@mongodb-js/signing-utils 0.2.0 → 0.2.2

package/dist/signing-clients/index.d.ts

@@ -1,23 +1,30 @@
 /// <reference types="node" />
 export { LocalSigningClient } from './local-signing-client';
 export { RemoteSigningClient } from './remote-signing-client';
-export type SigningMethod = 'gpg' | 'jsign';
+export type SigningOptions = {
+    method: 'gpg';
+} | {
+    method: 'jsign';
+    certificateAlias: 'compass' | 'mongosh';
+    timestampUrl?: string;
+};
 export type SigningClientOptions = {
     workingDirectory: string;
     signingScript: string;
-    signingMethod: SigningMethod;
+    signingOptions: SigningOptions;
 };
 export type RemoteSigningOptions = {
+    host?: string;
     username?: string;
     password?: string;
     port?: number;
     privateKey?: Buffer | string;
-    signingMethod: SigningMethod;
+    signingOptions: SigningOptions;
     workingDirectory?: string;
     client: 'remote';
 };
 export type LocalSigningOptions = {
-    signingMethod: SigningMethod;
+    signingOptions: SigningOptions;
     client: 'local';
 };
 export type ClientOptions = RemoteSigningOptions | LocalSigningOptions;

package/dist/signing-clients/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signing-clients/index.ts"],"names":[],"mappings":";AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,OAAO,CAAC;AAE5C,MAAM,MAAM,oBAAoB,GAAG;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,aAAa,CAAC;CAC9B,CAAC;AAGF,MAAM,MAAM,oBAAoB,GAAG;IAEjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE7B,aAAa,EAAE,aAAa,CAAC;IAK7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,QAAQ,CAAC;CAClB,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG;IAEhC,aAAa,EAAE,aAAa,CAAC;IAE7B,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,aAAa,CAAC,CA2BxB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signing-clients/index.ts"],"names":[],"mappings":";AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,cAAc,GACtB;IACE,MAAM,EAAE,KAAK,CAAC;CACf,GACD;IACE,MAAM,EAAE,OAAO,CAAC;IAEhB,gBAAgB,EAAE,SAAS,GAAG,SAAS,CAAC;IAExC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEN,MAAM,MAAM,oBAAoB,GAAG;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;CAChC,CAAC;AAGF,MAAM,MAAM,oBAAoB,GAAG;IAEjC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE7B,cAAc,EAAE,cAAc,CAAC;IAI/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,QAAQ,CAAC;CAClB,CAAC;AAGF,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,aAAa,CAAC,CA2BxB"}

package/dist/signing-clients/index.js

@@ -44,13 +44,13 @@ async function getSigningClient(options) {
         return new remote_signing_client_1.RemoteSigningClient(sshClient, {
             workingDirectory: options.workingDirectory ?? '/home/ubuntu/garasign',
             signingScript,
-            signingMethod: options.signingMethod,
+            signingOptions: options.signingOptions,
         });
     }
     if (options.client === 'local') {
         return new local_signing_client_1.LocalSigningClient({
             signingScript,
-            signingMethod: options.signingMethod,
+            signingOptions: options.signingOptions,
         });
     }
     throw new Error(`Unknown client type: ${options.client}`);

package/dist/signing-clients/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signing-clients/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,2CAA6B;AAC7B,8CAA0C;AAC1C,iEAA4D;AAC5D,mEAA8D;AAE9D,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AA4CrB,KAAK,UAAU,gBAAgB,CACpC,OAAsB;IAEtB,KAAK,UAAU,YAAY,CAAC,UAAyB;QACnD,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAE5E,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAE9C,OAAO,IAAI,2CAAmB,CAAC,SAAS,EAAE;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,uBAAuB;YACrE,aAAa;YACb,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,yCAAkB,CAAC;YAC5B,aAAa;YACb,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC;AA7BD,4CA6BC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signing-clients/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,2CAA6B;AAC7B,8CAA0C;AAC1C,iEAA4D;AAC5D,mEAA8D;AAE9D,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAqDrB,KAAK,UAAU,gBAAgB,CACpC,OAAsB;IAEtB,KAAK,UAAU,YAAY,CAAC,UAAyB;QACnD,MAAM,SAAS,GAAG,IAAI,sBAAS,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAE5E,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAE9C,OAAO,IAAI,2CAAmB,CAAC,SAAS,EAAE;YACxC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,uBAAuB;YACrE,aAAa;YACb,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,yCAAkB,CAAC;YAC5B,aAAa;YACb,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;IACL,CAAC;IAGD,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5D,CAAC;AA7BD,4CA6BC"}

package/dist/signing-clients/local-signing-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-signing-client.d.ts","sourceRoot":"","sources":["../../src/signing-clients/local-signing-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,GAAG,CAAC;AAU7D,qBAAa,kBAAmB,YAAW,aAAa;IAEpD,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAGjE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAyBlC"}
+{"version":3,"file":"local-signing-client.d.ts","sourceRoot":"","sources":["../../src/signing-clients/local-signing-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,GAAG,CAAC;AAU7D,qBAAa,kBAAmB,YAAW,aAAa;IAEpD,OAAO,CAAC,OAAO;gBAAP,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC;IAM3D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAqCxC"}

package/dist/signing-clients/local-signing-client.js

@@ -12,21 +12,27 @@ class LocalSigningClient {
     constructor(options) {
         this.options = options;
     }
-    sign(file) {
+    async sign(file) {
         localClientDebug(`Signing ${file}`);
         const directoryOfFileToSign = path_1.default.dirname(file);
         try {
             const env = {
                 ...(0, utils_1.getEnv)(),
-                method: this.options.signingMethod,
+                ...(0, utils_1.mapSigningOptionsForScript)(this.options.signingOptions),
             };
-            (0, child_process_1.spawnSync)('bash', [this.options.signingScript, path_1.default.basename(file)], {
+            const { stdout, stderr, status } = (0, child_process_1.spawnSync)('bash', [this.options.signingScript, path_1.default.basename(file)], {
                 cwd: directoryOfFileToSign,
                 env,
                 encoding: 'utf-8',
             });
+            localClientDebug({ stdout, stderr });
+            if (status !== 0) {
+                throw new Error(JSON.stringify({
+                    stdout,
+                    stderr,
+                }));
+            }
             localClientDebug(`Signed file ${file}`);
-            return Promise.resolve();
         }
         catch (error) {
             localClientDebug({ error });

package/dist/signing-clients/local-signing-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-signing-client.js","sourceRoot":"","sources":["../../src/signing-clients/local-signing-client.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,iDAA0C;AAC1C,oCAAyC;AAGzC,MAAM,gBAAgB,GAAG,aAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAQ5D,MAAa,kBAAkB;IAC7B,YACU,OAAuD;QAAvD,YAAO,GAAP,OAAO,CAAgD;IAC9D,CAAC;IAEJ,IAAI,CAAC,IAAY;QACf,gBAAgB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAEpC,MAAM,qBAAqB,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG;gBACV,GAAG,IAAA,cAAM,GAAE;gBACX,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;aACnC,CAAC;YAEF,IAAA,yBAAS,EAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,cAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE;gBACnE,GAAG,EAAE,qBAAqB;gBAC1B,GAAG;gBACH,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,gBAAgB,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;YAExC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA9BD,gDA8BC"}
+{"version":3,"file":"local-signing-client.js","sourceRoot":"","sources":["../../src/signing-clients/local-signing-client.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,iDAA0C;AAC1C,oCAAqE;AAGrE,MAAM,gBAAgB,GAAG,aAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAQ5D,MAAa,kBAAkB;IAC7B,YACU,OAAuD;QAAvD,YAAO,GAAP,OAAO,CAAgD;IAC9D,CAAC;IAKJ,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,gBAAgB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAEpC,MAAM,qBAAqB,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG;gBACV,GAAG,IAAA,cAAM,GAAE;gBACX,GAAG,IAAA,kCAA0B,EAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;aAC3D,CAAC;YAEF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,yBAAS,EAC1C,MAAM,EACN,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,cAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EACjD;gBACE,GAAG,EAAE,qBAAqB;gBAC1B,GAAG;gBACH,QAAQ,EAAE,OAAO;aAClB,CACF,CAAC;YAEF,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,IAAI,CAAC,SAAS,CAAC;oBACb,MAAM;oBACN,MAAM;iBACP,CAAC,CACH,CAAC;YACJ,CAAC;YACD,gBAAgB,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AA7CD,gDA6CC"}

package/dist/signing-clients/remote-signing-client.d.ts

@@ -3,13 +3,9 @@ import type { SigningClient, SigningClientOptions } from '.';
 export declare class RemoteSigningClient implements SigningClient {
     private sshClient;
     private options;
-    private sftpConnection;
     constructor(sshClient: SSHClient, options: SigningClientOptions);
     private init;
     private getRemoteFilePath;
-    private copyFile;
-    private downloadFile;
-    private removeFile;
     private signRemoteFile;
     sign(file: string): Promise<void>;
 }

package/dist/signing-clients/remote-signing-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-signing-client.d.ts","sourceRoot":"","sources":["../../src/signing-clients/remote-signing-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,GAAG,CAAC;AAE7D,qBAAa,mBAAoB,YAAW,aAAa;IAIrD,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,OAAO;IAJjB,OAAO,CAAC,cAAc,CAAe;gBAG3B,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,oBAAoB;YASzB,IAAI;IAYlB,OAAO,CAAC,iBAAiB;YAMX,QAAQ;YAWR,YAAY;YAWZ,UAAU;YAWV,cAAc;IAyBtB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAsBxC"}
+{"version":3,"file":"remote-signing-client.d.ts","sourceRoot":"","sources":["../../src/signing-clients/remote-signing-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,GAAG,CAAC;AAE7D,qBAAa,mBAAoB,YAAW,aAAa;IAErD,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,OAAO;gBADP,SAAS,EAAE,SAAS,EACpB,OAAO,EAAE,oBAAoB;YASzB,IAAI;IAWlB,OAAO,CAAC,iBAAiB;YAMX,cAAc;IA8BtB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAsBxC"}

package/dist/signing-clients/remote-signing-client.js

@@ -12,56 +12,26 @@ class RemoteSigningClient {
         this.options = options;
     }
     async init() {
-        this.sftpConnection = await this.sshClient.getSftpConnection();
         await this.sshClient.exec(`mkdir -p ${this.options.workingDirectory}`);
         {
             const remoteScript = `${this.options.workingDirectory}/garasign.sh`;
-            await this.copyFile(this.options.signingScript, remoteScript);
+            await this.sshClient.copyFile(this.options.signingScript, remoteScript);
             await this.sshClient.exec(`chmod +x ${remoteScript}`);
         }
     }
     getRemoteFilePath(file) {
         return `${this.options.workingDirectory}/temp-${Date.now()}-${path_1.default.basename(file)}`;
     }
-    async copyFile(file, remotePath) {
-        return new Promise((resolve, reject) => {
-            this.sftpConnection.fastPut(file, remotePath, (err) => {
-                if (err) {
-                    return reject(err);
-                }
-                return resolve();
-            });
-        });
-    }
-    async downloadFile(remotePath, file) {
-        return new Promise((resolve, reject) => {
-            this.sftpConnection.fastGet(remotePath, file, (err) => {
-                if (err) {
-                    return reject(err);
-                }
-                return resolve();
-            });
-        });
-    }
-    async removeFile(remotePath) {
-        return new Promise((resolve, reject) => {
-            this.sftpConnection.unlink(remotePath, (err) => {
-                if (err) {
-                    return reject(err);
-                }
-                return resolve();
-            });
-        });
-    }
     async signRemoteFile(file) {
         const env = (0, utils_1.getEnv)();
+        const signingOptions = (0, utils_1.mapSigningOptionsForScript)(this.options.signingOptions);
         const cmds = [
             `cd '${this.options.workingDirectory}'`,
             `export garasign_username=${env.garasign_username}`,
             `export garasign_password=${env.garasign_password}`,
             `export artifactory_username=${env.artifactory_username}`,
             `export artifactory_password=${env.artifactory_password}`,
-            `export method=${this.options.signingMethod}`,
+            ...Object.keys(signingOptions).map((k) => `export ${k}=${signingOptions[k]}`),
             `./garasign.sh '${file}'`,
         ];
         const command = cmds.join(' && ');
@@ -72,18 +42,18 @@ class RemoteSigningClient {
         const remotePath = this.getRemoteFilePath(file);
         try {
             await this.init();
-            await this.copyFile(file, remotePath);
+            await this.sshClient.copyFile(file, remotePath);
             (0, utils_1.debug)(`SFTP: Copied file ${file} to ${remotePath}`);
             await this.signRemoteFile(path_1.default.basename(remotePath));
             (0, utils_1.debug)(`SFTP: Signed file ${file}`);
-            await this.downloadFile(remotePath, file);
+            await this.sshClient.downloadFile(remotePath, file);
             (0, utils_1.debug)(`SFTP: Downloaded signed file to ${file}`);
         }
         catch (error) {
             (0, utils_1.debug)({ error });
         }
         finally {
-            await this.removeFile(remotePath);
+            await this.sshClient.removeFile(remotePath);
             (0, utils_1.debug)(`SFTP: Removed remote file ${remotePath}`);
             this.sshClient.disconnect();
         }

package/dist/signing-clients/remote-signing-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-signing-client.js","sourceRoot":"","sources":["../../src/signing-clients/remote-signing-client.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAGxB,oCAAyC;AAGzC,MAAa,mBAAmB;IAG9B,YACU,SAAoB,EACpB,OAA6B;QAD7B,cAAS,GAAT,SAAS,CAAW;QACpB,YAAO,GAAP,OAAO,CAAsB;IACpC,CAAC;IAQI,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QAC/D,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAGvE,CAAC;YACC,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,cAAc,CAAC;YACpE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YAC9D,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,cAAI,CAAC,QAAQ,CACzE,IAAI,CACL,EAAE,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,UAAkB;QACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpD,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;gBACD,OAAO,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,IAAY;QACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpD,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;gBACD,OAAO,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,UAAkB;QACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC7C,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;gBACD,OAAO,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAY;QACvC,MAAM,GAAG,GAAG,IAAA,cAAM,GAAE,CAAC;QAMrB,MAAM,IAAI,GAAG;YACX,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG;YAEvC,4BAA4B,GAAG,CAAC,iBAAiB,EAAE;YAEnD,4BAA4B,GAAG,CAAC,iBAAiB,EAAE;YAEnD,+BAA+B,GAAG,CAAC,oBAAoB,EAAE;YAEzD,+BAA+B,GAAG,CAAC,oBAAoB,EAAE;YACzD,iBAAiB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;YAC7C,kBAAkB,IAAI,GAAG;SAC1B,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAA,aAAK,EAAC,6BAA6B,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC;YAEH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAElB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,IAAA,aAAK,EAAC,qBAAqB,IAAI,OAAO,UAAU,EAAE,CAAC,CAAC;YAEpD,MAAM,IAAI,CAAC,cAAc,CAAC,cAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;YACrD,IAAA,aAAK,EAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;YAEnC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAA,aAAK,EAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAA,aAAK,EAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAClC,IAAA,aAAK,EAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAhHD,kDAgHC"}
+{"version":3,"file":"remote-signing-client.js","sourceRoot":"","sources":["../../src/signing-clients/remote-signing-client.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAExB,oCAAqE;AAGrE,MAAa,mBAAmB;IAC9B,YACU,SAAoB,EACpB,OAA6B;QAD7B,cAAS,GAAT,SAAS,CAAW;QACpB,YAAO,GAAP,OAAO,CAAsB;IACpC,CAAC;IAQI,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAGvE,CAAC;YACC,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,cAAc,CAAC;YACpE,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY;QACpC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,cAAI,CAAC,QAAQ,CACzE,IAAI,CACL,EAAE,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAY;QACvC,MAAM,GAAG,GAAG,IAAA,cAAM,GAAE,CAAC;QACrB,MAAM,cAAc,GAAG,IAAA,kCAA0B,EAC/C,IAAI,CAAC,OAAO,CAAC,cAAc,CAC5B,CAAC;QAMF,MAAM,IAAI,GAAG;YACX,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG;YAEvC,4BAA4B,GAAG,CAAC,iBAAiB,EAAE;YAEnD,4BAA4B,GAAG,CAAC,iBAAiB,EAAE;YAEnD,+BAA+B,GAAG,CAAC,oBAAoB,EAAE;YAEzD,+BAA+B,GAAG,CAAC,oBAAoB,EAAE;YACzD,GAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAqC,CAAC,GAAG,CACrE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,CAAC,CAAW,EAAE,CACpD;YACD,kBAAkB,IAAI,GAAG;SAC1B,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAA,aAAK,EAAC,6BAA6B,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC;YAEH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAElB,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAChD,IAAA,aAAK,EAAC,qBAAqB,IAAI,OAAO,UAAU,EAAE,CAAC,CAAC;YAEpD,MAAM,IAAI,CAAC,cAAc,CAAC,cAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;YACrD,IAAA,aAAK,EAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;YAEnC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACpD,IAAA,aAAK,EAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAA,aAAK,EAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC5C,IAAA,aAAK,EAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAjFD,kDAiFC"}

package/dist/ssh-client.d.ts

@@ -1,4 +1,4 @@
-import type { ConnectConfig, SFTPWrapper } from 'ssh2';
+import type { ConnectConfig } from 'ssh2';
 export declare class SSHClient {
     private sshClientOptions;
     private sshConnection;
@@ -9,6 +9,9 @@ export declare class SSHClient {
     connect(): Promise<void>;
     disconnect(): void;
     exec(command: string): Promise<string>;
-    getSftpConnection(): Promise<SFTPWrapper>;
+    private getSftpConnection;
+    copyFile(file: string, remotePath: string): Promise<void>;
+    downloadFile(remotePath: string, file: string): Promise<void>;
+    removeFile(remotePath: string): Promise<void>;
 }
 //# sourceMappingURL=ssh-client.d.ts.map

package/dist/ssh-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-client.d.ts","sourceRoot":"","sources":["../src/ssh-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,aAAa,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAOtE,qBAAa,SAAS;IAMR,OAAO,CAAC,gBAAgB;IALpC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,cAAc,CAAC,CAAc;IAErC,OAAO,CAAC,SAAS,CAAS;gBAEN,gBAAgB,EAAE,aAAa;IAKnD,mBAAmB;IAgBb,OAAO;IAgBb,UAAU;IAKJ,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BtC,iBAAiB,IAAI,OAAO,CAAC,WAAW,CAAC;CAUhD"}
+{"version":3,"file":"ssh-client.d.ts","sourceRoot":"","sources":["../src/ssh-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,aAAa,EAAe,MAAM,MAAM,CAAC;AAOtE,qBAAa,SAAS;IAMR,OAAO,CAAC,gBAAgB;IALpC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,cAAc,CAAC,CAAc;IAErC,OAAO,CAAC,SAAS,CAAS;gBAEN,gBAAgB,EAAE,aAAa;IAKnD,mBAAmB;IAgBb,OAAO;IAgBb,UAAU;IAKJ,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YA0B9B,iBAAiB;IAWzB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAIpD"}

package/dist/ssh-client.js

@@ -75,6 +75,18 @@ class SSHClient {
                 (await (0, util_1.promisify)(this.sshConnection.sftp.bind(this.sshConnection))());
         return this.sftpConnection;
     }
+    async copyFile(file, remotePath) {
+        const sftpConnection = await this.getSftpConnection();
+        return (0, util_1.promisify)(sftpConnection.fastPut.bind(sftpConnection))(file, remotePath);
+    }
+    async downloadFile(remotePath, file) {
+        const sftpConnection = await this.getSftpConnection();
+        return (0, util_1.promisify)(sftpConnection.fastGet.bind(sftpConnection))(remotePath, file);
+    }
+    async removeFile(remotePath) {
+        const sftpConnection = await this.getSftpConnection();
+        return (0, util_1.promisify)(sftpConnection.unlink.bind(sftpConnection))(remotePath);
+    }
 }
 exports.SSHClient = SSHClient;
 //# sourceMappingURL=ssh-client.js.map

package/dist/ssh-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-client.js","sourceRoot":"","sources":["../src/ssh-client.ts"],"names":[],"mappings":";;;AACA,+BAA8B;AAC9B,0CAAuC;AACvC,mCAAgC;AAChC,+BAAiC;AACjC,mCAA8B;AAE9B,MAAa,SAAS;IAMpB,YAAoB,gBAA+B;QAA/B,qBAAgB,GAAhB,gBAAgB,CAAe;QAF3C,cAAS,GAAG,KAAK,CAAC;QAGxB,IAAI,CAAC,aAAa,GAAG,IAAI,aAAM,EAAE,CAAC;QAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,mBAAmB;QACjB,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClC,IAAA,aAAK,EAAC,6BAA6B,CAAC,CAAC;YACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrC,IAAA,aAAK,EAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClC,IAAA,aAAK,EAAC,wBAAwB,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU;YACjD,CAAC,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACzB,GAAG,IAAI,CAAC,gBAAgB;YACxB,UAAU;SACX,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;IAED,UAAU;QACR,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAkB,MAAM,IAAA,gBAAS,EAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CACjD,CAAC,OAAO,CAAC,CAAC;QACX,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAA,aAAI,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAc,YAAY,IAAI,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,cAAc;YACjB,IAAI,CAAC,cAAc;gBACnB,CAAC,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AApFD,8BAoFC"}
+{"version":3,"file":"ssh-client.js","sourceRoot":"","sources":["../src/ssh-client.ts"],"names":[],"mappings":";;;AACA,+BAA8B;AAC9B,0CAAuC;AACvC,mCAAgC;AAChC,+BAAiC;AACjC,mCAA8B;AAE9B,MAAa,SAAS;IAMpB,YAAoB,gBAA+B;QAA/B,qBAAgB,GAAhB,gBAAgB,CAAe;QAF3C,cAAS,GAAG,KAAK,CAAC;QAGxB,IAAI,CAAC,aAAa,GAAG,IAAI,aAAM,EAAE,CAAC;QAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,mBAAmB;QACjB,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClC,IAAA,aAAK,EAAC,6BAA6B,CAAC,CAAC;YACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrC,IAAA,aAAK,EAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClC,IAAA,aAAK,EAAC,wBAAwB,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU;YACjD,CAAC,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YACzB,GAAG,IAAI,CAAC,gBAAgB;YACxB,UAAU;SACX,CAAC,CAAC;QACH,MAAM,KAAK,CAAC;IACd,CAAC;IAED,UAAU;QACR,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAkB,MAAM,IAAA,gBAAS,EAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CACjD,CAAC,OAAO,CAAC,CAAC;QACX,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,IAAI,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAA,aAAI,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAc,YAAY,IAAI,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,cAAc;YACjB,IAAI,CAAC,cAAc;gBACnB,CAAC,MAAM,IAAA,gBAAS,EAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,UAAkB;QAC7C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtD,OAAO,IAAA,gBAAS,EAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAC3D,IAAI,EACJ,UAAU,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,IAAY;QACjD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtD,OAAO,IAAA,gBAAS,EAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAC3D,UAAU,EACV,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACtD,OAAO,IAAA,gBAAS,EAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3E,CAAC;CACF;AAzGD,8BAyGC"}

package/dist/utils.d.ts

@@ -1,4 +1,5 @@
 /// <reference types="debug" />
+import type { SigningOptions } from './signing-clients';
 export declare const debug: import("debug").Debugger;
 export declare function getEnv(): {
     garasign_username: string | undefined;
@@ -6,4 +7,17 @@ export declare function getEnv(): {
     artifactory_username: string | undefined;
     artifactory_password: string | undefined;
 };
+export declare function mapSigningOptionsForScript(options: SigningOptions): {
+    method: "gpg";
+    alias?: undefined;
+    timestampUrl?: undefined;
+} | {
+    method: "jsign";
+    alias: "compass" | "mongosh";
+    timestampUrl: string;
+} | {
+    method?: undefined;
+    alias?: undefined;
+    timestampUrl?: undefined;
+};
 //# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";AAEA,eAAO,MAAM,KAAK,0BAA2B,CAAC;AAE9C,wBAAgB,MAAM;;;;;EAgBrB"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,eAAO,MAAM,KAAK,0BAA2B,CAAC;AAE9C,wBAAgB,MAAM;;;;;EAgBrB;AAID,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,cAAc;;;;;;;;;;;;EAgBjE"}

package/dist/utils.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getEnv = exports.debug = void 0;
+exports.mapSigningOptionsForScript = exports.getEnv = exports.debug = void 0;
 const debug_1 = require("debug");
 exports.debug = (0, debug_1.debug)('signing-utils');
 function getEnv() {
@@ -16,4 +16,21 @@ function getEnv() {
     };
 }
 exports.getEnv = getEnv;
+const DEFAULT_JSIGN_TIMESTAMP_URL = 'http://timestamp.digicert.com';
+function mapSigningOptionsForScript(options) {
+    if (options.method === 'gpg') {
+        return {
+            method: options.method,
+        };
+    }
+    if (options.method === 'jsign') {
+        return {
+            method: options.method,
+            alias: options.certificateAlias,
+            timestampUrl: options.timestampUrl ?? DEFAULT_JSIGN_TIMESTAMP_URL,
+        };
+    }
+    return {};
+}
+exports.mapSigningOptionsForScript = mapSigningOptionsForScript;
 //# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;;AAAA,iCAAyC;AAE5B,QAAA,KAAK,GAAG,IAAA,aAAO,EAAC,eAAe,CAAC,CAAC;AAE9C,SAAgB,MAAM;IACpB,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvE,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvE,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7E,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAE7E,OAAO;QACL,iBAAiB;QACjB,iBAAiB;QACjB,oBAAoB;QACpB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAhBD,wBAgBC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;;AAAA,iCAAyC;AAG5B,QAAA,KAAK,GAAG,IAAA,aAAO,EAAC,eAAe,CAAC,CAAC;AAE9C,SAAgB,MAAM;IACpB,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvE,MAAM,iBAAiB,GACrB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvE,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC7E,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAE7E,OAAO;QACL,iBAAiB;QACjB,iBAAiB;QACjB,oBAAoB;QACpB,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAhBD,wBAgBC;AAED,MAAM,2BAA2B,GAAG,+BAA+B,CAAC;AAEpE,SAAgB,0BAA0B,CAAC,OAAuB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,gBAAgB;YAC/B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,2BAA2B;SAClE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAhBD,gEAgBC"}

package/package.json

@@ -13,7 +13,7 @@
     "email": "compass@mongodb.com"
   },
   "homepage": "https://github.com/mongodb-js/devtools-shared",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/mongodb-js/devtools-shared.git"
@@ -70,5 +70,5 @@
     "debug": "^4.3.4",
     "ssh2": "^1.15.0"
   },
-  "gitHead": "ad497d997a5164646475261232687c8d0ace8722"
+  "gitHead": "eb7e757ac0ab44f343b22df168a26ebc1955eccc"
 }

package/src/garasign.sh

@@ -1,5 +1,7 @@
 #! /usr/bin/env bash
 
+set -e
+
 if [ -z "$1" ]; then
   echo "Usage: garasign.sh <file>"
   exit 1
@@ -22,13 +24,15 @@ trap logout_artifactory EXIT
 echo "Logging into docker artifactory"
 echo "${artifactory_password}" | docker login --password-stdin --username ${artifactory_username} ${ARTIFACTORY_HOST} > /dev/null 2>&1
 
-# If the docker login failed, exit
-[ $? -ne 0 ] && exit $?
+if [ $? -ne 0 ]; then
+  echo "Docker login failed" >&2
+  exit 1
+fi
 
 directory=$(pwd)
 file=$1
 
-echo "File to be signed: $file"
+echo "File to be signed: $file using $method"
 echo "Working directory: $directory"
 
 gpg_sign() {
@@ -43,6 +47,9 @@ gpg_sign() {
 }
 
 jsign_sign() {
+  if [ -z ${alias+omitted} ]; then echo "Alias must be set when signing with jsign" && exit 1; fi
+  if [ -z ${timestampUrl+omitted} ]; then echo "Timestamp URL must be set when signing with jsign" && exit 1; fi
+
   docker run \
     -e GRS_CONFIG_USER1_USERNAME="${garasign_username}" \
     -e GRS_CONFIG_USER1_PASSWORD="${garasign_password}" \
@@ -50,13 +57,15 @@ jsign_sign() {
     -v $directory:$directory \
     -w $directory \
     artifactory.corp.mongodb.com/release-tools-container-registry-local/garasign-jsign \
-    /bin/bash -c "jsign --tsaurl "timestamp.url" -a mongo-authenticode-2021 '$file'"
+    /bin/bash -c "jsign -t '$timestampUrl' -a '$alias' '$file'"
 }
 
-if [[ "$method" -eq "gpg" ]]; then 
+if [[ $method == "gpg" ]]; then
   gpg_sign 
-elif [[ "$method" -eq "jsign" ]]; then 
+elif [[ $method == "jsign" ]]; then
   jsign_sign
+else
+  echo "Unknown signing method: $method"
+  exit 1
 fi
-
 echo "Finished signing $file"

package/src/signing-clients/index.ts

@@ -8,16 +8,28 @@ import { RemoteSigningClient } from './remote-signing-client';
 export { LocalSigningClient } from './local-signing-client';
 export { RemoteSigningClient } from './remote-signing-client';
 
-export type SigningMethod = 'gpg' | 'jsign';
+export type SigningOptions =
+  | {
+      method: 'gpg';
+    }
+  | {
+      method: 'jsign';
+      // The alias of the certificate used for signing in the keystore
+      certificateAlias: 'compass' | 'mongosh';
+      // The URL of the timestamping authority.
+      timestampUrl?: string;
+    };
 
 export type SigningClientOptions = {
   workingDirectory: string;
   signingScript: string;
-  signingMethod: SigningMethod;
+  signingOptions: SigningOptions;
 };
 
 /** Options for signing a file remotely over an SSH connection. */
 export type RemoteSigningOptions = {
+  /** Hostname or IP address of the server to */
+  host?: string;
   /** Username for authentication. */
   username?: string;
   /** Password for password-based user authentication. */
@@ -26,9 +38,8 @@ export type RemoteSigningOptions = {
   port?: number;
   /** Buffer or string that contains a private key for either key-based or hostbased user authentication (OpenSSH format). */
   privateKey?: Buffer | string;
-  /** The method to sign with.  Use gpg on linux and jsign on windows. */
-  signingMethod: SigningMethod;
 
+  signingOptions: SigningOptions;
   /**
    * The path of the working directory in which to sign files **on the remote ssh server**.  Defaults to `/home/ubuntu/garasign`.
    */
@@ -38,9 +49,7 @@ export type RemoteSigningOptions = {
 
 /** Options for signing a file locally. */
 export type LocalSigningOptions = {
-  /** The method to sign with.  Use gpg on linux and jsign on windows. */
-  signingMethod: SigningMethod;
-
+  signingOptions: SigningOptions;
   client: 'local';
 };
 
@@ -67,13 +76,13 @@ export async function getSigningClient(
     return new RemoteSigningClient(sshClient, {
       workingDirectory: options.workingDirectory ?? '/home/ubuntu/garasign',
       signingScript,
-      signingMethod: options.signingMethod,
+      signingOptions: options.signingOptions,
     });
   }
   if (options.client === 'local') {
     return new LocalSigningClient({
       signingScript,
-      signingMethod: options.signingMethod,
+      signingOptions: options.signingOptions,
     });
   }
   // @ts-expect-error `client` is a discriminated union - we should never reach here but we throw on the off-chance we do.

package/src/signing-clients/local-signing-client.spec.ts

@@ -31,7 +31,9 @@ describe('LocalSigningClient', function () {
   it('executes the signing script correctly', async function () {
     const localSigningClient = new LocalSigningClient({
       signingScript: signingScript,
-      signingMethod: 'gpg',
+      signingOptions: {
+        method: 'gpg',
+      },
     });
 
     await localSigningClient.sign(fileToSign);
@@ -41,4 +43,46 @@ describe('LocalSigningClient', function () {
     ).trim();
     expect(signedFile).to.equal('signed content');
   });
+
+  context('when the script returns a non-zero exit code', function () {
+    beforeEach(function () {
+      writeFileSync(
+        signingScript,
+        `
+          #!/bin/bash
+          echo "Signing script called with arguments: $@"
+          >&2 echo "error - something went wrong"
+          exit 1
+          `
+      );
+    });
+
+    it('sign() rejects', async function () {
+      const localSigningClient = new LocalSigningClient({
+        signingScript: signingScript,
+        signingOptions: {
+          method: 'gpg',
+        },
+      });
+
+      const error = await localSigningClient.sign(fileToSign).catch((e) => e);
+      expect(error).to.be.instanceOf(Error);
+    });
+
+    it('includes the stdout and stderr of the failed script in the error', async function () {
+      const localSigningClient = new LocalSigningClient({
+        signingScript: signingScript,
+        signingOptions: {
+          method: 'gpg',
+        },
+      });
+
+      const error: Error = await localSigningClient
+        .sign(fileToSign)
+        .catch((e) => e);
+      const { stdout, stderr } = JSON.parse(error.message);
+      expect(stdout).to.contain('Signing script called with arguments: ');
+      expect(stderr).to.equal('error - something went wrong\n');
+    });
+  });
 });

package/src/signing-clients/local-signing-client.ts

@@ -1,6 +1,6 @@
 import path from 'path';
 import { spawnSync } from 'child_process';
-import { debug, getEnv } from '../utils';
+import { debug, getEnv, mapSigningOptionsForScript } from '../utils';
 import type { SigningClient, SigningClientOptions } from '.';
 
 const localClientDebug = debug.extend('LocalSigningClient');
@@ -16,7 +16,10 @@ export class LocalSigningClient implements SigningClient {
     private options: Omit<SigningClientOptions, 'workingDirectory'>
   ) {}
 
-  sign(file: string): Promise<void> {
+  // we want to wrap any errors in promise rejections, so even though there is no
+  // await statement, we use an `async` function
+  // eslint-disable-next-line @typescript-eslint/require-await
+  async sign(file: string): Promise<void> {
     localClientDebug(`Signing ${file}`);
 
     const directoryOfFileToSign = path.dirname(file);
@@ -24,18 +27,30 @@ export class LocalSigningClient implements SigningClient {
     try {
       const env = {
         ...getEnv(),
-        method: this.options.signingMethod,
+        ...mapSigningOptionsForScript(this.options.signingOptions),
       };
 
-      spawnSync('bash', [this.options.signingScript, path.basename(file)], {
-        cwd: directoryOfFileToSign,
-        env,
-        encoding: 'utf-8',
-      });
-
+      const { stdout, stderr, status } = spawnSync(
+        'bash',
+        [this.options.signingScript, path.basename(file)],
+        {
+          cwd: directoryOfFileToSign,
+          env,
+          encoding: 'utf-8',
+        }
+      );
+
+      localClientDebug({ stdout, stderr });
+
+      if (status !== 0) {
+        throw new Error(
+          JSON.stringify({
+            stdout,
+            stderr,
+          })
+        );
+      }
       localClientDebug(`Signed file ${file}`);
-
-      return Promise.resolve();
     } catch (error) {
       localClientDebug({ error });
       throw error;

package/src/signing-clients/remote-signing-client.spec.ts

@@ -3,55 +3,16 @@ import { exec } from 'child_process';
 import { RemoteSigningClient } from './remote-signing-client';
 import { expect } from 'chai';
 import type { SSHClient } from '../ssh-client';
+import { promisify } from 'util';
 
 const getMockedSSHClient = () => {
   return {
-    getSftpConnection: () => {
-      return {
-        fastPut: async (
-          localFile: string,
-          remoteFile: string,
-          cb: (err?: Error) => void
-        ) => {
-          try {
-            await fs.copyFile(localFile, remoteFile);
-            cb();
-          } catch (err) {
-            cb(err as Error);
-          }
-        },
-        fastGet: async (
-          remoteFile: string,
-          localFile: string,
-          cb: (err?: Error) => void
-        ) => {
-          try {
-            await fs.copyFile(remoteFile, localFile);
-            cb();
-          } catch (err) {
-            cb(err as Error);
-          }
-        },
-        unlink: async (remoteFile: string, cb: (err?: Error) => void) => {
-          try {
-            await fs.unlink(remoteFile);
-            cb();
-          } catch (err) {
-            cb(err as Error);
-          }
-        },
-      };
-    },
-    exec: (command: string) => {
-      return new Promise((resolve, reject) => {
-        exec(command, { shell: 'bash' }, (err) => {
-          if (err) {
-            return reject(err);
-          }
-          return resolve('Ok');
-        });
-      });
-    },
+    // The mocked ssh client
+    copyFile: (from: string, to: string) => fs.copyFile(from, to),
+    downloadFile: (remote: string, local: string) => fs.copyFile(remote, local),
+    removeFile: fs.unlink.bind(fs.unlink),
+    exec: (command: string) =>
+      promisify(exec)(command, { shell: 'bash' }).then(() => 'Ok'),
     disconnect: () => {},
   } as unknown as SSHClient;
 };
@@ -85,7 +46,9 @@ describe('RemoteSigningClient', function () {
     const remoteSigningClient = new RemoteSigningClient(getMockedSSHClient(), {
       workingDirectory: workingDirectoryPath,
       signingScript: signingScript,
-      signingMethod: 'gpg',
+      signingOptions: {
+        method: 'gpg',
+      },
     });
 
     await remoteSigningClient.sign(fileToSign);

package/src/signing-clients/remote-signing-client.ts

@@ -1,12 +1,9 @@
 import path from 'path';
-import type { SFTPWrapper } from 'ssh2';
 import type { SSHClient } from '../ssh-client';
-import { debug, getEnv } from '../utils';
+import { debug, getEnv, mapSigningOptionsForScript } from '../utils';
 import type { SigningClient, SigningClientOptions } from '.';
 
 export class RemoteSigningClient implements SigningClient {
-  private sftpConnection!: SFTPWrapper;
-
   constructor(
     private sshClient: SSHClient,
     private options: SigningClientOptions
@@ -19,13 +16,12 @@ export class RemoteSigningClient implements SigningClient {
    * - Copy the signing script to the remote machine
    */
   private async init() {
-    this.sftpConnection = await this.sshClient.getSftpConnection();
     await this.sshClient.exec(`mkdir -p ${this.options.workingDirectory}`);
 
     // Copy the signing script to the remote machine
     {
       const remoteScript = `${this.options.workingDirectory}/garasign.sh`;
-      await this.copyFile(this.options.signingScript, remoteScript);
+      await this.sshClient.copyFile(this.options.signingScript, remoteScript);
       await this.sshClient.exec(`chmod +x ${remoteScript}`);
     }
   }
@@ -36,41 +32,11 @@ export class RemoteSigningClient implements SigningClient {
     )}`;
   }
 
-  private async copyFile(file: string, remotePath: string): Promise<void> {
-    return new Promise((resolve, reject) => {
-      this.sftpConnection.fastPut(file, remotePath, (err) => {
-        if (err) {
-          return reject(err);
-        }
-        return resolve();
-      });
-    });
-  }
-
-  private async downloadFile(remotePath: string, file: string): Promise<void> {
-    return new Promise((resolve, reject) => {
-      this.sftpConnection.fastGet(remotePath, file, (err) => {
-        if (err) {
-          return reject(err);
-        }
-        return resolve();
-      });
-    });
-  }
-
-  private async removeFile(remotePath: string): Promise<void> {
-    return new Promise((resolve, reject) => {
-      this.sftpConnection.unlink(remotePath, (err) => {
-        if (err) {
-          return reject(err);
-        }
-        return resolve();
-      });
-    });
-  }
-
   private async signRemoteFile(file: string) {
     const env = getEnv();
+    const signingOptions = mapSigningOptionsForScript(
+      this.options.signingOptions
+    );
     /**
      * Passing env variables as an option to ssh.exec() doesn't work as ssh config
      * (`sshd_config.AllowEnv`) does not allow to pass env variables by default.
@@ -86,7 +52,9 @@ export class RemoteSigningClient implements SigningClient {
       `export artifactory_username=${env.artifactory_username}`,
       // eslint-disable-next-line @typescript-eslint/restrict-template-expressions
       `export artifactory_password=${env.artifactory_password}`,
-      `export method=${this.options.signingMethod}`,
+      ...(Object.keys(signingOptions) as (keyof typeof signingOptions)[]).map(
+        (k) => `export ${k}=${signingOptions[k] as string}`
+      ),
       `./garasign.sh '${file}'`,
     ];
     const command = cmds.join(' && ');
@@ -100,18 +68,18 @@ export class RemoteSigningClient implements SigningClient {
       // establish connection
       await this.init();
 
-      await this.copyFile(file, remotePath);
+      await this.sshClient.copyFile(file, remotePath);
       debug(`SFTP: Copied file ${file} to ${remotePath}`);
 
       await this.signRemoteFile(path.basename(remotePath));
       debug(`SFTP: Signed file ${file}`);
 
-      await this.downloadFile(remotePath, file);
+      await this.sshClient.downloadFile(remotePath, file);
       debug(`SFTP: Downloaded signed file to ${file}`);
     } catch (error) {
       debug({ error });
     } finally {
-      await this.removeFile(remotePath);
+      await this.sshClient.removeFile(remotePath);
       debug(`SFTP: Removed remote file ${remotePath}`);
       this.sshClient.disconnect();
     }

package/src/ssh-client.ts

@@ -79,7 +79,7 @@ export class SSHClient {
     return data;
   }
 
-  async getSftpConnection(): Promise<SFTPWrapper> {
+  private async getSftpConnection(): Promise<SFTPWrapper> {
     if (!this.connected) {
       throw new Error('Not connected to ssh server');
     }
@@ -89,4 +89,25 @@ export class SSHClient {
       (await promisify(this.sshConnection.sftp.bind(this.sshConnection))());
     return this.sftpConnection;
   }
+
+  async copyFile(file: string, remotePath: string): Promise<void> {
+    const sftpConnection = await this.getSftpConnection();
+    return promisify(sftpConnection.fastPut.bind(sftpConnection))(
+      file,
+      remotePath
+    );
+  }
+
+  async downloadFile(remotePath: string, file: string): Promise<void> {
+    const sftpConnection = await this.getSftpConnection();
+    return promisify(sftpConnection.fastGet.bind(sftpConnection))(
+      remotePath,
+      file
+    );
+  }
+
+  async removeFile(remotePath: string): Promise<void> {
+    const sftpConnection = await this.getSftpConnection();
+    return promisify(sftpConnection.unlink.bind(sftpConnection))(remotePath);
+  }
 }

package/src/utils.ts

@@ -1,4 +1,5 @@
 import { debug as debugFn } from 'debug';
+import type { SigningOptions } from './signing-clients';
 
 export const debug = debugFn('signing-utils');
 
@@ -19,3 +20,23 @@ export function getEnv() {
     artifactory_password,
   };
 }
+
+const DEFAULT_JSIGN_TIMESTAMP_URL = 'http://timestamp.digicert.com';
+
+export function mapSigningOptionsForScript(options: SigningOptions) {
+  if (options.method === 'gpg') {
+    return {
+      method: options.method,
+    };
+  }
+
+  if (options.method === 'jsign') {
+    return {
+      method: options.method,
+      alias: options.certificateAlias,
+      timestampUrl: options.timestampUrl ?? DEFAULT_JSIGN_TIMESTAMP_URL,
+    };
+  }
+
+  return {};
+}