rankmycode 0.1.4

package/LICENSE

@@ -0,0 +1,19 @@
+Copyright (c) 2026 Jatin Jain. All rights reserved.
+
+This package is a launcher: it downloads, verifies and runs the Builder
+collector. It contains no collector source code.
+
+Permission is granted to install and run this package for its intended purpose,
+which is to install and run the Builder collector on your own machine.
+
+That is the whole of the permission granted. No licence is granted, expressly or
+by implication, to:
+
+  - copy, redistribute, sell or sublicense this package;
+  - create derivative works from it;
+  - use it, or anything described in it, to design, build, train on, or
+    reproduce the behaviour of the Builder collector or any part of the service
+    it communicates with.
+
+No licence to any underlying source code is granted or implied. The collector is
+proprietary and its source is not public.

package/README.md

@@ -0,0 +1,32 @@
+# rankmycode
+
+**Rank yourself as a coder. Measured.**
+
+```sh
+npx rankmycode
+```
+
+Reads the Claude Code, Cursor, Codex and opencode sessions already on your machine, measures
+them **on your own machine**, shows you exactly what would be sent, and asks before anything is
+published.
+
+This package is a launcher. It downloads the signed collector binary for your platform from the
+release it is pinned to, verifies its SHA-256 before making it executable, caches it under
+`~/.cache/rankme/`, and runs it. It contains no collector source.
+
+| | |
+|---|---|
+| `npx rankmycode` | scan, show, ask, publish |
+| `npx rankmycode discover` | show what would be read, and read nothing |
+| `npx rankmycode analyze` | measure locally, upload nothing |
+| `npx rankmycode forget` | delete this machine's evidence and score |
+
+The publish confirmation is read from a real terminal and cannot be answered by a flag, a pipe,
+or an agent. In CI, or anywhere without a terminal, it refuses rather than assuming yes.
+
+Other ways in: `brew install jatinjain25/tap/rankme`, or the
+[Claude Code plugin](https://github.com/jatinjain25/rankme).
+
+## Licence
+
+Copyright (c) 2026 Jatin Jain. All rights reserved. See LICENSE.

package/checksums.json

@@ -0,0 +1,20 @@
+{
+  "version": "0.1.4",
+  "tag": "v0.1.4",
+  "base": "https://github.com/jatinjain25/paxel-dist/releases/download/v0.1.4",
+  "origin": "https://builder-production-5049.up.railway.app",
+  "assets": {
+    "builder-darwin-arm64": {
+      "sha256": "c05143908bda97e0d3defbded6ba4b1cd3602cfcd3b382b78f04ad9422eb6df1"
+    },
+    "builder-darwin-x64": {
+      "sha256": "2821be85e4545ebdb76e2d3b5a3362d58a95b7a56cd7c7dac346b7bdf4512e33"
+    },
+    "builder-linux-arm64": {
+      "sha256": "b91e5c52c4ae6e9da5d51356b8b4ff98bbeb690979db9880fd349e940d1b4651"
+    },
+    "builder-linux-x64": {
+      "sha256": "538ed36ad740adf704006a7c1073ba90e0eba2aaabcbde825bfa74436080c232"
+    }
+  }
+}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "rankmycode",
+  "version": "0.1.4",
+  "type": "module",
+  "description": "Rank yourself as a coder. Downloads the signed Builder collector for your platform, verifies it, and runs it.",
+  "bin": {
+    "rankmycode": "rankme.mjs"
+  },
+  "files": [
+    "rankme.mjs",
+    "checksums.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.17"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "homepage": "https://github.com/jatinjain25/rankme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/jatinjain25/rankme.git"
+  },
+  "keywords": [
+    "leaderboard",
+    "ranking",
+    "claude-code",
+    "cursor",
+    "codex",
+    "ai-coding"
+  ]
+}

package/rankme.mjs

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+
+// packages/launcher/src/main.ts
+import { spawnSync } from "node:child_process";
+import { homedir } from "node:os";
+import { createRequire } from "node:module";
+
+// packages/launcher/src/resolve.ts
+import { join } from "node:path";
+
+class UnsupportedPlatformError extends Error {
+  name = "UnsupportedPlatformError";
+}
+function assetName(platform, arch) {
+  const os = platform === "darwin" ? "darwin" : platform === "linux" ? "linux" : undefined;
+  const cpu = arch === "arm64" ? "arm64" : arch === "x64" ? "x64" : undefined;
+  if (os === undefined || cpu === undefined) {
+    throw new UnsupportedPlatformError(`There is no build for ${platform}/${arch}. macOS and Linux, on arm64 and x64.`);
+  }
+  return `builder-${os}-${cpu}`;
+}
+function cacheBin(env, home, version, asset) {
+  const root = env["RANKME_CACHE"] ?? env["XDG_CACHE_HOME"] ?? join(home, ".cache");
+  return join(root, "rankme", version, asset);
+}
+function childArgs(userArgs, origin) {
+  const first = userArgs[0];
+  const command = first === undefined || first.startsWith("-") ? ["publish"] : [];
+  return ["--api", origin, ...command, ...userArgs];
+}
+
+// packages/launcher/src/ensure.ts
+import { createHash } from "node:crypto";
+import { createReadStream, createWriteStream } from "node:fs";
+import { chmod, mkdir, rename, rm, stat } from "node:fs/promises";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { createGunzip } from "node:zlib";
+import { dirname } from "node:path";
+
+class ChecksumError extends Error {
+  name = "ChecksumError";
+}
+async function isExecutable(path) {
+  try {
+    return (await stat(path)).isFile();
+  } catch {
+    return false;
+  }
+}
+async function sha256Of(path) {
+  const hash = createHash("sha256");
+  await pipeline(createReadStream(path), hash);
+  return hash.digest("hex");
+}
+async function download(url, to) {
+  const res = await fetch(url);
+  if (!res.ok || res.body === null)
+    return false;
+  await pipeline(Readable.fromWeb(res.body), createWriteStream(to));
+  return true;
+}
+async function ensureBinary(opts) {
+  if (await isExecutable(opts.target))
+    return opts.target;
+  const note = opts.note ?? (() => {});
+  await mkdir(dirname(opts.target), { recursive: true });
+  const packed = `${opts.target}.gz.tmp-${process.pid}`;
+  const plain = `${opts.target}.tmp-${process.pid}`;
+  const clean = async () => {
+    await rm(packed, { force: true });
+    await rm(plain, { force: true });
+  };
+  try {
+    note(`downloading ${opts.asset}`);
+    if (await download(`${opts.base}/${opts.asset}.gz`, packed)) {
+      await pipeline(createReadStream(packed), createGunzip(), createWriteStream(plain));
+    } else if (!await download(`${opts.base}/${opts.asset}`, plain)) {
+      throw new Error(`Download failed: ${opts.base}/${opts.asset}`);
+    }
+    const actual = await sha256Of(plain);
+    if (actual !== opts.sha256) {
+      throw new ChecksumError(`Checksum mismatch for ${opts.asset}. Refusing to run it.
+` + `  expected ${opts.sha256}
+  actual   ${actual}`);
+    }
+    await chmod(plain, 493);
+    await rename(plain, opts.target);
+    return opts.target;
+  } catch (err) {
+    await clean();
+    throw err;
+  } finally {
+    await rm(packed, { force: true });
+  }
+}
+
+// packages/launcher/src/main.ts
+async function main() {
+  const require2 = createRequire(import.meta.url);
+  const sums = require2("./checksums.json");
+  const asset = assetName(process.platform, process.arch);
+  const digest = sums.assets[asset]?.sha256;
+  if (digest === undefined) {
+    throw new Error(`No checksum published for ${asset}.`);
+  }
+  const bin = await ensureBinary({
+    base: sums.base,
+    asset,
+    sha256: digest,
+    target: cacheBin(process.env, homedir(), sums.version, asset),
+    note: (m) => process.stderr.write(`  ${m}
+`)
+  });
+  const res = spawnSync(bin, childArgs(process.argv.slice(2), sums.origin), {
+    stdio: "inherit",
+    env: { ...process.env, BUILDER_INVOKED_AS: "npx rankmycode" }
+  });
+  if (res.error !== undefined)
+    throw res.error;
+  if (res.signal !== null) {
+    process.kill(process.pid, res.signal);
+  }
+  return res.status ?? 1;
+}
+main().then((code) => process.exit(code)).catch((err) => {
+  const detail = err instanceof Error ? err.message : String(err);
+  process.stderr.write(`
+  ${detail}
+
+`);
+  process.exit(err instanceof UnsupportedPlatformError || err instanceof ChecksumError ? 2 : 1);
+});