watchmen-cli 1.0.7 → 1.0.10

package/install.js

@@ -9,30 +9,30 @@ const { createHash } = require("crypto");
 const { execSync } = require("child_process");
 
 const VERSION = require("./package.json").version;
-const REPO = "trywatchmen/watchmen-cli";
+const DOWNLOAD_BASE = "https://releases.trywatchmen.cloud/download/community";
 
-// Platform → artifact name mapping
+// Platform → download path mapping
 const PLATFORMS = {
-  "darwin-arm64": "wm-community-macos-arm64",
-  "darwin-x64": "wm-community-macos-arm64", // Rosetta 2 fallback
-  "linux-x64": "wm-community-linux-x86_64",
-  "win32-x64": "wm-community-windows-x86_64.exe",
+  "darwin-arm64": "macos-arm64",
+  "darwin-x64": "macos-arm64", // Rosetta 2 fallback
+  "linux-x64": "linux-x86_64",
+  "win32-x64": "windows-x86_64",
 };
 
 function getPlatformKey() {
   return `${process.platform}-${process.arch}`;
 }
 
-function getArtifactName() {
+function getPlatformSlug() {
   const key = getPlatformKey();
-  const name = PLATFORMS[key];
-  if (!name) {
+  const slug = PLATFORMS[key];
+  if (!slug) {
     console.error(
       `Unsupported platform: ${key}\nSupported: ${Object.keys(PLATFORMS).join(", ")}`
     );
     process.exit(1);
   }
-  return name;
+  return slug;
 }
 
 function download(url) {
@@ -57,7 +57,7 @@ function download(url) {
 }
 
 async function main() {
-  const artifact = getArtifactName();
+  const platformSlug = getPlatformSlug();
   const binDir = path.join(__dirname, "bin");
   const binName = process.platform === "win32" ? "wm.exe" : "wm";
   const binPath = path.join(binDir, binName);
@@ -73,28 +73,14 @@ async function main() {
     } catch {}
   }
 
-  const url = `https://github.com/${REPO}/releases/download/v${VERSION}/${artifact}`;
-  const shaUrl = `${url}.sha256`;
+  // Pre-signed URL API redirects to S3
+  const url = `${DOWNLOAD_BASE}/${platformSlug}`;
 
   console.log(`Downloading wm v${VERSION} for ${getPlatformKey()}...`);
   console.log(`  ${url}`);
 
-  // Download binary + checksum in parallel
-  const [binary, shaData] = await Promise.all([
-    download(url),
-    download(shaUrl).catch(() => null), // SHA256 file may not exist yet
-  ]);
-
-  // Verify checksum if available
-  if (shaData) {
-    const expectedSha = shaData.toString("utf8").trim().split(/\s+/)[0];
-    const actualSha = createHash("sha256").update(binary).digest("hex");
-    if (actualSha !== expectedSha) {
-      console.error(`SHA256 mismatch!\n  expected: ${expectedSha}\n  actual:   ${actualSha}`);
-      process.exit(1);
-    }
-    console.log(`  SHA256 verified: ${actualSha.slice(0, 12)}...`);
-  }
+  // Download binary (URL redirects to pre-signed S3 URL)
+  const binary = await download(url);
 
   // Write binary
   fs.mkdirSync(binDir, { recursive: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "watchmen-cli",
-  "version": "1.0.7",
+  "version": "1.0.10",
   "description": "Developer environment intelligence platform — 13 scanners, 24 MCP tools, zero dependencies",
   "main": "install.js",
   "keywords": [