@volcengine/cli 1.0.45 → 1.0.49

package/bin/ve

@@ -1,3 +1,3 @@
-#!/bin/sh
-echo ve not installed. Run npm rebuild @volcengine/cli >&2
-exit 1
+#!/usr/bin/env node
+console.error("ve not installed. Run npm rebuild for this package");
+process.exit(1);

package/checksum

@@ -0,0 +1,26 @@
+39930a55f0ee4492bca789d5c4198c790777f90d6080b9fdb49b89bae2430ac8  volcengine-cli_1.0.49_darwin_amd64.tar.gz
+f241502edcfa7c1420c52f346b0405edd34243b30d0ef61db23ff5c9fed4e26e  volcengine-cli_1.0.49_darwin_amd64.zip
+6bed2df8fd69d4f63470513a738dea0f012ddcc876a4c65fd5e7de0d2fe609a8  volcengine-cli_1.0.49_darwin_arm64.tar.gz
+7d7174921e0fbdc5b91a3d0226b8fe216256f49a100e74fe5b8a233a77f7109b  volcengine-cli_1.0.49_darwin_arm64.zip
+f03a972d6076dc6410dafefffef47b3674b3214fe16af36ee617fcc55ca47f61  volcengine-cli_1.0.49_freebsd_386.tar.gz
+ebe53383090a82fb8360e2d36fac2ec4f43a1bc0f19523b302331314902b76b9  volcengine-cli_1.0.49_freebsd_386.zip
+b251781435974315b27a940e7a0d33338a7ca370599fb481f9d13fe89c0a21bf  volcengine-cli_1.0.49_freebsd_amd64.tar.gz
+032304a18d9004c675c11b1aa2c46dea3cba3a6acb9c0c26978f3f1f83eb210a  volcengine-cli_1.0.49_freebsd_amd64.zip
+366439c1e0f84121f6675f7ad7d76781c1602a00cfbeef2372fd223afd20f3ce  volcengine-cli_1.0.49_freebsd_arm.tar.gz
+bb22059f9cb83ddfa0022a93c1e4a24294a61c0860ce83c7944518d967355922  volcengine-cli_1.0.49_freebsd_arm.zip
+6a07a13469827835981f348ea1d9b1bba1cd7e760a2a520702a14196a844d10d  volcengine-cli_1.0.49_freebsd_arm64.tar.gz
+22280ab67b19dac6cc6a074ade099d374d98b4275f9e9cbd55ba4d8de0880ea4  volcengine-cli_1.0.49_freebsd_arm64.zip
+511267b42e9bac81546bdc478a61650942f9b344a1eb8c8d54466d1a9163e996  volcengine-cli_1.0.49_linux_386.tar.gz
+01787227513b7da9bd7fdf2b7874e9d87f6929c6de62e2312b1c4a39195ebe86  volcengine-cli_1.0.49_linux_386.zip
+bf010a5e992de70bcc819877fc096c320d691119738cd17ffebfbaf7b4b72f47  volcengine-cli_1.0.49_linux_amd64.tar.gz
+833191edc890d4da54d64138c7df0385de7642c9ebd44e6db3ff083776d7bdac  volcengine-cli_1.0.49_linux_amd64.zip
+d933d94e8e85dd77d4c008383d5d29b273e1f429ffcc7dffdc32a3419636bef9  volcengine-cli_1.0.49_linux_arm.tar.gz
+a3a94e926636fce4d0ad885249df9fb82f626c88d1d2270a7f5b40e365174e32  volcengine-cli_1.0.49_linux_arm.zip
+597b28a016d72061125d3301b0db60ccb1057be7b68b75b0e1649817e00686ae  volcengine-cli_1.0.49_linux_arm64.tar.gz
+6b3d37128195c47d02c209ca7ad19d7178c79cc2f6e9dd7718892c5b635f757d  volcengine-cli_1.0.49_linux_arm64.zip
+b876af213c4ca8480c67a58e9300ef2cd9469b077284733e09876edd1cc10331  volcengine-cli_1.0.49_windows_386.tar.gz
+b8a695a14c7eabf932204ffedd0f5ea3147295e63f8f7fc4d038669eba9271a3  volcengine-cli_1.0.49_windows_386.zip
+518be8bf0b6c96ccdbb0a02861dc6888392b17f394ea2141f72aff1f2937e2ff  volcengine-cli_1.0.49_windows_amd64.tar.gz
+ef596cad6c0e78f3feedc48d55ed0974956a01006154e57db099a577d530dba0  volcengine-cli_1.0.49_windows_amd64.zip
+9078b84b1ab79b41c9b16cddd41f8fa48e630e0de2a28f7ec9ce15d529646b09  volcengine-cli_1.0.49_windows_arm64.tar.gz
+a52a85b91152c49507525fe862681ce771da66434b17f3e16e3fd4422a5726d8  volcengine-cli_1.0.49_windows_arm64.zip

package/install.js

@@ -1,12 +1,18 @@
 #!/usr/bin/env node
 
 const { execSync } = require("child_process");
+const crypto = require("crypto");
 const https = require("https");
 const fs = require("fs");
 const path = require("path");
 
-const VERSION = "1.0.45";
-const BASE_URL = `https://github.com/volcengine/volcengine-cli/releases/download/v${VERSION}`;
+const VERSION = require("./package.json").version;
+const DEFAULT_DOWNLOAD_BASE_URL = "https://cloudcache.volccdn.com/ve";
+const CHECKSUM_PATH = path.join(__dirname, "checksum");
+const OFFICIAL_RELEASES_URL = "https://github.com/volcengine/volcengine-cli/releases";
+const DOWNLOAD_BASE_URL = normalizeBaseURL(
+  process.env.VOLCENGINE_CLI_DOWNLOAD_BASE_URL || DEFAULT_DOWNLOAD_BASE_URL
+);
 
 const PLATFORM_MAP = {
   darwin: "darwin",
@@ -22,58 +28,189 @@ const ARCH_MAP = {
   arm: "arm",
 };
 
-const platform = PLATFORM_MAP[process.platform];
-const arch = ARCH_MAP[process.arch];
+const SUPPORTED_TARGETS = {
+  darwin: ["amd64", "arm64"],
+  linux: ["amd64", "386", "arm", "arm64"],
+  freebsd: ["amd64", "386", "arm", "arm64"],
+  windows: ["amd64", "386", "arm64"],
+};
 
-if (!platform || !arch) {
-  console.error(`Unsupported platform: ${process.platform} ${process.arch}`);
-  process.exit(1);
+function normalizeBaseURL(url) {
+  return String(url || "").replace(/\/+$/, "");
+}
+
+function binaryNameForPlatform(platform) {
+  return platform === "win32" ? "ve.exe" : "ve";
+}
+
+function targetForPlatform(platform, arch) {
+  const targetPlatform = PLATFORM_MAP[platform];
+  const targetArch = ARCH_MAP[arch];
+
+  if (!targetPlatform || !targetArch) {
+    return null;
+  }
+
+  const supportedArchs = SUPPORTED_TARGETS[targetPlatform] || [];
+  if (supportedArchs.indexOf(targetArch) === -1) {
+    return null;
+  }
+
+  return {
+    platform: targetPlatform,
+    arch: targetArch,
+  };
+}
+
+function archiveNameForTarget(target, version) {
+  return `volcengine-cli_${version}_${target.platform}_${target.arch}.zip`;
 }
 
-const zipName = `volcengine-cli_${VERSION}_${platform}_${arch}.zip`;
-const url = `${BASE_URL}/${zipName}`;
+function archiveURLForTarget(target, version, downloadBaseURL) {
+  const baseURL = normalizeBaseURL(downloadBaseURL);
+  return `${baseURL}/v${version}/${archiveNameForTarget(target, version)}`;
+}
 
-const binDir = path.join(__dirname, "bin");
-fs.mkdirSync(binDir, { recursive: true });
+function sha256(data) {
+  return crypto.createHash("sha256").update(data).digest("hex");
+}
 
-const isWindows = process.platform === "win32";
-const binaryName = isWindows ? "ve.exe" : "ve";
-const binPath = path.join(binDir, binaryName);
+function archiveBasename(filename) {
+  return String(filename || "").split(/[\\/]/).pop();
+}
+
+function parseChecksum(content) {
+  const entries = [];
+  String(content || "")
+    .split(/\r?\n/)
+    .forEach((line, index) => {
+      const trimmed = line.trim();
+      if (!trimmed) {
+        return;
+      }
+
+      const match = trimmed.match(/^([a-fA-F0-9]{64})\s+\*?(.+)$/);
+      if (!match) {
+        throw new Error(`Invalid checksum line ${index + 1}`);
+      }
+
+      entries.push({
+        hash: match[1].toLowerCase(),
+        filename: match[2],
+      });
+    });
+  return entries;
+}
+
+function checksumForArchive(content, archiveName) {
+  const match = parseChecksum(content).find(
+    (entry) => entry.filename === archiveName || archiveBasename(entry.filename) === archiveName
+  );
+
+  if (!match) {
+    throw new Error(`Checksum entry not found for ${archiveName}`);
+  }
+
+  return match.hash;
+}
+
+function verifyArchiveChecksum(data, archiveName, checksumPath = CHECKSUM_PATH) {
+  let checksumContent;
+  try {
+    checksumContent = fs.readFileSync(checksumPath, "utf8");
+  } catch (err) {
+    if (err && err.code === "ENOENT") {
+      throw new Error(`Checksum file not found: ${checksumPath}`);
+    }
+    throw err;
+  }
+
+  const expected = checksumForArchive(checksumContent, archiveName);
+  const actual = sha256(data);
+
+  if (actual !== expected) {
+    throw new Error(
+      `Checksum mismatch for ${archiveName}: expected ${expected}, got ${actual}. ` +
+        `The downloaded archive may have been tampered with. ` +
+        `Please download Volcengine CLI from the official releases page: ${OFFICIAL_RELEASES_URL}`
+    );
+  }
+
+  return actual;
+}
+
+function downloadErrorMessage(statusCode, url) {
+  return (
+    `Download failed: HTTP ${statusCode} for ${url}. ` +
+    `\nPlease download Volcengine CLI from the official releases page: ${OFFICIAL_RELEASES_URL}`
+  );
+}
+
+function createWindowsVeShim(binDir) {
+  const shimPath = path.join(binDir, "ve");
+  const shim = `#!/usr/bin/env node
+
+const { spawnSync } = require("child_process");
+const path = require("path");
+
+const exePath = path.join(__dirname, "ve.exe");
+const result = spawnSync(exePath, process.argv.slice(2), { stdio: "inherit" });
+
+if (result.error) {
+  console.error(result.error.message);
+  process.exit(1);
+}
+
+process.exit(result.status === null ? 1 : result.status);
+`;
+
+  fs.writeFileSync(shimPath, shim);
+  fs.chmodSync(shimPath, 0o755);
+}
 
 function download(url) {
   return new Promise((resolve, reject) => {
     const follow = (url) => {
-      https
-        .get(url, (res) => {
-          if (
-            res.statusCode >= 300 &&
-            res.statusCode < 400 &&
-            res.headers.location
-          ) {
-            follow(res.headers.location);
-            return;
-          }
-          if (res.statusCode !== 200) {
-            reject(
-              new Error(`Download failed: HTTP ${res.statusCode} for ${url}`),
-            );
-            return;
-          }
-          const chunks = [];
-          res.on("data", (chunk) => chunks.push(chunk));
-          res.on("end", () => resolve(Buffer.concat(chunks)));
-          res.on("error", reject);
-        })
-        .on("error", reject);
+      https.get(url, (res) => {
+        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+          follow(res.headers.location);
+          return;
+        }
+        if (res.statusCode !== 200) {
+          reject(new Error(downloadErrorMessage(res.statusCode, url)));
+          return;
+        }
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => resolve(Buffer.concat(chunks)));
+        res.on("error", reject);
+      }).on("error", reject);
     };
     follow(url);
   });
 }
 
 async function install() {
+  const target = targetForPlatform(process.platform, process.arch);
+
+  if (!target) {
+    console.error(`Unsupported platform: ${process.platform} ${process.arch}`);
+    process.exit(1);
+  }
+
+  const zipName = archiveNameForTarget(target, VERSION);
+  const url = archiveURLForTarget(target, VERSION, DOWNLOAD_BASE_URL);
+  const binDir = path.join(__dirname, "bin");
+  const isWindows = process.platform === "win32";
+  const binaryName = binaryNameForPlatform(process.platform);
+  const binPath = path.join(binDir, binaryName);
+
+  fs.mkdirSync(binDir, { recursive: true });
   console.log(`Downloading ${zipName}...`);
 
   const data = await download(url);
+  verifyArchiveChecksum(data, zipName);
+
   const tmpDir = path.join(__dirname, ".tmp");
   const zipPath = path.join(tmpDir, zipName);
 
@@ -84,7 +221,7 @@ async function install() {
     if (isWindows) {
       execSync(
         `powershell -Command "Expand-Archive -Path '${zipPath}' -DestinationPath '${tmpDir}' -Force"`,
-        { stdio: "pipe" },
+        { stdio: "pipe" }
       );
     } else {
       execSync(`unzip -o -q "${zipPath}" -d "${tmpDir}"`, { stdio: "pipe" });
@@ -94,37 +231,51 @@ async function install() {
     const veBinary = extracted.find((f) => f === "ve" || f === "ve.exe");
 
     if (!veBinary) {
-      console.error(
-        "Could not find 've' binary in zip archive. Found:",
-        extracted,
-      );
+      console.error("Could not find 've' binary in zip archive. Found:", extracted);
       process.exit(1);
     }
 
     fs.copyFileSync(path.join(tmpDir, veBinary), binPath);
 
-    if (!isWindows) {
+    if (isWindows) {
+      createWindowsVeShim(binDir);
+    } else {
       fs.chmodSync(binPath, 0o755);
     }
 
-    // macOS: remove quarantine attribute to avoid Gatekeeper blocking
     if (process.platform === "darwin") {
       try {
-        execSync(`xattr -d com.apple.quarantine "${binPath}"`, {
-          stdio: "pipe",
-        });
+        execSync(`xattr -d com.apple.quarantine "${binPath}"`, { stdio: "pipe" });
       } catch (_) {
-        // Attribute may not exist, ignore
+        // Attribute may not exist, ignore.
       }
     }
 
-    console.log(`Volcengine CLI v${VERSION} installed for ${platform}/${arch}`);
+    console.log(`Volcengine CLI v${VERSION} installed for ${target.platform}/${target.arch}`);
   } finally {
     fs.rmSync(tmpDir, { recursive: true, force: true });
   }
 }
 
-install().catch((err) => {
-  console.error("Installation failed:", err.message);
-  process.exit(1);
-});
+if (require.main === module) {
+  install().catch((err) => {
+    console.error("Installation failed:", err.message);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  archiveNameForTarget,
+  archiveURLForTarget,
+  binaryNameForPlatform,
+  checksumForArchive,
+  createWindowsVeShim,
+  defaultDownloadBaseURL: DEFAULT_DOWNLOAD_BASE_URL,
+  downloadErrorMessage,
+  normalizeBaseURL,
+  parseChecksum,
+  sha256,
+  targetForPlatform,
+  verifyArchiveChecksum,
+  version: VERSION,
+};

package/package.json

@@ -1,16 +1,18 @@
 {
   "name": "@volcengine/cli",
-  "version": "1.0.45",
-  "description": "Volcengine CLI - 火山引擎命令行工具",
+  "version": "1.0.49",
+  "description": "Volcengine CLI npm installer",
   "bin": {
     "ve": "bin/ve"
   },
   "scripts": {
-    "prepack": "node -e \"require('fs').writeFileSync('bin/ve','#!/bin/sh\\necho ve not installed. Run npm rebuild @volcengine/cli >&2\\nexit 1\\n');require('fs').chmodSync('bin/ve',0o755)\"",
-    "postinstall": "node install.js"
+    "prepack": "node -e \"const fs=require('fs');fs.mkdirSync('bin',{recursive:true});fs.writeFileSync('bin/ve','#!/usr/bin/env node\\nconsole.error(\\\"ve not installed. Run npm rebuild for this package\\\");\\nprocess.exit(1);\\n');fs.chmodSync('bin/ve',0o755)\"",
+    "postinstall": "node install.js",
+    "test": "node install_test.js"
   },
   "files": [
     "bin/",
+    "checksum",
     "install.js"
   ],
   "keywords": [