipSync(packed), { mode: 0o755 });
+  console.log("@rofy/cli: installed. Next: rofy auth login");
+})().catch((err) => {
+  console.error(`@rofy/cli: install failed: ${err.message}`);
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@rofy/cli",
+  "version": "0.0.2",
+  "description": "Rofy CLI: make images and videos with Rofy from a terminal.",
+  "bin": {
+    "rofy": "bin/rofy.js"
+  },
+  "scripts": {
+    "postinstall": "node install.js"
+  },
+  "files": [
+    "bin/",
+    "install.js",
+    "checksums.json",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=16"
+  },
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rofy-ai/rofy-cli.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}