@blamejs/blamejs-shop 0.0.44

package/lib/vendor/blamejs/scripts/vendor-data-gen.js

@@ -0,0 +1,186 @@
+"use strict";
+/**
+ * vendor-data-gen.js — generator for lib/vendor/<name>.data.js modules.
+ *
+ * Reads a raw vendored data file (PSL .dat / common-passwords .txt /
+ * BIMI .pem), computes SHA-256 + SHA3-512 + SLH-DSA-SHAKE-256f
+ * signature, embeds them all in a self-describing CommonJS module
+ * with a provenance header. The output is hand-readable; every field
+ * the runtime verifier (`lib/vendor-data.js`) checks is also greppable
+ * from the file's plaintext.
+ *
+ * Invoked by scripts/vendor-update.sh --refresh-data. Not part of
+ * runtime — pure build-time tool.
+ *
+ * Usage:
+ *   node scripts/vendor-data-gen.js \
+ *     --src lib/vendor/public-suffix-list.dat                            \
+ *     --dst lib/vendor/public-suffix-list.data.js                        \
+ *     --name "public-suffix-list"                                        \
+ *     --source-url "https://publicsuffix.org/list/public_suffix_list.dat" \
+ *     --license "MPL-2.0 (Mozilla Public Suffix List)"                   \
+ *     --canary "_blamejs_canary_v0_9_8_.local"                           \
+ *     --signing-key .keys/vendor-data-private.pem
+ */
+
+var fs = require("fs");
+var path = require("path");
+var crypto = require("crypto");
+
+var pqcSoftware = require("../lib/pqc-software");
+
+function parseArgs(argv) {
+  var out = {};
+  for (var i = 2; i < argv.length; i++) {
+    if (argv[i].indexOf("--") === 0) {
+      out[argv[i].slice(2)] = argv[i + 1];
+      i++;
+    }
+  }
+  return out;
+}
+
+function pemToRaw(pem) {
+  var lines = pem.replace(/\r/g, "").split("\n");
+  var body = "";
+  for (var i = 0; i < lines.length; i++) {
+    if (lines[i].indexOf("-----") === 0) continue;
+    body += lines[i];
+  }
+  return Buffer.from(body.replace(/\s/g, ""), "base64");
+}
+
+function pubkeyFingerprint(pubkeyPem) {
+  var raw = pemToRaw(pubkeyPem);
+  return "sha256:" + crypto.createHash("sha256").update(raw).digest("hex");
+}
+
+function main() {
+  var args = parseArgs(process.argv);
+  var required = ["src", "dst", "name", "source-url", "license", "signing-key"];
+  for (var i = 0; i < required.length; i++) {
+    if (!args[required[i]]) {
+      process.stderr.write("vendor-data-gen: missing --" + required[i] + "\n");
+      process.exit(2);
+    }
+  }
+
+  var src = args.src;
+  var dst = args.dst;
+  var name = args.name;
+  var sourceUrl = args["source-url"];
+  var license = args.license;
+  var canary = args.canary || null;
+  var signingKeyPath = args["signing-key"];
+
+  // Read raw payload (already-canary-appended if applicable; this
+  // generator does not inject — vendor-update.sh appends the canary
+  // line to the raw file before invoking this generator, keeping the
+  // canary visible in the source-controlled .dat/.txt for inspection)
+  var payload = fs.readFileSync(src);
+  var byteLength = payload.length;
+  var fetchedAt = new Date().toISOString();
+
+  var sha256 = crypto.createHash("sha256").update(payload).digest("hex");
+  var sha3_512 = crypto.createHash("sha3-512").update(payload).digest("hex");
+
+  // Load signing key + derive matching pubkey fingerprint
+  var privKeyPem = fs.readFileSync(signingKeyPath, "utf8");
+  var pubkeyPath = signingKeyPath.replace(/private\.pem$/, "public.pem")
+                                  .replace(/-private\.pem$/, "-public.pem");
+  var pubkeyPem;
+  try {
+    pubkeyPem = fs.readFileSync(pubkeyPath, "utf8");
+  } catch (_e) {
+    process.stderr.write("vendor-data-gen: matching public key missing at " + pubkeyPath + "\n");
+    process.exit(2);
+  }
+  var pubFp = pubkeyFingerprint(pubkeyPem);
+
+  // Sign with SLH-DSA-SHAKE-256f. noble API: sign(message, secretKey).
+  var slh = pqcSoftware.slh_dsa_shake_256f;
+  var privKeyBytes = pemToRaw(privKeyPem);
+  var sigBytes = slh.sign(payload, privKeyBytes);
+  var sigB64 = Buffer.from(sigBytes).toString("base64");
+
+  // Base64-encode the payload with 76-char line wrapping for diff hygiene
+  var payloadB64 = payload.toString("base64").match(/.{1,76}/g).join("\n");
+
+  // Generate canaryCheck closure source. For PSL + common-passwords
+  // the parse-side semantics differ — we inject a name-specific
+  // closure that does a string-search after the data is loaded as
+  // the appropriate type. For BIMI the canary is null; no closure.
+  var canaryCheckSrc;
+  if (canary === null) {
+    canaryCheckSrc = "null";
+  } else if (name === "public-suffix-list") {
+    canaryCheckSrc =
+      "function () {\n" +
+      "    var s = payload.toString(\"utf8\");\n" +
+      "    return s.indexOf(\"" + canary + "\") !== -1;\n" +
+      "  }";
+  } else if (name === "common-passwords-top-10000") {
+    canaryCheckSrc =
+      "function () {\n" +
+      "    var s = payload.toString(\"utf8\");\n" +
+      "    return s.indexOf(\"" + canary + "\") !== -1;\n" +
+      "  }";
+  } else {
+    canaryCheckSrc =
+      "function () {\n" +
+      "    return payload.toString(\"utf8\").indexOf(\"" + canary + "\") !== -1;\n" +
+      "  }";
+  }
+
+  // Write the .data.js
+  var output =
+    "// " + name + " — vendored data, generated by scripts/vendor-data-gen.js.\n" +
+    "// Source:    " + sourceUrl + "\n" +
+    "// License:   " + license + "\n" +
+    "// Fetched:   " + fetchedAt + "\n" +
+    "// Bytes:     " + byteLength + " (decoded)\n" +
+    "// SHA-256:   " + sha256 + "\n" +
+    "// SHA3-512:  " + sha3_512.slice(0, 64) + "\n" +
+    "//            " + sha3_512.slice(64) + "\n" +
+    "// SLH-DSA:   signed by " + pubFp + "\n" +
+    (canary ? "// Canary:    " + canary + "\n" : "// Canary:    (none — see KNOWN_VENDOR_DATA in lib/vendor-data.js)\n") +
+    "//\n" +
+    "// The companion file (`" + path.basename(src) + "`) is the original-\n" +
+    "// format source for external tool inspection. Both regenerate\n" +
+    "// together via scripts/vendor-update.sh --refresh-data; do not\n" +
+    "// hand-edit either. Tampering is detected by lib/vendor-data.js\n" +
+    "// at every load (dual-hash + SLH-DSA signature + canary check).\n" +
+    "\n" +
+    "\"use strict\";\n" +
+    "\n" +
+    "var payload = Buffer.from(\n" +
+    payloadB64.split("\n").map(function (line) {
+      return "  \"" + line + "\""
+    }).join(" +\n") + ",\n" +
+    "  \"base64\"\n" +
+    ");\n" +
+    "\n" +
+    "module.exports = {\n" +
+    "  payload: payload,\n" +
+    "  metadata: {\n" +
+    "    name:                  \"" + name + "\",\n" +
+    "    source:                \"" + sourceUrl + "\",\n" +
+    "    license:               \"" + license + "\",\n" +
+    "    fetchedAt:             \"" + fetchedAt + "\",\n" +
+    "    byteLength:            " + byteLength + ",\n" +
+    "    sha256:                \"" + sha256 + "\",\n" +
+    "    sha3_512:              \"" + sha3_512 + "\",\n" +
+    "    signatureB64:          \"" + sigB64 + "\",\n" +
+    "    publicKeyFingerprint:  \"" + pubFp + "\",\n" +
+    "    signingAlgorithm:      \"slh-dsa-shake-256f\",\n" +
+    "    canary:                " + (canary ? "\"" + canary + "\"" : "null") + ",\n" +
+    "  },\n" +
+    "  canaryCheck: " + canaryCheckSrc + ",\n" +
+    "};\n";
+
+  fs.writeFileSync(dst, output);
+  process.stdout.write("  ✓ " + dst + " — " + byteLength + " bytes payload, " +
+                       sigBytes.length + " byte signature, fingerprint " + pubFp.slice(0, 24) + "…\n");
+}
+
+main();

package/lib/vendor/blamejs/scripts/vendor-data-keygen.js

@@ -0,0 +1,101 @@
+"use strict";
+/**
+ * vendor-data-keygen.js — one-time generation of the maintainer
+ * vendor-data signing keypair (SLH-DSA-SHAKE-256f).
+ *
+ * The PRIVATE key is written to `.keys/vendor-data-private.pem`
+ * (gitignored — never committed). The PUBLIC key is written to
+ * `lib/vendor/.vendor-data-pubkey` (committed; ships in every npm
+ * tarball; the trust root every operator's verifier consults).
+ *
+ * Once generated, NEVER re-run this script — re-running rotates the
+ * key and invalidates every previously-signed `.data.js`. Key
+ * rotation requires re-signing every vendor data file via
+ * scripts/vendor-update.sh --refresh-data and shipping the new
+ * pubkey in the next release. Document rotation rationale in
+ * CHANGELOG.md.
+ */
+
+var fs = require("fs");
+var path = require("path");
+var pqcSoftware = require("../lib/pqc-software");
+
+var KEYS_DIR = path.resolve(__dirname, "..", ".keys");
+var VENDOR_PUBKEY_PEM = path.resolve(__dirname, "..", "lib", "vendor", ".vendor-data-pubkey");
+var VENDOR_PUBKEY_JS  = path.resolve(__dirname, "..", "lib", "vendor", "vendor-data-pubkey.js");
+var PRIV_PATH = path.join(KEYS_DIR, "vendor-data-private.pem");
+var PUB_PATH_LOCAL = path.join(KEYS_DIR, "vendor-data-public.pem");
+
+if (!fs.existsSync(KEYS_DIR)) {
+  fs.mkdirSync(KEYS_DIR, { recursive: true });
+}
+
+var slh = pqcSoftware.slh_dsa_shake_256f;
+var pair = slh.keygen();   // { publicKey: Uint8Array, secretKey: Uint8Array }
+
+function toPem(label, raw) {
+  var b64 = Buffer.from(raw).toString("base64");
+  var wrapped = b64.match(/.{1,64}/g).join("\n");
+  return "-----BEGIN " + label + "-----\n" + wrapped + "\n-----END " + label + "-----\n";
+}
+
+// Atomic create — `wx` flag opens-or-fails-with-EEXIST without a
+// time-of-check-time-of-use window (CodeQL js/file-system-race
+// defense). If --force is passed, we open with `w` which truncates;
+// the explicit overwrite is the operator's intent.
+var forceRotate = process.argv.includes("--force");
+var flag = forceRotate ? "w" : "wx";
+
+function writeFileExclusive(p, contents, mode) {
+  try {
+    var fd = fs.openSync(p, flag, mode);
+    try { fs.writeSync(fd, contents); } finally { fs.closeSync(fd); }
+  } catch (e) {
+    if (e && e.code === "EEXIST") {
+      process.stderr.write("vendor-data-keygen: " + p + " already exists. " +
+                           "Pass --force to ROTATE (invalidates all signed " +
+                           ".data.js files; ship new pubkey + re-sign every " +
+                           "vendor file).\n");
+      process.exit(2);
+    }
+    throw e;
+  }
+}
+
+var pubPem = toPem("SLH-DSA-SHAKE-256F PUBLIC KEY", pair.publicKey);
+var pubFp = require("crypto").createHash("sha256").update(pair.publicKey).digest("hex");
+
+writeFileExclusive(PRIV_PATH, toPem("SLH-DSA-SHAKE-256F PRIVATE KEY", pair.secretKey), 0o600);
+writeFileExclusive(PUB_PATH_LOCAL, pubPem, 0o644);
+writeFileExclusive(VENDOR_PUBKEY_PEM, pubPem, 0o644);
+
+// Also emit the JS-module form of the pubkey so lib/vendor-data.js
+// can require() it without any fs.readFileSync call — the loader is
+// fully packaging-mode-invariant only when both the .data.js payload
+// AND the verification key are inline modules.
+var pubkeyJs = "// vendor-data-pubkey — SLH-DSA-SHAKE-256f public key inlined as a CommonJS\n" +
+  "// module so lib/vendor-data.js can verify .data.js signatures without\n" +
+  "// any fs.readFileSync call. Packaging-mode-invariant (SEA / pkg / nexe /\n" +
+  "// esbuild / Bun compile / Deno compile / Lambda all preserve require()\n" +
+  "// resolution but not __dirname-relative file lookups).\n" +
+  "//\n" +
+  "// Fingerprint (SHA-256 of the raw SPKI): " + pubFp + "\n" +
+  "//\n" +
+  "// Regenerated by scripts/vendor-data-keygen.js whenever the maintainer\n" +
+  "// vendor-data signing key rotates. The companion PEM at\n" +
+  "// lib/vendor/.vendor-data-pubkey is the operator-readable form; this\n" +
+  "// JS module is the runtime form. Both regenerate together.\n" +
+  "\n" +
+  "\"use strict\";\n" +
+  "\n" +
+  "module.exports = " + JSON.stringify(pubPem) + ";\n";
+writeFileExclusive(VENDOR_PUBKEY_JS, pubkeyJs, 0o644);
+
+process.stdout.write("OK private key written to " + PRIV_PATH + " (mode 0600, NEVER commit)\n");
+process.stdout.write("OK public key  written to " + PUB_PATH_LOCAL + " (local copy for reference)\n");
+process.stdout.write("OK public key  committed at " + VENDOR_PUBKEY_PEM + " (PEM, operator inspection)\n");
+process.stdout.write("OK public key  committed at " + VENDOR_PUBKEY_JS + " (JS module, runtime trust root)\n");
+process.stdout.write("\n");
+process.stdout.write("Next: run `scripts/vendor-update.sh --refresh-data` to (re)sign every\n");
+process.stdout.write("vendor data file against this new key. Then commit the regenerated\n");
+process.stdout.write(".data.js files + the new .vendor-data-pubkey alongside the release.\n");

package/lib/vendor/blamejs/scripts/vendor-update.sh

@@ -0,0 +1,278 @@
+#!/usr/bin/env bash
+# vendor-update.sh — update a vendored dependency in lib/vendor/
+#
+# Usage:
+#   ./scripts/vendor-update.sh <package> [version]    # bundle (default: latest)
+#   ./scripts/vendor-update.sh --check                # show outdated vendored packages
+#   ./scripts/vendor-update.sh --diff <package>       # show vendored vs latest + changelog url
+#   ./scripts/vendor-update.sh --diff-all             # diff every outdated package
+#
+# What it does:
+#   1. installs the package(s) temporarily via npm
+#   2. bundles with esbuild (CJS, server-side)
+#   3. copies native prebuilds where applicable (argon2)
+#   4. updates lib/vendor/MANIFEST.json (version + bundledAt)
+#   5. removes the temporarily-installed npm package
+#   6. require()s the bundle to verify it has no unresolved imports
+#
+# After running:
+#   node test/smoke.js          # framework checks
+#   cd examples/wiki && rm -rf data data-e2e && node test/e2e.js   # wiki e2e
+#
+# Adding a new package: extend the case statement near the bottom.
+
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+MANIFEST="lib/vendor/MANIFEST.json"
+DATE=$(date +%Y-%m-%d)
+
+# Packages we vendor — kept in sync with MANIFEST.json. Used by --check
+# and --diff-all to know which entries to walk. argon2 was removed in
+# v0.4.x — Node 24's built-in `crypto.argon2*` replaced the prebuilds
+# (see lib/argon2-builtin.js). The case-block below preserves the
+# `argon2` operator-friendly error message for anyone who still tries
+# `vendor-update.sh argon2`.
+VENDORED_PACKAGES=("@noble/ciphers" "@noble/post-quantum" "@simplewebauthn/server" "peculiar-pki")
+
+get_vendored_ver() {
+  node -e "var m=require('./$MANIFEST'); var p=m.packages['$1']; console.log(p?p.version:'?')"
+}
+
+show_pkg_diff() {
+  local pkg="$1"
+  local vendored latest repo
+  vendored=$(get_vendored_ver "$pkg")
+  latest=$(npm view "$pkg" version 2>/dev/null || echo "?")
+  if [ "$vendored" = "$latest" ]; then
+    echo "$pkg: v$vendored — already up to date"
+    return
+  fi
+  repo=$(node -e "var m=require('./$MANIFEST'); var p=m.packages['$1']; console.log(p&&p.source?p.source:'')")
+
+  echo ""
+  echo "=== $pkg: v$vendored -> v$latest ==="
+  echo ""
+  echo "Versions published since v$vendored:"
+  npm view "$pkg" versions --json 2>/dev/null | node -e "
+    var versions = JSON.parse(require('fs').readFileSync(0,'utf8'));
+    if (!Array.isArray(versions)) versions = [versions];
+    var found = false;
+    versions.forEach(function(v) {
+      if (v === '$vendored') found = true;
+      else if (found) console.log('  ' + v);
+    });
+  " 2>/dev/null || echo "  (could not fetch version list)"
+
+  if [ -n "$repo" ]; then
+    echo ""
+    echo "Changelog: $repo/releases"
+    echo "Compare:   $repo/compare/v${vendored}...v${latest}"
+  fi
+  echo ""
+}
+
+if [ "${1:-}" = "--check" ]; then
+  echo "Checking vendored package versions..."
+  echo ""
+  printf "%-30s %-15s %-15s %-12s %s\n" "Package" "Vendored" "Latest" "Bundled" "Status"
+  printf "%-30s %-15s %-15s %-12s %s\n" "-------" "--------" "------" "-------" "------"
+  for pkg in "${VENDORED_PACKAGES[@]}"; do
+    vendored=$(get_vendored_ver "$pkg")
+    bundled=$(node -e "var m=require('./$MANIFEST'); var p=m.packages['$pkg']; console.log(p&&p.bundledAt?p.bundledAt:'?')")
+    if [ "$pkg" = "peculiar-pki" ]; then
+      latest="meta-bundle"
+      status="check x509+pkijs separately"
+    else
+      latest=$(npm view "$pkg" version 2>/dev/null || echo "?")
+      if [ "$vendored" = "$latest" ]; then status="up to date"; else status="UPDATE AVAILABLE"; fi
+    fi
+    printf "%-30s %-15s %-15s %-12s %s\n" "$pkg" "$vendored" "$latest" "$bundled" "$status"
+  done
+  exit 0
+fi
+
+if [ "${1:-}" = "--diff" ]; then
+  PKG="${2:?Usage: vendor-update.sh --diff <package>}"
+  show_pkg_diff "$PKG"
+  exit 0
+fi
+
+if [ "${1:-}" = "--diff-all" ]; then
+  any=false
+  for pkg in "${VENDORED_PACKAGES[@]}"; do
+    [ "$pkg" = "peculiar-pki" ] && continue
+    vendored=$(get_vendored_ver "$pkg")
+    latest=$(npm view "$pkg" version 2>/dev/null || echo "?")
+    if [ "$vendored" != "$latest" ]; then
+      show_pkg_diff "$pkg"
+      any=true
+    fi
+  done
+  [ "$any" = false ] && echo "All vendored packages are up to date."
+  exit 0
+fi
+
+# ---- update mode ----
+PKG="${1:?Usage: vendor-update.sh <package> [version]}"
+VER="${2:-latest}"
+
+echo "=== Vendoring $PKG@$VER ==="
+
+if [ "$PKG" != "peculiar-pki" ]; then
+  npm install "${PKG}@${VER}" --no-save --ignore-scripts 2>/dev/null
+  INSTALLED_VER=$(node -e "console.log(require('./node_modules/${PKG}/package.json').version)")
+  echo "Installed: $PKG@$INSTALLED_VER"
+fi
+
+case "$PKG" in
+  "@noble/ciphers")
+    echo 'export { xchacha20poly1305 } from "@noble/ciphers/chacha.js";' > _entry.mjs
+    npx esbuild _entry.mjs --bundle --format=cjs --minify --platform=node --outfile=lib/vendor/noble-ciphers.cjs
+    rm _entry.mjs
+    sed -i "1s|^|// XChaCha20-Poly1305 — vendored from @noble/ciphers v${INSTALLED_VER} by Paul Miller\n// License: MIT — https://github.com/paulmillr/noble-ciphers\n// Bundled with esbuild. Exports: xchacha20poly1305\n|" lib/vendor/noble-ciphers.cjs
+    ;;
+
+  "@noble/post-quantum")
+    cat > _entry.mjs <<'ENTRY'
+export { ml_kem512, ml_kem768, ml_kem1024 } from "@noble/post-quantum/ml-kem.js";
+export { ml_dsa44, ml_dsa65, ml_dsa87 } from "@noble/post-quantum/ml-dsa.js";
+export { slh_dsa_sha2_128f, slh_dsa_sha2_192f, slh_dsa_sha2_256f, slh_dsa_shake_128f, slh_dsa_shake_192f, slh_dsa_shake_256f } from "@noble/post-quantum/slh-dsa.js";
+ENTRY
+    npx esbuild _entry.mjs --bundle --format=cjs --minify --platform=node --outfile=lib/vendor/noble-post-quantum.cjs
+    rm _entry.mjs
+    sed -i "1s|^|// @noble/post-quantum v${INSTALLED_VER} — vendored from Paul Miller\n// License: MIT — https://github.com/paulmillr/noble-post-quantum\n// Bundled with esbuild. Exports: ml_kem512 / ml_kem768 / ml_kem1024 (FIPS 203 KEM),\n//   ml_dsa44 / ml_dsa65 / ml_dsa87 (FIPS 204 lattice signatures),\n//   slh_dsa_sha2_*f / slh_dsa_shake_*f (FIPS 205 hash signatures).\n|" lib/vendor/noble-post-quantum.cjs
+    ;;
+
+  "@simplewebauthn/server")
+    echo "module.exports = require(\"@simplewebauthn/server\");" > _entry.cjs
+    npx esbuild _entry.cjs --bundle --format=cjs --platform=node --minify --external:crypto --external:node:crypto --outfile=lib/vendor/simplewebauthn-server.cjs
+    rm _entry.cjs
+    sed -i "1s|^|// @simplewebauthn/server v${INSTALLED_VER} — vendored. License: MIT\n// https://github.com/MasterKale/SimpleWebAuthn\n|" lib/vendor/simplewebauthn-server.cjs
+    ;;
+
+  "argon2")
+    echo "ERROR: argon2 is no longer vendored. The framework uses Node's built-in"
+    echo "       crypto.argon2* (Node 24+) via lib/argon2-builtin.js. Operators"
+    echo "       wanting to override pass an alternative argon2 impl through"
+    echo "       opts to b.auth.password.{hash,verify,needsRehash}."
+    exit 1
+    ;;
+
+  "peculiar-pki")
+    # Meta-bundle: @peculiar/x509 + pkijs + reflect-metadata + every transitive
+    # ASN.1 schema package, packed into one CJS file. lib/mtls-ca.js loads the
+    # bundle via the default engine in lib/mtls-engine-default.js for CA gen,
+    # client-cert signing, and PKCS#12 packaging — no openssl CLI at runtime.
+    npm install --no-save --ignore-scripts \
+      reflect-metadata \
+      pvutils pvtsutils asn1js \
+      "@peculiar/asn1-schema" "@peculiar/asn1-x509" "@peculiar/asn1-ecc" "@peculiar/asn1-rsa" \
+      "@peculiar/x509" pkijs 2>/dev/null
+    X509_VER=$(node -e "console.log(require('./node_modules/@peculiar/x509/package.json').version)")
+    PKIJS_VER=$(node -e "console.log(require('./node_modules/pkijs/package.json').version)")
+    echo "Installed: @peculiar/x509@$X509_VER, pkijs@$PKIJS_VER"
+    cat > _pki-entry.mjs <<'ENTRY'
+// reflect-metadata polyfills Reflect.metadata / defineMetadata / getMetadata.
+// @peculiar/asn1-schema's TypeScript decorators emit calls into these at
+// runtime, so the polyfill must load first via side-effect import.
+import "reflect-metadata";
+import * as pkijsLib from "pkijs";
+import * as x509Lib from "@peculiar/x509";
+import { webcrypto } from "node:crypto";
+const engine = new pkijsLib.CryptoEngine({ name: "node", crypto: webcrypto, subtle: webcrypto.subtle });
+pkijsLib.setEngine("node", engine);
+x509Lib.cryptoProvider.set(webcrypto);
+export const pkijs = pkijsLib;
+export const x509 = x509Lib;
+export const crypto = webcrypto;
+ENTRY
+    npx esbuild _pki-entry.mjs --bundle --format=cjs --platform=node --minify \
+      --external:node:crypto --external:crypto \
+      --outfile=lib/vendor/pki.cjs
+    rm _pki-entry.mjs
+    sed -i "1s|^|// Peculiar PKI — vendored @peculiar/x509 v${X509_VER} + pkijs v${PKIJS_VER}\n// License: MIT. Bundled with esbuild.\n// Exports: { pkijs, x509, crypto (node:webcrypto bound) }\n// Includes: reflect-metadata, pvutils, pvtsutils, asn1js, @peculiar/asn1-*\n// Used by lib/mtls-engine-default.js for pure-JS CA + PKCS#12 operations.\n|" lib/vendor/pki.cjs
+    INSTALLED_VER="${X509_VER}+pkijs-${PKIJS_VER}"
+    ;;
+
+  *)
+    echo "Unknown package: $PKG"
+    echo "Add a case to this script for bundling instructions."
+    npm uninstall "$PKG" --no-save 2>/dev/null || true
+    exit 1
+    ;;
+esac
+
+# Update MANIFEST.json
+node -e "
+var fs = require('fs');
+var m = JSON.parse(fs.readFileSync('$MANIFEST', 'utf8'));
+var pkg = '$PKG';
+if (m.packages[pkg]) {
+  m.packages[pkg].version = '$INSTALLED_VER';
+  m.packages[pkg].bundledAt = '$DATE';
+  fs.writeFileSync('$MANIFEST', JSON.stringify(m, null, 2) + '\n');
+  console.log('Updated MANIFEST.json: ' + pkg + ' -> ' + '$INSTALLED_VER');
+} else {
+  console.log('NOTE: ' + pkg + ' not in MANIFEST.json — add the entry manually');
+}
+"
+
+# Clean up node_modules
+if [ "$PKG" = "peculiar-pki" ]; then
+  npm uninstall reflect-metadata pvutils pvtsutils asn1js \
+    "@peculiar/asn1-schema" "@peculiar/asn1-x509" "@peculiar/asn1-ecc" "@peculiar/asn1-rsa" \
+    "@peculiar/x509" pkijs --no-save 2>/dev/null || true
+else
+  npm uninstall "$PKG" --no-save 2>/dev/null || true
+fi
+
+# Verify the bundle has no unresolved requires after the npm cleanup
+echo ""
+echo "=== Verifying bundle integrity ==="
+node -e "
+var m = require('./$MANIFEST');
+var p = m.packages['$PKG'];
+if (!p || !p.files) { console.log('  (no files entry; skipping)'); process.exit(0); }
+var ok = true;
+Object.values(p.files).forEach(function(f) {
+  if (typeof f !== 'string' || !f.endsWith('.cjs')) return;
+  try { require('./' + f); console.log('  ' + f + ': OK'); }
+  catch(e) { console.log('  ' + f + ': FAIL — ' + e.message); ok = false; }
+});
+if (!ok) process.exit(1);
+" || { echo "Bundle verification failed — do not commit."; exit 1; }
+
+echo ""
+echo "=== Bundle sizes ==="
+node -e "
+var fs = require('fs');
+var m = JSON.parse(fs.readFileSync('$MANIFEST', 'utf8'));
+var p = m.packages['$PKG'];
+if (!p) process.exit();
+Object.values(p.files || {}).forEach(function(f) {
+  if (typeof f !== 'string') return;
+  try {
+    var s = fs.statSync(f);
+    console.log('  ' + f + ': ' + (s.size / 1024).toFixed(1) + ' KB');
+  } catch(_e) {}
+});
+"
+
+echo ""
+echo "=== Refreshing MANIFEST.json sha256 hashes ==="
+# Hashes track the on-disk vendored bundle. Without this final refresh
+# the bundledAt and version fields in MANIFEST.json drift ahead of
+# hashes.server, and the vendor-manifest smoke gate fails on the next
+# test run. Auto-running the refresh keeps the supply-chain integrity
+# story mechanically authoritative rather than relying on operator
+# memory to run the second step.
+node scripts/refresh-vendor-manifest.js || { echo "Manifest hash refresh failed."; exit 1; }
+
+echo ""
+echo "=== Done: $PKG v$INSTALLED_VER vendored ==="
+echo ""
+echo "Next steps:"
+echo "  1. node test/smoke.js"
+echo "  2. cd examples/wiki && rm -rf data data-e2e && node test/e2e.js"
+echo "  3. git add lib/vendor/ && git commit"