@willh/now 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Will 保哥
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,409 @@
+# now
+
+**now 是一個 Rust CLI，用來把靜態網站交給既有 provider CLI 部署。**
+
+它不嘗試重寫 Firebase、Azure 或 FTP 的部署流程；它負責選擇可發布目錄、讀取非祕密設定、組合 provider CLI 命令，並在部署後輸出預設 URL。
+
+* * *
+
+## 支援平台
+
+| 平台 | Release asset |
+| --- | --- |
+| macOS Apple Silicon | `now-aarch64-apple-darwin.tar.xz` |
+| macOS Intel | `now-x86_64-apple-darwin.tar.xz` |
+| Linux x64 glibc | `now-x86_64-unknown-linux-gnu.tar.xz` |
+| Windows x64 | `now-x86_64-pc-windows-msvc.zip` |
+
+**初版不支援 Linux arm64 與 musl。**
+
+每個 archive 旁邊都會有同名 `.sha256` 檔案。
+
+* * *
+
+## 安裝
+
+### npm
+
+```sh
+npm install -g @willh/now
+```
+
+npm 套件只包含 JavaScript wrapper 與安裝邏輯。安裝時會從 GitHub Release 下載目前平台的原生 binary，並驗證 SHA-256 checksum。
+
+### Unix-like
+
+```sh
+curl -fsSL https://raw.githubusercontent.com/doggy8088/now/main/install.sh | sh
+```
+
+預設安裝到 `$HOME/.local/bin`。可用 `NOW_INSTALL_DIR` 覆寫：
+
+```sh
+NOW_INSTALL_DIR=/usr/local/bin sh install.sh
+```
+
+### Windows PowerShell
+
+```powershell
+iwr https://raw.githubusercontent.com/doggy8088/now/main/install.ps1 -OutFile install.ps1
+.\install.ps1
+```
+
+預設安裝到 `$env:LOCALAPPDATA\now\bin`。可用 `-InstallDir` 覆寫：
+
+```powershell
+.\install.ps1 -InstallDir "$env:USERPROFILE\bin"
+```
+
+### 手動下載
+
+1. 到 `https://github.com/doggy8088/now/releases/latest` 下載符合平台的 archive。
+2. 下載同名 `.sha256`。
+3. 驗證 checksum。
+4. 解壓縮後把 `now` 或 `now.exe` 放進 `PATH` 內的目錄。
+
+* * *
+
+## 快速開始
+
+```sh
+now
+now deploy
+now deploy dist
+```
+
+`now [path]` 等同 `now deploy [path]`。
+
+第一次在互動式終端機執行 `now` 或 `now deploy`，且尚未設定 provider 時，CLI 會啟動首次設定流程，協助選擇 provider 並把非祕密設定寫入 `.now.json`。非互動式環境或 `--json` 模式不會啟動提示流程，會直接輸出缺少 provider 的錯誤。
+
+也可以手動建立設定：
+
+```sh
+now init
+now config set provider firebase-hosting
+```
+
+* * *
+
+## 設定檔
+
+now 讀取兩種設定檔：
+
+| 類型 | 路徑 |
+| --- | --- |
+| 本機設定 | `.now.json` |
+| 全域設定 | `~/.config/now/settings.json` |
+
+合併優先序如下：
+
+1. CLI flags
+2. `.now.json`
+3. `~/.config/now/settings.json`
+
+**設定檔只保存非祕密設定。Azure Storage Blob 的 SAS URL 含有上傳權杖，不寫入 `.now.json`；`.now.json` 只保存 `azure_blob.sas_url_env`。**
+
+完整範例：
+
+```json
+{
+  "provider": "firebase-hosting",
+  "source": null,
+  "base_url": "https://example.web.app",
+  "default_url": null,
+  "firebase": {
+    "project": "my-firebase-project",
+    "site": null
+  },
+  "azure_blob": {
+    "sas_url_env": "NOW_AZURE_BLOB_SAS_URL"
+  },
+  "azure_swa": {
+    "app_name": null,
+    "environment": "production",
+    "deployment_token_env": "SWA_CLI_DEPLOYMENT_TOKEN"
+  },
+  "ftp": {
+    "host": "ftp.example.com",
+    "remote_dir": "/public_html",
+    "username_env": "NOW_FTP_USERNAME",
+    "password_env": "NOW_FTP_PASSWORD"
+  }
+}
+```
+
+常用設定命令：
+
+```sh
+now init
+now init --global
+now config set provider firebase-hosting
+now config set firebase.project my-project
+now config get
+now config get provider
+now config doctor
+```
+
+* * *
+
+## Provider
+
+### Firebase Hosting
+
+需求：
+
+```sh
+npm install -g firebase-tools
+firebase login
+```
+
+建議設定：
+
+```sh
+now config set provider firebase-hosting
+now config set firebase.project my-project
+now config set base_url https://my-project.web.app
+```
+
+部署時會呼叫：
+
+```sh
+firebase deploy --only hosting
+```
+
+若設定 `firebase.site`，會改用 `hosting:<site>`。
+
+為了相容舊設定，`firebase` 仍可被讀取；新設定建議使用 `firebase-hosting`。
+
+### Azure Storage Blob
+
+Azure Storage Blob provider 不需要 Azure CLI。只要透過環境變數提供 container SAS URL，now 會直接使用 Azure Blob REST API 上傳檔案。
+
+首次設定選擇 `Azure Storage Blob` 時，會要求輸入 SAS URL，但只會把 SAS URL 寫入 `.env`，`.now.json` 只保存環境變數名稱。
+
+建議設定：
+
+```sh
+now config set provider azure-storage-blob
+now config set azure_blob.sas_url 'https://mystorageaccount.blob.core.windows.net/$web?sv=...'
+```
+
+上述 `azure_blob.sas_url` 是便利設定入口：now 會自動把實際 SAS URL 寫入 `.env` 的 `NOW_AZURE_BLOB_SAS_URL`，並在 `.now.json` 寫入：
+
+```json
+{
+  "azure_blob": {
+    "sas_url_env": "NOW_AZURE_BLOB_SAS_URL"
+  }
+}
+```
+
+若要自行管理環境變數，也可以直接設定：
+
+```sh
+export NOW_AZURE_BLOB_SAS_URL='https://mystorageaccount.blob.core.windows.net/$web?sv=...'
+now config set azure_blob.sas_url_env NOW_AZURE_BLOB_SAS_URL
+```
+
+為了相容舊設定，`azure-blob` 仍可被讀取；新設定建議使用 `azure-storage-blob`。
+
+SAS URL 必須指向 container，例如 Azure Static Website 常用的 `$web` container，且需要具備建立或寫入 blob 的權限。部署時會對每個檔案呼叫 Azure Blob Put Blob API，並使用 `x-ms-blob-type: BlockBlob`。
+
+```sh
+PUT https://mystorageaccount.blob.core.windows.net/$web/<file>?<sas-query>
+```
+
+若未設定 `base_url` 與 `default_url`，now 會從 `sas_url_env` 指向的 SAS URL 移除 query string，再加上預設頁面檔名來推導 `Default URL`。
+
+### Azure Static Web App
+
+需求：
+
+```sh
+npm install -g @azure/static-web-apps-cli
+```
+
+建議把 deployment token 放在環境變數：
+
+```sh
+export SWA_CLI_DEPLOYMENT_TOKEN=...
+now config set provider azure-static-web-app
+now config set azure_swa.environment production
+now config set azure_swa.deployment_token_env SWA_CLI_DEPLOYMENT_TOKEN
+```
+
+部署時會呼叫：
+
+```sh
+swa deploy <source> --env production
+```
+
+為了相容舊設定，`azure-swa` 仍可被讀取；新設定建議使用 `azure-static-web-app`。
+
+### Any Website (FTP)
+
+需求：
+
+```sh
+lftp --version
+```
+
+帳號密碼請使用環境變數：
+
+```sh
+export NOW_FTP_USERNAME=deploy-user
+export NOW_FTP_PASSWORD=...
+now config set provider any-website-ftp
+now config set ftp.host ftp.example.com
+now config set ftp.remote_dir /public_html
+```
+
+部署時會用 `lftp mirror -R --only-newer` 上傳。初版不做遠端刪除同步。
+
+為了相容舊設定，`ftp` 仍可被讀取；新設定建議使用 `any-website-ftp`。
+
+* * *
+
+## 來源目錄規則
+
+未指定 path 時，now 會依序尋找：
+
+1. `dist/`
+2. `build/`
+3. `public/`
+
+若三者都不存在：
+
+1. 互動式終端機會詢問是否把目前目錄的可發布檔案移到 `public/`。
+2. 若拒絕或處於非互動式環境，會部署目前目錄。
+3. 部署目前目錄時會排除 `.now.json`、`.git/`、`node_modules/`、`target/` 與暫存檔。
+
+指定 path 時會直接使用該目錄：
+
+```sh
+now deploy dist
+now ./public
+```
+
+* * *
+
+## URL 選擇規則
+
+部署後輸出的 URL 依序選擇：
+
+1. `.now.json` 或全域設定中的 `default_url`
+2. `index.html` 搭配 `base_url` 或 provider 可推導的公開 URL
+3. `index.htm` 搭配 `base_url` 或 provider 可推導的公開 URL
+4. 根目錄唯一的 `.html` 或 `.htm` 頁面，搭配 `base_url` 或 provider 可推導的公開 URL
+5. provider base URL 或 provider 可推導的公開 URL
+
+畫面會以 `Default URL: <url>` 顯示判斷結果。若 `base_url` 與 `default_url` 都是 `null`，now 會盡量從 provider 設定推導完整 URL；目前 Azure Storage Blob 會從 `sas_url_env` 指向的 SAS URL 推導。若無法推導，檔案規則會輸出相對頁面名稱，例如 `index.html`。
+
+* * *
+
+## 常用命令
+
+```sh
+now --help
+now
+now public
+now deploy
+now deploy dist --provider firebase-hosting
+now deploy --dry-run
+now deploy --dry-run --json
+now config get --global
+now config doctor
+```
+
+* * *
+
+## 安全性
+
+**不要把 token、password、secret、account key 或 Azure Storage Blob SAS URL 寫入 `.now.json`。**
+
+建議做法：
+
+| 類型 | 建議 |
+| --- | --- |
+| Firebase Hosting | 使用 `firebase login` 的既有登入狀態 |
+| Azure Storage Blob | 使用短效期、最小權限的 container SAS URL，並透過 `sas_url_env` 指向環境變數或 `.env` |
+| Azure Static Web App | 使用 `SWA_CLI_DEPLOYMENT_TOKEN` 或自訂 token 環境變數 |
+| Any Website (FTP) | 使用 `NOW_FTP_USERNAME` 與 `NOW_FTP_PASSWORD` 環境變數 |
+
+`now config set` 會拒絕明顯像祕密的 key。`now config set azure_blob.sas_url <url>` 只作為安全便利入口，會把實際 URL 寫入已被 `.gitignore` 排除的 `.env`，不會寫入 `.now.json`。
+
+* * *
+
+## 疑難排解
+
+| 問題 | 處理方式 |
+| --- | --- |
+| provider CLI 找不到 | 安裝對應 CLI，並確認它在 `PATH` 內 |
+| 沒有部署權限 | 先用 provider CLI 完成登入與權限確認 |
+| 找不到預設 URL | 設定 `default_url` 或 `base_url`，或確認 provider 設定足以推導公開 URL |
+| npm 安裝時下載 release asset 失敗 | 確認版本對應的 GitHub Release asset 已發布 |
+| checksum 驗證失敗 | 刪除安裝快取後重裝，並確認 release asset 與 `.sha256` 來自同一個版本 |
+
+macOS DNS 快取異常時，可先執行：
+
+```sh
+sudo dscacheutil -flushcache
+sudo killall -HUP mDNSResponder
+```
+
+* * *
+
+## 開發者指南
+
+需求：
+
+```sh
+rustc --version
+cargo --version
+node --version
+npm --version
+```
+
+常用流程：
+
+```sh
+make check
+make test
+make release-build
+make npm-pack
+make install
+make install-local
+```
+
+`make install` 會把 release binary 安裝到 `$HOME/.local/bin/now`。若要改安裝 prefix，使用 `PREFIX=/custom make install-local`。
+
+release asset 命名必須固定：
+
+```text
+now-aarch64-apple-darwin.tar.xz
+now-aarch64-apple-darwin.tar.xz.sha256
+now-x86_64-apple-darwin.tar.xz
+now-x86_64-apple-darwin.tar.xz.sha256
+now-x86_64-unknown-linux-gnu.tar.xz
+now-x86_64-unknown-linux-gnu.tar.xz.sha256
+now-x86_64-pc-windows-msvc.zip
+now-x86_64-pc-windows-msvc.zip.sha256
+```
+
+CI 會執行 Rust format、clippy、Rust 測試與 npm 測試。release workflow 會建立跨平台 binary archive 與 checksum。npm publish workflow 使用：
+
+```sh
+npm publish --provenance --access public
+```
+
+* * *
+
+## 授權與貢獻
+
+本專案採用 MIT License。
+
+貢獻前請先執行：
+
+```sh
+make check
+```

package/npm/cli.cjs

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawnSync } = require('node:child_process');
+const { existsSync } = require('node:fs');
+const { join } = require('node:path');
+
+const BINARY_NAME = "now";
+const exe = process.platform === 'win32' ? `${BINARY_NAME}.exe` : BINARY_NAME;
+const bin = join(__dirname, `${BINARY_NAME}-bin`, exe);
+
+if (!existsSync(bin)) {
+  console.error(`${BINARY_NAME} native binary was not found. Try reinstalling ${BINARY_NAME}.`);
+  process.exit(1);
+}
+
+const result = spawnSync(bin, process.argv.slice(2), { stdio: 'inherit' });
+if (result.error) {
+  console.error(result.error.message);
+  process.exit(1);
+}
+process.exit(result.status ?? 1);

package/npm/postinstall.cjs

@@ -0,0 +1,181 @@
+#!/usr/bin/env node
+'use strict';
+
+const { createHash } = require('node:crypto');
+const { spawnSync } = require('node:child_process');
+const {
+  chmodSync,
+  copyFileSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  rmSync,
+  writeFileSync,
+} = require('node:fs');
+const { get } = require('node:https');
+const { join } = require('node:path');
+const { URL } = require('node:url');
+
+const PACKAGE_ROOT = join(__dirname, '..');
+const BINARY_NAME = "now";
+const GITHUB_OWNER = "doggy8088";
+const GITHUB_REPO = "now";
+const BIN_DIR = join(__dirname, `${BINARY_NAME}-bin`);
+const BIN_NAME = process.platform === 'win32' ? `${BINARY_NAME}.exe` : BINARY_NAME;
+const DEST = join(BIN_DIR, BIN_NAME);
+
+const TARGETS = {
+  'darwin-arm64': 'aarch64-apple-darwin',
+  'darwin-x64': 'x86_64-apple-darwin',
+  'linux-x64': 'x86_64-unknown-linux-gnu',
+  'win32-x64': 'x86_64-pc-windows-msvc',
+};
+
+function platformKey(platform = process.platform, arch = process.arch) {
+  return `${platform}-${arch}`;
+}
+
+function cargoTarget(platform = process.platform, arch = process.arch) {
+  const target = TARGETS[platformKey(platform, arch)];
+  if (!target) {
+    throw new Error(`Unsupported platform: ${platform}/${arch}`);
+  }
+  return target;
+}
+
+function packageVersion() {
+  return require(join(PACKAGE_ROOT, 'package.json')).version;
+}
+
+function artifactName(target) {
+  const ext = target.includes('windows') || target.includes('pc-windows') ? 'zip' : 'tar.xz';
+  return `${BINARY_NAME}-${target}.${ext}`;
+}
+
+function releaseBaseUrl(version = packageVersion()) {
+  return `https://github.com/${GITHUB_OWNER}/${GITHUB_REPO}/releases/download/v${version}`;
+}
+
+function sha256(path) {
+  return createHash('sha256').update(readFileSync(path)).digest('hex');
+}
+
+function verifyChecksum(filePath, checksumText) {
+  const expected = checksumText.trim().split(/\s+/)[0].toLowerCase();
+  if (!/^[a-f0-9]{64}$/.test(expected)) {
+    throw new Error('Invalid checksum file format');
+  }
+  const actual = sha256(filePath);
+  if (actual !== expected) {
+    throw new Error(`Checksum mismatch for ${filePath}: expected ${expected}, got ${actual}`);
+  }
+}
+
+function download(url, destination, redirectsRemaining = 5) {
+  return new Promise((resolve, reject) => {
+    get(url, (res) => {
+      if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location && redirectsRemaining > 0) {
+        const nextUrl = new URL(res.headers.location, url).toString();
+        download(nextUrl, destination, redirectsRemaining - 1).then(resolve, reject);
+        return;
+      }
+      if (res.statusCode !== 200) {
+        reject(new Error(`Download failed ${res.statusCode}: ${url}`));
+        return;
+      }
+      const chunks = [];
+      res.on('data', (chunk) => chunks.push(chunk));
+      res.on('end', () => {
+        writeFileSync(destination, Buffer.concat(chunks));
+        resolve();
+      });
+    }).on('error', reject);
+  });
+}
+
+function run(command, args) {
+  const result = spawnSync(command, args, { stdio: 'inherit' });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error(`Command failed: ${command}`);
+}
+
+function extract(archive, destDir) {
+  mkdirSync(destDir, { recursive: true });
+  if (archive.endsWith('.zip')) {
+    if (process.platform === 'win32') {
+      run('powershell', ['-NoProfile', '-Command', 'Expand-Archive', '-Force', '-Path', archive, '-DestinationPath', destDir]);
+    } else {
+      run('unzip', ['-o', archive, '-d', destDir]);
+    }
+  } else {
+    run('tar', ['-xJf', archive, '-C', destDir]);
+  }
+}
+
+function findExtractedBinary(dir, binName = BIN_NAME) {
+  const direct = join(dir, binName);
+  if (existsSync(direct)) return direct;
+
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue;
+    const candidate = join(dir, entry.name, binName);
+    if (existsSync(candidate)) return candidate;
+  }
+
+  throw new Error(`Archive did not contain ${binName}`);
+}
+
+function installFromLocalBuild() {
+  const localRelease = join(PACKAGE_ROOT, 'target', 'release', BIN_NAME);
+  if (!existsSync(localRelease)) return false;
+  mkdirSync(BIN_DIR, { recursive: true });
+  copyFileSync(localRelease, DEST);
+  chmodSync(DEST, 0o755);
+  return true;
+}
+
+async function installFromRelease() {
+  const target = cargoTarget();
+  const archive = artifactName(target);
+  const base = releaseBaseUrl();
+  const tmpDir = join(BIN_DIR, '.tmp');
+  const archivePath = join(tmpDir, archive);
+  const checksumPath = `${archivePath}.sha256`;
+
+  rmSync(tmpDir, { recursive: true, force: true });
+  mkdirSync(tmpDir, { recursive: true });
+  await download(`${base}/${archive}`, archivePath);
+  await download(`${base}/${archive}.sha256`, checksumPath);
+  verifyChecksum(archivePath, readFileSync(checksumPath, 'utf8'));
+  extract(archivePath, tmpDir);
+
+  const extracted = findExtractedBinary(tmpDir);
+  mkdirSync(BIN_DIR, { recursive: true });
+  copyFileSync(extracted, DEST);
+  chmodSync(DEST, 0o755);
+  rmSync(tmpDir, { recursive: true, force: true });
+}
+
+async function main() {
+  if (installFromLocalBuild()) return;
+  await installFromRelease();
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error.message);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  TARGETS,
+  artifactName,
+  cargoTarget,
+  findExtractedBinary,
+  platformKey,
+  releaseBaseUrl,
+  sha256,
+  verifyChecksum,
+};

package/npm/prepublish-check.cjs

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+'use strict';
+
+const { request } = require('node:https');
+const { URL } = require('node:url');
+const { artifactName, releaseBaseUrl, TARGETS } = require('./postinstall.cjs');
+
+const MAX_REDIRECTS = 5;
+
+function packageVersion() {
+  return require('../package.json').version;
+}
+
+function expectedReleaseUrls(version = packageVersion()) {
+  const base = releaseBaseUrl(version);
+  return Object.values(TARGETS).flatMap((target) => {
+    const archive = artifactName(target);
+    return [`${base}/${archive}`, `${base}/${archive}.sha256`];
+  });
+}
+
+function checkUrl(url, redirectsRemaining = MAX_REDIRECTS) {
+  return new Promise((resolve) => {
+    const req = request(url, { method: 'HEAD' }, (res) => {
+      const { statusCode, headers } = res;
+      res.resume();
+
+      if (statusCode >= 300 && statusCode < 400 && headers.location && redirectsRemaining > 0) {
+        const nextUrl = new URL(headers.location, url).toString();
+        checkUrl(nextUrl, redirectsRemaining - 1).then((result) => resolve({ ...result, url }));
+        return;
+      }
+
+      resolve({
+        url,
+        ok: statusCode >= 200 && statusCode < 300,
+        statusCode,
+      });
+    });
+
+    req.on('error', (error) => {
+      resolve({ url, ok: false, errorMessage: error.message });
+    });
+    req.end();
+  });
+}
+
+function retryCountFromEnv() {
+  return Number.parseInt(process.env.WILLH_NOW_RELEASE_ASSET_RETRIES ?? '1', 10);
+}
+
+function retryDelayMsFromEnv() {
+  return Number.parseInt(process.env.WILLH_NOW_RELEASE_ASSET_RETRY_DELAY_MS ?? '1000', 10);
+}
+
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function formatFailure(result) {
+  const reason = result.statusCode ? `HTTP ${result.statusCode}` : result.errorMessage;
+  return `- ${result.url} (${reason})`;
+}
+
+async function verifyReleaseAssets({
+  version = packageVersion(),
+  check = checkUrl,
+  retries = retryCountFromEnv(),
+  retryDelayMs = retryDelayMsFromEnv(),
+} = {}) {
+  const urls = expectedReleaseUrls(version);
+  let failures = [];
+
+  for (let attempt = 1; attempt <= retries; attempt += 1) {
+    const results = await Promise.all(
+      urls.map(async (url) => ({
+        url,
+        ...(await check(url)),
+      })),
+    );
+    failures = results.filter((result) => !result.ok);
+    if (failures.length === 0) return urls;
+    if (attempt < retries) await sleep(retryDelayMs);
+  }
+
+  throw new Error(
+    [
+      `Missing or unavailable release assets for v${version}:`,
+      ...failures.map(formatFailure),
+      'Create and host the GitHub release assets before publishing npm.',
+    ].join('\n'),
+  );
+}
+
+async function main() {
+  const version = packageVersion();
+  const urls = await verifyReleaseAssets({ version });
+  console.log(`Verified ${urls.length} release assets for v${version}.`);
+}
+
+if (require.main === module) {
+  main().catch((error) => {
+    console.error(error.message);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  checkUrl,
+  expectedReleaseUrls,
+  formatFailure,
+  retryCountFromEnv,
+  retryDelayMsFromEnv,
+  verifyReleaseAssets,
+};

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@willh/now",
+  "version": "0.1.0",
+  "description": "Deploy static sites with provider CLIs",
+  "bin": {
+    "now": "npm/cli.cjs"
+  },
+  "scripts": {
+    "postinstall": "node npm/postinstall.cjs",
+    "test": "node --test tests/postinstall.test.cjs",
+    "prepublishOnly": "npm test && npm pack --dry-run && node npm/prepublish-check.cjs"
+  },
+  "files": [
+    "npm/cli.cjs",
+    "npm/postinstall.cjs",
+    "npm/prepublish-check.cjs",
+    "tests/postinstall.test.cjs",
+    "README.md",
+    "LICENSE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/doggy8088/now.git"
+  },
+  "keywords": [
+    "deploy",
+    "static-site",
+    "rust",
+    "cli"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "author": "",
+  "license": "MIT"
+}

package/tests/postinstall.test.cjs

@@ -0,0 +1,63 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const { chmodSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } = require('node:fs');
+const { tmpdir } = require('node:os');
+const { join } = require('node:path');
+const { spawnSync } = require('node:child_process');
+const test = require('node:test');
+
+const {
+  artifactName,
+  cargoTarget,
+  platformKey,
+  releaseBaseUrl,
+  sha256,
+  verifyChecksum,
+} = require('../npm/postinstall.cjs');
+
+test('maps supported platforms to Rust targets', () => {
+  assert.equal(platformKey('darwin', 'arm64'), 'darwin-arm64');
+  assert.equal(cargoTarget('darwin', 'arm64'), 'aarch64-apple-darwin');
+  assert.equal(cargoTarget('darwin', 'x64'), 'x86_64-apple-darwin');
+  assert.equal(cargoTarget('linux', 'x64'), 'x86_64-unknown-linux-gnu');
+  assert.equal(cargoTarget('win32', 'x64'), 'x86_64-pc-windows-msvc');
+});
+
+test('rejects unsupported platforms', () => {
+  assert.throws(() => cargoTarget('linux', 'arm'), /Unsupported platform/);
+});
+
+test('formats artifact names and release URLs', () => {
+  assert.equal(artifactName('x86_64-unknown-linux-gnu'), 'now-x86_64-unknown-linux-gnu.tar.xz');
+  assert.equal(artifactName('x86_64-pc-windows-msvc'), 'now-x86_64-pc-windows-msvc.zip');
+  assert.equal(releaseBaseUrl('1.2.3'), 'https://github.com/doggy8088/now/releases/download/v1.2.3');
+});
+
+test('verifies sha256 checksums', () => {
+  const dir = mkdtempSync(join(tmpdir(), 'now-'));
+  const file = join(dir, 'sample.txt');
+  writeFileSync(file, 'hello');
+  const digest = sha256(file);
+  verifyChecksum(file, `${digest}  sample.txt`);
+  assert.throws(() => verifyChecksum(file, '0'.repeat(64)), /Checksum mismatch/);
+});
+
+test('wrapper invokes installed binary on Unix-like systems', { skip: process.platform === 'win32' }, () => {
+  const binDir = join(__dirname, '..', 'npm', 'now-bin');
+  const bin = join(binDir, 'now');
+  rmSync(binDir, { recursive: true, force: true });
+  mkdirSync(binDir, { recursive: true });
+  writeFileSync(bin, '#!/bin/sh\nprintf "wrapper:%s\\n" "$1"\n');
+  chmodSync(bin, 0o755);
+
+  try {
+    const result = spawnSync(process.execPath, [join(__dirname, '..', 'npm', 'cli.cjs'), 'ok'], {
+      encoding: 'utf8',
+    });
+    assert.equal(result.status, 0, result.stderr);
+    assert.match(result.stdout, /wrapper:ok/);
+  } finally {
+    rmSync(binDir, { recursive: true, force: true });
+  }
+});