juggernaut-bedrock 4.0.0 → 4.0.2

package/README.md

@@ -0,0 +1,118 @@
+# juggernaut-bedrock
+
+**Claude Code → Amazon Bedrock in one command.**
+
+Juggernaut is a cross-platform CLI that wires [Claude Code](https://docs.anthropic.com/en/docs/claude-code) to [Amazon Bedrock](https://aws.amazon.com/bedrock/) instead of Anthropic's direct API. One install, one `apply`, then just run `claude` — no shell profile hacks, no manual env vars, no jq.
+
+Built for developers shipping with GenAI today: IAM and SSO for teams, API keys for solo runs, and a `doctor` command when something's off.
+
+<p align="center">
+  <a href="https://github.com/jpvelasco/juggernaut/actions/workflows/ci.yml"><img src="https://github.com/jpvelasco/juggernaut/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
+  <a href="https://github.com/jpvelasco/juggernaut/releases/latest"><img src="https://img.shields.io/github/v/release/jpvelasco/juggernaut" alt="Release"></a>
+  <a href="https://www.npmjs.com/package/juggernaut-bedrock"><img src="https://img.shields.io/npm/v/juggernaut-bedrock" alt="npm"></a>
+  <a href="https://app.codacy.com/gh/jpvelasco/juggernaut/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade"><img src="https://app.codacy.com/project/badge/Grade/2bf1e68b80964537b5c65350663c3073" alt="Codacy Grade"></a>
+</p>
+
+## Install
+
+```bash
+npm install -g juggernaut-bedrock
+```
+
+Or try it without installing globally:
+
+```bash
+npx juggernaut-bedrock version
+```
+
+Works on **macOS**, **Linux**, **Windows**, and **WSL** — `x64` and `arm64`.
+
+## Quickstart
+
+```bash
+# 1. Install (above)
+
+# 2. Configure — IAM/SSO (recommended) or interactive prompt
+juggernaut apply --auth=iam
+
+# 3. Launch Claude Code (token injected automatically)
+claude
+```
+
+Bedrock API key auth? Run `juggernaut apply` and follow the prompt — credentials land in your OS keychain, not your shell history.
+
+## What it does
+
+```
+juggernaut apply --auth=iam
+```
+
+That one command:
+
+1. **Writes** Bedrock config to `~/.claude/settings.json` (or project scope)
+2. **Sets** model IDs, region, effort level, and `CLAUDE_CODE_USE_BEDROCK=1` — only after credentials check out
+3. **Installs** a `claude` launcher shim that reads your token from the keychain and execs the real binary
+
+No `.bashrc` edits. No copying API keys into env vars. No "why isn't Bedrock routing?" at 2am.
+
+## Why Bedrock?
+
+| | Direct Anthropic API | Amazon Bedrock |
+|---|---------------------|----------------|
+| **Billing** | Separate account | Your AWS bill |
+| **Auth** | API keys | IAM, SSO, roles |
+| **Region** | Anthropic infra | Your chosen AWS region |
+| **Compliance** | Anthropic certs | SOC, HIPAA, FedRAMP via AWS |
+| **Network** | Public internet | VPC endpoints, PrivateLink |
+
+## Auth modes
+
+| Mode | Command | Best for |
+|------|---------|----------|
+| **IAM / SSO** | `juggernaut apply --auth=iam` | Teams, enterprise, existing AWS identity |
+| **Bedrock API key** | `juggernaut apply` | Solo devs, quick setup |
+| **Interactive** | `juggernaut apply` (no flags) | First run — guided prompts |
+| **Preview** | `juggernaut apply --dry-run` | See what would change, change nothing |
+
+## Commands
+
+| Command | What it does |
+|---------|--------------|
+| `apply` | Configure Bedrock + install the `claude` shim |
+| `show` | Print your current Juggernaut config |
+| `doctor` | Diagnostics — block, credentials, launcher |
+| `migrate` | Upgrade from v3 shell installer to v4 Go binary |
+| `uninstall` | Remove config, token, and shim |
+| `version` | Print installed version (`--json` for machines) |
+
+## Default models
+
+| Tier | Model |
+|------|-------|
+| **Primary** | Claude Sonnet 4.6 |
+| **Opus** | Claude Opus 4.7 |
+| **Fast** | Claude Haiku 4.5 |
+
+Override any tier: `juggernaut apply --auth=iam --model=global.anthropic.claude-sonnet-4-6`
+
+## Troubleshooting
+
+Stuck? Start here:
+
+```bash
+juggernaut doctor
+```
+
+Common fixes: complete Anthropic model access in the Bedrock console (403), refresh SSO (`aws sso login`), or re-run `juggernaut apply`.
+
+## Documentation
+
+Full docs, IAM policy, migration guide, and platform notes:
+
+**[github.com/jpvelasco/juggernaut](https://github.com/jpvelasco/juggernaut)**
+
+## License
+
+MIT — see [LICENSE](https://github.com/jpvelasco/juggernaut/blob/main/LICENSE).
+
+Juggernaut is an independent tool, not affiliated with Anthropic or Amazon Web Services.

package/install.js

@@ -3,11 +3,16 @@
 const https = require("https");
 const fs = require("fs");
 const path = require("path");
-const os = require("os");
+const { Readable } = require("stream");
 const crypto = require("crypto");
 
 const REPO = "jpvelasco/juggernaut";
 const BIN_DIR = path.join(__dirname, "bin");
+const ALLOWED_HOSTS = new Set([
+  "github.com",
+  "api.github.com",
+  "release-assets.githubusercontent.com"
+]);
 
 function getPlatform() {
   const osMap = { darwin: "darwin", linux: "linux", win32: "windows" };
@@ -20,12 +25,23 @@ function getPlatform() {
   return { os: p, arch: a, platform: `${p}_${a}` };
 }
 
-function httpsGet(url) {
+function httpsGetBuffer(url) {
+  const parsed = new URL(url);
+  if (!ALLOWED_HOSTS.has(parsed.hostname)) {
+    throw new Error(`URL host not allowed: ${parsed.hostname}`);
+  }
   return new Promise((resolve, reject) => {
     https
       .get(url, { headers: { "User-Agent": "juggernaut-npm-installer/1.0" } }, (res) => {
         if (res.statusCode === 301 || res.statusCode === 302) {
-          return httpsGet(res.headers.location).then(resolve).catch(reject);
+          const location = res.headers.location;
+          const redirectParsed = new URL(location);
+          if (!ALLOWED_HOSTS.has(redirectParsed.hostname)) {
+            reject(new Error(`Redirect host not allowed: ${redirectParsed.hostname}`));
+            return;
+          }
+          httpsGetBuffer(location).then(resolve).catch(reject);
+          return;
         }
         const chunks = [];
         res.on("data", (chunk) => chunks.push(chunk));
@@ -36,27 +52,8 @@ function httpsGet(url) {
   });
 }
 
-function downloadFile(url, dest) {
-  return new Promise((resolve, reject) => {
-    const file = fs.createWriteStream(dest);
-    function fetch(fetchUrl) {
-      https
-        .get(fetchUrl, { headers: { "User-Agent": "juggernaut-npm-installer/1.0" } }, (res) => {
-          if (res.statusCode === 301 || res.statusCode === 302) {
-            return fetch(res.headers.location);
-          }
-          res.pipe(file);
-          file.on("finish", () => file.close(resolve));
-          file.on("error", reject);
-        })
-        .on("error", reject);
-    }
-    fetch(url);
-  });
-}
-
 async function getLatestVersion() {
-  const data = await httpsGet(`https://api.github.com/repos/${REPO}/releases/latest`);
+  const data = await httpsGetBuffer(`https://api.github.com/repos/${REPO}/releases/latest`);
   const release = JSON.parse(data.toString());
   return release.tag_name.replace(/^v/, "");
 }
@@ -68,49 +65,33 @@ async function main() {
   const archive = `juggernaut_${platform}.${ext}`;
   const baseUrl = `https://github.com/${REPO}/releases/download/v${version}`;
 
-  const tmp = fs.mkdtempSync(path.join(os.tmpdir(), "juggernaut-"));
-  const archivePath = path.join(tmp, archive);
-  const checksumPath = path.join(tmp, "checksums.txt");
-
-  try {
-    console.log(`Downloading Juggernaut v${version} (${platform})...`);
-    await downloadFile(`${baseUrl}/${archive}`, archivePath);
-    await downloadFile(`${baseUrl}/checksums.txt`, checksumPath);
-
-    // Verify checksum.
-    const checksums = fs.readFileSync(checksumPath, "utf8");
-    const line = checksums.split("\n").find((l) => l.includes(archive));
-    if (!line) throw new Error(`Checksum not found for ${archive}`);
-    const expected = line.trim().split(/\s+/)[0].toLowerCase();
-    const actual = crypto
-      .createHash("sha256")
-      .update(fs.readFileSync(archivePath))
-      .digest("hex")
-      .toLowerCase();
-    if (actual !== expected) {
-      throw new Error(`Checksum mismatch for ${archive}\n  expected: ${expected}\n  got:      ${actual}`);
-    }
+  console.log(`Downloading Juggernaut v${version} (${platform})...`);
+  const archiveBuf = await httpsGetBuffer(`${baseUrl}/${archive}`);
+  const checksumsBuf = await httpsGetBuffer(`${baseUrl}/checksums.txt`);
 
-    fs.mkdirSync(BIN_DIR, { recursive: true });
-
-    if (ext === "zip") {
-      const AdmZip = require("adm-zip");
-      const zip = new AdmZip(archivePath);
-      zip.extractEntryTo("juggernaut.exe", BIN_DIR, false, true);
-    } else {
-      const tar = require("tar");
-      await tar.x({ file: archivePath, cwd: BIN_DIR });
-      fs.chmodSync(path.join(BIN_DIR, "juggernaut"), 0o755);
-    }
+  const checksums = checksumsBuf.toString("utf8");
+  const line = checksums.split("\n").find((l) => l.includes(archive));
+  if (!line) throw new Error(`Checksum not found for ${archive}`);
+  const expected = line.trim().split(/\s+/)[0].toLowerCase();
+  const actual = crypto.createHash("sha256").update(archiveBuf).digest("hex").toLowerCase();
+  if (actual !== expected) {
+    throw new Error(`Checksum mismatch for ${archive}\n  expected: ${expected}\n  got:      ${actual}`);
+  }
 
-    console.log(`Juggernaut v${version} installed successfully.`);
-    console.log(`Run: juggernaut apply`);
-  } finally {
-    fs.rmSync(tmp, { recursive: true, force: true });
+  if (ext === "zip") {
+    const AdmZip = require("adm-zip");
+    const zip = new AdmZip(archiveBuf);
+    zip.extractEntryTo("juggernaut.exe", BIN_DIR, false, true);
+  } else {
+    const tar = require("tar");
+    await tar.x({ cwd: BIN_DIR, mode: 0o700, strict: true }, Readable.from(archiveBuf));
   }
+
+  console.log(`Juggernaut v${version} installed successfully.`);
+  console.log(`Run: juggernaut apply`);
 }
 
 main().catch((err) => {
   console.error("Installation failed:", err.message);
   process.exit(1);
-});
+});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "juggernaut-bedrock",
-  "version": "4.0.0",
-  "description": "Configure Claude Code to use Amazon Bedrock — cross-platform installer",
+  "version": "4.0.2",
+  "description": "Route Claude Code through Amazon Bedrock in one command — IAM, SSO, or API key. Cross-platform CLI for GenAI developers.",
   "bin": {
     "juggernaut": "./bin/juggernaut"
   },
@@ -9,16 +9,34 @@
     "postinstall": "node install.js"
   },
   "dependencies": {
-    "tar": "^6.0.0",
-    "adm-zip": "^0.5.0"
+    "tar": "7.5.16",
+    "adm-zip": "0.5.17"
   },
   "os": ["darwin", "linux", "win32"],
   "cpu": ["x64", "arm64"],
-  "keywords": ["claude", "bedrock", "aws", "anthropic", "claude-code"],
+  "keywords": [
+    "claude",
+    "claude-code",
+    "bedrock",
+    "amazon-bedrock",
+    "aws",
+    "anthropic",
+    "genai",
+    "ai-coding",
+    "llm",
+    "coding-agent",
+    "cli",
+    "iam",
+    "sso",
+    "developer-tools"
+  ],
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "https://github.com/jpvelasco/juggernaut"
   },
+  "bugs": {
+    "url": "https://github.com/jpvelasco/juggernaut/issues"
+  },
   "homepage": "https://github.com/jpvelasco/juggernaut#readme"
 }