@the-17/agentsecrets 1.1.4 → 3.0.0

package/README.md

@@ -58,7 +58,7 @@ pip install agentsecrets-cli
 
 **Go:**
 ```bash
-go install github.com/The-17/agentsecrets/cmd/agentsecrets@latest
+go install github.com/The-17/agentsecrets/cmd/agentsecrets@v3.0.0
 ```
 
 ---

package/bin/agentsecrets.js

@@ -1,166 +1,185 @@
-#!/usr/bin/env node
-
-const os = require('os');
-const fs = require('fs');
-const path = require('path');
-const { spawn } = require('child_process');
-const https = require('https');
-const tar = require('tar');
-
-const GITHUB_REPO = "The-17/agentsecrets";
-
-function getPlatformInfo() {
-    const platform = os.platform();
-    const arch = os.arch();
-
-    let osName = platform;
-    if (platform === 'win32') osName = 'windows';
-    if (platform === 'darwin') osName = 'darwin';
-    if (platform === 'linux') osName = 'linux';
-
-    let archName = 'amd64';
-    if (arch === 'x64') archName = 'amd64';
-    if (arch === 'arm64') archName = 'arm64';
-    if (arch === 'ia32') archName = '386';
-
-    return { osName, archName };
-}
-
-function httpsGet(url) {
-    return new Promise((resolve, reject) => {
-        https.get(url, { headers: { 'User-Agent': 'agentsecrets-npm' } }, (res) => {
-            if (res.statusCode === 301 || res.statusCode === 302) {
-                return httpsGet(res.headers.location).then(resolve).catch(reject);
-            }
-            let data = '';
-            res.on('data', chunk => data += chunk);
-            res.on('end', () => resolve({ statusCode: res.statusCode, body: data }));
-        }).on('error', reject);
-    });
-}
-
-const CACHE_TTL_MS = 7 * 24 * 60 * 60 * 1000; // 7 days
-
-async function getLatestVersion(baseDir) {
-    const cacheFile = path.join(baseDir, 'version.cache');
-    
-    // Check cache first
-    if (fs.existsSync(cacheFile)) {
-        const cache = JSON.parse(fs.readFileSync(cacheFile, 'utf8'));
-        if (Date.now() - cache.timestamp < CACHE_TTL_MS) {
-            return cache.version;
-        }
-    }
-
-    try {
-        const { body } = await httpsGet(`https://api.github.com/repos/${GITHUB_REPO}/releases/latest`);
-        const release = JSON.parse(body);
-        const version = release.tag_name.replace(/^v/, '');
-        
-        // Save to cache
-        fs.writeFileSync(cacheFile, JSON.stringify({ version, timestamp: Date.now() }));
-        return version;
-    } catch {
-        return null;
-    }
-}
-
-async function downloadFile(url, dest) {
-    return new Promise((resolve, reject) => {
-        const file = fs.createWriteStream(dest);
-        https.get(url, { headers: { 'User-Agent': 'agentsecrets-npm' } }, (response) => {
-            if (response.statusCode === 302 || response.statusCode === 301) {
-                downloadFile(response.headers.location, dest).then(resolve).catch(reject);
-                return;
-            }
-            if (response.statusCode !== 200) {
-                reject(new Error(`Failed to download: ${response.statusCode}`));
-                return;
-            }
-            response.pipe(file);
-            file.on('finish', () => file.close(resolve));
-        }).on('error', (err) => {
-            fs.unlink(dest, () => reject(err));
-        });
-    });
-}
-
-async function ensureBinary() {
-    const { osName, archName } = getPlatformInfo();
-    const baseDir = path.join(os.homedir(), '.agentsecrets', 'bin');
-    if (!fs.existsSync(baseDir)) {
-        fs.mkdirSync(baseDir, { recursive: true });
-    }
-
-    let binaryName = 'agentsecrets';
-    if (osName === 'windows') binaryName += '.exe';
-
-    // Check GitHub for the latest version
-    const latestVersion = await getLatestVersion(baseDir);
-
-    if (!latestVersion) {
-        // Offline or GitHub unreachable — fall back to any existing binary
-        const existing = fs.readdirSync(baseDir).find(f => f.startsWith(binaryName));
-        if (existing) {
-            process.stderr.write('Could not reach GitHub. Using cached binary.\n');
-            return path.join(baseDir, existing);
-        }
-        throw new Error('No cached binary and could not reach GitHub to download one.');
-    }
-
-    const binaryPath = path.join(baseDir, `${binaryName}_${latestVersion}`);
-
-    if (fs.existsSync(binaryPath)) {
-        return binaryPath; // Already on latest
-    }
-
-    // Delete old binaries
-    const oldBinaries = fs.readdirSync(baseDir).filter(f => f.startsWith(binaryName));
-    for (const old of oldBinaries) {
-        fs.unlinkSync(path.join(baseDir, old));
-    }
-
-    process.stderr.write(`Downloading AgentSecrets v${latestVersion} for ${osName}/${archName}...\n`);
-
-    const ext = osName === 'windows' ? 'zip' : 'tar.gz';
-    const assetName = `agentsecrets_${latestVersion}_${osName}_${archName}.${ext}`;
-    const url = `https://github.com/${GITHUB_REPO}/releases/download/v${latestVersion}/${assetName}`;
-
-    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'agentsecrets-'));
-    const archivePath = path.join(tmpDir, assetName);
-
-    try {
-        await downloadFile(url, archivePath);
-
-        if (ext === 'tar.gz') {
-            await tar.x({ file: archivePath, cwd: tmpDir });
-        } else {
-            if (osName === 'windows') {
-                throw new Error('Automatic zip extraction for Windows not yet implemented.');
-            }
-        }
-
-        const extractedBinary = path.join(tmpDir, binaryName);
-        fs.copyFileSync(extractedBinary, binaryPath);
-        fs.chmodSync(binaryPath, 0o755);
-        fs.rmSync(tmpDir, { recursive: true, force: true });
-
-        return binaryPath;
-    } catch (err) {
-        throw new Error(`Failed to download AgentSecrets binary: ${err.message}`);
-    }
-}
-
-async function main() {
-    try {
-        const binaryPath = await ensureBinary();
-        const args = process.argv.slice(2);
-        const child = spawn(binaryPath, args, { stdio: 'inherit' });
-        child.on('exit', (code) => process.exit(code));
-    } catch (err) {
-        process.stderr.write(`Error: ${err.message}\n`);
-        process.exit(1);
-    }
-}
-
-main();
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+const { spawn } = require('child_process');
+const https = require('https');
+const tar = require('tar');
+
+const PACKAGE_JSON = require('../package.json');
+const VERSION = PACKAGE_JSON.version;
+const GITHUB_REPO = "The-17/agentsecrets";
+
+function getPlatformInfo() {
+  const type = os.type();
+  const arch = os.arch();
+
+  let os_name = '';
+  if (type === 'Darwin') os_name = 'darwin';
+  else if (type === 'Linux') os_name = 'linux';
+  else if (type === 'Windows_NT') os_name = 'windows';
+
+  let arch_name = '';
+  if (arch === 'x64') arch_name = 'amd64';
+  else if (arch === 'arm64') arch_name = 'arm64';
+  else if (arch === 'ia32') arch_name = '386';
+
+  return { os_name, arch_name };
+}
+
+async function downloadBinary(url, dest, isZip = false) {
+  return new Promise((resolve, reject) => {
+    https.get(url, (res) => {
+      if (res.statusCode === 302 || res.statusCode === 301) {
+        const nextIsZip = isZip || url.split('?')[0].endsWith('.zip');
+        return downloadBinary(res.headers.location, dest, nextIsZip).then(resolve).catch(reject);
+      }
+      if (res.statusCode !== 200) {
+        return reject(new Error(`Failed to download: ${res.statusCode}`));
+      }
+
+      const tempDir = path.join(os.tmpdir(), `agentsecrets-${Date.now()}`);
+      fs.mkdirSync(tempDir, { recursive: true });
+
+      const isWin = isZip || url.split('?')[0].endsWith('.zip');
+      if (isWin) {
+        const zipPath = path.join(tempDir, 'archive.zip');
+        const fileStream = fs.createWriteStream(zipPath);
+        res.pipe(fileStream);
+        fileStream.on('finish', () => {
+          fileStream.close(() => {
+            const { execSync } = require('child_process');
+            try {
+              // Use ErrorActionPreference = Stop so PowerShell errors trigger execSync failure
+              execSync('powershell.exe -NoProfile -Command "$ErrorActionPreference = \'Stop\'; Expand-Archive -Path \'' + zipPath + '\' -DestinationPath \'' + tempDir + '\' -Force"', { stdio: 'pipe' });
+              const binaryName = 'agentsecrets.exe';
+              const src = path.join(tempDir, binaryName);
+              if (fs.existsSync(src)) {
+                fs.mkdirSync(path.dirname(dest), { recursive: true });
+                fs.renameSync(src, dest);
+                resolve();
+              } else {
+                reject(new Error('Binary ' + binaryName + ' not found in zip archive'));
+              }
+            } catch (err) {
+              const stderr = err.stderr ? err.stderr.toString() : '';
+              reject(new Error('Failed to extract ZIP archive on Windows: ' + err.message + '\nPowerShell Error: ' + stderr));
+            }
+          });
+        });
+        fileStream.on('error', reject);
+        return;
+      }
+
+      res.pipe(tar.x({ C: tempDir }))
+        .on('finish', () => {
+          const binaryName = os.platform() === 'win32' ? 'agentsecrets.exe' : 'agentsecrets';
+          const src = path.join(tempDir, binaryName);
+          if (fs.existsSync(src)) {
+            fs.mkdirSync(path.dirname(dest), { recursive: true });
+            fs.renameSync(src, dest);
+            fs.chmodSync(dest, 0o755);
+
+            // Pre-register with keychain-auth if available. This eliminates
+            // the one-time setup spinner on the user's first command.
+            try {
+              const { execFileSync } = require('child_process');
+              execFileSync('keychain-auth', ['register', dest], {
+                timeout: 5000,
+                stdio: 'ignore',
+              });
+            } catch (_) {
+              // Silent — AutoSetup handles registration at runtime if needed
+            }
+
+            resolve();
+          } else {
+            reject(new Error(`Binary ${binaryName} not found in archive`));
+          }
+        })
+        .on('error', reject);
+    }).on('error', reject);
+  });
+}
+
+async function getLatestVersion() {
+  return new Promise((resolve, reject) => {
+    https.get({
+      hostname: 'api.github.com',
+      path: `/repos/${GITHUB_REPO}/releases/latest`,
+      headers: { 'User-Agent': 'agentsecrets-npm' }
+    }, (res) => {
+      let data = '';
+      res.on('data', (chunk) => data += chunk);
+      res.on('end', () => {
+        try {
+          const json = JSON.parse(data);
+          if (json.tag_name) {
+            resolve(json.tag_name.replace(/^v/, ''));
+          } else {
+            reject(new Error('No tag_name in latest release'));
+          }
+        } catch (e) {
+          reject(e);
+        }
+      });
+    }).on('error', reject);
+  });
+}
+
+async function getBinaryPath() {
+  const { os_name, arch_name } = getPlatformInfo();
+  const binDir = path.join(os.homedir(), '.agentsecrets', 'bin');
+  const binaryName = os_name === 'windows' ? 'agentsecrets.exe' : 'agentsecrets';
+  
+  // Try to get the latest version from GitHub
+  let version = VERSION;
+  try {
+    version = await getLatestVersion();
+    console.log(`Latest AgentSecrets version: ${version}`);
+  } catch (err) {
+    console.error(`Failed to fetch latest version from GitHub: ${err.message}. Falling back to package version ${VERSION}.`);
+  }
+
+  const binaryPath = path.join(binDir, `${binaryName}_${version}`);
+
+  if (fs.existsSync(binaryPath)) {
+    return binaryPath;
+  }
+
+  console.error(`AgentSecrets binary not found. Downloading v${version} for ${os_name}/${arch_name}...`);
+
+  const ext = os_name === 'windows' ? 'zip' : 'tar.gz';
+  const assetName = `agentsecrets_${version}_${os_name}_${arch_name}.${ext}`;
+  const url = `https://github.com/${GITHUB_REPO}/releases/download/v${version}/${assetName}`;
+
+  try {
+    await downloadBinary(url, binaryPath);
+    return binaryPath;
+  } catch (err) {
+    throw new Error(`Failed to download AgentSecrets binary: ${err.message}\nURL: ${url}`);
+  }
+}
+
+async function main() {
+  try {
+    const binaryPath = await getBinaryPath();
+    const args = process.argv.slice(2);
+    const proc = spawn(binaryPath, args, { stdio: 'inherit' });
+    proc.on('close', (code) => process.exit(code || 0));
+    proc.on('error', (err) => {
+      console.error(`Failed to execute AgentSecrets: ${err.message}`);
+      process.exit(1);
+    });
+  } catch (err) {
+    console.error(err.message);
+    process.exit(1);
+  }
+}
+
+if (require.main === module) {
+  main();
+}
+
+module.exports = { getBinaryPath };

package/index.js

@@ -0,0 +1,27 @@
+/**
+ * @the-17/agentsecrets
+ * Zero-knowledge secrets infrastructure built for AI agents.
+ */
+
+const { spawn } = require('child_process');
+const path = require('path');
+const { getBinaryPath } = require('./bin/agentsecrets');
+
+/**
+ * Executes the agentsecrets CLI binary with the given arguments.
+ * @param {string[]} args 
+ * @returns {Promise<number>}
+ */
+async function run(args = []) {
+  const binaryPath = await getBinaryPath();
+  return new Promise((resolve, reject) => {
+    const proc = spawn(binaryPath, args, { stdio: 'inherit' });
+    proc.on('close', (code) => resolve(code));
+    proc.on('error', (err) => reject(err));
+  });
+}
+
+module.exports = {
+  run,
+  getBinaryPath
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-17/agentsecrets",
-  "version": "1.1.4",
+  "version": "3.0.0",
   "description": "AI-native zero-knowledge secrets manager (CLI wrapper)",
   "main": "index.js",
   "bin": {
@@ -18,7 +18,7 @@
     "cli",
     "ai-secrets-management"
   ],
-  "author": "The Seventeen <hello@theseventeen.co>",
+  "author": "The Seventeen <engineering@theseventeen.co>",
   "license": "MIT",
   "repository": {
     "type": "git",