skif-cli 0.0.0 → 0.1.0

package/ATTRIBUTIONS.md

@@ -0,0 +1,178 @@
+# Attributions
+
+This document acknowledges sources of forked or copied code used in the skif project. Ordinary
+crates.io dependencies are tracked in `Cargo.toml` / `Cargo.lock` and governed by `deny.toml`; this
+file covers code that was **copied or derived** into the repository from other projects.
+
+## sherif
+
+A zero-config linter for TypeScript and JavaScript monorepos. skif began as a fork of sherif and was
+rebuilt as a clean, restructured codebase; the workspace and manifest rules are ported from it.
+
+- **Source**: <https://github.com/QuiiBz/sherif>
+- **Upstream commit**: `1eeac7104af1a6143d7f5d17d18d11635222ca8d`
+- **License**: MIT
+- **Authors**: Tom Lienard and the sherif contributors
+- **Copyright**: Copyright (c) 2023 Tom Lienard
+- **Location**: `crates/skif-rules` and `crates/skif-workspace` (rule logic, package and workspace collection)
+- **Purpose**: Monorepo workspace rules (dependency hygiene, root and member `package.json`
+  checks, workspace discovery for npm, yarn and pnpm) and their autofixes.
+
+### Modifications
+
+- Renamed from sherif to skif; the crate, binary, repository, and distribution surface are new.
+- Restructured from a single binary crate into a library-first workspace of `skif-*` crates.
+- Rules are rewritten and renamed to stable rule IDs, with structured diagnostics instead of
+  pre-rendered messages.
+- Configuration comes from `skif.toml` / `.skif.toml` and CLI flags; the `sherif` key in
+  `package.json` and the `sherif.config.jsonc` / `.sherifrc.jsonc` files are not supported.
+- The upstream GitHub Action, npm packaging, and website assets were removed.
+
+### License Compatibility
+
+MIT is permissive and compatible with skif's MIT license. The upstream license text follows.
+
+```text
+MIT License
+
+Copyright (c) 2023 Tom Lienard
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## syncpack specifier
+
+The npm dependency specifier parser and comparator from syncpack, a consistent-versions tool for
+JavaScript monorepos.
+
+- **Source**: <https://github.com/JamieMason/syncpack>
+- **Upstream path**: `crates/syncpack-specifier`
+- **Upstream commit**: `958d30689ac24b60623258630242330bd6d0264b`
+- **License**: MIT
+- **Copyright**: Copyright (c) 2017-2023 Jamie Mason
+- **Location**: `crates/skif-specifier`
+- **Purpose**: Parsing, classification, ordering, and semver comparison of npm dependency
+  specifiers (exact, ranges, workspace protocol, aliases, git, tags, and so on).
+
+### Modifications
+
+1. Every vendored source file carries a header comment naming its upstream path and commit.
+2. Thread safety: `Rc` is replaced with `Arc` and `OnceCell` with `OnceLock`, and the
+   `thread_local!` caches are removed. `Specifier::new` and `Specifier::create` parse without
+   caching; the caller-owned `SpecifierCache` (`RwLock<HashMap>`, `get_or_parse`) provides
+   interning. Static assertions check that `Specifier` and `SpecifierCache` are `Send + Sync`.
+3. `node-semver` 2.2.0 is replaced with `nodejs-semver` 7.0.0 (Apache-2.0). `Range` and `Version`
+   parsing, `satisfies`, and `allows_any` map one to one; the only adaptation is that version
+   components are read through accessor methods (`major()`, `minor()`, `patch()`,
+   `pre_release()`) instead of public fields.
+4. The upstream tests and test data are kept. `eq_hash_test::specifier_eq_by_raw_string` now
+   obtains pointer-equal specifiers through `SpecifierCache` because `Specifier::new` no longer
+   interns. The upstream `#[ignore]`d prerelease test stays ignored, with a reason attached.
+5. Lint fixes to the skif workspace standard (clippy pedantic, no `unwrap`/`expect` in non-test
+   code where avoidable); two crate-level lint allowances and a per-function `expect_used`
+   allowance are documented in place. The code is formatted with the workspace `rustfmt.toml`,
+   and the benchmark crate name is updated.
+6. Hardening: `Major`, `Minor`, `RangeMajor`, `RangeMinor` and `Latest` parse their padded
+   versions and ranges eagerly (no `OnceLock`, no `expect`); numbers that `nodejs-semver` rejects
+   (for example `99999999999999999999`, above 2^53 - 1) now yield `Specifier::Unsupported`
+   instead of panicking later. `Ord` breaks semantic ties on the raw string so that
+   `cmp == Equal` exactly when `==` does (`1.2.3` and `=1.2.3` no longer compare equal).
+   `is_complex_range` accepts unspaced `||` unions, prerelease tags and x-range operands
+   (`1.x || 2.x`), and only a bare `*`, `x` or `X` is `Latest` (`*foo` is `Unsupported`, `xyz` is
+   a `Tag`). Property tests cover panic freedom and the `Ord`/`Eq` law.
+7. The version-group state machine in `crates/skif-rules/src/policy/visit.rs` is a Rust re-implementation of
+   the visitors in syncpack's `src/version_group/*.rs` (preferred-semver, pinned, banned, ignored, same-range,
+   same-minor, snapped-to) at the same commit, on skif's own instance model; no syncpack code is copied. It differs
+   in having no strict mode, leaving `catalog:` references to the catalog rules, and treating specifiers that
+   cannot carry a semver range as having no preferred range.
+
+### License Compatibility
+
+MIT is permissive and compatible with skif's MIT license. The upstream license text follows.
+
+```text
+MIT License
+
+Copyright (c) 2017-2023 Jamie Mason
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+```
+
+## knip
+
+A tool that finds unused files, exports and dependencies in JavaScript and TypeScript projects. skif's JS
+analysis follows its semantics and its plugin set; the behaviour is re-implemented in Rust on oxc, and no knip
+source file is copied, apart from the data noted below.
+
+- **Source**: <https://github.com/webpro-nl/knip>
+- **Upstream commit**: `da07b6e9887f9a1eb08545da29755b7f9d309bca`
+- **License**: ISC
+- **Authors**: Lars Kappert and the knip contributors
+- **Copyright**: Copyright (c) 2022-2026 Lars Kappert
+- **Location**: `crates/skif-js` (issue types, module graph and usage rules) and `crates/skif-js-plugins` (the
+  plugin table, entry patterns and configuration readers)
+- **Purpose**: Unused and unlisted dependency, unused export, unresolved import and dead file analysis.
+
+### Modifications
+
+- The behaviour of knip's issue types, plugins and production mode is re-implemented in Rust; no TypeScript
+  source is translated line by line.
+- Analysis is static: configuration files are read with oxc, never executed, and tools are not run to ask for
+  their entries.
+- The list of binaries that are never reported as unlisted is adapted from knip's `constants.ts`.
+- The plugin table is declarative data with optional resolvers, keyed by knip's plugin names. `aws-cdk` and
+  `browser-extension` are skif's own: knip has no plugin of either name at the pinned commit.
+- Rule ids, severities and configuration (`skif.toml`) are skif's own.
+
+### License Compatibility
+
+ISC is permissive and compatible with skif's MIT license. The upstream license text follows.
+
+```text
+ISC License
+
+Copyright (c) 2022-2026 Lars Kappert
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+```

package/README.md

@@ -0,0 +1,85 @@
+# skif
+
+[skif](https://github.com/Goldziher/skif) is a dependency and package-manager linter, auditor and enforcer for
+JavaScript and TypeScript, with first-class monorepo support: workspace rules and version and catalog policies,
+for npm, pnpm, Yarn and Bun. It also finds unused, unlisted and unresolved dependencies, unused files and
+exports.
+
+## Requirements
+
+Node.js versions that are not end-of-life (22, 24 and 26 today; see the
+[Node.js release schedule](https://nodejs.org/en/about/previous-releases)) or Bun 1.x. Older versions may work but are not
+supported. The package is ESM only; from CommonJS use `import()`, or `require()` on
+Node.js 22.12 or newer.
+
+## Install
+
+```sh
+pnpm add --save-dev skif-cli
+# or: npm install --save-dev skif-cli / yarn add --dev skif-cli / bun add --dev skif-cli
+```
+
+Run it without installing:
+
+```sh
+pnpm dlx skif-cli
+npx skif-cli
+bunx -p skif-cli skif
+```
+
+## Use from code
+
+```js
+import { lint, lintAsync, run } from "skif-cli";
+
+const report = JSON.parse(lint("./my-monorepo", { production: true }));
+console.log(report.summary);
+
+const outcome = await lintAsync("./my-monorepo");
+if (outcome.error) console.error(outcome.error.kind, outcome.error.message, outcome.error.path);
+else console.log(JSON.parse(outcome.report).summary);
+
+const exitCode = run(["--format", "json", "./my-monorepo"]);
+```
+
+- `lint(path, options?)` lints the project containing `path` and returns the JSON report as a string. With
+  `{ recursive: true }` it lints every workspace and standalone package at or below `path`, like `skif -r`, and
+  the report gains a `roots` array, an `errors` array listing the roots that could not be loaded (the others are still
+  linted) and, when the depth limit stopped the search, a `truncated` array of the directories it did not enter. It
+  prints nothing and writes no files. When the lint cannot run it throws an `Error` with `kind` and, when there is one,
+  `path` properties, the fields `lintAsync` returns in `error`. It blocks the event loop, so use `lintAsync` in a server. `{ config: "path/to/skif.toml" }`
+  uses that file (and the files it extends) instead of discovering configuration files, like `--config`, and
+  `{ noConfig: true }` reads none, like `--no-config`.
+- `lintAsync(path, options?)` does the same on a worker thread and resolves with `{ report }` or, when the lint
+  cannot run, `{ error: { kind, message, path? } }` (`kind` is `config`, `workspace`, `io` or `internal`). Both
+  functions read the configuration file the way the command line does.
+- `run(argv)` runs the full command line (`argv` excludes the program name) and returns its exit code. Output
+  streams to the process's stdout and stderr.
+
+Types ship in `index.d.ts`.
+
+## How the native code gets here
+
+skif is a native addon built with [napi-rs](https://napi.rs). There is no install script and nothing is
+downloaded at install time or at first run. This package lists one platform package per target as
+`optionalDependencies`, each carrying the prebuilt addon and declaring the `os`, `cpu` and, on Linux, `libc` it is
+for. Your package manager installs only the one that matches the machine, so installs work offline and are
+covered by the registry's integrity hashes.
+
+| Platform | Package |
+| --- | --- |
+| macOS (Apple silicon) | `skif-darwin-arm64` |
+| macOS (Intel) | `skif-darwin-x64` |
+| Linux arm64 (glibc) | `skif-linux-arm64-gnu` |
+| Linux arm64 (musl, Alpine) | `skif-linux-arm64-musl` |
+| Linux x64 (glibc) | `skif-linux-x64-gnu` |
+| Linux x64 (musl, Alpine) | `skif-linux-x64-musl` |
+
+Windows is not supported by this package. If no platform package is installed (for example because optional
+dependencies were disabled), importing `skif` fails with an error naming the missing package.
+
+## Links
+
+- [Documentation](https://github.com/Goldziher/skif#readme)
+- [Changelog](https://github.com/Goldziher/skif/blob/main/CHANGELOG.md)
+- [Issues](https://github.com/Goldziher/skif/issues)

package/bin/skif.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { run } from "../index.js";
+
+// Set the exit code instead of calling process.exit so the runtime drains stdout and stderr itself.
+process.exitCode = run(process.argv.slice(2));

package/index.d.ts

@@ -0,0 +1,79 @@
+/* auto-generated by NAPI-RS */
+/* eslint-disable */
+
+/**
+ * Which binding artifact the generated loader actually loaded: `'native'` for
+ * a native addon, otherwise the `platformArchABI` of the WASI flavor. Every
+ * flavor napi-rs can build is listed, because `NAPI_RS_NATIVE_LIBRARY_PATH`
+ * can point the loader at a WASI artifact this package does not build itself.
+ */
+export declare const __napiBindingTarget: 'native' | 'wasm32-wasi' | 'wasm32-wasip1'
+
+/**
+ * Lints the workspace containing `path` (or, with `recursive`, every root at or below it) and returns the report as
+ * the versioned JSON document the CLI prints for `--format json`. Nothing is printed and no file is written. The
+ * call blocks the event loop; use [`lint_async`] in a server.
+ *
+ * # Errors
+ * Throws an `Error` with the failure's message, and with its `kind` and, when there is one, `path` as properties
+ * (the same fields [`lint_async`] returns in `error`) when no workspace is found, the configuration is invalid or
+ * discovery fails.
+ */
+export declare function lint(path: string, options?: LintOptions | undefined | null): string
+
+/**
+ * Like [`lint`], without blocking the event loop. Resolves with a [`LintOutcome`]: `report` on success, or a
+ * structured `error` (kind, message, path) instead of a rejection when the lint cannot run.
+ */
+export declare function lintAsync(path: string, options?: LintOptions | undefined | null): Promise<LintOutcome>
+
+/** Why a lint could not run. */
+export interface LintFailure {
+  /** `config`, `workspace`, `io`, `usage`, `ci-refusal` or `internal` (a bug in skif). */
+  kind: string
+  /** What went wrong. */
+  message: string
+  /** The file the failure is about, with `/` separators, when there is one. */
+  path?: string
+}
+
+/** Options for [`lint`] and [`lint_async`]; each mirrors the CLI flag of the same name. */
+export interface LintOptions {
+  /** Skip JavaScript and TypeScript source analysis (`--no-js`). */
+  noJs?: boolean
+  /** Lint production dependencies only (`--production`). */
+  production?: boolean
+  /** Treat warnings as failures (`--fail-on-warnings`). */
+  failOnWarnings?: boolean
+  /** Rule ids to turn off (`--ignore-rule`). */
+  ignoreRules?: Array<string>
+  /** Lint every workspace and standalone package at or below the path (`--recursive`). */
+  recursive?: boolean
+  /** Package names to skip (`--ignore-package`). */
+  ignorePackages?: Array<string>
+  /** Dependency names to skip (`--ignore-dependency`). */
+  ignoreDependencies?: Array<string>
+  /**
+   * Use this configuration file (and the files it extends) instead of discovering `skif.toml` files
+   * (`--config`). Ignored when `noConfig` is set.
+   */
+  config?: string
+  /** Read no configuration file: the defaults plus the other options (`--no-config`). */
+  noConfig?: boolean
+}
+
+/** The result of [`lint_async`]: exactly one of `report` and `error` is set. */
+export interface LintOutcome {
+  /** The versioned JSON document the CLI prints for `--format json`. */
+  report?: string
+  /** Why no report could be produced. */
+  error?: LintFailure
+}
+
+/**
+ * Runs the skif command line with `argv` (the arguments after the program name) and returns its exit code.
+ *
+ * Output streams to the process's stdout and stderr exactly as the native binary does. It is written by Rust, not
+ * through `process.stdout`, so on a pipe it is not ordered with what Node writes in the same tick.
+ */
+export declare function run(argv: Array<string>): number

package/index.js

@@ -0,0 +1,780 @@
+/* eslint-disable */
+// @ts-nocheck
+/* auto-generated by NAPI-RS */
+
+import { createRequire } from 'module'
+const require = createRequire(import.meta.url)
+
+const { readFileSync } = require('fs')
+let nativeBinding = null
+// Which artifact actually loaded. The WASI fallback chain overwrites it with
+// the flavor it resolved; the late native retry below leaves it alone because
+// it only runs while no WASI candidate has been loaded. The take-over check
+// after the load-failure block can also set it.
+let __napiLoadedBindingTarget = 'native'
+// What this loader's own `requireNative()` calls returned. The check after
+// the load-failure block compares it with `nativeBinding` to tell a binding
+// this loader loaded from one that code outside it put in its place.
+let __napiRequiredNativeBinding = null
+const loadErrors = []
+
+const isMusl = () => {
+  let musl = false
+  if (process.platform === 'linux') {
+    musl = isMuslFromFilesystem()
+    if (musl === null) {
+      musl = isMuslFromReport()
+    }
+    if (musl === null) {
+      musl = isMuslFromChildProcess()
+    }
+  }
+  return musl
+}
+
+const isFileMusl = (f) => f.includes('libc.musl-') || f.includes('ld-musl-')
+
+const isMuslFromFilesystem = () => {
+  try {
+    return readFileSync('/usr/bin/ldd', 'utf-8').includes('musl')
+  } catch {
+    return null
+  }
+}
+
+const isMuslFromReport = () => {
+  let report = null
+  if (process.report && typeof process.report.getReport === 'function') {
+    process.report.excludeNetwork = true
+    report = process.report.getReport()
+  }
+  if (!report) {
+    return null
+  }
+  if (report.header && report.header.glibcVersionRuntime) {
+    return false
+  }
+  if (Array.isArray(report.sharedObjects)) {
+    if (report.sharedObjects.some(isFileMusl)) {
+      return true
+    }
+  }
+  return false
+}
+
+const isMuslFromChildProcess = () => {
+  try {
+    return require('child_process').execSync('ldd --version', { encoding: 'utf8' }).includes('musl')
+  } catch (e) {
+    // If we reach this case, we don't know if the system is musl or not, so is better to just fallback to false
+    return false
+  }
+}
+
+function requireNative() {
+  if (process.env.NAPI_RS_NATIVE_LIBRARY_PATH) {
+    try {
+      const overrideBinding = require(process.env.NAPI_RS_NATIVE_LIBRARY_PATH)
+      // The override may be a generated WASI loader, which already reports its
+      // own flavor. Adopt it: `module.exports` aliases this object, so claiming
+      // 'native' would both misreport the artifact and overwrite the loader's
+      // marker through the alias.
+      __napiLoadedBindingTarget =
+        overrideBinding && typeof overrideBinding.__napiBindingTarget === 'string'
+          ? overrideBinding.__napiBindingTarget
+          : 'native'
+      return overrideBinding
+    } catch (err) {
+      loadErrors.push(err)
+    }
+  } else if (process.platform === 'android') {
+    if (process.arch === 'arm64') {
+      try {
+        return require('./skif.android-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-android-arm64')
+        const bindingPackageVersion = require('skif-android-arm64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm') {
+      try {
+        return require('./skif.android-arm-eabi.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-android-arm-eabi')
+        const bindingPackageVersion = require('skif-android-arm-eabi/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on Android ${process.arch}`))
+    }
+  } else if (process.platform === 'win32') {
+    if (process.arch === 'x64') {
+      if ((process.config && process.config.variables && process.config.variables.shlib_suffix === 'dll.a') || (process.config && process.config.variables && process.config.variables.node_target_type === 'shared_library')) {
+        try {
+          return require('./skif.win32-x64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-win32-x64-gnu')
+          const bindingPackageVersion = require('skif-win32-x64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./skif.win32-x64-msvc.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-win32-x64-msvc')
+          const bindingPackageVersion = require('skif-win32-x64-msvc/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'ia32') {
+      try {
+        return require('./skif.win32-ia32-msvc.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-win32-ia32-msvc')
+        const bindingPackageVersion = require('skif-win32-ia32-msvc/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm64') {
+      try {
+        return require('./skif.win32-arm64-msvc.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-win32-arm64-msvc')
+        const bindingPackageVersion = require('skif-win32-arm64-msvc/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on Windows: ${process.arch}`))
+    }
+  } else if (process.platform === 'darwin') {
+    try {
+      return require('./skif.darwin-universal.node')
+    } catch (e) {
+      loadErrors.push(e)
+    }
+    try {
+      const binding = require('skif-darwin-universal')
+      const bindingPackageVersion = require('skif-darwin-universal/package.json').version
+      if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      }
+      return binding
+    } catch (e) {
+      loadErrors.push(e)
+    }
+    if (process.arch === 'x64') {
+      try {
+        return require('./skif.darwin-x64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-darwin-x64')
+        const bindingPackageVersion = require('skif-darwin-x64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm64') {
+      try {
+        return require('./skif.darwin-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-darwin-arm64')
+        const bindingPackageVersion = require('skif-darwin-arm64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on macOS: ${process.arch}`))
+    }
+  } else if (process.platform === 'freebsd') {
+    if (process.arch === 'x64') {
+      try {
+        return require('./skif.freebsd-x64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-freebsd-x64')
+        const bindingPackageVersion = require('skif-freebsd-x64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm64') {
+      try {
+        return require('./skif.freebsd-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-freebsd-arm64')
+        const bindingPackageVersion = require('skif-freebsd-arm64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'ppc64') {
+      try {
+        return require('./skif.freebsd-ppc64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-freebsd-ppc64')
+        const bindingPackageVersion = require('skif-freebsd-ppc64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on FreeBSD: ${process.arch}`))
+    }
+  } else if (process.platform === 'linux') {
+    if (process.arch === 'x64') {
+      if (isMusl()) {
+        try {
+          return require('./skif.linux-x64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-x64-musl')
+          const bindingPackageVersion = require('skif-linux-x64-musl/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./skif.linux-x64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-x64-gnu')
+          const bindingPackageVersion = require('skif-linux-x64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'arm64') {
+      if (isMusl()) {
+        try {
+          return require('./skif.linux-arm64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-arm64-musl')
+          const bindingPackageVersion = require('skif-linux-arm64-musl/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./skif.linux-arm64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-arm64-gnu')
+          const bindingPackageVersion = require('skif-linux-arm64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'arm') {
+      if (isMusl()) {
+        try {
+          return require('./skif.linux-arm-musleabihf.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-arm-musleabihf')
+          const bindingPackageVersion = require('skif-linux-arm-musleabihf/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./skif.linux-arm-gnueabihf.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-arm-gnueabihf')
+          const bindingPackageVersion = require('skif-linux-arm-gnueabihf/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'loong64') {
+      if (isMusl()) {
+        try {
+          return require('./skif.linux-loong64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-loong64-musl')
+          const bindingPackageVersion = require('skif-linux-loong64-musl/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./skif.linux-loong64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-loong64-gnu')
+          const bindingPackageVersion = require('skif-linux-loong64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'riscv64') {
+      if (isMusl()) {
+        try {
+          return require('./skif.linux-riscv64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-riscv64-musl')
+          const bindingPackageVersion = require('skif-linux-riscv64-musl/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./skif.linux-riscv64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('skif-linux-riscv64-gnu')
+          const bindingPackageVersion = require('skif-linux-riscv64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'ppc64') {
+      try {
+        return require('./skif.linux-ppc64-gnu.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-linux-ppc64-gnu')
+        const bindingPackageVersion = require('skif-linux-ppc64-gnu/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 's390x') {
+      try {
+        return require('./skif.linux-s390x-gnu.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-linux-s390x-gnu')
+        const bindingPackageVersion = require('skif-linux-s390x-gnu/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on Linux: ${process.arch}`))
+    }
+  } else if (process.platform === 'openharmony') {
+    if (process.arch === 'arm64') {
+      try {
+        return require('./skif.openharmony-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-openharmony-arm64')
+        const bindingPackageVersion = require('skif-openharmony-arm64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'x64') {
+      try {
+        return require('./skif.openharmony-x64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-openharmony-x64')
+        const bindingPackageVersion = require('skif-openharmony-x64/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm') {
+      try {
+        return require('./skif.openharmony-arm.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('skif-openharmony-arm')
+        const bindingPackageVersion = require('skif-openharmony-arm/package.json').version
+        if (bindingPackageVersion !== '0.1.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on OpenHarmony: ${process.arch}`))
+    }
+  } else {
+    loadErrors.push(new Error(`Unsupported OS: ${process.platform}, architecture: ${process.arch}`))
+  }
+}
+
+function createLoadErrorChain(errors) {
+  return errors.reduce((previous, current) => {
+    let message
+    try {
+      message =
+        current && typeof current.message === 'string'
+          ? current.message
+          : String(current)
+    } catch {
+      message = 'Unknown error'
+    }
+    const error = new Error(message)
+    error.cause = previous
+    return error
+  }, null)
+}
+
+// NAPI_RS_FORCE_WASI is a tri-state flag:
+//   unset / any other value → native binding preferred, WASI is only a fallback
+//   'true'                   → prefer WASI, but retain native as a lazy fallback
+//   'error'                  → require WASI without initializing a native fallback
+// Treating any non-empty string as truthy (the historical behavior) meant
+// NAPI_RS_FORCE_WASI=false, NAPI_RS_FORCE_WASI=0, etc. inadvertently triggered
+// the WASI path, causing ENOENT for packages shipped without a .wasi.cjs file.
+//
+// NAPI_RS_WASI_FLAVOR selects one exact generated flavor and implies strict
+// WASI loading. It never crosses into another flavor or falls back to native.
+const __napiWasiFlavors = ['wasm32-wasi']
+const __napiWasiFlavor = process.env.NAPI_RS_WASI_FLAVOR
+const __napiWasiFlavorRequested =
+  typeof __napiWasiFlavor === 'string' && __napiWasiFlavor.length > 0
+if (
+  __napiWasiFlavorRequested &&
+  __napiWasiFlavors.indexOf(__napiWasiFlavor) === -1
+) {
+  throw new Error(
+    'Unsupported WASI flavor "' +
+      __napiWasiFlavor +
+      '". Available flavors: ' +
+      __napiWasiFlavors.join(', '),
+  )
+}
+const forceWasiError = process.env.NAPI_RS_FORCE_WASI === 'error'
+const forceWasi =
+  process.env.NAPI_RS_FORCE_WASI === 'true' ||
+  forceWasiError ||
+  __napiWasiFlavorRequested
+
+if (!forceWasi) {
+  nativeBinding = requireNative()
+  __napiRequiredNativeBinding = nativeBinding
+}
+
+if (!nativeBinding || forceWasi) {
+  let wasiBinding = null
+  let wasiBindingLoaded = false
+  const wasiBindingErrors = []
+  const __napiWasiResolveCandidate = (specifier, isPackage, localArtifacts) => {
+    try {
+      require.resolve(specifier)
+    } catch (resolveError) {
+      if (!resolveError || resolveError.code !== 'MODULE_NOT_FOUND') {
+        throw resolveError
+      }
+      if (isPackage) {
+        try {
+          require.resolve(specifier + '/package.json')
+        } catch (packageError) {
+          if (packageError && packageError.code === 'MODULE_NOT_FOUND') {
+            return resolveError
+          }
+          // An exports restriction proves the package exists even when its
+          // package.json is not public. Preserve the root resolution failure.
+          throw resolveError
+        }
+        // The package exists but its main/export target is broken.
+        throw resolveError
+      }
+      return resolveError
+    }
+    if (localArtifacts) {
+      let artifactError = null
+      for (let i = 0; i < localArtifacts.length; i++) {
+        try {
+          require.resolve(localArtifacts[i])
+          return null
+        } catch (resolveError) {
+          if (!resolveError || resolveError.code !== 'MODULE_NOT_FOUND') {
+            throw resolveError
+          }
+          artifactError = resolveError
+        }
+      }
+      return artifactError
+    }
+    return null
+  }
+  if (!wasiBindingLoaded && (!__napiWasiFlavorRequested || __napiWasiFlavor === 'wasm32-wasi')) {
+    let candidateError = null
+    let candidateFailed = false
+    try {
+      candidateError = __napiWasiResolveCandidate('./skif.wasi.cjs', false, ['./skif.wasm32-wasi.debug.wasm', './skif.wasm32-wasi.wasm'])
+      candidateFailed = candidateError !== null
+      if (!candidateFailed) {
+        wasiBinding = require('./skif.wasi.cjs')
+        nativeBinding = wasiBinding
+        __napiLoadedBindingTarget = 'wasm32-wasi'
+        wasiBindingLoaded = true
+      }
+    } catch (err) {
+      candidateError = err
+      candidateFailed = true
+    }
+    if (candidateFailed) {
+      wasiBindingErrors.push(candidateError)
+      loadErrors.push(candidateError)
+    }
+  }
+  if (!wasiBindingLoaded && (!__napiWasiFlavorRequested || __napiWasiFlavor === 'wasm32-wasi')) {
+    let candidateError = null
+    let candidateFailed = false
+    try {
+      candidateError = __napiWasiResolveCandidate('skif-wasm32-wasi', true, undefined)
+      candidateFailed = candidateError !== null
+      if (!candidateFailed) {
+        if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          const bindingPackageVersion = require('skif-wasm32-wasi/package.json').version
+          if (bindingPackageVersion !== '0.1.0') {
+            throw new Error(`WASI binding package version mismatch, expected 0.1.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+        }
+        wasiBinding = require('skif-wasm32-wasi')
+        nativeBinding = wasiBinding
+        __napiLoadedBindingTarget = 'wasm32-wasi'
+        wasiBindingLoaded = true
+      }
+    } catch (err) {
+      candidateError = err
+      candidateFailed = true
+    }
+    if (candidateFailed) {
+      wasiBindingErrors.push(candidateError)
+      loadErrors.push(candidateError)
+    }
+  }
+  if (
+    !wasiBindingLoaded &&
+    forceWasi &&
+    !forceWasiError &&
+    !__napiWasiFlavorRequested
+  ) {
+    nativeBinding = requireNative()
+    __napiRequiredNativeBinding = nativeBinding
+  }
+  if ((forceWasiError || __napiWasiFlavorRequested) && !wasiBindingLoaded) {
+    const error = new Error(
+      __napiWasiFlavorRequested
+        ? 'WASI binding for flavor "' + __napiWasiFlavor + '" not found'
+        : 'WASI binding not found and NAPI_RS_FORCE_WASI is set to error',
+    )
+    error.cause = createLoadErrorChain(wasiBindingErrors)
+    throw error
+  }
+}
+
+if (!nativeBinding) {
+  if (loadErrors.length > 0) {
+    const error = new Error(
+      `Cannot find native binding. ` +
+        `npm has a bug related to optional dependencies (https://github.com/npm/cli/issues/4828). ` +
+        'Please try `npm i` again after removing both package-lock.json and node_modules directory.',
+    )
+    // assign instead of the `new Error(message, { cause })` options form,
+    // which Node < 16.9 silently ignores
+    error.cause = createLoadErrorChain(loadErrors)
+    throw error
+  }
+  throw new Error(`Failed to load native binding`)
+}
+
+// A package can patch its own fallback in front of the load-failure check
+// above, e.g. a WebContainer download through `napi-postinstall/fallback`.
+// That fallback swaps `nativeBinding` for a generated WASI loader, which has
+// already stamped its own flavor, while the target above still says 'native'.
+// Take that flavor over, or the CommonJS stamp throws a conflict and the ESM
+// export reports the wrong artifact. Three limits keep the conflict check:
+// - only a binding this loader did not load itself, so a native addon whose
+//   `#[napi(module_exports)]` hook claims the name is still rejected;
+// - only an own data property, read through its descriptor, so no addon
+//   getter runs here, and it must read back the same, as the stamp reads it;
+// - only a flavor in `__napiWasiFlavors`, the ones this loader's own WASI
+//   chain can report ('wasm32-wasi' for a package without a WASI target).
+// This is metadata and never fails a load: a throwing Proxy trap keeps 'native'.
+if (
+  __napiLoadedBindingTarget === 'native' &&
+  nativeBinding !== __napiRequiredNativeBinding
+) {
+  try {
+    const __napiBindingTargetDescriptor = Object.getOwnPropertyDescriptor(
+      nativeBinding,
+      '__napiBindingTarget',
+    )
+    if (
+      __napiBindingTargetDescriptor &&
+      __napiWasiFlavors.indexOf(__napiBindingTargetDescriptor.value) !== -1 &&
+      nativeBinding.__napiBindingTarget === __napiBindingTargetDescriptor.value
+    ) {
+      __napiLoadedBindingTarget = __napiBindingTargetDescriptor.value
+    }
+  } catch {
+    // keep 'native'
+  }
+}
+
+const { lint, lintAsync, run } = nativeBinding
+export { lint }
+export { lintAsync }
+export { run }
+export const __napiBindingTarget = __napiLoadedBindingTarget

package/package.json

@@ -1,7 +1,85 @@
 {
   "name": "skif-cli",
-  "version": "0.0.0",
-  "description": "Name reservation for skif. Real releases start at 0.1.0.",
+  "version": "0.1.0",
+  "description": "A dependency and package-manager linter, auditor and enforcer for JavaScript and TypeScript, with first-class monorepo support.",
+  "keywords": [
+    "dependencies",
+    "linter",
+    "monorepo",
+    "workspaces",
+    "pnpm",
+    "npm",
+    "yarn",
+    "bun",
+    "catalog",
+    "audit"
+  ],
+  "homepage": "https://github.com/Goldziher/skif#readme",
+  "bugs": {
+    "url": "https://github.com/Goldziher/skif/issues"
+  },
   "license": "MIT",
-  "repository": { "type": "git", "url": "git+https://github.com/Goldziher/skif.git" }
-}
+  "author": "Na'aman Hirschfeld <nhirschfeld@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Goldziher/skif.git",
+    "directory": "npm-package"
+  },
+  "type": "module",
+  "main": "index.js",
+  "types": "index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "skif": "bin/skif.js"
+  },
+  "files": [
+    "LICENSE",
+    "ATTRIBUTIONS.md",
+    "README.md",
+    "index.js",
+    "index.d.ts",
+    "bin/skif.js"
+  ],
+  "napi": {
+    "binaryName": "skif",
+    "packageName": "skif",
+    "targets": [
+      "aarch64-apple-darwin",
+      "x86_64-apple-darwin",
+      "x86_64-unknown-linux-gnu",
+      "aarch64-unknown-linux-gnu",
+      "x86_64-unknown-linux-musl",
+      "aarch64-unknown-linux-musl"
+    ]
+  },
+  "devDependencies": {
+    "@napi-rs/cli": "3.10.12"
+  },
+  "engines": {
+    "node": ">=22",
+    "bun": ">=1"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "optionalDependencies": {
+    "skif-darwin-arm64": "0.1.0",
+    "skif-darwin-x64": "0.1.0",
+    "skif-linux-x64-gnu": "0.1.0",
+    "skif-linux-arm64-gnu": "0.1.0",
+    "skif-linux-x64-musl": "0.1.0",
+    "skif-linux-arm64-musl": "0.1.0"
+  },
+  "scripts": {
+    "build": "napi build --platform --profile node --esm --manifest-path ../crates/skif-node/Cargo.toml --output-dir . --package skif-node",
+    "build:debug": "napi build --platform --esm --manifest-path ../crates/skif-node/Cargo.toml --output-dir . --package skif-node",
+    "version": "napi version"
+  }
+}