crx-gate 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,23 @@
-# Temporary Holding Version
+# crx-gate
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Zero-Dependency CLI for Pre-Commit Extension Security, Permission Blast-Radius Auditing, and CWS Rejection Prediction.
+
+## Usage with NPX
+
+Run without installing:
+
+```bash
+npx crx-gate audit ./path-to-extension
+```
+
+Diff two extension builds:
+
+```bash
+npx crx-gate diff ./v1.0.0 ./v1.1.0
+```
+
+Export SARIF report for GitHub Code Scanning:
+
+```bash
+npx crx-gate audit ./dist --format sarif --output crx-gate.sarif
+```

package/bin/crx-gate.js

@@ -0,0 +1,91 @@
+#!/usr/bin/env node
+
+const { spawnSync } = require("child_process");
+const fs = require("fs");
+const path = require("path");
+const os = require("os");
+const https = require("https");
+
+const VERSION = "0.1.0";
+const REPO = "crx-gate/crx-gate";
+
+function getBinaryName() {
+  const platform = os.platform();
+  const arch = os.arch();
+
+  let targetArch = arch === "x64" ? "x86_64" : arch === "arm64" ? "aarch64" : null;
+  if (!targetArch) {
+    console.error(`crx-gate error: Unsupported CPU architecture '${arch}'.`);
+    process.exit(1);
+  }
+
+  if (platform === "linux") {
+    return {
+      artifact: `crx-gate-${targetArch}-unknown-linux-gnu.tar.gz`,
+      binaryName: "crx-gate",
+      isZip: false,
+    };
+  } else if (platform === "darwin") {
+    return {
+      artifact: `crx-gate-${targetArch}-apple-darwin.tar.gz`,
+      binaryName: "crx-gate",
+      isZip: false,
+    };
+  } else if (platform === "win32") {
+    return {
+      artifact: `crx-gate-x86_64-pc-windows-msvc.zip`,
+      binaryName: "crx-gate.exe",
+      isZip: true,
+    };
+  } else {
+    console.error(`crx-gate error: Unsupported OS '${platform}'.`);
+    process.exit(1);
+  }
+}
+
+function getLocalBinaryPath() {
+  // Check local release build first if developing locally
+  const localTarget = path.join(__dirname, "..", "..", "target", "release", process.platform === "win32" ? "crx-gate.exe" : "crx-gate");
+  if (fs.existsSync(localTarget)) {
+    return localTarget;
+  }
+
+  const { binaryName } = getBinaryName();
+  const cacheDir = path.join(os.homedir(), ".crx-gate", `v${VERSION}`);
+  return path.join(cacheDir, binaryName);
+}
+
+function runBinary(binPath, args) {
+  const result = spawnSync(binPath, args, { stdio: "inherit" });
+  if (result.error) {
+    console.error("Execution error:", result.error);
+    process.exit(1);
+  }
+  process.exit(result.status !== null ? result.status : 0);
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  const binPath = getLocalBinaryPath();
+
+  if (fs.existsSync(binPath)) {
+    runBinary(binPath, args);
+    return;
+  }
+
+  console.log(`crx-gate: Standalone binary not found locally. Running native cargo build or download...`);
+  // Try running via cargo if installed
+  const cargoRun = spawnSync("cargo", ["run", "--release", "--quiet", "--", ...args], {
+    stdio: "inherit",
+    cwd: path.join(__dirname, "..", ".."),
+  });
+
+  if (cargoRun.status === 0) {
+    process.exit(0);
+  }
+
+  console.error(`crx-gate error: Could not locate binary. Install via cargo: 'cargo install crx-gate' or download from GitHub releases.`);
+  process.exit(1);
+}
+
+main();

package/package.json

@@ -1,6 +1,30 @@
 {
   "name": "crx-gate",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Zero-dependency pre-commit extension security, permission blast-radius auditing, and CWS rejection prediction",
+  "bin": {
+    "crx-gate": "bin/crx-gate.js"
+  },
+  "scripts": {
+    "test": "node bin/crx-gate.js --help"
+  },
+  "keywords": [
+    "chrome-extension",
+    "crx",
+    "security",
+    "audit",
+    "manifest-v3",
+    "blast-radius",
+    "sast",
+    "taint-analysis"
+  ],
+  "author": "crx-gate contributors",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/crx-gate/crx-gate.git"
+  },
+  "engines": {
+    "node": ">=16.0.0"
+  }
+}