juggernaut-bedrock 4.2.1 → 4.2.3

package/index.js

@@ -1,54 +1,92 @@
+#!/usr/bin/env node
 "use strict";
 
-const path = require("path");
-const { spawnSync } = require("child_process");
+var path = require("path");
+var child_process = require("child_process");
+var fs = require("fs");
 
-const PACKAGES_DIR = path.join(__dirname, "packages");
-
-const PLATFORM_MAP = {
-  "linux-x64":    "juggernaut-bedrock-linux-x64",
-  "linux-arm64":  "juggernaut-bedrock-linux-arm64",
-  "darwin-x64":   "juggernaut-bedrock-darwin-x64",
+var PLATFORM_MAP = {
+  "linux-x64": "juggernaut-bedrock-linux-x64",
+  "linux-arm64": "juggernaut-bedrock-linux-arm64",
+  "darwin-x64": "juggernaut-bedrock-darwin-x64",
   "darwin-arm64": "juggernaut-bedrock-darwin-arm64",
-  "win32-x64":    "juggernaut-bedrock-win32-x64",
+  "win32-x64": "juggernaut-bedrock-win32-x64"
 };
 
+var VALID_PACKAGES = [
+  "juggernaut-bedrock-linux-x64",
+  "juggernaut-bedrock-linux-arm64",
+  "juggernaut-bedrock-darwin-x64",
+  "juggernaut-bedrock-darwin-arm64",
+  "juggernaut-bedrock-win32-x64"
+];
+
+/**
+ * @param {string} platform
+ * @param {string} arch
+ * @returns {string|void}
+ */
 function getPlatformPackage(platform, arch) {
-  return PLATFORM_MAP[`${platform}-${arch}`] || null;
+  return PLATFORM_MAP[platform + "-" + arch] || void 0;
+}
+
+function containsPackage(pkgName) {
+  for (var i = 0; i < VALID_PACKAGES.length; i++) {
+    if (VALID_PACKAGES[i] === pkgName) {
+      return true;
+    }
+  }
+  return false;
+}
+
+/**
+ * @param {string} pkgName
+ * @param {string} platform
+ * @returns {string}
+ */
+function resolvePkgDir(pkgName) {
+  try {
+    return path.dirname(require.resolve(pkgName + "/package.json"));
+  } catch (_) {
+    return path.join(__dirname, "packages", pkgName); // nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal
+  }
 }
 
 function getBinaryPath(pkgName, platform) {
-  const binaryName = platform === "win32" ? "juggernaut.exe" : "juggernaut";
-  return path.join(PACKAGES_DIR, pkgName, "bin", binaryName);
+  if (!containsPackage(pkgName)) {
+    throw new Error("unexpected package name: " + pkgName);
+  }
+  var binaryName = platform === "win32" ? "juggernaut.exe" : "juggernaut";
+  return path.join(resolvePkgDir(pkgName), "bin", binaryName); // nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal
 }
 
 if (require.main === module) {
-  const pkg = getPlatformPackage(process.platform, process.arch);
+  var pkg = getPlatformPackage(process.platform, process.arch);
   if (!pkg) {
     process.stderr.write(
-      `juggernaut-bedrock: unsupported platform ${process.platform}/${process.arch}\n` +
-      `Please file an issue: https://github.com/jpvelasco/juggernaut/issues\n`
+      "juggernaut-bedrock: unsupported platform " + process.platform + "/" + process.arch + "\n" +
+      "Please file an issue: https://github.com/jpvelasco/juggernaut/issues\n"
     );
     process.exit(1);
   }
 
-  const bin = getBinaryPath(pkg, process.platform);
-  const fs = require("fs");
+  var bin = getBinaryPath(pkg, process.platform);
+  // nosemgrep: javascript_pathtraversal_rule-non-literal-fs-filename, javascript.lang.security.audit.detect-non-literal-fs-filename
   if (!fs.existsSync(bin)) {
     process.stderr.write(
-      `juggernaut-bedrock: binary not found at ${bin}\n` +
-      `Try reinstalling: npm install -g juggernaut-bedrock\n` +
-      `If the problem persists, file an issue: https://github.com/jpvelasco/juggernaut/issues\n`
+      "juggernaut-bedrock: binary not found at " + bin + "\n" +
+      "Try reinstalling: npm install -g juggernaut-bedrock\n" +
+      "If the problem persists, file an issue: https://github.com/jpvelasco/juggernaut/issues\n"
     );
     process.exit(1);
   }
 
-  // nosemgrep: javascript.lang.security.detect-child-process
-  const result = spawnSync(bin, process.argv.slice(2), {
+  // nosemgrep: javascript.lang.security.detect-child-process, javascript_exec_rule-child-process
+  var result = child_process.spawnSync(bin, process.argv.slice(2), {
     stdio: "inherit",
-    env: process.env,
+    env: process.env
   });
-  process.exit(result.status ?? 1);
+  process.exit(result.status !== null ? result.status : 1);
 }
 
-module.exports = { getPlatformPackage, getBinaryPath };
+module.exports = { getPlatformPackage: getPlatformPackage, getBinaryPath: getBinaryPath };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "juggernaut-bedrock",
-  "version": "4.2.1",
+  "version": "4.2.3",
   "description": "Route Claude Code through Amazon Bedrock in one command — IAM, SSO, or API key. Cross-platform CLI for GenAI developers.",
   "bin": {
     "juggernaut": "./index.js"
@@ -9,11 +9,11 @@
     "test": "node --test index.test.js"
   },
   "optionalDependencies": {
-    "juggernaut-bedrock-linux-x64": "4.2.1",
-    "juggernaut-bedrock-linux-arm64": "4.2.1",
-    "juggernaut-bedrock-darwin-x64": "4.2.1",
-    "juggernaut-bedrock-darwin-arm64": "4.2.1",
-    "juggernaut-bedrock-win32-x64": "4.2.1"
+    "juggernaut-bedrock-linux-x64": "4.2.3",
+    "juggernaut-bedrock-linux-arm64": "4.2.3",
+    "juggernaut-bedrock-darwin-x64": "4.2.3",
+    "juggernaut-bedrock-darwin-arm64": "4.2.3",
+    "juggernaut-bedrock-win32-x64": "4.2.3"
   },
   "os": [
     "darwin",
@@ -40,6 +40,9 @@
     "sso",
     "developer-tools"
   ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",