@dzhechkov/harness-core 0.3.119 → 0.3.121

package/src/sign.ts

@@ -12,7 +12,7 @@
  * Zero dependencies: `node:crypto`, `node:fs`, `node:path`.
  */
 
-import { createHash, sign as cryptoSign, verify as cryptoVerify, createPrivateKey, createPublicKey } from 'node:crypto';
+import { createHash, sign as cryptoSign, verify as cryptoVerify, createPrivateKey, createPublicKey, generateKeyPairSync } from 'node:crypto';
 import { readFileSync, existsSync, readdirSync, openSync, fstatSync, closeSync, constants as fsConstants } from 'node:fs';
 import { isAbsolute, join, relative, resolve, sep } from 'node:path';
 
@@ -159,6 +159,27 @@ export function buildManifest(root: string, pack: string, files: readonly string
   return { version: MANIFEST_VERSION, pack, files: entries };
 }
 
+/** A freshly-generated Ed25519 signing keypair as PEM strings (pkcs8 private / spki public). */
+export interface SigningKeypair {
+  /** pkcs8 PEM — the PRIVATE key. NEVER commit this; it belongs OUTSIDE the repo (~/.dz/keys/dz.key). */
+  readonly privateKey: string;
+  /** spki PEM — the PUBLIC key. Commit this as the `keys/dz.pub` trust root. */
+  readonly publicKey: string;
+}
+
+/**
+ * Generate a fresh Ed25519 keypair for `dz sign --init`. The private key is returned for the CLI to write
+ * OUTSIDE the repo (the CLI enforces `assertKeyOutsideTree`); the public key is printed for the operator to
+ * commit as `keys/dz.pub`. Ed25519 gives tamper-evidence, never truthfulness (the recalled scope lesson).
+ */
+export function generateSigningKeypair(): SigningKeypair {
+  const { publicKey, privateKey } = generateKeyPairSync('ed25519');
+  return {
+    privateKey: privateKey.export({ type: 'pkcs8', format: 'pem' }).toString(),
+    publicKey: publicKey.export({ type: 'spki', format: 'pem' }).toString(),
+  };
+}
+
 export function signManifest(manifest: Manifest, privateKeyPem: string): SignedManifest {
   // Defence in depth (round-2 review): `pack` is interpolated into a newline-delimited signed header.
   // `verifyManifest` already refuses an unsafe pack name, so an ambiguous header could never verify —