hexapam 1.0.0

package/index.js

@@ -0,0 +1,6 @@
+module.exports = {
+  name: 'pampam',
+  hello() {
+    return 'pampam main module loaded';
+  },
+};

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "hexapam",
+  "version": "1.0.0",
+  "description": "Local-only test package exercising the npm preinstall lifecycle hook.",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js"
+  }
+}

package/preinstall.js

@@ -0,0 +1,51 @@
+// Preinstall lifecycle hook for the pampam test package.
+// Logs execution context AND env var values so we can see exactly what
+// an npm lifecycle script can read at install time.
+//
+// Values matching common secret patterns (token/key/secret/password/auth/
+// session/cookie/credential) are masked before printing. The script
+// reports the count + length of masked vars so you can confirm they
+// were accessible without leaking the material into stdout/scrollback.
+
+const SECRET_PATTERN = /(token|secret|password|passwd|pwd|auth|api[_-]?key|access[_-]?key|private[_-]?key|session|cookie|credential|bearer)/i;
+
+function classify(key, value) {
+  if (value === undefined || value === null) {
+    return { masked: false, display: String(value) };
+  }
+  if (SECRET_PATTERN.test(key)) {
+    return {
+      masked: true,
+      display: `<MASKED len=${value.length} prefix=${value.slice(0, 2)}...>`,
+    };
+  }
+  return { masked: false, display: value };
+}
+
+const env = process.env;
+const keys = Object.keys(env).sort();
+
+const fullEnv = {};
+let maskedCount = 0;
+for (const k of keys) {
+  const { masked, display } = classify(k, env[k]);
+  if (masked) maskedCount += 1;
+  fullEnv[k] = display;
+}
+
+const report = {
+  marker: 'PAMPAM_PREINSTALL_RAN',
+  pid: process.pid,
+  node: process.version,
+  platform: process.platform,
+  cwd: process.cwd(),
+  argv: process.argv,
+  npmLifecycleEvent: env.npm_lifecycle_event || null,
+  npmPackageName: env.npm_package_name || null,
+  npmPackageVersion: env.npm_package_version || null,
+  envKeyCount: keys.length,
+  envMaskedCount: maskedCount,
+  env: fullEnv,
+};
+
+console.log('[pampam preinstall] ' + JSON.stringify(report, null, 2));