@seemseam/architec 0.2.11 → 0.2.13

package/README.md

@@ -1,293 +1,12 @@
-# Architec
+# @seemseam/architec
 
-**Incremental architecture review for AI-assisted codebases.**
+Compatibility shim for the renamed `@seemseam/archi` package.
 
-[![Python](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/)
-[![CLI](https://img.shields.io/badge/CLI-archi-222222)](#quick-start)
-[![Login](https://img.shields.io/badge/login-not_required-green)](#no-login-required)
-
-[English](README.md) | [中文](README.zh-CN.md)
-
-Architec is an advisory architecture analysis CLI. It helps answer one
-practical question:
-
-> Will this change make the codebase harder to maintain?
-
-It reviews current changes by default, asks an LLM to interpret compact
-selected-scope evidence, and reports architecture risks such as duplicated
-logic, shadow implementations, unclear boundaries, stale structure, topology
-pressure, and risky hotspots.
-
-Architec does not make merge decisions and does not edit code. It gives
-structured advice for humans and coding agents to review.
-
-## Why Architec
-
-LLM-assisted development can move quickly, but architecture can drift quietly.
-Architec is designed to catch the kinds of issues that accumulate over time:
-
-- repeated implementations and "same idea twice" code;
-- compatibility paths that blur into canonical implementations;
-- changed files crossing intended module boundaries;
-- stale cleanup/archive candidates;
-- high-risk work landing in churn-heavy areas;
-- full-project topology pressure that is easy to miss during local edits.
-
-The default workflow is incremental-first:
-
-```bash
-archi
-```
-
-Use full review when you want the whole-project baseline:
-
-```bash
-archi --full
-```
-
-## How It Fits Together
-
-Architec is the review layer. It uses two companion components:
-
-| Component | Command / package | Role |
-| --- | --- | --- |
-| **Architec** | `archi` / `architec` | Runs architecture review, calls the LLM through llmgateway, writes advisory results under `.architec/`. |
-| **Hippos** | `hippos` / `seemseam-hippos` | Builds structural project snapshots under `.hippos/`: file manifests, code signatures, repository indexes, structure prompts, and metrics. |
-| **llmgateway** | `llmgateway` | Owns provider credentials, base URLs, API style, model names, and strong/weak model routing. |
-
-```text
-source tree + git changes
-        |
-        v
-Hippos structural snapshot  ->  .hippos/
-        |
-        v
-Architec evidence builder  ->  selected-scope or full-project context
-        |
-        v
-llmgateway LLM call        ->  strong / weak model tiers
-        |
-        v
-Architec review output     ->  .architec/
-```
-
-Day-to-day `archi` runs still use the LLM, but they avoid refreshing the whole
-Hippos snapshot unless requested. `archi --full` uses the Hippos snapshot more
-heavily, and `archi --refresh-from-hippos --full` refreshes it before review.
-
-## How It Works
-
-Architec combines deterministic code signals with LLM interpretation. The
-deterministic layer keeps the review grounded in concrete evidence; the LLM
-layer turns that evidence into readable architecture advice.
-
-1. **Select scope**
-   - `archi` reads the current git changes and focuses on changed files.
-   - `archi --full` reviews the whole project.
-
-2. **Read structural context**
-   - Hippos produces `.hippos/` snapshots: file manifests, code signatures,
-     repository indexes, metrics, and structure prompts.
-   - Architec checks whether that snapshot is present, stale, or unknown.
-
-3. **Build architecture evidence**
-   - Architec runs static scanners for duplicated logic, shadow
-     implementations, import-boundary pressure, cleanup/archive candidates,
-     hotspots, topology pressure, and snapshot freshness.
-   - Incremental review keeps selected-change concerns separate from broader
-     project context so small diffs are not drowned by global noise.
-
-4. **Ask the LLM for interpretation**
-   - Architec sends compact evidence to llmgateway.
-   - llmgateway chooses the configured strong or weak model tier and owns all
-     provider credentials.
-
-5. **Write advisory output**
-   - Architec ranks concerns, keeps raw artifacts for inspection, and writes
-     human-readable plus machine-readable output under `.architec/`.
-   - The result is advice, not an automatic merge decision or proof of runtime
-     correctness.
-
-## Install
-
-Architec requires Python 3.11+.
-
-Recommended install from PyPI:
-
-```bash
-python3 -m pip install --user architec
-```
-
-This installs:
-
-- `archi`, the Architec CLI;
-- `seemseam-llmgateway`, the package that provides the LLM provider gateway;
-- `seemseam-hippos`, the package that provides Hippos structural snapshots.
-
-The runtime imports remain `llmgateway` and `hippos`; no separate package index
-setup is required.
-
-Local development from this repository:
-
-```bash
-python3 -m pip install -e .
-```
-
-## Configure LLM Access
-
-Architec gets all LLM access through **llmgateway**. Configure provider
-credentials and model tiers in:
-
-```text
-~/.llmgateway/config.yaml
-```
-
-Minimal example:
-
-```yaml
-version: 1
-provider:
-  provider_type: openai
-  api_style: openai_responses
-  base_url: https://your-llm-endpoint/v1
-  api_key: sk-...
-settings:
-  strong_model: your-strong-model
-  weak_model: your-fast-model
-```
-
-Architec consumes the configured `strong_model` and `weak_model` tiers. It does
-not store model-provider credentials itself.
-
-Check the installation and LLM route:
+Install the primary package for new setups:
 
 ```bash
-archi --check .
+npm install -g @seemseam/archi
 ```
 
-If the check reports missing LLM configuration, update
-`~/.llmgateway/config.yaml`.
-
-## Quick Start
-
-Review the current selected changes:
-
-```bash
-archi
-```
-
-Run whole-project architecture review:
-
-```bash
-archi --full
-```
-
-Save JSON output:
-
-```bash
-archi --out review.json
-archi --full --out full-review.json
-```
-
-Refresh Hippos inputs before full review:
-
-```bash
-archi --refresh-from-hippos --full
-```
-
-## Command Summary
-
-| Command | Purpose |
-| --- | --- |
-| `archi` | Incremental LLM architecture review for current selected changes. |
-| `archi --full` | Full-project LLM architecture review. |
-| `archi --out review.json` | Save incremental review JSON. |
-| `archi --full --out full-review.json` | Save full-review JSON. |
-| `archi --refresh-from-hippos --full` | Refresh Hippos structural inputs, then run full review. |
-| `archi --check .` | Validate Hippos bundle state and llmgateway configuration. |
-
-Advanced compatibility flags and older subcommands may still be accepted for
-existing automation, but new usage should prefer the commands above.
-
-## What Architec Reports
-
-Architec reports advisory concerns and signals, including:
-
-- **Duplication**: repeated logic and suspicious near-duplicates.
-- **Shadow implementations**: second implementations of similar behavior.
-- **Architecture contracts**: import-boundary or dependency-direction pressure.
-- **Cleanup/archive candidates**: stale or legacy-looking code and docs.
-- **Hotspots**: churn-heavy or structurally risky areas.
-- **Topology pressure**: flat or confusing project structure.
-- **Snapshot freshness**: missing, stale, or unknown Hippos context.
-- **Risk context**: optional external facts attached to existing concerns.
-
-The output is advisory. It is not a pass/fail result and is not proof of
-runtime correctness.
-
-## Outputs
-
-Architec writes generated files under `.architec/`:
-
-```text
-.architec/
-  architec-analysis.json
-  architec-summary.md
-  architec-viz.html
-  code-review-concerns.json
-  code-review-discovery.json
-  review-events.jsonl
-  cache/
-```
-
-Hippos writes structural inputs under `.hippos/`.
-
-Start with `.architec/architec-summary.md` for the human-readable report, then
-open `.architec/architec-analysis.json` for exact scores, concerns, signals,
-and artifact paths.
-
-## Agent Command Compatibility
-
-The commands above describe the current public workflow. Some older installed
-`archi` binaries may still show the previous command shape, where full review
-is `archi .` and incremental review is `archi --diff .`.
-
-Agents and automation should inspect the local binary before choosing commands:
-
-```bash
-archi --help
-```
-
-| Help output | Incremental review | Full review |
-| --- | --- | --- |
-| Includes `--full` | `archi` | `archi --full` |
-| Lacks `--full` but includes `--diff` | `archi --diff .` | `archi .` |
-
-## No Login Required
-
-Architecture analysis does not require `archi login`.
-
-Account commands such as `archi login`, `archi whoami --json`, and
-`archi devices --json` may exist for diagnostics, but they are not part of
-normal Architec analysis.
-
-## Development
-
-Run tests:
-
-```bash
-PYTHONPATH=src python3 -m pytest -q
-```
-
-Run Architec from this checkout:
-
-```bash
-PYTHONPATH=src python3 -m architec
-PYTHONPATH=src python3 -m architec --full
-```
-
-## More Documentation
-
-- [Usage manual](docs/usage-manual.md)
-- [Architecture stability notes](docs/advisory-review/topics/architecture-stability.md)
-- [Evidence model](docs/advisory-review/topics/evidence-model.md)
+This package keeps the historical `@seemseam/architec` name installable and
+forwards the `archi` command to `@seemseam/archi`.

package/bin/archi.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 "use strict";
 
-const { main } = require("../lib/archi-dispatcher");
+const { main } = require("@seemseam/archi/lib/archi-dispatcher");
 
 main(process.argv.slice(2))
   .then((status) => {
     process.exit(status === undefined || status === null ? 0 : status);
   })
   .catch((error) => {
-    console.error(`archi npm dispatcher: ${error.message}`);
+    console.error(`archi npm shim: ${error.message}`);
     process.exit(1);
   });

package/package.json

@@ -1,15 +1,7 @@
 {
   "name": "@seemseam/architec",
-  "version": "0.2.11",
-  "description": "Binary dispatcher for the Architec architecture-review CLI.",
-  "keywords": [
-    "architecture",
-    "architecture-review",
-    "binary",
-    "cli",
-    "code-analysis",
-    "llm"
-  ],
+  "version": "0.2.13",
+  "description": "Compatibility shim for the renamed @seemseam/archi package.",
   "homepage": "https://github.com/SeemSeam/architec#readme",
   "author": "SeemSeam",
   "bugs": {
@@ -17,7 +9,8 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/SeemSeam/architec"
+    "url": "https://github.com/SeemSeam/architec",
+    "directory": "npm/architec-shim"
   },
   "license": "MIT",
   "bin": {
@@ -25,11 +18,12 @@
   },
   "files": [
     "bin/",
-    "lib/",
-    "scripts/check-release-assets.js",
-    "docs/npm-release.md",
+    "README.md",
     "LICENSE"
   ],
+  "dependencies": {
+    "@seemseam/archi": "0.2.13"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -37,8 +31,7 @@
     "access": "public"
   },
   "scripts": {
-    "test": "node --check bin/archi.js && node --check lib/archi-dispatcher.js && node scripts/smoke-dispatcher.js",
-    "pack:dry-run": "npm pack --dry-run --json",
-    "release-assets:check": "node scripts/check-release-assets.js"
+    "test": "node --check bin/archi.js",
+    "pack:dry-run": "npm pack --dry-run --json"
   }
 }

package/README.zh-CN.md

@@ -1,252 +0,0 @@
-# Architec
-
-**面向 AI 辅助开发代码库的增量架构审查 CLI。**
-
-[![Python](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/)
-[![CLI](https://img.shields.io/badge/CLI-archi-222222)](README.md#quick-start)
-[![Login](https://img.shields.io/badge/login-not_required-green)](#无需登录)
-
-[English](README.md) | [中文](README.zh-CN.md)
-
-Architec 是一个建议型架构分析工具，核心问题是：
-
-> 这次改动会不会让项目更难长期维护？
-
-默认命令是：
-
-```bash
-archi
-```
-
-它会审查当前 git 变更，构建紧凑的架构证据，并通过 LLM 给出可读的架构建议。
-如果需要查看整个项目的架构基线，使用：
-
-```bash
-archi --full
-```
-
-Architec 只给建议，不做合并判定，不自动修改代码，也不要求登录。
-
-## 为什么需要 Architec
-
-AI 辅助开发会显著加快编码速度，但也容易带来架构漂移：
-
-- 新实现重复造轮子；
-- 兼容路径和主实现混在一起；
-- 小改动绕过了模块边界；
-- helper 逐渐膨胀成无归属子系统；
-- 陈旧代码、陈旧文档和清理候选长期堆积；
-- 高风险文件在高 churn 区域继续扩张。
-
-Architec 会把这些信号整理成结构化审查结果，帮助人类 reviewer 或 coding agent
-更快判断哪些建议值得进一步检查。
-
-## Architec、Hippos 和 llmgateway
-
-Architec 本身是架构审查层，依赖两个运行时组件：
-
-| 组件 | 命令 / 包 | 作用 |
-| --- | --- | --- |
-| **Architec** | `archi` / `architec` | 执行架构审查，通过 llmgateway 调用 LLM，并把结果写入 `.architec/`。 |
-| **Hippos** | `hippos` / `seemseam-hippos` | 生成 `.hippos/` 结构快照，包括文件清单、代码签名、仓库索引、结构 prompt 和指标。 |
-| **llmgateway** | `llmgateway` | 管理 provider 凭据、base URL、API 风格、模型名，以及 strong/weak 模型路由。 |
-
-```text
-源码树 + git 变更
-        |
-        v
-Hippos 结构快照       ->  .hippos/
-        |
-        v
-Architec 证据构建    ->  增量范围或全项目上下文
-        |
-        v
-llmgateway LLM 调用  ->  strong / weak 模型
-        |
-        v
-Architec 审查输出    ->  .architec/
-```
-
-日常 `archi` 仍然会使用 LLM，但不会默认刷新完整 Hippos 快照。`archi --full`
-更依赖 Hippos 的全项目结构信息；如果要先刷新结构快照，可以运行：
-
-```bash
-archi --refresh-from-hippos --full
-```
-
-## 工作原理
-
-Architec 结合确定性代码信号和 LLM 解释：
-
-1. **选择范围**
-   - `archi` 读取当前 git 变更，聚焦 changed files。
-   - `archi --full` 审查整个项目。
-
-2. **读取结构上下文**
-   - Hippos 生成 `.hippos/` 快照。
-   - Architec 判断快照是否存在、是否陈旧、是否无法判断 freshness。
-
-3. **构建架构证据**
-   - 静态扫描重复逻辑、shadow implementation、边界压力、清理候选、热点、拓扑压力等。
-   - 增量审查会把 selected-change concerns 和全局上下文分开，避免小 diff 被全局噪音淹没。
-
-4. **交给 LLM 解释**
-   - Architec 把紧凑证据发送给 llmgateway。
-   - llmgateway 根据配置选择 strong 或 weak 模型，并负责 provider 凭据。
-
-5. **输出建议**
-   - Architec 对 concerns 排序，保留原始 artifacts，并生成 Markdown / JSON 输出。
-   - 输出是架构建议，不是 pass/fail，也不是运行时正确性的证明。
-
-## 安装
-
-需要 Python 3.11+。
-
-推荐从 PyPI 安装：
-
-```bash
-python3 -m pip install --user architec
-```
-
-这会安装：
-
-- `archi`：Architec CLI；
-- `seemseam-llmgateway`：提供 LLM provider 网关能力的包；
-- `seemseam-hippos`：提供 Hippos 结构快照能力的包。
-
-运行时 import 名仍是 `llmgateway` 和 `hippos`，不需要额外配置 Python 包索引。
-
-本地开发安装：
-
-```bash
-python3 -m pip install -e .
-```
-
-## 配置 LLM
-
-Architec 的 LLM 调用全部通过 **llmgateway**。请在下面的文件中配置 provider
-和 strong/weak 模型：
-
-```text
-~/.llmgateway/config.yaml
-```
-
-最小示例：
-
-```yaml
-version: 1
-provider:
-  provider_type: openai
-  api_style: openai_responses
-  base_url: https://your-llm-endpoint/v1
-  api_key: sk-...
-settings:
-  strong_model: your-strong-model
-  weak_model: your-fast-model
-```
-
-检查安装和 LLM 路由：
-
-```bash
-archi --check .
-```
-
-## 快速使用
-
-审查当前变更：
-
-```bash
-archi
-```
-
-全项目架构审查：
-
-```bash
-archi --full
-```
-
-保存 JSON 输出：
-
-```bash
-archi --out review.json
-archi --full --out full-review.json
-```
-
-刷新 Hippos 快照后再全量审查：
-
-```bash
-archi --refresh-from-hippos --full
-```
-
-## 命令速查
-
-| 命令 | 用途 |
-| --- | --- |
-| `archi` | 对当前 selected changes 进行增量 LLM 架构审查。 |
-| `archi --full` | 对整个项目进行 LLM 架构审查。 |
-| `archi --out review.json` | 保存增量审查 JSON。 |
-| `archi --full --out full-review.json` | 保存全量审查 JSON。 |
-| `archi --refresh-from-hippos --full` | 刷新 Hippos 结构输入后运行全量审查。 |
-| `archi --check .` | 检查 Hippos bundle 状态和 llmgateway 配置。 |
-
-## 输出
-
-Architec 写入 `.architec/`：
-
-```text
-.architec/
-  architec-analysis.json
-  architec-summary.md
-  architec-viz.html
-  code-review-concerns.json
-  code-review-discovery.json
-  review-events.jsonl
-  cache/
-```
-
-Hippos 写入 `.hippos/`。
-
-建议先读 `.architec/architec-summary.md`，需要精确字段时再看
-`.architec/architec-analysis.json`。
-
-## Agent 命令兼容
-
-当前公开工作流是 `archi` 和 `archi --full`。部分旧版本 `archi` 可能仍显示旧命令形态：
-全量审查是 `archi .`，增量审查是 `archi --diff .`。
-
-Agent 和自动化脚本应先检查本机命令：
-
-```bash
-archi --help
-```
-
-| Help 输出 | 增量审查 | 全量审查 |
-| --- | --- | --- |
-| 包含 `--full` | `archi` | `archi --full` |
-| 不包含 `--full` 但包含 `--diff` | `archi --diff .` | `archi .` |
-
-## 无需登录
-
-架构分析不需要 `archi login`。账号相关命令可能用于诊断，但不是日常 Architec
-分析流程的一部分。
-
-## 开发
-
-运行测试：
-
-```bash
-PYTHONPATH=src python3 -m pytest -q
-```
-
-从当前 checkout 运行 Architec：
-
-```bash
-PYTHONPATH=src python3 -m architec
-PYTHONPATH=src python3 -m architec --full
-```
-
-## 更多文档
-
-- [使用手册](docs/usage-manual.md)
-- [架构稳定性说明](docs/advisory-review/topics/architecture-stability.md)
-- [证据模型](docs/advisory-review/topics/evidence-model.md)

package/docs/npm-release.md

@@ -1,85 +0,0 @@
-# npm Release Notes
-
-`@seemseam/architec` is a binary dispatcher for the Architec CLI. It is not a
-Node.js rewrite and it must not bundle the Python source trees for `architec`,
-`seemseam_hippos`, or `seemseam_llmgateway`.
-
-## Package Identity
-
-- npm package: `@seemseam/architec`
-- CLI command: `archi`
-- npm version: must match the released Architec version on PyPI and the
-  GitHub tag, for example `0.2.11` and `v0.2.11`
-- source package: PyPI `architec`
-- binary source: GitHub Release standalone `archi` assets
-
-The unscoped npm package `architec` is owned by someone else and is not used.
-
-## Dispatcher Strategy
-
-The npm package contains a small Node.js dispatcher. On first run it:
-
-1. maps the current OS/CPU to a release asset name;
-2. downloads `archi-v<version>-checksums.txt` from the matching GitHub Release;
-3. downloads the matching `archi-v<version>-<platform>` binary;
-4. verifies the SHA-256 checksum before caching the binary;
-5. executes the cached binary on later runs.
-
-Default release URL:
-
-```text
-https://github.com/SeemSeam/architec/releases/download/v<version>/
-```
-
-The first npm release gate requires these assets for the selected platform
-matrix:
-
-```text
-archi-v0.2.11-linux-x64
-archi-v0.2.11-darwin-x64
-archi-v0.2.11-darwin-arm64
-archi-v0.2.11-win32-x64.exe
-archi-v0.2.11-checksums.txt
-```
-
-`linux-arm64` is supported by the dispatcher if an asset exists, but it is not
-part of the default first-release gate until a real Linux arm64 build runner and
-smoke test are selected.
-
-## Local Verification
-
-```bash
-npm test
-npm run pack:dry-run
-ARCHITEC_NPM_REQUIRED_TRIPLETS=linux-x64 npm run release-assets:check
-```
-
-The dispatcher smoke test uses a local file URL fixture and does not contact
-GitHub. `release-assets:check` contacts GitHub and fails until the matching
-GitHub Release binary assets and checksum file exist.
-
-## Trusted Publishing
-
-Configure npm Trusted Publishing for the existing package:
-
-```text
-Provider: GitHub Actions
-Organization or user: SeemSeam
-Repository: architec
-Workflow filename: npm.yml
-Environment name: <blank>
-Allowed actions: npm publish
-```
-
-The workflow must exist at `.github/workflows/npm.yml`, use a GitHub-hosted
-runner, use Node 24 with npm 11.5.1 or newer, set `permissions:
-id-token: write`, and publish without `NODE_AUTH_TOKEN`.
-
-## Release Order
-
-1. Publish `architec` to PyPI.
-2. Build standalone `archi` binaries from the released PyPI package set.
-3. Upload binaries and `archi-v<version>-checksums.txt` to the matching GitHub
-   Release.
-4. Verify `npm test`, `npm pack --dry-run`, and `release-assets:check`.
-5. Publish `@seemseam/architec@<version>` through npm Trusted Publishing.

package/lib/archi-dispatcher.js

@@ -1,291 +0,0 @@
-"use strict";
-
-const crypto = require("node:crypto");
-const fs = require("node:fs");
-const http = require("node:http");
-const https = require("node:https");
-const os = require("node:os");
-const path = require("node:path");
-const { spawn } = require("node:child_process");
-const { fileURLToPath } = require("node:url");
-
-const PACKAGE_ROOT = path.resolve(__dirname, "..");
-const PACKAGE_JSON = JSON.parse(
-  fs.readFileSync(path.join(PACKAGE_ROOT, "package.json"), "utf8"),
-);
-const VERSION = PACKAGE_JSON.version;
-const OWNER = "SeemSeam";
-const REPO = "architec";
-const SUPPORTED_TRIPLETS = new Set([
-  "linux-x64",
-  "linux-arm64",
-  "darwin-x64",
-  "darwin-arm64",
-  "win32-x64",
-]);
-
-function fail(message) {
-  throw new Error(message);
-}
-
-function platformTriplet(platform = process.platform, arch = process.arch) {
-  const mappedArch = arch === "x64" || arch === "arm64" ? arch : "";
-  if (!mappedArch) {
-    fail(`unsupported CPU architecture: ${arch}`);
-  }
-  if (platform === "linux" || platform === "darwin") {
-    return `${platform}-${mappedArch}`;
-  }
-  if (platform === "win32" && mappedArch === "x64") {
-    return "win32-x64";
-  }
-  fail(`unsupported platform: ${platform}-${arch}`);
-}
-
-function assetNameFor(triplet, version = VERSION) {
-  if (!SUPPORTED_TRIPLETS.has(triplet)) {
-    fail(`unsupported binary target: ${triplet}`);
-  }
-  const extension = triplet.startsWith("win32-") ? ".exe" : "";
-  return `archi-v${version}-${triplet}${extension}`;
-}
-
-function checksumFileName(version = VERSION) {
-  return `archi-v${version}-checksums.txt`;
-}
-
-function defaultCacheBase() {
-  if (process.platform === "win32") {
-    return (
-      process.env.LOCALAPPDATA ||
-      path.join(os.homedir(), "AppData", "Local")
-    );
-  }
-  if (process.platform === "darwin") {
-    return path.join(os.homedir(), "Library", "Caches");
-  }
-  return process.env.XDG_CACHE_HOME || path.join(os.homedir(), ".cache");
-}
-
-function cacheRoot() {
-  return (
-    process.env.ARCHITEC_NPM_CACHE_DIR ||
-    path.join(defaultCacheBase(), "architec", "npm")
-  );
-}
-
-function releaseBaseUrl() {
-  return (
-    process.env.ARCHITEC_NPM_RELEASE_BASE_URL ||
-    `https://github.com/${OWNER}/${REPO}/releases/download/v${VERSION}/`
-  );
-}
-
-function joinUrl(base, name) {
-  const normalized = base.endsWith("/") ? base : `${base}/`;
-  return new URL(name, normalized).toString();
-}
-
-function sha256File(filePath) {
-  return new Promise((resolve, reject) => {
-    const hash = crypto.createHash("sha256");
-    const stream = fs.createReadStream(filePath);
-    stream.on("data", (chunk) => hash.update(chunk));
-    stream.on("error", reject);
-    stream.on("end", () => resolve(hash.digest("hex")));
-  });
-}
-
-function request(url, redirects = 0) {
-  return new Promise((resolve, reject) => {
-    const parsed = new URL(url);
-    const client = parsed.protocol === "http:" ? http : https;
-    const req = client.get(
-      parsed,
-      {
-        headers: {
-          "User-Agent": `${PACKAGE_JSON.name}/${VERSION}`,
-        },
-      },
-      (res) => {
-        if (
-          res.statusCode >= 300 &&
-          res.statusCode < 400 &&
-          res.headers.location
-        ) {
-          res.resume();
-          if (redirects >= 5) {
-            reject(new Error(`too many redirects while fetching ${url}`));
-            return;
-          }
-          resolve(request(new URL(res.headers.location, url).toString(), redirects + 1));
-          return;
-        }
-        if (res.statusCode !== 200) {
-          res.resume();
-          reject(new Error(`HTTP ${res.statusCode} while fetching ${url}`));
-          return;
-        }
-        resolve(res);
-      },
-    );
-    req.on("error", reject);
-  });
-}
-
-async function readUrl(url) {
-  const parsed = new URL(url);
-  if (parsed.protocol === "file:") {
-    return fs.promises.readFile(fileURLToPath(parsed));
-  }
-  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    fail(`unsupported URL protocol: ${parsed.protocol}`);
-  }
-  const res = await request(url);
-  const chunks = [];
-  for await (const chunk of res) {
-    chunks.push(chunk);
-  }
-  return Buffer.concat(chunks);
-}
-
-async function downloadUrl(url, targetPath) {
-  const parsed = new URL(url);
-  if (parsed.protocol === "file:") {
-    await fs.promises.copyFile(fileURLToPath(parsed), targetPath);
-    return;
-  }
-  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    fail(`unsupported URL protocol: ${parsed.protocol}`);
-  }
-  const res = await request(url);
-  await new Promise((resolve, reject) => {
-    const stream = fs.createWriteStream(targetPath, { mode: 0o755 });
-    res.pipe(stream);
-    res.on("error", reject);
-    stream.on("error", reject);
-    stream.on("finish", resolve);
-  });
-}
-
-function parseChecksums(text) {
-  const checksums = new Map();
-  for (const line of text.split(/\r?\n/)) {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) {
-      continue;
-    }
-    const parts = trimmed.split(/\s+/);
-    if (parts.length < 2) {
-      continue;
-    }
-    if (/^[a-fA-F0-9]{64}$/.test(parts[0])) {
-      checksums.set(parts[1].replace(/^\*/, ""), parts[0].toLowerCase());
-    } else if (/^[a-fA-F0-9]{64}$/.test(parts[1])) {
-      checksums.set(parts[0].replace(/^\*/, ""), parts[1].toLowerCase());
-    }
-  }
-  return checksums;
-}
-
-async function expectedChecksum(assetName) {
-  const checksumUrl =
-    process.env.ARCHITEC_NPM_CHECKSUM_URL ||
-    joinUrl(releaseBaseUrl(), checksumFileName());
-  const checksumText = (await readUrl(checksumUrl)).toString("utf8");
-  const checksums = parseChecksums(checksumText);
-  const expected = checksums.get(assetName);
-  if (!expected) {
-    fail(`checksum for ${assetName} was not found in ${checksumUrl}`);
-  }
-  return expected;
-}
-
-function markerMatches(markerPath, assetName, expected) {
-  try {
-    const marker = JSON.parse(fs.readFileSync(markerPath, "utf8"));
-    return (
-      marker.version === VERSION &&
-      marker.assetName === assetName &&
-      marker.sha256 === expected
-    );
-  } catch {
-    return false;
-  }
-}
-
-async function ensureBinary() {
-  const configuredBinary = process.env.ARCHITEC_NPM_BINARY_PATH;
-  if (configuredBinary) {
-    const resolved = path.resolve(configuredBinary);
-    if (!fs.existsSync(resolved)) {
-      fail(`ARCHITEC_NPM_BINARY_PATH does not exist: ${resolved}`);
-    }
-    return resolved;
-  }
-
-  const triplet = platformTriplet();
-  const assetName = assetNameFor(triplet);
-  const targetDir = path.join(cacheRoot(), VERSION, triplet);
-  const targetPath = path.join(targetDir, process.platform === "win32" ? "archi.exe" : "archi");
-  const markerPath = path.join(targetDir, "download.json");
-  const expected = await expectedChecksum(assetName);
-
-  if (fs.existsSync(targetPath) && markerMatches(markerPath, assetName, expected)) {
-    return targetPath;
-  }
-
-  await fs.promises.mkdir(targetDir, { recursive: true });
-  if (fs.existsSync(targetPath)) {
-    const actual = await sha256File(targetPath);
-    if (actual === expected) {
-      await fs.promises.chmod(targetPath, 0o755);
-      await fs.promises.writeFile(
-        markerPath,
-        `${JSON.stringify({ version: VERSION, assetName, sha256: expected }, null, 2)}\n`,
-      );
-      return targetPath;
-    }
-  }
-
-  const tempPath = path.join(targetDir, `${assetName}.${process.pid}.download`);
-  await downloadUrl(joinUrl(releaseBaseUrl(), assetName), tempPath);
-  const actual = await sha256File(tempPath);
-  if (actual !== expected) {
-    await fs.promises.rm(tempPath, { force: true });
-    fail(`checksum mismatch for ${assetName}: expected ${expected}, got ${actual}`);
-  }
-  await fs.promises.chmod(tempPath, 0o755);
-  await fs.promises.rename(tempPath, targetPath);
-  await fs.promises.writeFile(
-    markerPath,
-    `${JSON.stringify({ version: VERSION, assetName, sha256: expected }, null, 2)}\n`,
-  );
-  return targetPath;
-}
-
-function runBinary(binaryPath, args) {
-  return new Promise((resolve, reject) => {
-    const child = spawn(binaryPath, args, {
-      stdio: "inherit",
-      env: process.env,
-    });
-    child.on("error", reject);
-    child.on("exit", (code) => resolve(code === null ? 1 : code));
-  });
-}
-
-async function main(args = process.argv.slice(2)) {
-  const binaryPath = await ensureBinary();
-  return runBinary(binaryPath, args);
-}
-
-module.exports = {
-  VERSION,
-  assetNameFor,
-  checksumFileName,
-  ensureBinary,
-  main,
-  parseChecksums,
-  platformTriplet,
-};

package/scripts/check-release-assets.js

@@ -1,101 +0,0 @@
-"use strict";
-
-const https = require("node:https");
-const { URL } = require("node:url");
-const {
-  VERSION,
-  assetNameFor,
-  checksumFileName,
-  parseChecksums,
-} = require("../lib/archi-dispatcher");
-
-const OWNER = "SeemSeam";
-const REPO = "architec";
-const DEFAULT_REQUIRED_TRIPLETS = [
-  "linux-x64",
-  "darwin-x64",
-  "darwin-arm64",
-  "win32-x64",
-];
-
-function requiredTriplets() {
-  const raw = process.env.ARCHITEC_NPM_REQUIRED_TRIPLETS || "";
-  if (!raw.trim()) {
-    return DEFAULT_REQUIRED_TRIPLETS;
-  }
-  return raw.split(",").map((value) => value.trim()).filter(Boolean);
-}
-
-function requestJson(url) {
-  return request(url).then((body) => JSON.parse(body.toString("utf8")));
-}
-
-function request(url) {
-  return new Promise((resolve, reject) => {
-    const headers = {
-      Accept: "application/vnd.github+json",
-      "User-Agent": `@seemseam/architec/${VERSION}`,
-    };
-    if (process.env.GITHUB_TOKEN) {
-      headers.Authorization = `Bearer ${process.env.GITHUB_TOKEN}`;
-    }
-    https
-      .get(new URL(url), { headers }, (res) => {
-        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-          res.resume();
-          resolve(request(new URL(res.headers.location, url).toString()));
-          return;
-        }
-        if (res.statusCode !== 200) {
-          res.resume();
-          reject(new Error(`HTTP ${res.statusCode} while fetching ${url}`));
-          return;
-        }
-        const chunks = [];
-        res.on("data", (chunk) => chunks.push(chunk));
-        res.on("end", () => resolve(Buffer.concat(chunks)));
-      })
-      .on("error", reject);
-  });
-}
-
-async function main() {
-  const release = await requestJson(
-    `https://api.github.com/repos/${OWNER}/${REPO}/releases/tags/v${VERSION}`,
-  );
-  if (release.draft) {
-    throw new Error(`GitHub Release v${VERSION} is still a draft`);
-  }
-
-  const assetByName = new Map((release.assets || []).map((asset) => [asset.name, asset]));
-  const checksumsName = checksumFileName();
-  const checksumsAsset = assetByName.get(checksumsName);
-  if (!checksumsAsset) {
-    throw new Error(`missing GitHub Release checksum asset: ${checksumsName}`);
-  }
-
-  const checksums = parseChecksums(
-    (await request(checksumsAsset.browser_download_url)).toString("utf8"),
-  );
-  const missing = [];
-  for (const triplet of requiredTriplets()) {
-    const assetName = assetNameFor(triplet);
-    if (!assetByName.has(assetName)) {
-      missing.push(assetName);
-      continue;
-    }
-    if (!checksums.has(assetName)) {
-      missing.push(`${assetName} checksum`);
-    }
-  }
-
-  if (missing.length) {
-    throw new Error(`missing required release assets: ${missing.join(", ")}`);
-  }
-  console.log(`GitHub Release v${VERSION} has required npm binary assets.`);
-}
-
-main().catch((error) => {
-  console.error(error.message);
-  process.exit(1);
-});