@sigmashake/ssg 0.5.1 → 0.6.1

package/bin/ssg.cjs

@@ -1,21 +1,35 @@
 #!/usr/bin/env node
-// bin/ssg.js — launcher for @sigmashake/ssg
-// Runs the pre-compiled platform binary from dist/. Falls back to bun + source
-// if no binary is available for this platform (unsupported or dev environment).
+// bin/ssg.cjs — launcher for @sigmashake/ssg
+// Resolves the native binary from the platform-specific optional dependency,
+// falls back to a local dist/ build (dev environment), then to Bun + source.
 'use strict';
 
 const {execFileSync, spawnSync} = require('child_process');
 const path = require('path');
 const fs = require('fs');
 
-// Binary naming convention: ssg-{platform}-{arch}[.exe]
-// Matches the build:* scripts in package.json.
 const ext = process.platform === 'win32' ? '.exe' : '';
-const binaryName = `ssg-${process.platform}-${process.arch}${ext}`;
-const binaryPath = path.resolve(__dirname, '..', 'dist', binaryName);
+const platformPkg = `@sigmashake/ssg-${process.platform}-${process.arch}`;
+let binaryPath;
 
-// Prefer pre-compiled binary — no Bun required at runtime.
-if (fs.existsSync(binaryPath)) {
+// 1. Try platform-specific optional dependency (npm install path)
+try {
+  const pkgRoot = path.dirname(require.resolve(`${platformPkg}/package.json`));
+  const candidate = path.join(pkgRoot, 'bin', `ssg${ext}`);
+  if (fs.existsSync(candidate)) binaryPath = candidate;
+} catch {}
+
+// 2. Fall back to local dist/ (dev build / bun build --compile)
+if (!binaryPath) {
+  const devBin = path.resolve(
+    __dirname, '..', 'dist',
+    `ssg-${process.platform}-${process.arch}${ext}`,
+  );
+  if (fs.existsSync(devBin)) binaryPath = devBin;
+}
+
+// 3. Run binary if found
+if (binaryPath) {
   const result = spawnSync(binaryPath, process.argv.slice(2), {
     stdio: 'inherit',
     env: process.env,
@@ -23,7 +37,7 @@ if (fs.existsSync(binaryPath)) {
   process.exit(result.status ?? 1);
 }
 
-// Fallback: run TypeScript source via Bun (dev environment or unsupported platform).
+// 4. Last resort: run TypeScript source via Bun (unsupported platform / dev)
 const src = path.resolve(__dirname, '..', 'src', 'cli.ts');
 
 let bunPath;
@@ -43,6 +57,7 @@ try {
 if (!bunPath) {
   process.stderr.write(
     `ssg: no pre-compiled binary for ${process.platform}-${process.arch}.\n` +
+    `Expected platform package: ${platformPkg}\n` +
     'Install Bun to run from source (https://bun.sh):\n\n' +
     '  curl -fsSL https://bun.sh/install | bash\n\n',
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sigmashake/ssg",
-  "version": "0.5.1",
+  "version": "0.6.1",
   "description": "AI Agent Governance CLI — evaluate tool calls against rules, block dangerous operations, and surface blocked commands",
   "type": "module",
   "bin": {
@@ -8,10 +8,16 @@
   },
   "files": [
     "bin/",
-    "scripts/postinstall.cjs",
     "LICENSE",
     "README.md"
   ],
+  "optionalDependencies": {
+    "@sigmashake/ssg-linux-x64": "~0.6.0",
+    "@sigmashake/ssg-linux-arm64": "~0.6.0",
+    "@sigmashake/ssg-darwin-arm64": "~0.6.0",
+    "@sigmashake/ssg-darwin-x64": "~0.6.0",
+    "@sigmashake/ssg-win32-x64": "~0.6.0"
+  },
   "scripts": {
     "dev": "bun run src/cli.ts",
     "build": "bun build --compile src/cli.ts --outfile ssg",
@@ -22,7 +28,7 @@
     "build:linux-arm64": "bun build --compile --target=bun-linux-arm64 src/cli.ts --outfile dist/ssg-linux-arm64",
     "build:all": "bun run build:linux && bun run build:linux-arm64 && bun run build:macos-arm64 && bun run build:macos-x64 && bun run build:windows",
     "build:protected:all": "bash ../sigmashake-dist/scripts/build-protected.sh",
-    "postinstall": "node scripts/postinstall.cjs",
+    "pub:platforms": "bash ../sigmashake-dist/scripts/publish-platforms.sh",
     "prepublishOnly": "bun run build:protected:all",
     "test": "bun test",
     "lint": "bun run src/cli.ts lint",

package/scripts/postinstall.cjs

@@ -1,150 +0,0 @@
-#!/usr/bin/env node
-// scripts/postinstall.js — downloads the platform binary from GitHub Releases.
-// Runs automatically after `npm install @sigmashake/ssg`.
-'use strict';
-
-const https = require('https');
-const fs = require('fs');
-const path = require('path');
-const zlib = require('zlib');
-
-const VERSION = require('../package.json').version;
-const BASE_URL = `https://github.com/sigmashakeinc/ssg/releases/download/v${VERSION}`;
-
-const PLATFORM_MAP = {
-  'linux-x64': {archive: 'ssg-linux-x64.tar.gz', binary: 'ssg', ext: ''},
-  'linux-arm64': {archive: 'ssg-linux-arm64.tar.gz', binary: 'ssg', ext: ''},
-  'darwin-arm64': {archive: 'ssg-darwin-arm64.tar.gz', binary: 'ssg', ext: ''},
-  'darwin-x64': {archive: 'ssg-darwin-x64.tar.gz', binary: 'ssg', ext: ''},
-  'win32-x64': {archive: 'ssg-win32-x64.zip', binary: 'ssg.exe', ext: '.exe'},
-};
-
-const platform = process.platform;
-const arch = process.arch;
-const key = `${platform}-${arch}`;
-const info = PLATFORM_MAP[key];
-
-if (!info) {
-  console.warn(`[ssg] No pre-compiled binary for ${key}. Install Bun to run from source.`);
-  process.exit(0);
-}
-
-const distDir = path.resolve(__dirname, '..', 'dist');
-const binaryPath = path.join(distDir, `ssg-${platform}-${arch}${info.ext}`);
-
-if (fs.existsSync(binaryPath)) {
-  process.exit(0); // Already downloaded
-}
-
-fs.mkdirSync(distDir, {recursive: true});
-
-const url = `${BASE_URL}/${info.archive}`;
-console.log(`[ssg] Downloading binary for ${key}...`);
-
-function followRedirects(url, maxRedirects, cb) {
-  if (maxRedirects === 0) return cb(new Error('Too many redirects'));
-  const mod = url.startsWith('https:') ? https : require('http');
-  mod.get(url, res => {
-    if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-      return followRedirects(res.headers.location, maxRedirects - 1, cb);
-    }
-    cb(null, res);
-  }).on('error', cb);
-}
-
-followRedirects(url, 10, (err, res) => {
-  if (err) {
-    console.warn(`[ssg] Download failed: ${err.message}. Install Bun to run from source.`);
-    process.exit(0);
-  }
-
-  if (res.statusCode !== 200) {
-    console.warn(`[ssg] HTTP ${res.statusCode} downloading binary. Install Bun to run from source.`);
-    process.exit(0);
-  }
-
-  if (info.archive.endsWith('.tar.gz')) {
-    // tar.gz: decompress with zlib, extract binary with manual tar parsing
-    const gunzip = zlib.createGunzip();
-    let buffer = Buffer.alloc(0);
-
-    res.pipe(gunzip);
-    gunzip.on('data', chunk => { buffer = Buffer.concat([buffer, chunk]); });
-    gunzip.on('end', () => {
-      // Minimal tar parser: scan for the binary file entry
-      let offset = 0;
-      let found = false;
-      while (offset + 512 <= buffer.length) {
-        const header = buffer.slice(offset, offset + 512);
-        const name = header.slice(0, 100).toString('utf8').replace(/\0/g, '');
-        const sizeStr = header.slice(124, 136).toString('utf8').replace(/\0/g, '').trim();
-        const size = sizeStr ? parseInt(sizeStr, 8) : 0;
-        offset += 512;
-        if (!name || size === 0) { offset += Math.ceil(size / 512) * 512; continue; }
-        const baseName = path.basename(name);
-        if (baseName === 'ssg' || baseName === info.binary) {
-          const data = buffer.slice(offset, offset + size);
-          fs.writeFileSync(binaryPath, data, {mode: 0o755});
-          console.log(`[ssg] Installed to ${binaryPath}`);
-          found = true;
-          break;
-        }
-        offset += Math.ceil(size / 512) * 512;
-      }
-      if (!found) {
-        console.warn('[ssg] Binary not found in archive. Install Bun to run from source.');
-      }
-    });
-    gunzip.on('error', e => {
-      console.warn(`[ssg] Extract failed: ${e.message}`);
-    });
-  } else {
-    // .zip: use built-in adm-zip fallback or just warn
-    const chunks = [];
-    res.on('data', c => chunks.push(c));
-    res.on('end', () => {
-      // Minimal ZIP parser for the binary entry
-      const data = Buffer.concat(chunks);
-      // Find central directory end record (PK\x05\x06)
-      let eocd = -1;
-      for (let i = data.length - 22; i >= 0; i--) {
-        if (data[i] === 0x50 && data[i+1] === 0x4b && data[i+2] === 0x05 && data[i+3] === 0x06) {
-          eocd = i; break;
-        }
-      }
-      if (eocd < 0) { console.warn('[ssg] Invalid ZIP'); process.exit(0); }
-      const cdOffset = data.readUInt32LE(eocd + 16);
-      const cdCount = data.readUInt16LE(eocd + 10);
-      let pos = cdOffset;
-      for (let i = 0; i < cdCount; i++) {
-        const sig = data.readUInt32LE(pos);
-        if (sig !== 0x02014b50) break;
-        const compMethod = data.readUInt16LE(pos + 10);
-        const compSize = data.readUInt32LE(pos + 20);
-        const nameLen = data.readUInt16LE(pos + 28);
-        const extraLen = data.readUInt16LE(pos + 30);
-        const commentLen = data.readUInt16LE(pos + 32);
-        const localOffset = data.readUInt32LE(pos + 42);
-        const entryName = data.slice(pos + 46, pos + 46 + nameLen).toString('utf8');
-        pos += 46 + nameLen + extraLen + commentLen;
-        if (path.basename(entryName) !== info.binary) continue;
-        // Read local file header
-        const lhNameLen = data.readUInt16LE(localOffset + 26);
-        const lhExtraLen = data.readUInt16LE(localOffset + 28);
-        const dataStart = localOffset + 30 + lhNameLen + lhExtraLen;
-        let fileData;
-        if (compMethod === 0) {
-          fileData = data.slice(dataStart, dataStart + compSize);
-        } else if (compMethod === 8) {
-          fileData = zlib.inflateRawSync(data.slice(dataStart, dataStart + compSize));
-        } else {
-          console.warn(`[ssg] Unsupported ZIP compression ${compMethod}`);
-          process.exit(0);
-        }
-        fs.writeFileSync(binaryPath, fileData, {mode: 0o755});
-        console.log(`[ssg] Installed to ${binaryPath}`);
-        break;
-      }
-    });
-  }
-});