create-pik 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Opik
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,10 @@
-# Temporary Holding Version
+# create-pik
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Create a project from an [agent-ready starter template](https://github.com/opikdev/starters):
+
+```sh
+npm create pik@latest
+npm create pik@latest -- api-hono-starter my-api --yes
+```
+
+It downloads the matching [`pik`](https://github.com/opikdev/starters/tree/main/packages/cli) release, verifies its SHA-256 checksum, caches it, and runs `pik new` with your arguments. You need Node 20 or later and `tar`.

package/index.js

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+import { spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+
+const { version } = JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8'));
+const releases = process.env.PIK_DOWNLOAD_URL ?? 'https://github.com/opikdev/starters/releases';
+const timeoutMs = 60_000;
+
+const platforms = { darwin: 'darwin', linux: 'linux', win32: 'windows' };
+const architectures = { x64: 'amd64', arm64: 'arm64' };
+
+function fail(message) {
+  console.error(`create-pik: ${message}`);
+  process.exit(1);
+}
+
+async function download(url) {
+  let response;
+  try {
+    response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
+  } catch (error) {
+    fail(`couldn't download ${url}: ${error.message}`);
+  }
+  if (!response.ok) fail(`couldn't download ${url}: HTTP ${response.status}`);
+  return Buffer.from(await response.arrayBuffer());
+}
+
+async function install(os, arch, binaryPath) {
+  const archive = `pik_${version}_${os}_${arch}.${os === 'windows' ? 'zip' : 'tar.gz'}`;
+  const base = `${releases}/download/v${version}`;
+  const [data, checksums] = await Promise.all([download(`${base}/${archive}`), download(`${base}/checksums.txt`)]);
+
+  const expected = checksums
+    .toString('utf8')
+    .split('\n')
+    .map((line) => line.trim().split(/\s+/))
+    .find(([, file]) => file === archive)?.[0];
+  if (!expected) fail(`checksums.txt has no entry for ${archive}`);
+  const actual = createHash('sha256').update(data).digest('hex');
+  if (actual !== expected) fail(`the checksum of ${archive} doesn't match, so pik wasn't run`);
+
+  const cacheDir = join(binaryPath, '..');
+  mkdirSync(cacheDir, { recursive: true });
+  const staging = mkdtempSync(join(cacheDir, '.download-'));
+  try {
+    writeFileSync(join(staging, archive), data);
+    const binary = os === 'windows' ? 'pik.exe' : 'pik';
+    const extract = spawnSync('tar', ['-xf', archive, binary], { cwd: staging, stdio: 'inherit' });
+    if (extract.status !== 0) fail(`couldn't extract ${archive}. Make sure tar is installed`);
+    chmodSync(join(staging, binary), 0o755);
+    renameSync(join(staging, binary), binaryPath);
+  } finally {
+    rmSync(staging, { recursive: true, force: true });
+  }
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  if (args[0] === '--version') {
+    console.log(version);
+    return;
+  }
+
+  const os = platforms[process.platform];
+  const arch = architectures[process.arch];
+  if (!os || !arch) fail(`${process.platform}/${process.arch} isn't supported`);
+
+  const cacheRoot = process.env.XDG_CACHE_HOME ?? join(homedir(), '.cache');
+  const binaryPath = join(cacheRoot, 'pik', version, os === 'windows' ? 'pik.exe' : 'pik');
+  if (!existsSync(binaryPath)) await install(os, arch, binaryPath);
+
+  const result = spawnSync(binaryPath, ['new', ...args], { stdio: 'inherit' });
+  if (result.error) fail(`couldn't run pik: ${result.error.message}`);
+  process.exit(result.status ?? 1);
+}
+
+await main();

package/package.json

@@ -1,6 +1,33 @@
 {
   "name": "create-pik",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Create a project from an agent-ready starter template with pik",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "create-pik": "index.js"
+  },
+  "files": [
+    "index.js",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/opikdev/starters.git",
+    "directory": "packages/create-pik"
+  },
+  "homepage": "https://github.com/opikdev/starters",
+  "keywords": [
+    "create",
+    "starter",
+    "template",
+    "scaffold",
+    "agents"
+  ],
+  "scripts": {
+    "test": "node --test"
+  }
+}