juggernaut-bedrock 4.0.4 → 4.2.1

package/README.md

@@ -50,7 +50,7 @@ juggernaut apply --auth=iam
 That one command:
 
 1. **Writes** Bedrock config to `~/.claude/settings.json` (or project scope)
-2. **Sets** model IDs, region, effort level, and `CLAUDE_CODE_USE_BEDROCK=1` — only after credentials check out
+2. **Sets** model IDs, region, effort level, permission mode, and `CLAUDE_CODE_USE_BEDROCK=1` — only after credentials check out
 3. **Installs** a `claude` launcher shim that reads your token from the keychain and execs the real binary
 
 No `.bashrc` edits. No copying API keys into env vars. No "why isn't Bedrock routing?" at 2am.
@@ -87,14 +87,51 @@ No `.bashrc` edits. No copying API keys into env vars. No "why isn't Bedrock rou
 
 ## Default models
 
-| Tier | Model |
-|------|-------|
-| **Primary** | Claude Sonnet 4.6 |
-| **Opus** | Claude Opus 4.7 |
-| **Fast** | Claude Haiku 4.5 |
+| Tier | Model | Global inference profile |
+|------|-------|--------------------------|
+| **Primary** | Claude Sonnet 4.6 | `global.anthropic.claude-sonnet-4-6` |
+| **Opus** | Claude Opus 4.8 | `global.anthropic.claude-opus-4-8` |
+| **Fast** | Claude Haiku 4.5 | `global.anthropic.claude-haiku-4-5-20251001-v1:0` |
 
 Override any tier: `juggernaut apply --auth=iam --model=global.anthropic.claude-sonnet-4-6`
 
+## Effort levels
+
+Controls adaptive thinking depth. Valid values: `low | medium | high | xhigh | max`
+
+```bash
+juggernaut apply --auth=iam --effort=max
+```
+
+Default: `xhigh`. On Opus 4.8/4.7, effort level controls adaptive thinking depth — manual thinking mode is not supported.
+
+## Permission modes
+
+Controls how Claude Code handles tool-use approvals:
+
+| Mode | Behavior |
+|------|----------|
+| `default` | Prompts for each action |
+| `acceptEdits` | Auto-approves file edits |
+| `plan` | Propose only, no execution |
+| `auto` | Agentic safety classifier |
+| `bypassPermissions` | Skip all prompts (containers/VMs only) |
+
+```bash
+juggernaut apply --auth=iam --mode=auto
+```
+
+Auto mode on Bedrock requires `CLAUDE_CODE_ENABLE_AUTO_MODE=1` — Juggernaut sets this automatically.
+
+## Other options
+
+```bash
+--always-thinking       # enable extended thinking by default (alwaysThinkingEnabled)
+--service-tier=flex     # Bedrock service tier: default | flex | priority
+--opusplan              # route /plan to Opus 4.8, execution to Sonnet 4.6
+--scope=project         # write to ./.claude/settings.json instead of ~/.claude/
+```
+
 ## Troubleshooting
 
 Stuck? Start here:
@@ -115,4 +152,4 @@ Full docs, IAM policy, migration guide, and platform notes:
 
 MIT — see [LICENSE](https://github.com/jpvelasco/juggernaut/blob/main/LICENSE).
 
-Juggernaut is an independent tool, not affiliated with Anthropic or Amazon Web Services.
+Juggernaut is an independent tool, not affiliated with Anthropic or Amazon Web Services.

package/index.js

@@ -0,0 +1,54 @@
+"use strict";
+
+const path = require("path");
+const { spawnSync } = require("child_process");
+
+const PACKAGES_DIR = path.join(__dirname, "packages");
+
+const PLATFORM_MAP = {
+  "linux-x64":    "juggernaut-bedrock-linux-x64",
+  "linux-arm64":  "juggernaut-bedrock-linux-arm64",
+  "darwin-x64":   "juggernaut-bedrock-darwin-x64",
+  "darwin-arm64": "juggernaut-bedrock-darwin-arm64",
+  "win32-x64":    "juggernaut-bedrock-win32-x64",
+};
+
+function getPlatformPackage(platform, arch) {
+  return PLATFORM_MAP[`${platform}-${arch}`] || null;
+}
+
+function getBinaryPath(pkgName, platform) {
+  const binaryName = platform === "win32" ? "juggernaut.exe" : "juggernaut";
+  return path.join(PACKAGES_DIR, pkgName, "bin", binaryName);
+}
+
+if (require.main === module) {
+  const pkg = getPlatformPackage(process.platform, process.arch);
+  if (!pkg) {
+    process.stderr.write(
+      `juggernaut-bedrock: unsupported platform ${process.platform}/${process.arch}\n` +
+      `Please file an issue: https://github.com/jpvelasco/juggernaut/issues\n`
+    );
+    process.exit(1);
+  }
+
+  const bin = getBinaryPath(pkg, process.platform);
+  const fs = require("fs");
+  if (!fs.existsSync(bin)) {
+    process.stderr.write(
+      `juggernaut-bedrock: binary not found at ${bin}\n` +
+      `Try reinstalling: npm install -g juggernaut-bedrock\n` +
+      `If the problem persists, file an issue: https://github.com/jpvelasco/juggernaut/issues\n`
+    );
+    process.exit(1);
+  }
+
+  // nosemgrep: javascript.lang.security.detect-child-process
+  const result = spawnSync(bin, process.argv.slice(2), {
+    stdio: "inherit",
+    env: process.env,
+  });
+  process.exit(result.status ?? 1);
+}
+
+module.exports = { getPlatformPackage, getBinaryPath };

package/package.json

@@ -1,15 +1,29 @@
 {
   "name": "juggernaut-bedrock",
-  "version": "4.0.4",
+  "version": "4.2.1",
   "description": "Route Claude Code through Amazon Bedrock in one command — IAM, SSO, or API key. Cross-platform CLI for GenAI developers.",
   "bin": {
-    "juggernaut": "./bin/juggernaut"
+    "juggernaut": "./index.js"
   },
   "scripts": {
-    "postinstall": "node install.js"
+    "test": "node --test index.test.js"
   },
-  "os": ["darwin", "linux", "win32"],
-  "cpu": ["x64", "arm64"],
+  "optionalDependencies": {
+    "juggernaut-bedrock-linux-x64": "4.2.1",
+    "juggernaut-bedrock-linux-arm64": "4.2.1",
+    "juggernaut-bedrock-darwin-x64": "4.2.1",
+    "juggernaut-bedrock-darwin-arm64": "4.2.1",
+    "juggernaut-bedrock-win32-x64": "4.2.1"
+  },
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
   "keywords": [
     "claude",
     "claude-code",
@@ -29,10 +43,10 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/jpvelasco/juggernaut"
+    "url": "git+https://github.com/jpvelasco/juggernaut.git"
   },
   "bugs": {
     "url": "https://github.com/jpvelasco/juggernaut/issues"
   },
   "homepage": "https://github.com/jpvelasco/juggernaut#readme"
-}
+}

package/install.js

@@ -1,157 +0,0 @@
-"use strict";
-
-const https = require("https");
-const fs = require("fs");
-const path = require("path");
-const os = require("os");
-const crypto = require("crypto");
-const { execFile, execFileSync } = require("child_process");
-const { promisify } = require("util");
-
-const execFileAsync = promisify(execFile);
-
-const REPO = "jpvelasco/juggernaut";
-const BIN_DIR = path.join(__dirname, "bin");
-const ALLOWED_HOSTS = new Set([
-  "github.com",
-  "api.github.com",
-  "release-assets.githubusercontent.com"
-]);
-
-function getPlatform() {
-  const osMap = { darwin: "darwin", linux: "linux", win32: "windows" };
-  const archMap = { x64: "amd64", arm64: "arm64" };
-  const p = osMap[process.platform];
-  const a = archMap[process.arch];
-  if (!p || !a) {
-    throw new Error(`Unsupported platform: ${process.platform}/${process.arch}`);
-  }
-  return { os: p, arch: a, platform: `${p}_${a}` };
-}
-
-function httpsGetBuffer(url) {
-  const parsed = new URL(url);
-  if (!ALLOWED_HOSTS.has(parsed.hostname)) {
-    throw new Error(`URL host not allowed: ${parsed.hostname}`);
-  }
-  return new Promise((resolve, reject) => {
-    https
-      .get(url, { headers: { "User-Agent": "juggernaut-npm-installer/1.0" } }, (res) => {
-        if (res.statusCode === 301 || res.statusCode === 302) {
-          const location = res.headers.location;
-          const redirectParsed = new URL(location);
-          if (!ALLOWED_HOSTS.has(redirectParsed.hostname)) {
-            reject(new Error(`Redirect host not allowed: ${redirectParsed.hostname}`));
-            return;
-          }
-          httpsGetBuffer(location).then(resolve).catch(reject);
-          return;
-        }
-        const chunks = [];
-        res.on("data", (chunk) => chunks.push(chunk));
-        res.on("end", () => resolve(Buffer.concat(chunks)));
-        res.on("error", reject);
-      })
-      .on("error", reject);
-  });
-}
-
-async function getLatestVersion() {
-  const data = await httpsGetBuffer(`https://api.github.com/repos/${REPO}/releases/latest`);
-  const release = JSON.parse(data.toString());
-  return release.tag_name.replace(/^v/, "");
-}
-
-function pickArchive(platform, checksumsText) {
-  const tarArchive = `juggernaut_${platform}.tar.gz`;
-  if (checksumsText.includes(tarArchive)) {
-    return { name: tarArchive, kind: "tar.gz" };
-  }
-  const zipArchive = `juggernaut_${platform}.zip`;
-  if (process.platform === "win32" && checksumsText.includes(zipArchive)) {
-    return { name: zipArchive, kind: "zip" };
-  }
-  throw new Error(`No supported archive found in release checksums for ${platform}`);
-}
-
-function extractTarGz(archiveBuf) {
-  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "juggernaut-install-"));
-  const archivePath = path.join(tmpDir, "archive.tar.gz");
-  try {
-    fs.writeFileSync(archivePath, archiveBuf);
-    fs.mkdirSync(BIN_DIR, { recursive: true });
-    try {
-      execFileSync("tar", ["-xzf", archivePath, "-C", BIN_DIR], { stdio: "pipe" });
-    } catch (err) {
-      if (err.code === "ENOENT") {
-        throw new Error(
-          "tar not found on PATH. On Windows, use Windows 10 version 1803 or later (includes tar.exe)."
-        );
-      }
-      const detail = err.stderr ? err.stderr.toString().trim() : err.message;
-      throw new Error(`tar extraction failed: ${detail}`);
-    }
-    if (process.platform !== "win32") {
-      const binPath = path.join(BIN_DIR, "juggernaut");
-      if (fs.existsSync(binPath)) {
-        fs.chmodSync(binPath, 0o700);
-      }
-    }
-  } finally {
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-  }
-}
-
-async function extractZip(archiveBuf) {
-  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "juggernaut-install-"));
-  const archivePath = path.join(tmpDir, "archive.zip");
-  try {
-    fs.writeFileSync(archivePath, archiveBuf);
-    fs.mkdirSync(BIN_DIR, { recursive: true });
-    const script = [
-      "$ErrorActionPreference = 'Stop'",
-      `Expand-Archive -LiteralPath '${archivePath.replace(/'/g, "''")}' -DestinationPath '${BIN_DIR.replace(/'/g, "''")}' -Force`
-    ].join("; ");
-    await execFileAsync(
-      "powershell",
-      ["-NoProfile", "-NonInteractive", "-Command", script],
-      { stdio: "pipe" }
-    );
-  } finally {
-    fs.rmSync(tmpDir, { recursive: true, force: true });
-  }
-}
-
-async function main() {
-  const { platform } = getPlatform();
-  const version = await getLatestVersion();
-  const baseUrl = `https://github.com/${REPO}/releases/download/v${version}`;
-  const checksumsBuf = await httpsGetBuffer(`${baseUrl}/checksums.txt`);
-  const checksums = checksumsBuf.toString("utf8");
-  const { name: archive, kind } = pickArchive(platform, checksums);
-
-  console.log(`Downloading Juggernaut v${version} (${platform})...`);
-  const archiveBuf = await httpsGetBuffer(`${baseUrl}/${archive}`);
-
-  const line = checksums.split("\n").find((l) => l.includes(archive));
-  if (!line) throw new Error(`Checksum not found for ${archive}`);
-  const expected = line.trim().split(/\s+/)[0].toLowerCase();
-  const actual = crypto.createHash("sha256").update(archiveBuf).digest("hex").toLowerCase();
-  if (actual !== expected) {
-    throw new Error(`Checksum mismatch for ${archive}\n  expected: ${expected}\n  got:      ${actual}`);
-  }
-
-  if (kind === "zip") {
-    await extractZip(archiveBuf);
-  } else {
-    extractTarGz(archiveBuf);
-  }
-
-  console.log(`Juggernaut v${version} installed successfully.`);
-  console.log(`Run: juggernaut apply`);
-}
-
-main().catch((err) => {
-  console.error("Installation failed:", err.message);
-  process.exit(1);
-});