bl4ze 0.2.0

package/bin/bl4ze

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+/* Placeholder replaced by install.cjs with the real binary.
+ * If you are seeing this message the postinstall step did not run. */
+console.error(
+  "bl4ze: the binary was not downloaded.\n" +
+  "Run `npm rebuild bl4ze`, or install from source: https://bl4ze.net/install.html"
+);
+process.exit(1);

package/install.cjs

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+/* Fetch the binary for this platform.
+ *
+ * The published package is a stub: it carries no program, only the few lines
+ * needed to download the right build. That keeps the package small and, more
+ * to the point, keeps the source out of the registry -- npm ships what is in
+ * the tarball, and the tarball is this file.
+ *
+ * The download is verified against a checksum published alongside it. Without
+ * that, `npm install` would run whatever the host happened to return.
+ */
+"use strict";
+
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+const https = require("https");
+const crypto = require("crypto");
+const zlib = require("zlib");
+const { execFileSync } = require("child_process");
+
+const VERSION = require("./package.json").version;
+const BASE = process.env.BL4ZE_DOWNLOAD_BASE || "https://dl.bl4ze.net";
+
+const PLATFORMS = { darwin: "darwin", linux: "linux" };
+const ARCHS = { x64: "x64", arm64: "arm64" };
+
+function target() {
+  const p = PLATFORMS[os.platform()];
+  const a = ARCHS[os.arch()];
+  if (!p || !a) {
+    throw new Error(
+      `bl4ze has no build for ${os.platform()}/${os.arch()}.\n` +
+      `Install from source instead: https://bl4ze.net/install.html`
+    );
+  }
+  return `bl4ze-${VERSION}-${p}-${a}.tar.gz`;
+}
+
+function get(url, redirects = 0) {
+  return new Promise((resolve, reject) => {
+    if (redirects > 5) return reject(new Error("too many redirects"));
+    https.get(url, (res) => {
+      if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+        res.resume();
+        return resolve(get(new URL(res.headers.location, url).toString(), redirects + 1));
+      }
+      if (res.statusCode !== 200) {
+        res.resume();
+        return reject(new Error(`${url} returned HTTP ${res.statusCode}`));
+      }
+      const chunks = [];
+      res.on("data", (c) => chunks.push(c));
+      res.on("end", () => resolve(Buffer.concat(chunks)));
+      res.on("error", reject);
+    }).on("error", reject);
+  });
+}
+
+async function main() {
+  const name = target();
+  const binDir = path.join(__dirname, "bin");
+  fs.mkdirSync(binDir, { recursive: true });
+
+  process.stderr.write(`bl4ze: fetching ${name}\n`);
+  const [archive, sums] = await Promise.all([
+    get(`${BASE}/${VERSION}/${name}`),
+    get(`${BASE}/${VERSION}/SHA256SUMS`),
+  ]);
+
+  // Verify before unpacking, not after: an unverified archive should never
+  // reach the filesystem as an executable.
+  const expected = sums.toString("utf8").split("\n")
+    .map((line) => line.trim().split(/\s+/))
+    .find((parts) => parts[1] === name);
+  if (!expected) throw new Error(`no checksum published for ${name}`);
+
+  const actual = crypto.createHash("sha256").update(archive).digest("hex");
+  if (actual !== expected[0]) {
+    throw new Error(
+      `checksum mismatch for ${name}\n  expected ${expected[0]}\n  got      ${actual}`
+    );
+  }
+
+  const tarPath = path.join(binDir, "bl4ze.tar.gz");
+  fs.writeFileSync(tarPath, archive);
+  execFileSync("tar", ["-xzf", tarPath, "-C", binDir]);
+  fs.unlinkSync(tarPath);
+  fs.chmodSync(path.join(binDir, "bl4ze"), 0o755);
+  process.stderr.write("bl4ze: installed\n");
+}
+
+main().catch((error) => {
+  process.stderr.write(`\nbl4ze: install failed — ${error.message}\n\n`);
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "bl4ze",
+  "version": "0.2.0",
+  "description": "A terminal coding agent that runs unattended, with a remote console you can drive from your phone.",
+  "keywords": ["ai", "agent", "cli", "terminal", "coding-agent"],
+  "license": "MIT",
+  "homepage": "https://bl4ze.net",
+  "bin": { "bl4ze": "bin/bl4ze" },
+  "files": ["bin/bl4ze", "install.cjs", "README.md"],
+  "scripts": { "postinstall": "node install.cjs" },
+  "engines": { "node": ">=16" },
+  "dependencies": {},
+  "os": ["darwin", "linux"],
+  "cpu": ["x64", "arm64"]
+}