covcom 3.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 COVCOM
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,36 @@
+# covcom
+
+> [!NOTE]
+> Terminal client for COVCOM: post-quantum end-to-end encrypted ephemeral group chat.
+
+---
+
+## Install
+
+```sh
+npm i -g covcom
+```
+
+`bunx covcom` works too. Each platform package carries a prebuilt
+binary with its runtime embedded, so installing from npm does not require
+Bun. The launcher shim runs on Node 18 or newer, or on Bun.
+
+## Supported platforms
+
+| platform | libc | package |
+|----------|------|---------|
+| darwin-arm64 | - | `@covcom/cli-darwin-arm64` |
+| darwin-x64 | - | `@covcom/cli-darwin-x64` |
+| linux-x64 | glibc | `@covcom/cli-linux-x64` |
+| linux-x64-musl | musl | `@covcom/cli-linux-x64-musl` |
+| linux-arm64 | glibc | `@covcom/cli-linux-arm64` |
+| linux-arm64-musl | musl | `@covcom/cli-linux-arm64-musl` |
+| win32-x64 | - | `@covcom/cli-win32-x64` |
+
+Other platforms can use the [prebuilt release binaries](https://github.com/xero/covcom/releases).
+
+## Links
+
+- [Repository](https://github.com/xero/covcom)
+- [Usage guide](https://github.com/xero/covcom/blob/main/docs/USAGE.md)
+- [Security policy](https://github.com/xero/covcom/blob/main/SECURITY.md)

package/bin/covcom

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+// AUTO-GENERATED by scripts/stage.ts. Do not edit.
+'use strict';
+
+const { execFileSync } = require('child_process');
+const { join } = require('path');
+
+const PLATFORMS = {
+	'darwin-arm64': ['@covcom/cli-darwin-arm64', 'covcom'],
+	'darwin-x64': ['@covcom/cli-darwin-x64', 'covcom'],
+	'linux-x64': ['@covcom/cli-linux-x64', 'covcom'],
+	'linux-x64-musl': ['@covcom/cli-linux-x64-musl', 'covcom'],
+	'linux-arm64': ['@covcom/cli-linux-arm64', 'covcom'],
+	'linux-arm64-musl': ['@covcom/cli-linux-arm64-musl', 'covcom'],
+	'win32-x64': ['@covcom/cli-win32-x64', 'covcom.exe'],
+};
+
+// Bun compiles separate glibc and musl linux binaries, so linux keys carry a
+// libc suffix. glibcVersionRuntime is absent from process.report under musl.
+function libcSuffix() {
+	try {
+		return process.report.getReport().header.glibcVersionRuntime ? '' : '-musl';
+	} catch {
+		return '';
+	}
+}
+
+const key = process.platform === 'linux'
+	? 'linux-' + process.arch + libcSuffix()
+	: process.platform + '-' + process.arch;
+const entry = PLATFORMS[key];
+
+if (!entry) {
+	process.stderr.write('covcom: unsupported platform: ' + key + '\n');
+	process.stderr.write('Supported: ' + Object.keys(PLATFORMS).join(', ') + '\n');
+	process.stderr.write('Prebuilt binaries: https://github.com/xero/covcom/releases\n');
+	process.exit(1);
+}
+
+const [pkg, bin] = entry;
+
+let pkgJson;
+try {
+	pkgJson = require.resolve(pkg + '/package.json');
+} catch {
+	process.stderr.write('covcom: platform package ' + pkg + ' is not installed.\n');
+	process.stderr.write('Try reinstalling: npm install -g covcom\n');
+	process.exit(1);
+}
+
+try {
+	execFileSync(join(pkgJson, '..', 'bin', bin), process.argv.slice(2), { stdio: 'inherit' });
+} catch (e) {
+	process.exit(e.status ?? 1);
+}

package/package.json

@@ -0,0 +1,68 @@
+{
+	"name": "covcom",
+	"version": "3.1.0",
+	"description": "Terminal client for COVCOM: post-quantum end-to-end encrypted ephemeral group chat.",
+	"license": "MIT",
+	"author": "xero (https://x-e.ro)",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/xero/covcom.git",
+		"directory": "cli"
+	},
+	"homepage": "https://github.com/xero/covcom#readme",
+	"bin": {
+		"covcom": "bin/covcom"
+	},
+	"files": [
+		"bin/"
+	],
+	"engines": {
+		"node": ">=18"
+	},
+	"optionalDependencies": {
+		"@covcom/cli-darwin-arm64": "3.1.0",
+		"@covcom/cli-darwin-x64": "3.1.0",
+		"@covcom/cli-linux-x64": "3.1.0",
+		"@covcom/cli-linux-x64-musl": "3.1.0",
+		"@covcom/cli-linux-arm64": "3.1.0",
+		"@covcom/cli-linux-arm64-musl": "3.1.0",
+		"@covcom/cli-win32-x64": "3.1.0"
+	},
+	"publishConfig": {
+		"access": "public",
+		"provenance": true
+	},
+	"keywords": [
+		"XChaCha20",
+		"ML-KEM-768",
+		"Ed25519",
+		"BLAKE3",
+		"post-quantum",
+		"pqc",
+		"kyber",
+		"ML-KEM",
+		"SPQR",
+		"E2EE",
+		"ephemeral",
+		"N-party",
+		"cryptography",
+		"encryption",
+		"crypto",
+		"chat",
+		"groupchat",
+		"messenger",
+		"forward-secrecy",
+		"double-ratchet",
+		"end-to-end-encryption",
+		"CLI",
+		"TUI",
+		"SPA",
+		"bun",
+		"covcom",
+		"chat",
+		"communications",
+		"covert",
+		"anonymous",
+		"incognito"
+	]
+}