@varavel/veta 0.0.0-dev → 0.1.0-alpha.1

package/README.md

@@ -1,8 +1,43 @@
-# @varavel/veta
+# Veta static site generator
 
-This package installs the Veta CLI from GitHub Releases and exposes it as the `veta` command.
+This package installs the Veta CLI using NPM.
 
-```sh
-npm install --global @varavel/veta
-veta --help
+## Installation
+
+Global installation:
+
+```bash
+npm install -g @varavel/veta
+```
+
+Or as a dev dependency:
+
+```bash
+npm install --save-dev @varavel/veta
+```
+
+## Usage
+
+After installation, the `veta` command will be available:
+
+```bash
+veta --help # See available commands
 ```
+
+## Supported Platforms
+
+- **macOS**: x64, ARM64 (Apple Silicon)
+- **Linux**: x64, ARM64
+- **Windows**: x64
+
+## How It Works
+
+This package downloads the appropriate pre-compiled Veta binary for your platform during installation. The binary is fetched from the [official GitHub releases](https://github.com/varavelio/veta/releases).
+
+## Documentation
+
+Visit https://github.com/varavelio/veta for full documentation.
+
+## License
+
+MIT

package/bin.js

@@ -17,10 +17,12 @@ async function main() {
     binaryPath = getBinaryPath();
   }
 
+  // Spawn veta
   const child = spawn(binaryPath, process.argv.slice(2), {
     stdio: ["inherit", "inherit", "inherit"],
   });
 
+  // Propagate OS signals
   for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"]) {
     process.on(signal, () => {
       if (child.pid) child.kill(signal);

package/install.js

@@ -5,7 +5,7 @@ const crypto = require("node:crypto");
 const fs = require("node:fs");
 const https = require("node:https");
 const path = require("node:path");
-const checksums = require("./checksums.json");
+const manifest = require("./manifest.json");
 
 const PLATFORM_MAP = {
   darwin: "darwin",
@@ -83,17 +83,31 @@ function getDownloadURL() {
 }
 
 /**
- * Verifies an archive buffer against the checksum embedded in this npm package.
+ * Returns the release artifact metadata for filename.
+ * @param {string} filename Expected release archive filename.
+ * @returns {{ sha256: string }} Release artifact metadata.
+ */
+function getManifestArtifact(filename) {
+  if (!Array.isArray(manifest.artifacts)) {
+    throw new Error("Release manifest is missing artifacts.");
+  }
+
+  const artifact = manifest.artifacts.find((item) => item.name === filename);
+  if (!artifact || !artifact.sha256) {
+    throw new Error(`Release manifest does not include ${filename}.`);
+  }
+
+  return artifact;
+}
+
+/**
+ * Verifies an archive buffer against the checksum embedded in this npm package manifest.
  * @param {Buffer} archiveBuffer Downloaded archive bytes.
- * @param {string} filename Expected filename in checksums.txt.
+ * @param {string} filename Expected release archive filename.
  * @returns {void}
  */
 function verifyChecksum(archiveBuffer, filename) {
-  const expectedHash = checksums[filename];
-  if (!expectedHash) {
-    throw new Error(`Checksum for ${filename} was not embedded in this npm package.`);
-  }
-
+  const expectedHash = getManifestArtifact(filename).sha256;
   const actualHash = crypto.createHash("sha256").update(archiveBuffer).digest("hex");
   if (expectedHash !== actualHash) {
     throw new Error(

package/manifest.json

@@ -0,0 +1,44 @@
+{
+  "artifacts": [
+    {
+      "arch": "amd64",
+      "format": "tar.gz",
+      "name": "veta_linux_amd64.tar.gz",
+      "os": "linux",
+      "sha256": "188e23680fe76d1f17d36dcad8c71ad21aaeb72af9be1cfff3e40877edfd0920"
+    },
+    {
+      "arch": "arm64",
+      "format": "tar.gz",
+      "name": "veta_linux_arm64.tar.gz",
+      "os": "linux",
+      "sha256": "e72b3d8e9d4533d4b58688e7ae22ba7a2ec37dd69fd5d888f8852bacab9ea7f0"
+    },
+    {
+      "arch": "amd64",
+      "format": "tar.gz",
+      "name": "veta_darwin_amd64.tar.gz",
+      "os": "darwin",
+      "sha256": "c3b9e55f23fe42f672e861ec5c5c080c5c2600984e4333e0aec1d0253b854043"
+    },
+    {
+      "arch": "arm64",
+      "format": "tar.gz",
+      "name": "veta_darwin_arm64.tar.gz",
+      "os": "darwin",
+      "sha256": "ed6dc793396abdc8c6c1890bddcf3d4a58bbaf106dd4b52bd895f1bc9735ce37"
+    },
+    {
+      "arch": "amd64",
+      "format": "zip",
+      "name": "veta_windows_amd64.zip",
+      "os": "windows",
+      "sha256": "7e39e4cdb180283429bc241ce5b88844a8d4ccfff9242f2e0760fb61c677c524"
+    }
+  ],
+  "commit": "c5e4054",
+  "date": "2026-06-28T06:28:40Z",
+  "project": "veta",
+  "repo": "varavelio/veta",
+  "version": "0.1.0-alpha.1"
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@varavel/veta",
-  "version": "0.0.0-dev",
-  "description": "Veta static site generator",
+  "version": "0.1.0-alpha.1",
+  "description": "Veta is the varavel's static site generator",
   "author": "Varavel",
   "license": "MIT",
   "homepage": "https://github.com/varavelio/veta",
@@ -23,9 +23,9 @@
   },
   "files": [
     "bin.js",
-    "checksums.json",
     "install.js",
     "index.js",
+    "manifest.json",
     "package.json",
     "README.md"
   ],

package/checksums.json

@@ -1,2 +0,0 @@
-{
-}