private-ai-proxy 0.3.0 → 0.4.0-beta.1-darwin-arm64

package/README.md

@@ -1,45 +1,3 @@
-# Private AI Proxy
+# private-ai-proxy 0.4.0-beta.1-darwin-arm64
 
-Private AI Proxy runs AI coding agents through a local, user-owned gateway that
-verifies confidential-computing evidence before forwarding requests. This
-package installs its `pap` CLI together with the per-user backend service and
-the agent credential helper.
-
-## Install
-
-```sh
-npm install --global private-ai-proxy
-```
-
-It runs on macOS, Windows, and Linux with glibc 2.35 or newer (not musl), each
-on arm64 and x64. Do not install with `--omit=optional`, and install a tag or
-an exact version rather than a prerelease range. The
-[install guide](https://github.com/Dstack-TEE/private-ai-gateway/blob/main/docs/private-ai-proxy-install.md#npm)
-explains both and lists other ways to install, including the desktop app.
-
-## Use
-
-```sh
-pap --help
-pap service start
-pap service status
-```
-
-`pap` is the preferred command. `private-ai-proxy` and the legacy `aci` run the
-same CLI.
-
-The service can also serve its management UI to a browser on `127.0.0.1`. It is
-off by default:
-
-```sh
-pap settings set web-ui.enabled true
-pap web-ui password show    # the generated sign-in password
-pap app open --web
-```
-
-[Web UI](https://github.com/Dstack-TEE/private-ai-gateway/blob/main/apps/desktop/docs/cli.md#web-ui)
-covers the password, access from another machine, and the security model.
-[The CLI reference](https://github.com/Dstack-TEE/private-ai-gateway/blob/main/apps/desktop/docs/cli.md)
-documents every command.
-
-Source and release notes: https://github.com/Dstack-TEE/private-ai-gateway
+The native darwin-arm64 binaries of [private-ai-proxy](https://www.npmjs.com/package/private-ai-proxy). Install `private-ai-proxy` instead of this version.

package/package.json

@@ -1,34 +1,23 @@
 {
   "name": "private-ai-proxy",
-  "version": "0.3.0",
-  "description": "Local verifying gateway for confidential AI inference",
+  "version": "0.4.0-beta.1-darwin-arm64",
+  "description": "Native Private AI Proxy binaries for darwin-arm64",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Dstack-TEE/private-ai-gateway.git",
-    "directory": "apps/desktop/npm/private-ai-proxy"
+    "url": "git+https://github.com/Dstack-TEE/private-ai-gateway.git"
   },
   "homepage": "https://github.com/Dstack-TEE/private-ai-gateway#readme",
-  "bugs": "https://github.com/Dstack-TEE/private-ai-gateway/issues",
-  "bin": {
-    "private-ai-proxy": "bin/private-ai-proxy.cjs",
-    "pap": "bin/private-ai-proxy.cjs",
-    "aci": "bin/aci.cjs"
-  },
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "arm64"
+  ],
+  "preferUnplugged": true,
   "files": [
-    "bin"
+    "vendor"
   ],
-  "engines": {
-    "node": ">=18"
-  },
-  "optionalDependencies": {
-    "private-ai-proxy-darwin-arm64": "npm:private-ai-proxy@0.3.0-darwin-arm64",
-    "private-ai-proxy-darwin-x64": "npm:private-ai-proxy@0.3.0-darwin-x64",
-    "private-ai-proxy-linux-arm64": "npm:private-ai-proxy@0.3.0-linux-arm64",
-    "private-ai-proxy-linux-x64": "npm:private-ai-proxy@0.3.0-linux-x64",
-    "private-ai-proxy-win32-arm64": "npm:private-ai-proxy@0.3.0-win32-arm64",
-    "private-ai-proxy-win32-x64": "npm:private-ai-proxy@0.3.0-win32-x64"
-  },
   "publishConfig": {
     "access": "public"
   }

package/bin/aci.cjs

@@ -1,6 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-
-// npm's Windows shims run a bin script without the name it was invoked by, so
-// the legacy `aci` command has its own entry that passes that name on.
-require("./private-ai-proxy.cjs").run("aci");

package/bin/private-ai-proxy.cjs

@@ -1,136 +0,0 @@
-#!/usr/bin/env node
-"use strict";
-
-const { spawnSync } = require("node:child_process");
-const { accessSync, constants, realpathSync } = require("node:fs");
-const path = require("node:path");
-
-// Each target's native binaries are a version of this package, such as
-// private-ai-proxy@1.2.3-linux-x64, installed through an optional dependency
-// alias such as private-ai-proxy-linux-x64. The package manager installs only
-// the one whose os/cpu/libc match, as for @openai/codex's bin/codex.js.
-const supportedTargets = [
-  "darwin-arm64",
-  "darwin-x64",
-  "linux-arm64",
-  "linux-x64",
-  "win32-arm64",
-  "win32-x64",
-];
-const muslMessage =
-  "Linux builds require glibc 2.35 or newer; musl-based distributions such as Alpine are not supported";
-
-function platformPackage(platform, arch) {
-  const target = `${platform}-${arch}`;
-  if (!supportedTargets.includes(target)) return undefined;
-  return {
-    alias: `private-ai-proxy-${target}`,
-    target,
-    executable: `vendor/private-ai-proxy${platform === "win32" ? ".exe" : ""}`,
-  };
-}
-
-// The global reinstall command for the package manager that owns this copy,
-// detected from its install path as bin/codex.js does.
-function reinstallCommand(version) {
-  const spec = `private-ai-proxy@${version}`;
-  let location = __dirname;
-  try {
-    location = realpathSync(__dirname);
-  } catch {
-    // Fall back to the lexical path.
-  }
-  if (/[\\/]\.bun[\\/]install[\\/]global[\\/]/.test(location)) return `bun add --global ${spec}`;
-  if (/[\\/]\.pnpm[\\/]/.test(location)) return `pnpm add --global ${spec}`;
-  return `npm install --global ${spec} --include=optional`;
-}
-
-// Only consulted after a failure: npm skips the glibc package on musl, and
-// package managers that ignore `libc` install a binary musl cannot load.
-function isLinuxWithoutGlibc() {
-  if (process.platform !== "linux") return false;
-  try {
-    process.report.excludeNetwork = true;
-    return !process.report.getReport().header.glibcVersionRuntime;
-  } catch {
-    return false;
-  }
-}
-
-function fail(message) {
-  console.error(`private-ai-proxy: ${message}`);
-  process.exitCode = 1;
-}
-
-// `command` becomes the binary's argv[0], as a symlink named after it would.
-function main(command) {
-  const target = `${process.platform}-${process.arch}`;
-  const platform = platformPackage(process.platform, process.arch);
-  if (!platform) {
-    fail(`unsupported platform ${target}; supported platforms are ${supportedTargets.join(", ")}`);
-    return;
-  }
-
-  const version = require("../package.json").version;
-  const expectedVersion = `${version}-${platform.target}`;
-  let manifestPath;
-  try {
-    manifestPath = require.resolve(`${platform.alias}/package.json`);
-  } catch (error) {
-    if (error?.code !== "MODULE_NOT_FOUND") throw error;
-    fail(isLinuxWithoutGlibc()
-      ? muslMessage
-      : `the native binaries for ${target} (private-ai-proxy@${expectedVersion}) are not installed. `
-        + "Optional dependencies were omitted (--omit=optional or --no-optional) or their download failed. "
-        + `Reinstall with: ${reinstallCommand(version)}`);
-    return;
-  }
-
-  // An update that could not replace the native package, for example because
-  // a running process locked its files on Windows, leaves an older version.
-  const installedVersion = require(manifestPath).version;
-  if (installedVersion !== expectedVersion) {
-    fail(`the installed native binaries are private-ai-proxy@${installedVersion}, expected ${expectedVersion}. `
-      + `Stop any running private-ai-proxy processes, then reinstall with: ${reinstallCommand(version)}`);
-    return;
-  }
-
-  const executable = path.join(path.dirname(manifestPath), platform.executable);
-  try {
-    accessSync(executable, process.platform === "win32" ? constants.F_OK : constants.X_OK);
-  } catch {
-    fail(`the native executable is missing or not executable in ${path.dirname(manifestPath)}. `
-      + `Reinstall with: ${reinstallCommand(version)}`);
-    return;
-  }
-
-  const result = spawnSync(executable, process.argv.slice(2), {
-    argv0: command,
-    stdio: "inherit",
-    windowsHide: false,
-  });
-  if (result.error) {
-    if (result.error.code === "ENOENT" && isLinuxWithoutGlibc()) {
-      fail(muslMessage);
-      return;
-    }
-    throw result.error;
-  }
-  if (result.signal) {
-    process.kill(process.pid, result.signal);
-    return;
-  }
-  process.exitCode = result.status ?? 1;
-}
-
-function run(command) {
-  try {
-    main(command);
-  } catch (error) {
-    fail(error instanceof Error ? error.message : String(error));
-  }
-}
-
-if (require.main === module) run("private-ai-proxy");
-
-module.exports = { platformPackage, run, supportedTargets };