openswarmlayer 0.1.1-beta.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Stephen Phillips
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,54 @@
+# OpenSwarmLayer npm installer
+
+**Technical test beta — not ready for production.** This small, dependency-free
+package installs the native Rust/Tauri model-sharing app. Node.js does not run
+the model-sharing engine. Requires Node.js 20 or newer.
+
+Once published to npm under the `beta` dist-tag:
+
+```sh
+npx openswarmlayer@beta install
+```
+
+Registry publication is pending authenticated maintainer access. Until then,
+use the npm tarball on the GitHub beta release:
+
+```sh
+npx --package=https://github.com/HappyMonkeyAI/OpenSwarmLayer/releases/download/v0.1.1-beta.1/openswarmlayer-0.1.1-beta.2.tgz openswarmlayer install
+```
+
+Replace `install` with `download` to fetch without installing, or with `--help`
+to inspect supported options. On Linux, add `--format appimage` after `download`
+for the portable package. This URL points to a fixed wrapper version.
+
+Windows x64 opens the normal unsigned installer. Debian/Ubuntu-family Linux x64
+uses apt/sudo and requires glibc 2.39 or newer. Close the app before upgrading.
+macOS, ARM and musl systems are unsupported. Full Linux desktop, tray and sharing
+acceptance is incomplete.
+
+Download without installing:
+
+```sh
+npx openswarmlayer@beta download
+npx openswarmlayer@beta download --format appimage
+```
+
+AppImage download is Linux-only. Make the downloaded file executable with
+`chmod +x <file>` and run it; use `--appimage-extract-and-run` if FUSE is unavailable.
+No native application is installed by `npm install` or the help command. There
+are no installation lifecycle hooks. Installation is an explicit CLI action.
+
+Each npm version pins a native GitHub release, exact sizes and SHA-256 hashes.
+Files are downloaded to a temporary directory and checked before an installer
+can run. Hashes protect against mismatched release assets; trusting this npm
+package and its publisher remains necessary. The wrapper does not configure
+firewalls, model caches, signing keys, services or automatic application launch.
+
+Current native release: `v0.1.1-beta.1`, source
+`dec8e5099e782c9ddd6be75e8fecb3d65907989f`. The npm wrapper may be versioned
+independently; it does not rebuild the native app. Publish beta builds with
+`npm publish --tag beta`, keeping the stable `latest` channel unset.
+
+See the [project README](https://github.com/HappyMonkeyAI/OpenSwarmLayer#readme)
+for importing, downloading and re-sharing GGUF/Safetensors models. Software
+license is MIT; model files retain their own licenses.

package/bin/openswarmlayer.cjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+'use strict';
+const { main } = require('../lib/install.cjs');
+main(process.argv.slice(2)).catch((error) => {
+  console.error(`OpenSwarmLayer: ${error.message}`);
+  process.exitCode = 1;
+});

package/lib/install.cjs

@@ -0,0 +1,156 @@
+'use strict';
+const fs = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { spawn } = require('node:child_process');
+const release = require('../release.json');
+
+const HELP = `OpenSwarmLayer ${release.tag} - technical test beta; not ready for production.
+
+Usage: openswarmlayer install [--format exe|deb]
+       openswarmlayer download [--format exe|deb|appimage]
+       openswarmlayer --help
+
+Windows x64 defaults to the normal unsigned EXE installer.
+Linux x64 defaults to DEB with apt/sudo; installation requires glibc 2.39+.
+AppImage is download-only; make it executable and run it yourself.
+No app is installed when you merely install this npm package or request help.
+The wrapper requires Node.js 20+ and downloads pinned native GitHub release files.
+`;
+
+function parseArgs(args) {
+  if (!args.length || (args.length === 1 && ['--help', '-h'].includes(args[0]))) return { action: 'help' };
+  if (!['install', 'download'].includes(args[0])) throw new Error('Choose install or download. Use --help for instructions.');
+  let format;
+  for (let i = 1; i < args.length; i++) {
+    if (args[i] !== '--format' || format || !['exe', 'deb', 'appimage'].includes(args[i + 1])) {
+      throw new Error('Unknown or incomplete argument. Use --help for instructions.');
+    }
+    format = args[++i];
+  }
+  if (args[0] === 'install' && format === 'appimage') throw new Error('Use download --format appimage, then run the portable app manually.');
+  return { action: args[0], format };
+}
+
+function selectAsset(format, platform = process.platform, arch = process.arch) {
+  if (arch !== 'x64' || !['win32', 'linux'].includes(platform)) throw new Error('Only Windows x64 and Linux x64 releases are available.');
+  format = format || (platform === 'win32' ? 'exe' : 'deb');
+  const asset = release.assets[format];
+  if (!asset || asset.platform !== platform) throw new Error('That package format is not available for this operating system.');
+  return asset;
+}
+
+function checkLinuxInstall(runtimeGlibc) {
+  if (!/^\d+\.\d+$/.test(runtimeGlibc || '')) throw new Error('Linux installation requires a glibc system (2.39+); musl is unsupported.');
+  const [major, minor] = runtimeGlibc.split('.').map(Number);
+  if (major < 2 || (major === 2 && minor < 39)) throw new Error(`This native beta requires glibc 2.39+, but this system has ${runtimeGlibc}.`);
+}
+
+function checkedUrl(value) {
+  const url = new URL(value);
+  const allowedHosts = ['github.com', 'release-assets.githubusercontent.com', 'objects.githubusercontent.com'];
+  if (url.protocol !== 'https:' || url.username || url.password || (url.port && url.port !== '443') || !allowedHosts.includes(url.hostname)) {
+    throw new Error('Release download redirected outside the allowed HTTPS hosts.');
+  }
+  return url;
+}
+
+async function releaseResponse(url, fetchImpl = fetch) {
+  for (let redirects = 0; redirects <= 5; redirects++) {
+    const current = checkedUrl(url);
+    const response = await fetchImpl(current, {
+      redirect: 'manual', signal: AbortSignal.timeout(600000),
+      headers: { 'User-Agent': 'OpenSwarmLayer-beta-installer', 'Accept-Encoding': 'identity' },
+    });
+    if ([301, 302, 303, 307, 308].includes(response.status)) {
+      const location = response.headers.get('location');
+      if (response.body) await response.body.cancel();
+      if (!location) throw new Error('Release redirect has no destination.');
+      url = new URL(location, current).href;
+      continue;
+    }
+    if (!response.ok) { if (response.body) await response.body.cancel(); throw new Error(`Release download returned HTTP ${response.status}.`); }
+    return response;
+  }
+  throw new Error('Too many release download redirects.');
+}
+
+async function downloadAsset(asset, { fetchImpl = fetch, tempRoot = os.tmpdir() } = {}) {
+  if (!/^OpenSwarmLayer-[A-Za-z0-9._-]+$/.test(asset.name) || !/^[a-f0-9]{64}$/.test(asset.sha256) || !Number.isSafeInteger(asset.size) || asset.size <= 0 || asset.size > 256 * 1024 * 1024) {
+    throw new Error('Invalid pinned release metadata.');
+  }
+  const folder = await fs.mkdtemp(path.join(tempRoot, 'OpenSwarmLayer-npx-'));
+  const partial = path.join(folder, `${asset.name}.partial`);
+  const output = path.join(folder, asset.name);
+  let file;
+  try {
+    const url = `https://github.com/HappyMonkeyAI/OpenSwarmLayer/releases/download/${release.tag}/${asset.name}`;
+    const response = await releaseResponse(url, fetchImpl);
+    if (!response.body) throw new Error('Release download has no body.');
+    file = await fs.open(partial, 'wx', 0o600);
+    const digest = crypto.createHash('sha256');
+    let size = 0;
+    for await (const bytes of response.body) {
+      size += bytes.length;
+      if (size > asset.size) throw new Error('Release download exceeds its pinned size.');
+      digest.update(bytes);
+      // FileHandle.write can write fewer bytes than requested.
+      let offset = 0;
+      while (offset < bytes.length) {
+        const written = await file.write(bytes, offset, bytes.length - offset);
+        if (!written.bytesWritten) throw new Error('Could not write the downloaded package.');
+        offset += written.bytesWritten;
+      }
+    }
+    if (size !== asset.size || digest.digest('hex') !== asset.sha256) throw new Error('Release size/checksum mismatch; installation refused.');
+    await file.close(); file = undefined;
+    await fs.rename(partial, output);
+    return { file: output, folder };
+  } catch (error) {
+    if (file) await file.close();
+    await fs.unlink(partial).catch(() => {});
+    await fs.rmdir(folder).catch(() => {});
+    throw error;
+  }
+}
+
+function runProcess(command, args) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(command, args, { stdio: 'inherit', shell: false });
+    child.once('error', reject);
+    child.once('close', (code, signal) => code === 0 ? resolve() : reject(new Error(`Installer exited ${signal || code}.`)));
+  });
+}
+
+async function main(args, dependencies = {}) {
+  const options = parseArgs(args);
+  const log = dependencies.log || console.log;
+  if (options.action === 'help') { log(HELP); return; }
+  const platform = dependencies.platform || process.platform;
+  const asset = selectAsset(options.format, platform, dependencies.arch || process.arch);
+  if (options.action === 'install' && platform === 'linux') {
+    checkLinuxInstall(dependencies.glibc || process.report.getReport().header.glibcVersionRuntime);
+  }
+  log(`OpenSwarmLayer ${release.tag} - technical test beta; not ready for production.`);
+  log(platform === 'win32' ? 'Unsigned Windows package. Close the app before installing.' : 'Experimental Linux package; requires glibc 2.39+. Native desktop acceptance remains incomplete.');
+  const downloaded = await (dependencies.download || downloadAsset)(asset);
+  log(`SHA-256 verified: ${asset.name}`);
+  if (options.action === 'download') { log(`Verified package saved to ${downloaded.file}`); return downloaded.file; }
+  try {
+    const run = dependencies.run || runProcess;
+    if (platform === 'win32') await run(downloaded.file, []);
+    else {
+      await fs.chmod(downloaded.folder, 0o755);
+      await fs.chmod(downloaded.file, 0o644);
+      const root = process.getuid && process.getuid() === 0;
+      await run(root ? 'apt-get' : 'sudo', root ? ['install', downloaded.file] : ['apt-get', 'install', downloaded.file]);
+    }
+    log('Installer finished. Launch OpenSwarmLayer to begin your test.');
+  } finally {
+    await fs.unlink(downloaded.file);
+    await fs.rmdir(downloaded.folder);
+  }
+}
+
+module.exports = { main, parseArgs, selectAsset, checkLinuxInstall, checkedUrl, releaseResponse, downloadAsset };

package/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "openswarmlayer",
+  "version": "0.1.1-beta.2",
+  "description": "Install the OpenSwarmLayer native model-sharing app. Technical test beta; not ready for production.",
+  "license": "MIT",
+  "engines": { "node": ">=20" },
+  "bin": { "openswarmlayer": "bin/openswarmlayer.cjs" },
+  "files": ["bin", "lib", "release.json", "README.md", "LICENSE"],
+  "scripts": {
+    "test": "node --test test/*.test.cjs",
+    "prepublishOnly": "npm test"
+  },
+  "repository": { "type": "git", "url": "git+https://github.com/HappyMonkeyAI/OpenSwarmLayer.git", "directory": "npm" },
+  "homepage": "https://github.com/HappyMonkeyAI/OpenSwarmLayer#readme",
+  "bugs": { "url": "https://github.com/HappyMonkeyAI/OpenSwarmLayer/issues" },
+  "keywords": ["llm", "gguf", "safetensors", "p2p", "tauri", "beta"],
+  "publishConfig": { "access": "public", "tag": "beta", "registry": "https://registry.npmjs.org/" }
+}

package/release.json

@@ -0,0 +1,24 @@
+{
+  "tag": "v0.1.1-beta.1",
+  "sourceCommit": "dec8e5099e782c9ddd6be75e8fecb3d65907989f",
+  "assets": {
+    "exe": {
+      "platform": "win32",
+      "name": "OpenSwarmLayer-v0.1.1-beta.1-windows-x64-setup.exe",
+      "size": 5678246,
+      "sha256": "880bf10491259d2568f43b203bd6611524d06239922cf7daab41e693c0f94e3d"
+    },
+    "deb": {
+      "platform": "linux",
+      "name": "OpenSwarmLayer-v0.1.1-beta.1-linux-amd64.deb",
+      "size": 11145498,
+      "sha256": "1cc92bd27bd285581633cf5a60be31aa692bcf9e10a24b2848662e7c2fa999c9"
+    },
+    "appimage": {
+      "platform": "linux",
+      "name": "OpenSwarmLayer-v0.1.1-beta.1-linux-x86_64.AppImage",
+      "size": 85273080,
+      "sha256": "a6be8295b1b11f17d8f0f750a45eebc1e384ba26623cb92727bb72650cf62ac6"
+    }
+  }
+}