@volcengine/cli 1.0.45 → 1.0.48

package/bin/ve

@@ -1,3 +1,3 @@
-#!/bin/sh
-echo ve not installed. Run npm rebuild @volcengine/cli >&2
-exit 1
+#!/usr/bin/env node
+console.error("ve not installed. Run npm rebuild for this package");
+process.exit(1);

package/checksum

@@ -0,0 +1,26 @@
+ca743cc6217a0dc724808a240b26ef74c7ba84e35b13ff486213cbc47852a203  volcengine-cli_1.0.48_darwin_amd64.tar.gz
+0d8eaf3cd1c237d81ccb88486d48ae14e205970c1493fd0ed8615131a00aeda5  volcengine-cli_1.0.48_darwin_amd64.zip
+709339417771879db9f97f94753167b6129f256592035614a5915ad2df782c67  volcengine-cli_1.0.48_darwin_arm64.tar.gz
+fb58d460d29860045a4f58d9c57eb9f80c8bd903db8b1048be90b15ea3b30f83  volcengine-cli_1.0.48_darwin_arm64.zip
+f543729800270414177d47b89d88f98c231b7ac4dbb37826f92a744a332e5e3b  volcengine-cli_1.0.48_freebsd_386.tar.gz
+a253024c9ccc42fc5030b2ed973c3470ae5d6ddd93dcc8b5c1b6bf943f8d1022  volcengine-cli_1.0.48_freebsd_386.zip
+a2b4c12f8105efac99ce044ee3b534bbcd83f5e9c8d17a2d137fc1c92b9160f0  volcengine-cli_1.0.48_freebsd_amd64.tar.gz
+8f6829cdd9c89822087e909433b66f3d8989f35429acce3cfe8d9ac1bee43a6f  volcengine-cli_1.0.48_freebsd_amd64.zip
+f2a7eb0608d452d8fad20dd8f631993cb3e5293ae9756f70d35e5f0d5c51bce6  volcengine-cli_1.0.48_freebsd_arm.tar.gz
+ff453e8b92d0689bbf87c7327d42e9f1217ca89792d2e81981eb6089e84ec8bf  volcengine-cli_1.0.48_freebsd_arm.zip
+d55214828b09f0cdb95486c861c8131a8b035a79b263930d97ddb60ec17994ea  volcengine-cli_1.0.48_freebsd_arm64.tar.gz
+8463c983981048226d55c6f34c6463998e4fa7e86733d9a134e73b5a40a3eb2e  volcengine-cli_1.0.48_freebsd_arm64.zip
+6bc811fb2d5b2e6e28b3d03d5f938babdc94967fe2665044d997652ed65aefb7  volcengine-cli_1.0.48_linux_386.tar.gz
+36964489dc205412dbc1a85e402637d3bc5e6229edf5197dca7af4d063721a6f  volcengine-cli_1.0.48_linux_386.zip
+549fb8edc0a84378e150903b4e64eb410f33f799399a6d3bc02b36623651d847  volcengine-cli_1.0.48_linux_amd64.tar.gz
+532f551d1e4ed4bbcc34b2411754c7d48125a32600c7082355698ac28e51b0f8  volcengine-cli_1.0.48_linux_amd64.zip
+c63dba17b147edeef0c8c8312626d0558054771fda4ce85a8d53b2799869316b  volcengine-cli_1.0.48_linux_arm.tar.gz
+95c93f1301896f43458d08456d3613dd04b2e026e22f91b8a40883ccf2eefbb3  volcengine-cli_1.0.48_linux_arm.zip
+ba660a381009fa0e7411f1899378ac9a4e94d9755539a764ca46a19b629cecc8  volcengine-cli_1.0.48_linux_arm64.tar.gz
+6b70a06b7cf51ea7406534a8442b1d163685ea866ce578805842bcefad0eeaea  volcengine-cli_1.0.48_linux_arm64.zip
+f60e09e7de6250c6437d8644e73d35903671db959d0e60e1b9e5ddd446c254cb  volcengine-cli_1.0.48_windows_386.tar.gz
+3505c387bef5a846b88d641f51c7aa9cc43bf06012f8bbc705004e277c9610f6  volcengine-cli_1.0.48_windows_386.zip
+5fdefcf3d9f6d64d1403ae610955fccfda277b73ea8a570cdebbedf38f630384  volcengine-cli_1.0.48_windows_amd64.tar.gz
+bbae0918b0d1fa2947e84166fa6f39f1e7599d670024ce2dcd256c942d5a4194  volcengine-cli_1.0.48_windows_amd64.zip
+f7dfe472af3cfa3ad9e80fe0023d6f42689d3528fd0cc706505b8b27800fc813  volcengine-cli_1.0.48_windows_arm64.tar.gz
+43331270c6c56fb3835f59d1aa7920885dfb4a562eac2d44518f1916a4ca3d41  volcengine-cli_1.0.48_windows_arm64.zip

package/install.js

@@ -1,12 +1,18 @@
 #!/usr/bin/env node
 
 const { execSync } = require("child_process");
+const crypto = require("crypto");
 const https = require("https");
 const fs = require("fs");
 const path = require("path");
 
-const VERSION = "1.0.45";
-const BASE_URL = `https://github.com/volcengine/volcengine-cli/releases/download/v${VERSION}`;
+const VERSION = require("./package.json").version;
+const DEFAULT_DOWNLOAD_BASE_URL = "https://cloudcache.volccdn.com/ve";
+const CHECKSUM_PATH = path.join(__dirname, "checksum");
+const OFFICIAL_RELEASES_URL = "https://github.com/volcengine/volcengine-cli/releases";
+const DOWNLOAD_BASE_URL = normalizeBaseURL(
+  process.env.VOLCENGINE_CLI_DOWNLOAD_BASE_URL || DEFAULT_DOWNLOAD_BASE_URL
+);
 
 const PLATFORM_MAP = {
   darwin: "darwin",
@@ -22,58 +28,189 @@ const ARCH_MAP = {
   arm: "arm",
 };
 
-const platform = PLATFORM_MAP[process.platform];
-const arch = ARCH_MAP[process.arch];
+const SUPPORTED_TARGETS = {
+  darwin: ["amd64", "arm64"],
+  linux: ["amd64", "386", "arm", "arm64"],
+  freebsd: ["amd64", "386", "arm", "arm64"],
+  windows: ["amd64", "386", "arm64"],
+};
 
-if (!platform || !arch) {
-  console.error(`Unsupported platform: ${process.platform} ${process.arch}`);
-  process.exit(1);
+function normalizeBaseURL(url) {
+  return String(url || "").replace(/\/+$/, "");
+}
+
+function binaryNameForPlatform(platform) {
+  return platform === "win32" ? "ve.exe" : "ve";
+}
+
+function targetForPlatform(platform, arch) {
+  const targetPlatform = PLATFORM_MAP[platform];
+  const targetArch = ARCH_MAP[arch];
+
+  if (!targetPlatform || !targetArch) {
+    return null;
+  }
+
+  const supportedArchs = SUPPORTED_TARGETS[targetPlatform] || [];
+  if (supportedArchs.indexOf(targetArch) === -1) {
+    return null;
+  }
+
+  return {
+    platform: targetPlatform,
+    arch: targetArch,
+  };
+}
+
+function archiveNameForTarget(target, version) {
+  return `volcengine-cli_${version}_${target.platform}_${target.arch}.zip`;
 }
 
-const zipName = `volcengine-cli_${VERSION}_${platform}_${arch}.zip`;
-const url = `${BASE_URL}/${zipName}`;
+function archiveURLForTarget(target, version, downloadBaseURL) {
+  const baseURL = normalizeBaseURL(downloadBaseURL);
+  return `${baseURL}/v${version}/${archiveNameForTarget(target, version)}`;
+}
 
-const binDir = path.join(__dirname, "bin");
-fs.mkdirSync(binDir, { recursive: true });
+function sha256(data) {
+  return crypto.createHash("sha256").update(data).digest("hex");
+}
 
-const isWindows = process.platform === "win32";
-const binaryName = isWindows ? "ve.exe" : "ve";
-const binPath = path.join(binDir, binaryName);
+function archiveBasename(filename) {
+  return String(filename || "").split(/[\\/]/).pop();
+}
+
+function parseChecksum(content) {
+  const entries = [];
+  String(content || "")
+    .split(/\r?\n/)
+    .forEach((line, index) => {
+      const trimmed = line.trim();
+      if (!trimmed) {
+        return;
+      }
+
+      const match = trimmed.match(/^([a-fA-F0-9]{64})\s+\*?(.+)$/);
+      if (!match) {
+        throw new Error(`Invalid checksum line ${index + 1}`);
+      }
+
+      entries.push({
+        hash: match[1].toLowerCase(),
+        filename: match[2],
+      });
+    });
+  return entries;
+}
+
+function checksumForArchive(content, archiveName) {
+  const match = parseChecksum(content).find(
+    (entry) => entry.filename === archiveName || archiveBasename(entry.filename) === archiveName
+  );
+
+  if (!match) {
+    throw new Error(`Checksum entry not found for ${archiveName}`);
+  }
+
+  return match.hash;
+}
+
+function verifyArchiveChecksum(data, archiveName, checksumPath = CHECKSUM_PATH) {
+  let checksumContent;
+  try {
+    checksumContent = fs.readFileSync(checksumPath, "utf8");
+  } catch (err) {
+    if (err && err.code === "ENOENT") {
+      throw new Error(`Checksum file not found: ${checksumPath}`);
+    }
+    throw err;
+  }
+
+  const expected = checksumForArchive(checksumContent, archiveName);
+  const actual = sha256(data);
+
+  if (actual !== expected) {
+    throw new Error(
+      `Checksum mismatch for ${archiveName}: expected ${expected}, got ${actual}. ` +
+        `The downloaded archive may have been tampered with. ` +
+        `Please download Volcengine CLI from the official releases page: ${OFFICIAL_RELEASES_URL}`
+    );
+  }
+
+  return actual;
+}
+
+function downloadErrorMessage(statusCode, url) {
+  return (
+    `Download failed: HTTP ${statusCode} for ${url}. ` +
+    `\nPlease download Volcengine CLI from the official releases page: ${OFFICIAL_RELEASES_URL}`
+  );
+}
+
+function createWindowsVeShim(binDir) {
+  const shimPath = path.join(binDir, "ve");
+  const shim = `#!/usr/bin/env node
+
+const { spawnSync } = require("child_process");
+const path = require("path");
+
+const exePath = path.join(__dirname, "ve.exe");
+const result = spawnSync(exePath, process.argv.slice(2), { stdio: "inherit" });
+
+if (result.error) {
+  console.error(result.error.message);
+  process.exit(1);
+}
+
+process.exit(result.status === null ? 1 : result.status);
+`;
+
+  fs.writeFileSync(shimPath, shim);
+  fs.chmodSync(shimPath, 0o755);
+}
 
 function download(url) {
   return new Promise((resolve, reject) => {
     const follow = (url) => {
-      https
-        .get(url, (res) => {
-          if (
-            res.statusCode >= 300 &&
-            res.statusCode < 400 &&
-            res.headers.location
-          ) {
-            follow(res.headers.location);
-            return;
-          }
-          if (res.statusCode !== 200) {
-            reject(
-              new Error(`Download failed: HTTP ${res.statusCode} for ${url}`),
-            );
-            return;
-          }
-          const chunks = [];
-          res.on("data", (chunk) => chunks.push(chunk));
-          res.on("end", () => resolve(Buffer.concat(chunks)));
-          res.on("error", reject);
-        })
-        .on("error", reject);
+      https.get(url, (res) => {
+        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+          follow(res.headers.location);
+          return;
+        }
+        if (res.statusCode !== 200) {
+          reject(new Error(downloadErrorMessage(res.statusCode, url)));
+          return;
+        }
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => resolve(Buffer.concat(chunks)));
+        res.on("error", reject);
+      }).on("error", reject);
     };
     follow(url);
   });
 }
 
 async function install() {
+  const target = targetForPlatform(process.platform, process.arch);
+
+  if (!target) {
+    console.error(`Unsupported platform: ${process.platform} ${process.arch}`);
+    process.exit(1);
+  }
+
+  const zipName = archiveNameForTarget(target, VERSION);
+  const url = archiveURLForTarget(target, VERSION, DOWNLOAD_BASE_URL);
+  const binDir = path.join(__dirname, "bin");
+  const isWindows = process.platform === "win32";
+  const binaryName = binaryNameForPlatform(process.platform);
+  const binPath = path.join(binDir, binaryName);
+
+  fs.mkdirSync(binDir, { recursive: true });
   console.log(`Downloading ${zipName}...`);
 
   const data = await download(url);
+  verifyArchiveChecksum(data, zipName);
+
   const tmpDir = path.join(__dirname, ".tmp");
   const zipPath = path.join(tmpDir, zipName);
 
@@ -84,7 +221,7 @@ async function install() {
     if (isWindows) {
       execSync(
         `powershell -Command "Expand-Archive -Path '${zipPath}' -DestinationPath '${tmpDir}' -Force"`,
-        { stdio: "pipe" },
+        { stdio: "pipe" }
       );
     } else {
       execSync(`unzip -o -q "${zipPath}" -d "${tmpDir}"`, { stdio: "pipe" });
@@ -94,37 +231,51 @@ async function install() {
     const veBinary = extracted.find((f) => f === "ve" || f === "ve.exe");
 
     if (!veBinary) {
-      console.error(
-        "Could not find 've' binary in zip archive. Found:",
-        extracted,
-      );
+      console.error("Could not find 've' binary in zip archive. Found:", extracted);
       process.exit(1);
     }
 
     fs.copyFileSync(path.join(tmpDir, veBinary), binPath);
 
-    if (!isWindows) {
+    if (isWindows) {
+      createWindowsVeShim(binDir);
+    } else {
       fs.chmodSync(binPath, 0o755);
     }
 
-    // macOS: remove quarantine attribute to avoid Gatekeeper blocking
     if (process.platform === "darwin") {
       try {
-        execSync(`xattr -d com.apple.quarantine "${binPath}"`, {
-          stdio: "pipe",
-        });
+        execSync(`xattr -d com.apple.quarantine "${binPath}"`, { stdio: "pipe" });
       } catch (_) {
-        // Attribute may not exist, ignore
+        // Attribute may not exist, ignore.
       }
     }
 
-    console.log(`Volcengine CLI v${VERSION} installed for ${platform}/${arch}`);
+    console.log(`Volcengine CLI v${VERSION} installed for ${target.platform}/${target.arch}`);
   } finally {
     fs.rmSync(tmpDir, { recursive: true, force: true });
   }
 }
 
-install().catch((err) => {
-  console.error("Installation failed:", err.message);
-  process.exit(1);
-});
+if (require.main === module) {
+  install().catch((err) => {
+    console.error("Installation failed:", err.message);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  archiveNameForTarget,
+  archiveURLForTarget,
+  binaryNameForPlatform,
+  checksumForArchive,
+  createWindowsVeShim,
+  defaultDownloadBaseURL: DEFAULT_DOWNLOAD_BASE_URL,
+  downloadErrorMessage,
+  normalizeBaseURL,
+  parseChecksum,
+  sha256,
+  targetForPlatform,
+  verifyArchiveChecksum,
+  version: VERSION,
+};

package/package.json

@@ -1,16 +1,18 @@
 {
   "name": "@volcengine/cli",
-  "version": "1.0.45",
-  "description": "Volcengine CLI - 火山引擎命令行工具",
+  "version": "1.0.48",
+  "description": "Volcengine CLI npm installer",
   "bin": {
     "ve": "bin/ve"
   },
   "scripts": {
-    "prepack": "node -e \"require('fs').writeFileSync('bin/ve','#!/bin/sh\\necho ve not installed. Run npm rebuild @volcengine/cli >&2\\nexit 1\\n');require('fs').chmodSync('bin/ve',0o755)\"",
-    "postinstall": "node install.js"
+    "prepack": "node -e \"const fs=require('fs');fs.mkdirSync('bin',{recursive:true});fs.writeFileSync('bin/ve','#!/usr/bin/env node\\nconsole.error(\\\"ve not installed. Run npm rebuild for this package\\\");\\nprocess.exit(1);\\n');fs.chmodSync('bin/ve',0o755)\"",
+    "postinstall": "node install.js",
+    "test": "node install_test.js"
   },
   "files": [
     "bin/",
+    "checksum",
     "install.js"
   ],
   "keywords": [