envden 0.1.0

package/README.md

@@ -0,0 +1,13 @@
+# envden
+
+Sync whole `.env` files across your machines. Files are encrypted on your device, stored on a server you run, and reached over Tailscale. Comments, key order and blank lines survive.
+
+```sh
+npm i -g envden
+envden setup
+```
+
+Installing downloads the envden binary for your platform from the matching GitHub release and checks it against a SHA-256 hash pinned in this package.
+
+Docs: https://envden.theclau.de/docs
+Source: https://github.com/notsuhas/envden (MIT)

package/bin/launch.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+
+const binary = fileURLToPath(
+  new URL(
+    process.platform === "win32" ? "../native/envden.exe" : "../native/envden",
+    import.meta.url,
+  ),
+);
+
+const child = spawnSync(binary, process.argv.slice(2), {
+  stdio: "inherit",
+  env: { ...process.env, ENVDEN_INSTALL_METHOD: "npm" },
+});
+
+if (child.error) throw child.error;
+
+process.exit(child.status ?? 1);

package/checksums.json

@@ -0,0 +1,10 @@
+{
+  "darwin-x64": "54f5e8b77f9f5a84759ca2cbdff506e461f9ce353dea54d897e1fd8c9e933130",
+  "darwin-arm64": "a652745aa0b0507cd870a8211ab35de5d03d611f3a8f2616243a0bc7ba38cb7f",
+  "linux-x64": "e2c040a41e9883d8ceb913f6744f583c816730648d965079e893d7b005d63d1c",
+  "linux-arm64": "9f80ea8a307357de4a06262df30b34d1d4f46c904f849721b0d056c964276dbf",
+  "linux-x64-musl": "6665a8a78eefc1b72ccea0c8beec5c0c50bace5ebb12f2f502388000164bf6e0",
+  "linux-arm64-musl": "5a4e6bef1cffa585c7a791a97ea9bc046260affd5eec2cba2c1656c4bb5882a8",
+  "windows-x64": "769d3879f2b00173cb7f078143e788cc7bebbfb9968d7472924f9e0769975e54",
+  "windows-arm64": "26065585a02f02c6956d09478abcf31782bf4aac940a964f760e1912ab0567e2"
+}

package/install.js

@@ -0,0 +1,48 @@
+import { createHash } from "node:crypto";
+import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+
+const repo = "notsuhas/envden";
+
+if (repo.includes("REPLACE")) throw new Error("Configure release repository before publishing");
+
+const metadata = JSON.parse(await readFile(new URL("package.json", import.meta.url), "utf8"));
+const hashes = JSON.parse(await readFile(new URL("checksums.json", import.meta.url), "utf8"));
+
+let platform = `${process.platform === "win32" ? "windows" : process.platform}-${process.arch}`;
+
+if (process.platform === "linux" && !process.report.getReport().header.glibcVersionRuntime)
+  platform += "-musl";
+
+const expected = hashes[platform];
+
+if (typeof expected !== "string" || !/^[a-f0-9]{64}$/.test(expected))
+  throw new Error("Missing pinned platform checksum");
+
+const asset = `envden-${platform}${process.platform === "win32" ? ".exe" : ""}`;
+
+const response = await fetch(
+  `https://github.com/${repo}/releases/download/v${metadata.version}/${asset}`,
+  { signal: AbortSignal.timeout(120000) },
+);
+
+if (!response.ok) throw new Error("Binary download failed");
+
+const bytes = Buffer.from(await response.arrayBuffer());
+
+if (createHash("sha256").update(bytes).digest("hex") !== expected)
+  throw new Error("Checksum mismatch");
+
+const directory = new URL("native/", import.meta.url);
+
+await mkdir(directory, { recursive: true });
+
+const destination = fileURLToPath(
+  new URL(process.platform === "win32" ? "envden.exe" : "envden", directory),
+);
+
+await writeFile(`${destination}.tmp`, bytes);
+
+await chmod(`${destination}.tmp`, 0o755);
+
+await rename(`${destination}.tmp`, destination);

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "envden",
+  "version": "0.1.0",
+  "description": "Sync whole .env files across your machines, end-to-end encrypted, through a server you host.",
+  "keywords": [
+    "env",
+    "dotenv",
+    "secrets",
+    "sync",
+    "encryption",
+    "self-hosted",
+    "tailscale",
+    "cli"
+  ],
+  "homepage": "https://envden.theclau.de",
+  "bugs": "https://github.com/notsuhas/envden/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/notsuhas/envden.git",
+    "directory": "packaging/npm"
+  },
+  "license": "MIT",
+  "bin": {
+    "envden": "bin/launch.js"
+  },
+  "files": [
+    "bin",
+    "install.js",
+    "checksums.json"
+  ],
+  "type": "module",
+  "scripts": {
+    "postinstall": "node install.js"
+  },
+  "engines": {
+    "node": ">=22"
+  }
+}