lockpicks 0.7.0 → 0.8.0-go.8

package/bin/lockpick.cjs

@@ -0,0 +1,105 @@
+#!/usr/bin/env node
+// The `lockpicks` npm shim for the Go build of the Lockpick CLI: it finds the
+// platform package npm installed (`@lockpicks/cli-<os>-<cpu>`, an optional
+// dependency) and runs its binary.
+// It has no install scripts. LOCKPICK_LAUNCH tells the binary how it was
+// launched, decided from this script's path exactly as the TypeScript CLI's
+// launchKind decides it from its own.
+'use strict';
+
+const { spawn } = require('node:child_process');
+const { realpathSync } = require('node:fs');
+const { delimiter, join, sep } = require('node:path');
+
+const PACKAGE_DIR = `${sep}lockpicks${sep}`;
+
+function real(path) {
+  try {
+    return realpathSync(path);
+  } catch {
+    return null;
+  }
+}
+
+function launchKind(script, pathEnv) {
+  const self = real(script) ?? script;
+  const parts = self.split(sep);
+  const installed = parts.includes('node_modules');
+  const onPath = pathEnv.split(delimiter).some((dir) => {
+    const found =
+      dir && !dir.split(sep).includes('node_modules')
+        ? real(join(dir, 'lockpick'))
+        : null;
+    return (
+      found !== null &&
+      (found === self || (installed && found.includes(PACKAGE_DIR)))
+    );
+  });
+  if (onPath) return 'path';
+  if (parts.includes('_npx')) return 'npx';
+  return installed ? 'package' : 'checkout';
+}
+
+const target = `@lockpicks/cli-${process.platform}-${process.arch}`;
+let binary;
+try {
+  binary = join(
+    require.resolve(`${target}/package.json`).slice(0, -'package.json'.length),
+    'bin',
+    process.platform === 'win32' ? 'lockpick.exe' : 'lockpick'
+  );
+} catch {
+  // npm installs the binary as an optional dependency. `--omit=optional`,
+  // `--no-optional`, an `omit=optional` npmrc or a mirror without the
+  // platform package skip it; anything else has no build at all.
+  const { version, optionalDependencies } = require('../package.json');
+  process.stderr.write(
+    target in (optionalDependencies ?? {})
+      ? `✖ Lockpick's binary for ${process.platform}-${process.arch} (the npm package ${target}) is not installed.\n` +
+          'npm skips it when optional dependencies are turned off (--omit=optional, --no-optional or omit=optional in an npmrc),\n' +
+          'or when a registry mirror does not carry it. Reinstall with optional dependencies:\n' +
+          `  npm install -g lockpicks@${version} --include=optional   (a global install)\n` +
+          `  npm install lockpicks@${version} --include=optional      (in a project)\n` +
+          `If it is still missing, check \`npm config get omit\` and that your registry serves ${target}.\n`
+      : `✖ Lockpick has no build for ${process.platform}-${process.arch}.\n` +
+          'The Node.js build of the CLI runs anywhere Node.js does: npm install -g lockpicks@0.7\n'
+  );
+  process.exit(1);
+}
+
+// The binary runs as a child so this launcher can pass on what reaches it:
+// SIGINT, SIGTERM and SIGHUP (and Ctrl+Break on Windows) go to the binary,
+// this process exits with the binary's code or signal, and the binary is
+// killed if this process exits first. LOCKPICK_LAUNCHER_PID lets the binary
+// stop on its own when this process is killed outright (SIGKILL, taskkill /F).
+const child = spawn(binary, process.argv.slice(2), {
+  stdio: 'inherit',
+  env: {
+    ...process.env,
+    LOCKPICK_LAUNCH: launchKind(process.argv[1] ?? '', process.env.PATH ?? ''),
+    LOCKPICK_LAUNCHER_PID: String(process.pid),
+  },
+});
+const forwarded = ['SIGINT', 'SIGTERM', 'SIGHUP'];
+if (process.platform === 'win32') forwarded.push('SIGBREAK');
+for (const signal of forwarded)
+  process.on(signal, () => {
+    if (child.exitCode === null && child.signalCode === null)
+      child.kill(signal);
+  });
+process.on('exit', () => {
+  if (child.exitCode === null && child.signalCode === null) child.kill();
+});
+child.on('error', (error) => {
+  process.stderr.write(`✖ Could not start ${binary}: ${error.message}\n`);
+  process.exit(1);
+});
+child.on('exit', (code, signal) => {
+  if (signal) {
+    // Die of the same signal, so the shell sees what the binary saw.
+    for (const name of forwarded) process.removeAllListeners(name);
+    process.kill(process.pid, signal);
+    return;
+  }
+  process.exit(code ?? 1);
+});

package/package.json

@@ -1,7 +1,18 @@
 {
-  "name": "lockpicks",
-  "version": "0.7.0",
+  "bin": {
+    "lockpick": "bin/lockpick.cjs",
+    "lockpicks": "bin/lockpick.cjs"
+  },
   "description": "Lockpick from the terminal: device login, project status, findings, repair briefs, Pulse scans and an MCP server for coding agents",
+  "engines": {
+    "node": "\u003e=20.9.0"
+  },
+  "files": [
+    "bin",
+    "README.md",
+    "LICENSE",
+    "THIRD-PARTY-NOTICES.txt"
+  ],
   "keywords": [
     "lockpick",
     "security",
@@ -9,22 +20,19 @@
     "cli",
     "box"
   ],
-  "type": "module",
-  "bin": {
-    "lockpick": "./dist/lockpick.mjs",
-    "lockpicks": "./dist/lockpick.mjs"
-  },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE",
-    "THIRD-PARTY-NOTICES.txt"
-  ],
-  "dependencies": {
-    "@napi-rs/keyring": "^2.1.0"
+  "license": "SEE LICENSE IN LICENSE",
+  "name": "lockpicks",
+  "optionalDependencies": {
+    "@lockpicks/cli-darwin-arm64": "0.8.0-go.8",
+    "@lockpicks/cli-darwin-x64": "0.8.0-go.8",
+    "@lockpicks/cli-linux-arm": "0.8.0-go.8",
+    "@lockpicks/cli-linux-arm64": "0.8.0-go.8",
+    "@lockpicks/cli-linux-x64": "0.8.0-go.8",
+    "@lockpicks/cli-win32-arm64": "0.8.0-go.8",
+    "@lockpicks/cli-win32-x64": "0.8.0-go.8"
   },
-  "engines": {
-    "node": ">=20.9.0"
+  "publishConfig": {
+    "tag": "next"
   },
-  "license": "SEE LICENSE IN LICENSE"
-}
+  "version": "0.8.0-go.8"
+}

package/dist/local/safe-io-darwin-arm64.provenance.json

@@ -1,37 +0,0 @@
-{
-  "schemaVersion": 1,
-  "platform": "darwin",
-  "arch": "arm64",
-  "nodeApiVersion": 8,
-  "nodeHeadersVersion": "20.9.0",
-  "compiler": "Apple clang version 17.0.0 (clang-1700.0.13.5)",
-  "compilerSha256": "7f30f076d0e9c38f772a76449fca9da8cf97f6a3d43b94c90a00e4f9ce7ad39e",
-  "compilerArguments": [
-    "-std=c11",
-    "-O2",
-    "-Wall",
-    "-Wextra",
-    "-Werror",
-    "-fPIC",
-    "-D_POSIX_C_SOURCE=200809L",
-    "-D_DARWIN_C_SOURCE=1",
-    "-D_DEFAULT_SOURCE=1",
-    "-DNAPI_VERSION=8",
-    "-I<node-headers>",
-    "-bundle",
-    "-undefined",
-    "dynamic_lookup",
-    "<safe-io.c>",
-    "-o",
-    "<native-artifact>"
-  ],
-  "sourceSha256": "90cccce979b991f5c0c33e6c286dc76bcb4e69b85c3c89156e9ec29a3dc606e4",
-  "headers": {
-    "node_api.h": "a5a3e1ff20963d44d92587376202d727d1daf2606dca96c082c876d3a322b5c5",
-    "node_api_types.h": "8d5d854088d5725fec9775510e0aeeeb790a41ad083c49bb721d950b86e6bd61",
-    "js_native_api.h": "94c40b848fca067b0f2bade48ee5cf162fbe379ea6edf6087f94faf41d827461",
-    "js_native_api_types.h": "7d805521f313d58ab00395b55019dbee8fa71cee21ef89e09521998e879a97b4",
-    "node_version.h": "5f8e3f33a99a8a220c3d56409e1e4b4a6143e43b3dff184b78828536b11b9ab8"
-  },
-  "binarySha256": "2d5efe59b1845a66a4516440d900f0fe6c0db7d9c471ddaed941d49071f16f26"
-}

package/dist/local/safe-io-darwin-x64.provenance.json

@@ -1,37 +0,0 @@
-{
-  "schemaVersion": 1,
-  "platform": "darwin",
-  "arch": "x64",
-  "nodeApiVersion": 8,
-  "nodeHeadersVersion": "20.9.0",
-  "compiler": "Apple clang version 17.0.0 (clang-1700.0.13.5)",
-  "compilerSha256": "7f30f076d0e9c38f772a76449fca9da8cf97f6a3d43b94c90a00e4f9ce7ad39e",
-  "compilerArguments": [
-    "-std=c11",
-    "-O2",
-    "-Wall",
-    "-Wextra",
-    "-Werror",
-    "-fPIC",
-    "-D_POSIX_C_SOURCE=200809L",
-    "-D_DARWIN_C_SOURCE=1",
-    "-D_DEFAULT_SOURCE=1",
-    "-DNAPI_VERSION=8",
-    "-I<node-headers>",
-    "-bundle",
-    "-undefined",
-    "dynamic_lookup",
-    "<safe-io.c>",
-    "-o",
-    "<native-artifact>"
-  ],
-  "sourceSha256": "90cccce979b991f5c0c33e6c286dc76bcb4e69b85c3c89156e9ec29a3dc606e4",
-  "headers": {
-    "node_api.h": "a5a3e1ff20963d44d92587376202d727d1daf2606dca96c082c876d3a322b5c5",
-    "node_api_types.h": "8d5d854088d5725fec9775510e0aeeeb790a41ad083c49bb721d950b86e6bd61",
-    "js_native_api.h": "94c40b848fca067b0f2bade48ee5cf162fbe379ea6edf6087f94faf41d827461",
-    "js_native_api_types.h": "7d805521f313d58ab00395b55019dbee8fa71cee21ef89e09521998e879a97b4",
-    "node_version.h": "5f8e3f33a99a8a220c3d56409e1e4b4a6143e43b3dff184b78828536b11b9ab8"
-  },
-  "binarySha256": "5d8f57fc535c3beb540e622affc0acd2ce7a383c98355b8f7493534b03d0d984"
-}

package/dist/local/safe-io-linux-arm64.provenance.json

@@ -1,35 +0,0 @@
-{
-  "schemaVersion": 1,
-  "platform": "linux",
-  "arch": "arm64",
-  "nodeApiVersion": 8,
-  "nodeHeadersVersion": "20.9.0",
-  "compiler": "cc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0",
-  "compilerSha256": "6c3baa3d21eea32b960de4ad2d366d484ce1dd837eb85f4904e656758bfa1a6b",
-  "compilerArguments": [
-    "-std=c11",
-    "-O2",
-    "-Wall",
-    "-Wextra",
-    "-Werror",
-    "-fPIC",
-    "-D_POSIX_C_SOURCE=200809L",
-    "-D_DARWIN_C_SOURCE=1",
-    "-D_DEFAULT_SOURCE=1",
-    "-DNAPI_VERSION=8",
-    "-I<node-headers>",
-    "-shared",
-    "<safe-io.c>",
-    "-o",
-    "<native-artifact>"
-  ],
-  "sourceSha256": "90cccce979b991f5c0c33e6c286dc76bcb4e69b85c3c89156e9ec29a3dc606e4",
-  "headers": {
-    "node_api.h": "a5a3e1ff20963d44d92587376202d727d1daf2606dca96c082c876d3a322b5c5",
-    "node_api_types.h": "8d5d854088d5725fec9775510e0aeeeb790a41ad083c49bb721d950b86e6bd61",
-    "js_native_api.h": "94c40b848fca067b0f2bade48ee5cf162fbe379ea6edf6087f94faf41d827461",
-    "js_native_api_types.h": "7d805521f313d58ab00395b55019dbee8fa71cee21ef89e09521998e879a97b4",
-    "node_version.h": "5f8e3f33a99a8a220c3d56409e1e4b4a6143e43b3dff184b78828536b11b9ab8"
-  },
-  "binarySha256": "5b4d74de3d5227b85ee1c3d19afc97c5f216c754dd74242d57e8c17869f13c5f"
-}

package/dist/local/safe-io-linux-x64.provenance.json

@@ -1,35 +0,0 @@
-{
-  "schemaVersion": 1,
-  "platform": "linux",
-  "arch": "x64",
-  "nodeApiVersion": 8,
-  "nodeHeadersVersion": "20.9.0",
-  "compiler": "cc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0",
-  "compilerSha256": "821af3c74506283c179ca413bb33e6b528805a4dd8a5c09df125e5ad560a9e89",
-  "compilerArguments": [
-    "-std=c11",
-    "-O2",
-    "-Wall",
-    "-Wextra",
-    "-Werror",
-    "-fPIC",
-    "-D_POSIX_C_SOURCE=200809L",
-    "-D_DARWIN_C_SOURCE=1",
-    "-D_DEFAULT_SOURCE=1",
-    "-DNAPI_VERSION=8",
-    "-I<node-headers>",
-    "-shared",
-    "<safe-io.c>",
-    "-o",
-    "<native-artifact>"
-  ],
-  "sourceSha256": "90cccce979b991f5c0c33e6c286dc76bcb4e69b85c3c89156e9ec29a3dc606e4",
-  "headers": {
-    "node_api.h": "a5a3e1ff20963d44d92587376202d727d1daf2606dca96c082c876d3a322b5c5",
-    "node_api_types.h": "8d5d854088d5725fec9775510e0aeeeb790a41ad083c49bb721d950b86e6bd61",
-    "js_native_api.h": "94c40b848fca067b0f2bade48ee5cf162fbe379ea6edf6087f94faf41d827461",
-    "js_native_api_types.h": "7d805521f313d58ab00395b55019dbee8fa71cee21ef89e09521998e879a97b4",
-    "node_version.h": "5f8e3f33a99a8a220c3d56409e1e4b4a6143e43b3dff184b78828536b11b9ab8"
-  },
-  "binarySha256": "4f497e60ffabb4f7c089a054fd086b815a827dbac7071aab6f662ce18dfda264"
-}