@varavel/vdl 0.4.0-alpha.2 → 0.4.0-alpha.4

package/bin.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+
+const { spawn } = require("node:child_process");
+const { getBinaryPath } = require("./index.js");
+const { install } = require("./install.js");
+
+async function main() {
+  let binPath;
+  try {
+    binPath = getBinaryPath();
+  } catch (_) {
+    try {
+      await install();
+      binPath = getBinaryPath();
+    } catch (installError) {
+      console.error(installError.message);
+      process.exit(1);
+    }
+  }
+
+  const args = process.argv.slice(2);
+
+  // Spawn vdl
+  const child = spawn(binPath, args, {
+    stdio: ["inherit", "inherit", "inherit"],
+  });
+
+  // Propagate OS signals
+  const signals = ["SIGINT", "SIGTERM", "SIGHUP"];
+  signals.forEach((sig) => {
+    process.on(sig, () => {
+      if (child.pid) child.kill(sig);
+    });
+  });
+
+  child.on("exit", (code) => {
+    process.exit(code || 0);
+  });
+
+  child.on("error", (err) => {
+    console.error(err.message);
+    process.exit(1);
+  });
+}
+
+main().catch((err) => {
+  console.error(err.message);
+  process.exit(1);
+});

package/index.js

@@ -14,7 +14,7 @@ function getBinaryPath() {
   if (!fs.existsSync(binaryPath)) {
     throw new Error(
       `VDL binary not found at ${binaryPath}. ` +
-        `Installation may have failed. Try reinstalling: npm install @varavel/vdl`,
+        `Installation may have failed. Try reinstalling: npm install --global @varavel/vdl`,
     );
   }
 
@@ -33,7 +33,6 @@ function getVersion() {
 module.exports = {
   getBinaryPath,
   getVersion,
-  binaryPath: getBinaryPath(),
 };
 
 // If run directly, print the binary path

package/install.js

@@ -4,6 +4,7 @@ const { execSync } = require("node:child_process");
 const fs = require("node:fs");
 const path = require("node:path");
 const https = require("node:https");
+const crypto = require("node:crypto");
 
 const PLATFORM_MAP = {
   darwin: "darwin",
@@ -64,19 +65,67 @@ function getBinaryName() {
 }
 
 /**
- * Constructs the GitHub release download URL for the current platform.
- * @returns {string} Download URL
+ * Gets the release filename for the current platform/arch.
+ * @returns {string} Filename (e.g., vdl_linux_amd64.tar.gz)
  */
-function getDownloadURL() {
-  const version = getVersion();
+function getReleaseFilename() {
   const platform = getPlatform();
   const arch = getArch();
   const ext = platform === "windows" ? "zip" : "tar.gz";
-  const filename = `vdl_${platform}_${arch}.${ext}`;
+  return `vdl_${platform}_${arch}.${ext}`;
+}
 
+/**
+ * Constructs the GitHub release download URL for the current platform.
+ * @returns {string} Download URL
+ */
+function getDownloadURL() {
+  const version = getVersion();
+  const filename = getReleaseFilename();
   return `https://github.com/varavelio/vdl/releases/download/v${version}/${filename}`;
 }
 
+/**
+ * Constructs the GitHub release checksums URL.
+ * @returns {string} Checksums URL
+ */
+function getChecksumsURL() {
+  const version = getVersion();
+  return `https://github.com/varavelio/vdl/releases/download/v${version}/checksums.txt`;
+}
+
+/**
+ * Verifies the SHA256 checksum of the downloaded buffer.
+ * @param {Buffer} binaryBuffer - The downloaded file buffer
+ * @param {Buffer} checksumsBuffer - The downloaded checksums.txt buffer
+ * @param {string} filename - The expected filename in checksums.txt
+ * @throws {Error} If checksum verification fails
+ */
+function verifyChecksum(binaryBuffer, checksumsBuffer, filename) {
+  const checksums = checksumsBuffer.toString("utf8");
+  const expectedLine = checksums
+    .split("\n")
+    .find((line) => line.trim().endsWith(filename));
+
+  if (!expectedLine) {
+    throw new Error(`Checksum for ${filename} not found in checksums.txt`);
+  }
+
+  // Checksums file format is: <hash>  <filename>
+  const expectedHash = expectedLine.split(/\s+/)[0].trim();
+
+  const calculatedHash = crypto
+    .createHash("sha256")
+    .update(binaryBuffer)
+    .digest("hex");
+
+  if (expectedHash !== calculatedHash) {
+    throw new Error(
+      `Checksum verification failed for ${filename}.\nExpected: ${expectedHash}\nCalculated: ${calculatedHash}`,
+    );
+  }
+}
+
 /**
  * Ensures the bin directory exists and returns its path.
  * @returns {string} Absolute path to the bin directory
@@ -256,11 +305,8 @@ function download(url) {
         }
 
         const chunks = [];
-        let totalLength = 0;
-
         response.on("data", (chunk) => {
           chunks.push(chunk);
-          totalLength += chunk.length;
         });
 
         response.on("end", () => {
@@ -282,15 +328,26 @@ async function install() {
   try {
     const platform = getPlatform();
     const binaryName = getBinaryName();
-    const url = getDownloadURL();
+    const filename = getReleaseFilename();
+    const downloadUrl = getDownloadURL();
+    const checksumsUrl = getChecksumsURL();
     const binDir = ensureBinDir();
 
-    const buffer = await download(url);
+    console.log(`VDL: Downloading ${filename}...`);
 
+    const [binaryBuffer, checksumsBuffer] = await Promise.all([
+      download(downloadUrl),
+      download(checksumsUrl),
+    ]);
+
+    console.log("VDL: Verifying checksum...");
+    verifyChecksum(binaryBuffer, checksumsBuffer, filename);
+
+    console.log("VDL: Extracting...");
     if (platform === "windows") {
-      await extractZip(buffer, binDir, binaryName);
+      await extractZip(binaryBuffer, binDir, binaryName);
     } else {
-      await extractTarGz(buffer, binDir, binaryName);
+      await extractTarGz(binaryBuffer, binDir, binaryName);
     }
 
     const binaryPath = path.join(binDir, binaryName);
@@ -301,9 +358,12 @@ async function install() {
     if (process.platform !== "win32") {
       fs.chmodSync(binaryPath, 0o755);
     }
+
+    console.log(`VDL: Installation complete!`);
+    console.log(`VDL: Run 'vdl --version' to verify.`);
   } catch (error) {
-    console.error("Installation failed:");
-    console.error(error.message);
+    console.error("VDL: Installation failed");
+    console.error(`VDL: ${error.message}`);
     process.exit(1);
   }
 }

package/package.json

@@ -1,22 +1,30 @@
 {
   "name": "@varavel/vdl",
-  "version": "0.4.0-alpha.2",
+  "version": "0.4.0-alpha.4",
   "description": "Open-source cross-language definition engine for modern stacks. Define your data structures, APIs, contracts, and generate type-safe code for your backend and frontend instantly.",
   "author": "Varavel",
   "license": "MIT",
   "homepage": "https://varavel.com/vdl",
   "repository": {
     "type": "git",
-    "url": "https://github.com/varavelio/vdl.git",
+    "url": "git+https://github.com/varavelio/vdl.git",
     "directory": "installers/npm"
   },
   "bugs": {
     "url": "https://github.com/varavelio/vdl/issues"
   },
+  "type": "commonjs",
   "main": "index.js",
   "bin": {
-    "vdl": "bin/vdl"
+    "vdl": "bin.js"
   },
+  "files": [
+    "bin.js",
+    "install.js",
+    "index.js",
+    "package.json",
+    "README.md"
+  ],
   "scripts": {
     "postinstall": "node install.js"
   },
@@ -38,11 +46,5 @@
   "cpu": [
     "x64",
     "arm64"
-  ],
-  "files": [
-    "bin/",
-    "install.js",
-    "index.js",
-    "README.md"
   ]
 }