somewhere-cli 0.14.0

package/README.md

@@ -0,0 +1,17 @@
+# somewhere-cli
+
+The friendly install name for the [somewhere.tech](https://somewhere.tech) CLI.
+
+```bash
+npm i -g somewhere-cli
+```
+
+Gives you the `somewhere`, `sw`, `swpx`, and `swpm` commands. This is a thin
+wrapper — all the code lives in [`@somewhere-tech/cli`](https://www.npmjs.com/package/@somewhere-tech/cli),
+which this package installs and re-execs. Use either name; they're the same tool.
+
+- `swpx <pkg>` — run a package with `npx` after a security verdict check
+- `swpm install` — `npm install` with an install-time verdict check
+- `somewhere deploy` / `login` / `db` / … — the platform CLI
+
+MIT © somewhere.tech

package/bin/somewhere.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+// Re-exec the real `somewhere` bin from @somewhere-tech/cli (see swpx.js).
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const root = dirname(createRequire(import.meta.url).resolve('@somewhere-tech/cli/package.json'));
+await import(pathToFileURL(join(root, 'bin', 'somewhere.js')).href);

package/bin/sw.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+// `sw` is the short alias — same target as `somewhere` (see swpx.js).
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const root = dirname(createRequire(import.meta.url).resolve('@somewhere-tech/cli/package.json'));
+await import(pathToFileURL(join(root, 'bin', 'somewhere.js')).href);

package/bin/swpm.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+// Re-exec the real `swpm` bin from @somewhere-tech/cli (see swpx.js for why).
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const root = dirname(createRequire(import.meta.url).resolve('@somewhere-tech/cli/package.json'));
+await import(pathToFileURL(join(root, 'bin', 'swpm.js')).href);

package/bin/swpx.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+// somewhere-cli is just a friendlier install name. All logic lives in
+// @somewhere-tech/cli — we resolve its install dir and run its real `swpx` bin
+// in-process (it reads process.argv itself). Resolving via package.json works
+// regardless of the dependency's `exports` map.
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const root = dirname(createRequire(import.meta.url).resolve('@somewhere-tech/cli/package.json'));
+await import(pathToFileURL(join(root, 'bin', 'swpx.js')).href);

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "somewhere-cli",
+  "version": "0.14.0",
+  "description": "Friendly installer for the somewhere.tech CLI — gives you the somewhere, sw, swpx, and swpm commands. Thin wrapper around @somewhere-tech/cli.",
+  "keywords": ["somewhere", "somewhere.tech", "cli", "swpx", "swpm", "npm", "security"],
+  "homepage": "https://somewhere.tech",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Somewhere-Tech/somewhere-cli-installer.git"
+  },
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "somewhere": "bin/somewhere.js",
+    "sw": "bin/sw.js",
+    "swpx": "bin/swpx.js",
+    "swpm": "bin/swpm.js"
+  },
+  "files": ["bin"],
+  "dependencies": {
+    "@somewhere-tech/cli": ">=0.14.0 <1.0.0"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}