@certen.io/cli 0.2.0 → 0.3.1

package/dist/keystore.d.ts

@@ -0,0 +1,79 @@
+declare const KEYS_DIR: string;
+/**
+ * A local Ed25519 signing key.
+ *
+ * The CLI shipped without one, which made it read-only in practice: `tx sign` takes
+ * `--signature <hex>`, so anyone without their own Ed25519 tooling could authenticate and
+ * query and then stop. The SDK's `sign` callback covers people writing code; it does nothing
+ * for someone driving the CLI.
+ *
+ * The non-custodial posture is unchanged. The key is generated here, encrypted here, and
+ * never leaves this machine — the CLI sends a signature, never a private key. This file is
+ * the local half of the same contract the SDK states: you hold the key, we hand you bytes.
+ */
+/** scrypt, not argon2id. */
+declare const KDF: {
+    readonly N: 65536;
+    readonly r: 8;
+    readonly p: 1;
+    readonly keylen: 32;
+};
+declare const CIPHER = "aes-256-gcm";
+export interface StoredKey {
+    version: number;
+    name: string;
+    algorithm: 'ed25519';
+    /** Raw 32-byte Ed25519 public key, hex. */
+    publicKey: string;
+    /** sha256(raw public key), hex — what `identity create` wants as `public_key_hash`. */
+    publicKeyHash: string;
+    createdAt: string;
+    encryption: {
+        kdf: 'scrypt';
+        params: typeof KDF;
+        salt: string;
+        cipher: typeof CIPHER;
+        iv: string;
+        authTag: string;
+    } | null;
+    /** PKCS8 DER, hex. Ciphertext when `encryption` is set, plaintext when it is null. */
+    privateKey: string;
+}
+export interface KeyInfo {
+    name: string;
+    publicKey: string;
+    publicKeyHash: string;
+    createdAt: string;
+    encrypted: boolean;
+}
+export declare function assertValidName(name: string): void;
+declare function keyPath(name: string): string;
+export declare function publicKeyHashOf(rawPub: Buffer): string;
+export declare function keyExists(name: string): boolean;
+export declare function generateKey(name: string, passphrase: string | null): KeyInfo;
+export declare function readKeyFile(name: string): StoredKey;
+/** Metadata only — never decrypts, so it never needs a passphrase. */
+export declare function getKeyInfo(name: string): KeyInfo;
+export declare function listKeys(): KeyInfo[];
+export declare function deleteKey(name: string): void;
+export declare function isEncrypted(name: string): boolean;
+/**
+ * Sign the RAW BYTES of `hashHex` — matching the SDK's `SignFn` contract exactly.
+ *
+ * The two ways to get this wrong are signing the ASCII of the hex string, and hashing the hash
+ * again before signing. Both produce a well-formed 128-hex signature that the gateway rejects
+ * with a signature-verification error that names neither cause, so the decoding happens here
+ * once rather than in every caller.
+ */
+export declare function signHash(name: string, passphrase: string | null, hashHex: string): string;
+/**
+ * Verify a stored key can actually produce a signature its own public key accepts.
+ *
+ * Cheap, and it catches a passphrase that decrypts to garbage which happens to survive GCM
+ * (it cannot, in practice) as well as any future format drift, before a signature goes to the
+ * gateway and comes back as an opaque rejection.
+ */
+export declare function selfTest(name: string, passphrase: string | null): boolean;
+/** Constant-time compare for the confirm-passphrase path. */
+export declare function samePassphrase(a: string, b: string): boolean;
+export { KEYS_DIR, keyPath };

package/dist/keystore.js

@@ -0,0 +1,274 @@
+import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, generateKeyPairSync, randomBytes, scryptSync, sign as edSign, timingSafeEqual, verify as edVerify, } from 'crypto';
+import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, statSync, readdirSync, unlinkSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+const KEYS_DIR = join(homedir(), '.certen', 'keys');
+/**
+ * A local Ed25519 signing key.
+ *
+ * The CLI shipped without one, which made it read-only in practice: `tx sign` takes
+ * `--signature <hex>`, so anyone without their own Ed25519 tooling could authenticate and
+ * query and then stop. The SDK's `sign` callback covers people writing code; it does nothing
+ * for someone driving the CLI.
+ *
+ * The non-custodial posture is unchanged. The key is generated here, encrypted here, and
+ * never leaves this machine — the CLI sends a signature, never a private key. This file is
+ * the local half of the same contract the SDK states: you hold the key, we hand you bytes.
+ */
+/** scrypt, not argon2id. */
+// argon2id is the better KDF and was the original intent. Every Node implementation of it is a
+// native module, and a native dependency in a globally-installed CLI turns `npm i -g @certen.io/cli`
+// into a compiler invocation that fails on any machine without build tools — the exact audience
+// this command exists to serve. scrypt is memory-hard, in the standard library, and at these
+// parameters (~134 MB, ~1s) is a sound choice for a passphrase-derived file key. Revisit if a
+// pure-WASM argon2id becomes viable.
+const KDF = { N: 65536, r: 8, p: 1, keylen: 32 };
+// Node's scrypt refuses to allocate past `maxmem` (32 MB default). 128*N*r is ~67 MB here, so it
+// must be raised explicitly or every generate fails with an opaque ERR_CRYPTO_INVALID_SCRYPT_PARAM.
+const SCRYPT_MAXMEM = 256 * 1024 * 1024;
+const CIPHER = 'aes-256-gcm';
+const VERSION = 1;
+/**
+ * Key names become filenames, so anything that could escape the directory or collide with a
+ * different name after normalization is rejected rather than sanitized. Silently rewriting a
+ * name means `certen keys sign --name ../../x` signs with something the user did not choose.
+ */
+const NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
+export function assertValidName(name) {
+    if (!NAME_RE.test(name)) {
+        throw new Error(`Invalid key name "${name}". Use 1-64 characters: letters, digits, hyphen, underscore; must start with a letter or digit.`);
+    }
+}
+function keyPath(name) {
+    assertValidName(name);
+    return join(KEYS_DIR, `${name}.json`);
+}
+function ensureKeysDir() {
+    if (!existsSync(KEYS_DIR)) {
+        mkdirSync(KEYS_DIR, { recursive: true, mode: 0o700 });
+    }
+    try {
+        chmodSync(KEYS_DIR, 0o700);
+    }
+    catch {
+        // Windows or a non-permission-aware filesystem: best effort, same as config.ts.
+    }
+}
+function writeKeyFile(name, key) {
+    ensureKeysDir();
+    const path = keyPath(name);
+    writeFileSync(path, JSON.stringify(key, null, 2), { encoding: 'utf-8', mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Best effort, as above.
+    }
+}
+/**
+ * Refuse to read a key file that group or world can read. Same rule config.ts applies to the
+ * API key, and it matters more here: an API key can be revoked from the portal in one click,
+ * a signing key that controls an on-chain key page cannot.
+ *
+ * POSIX only. Windows does not implement POSIX mode bits — `chmod` is a no-op there and
+ * `statSync().mode` reports a synthesized 0666/0444 derived from the read-only attribute, never
+ * 0600. Enforcing the check on that synthetic value rejects every key file on Windows, including
+ * ones the user just created, while telling them to run a `chmod` that cannot fix it. Access
+ * control on Windows is the file's ACL, which it inherits from the user profile directory.
+ */
+function assertFileSecure(path) {
+    if (process.platform === 'win32')
+        return;
+    try {
+        const mode = statSync(path).mode & 0o077;
+        if (mode !== 0) {
+            throw new Error(`Refusing to read ${path} — permissions are not 0600. Run: chmod 600 "${path}"`);
+        }
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.startsWith('Refusing'))
+            throw err;
+        // stat failed for a reason other than our own check (missing file): let the caller's
+        // existence check produce the clearer message.
+    }
+}
+/** Raw 32-byte public key from a KeyObject. The last 32 bytes of the SPKI DER are the key. */
+function rawPublicKey(publicKey) {
+    const spki = publicKey.export({ format: 'der', type: 'spki' });
+    return spki.subarray(spki.length - 32);
+}
+export function publicKeyHashOf(rawPub) {
+    return createHash('sha256').update(rawPub).digest('hex');
+}
+function deriveFileKey(passphrase, salt) {
+    return scryptSync(passphrase, salt, KDF.keylen, {
+        N: KDF.N, r: KDF.r, p: KDF.p, maxmem: SCRYPT_MAXMEM,
+    });
+}
+export function keyExists(name) {
+    return existsSync(keyPath(name));
+}
+export function generateKey(name, passphrase) {
+    assertValidName(name);
+    if (keyExists(name)) {
+        throw new Error(`Key "${name}" already exists at ${keyPath(name)}. Choose another name or delete it first.`);
+    }
+    const { publicKey, privateKey } = generateKeyPairSync('ed25519');
+    const rawPub = rawPublicKey(publicKey);
+    const pkcs8 = privateKey.export({ format: 'der', type: 'pkcs8' });
+    let encryption = null;
+    let stored;
+    if (passphrase === null) {
+        stored = pkcs8.toString('hex');
+    }
+    else {
+        const salt = randomBytes(16);
+        const iv = randomBytes(12);
+        const fileKey = deriveFileKey(passphrase, salt);
+        const cipher = createCipheriv(CIPHER, fileKey, iv);
+        const ct = Buffer.concat([cipher.update(pkcs8), cipher.final()]);
+        encryption = {
+            kdf: 'scrypt', params: KDF, salt: salt.toString('hex'),
+            cipher: CIPHER, iv: iv.toString('hex'), authTag: cipher.getAuthTag().toString('hex'),
+        };
+        stored = ct.toString('hex');
+    }
+    const key = {
+        version: VERSION,
+        name,
+        algorithm: 'ed25519',
+        publicKey: rawPub.toString('hex'),
+        publicKeyHash: publicKeyHashOf(rawPub),
+        createdAt: new Date().toISOString(),
+        encryption,
+        privateKey: stored,
+    };
+    writeKeyFile(name, key);
+    return toInfo(key);
+}
+function toInfo(k) {
+    return {
+        name: k.name,
+        publicKey: k.publicKey,
+        publicKeyHash: k.publicKeyHash,
+        createdAt: k.createdAt,
+        encrypted: k.encryption !== null,
+    };
+}
+export function readKeyFile(name) {
+    const path = keyPath(name);
+    if (!existsSync(path)) {
+        throw new Error(`No key named "${name}". Run \`certen keys list\` to see what you have, or \`certen keys generate --name ${name}\`.`);
+    }
+    assertFileSecure(path);
+    const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+    if (parsed.version !== VERSION) {
+        throw new Error(`Key "${name}" has unsupported version ${parsed.version} (this CLI understands ${VERSION}).`);
+    }
+    if (parsed.algorithm !== 'ed25519') {
+        throw new Error(`Key "${name}" uses unsupported algorithm "${parsed.algorithm}".`);
+    }
+    return parsed;
+}
+/** Metadata only — never decrypts, so it never needs a passphrase. */
+export function getKeyInfo(name) {
+    return toInfo(readKeyFile(name));
+}
+export function listKeys() {
+    if (!existsSync(KEYS_DIR))
+        return [];
+    return readdirSync(KEYS_DIR)
+        .filter((f) => f.endsWith('.json'))
+        .map((f) => f.slice(0, -5))
+        .filter((n) => NAME_RE.test(n))
+        .map((n) => {
+        try {
+            return toInfo(readKeyFile(n));
+        }
+        catch {
+            // A corrupt or unreadable file should not make `keys list` fail for every other key.
+            return null;
+        }
+    })
+        .filter((k) => k !== null)
+        .sort((a, b) => a.name.localeCompare(b.name));
+}
+export function deleteKey(name) {
+    const path = keyPath(name);
+    if (!existsSync(path))
+        throw new Error(`No key named "${name}".`);
+    unlinkSync(path);
+}
+export function isEncrypted(name) {
+    return readKeyFile(name).encryption !== null;
+}
+function decryptPrivateKey(k, passphrase) {
+    if (k.encryption === null)
+        return Buffer.from(k.privateKey, 'hex');
+    if (passphrase === null) {
+        throw new Error(`Key "${k.name}" is encrypted — a passphrase is required.`);
+    }
+    const enc = k.encryption;
+    const fileKey = deriveFileKey(passphrase, Buffer.from(enc.salt, 'hex'));
+    const decipher = createDecipheriv(enc.cipher, fileKey, Buffer.from(enc.iv, 'hex'));
+    decipher.setAuthTag(Buffer.from(enc.authTag, 'hex'));
+    try {
+        return Buffer.concat([decipher.update(Buffer.from(k.privateKey, 'hex')), decipher.final()]);
+    }
+    catch {
+        // GCM auth failure is indistinguishable from a wrong passphrase, and saying "wrong
+        // passphrase" for a corrupted file sends people down the wrong path. Say both.
+        throw new Error(`Could not decrypt key "${k.name}" — wrong passphrase, or the file has been modified.`);
+    }
+}
+/**
+ * Sign the RAW BYTES of `hashHex` — matching the SDK's `SignFn` contract exactly.
+ *
+ * The two ways to get this wrong are signing the ASCII of the hex string, and hashing the hash
+ * again before signing. Both produce a well-formed 128-hex signature that the gateway rejects
+ * with a signature-verification error that names neither cause, so the decoding happens here
+ * once rather than in every caller.
+ */
+export function signHash(name, passphrase, hashHex) {
+    const clean = hashHex.trim().toLowerCase().replace(/^0x/, '');
+    if (!/^[0-9a-f]+$/.test(clean) || clean.length % 2 !== 0) {
+        throw new Error(`--hash must be an even-length hex string, got "${hashHex}".`);
+    }
+    const k = readKeyFile(name);
+    const pkcs8 = decryptPrivateKey(k, passphrase);
+    const privateKey = createPrivateKey({ key: pkcs8, format: 'der', type: 'pkcs8' });
+    const sig = edSign(null, Buffer.from(clean, 'hex'), privateKey);
+    return sig.toString('hex');
+}
+/**
+ * Verify a stored key can actually produce a signature its own public key accepts.
+ *
+ * Cheap, and it catches a passphrase that decrypts to garbage which happens to survive GCM
+ * (it cannot, in practice) as well as any future format drift, before a signature goes to the
+ * gateway and comes back as an opaque rejection.
+ */
+export function selfTest(name, passphrase) {
+    const k = readKeyFile(name);
+    const probe = randomBytes(32).toString('hex');
+    const sig = Buffer.from(signHash(name, passphrase, probe), 'hex');
+    const pub = createPublicKey({
+        // SPKI DER prefix for Ed25519, then the raw 32-byte key.
+        key: Buffer.concat([
+            Buffer.from('302a300506032b6570032100', 'hex'),
+            Buffer.from(k.publicKey, 'hex'),
+        ]),
+        format: 'der',
+        type: 'spki',
+    });
+    return edVerify(null, Buffer.from(probe, 'hex'), pub, sig);
+}
+/** Constant-time compare for the confirm-passphrase path. */
+export function samePassphrase(a, b) {
+    const ab = Buffer.from(a, 'utf-8');
+    const bb = Buffer.from(b, 'utf-8');
+    if (ab.length !== bb.length)
+        return false;
+    return timingSafeEqual(ab, bb);
+}
+export { KEYS_DIR, keyPath };
+//# sourceMappingURL=keystore.js.map

package/dist/keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore.js","sourceRoot":"","sources":["../src/keystore.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAC/E,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,IAAI,MAAM,EAAE,eAAe,EAC7E,MAAM,IAAI,QAAQ,GACnB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACtH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAEpD;;;;;;;;;;;GAWG;AAEH,4BAA4B;AAC5B,+FAA+F;AAC/F,qGAAqG;AACrG,gGAAgG;AAChG,6FAA6F;AAC7F,8FAA8F;AAC9F,qCAAqC;AACrC,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAW,CAAC;AAC1D,iGAAiG;AACjG,oGAAoG;AACpG,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,MAAM,MAAM,GAAG,aAAa,CAAC;AAC7B,MAAM,OAAO,GAAG,CAAC,CAAC;AA+BlB;;;;GAIG;AACH,MAAM,OAAO,GAAG,kCAAkC,CAAC;AAEnD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,iGAAiG,CAC3H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;IAClF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,GAAc;IAChD,aAAa,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,gDAAgD,IAAI,GAAG,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,MAAM,GAAG,CAAC;QAC1E,qFAAqF;QACrF,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAS,YAAY,CAAC,SAA6C;IACjE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAW,CAAC;IACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,IAAY;IACrD,OAAO,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE;QAC9C,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,UAAyB;IACjE,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,uBAAuB,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAW,CAAC;IAE5E,IAAI,UAAU,GAA4B,IAAI,CAAC;IAC/C,IAAI,MAAc,CAAC;IAEnB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,UAAU,GAAG;YACX,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtD,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;SACrF,CAAC;QACF,MAAM,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAc;QACrB,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACjC,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC;QACtC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU;QACV,UAAU,EAAE,MAAM;KACnB,CAAC;IAEF,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CAAC,CAAY;IAC1B,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,sFAAsF,IAAI,KAAK,CAAC,CAAC;IACxI,CAAC;IACD,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAc,CAAC;IACpE,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,6BAA6B,MAAM,CAAC,OAAO,0BAA0B,OAAO,IAAI,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,iCAAiC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,WAAW,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAClE,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAY,EAAE,UAAyB;IAChE,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACnE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,4CAA4C,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IACnF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,mFAAmF;QACnF,+EAA+E;QAC/E,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,sDAAsD,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,UAAyB,EAAE,OAAe;IAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,kDAAkD,OAAO,IAAI,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,UAAyB;IAC9D,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,eAAe,CAAC;QAC1B,yDAAyD;QACzD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC;SAChC,CAAC;QACF,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,CAAS,EAAE,CAAS;IACjD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC"}

package/dist/passphrase.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Passphrase resolution for local signing keys.
+ *
+ * Order is deliberate: an explicit env var always wins so CI and scripted runs never depend on a
+ * TTY, and the interactive prompt is the fallback rather than the default. A command that blocks
+ * on a hidden prompt inside a pipeline looks like a hang, which is the worst failure mode here.
+ */
+declare const ENV_VAR = "CERTEN_KEY_PASSPHRASE";
+export declare function passphraseFromEnv(): string | null;
+/**
+ * Resolve the passphrase for reading an existing key.
+ *
+ * `encrypted === false` short-circuits so an unencrypted key never prompts — otherwise every
+ * `--no-passphrase` key would still stop and ask for one it does not use.
+ */
+export declare function resolvePassphrase(encrypted: boolean, keyName: string): Promise<string | null>;
+/**
+ * Resolve the passphrase for a NEW key, confirming it.
+ *
+ * A typo here is unrecoverable — there is no reset for a key that only exists locally — so the
+ * confirmation is not optional when prompting. Supplying it via the env var skips confirmation,
+ * because a script that set it once cannot mistype it twice differently.
+ */
+export declare function resolveNewPassphrase(noPassphrase: boolean): Promise<string | null>;
+export { ENV_VAR as PASSPHRASE_ENV_VAR };

package/dist/passphrase.js

@@ -0,0 +1,111 @@
+/**
+ * Passphrase resolution for local signing keys.
+ *
+ * Order is deliberate: an explicit env var always wins so CI and scripted runs never depend on a
+ * TTY, and the interactive prompt is the fallback rather than the default. A command that blocks
+ * on a hidden prompt inside a pipeline looks like a hang, which is the worst failure mode here.
+ */
+const ENV_VAR = 'CERTEN_KEY_PASSPHRASE';
+export function passphraseFromEnv() {
+    const v = process.env[ENV_VAR];
+    return v && v.length > 0 ? v : null;
+}
+function isInteractive() {
+    return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+/**
+ * Read a line from the TTY without echoing it.
+ *
+ * Written against raw stdin rather than readline's historical `output: null` trick, which echoes
+ * on some Windows terminals — and a passphrase echoed into scrollback is worse than no prompt.
+ */
+function readHidden(prompt) {
+    return new Promise((resolve, reject) => {
+        const stdin = process.stdin;
+        process.stdout.write(prompt);
+        const chars = [];
+        const wasRaw = stdin.isRaw === true;
+        const cleanup = () => {
+            stdin.removeListener('data', onData);
+            if (stdin.setRawMode)
+                stdin.setRawMode(wasRaw);
+            stdin.pause();
+            process.stdout.write('\n');
+        };
+        const onData = (chunk) => {
+            for (const byte of chunk) {
+                switch (byte) {
+                    case 0x03: // Ctrl-C
+                        cleanup();
+                        reject(new Error('Cancelled.'));
+                        return;
+                    case 0x0d: // CR
+                    case 0x0a: // LF
+                        cleanup();
+                        resolve(chars.join(''));
+                        return;
+                    case 0x7f: // DEL
+                    case 0x08: // BS
+                        chars.pop();
+                        break;
+                    default:
+                        // Ignore other control characters; accept everything else as passphrase content.
+                        if (byte >= 0x20)
+                            chars.push(String.fromCharCode(byte));
+                }
+            }
+        };
+        if (stdin.setRawMode)
+            stdin.setRawMode(true);
+        stdin.resume();
+        stdin.setEncoding('binary');
+        stdin.on('data', onData);
+        stdin.on('error', (err) => {
+            cleanup();
+            reject(err);
+        });
+    });
+}
+/**
+ * Resolve the passphrase for reading an existing key.
+ *
+ * `encrypted === false` short-circuits so an unencrypted key never prompts — otherwise every
+ * `--no-passphrase` key would still stop and ask for one it does not use.
+ */
+export async function resolvePassphrase(encrypted, keyName) {
+    if (!encrypted)
+        return null;
+    const fromEnv = passphraseFromEnv();
+    if (fromEnv !== null)
+        return fromEnv;
+    if (!isInteractive()) {
+        throw new Error(`Key "${keyName}" is encrypted and there is no TTY to prompt on. Set ${ENV_VAR}, or run this interactively.`);
+    }
+    return readHidden(`Passphrase for key "${keyName}": `);
+}
+/**
+ * Resolve the passphrase for a NEW key, confirming it.
+ *
+ * A typo here is unrecoverable — there is no reset for a key that only exists locally — so the
+ * confirmation is not optional when prompting. Supplying it via the env var skips confirmation,
+ * because a script that set it once cannot mistype it twice differently.
+ */
+export async function resolveNewPassphrase(noPassphrase) {
+    if (noPassphrase)
+        return null;
+    const fromEnv = passphraseFromEnv();
+    if (fromEnv !== null)
+        return fromEnv;
+    if (!isInteractive()) {
+        throw new Error(`No TTY to prompt for a passphrase. Set ${ENV_VAR}, or pass --no-passphrase to store the key unencrypted.`);
+    }
+    const first = await readHidden('Passphrase for the new key (empty to store unencrypted): ');
+    if (first.length === 0)
+        return null;
+    const second = await readHidden('Confirm passphrase: ');
+    if (first !== second)
+        throw new Error('Passphrases did not match. Nothing was written.');
+    return first;
+}
+export { ENV_VAR as PASSPHRASE_ENV_VAR };
+//# sourceMappingURL=passphrase.js.map

package/dist/passphrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase.js","sourceRoot":"","sources":["../src/passphrase.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,OAAO,GAAG,uBAAuB,CAAC;AAExC,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE7B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QAEpC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,UAAU;gBAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,QAAQ,IAAI,EAAE,CAAC;oBACb,KAAK,IAAI,EAAE,SAAS;wBAClB,OAAO,EAAE,CAAC;wBACV,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;wBAChC,OAAO;oBACT,KAAK,IAAI,CAAC,CAAC,KAAK;oBAChB,KAAK,IAAI,EAAE,KAAK;wBACd,OAAO,EAAE,CAAC;wBACV,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxB,OAAO;oBACT,KAAK,IAAI,CAAC,CAAC,MAAM;oBACjB,KAAK,IAAI,EAAE,KAAK;wBACd,KAAK,CAAC,GAAG,EAAE,CAAC;wBACZ,MAAM;oBACR;wBACE,iFAAiF;wBACjF,IAAI,IAAI,IAAI,IAAI;4BAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,KAAK,CAAC,UAAU;YAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAkB,EAAE,OAAe;IACzE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAErC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,QAAQ,OAAO,wDAAwD,OAAO,8BAA8B,CAC7G,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC,uBAAuB,OAAO,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,YAAqB;IAC9D,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAErC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,yDAAyD,CAC3G,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,2DAA2D,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,sBAAsB,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,OAAO,EAAE,OAAO,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/signer.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Bridge a local key into the shape the rest of the CLI needs.
+ *
+ * `--sign-with` resolves a stored key once, unlocks it once, and hands back both the public
+ * material and a `sign` function. Unlocking once matters: a flow that signs twice must not
+ * prompt twice, and holding the passphrase in a closure keeps it off argv where every process
+ * lister on the machine can read it.
+ */
+export interface ResolvedSigner {
+    publicKey: string;
+    publicKeyHash: string;
+    sign: (hashHex: string) => string;
+}
+export declare function resolveSigner(name: string): Promise<ResolvedSigner>;
+/**
+ * Resolve the signature/public-key pair for a command that accepts either `--sign-with` or the
+ * explicit `--signature`/`--public-key` pair.
+ *
+ * The explicit pair stays first-class — it is how an HSM, an air-gapped machine, or someone
+ * else's policy signer participates, and removing it would trade one locked-out audience for
+ * another. `--sign-with` is the convenience path, not the replacement.
+ */
+export declare function resolveSignature(opts: {
+    signWith?: string;
+    signature?: string;
+    publicKey?: string;
+    hash?: string;
+}): Promise<{
+    signature: string;
+    publicKey: string;
+}>;

package/dist/signer.js

@@ -0,0 +1,36 @@
+import { getKeyInfo, signHash } from './keystore.js';
+import { resolvePassphrase } from './passphrase.js';
+export async function resolveSigner(name) {
+    const info = getKeyInfo(name);
+    const passphrase = await resolvePassphrase(info.encrypted, name);
+    return {
+        publicKey: info.publicKey,
+        publicKeyHash: info.publicKeyHash,
+        sign: (hashHex) => signHash(name, passphrase, hashHex),
+    };
+}
+/**
+ * Resolve the signature/public-key pair for a command that accepts either `--sign-with` or the
+ * explicit `--signature`/`--public-key` pair.
+ *
+ * The explicit pair stays first-class — it is how an HSM, an air-gapped machine, or someone
+ * else's policy signer participates, and removing it would trade one locked-out audience for
+ * another. `--sign-with` is the convenience path, not the replacement.
+ */
+export async function resolveSignature(opts) {
+    if (opts.signWith) {
+        if (opts.signature) {
+            throw new Error('Pass either --sign-with or --signature, not both.');
+        }
+        if (!opts.hash) {
+            throw new Error('--sign-with needs the hash to sign; this command did not supply one.');
+        }
+        const signer = await resolveSigner(opts.signWith);
+        return { signature: signer.sign(opts.hash), publicKey: signer.publicKey };
+    }
+    if (!opts.signature || !opts.publicKey) {
+        throw new Error('Provide --sign-with <key>, or both --signature <hex> and --public-key <hex>.');
+    }
+    return { signature: opts.signature, publicKey: opts.publicKey };
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAgBpD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACjE,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAKtC;IACC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AAClE,CAAC"}