@harborclient/sdk 1.0.32 → 1.0.33

package/dist/signing/cli.d.ts

@@ -1,9 +1,16 @@
+/**
+ * Runtime context for the sign CLI.
+ */
+export interface RunSignCliOptions {
+    cwd?: string;
+}
 /**
  * Runs the plugin sign CLI and returns a process exit code.
  *
  * @param argv - Raw process argv including node and script paths.
+ * @param options - Runtime context for path resolution.
  */
-export declare function runSignCli(argv: string[]): Promise<number>;
+export declare function runSignCli(argv: string[], options?: RunSignCliOptions): Promise<number>;
 /**
  * Runs the plugin verify CLI and returns a process exit code.
  *

package/dist/signing/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/signing/cli.ts"],"names":[],"mappings":"AAwFA;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BhE;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyClE"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/signing/cli.ts"],"names":[],"mappings":"AAuBA;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA+ED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkCjG;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyClE"}

package/dist/signing/cli.js

@@ -2,8 +2,9 @@ import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { signPlugin } from './sign.js';
 import { verifyPlugin } from './verify.js';
-const SIGN_USAGE = 'Usage: hc-plugin-sign --dir <pluginDir> --private-key <path> [--key-id <id>] [--signature <path>]';
+const SIGN_USAGE = 'Usage: hc-plugin-sign [--dir <pluginDir>] [--private-key <path>] [--key-id <id>] [--signature <path>]';
 const VERIFY_USAGE = 'Usage: hc-plugin-verify --dir <pluginDir> --public-key <path> [--public-key <path> ...] [--signature <path>] [--allow-unsigned]';
+const PLUGIN_SIGNING_KEY_ENV = 'HARBORCLIENT_PLUGIN_SIGNING_KEY';
 /**
  * Parses supported CLI flags from process argv.
  *
@@ -58,20 +59,31 @@ function parseCliArgs(argv) {
     }
     return parsed;
 }
+/**
+ * Resolves the private key path from the environment or CLI fallback.
+ *
+ * @param parsed - Parsed CLI arguments.
+ */
+function resolvePrivateKeyPath(parsed) {
+    const fromEnv = process.env[PLUGIN_SIGNING_KEY_ENV]?.trim();
+    return fromEnv || parsed.privateKeyPath;
+}
 /**
  * Reads a PEM key file from disk.
  *
  * @param path - Absolute or relative key file path.
+ * @param cwd - Directory used to resolve relative paths.
  */
-function readKeyFile(path) {
-    return readFileSync(resolve(path), 'utf8');
+function readKeyFile(path, cwd = process.cwd()) {
+    return readFileSync(resolve(cwd, path), 'utf8');
 }
 /**
  * Runs the plugin sign CLI and returns a process exit code.
  *
  * @param argv - Raw process argv including node and script paths.
+ * @param options - Runtime context for path resolution.
  */
-export async function runSignCli(argv) {
+export async function runSignCli(argv, options = {}) {
     let parsed;
     try {
         parsed = parseCliArgs(argv);
@@ -82,16 +94,19 @@ export async function runSignCli(argv) {
         console.error(SIGN_USAGE);
         return 1;
     }
-    if (!parsed.dir || !parsed.privateKeyPath) {
+    const cwd = options.cwd ?? process.cwd();
+    const pluginDir = resolve(cwd, parsed.dir ?? '.');
+    const privateKeyPath = resolvePrivateKeyPath(parsed);
+    if (!privateKeyPath) {
         console.error(SIGN_USAGE);
         return 1;
     }
     try {
         const result = await signPlugin({
-            pluginDir: parsed.dir,
-            privateKeyPem: readKeyFile(parsed.privateKeyPath),
+            pluginDir,
+            privateKeyPem: readKeyFile(privateKeyPath, cwd),
             keyId: parsed.keyId,
-            signaturePath: parsed.signaturePath
+            signaturePath: parsed.signaturePath ? resolve(cwd, parsed.signaturePath) : undefined
         });
         console.log(`Wrote ${result.signaturePath}`);
         return 0;
@@ -125,7 +140,7 @@ export async function runVerifyCli(argv) {
     try {
         const result = await verifyPlugin({
             pluginDir: parsed.dir,
-            trustedPublicKeysPem: parsed.publicKeyPaths.map(readKeyFile),
+            trustedPublicKeysPem: parsed.publicKeyPaths.map((path) => readKeyFile(path)),
             signaturePath: parsed.signaturePath
         });
         if (result.status === 'valid') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@harborclient/sdk",
-  "version": "1.0.32",
+  "version": "1.0.33",
   "description": "TypeScript SDK for HarborClient development.",
   "keywords": [
     "harborclient",