@pipobscure/bundle 0.0.1

package/dist/api.d.ts

@@ -0,0 +1,147 @@
+import type { Writable } from 'node:stream';
+import { type EmitResult, type Signer } from './archive.ts';
+import { type VerificationResult, type VerifyOptions, type ArchiveSource, type ManifestFields } from './manifest.ts';
+/** What a build wrote, and what it signed. */
+export interface BuildResult extends EmitResult {
+    /** Where the archive was written, or null when it went to a stream. */
+    output: string | null;
+    /** Member names in the finished archive, excluding `AUTHORITY.PEM`. */
+    members: string[];
+    /** Size of the written file in bytes, when it went to a path. */
+    size?: number | undefined;
+}
+/** Where a build's bytes go: a path, a caller's stream, or stdout. */
+interface Destination {
+    /** Where to write the archive. */
+    output?: string | undefined;
+    /** An open stream to write to instead. The caller closes it. */
+    stream?: Writable | undefined;
+}
+export interface CreateOptions extends Destination {
+    /** Base directory the file list is relative to (default: '.'). */
+    base?: string | undefined;
+    /** Member names, relative to `base`. */
+    files: string[];
+    /** A launcher or binary to prepend, making the result self-running. */
+    prefix?: string | undefined;
+    hashAlg?: string | undefined;
+    signAlg?: string | undefined;
+    /** Sign as it is built. Both must be given together. */
+    key?: Buffer | string | undefined;
+    chain?: string | undefined;
+    /** A two-phase signer, instead of `key`/`chain`. */
+    signer?: Signer | undefined;
+}
+export interface SignOptions extends Destination {
+    /** Path to the archive whose members are re-emitted and signed. */
+    source: string;
+    prefix?: string | undefined;
+    /** Make the output executable; implied by `prefix`. */
+    executable?: boolean | undefined;
+    hashAlg?: string | undefined;
+    signAlg?: string | undefined;
+    key?: Buffer | string | undefined;
+    chain?: string | undefined;
+    signer?: Signer | undefined;
+}
+export interface VerifyBundleOptions extends VerifyOptions {
+    /**
+     * Extra trusted roots, as PEM text or as paths to PEM files — the
+     * convenience form of `extraRoots`, which takes PEM text only.
+     */
+    roots?: string[] | undefined;
+}
+export interface RunOptions {
+    /** Extra trusted roots, as PEM text or paths to PEM files. */
+    roots?: string[] | undefined;
+    identity?: string | undefined;
+    issuer?: string | undefined;
+    /** Run an archive whose signature is good but whose chain is unanchored. */
+    allowUntrusted?: boolean | undefined;
+    /** Arguments handed to the application inside the archive. */
+    args?: string[] | undefined;
+    /** Extra environment for the child, merged over `process.env`. */
+    env?: NodeJS.ProcessEnv | undefined;
+    /** How the child's stdio is wired (default: 'inherit'). */
+    stdio?: 'inherit' | 'pipe' | undefined;
+}
+export interface RunResult {
+    /** The child's exit status, or null when it was killed by a signal. */
+    status: number | null;
+    signal: NodeJS.Signals | null;
+    /** Captured only when `stdio` was 'pipe'. */
+    stdout?: string | undefined;
+    stderr?: string | undefined;
+}
+/** What an archive says about itself, with no trust decision attached. */
+export interface Inspection {
+    /** Member names, excluding `AUTHORITY.PEM`. */
+    members: string[];
+    /** Whether the archive carries a signature marker at all. */
+    signed: boolean;
+    /** The whole-file hash the marker records, hex. */
+    hash?: string | undefined;
+    /** Names of the unsigned attributes carried beside the signature. */
+    fields: string[];
+    /** The manifest's declared algorithms and certificate chain. */
+    manifest?: ManifestFields | undefined;
+}
+/**
+ * Build an archive from a base directory and a list of files, optionally
+ * signing it and optionally prepending a launcher or binary.
+ */
+export declare function createBundle(options: CreateOptions): Promise<BuildResult>;
+/**
+ * Sign an existing archive into a new file. The input is never modified: its
+ * members are read out, laid down again behind whatever prefix was asked for,
+ * and the finished bytes are hashed and signed as a whole. One unsigned archive
+ * therefore yields every shape — a `#!` launcher, a self-contained binary, or a
+ * plain mountable archive — each correctly offset and each signed over itself.
+ */
+export declare function signBundle(options: SignOptions): Promise<BuildResult>;
+/** A signer backed by a private key and certificate chain read from disk. */
+export declare function fileSigner({ key, chain, signAlg }: {
+    key: string;
+    chain: string;
+    signAlg?: string | undefined;
+}): Signer;
+/**
+ * Verify an archive: recompute the whole-file hash, check the signature over it
+ * against the leaf certificate, check every member's own digest, and decide
+ * whether the certificate chain means anything to us.
+ */
+export declare function verifyBundle(source: ArchiveSource, options?: VerifyBundleOptions): Promise<VerificationResult>;
+/** The synchronous form, for callers on a path that cannot await — a mount. */
+export declare function verifyBundleSync(source: ArchiveSource, options?: VerifyBundleOptions): VerificationResult;
+/**
+ * What an archive claims about itself — its members, whether it is signed at
+ * all, and what its manifest declares. This is the cheap "what am I looking at"
+ * call; `verifyBundle` is the expensive one that answers whether any of it is
+ * true, and nothing here should be believed until it has run.
+ */
+export declare function inspectBundle(source: string): Inspection;
+/**
+ * Mount a signed archive and run the application inside it, in a child process
+ * with the verifying provider preloaded — so the archive is checked and mounted
+ * by the child's own bootstrap, and what runs is what was verified.
+ *
+ * Verification happens here too, before the child is spawned. That buys nothing
+ * the child does not already enforce; it buys a legible refusal instead of an
+ * uncaught error thrown from inside node's startup.
+ */
+export declare function runBundle(archive: string, options?: RunOptions): RunResult;
+/**
+ * The node arguments that mount `archive` as the filesystem and run the program
+ * inside it, with this package's verifying provider preloaded. Anything after
+ * these is the application's own argv — the trailing `--` is what makes that
+ * true, since without it node claims any argument that looks like one of its
+ * own flags and the application never sees it.
+ */
+export declare function mountArgv(archive: string): string[];
+/**
+ * The absolute path of the preload that registers the verifying provider, as a
+ * real path `node -r` can resolve.
+ */
+export declare function registerPath(): string;
+export {};
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAwC,KAAK,UAAU,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,EAEH,KAAK,kBAAkB,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EACvF,MAAM,eAAe,CAAC;AAWvB,8CAA8C;AAC9C,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC3C,uEAAuE;IACvE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,uEAAuE;IACvE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,sEAAsE;AACtE,UAAU,WAAW;IACjB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,gEAAgE;IAChE,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IAC9C,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,wCAAwC;IACxC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC5C,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,uDAAuD;IACvD,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACtD;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACvB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,4EAA4E;IAC5E,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IACpC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,SAAS;IACtB,uEAAuE;IACvE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACvB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAC;IAChB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,qEAAqE;IACrE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAQ/E;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAW3E;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAkB,EAAE,EAAE;IAC3D,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,MAAM,CAET;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEpH;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,CAEzG;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAiBxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,UAAe,GAAG,SAAS,CAwB9E;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAOnD;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAGrC"}

package/dist/api.js

@@ -0,0 +1,174 @@
+import * as FS from 'node:fs';
+import * as PATH from 'node:path';
+import * as ZLIB from 'node:zlib';
+import { spawnSync } from 'node:child_process';
+import { bundle, rebundle, keySigner, members } from './archive.js';
+import { verify, verifySync, signatureOf, parseManifest, AUTHORITY, } from './manifest.js';
+/**
+ * Build an archive from a base directory and a list of files, optionally
+ * signing it and optionally prepending a launcher or binary.
+ */
+export async function createBundle(options) {
+    const { base = '.', files, prefix, hashAlg, signAlg, key, chain, signer } = options;
+    if (!files.length)
+        throw new Error('create: the file list is empty');
+    if (!signer && Boolean(key) !== Boolean(chain))
+        throw new Error('create: key and chain must be given together');
+    return await produce(options, Boolean(prefix), (out) => bundle({
+        base, files, prefix, hashAlg, signAlg, key, chain, signer, out,
+    }));
+}
+/**
+ * Sign an existing archive into a new file. The input is never modified: its
+ * members are read out, laid down again behind whatever prefix was asked for,
+ * and the finished bytes are hashed and signed as a whole. One unsigned archive
+ * therefore yields every shape — a `#!` launcher, a self-contained binary, or a
+ * plain mountable archive — each correctly offset and each signed over itself.
+ */
+export async function signBundle(options) {
+    const { source, output, prefix, executable, hashAlg, signAlg, key, chain, signer } = options;
+    if (!source)
+        throw new Error('sign: an archive path is required');
+    if (!signer && Boolean(key) !== Boolean(chain))
+        throw new Error('sign: key and chain must be given together');
+    if (output && PATH.resolve(output) === PATH.resolve(source)) {
+        throw new Error('sign: the output must differ from the input archive');
+    }
+    return await produce(options, Boolean(prefix || executable), (out) => rebundle({
+        source, prefix, hashAlg, signAlg, key, chain, signer, out,
+    }));
+}
+/** A signer backed by a private key and certificate chain read from disk. */
+export function fileSigner({ key, chain, signAlg = 'sha256' }) {
+    return keySigner({ key: FS.readFileSync(key), chain: FS.readFileSync(chain, 'utf-8'), signAlg });
+}
+/**
+ * Verify an archive: recompute the whole-file hash, check the signature over it
+ * against the leaf certificate, check every member's own digest, and decide
+ * whether the certificate chain means anything to us.
+ */
+export async function verifyBundle(source, options) {
+    return verify(source, withRoots(options));
+}
+/** The synchronous form, for callers on a path that cannot await — a mount. */
+export function verifyBundleSync(source, options) {
+    return verifySync(source, withRoots(options));
+}
+/**
+ * What an archive claims about itself — its members, whether it is signed at
+ * all, and what its manifest declares. This is the cheap "what am I looking at"
+ * call; `verifyBundle` is the expensive one that answers whether any of it is
+ * true, and nothing here should be believed until it has run.
+ */
+export function inspectBundle(source) {
+    const marker = signatureOf(source);
+    const names = members(source);
+    let manifest;
+    const zip = ZLIB.ZipFile.openSync(PATH.resolve(source));
+    try {
+        if (zip.has(AUTHORITY))
+            manifest = parseManifest(zip.getSync(AUTHORITY).contentSync());
+    }
+    finally {
+        zip.closeSync();
+    }
+    return {
+        members: names,
+        signed: marker !== null,
+        hash: marker?.hash,
+        fields: marker ? [...marker.fields.keys()] : [],
+        manifest,
+    };
+}
+/**
+ * Mount a signed archive and run the application inside it, in a child process
+ * with the verifying provider preloaded — so the archive is checked and mounted
+ * by the child's own bootstrap, and what runs is what was verified.
+ *
+ * Verification happens here too, before the child is spawned. That buys nothing
+ * the child does not already enforce; it buys a legible refusal instead of an
+ * uncaught error thrown from inside node's startup.
+ */
+export function runBundle(archive, options = {}) {
+    const roots = options.roots ?? [];
+    const res = verifyBundleSync(archive, {
+        roots, deep: false, identity: options.identity, issuer: options.issuer,
+    });
+    const acceptable = res.state === 'valid' || (Boolean(options.allowUntrusted) && res.state === 'valid-untrusted');
+    if (!acceptable) {
+        throw Object.assign(new Error(`refusing to run '${archive}': ${res.state} — ${res.reason}`), { code: 'ERR_BUNDLE_UNTRUSTED', state: res.state });
+    }
+    const env = { ...process.env, ...options.env };
+    if (roots.length)
+        env['BUNDLE_ROOTS'] = roots.join(PATH.delimiter);
+    if (options.identity)
+        env['BUNDLE_IDENTITY'] = options.identity;
+    if (options.issuer)
+        env['BUNDLE_ISSUER'] = options.issuer;
+    if (options.allowUntrusted)
+        env['BUNDLE_ALLOW_UNTRUSTED'] = '1';
+    const child = spawnSync(process.execPath, [...mountArgv(archive), ...(options.args ?? [])], { stdio: options.stdio ?? 'inherit', env, encoding: 'utf-8' });
+    if (child.error)
+        throw child.error;
+    return { status: child.status, signal: child.signal, stdout: child.stdout, stderr: child.stderr };
+}
+/**
+ * The node arguments that mount `archive` as the filesystem and run the program
+ * inside it, with this package's verifying provider preloaded. Anything after
+ * these is the application's own argv — the trailing `--` is what makes that
+ * true, since without it node claims any argument that looks like one of its
+ * own flags and the application never sees it.
+ */
+export function mountArgv(archive) {
+    return [
+        '--no-warnings', '--experimental-vfs',
+        '-r', registerPath(),
+        '--vfs-load', archive,
+        '--',
+    ];
+}
+/**
+ * The absolute path of the preload that registers the verifying provider, as a
+ * real path `node -r` can resolve.
+ */
+export function registerPath() {
+    const ext = import.meta.filename.endsWith('.ts') ? '.ts' : '.js';
+    return PATH.join(PATH.dirname(import.meta.filename), `register${ext}`);
+}
+// `roots` may name PEM files or carry PEM text; `verifySync` wants text.
+function withRoots(options) {
+    if (!options)
+        return {};
+    const { roots, ...rest } = options;
+    if (!roots?.length)
+        return rest;
+    const loaded = roots.map((root) => (root.includes('-----BEGIN') ? root : FS.readFileSync(root, 'utf-8')));
+    return { ...rest, extraRoots: [...(rest.extraRoots ?? []), ...loaded] };
+}
+// Open the destination, run the build into it, wait for the bytes to land, and
+// report what was written. A stream the caller supplied is left open — its
+// lifetime is theirs — while one opened here is closed and waited on. stdout is
+// ended (so a redirect sees EOF) but not awaited for 'finish', which never
+// fires for a TTY or a pipe.
+async function produce({ output, stream }, executable, build) {
+    const out = stream ?? (output ? FS.createWriteStream(output) : process.stdout);
+    const res = await build(out);
+    if (!stream)
+        await close(out);
+    if (output && executable)
+        FS.chmodSync(output, 0o755);
+    return {
+        ...res,
+        output: output ?? null,
+        members: output ? members(output) : [],
+        size: output ? FS.statSync(output).size : undefined,
+    };
+}
+function close(out) {
+    return new Promise((resolve, reject) => {
+        if (out === process.stdout)
+            return void out.end(() => resolve());
+        out.on('error', reject).on('finish', () => resolve()).end();
+    });
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAyB,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAgC,MAAM,cAAc,CAAC;AAClG,OAAO,EACH,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,GAE5D,MAAM,eAAe,CAAC;AAwGvB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB;IACrD,MAAM,EAAE,IAAI,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACpF,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAEhH,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC;QAC3D,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;KACjE,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAoB;IACjD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7F,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC9G,IAAI,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC;QAC3E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG;KAC5D,CAAC,CAAC,CAAC;AACR,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,QAAQ,EAI1D;IACG,OAAO,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AACrG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAqB,EAAE,OAA6B;IACnF,OAAO,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,MAAqB,EAAE,OAA6B;IACjF,OAAO,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,QAAoC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3F,CAAC;YAAS,CAAC;QACP,GAAG,CAAC,SAAS,EAAE,CAAC;IACpB,CAAC;IACD,OAAO;QACH,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,MAAM,KAAK,IAAI;QACvB,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QAC/C,QAAQ;KACX,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,OAAO,GAAe,EAAE;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE;QAClC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;KACzE,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;IACjH,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,OAAO,MAAM,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,EACvF,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM;QAAE,GAAG,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,QAAQ;QAAE,GAAG,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM;QAAE,GAAG,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAC1D,IAAI,OAAO,CAAC,cAAc;QAAE,GAAG,CAAC,wBAAwB,CAAC,GAAG,GAAG,CAAC;IAEhE,MAAM,KAAK,GAA6B,SAAS,CAC7C,OAAO,CAAC,QAAQ,EAChB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAChD,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAChE,CAAC;IACF,IAAI,KAAK,CAAC,KAAK;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC;IACnC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACtG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACrC,OAAO;QACH,eAAe,EAAE,oBAAoB;QACrC,IAAI,EAAE,YAAY,EAAE;QACpB,YAAY,EAAE,OAAO;QACrB,IAAI;KACP,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IACxB,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,OAAwC;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,+EAA+E;AAC/E,2EAA2E;AAC3E,gFAAgF;AAChF,2EAA2E;AAC3E,6BAA6B;AAC7B,KAAK,UAAU,OAAO,CAClB,EAAE,MAAM,EAAE,MAAM,EAAe,EAC/B,UAAmB,EACnB,KAA6C;IAE7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAE9B,IAAI,MAAM,IAAI,UAAU;QAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtD,OAAO;QACH,GAAG,GAAG;QACN,MAAM,EAAE,MAAM,IAAI,IAAI;QACtB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACtC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KACtD,CAAC;AACN,CAAC;AAED,SAAS,KAAK,CAAC,GAAa;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,IAAI,GAAG,KAAK,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/archive.d.ts

@@ -0,0 +1,115 @@
+import * as ZLIB from 'node:zlib';
+import * as CRYPTO from 'node:crypto';
+import { type Writable } from 'node:stream';
+/** One file about to become an archive member. */
+export interface Member {
+    /** The member's name inside the archive; a `/`-separated relative path. */
+    name: string;
+    data: Buffer;
+    mode?: number | undefined;
+}
+/** What a signer hands back once the finished hash exists. */
+export interface Signature {
+    signature: Buffer | Uint8Array;
+    /**
+     * Unsigned attributes to record beside the signature in the EOCD comment —
+     * anything obtained *after* signing, which therefore cannot be inside what
+     * the signature covers.
+     */
+    fields?: Record<string, string | undefined> | undefined;
+}
+/**
+ * The two-phase signing interface. `chain` is known up front (it goes into
+ * `AUTHORITY.PEM`, inside the hashed region); `sign()` is called afterwards
+ * with the hash of the finished bytes.
+ */
+export interface Signer {
+    kind?: string | undefined;
+    /** Full PEM certificate chain, leaf first. */
+    chain: string;
+    /** Digest the signature over the whole-file hash uses. */
+    signAlg: string;
+    sign(digest: Buffer): Promise<Signature>;
+}
+/** What `emit()` reports once the file has been fully written. */
+export interface EmitResult {
+    /** The whole-file hash, hex — null for an unsigned archive. */
+    hash: string | null;
+    signed: boolean;
+}
+export interface BundleOptions {
+    /** Base directory the file list is relative to. */
+    base: string;
+    /** Member names, relative to `base`. */
+    files: string[];
+    /** A launcher or binary to prepend, making the result self-running. */
+    prefix?: string | undefined;
+    /** Digest for the whole-file hash and member digests (default: 'sha256'). */
+    hashAlg?: string | undefined;
+    /** Digest the signature uses (default: 'sha256'). */
+    signAlg?: string | undefined;
+    /** Shorthand for `signer: keySigner({ key, chain, signAlg })`. */
+    key?: Buffer | string | CRYPTO.KeyObject | undefined;
+    chain?: string | undefined;
+    signer?: Signer | undefined;
+    out: Writable;
+}
+export interface RebundleOptions {
+    /** Path to the archive whose members are re-emitted. */
+    source: string;
+    prefix?: string | undefined;
+    hashAlg?: string | undefined;
+    signAlg?: string | undefined;
+    key?: Buffer | string | CRYPTO.KeyObject | undefined;
+    chain?: string | undefined;
+    signer?: Signer | undefined;
+    out: Writable;
+}
+export declare function fromDirectory(base: string, files: string[]): AsyncGenerator<Member>;
+export declare function fromArchive(zip: ZLIB.ZipFile): AsyncGenerator<Member>;
+/**
+ * A Readable of the ZIP archive over `members`. Its members carry per-file
+ * digests and its AUTHORITY.PEM manifest declares the algorithms and chain, but
+ * the archive itself is left with an empty EOCD comment: the whole-file hash
+ * and its signature are a property of the finished file and are applied by
+ * `emit()`. `baseOffset` seeds the archive's internal offsets for when it is
+ * appended after a prefix.
+ */
+export declare function createArchive({ members, base, files, hashAlg, signAlg, chain, baseOffset }: {
+    members?: AsyncIterable<Member> | Iterable<Member> | undefined;
+    base?: string | undefined;
+    files?: string[] | undefined;
+    hashAlg?: string | undefined;
+    signAlg?: string | undefined;
+    chain?: string | undefined;
+    baseOffset?: number | undefined;
+}): import("node:stream").Readable;
+/**
+ * A signer backed by a private key and a certificate chain already on disk —
+ * the offline-CA path, and the shape `sigstore.ts` implements too.
+ */
+export declare function keySigner({ key, chain, signAlg }: {
+    key: Buffer | string | CRYPTO.KeyObject;
+    chain: Buffer | string;
+    signAlg?: string | undefined;
+}): Signer;
+/**
+ * Build an archive from files on disk. `key`/`chain` are accepted as a
+ * shorthand for `signer: keySigner({ key, chain, signAlg })`, so the
+ * create-and-sign-in-one-step path stays available.
+ */
+export declare function bundle({ base, files, prefix, hashAlg, signAlg, key, chain, signer, out }: BundleOptions): Promise<EmitResult>;
+/**
+ * Re-emit an existing archive: same members, new prefix, new signature. This is
+ * what `bundle sign` runs. `source` is a path to an archive (signed or not,
+ * prefixed or not) — its members are read out, its old AUTHORITY.PEM is
+ * dropped, and everything is laid down again at the offsets the new prefix
+ * implies before the result is hashed and signed as a whole.
+ */
+export declare function rebundle({ source, prefix, hashAlg, signAlg, key, chain, signer, out }: RebundleOptions): Promise<EmitResult>;
+/**
+ * The member names an archive holds, in order, excluding AUTHORITY.PEM — for
+ * reporting what is about to be re-signed without reading every member's bytes.
+ */
+export declare function members(source: string): string[];
+//# sourceMappingURL=archive.d.ts.map

package/dist/archive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../src/archive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AA4BvD,kDAAkD;AAClD,MAAM,WAAW,MAAM;IACnB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,8DAA8D;AAC9D,MAAM,WAAW,SAAS;IACtB,SAAS,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;CAC3D;AAED;;;;GAIG;AACH,MAAM,WAAW,MAAM;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAC5C;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACvB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC1B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,GAAG,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC5B,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,GAAG,EAAE,QAAQ,CAAC;CACjB;AAQD,wBAAuB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAI1F;AAED,wBAAuB,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAK5E;AAmBD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAc,EAAE,EAAE;IACxG,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC,kCAGA;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAkB,EAAE,EAAE;IAC1D,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC;IACxC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,MAAM,CAST;AAkED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAkB,EAAE,OAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAGzJ;AAED;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAkB,EAAE,OAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAcxJ;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAShD"}

package/dist/archive.js

@@ -0,0 +1,188 @@
+import * as ZLIB from 'node:zlib';
+import * as PATH from 'node:path';
+import * as FS from 'node:fs';
+import * as CRYPTO from 'node:crypto';
+import { Transform } from 'node:stream';
+import { buildManifest, formatSignature, AUTHORITY } from './manifest.js';
+// Members, as `{ name, data, mode }`. Two sources: a directory plus a file
+// list, or an existing archive.
+//
+// `AUTHORITY.PEM` is never carried across from a source archive — it describes
+// the signing of the archive it came from, and a re-emitted archive gets a
+// fresh one.
+export async function* fromDirectory(base, files) {
+    for (const name of files) {
+        yield { name, data: FS.readFileSync(PATH.resolve(base, name)), mode: 0o444 };
+    }
+}
+export async function* fromArchive(zip) {
+    for (const [name, entry] of zip.entriesSync()) {
+        if (name === AUTHORITY || entry.isDirectory)
+            continue;
+        yield { name, data: entry.contentSync(), mode: entry.mode || 0o444 };
+    }
+}
+// Yields a ZipEntry per member — each stamped, in its entry comment, with the
+// hex digest of its own content — then a final `AUTHORITY.PEM` manifest entry
+// declaring the algorithms and (when signing) carrying the certificate chain.
+// Members are small (an application's own files; the heavy runtime is the
+// prepended prefix, not an archive member), so each is held whole to hash it
+// before the entry, whose comment must be fixed at creation time, is built.
+async function* entries(members, { hashAlg, signAlg, chain }) {
+    for await (const { name, data, mode } of members) {
+        const digest = CRYPTO.createHash(hashAlg).update(data).digest('hex');
+        yield await ZLIB.ZipEntry.create(name, data, { mode: mode ?? 0o444, comment: digest });
+    }
+    yield await ZLIB.ZipEntry.create(AUTHORITY, buildManifest({ hashAlg, signAlg, chain }), { mode: 0o444 });
+}
+/**
+ * A Readable of the ZIP archive over `members`. Its members carry per-file
+ * digests and its AUTHORITY.PEM manifest declares the algorithms and chain, but
+ * the archive itself is left with an empty EOCD comment: the whole-file hash
+ * and its signature are a property of the finished file and are applied by
+ * `emit()`. `baseOffset` seeds the archive's internal offsets for when it is
+ * appended after a prefix.
+ */
+export function createArchive({ members, base, files, hashAlg = 'sha256', signAlg, chain, baseOffset = 0 }) {
+    const source = members ?? fromDirectory(base ?? '.', files ?? []);
+    return ZLIB.createZipArchive(entries(source, { hashAlg, signAlg, chain }), { baseOffset });
+}
+/**
+ * A signer backed by a private key and a certificate chain already on disk —
+ * the offline-CA path, and the shape `sigstore.ts` implements too.
+ */
+export function keySigner({ key, chain, signAlg = 'sha256' }) {
+    return {
+        kind: 'key',
+        chain: String(chain),
+        signAlg,
+        async sign(digest) {
+            return { signature: Buffer.from(CRYPTO.sign(signAlg, digest, key)) };
+        },
+    };
+}
+// Writes `prefix` (when given) then the archive to `out`, without closing
+// `out`. With no prefix the result is a plain archive — a `.bundle` meant to be
+// run through `--vfs-load`; with one it is a self-running container (a shebang
+// launcher or a SEA binary) that carries the same archive in its tail. When a
+// `signer` is given, the whole file is signed. The hash runs over the prefix
+// and then over the archive up to (but not including) the EOCD comment; that
+// hash is what the signer signs. The EOCD comment records both, so a verifier
+// can validate the hash on its own (a cheap pre-mount integrity gate) and only
+// then check the signature over that hash against the certificate:
+//
+//   SIGNED:<hash-of-region-hex>:<signature-hex>[:<NAME>=<value>]*
+async function emit({ members, prefix, hashAlg = 'sha256', signer, out }) {
+    const hasher = signer ? CRYPTO.createHash(hashAlg) : null;
+    // 1. Stream the prefix straight to `out`, feeding the whole-file hash.
+    if (prefix)
+        await prepend(prefix, out, hasher);
+    // 2. Build the archive (small) with an empty EOCD comment, in memory. The
+    //    chain has to be embedded here, before anything is hashed — which is
+    //    why a signer hands over its certificate up front and signs later.
+    const archive = await collect(createArchive({
+        members, hashAlg,
+        signAlg: signer?.signAlg,
+        chain: signer?.chain,
+        baseOffset: prefix ? FS.statSync(prefix).size : 0,
+    }));
+    if (!signer || !hasher) {
+        await write(out, archive);
+        return { hash: null, signed: false };
+    }
+    // 3. The signed region is the prefix plus the archive minus its trailing
+    //    2-byte (empty) comment-length field. Hash it, sign the hash, and
+    //    re-emit the archive with the marker as the EOCD comment. Anything the
+    //    signer produced *after* signing — a transparency-log entry, a
+    //    timestamp — comes back as fields and rides in the same comment, since
+    //    it could not have been inside the hash it postdates.
+    const region = archive.subarray(0, archive.length - 2);
+    hasher.update(region);
+    const digest = hasher.digest();
+    const { signature, fields } = await signer.sign(digest);
+    const marker = formatSignature({
+        hash: digest.toString('hex'),
+        sig: Buffer.from(signature).toString('hex'),
+        fields,
+    });
+    const comment = Buffer.from(marker, 'ascii');
+    if (comment.length > 0xffff) {
+        throw new Error(`signature marker is ${comment.length} bytes; a ZIP comment holds at most 65535`);
+    }
+    const length = Buffer.alloc(2);
+    length.writeUInt16LE(comment.length, 0);
+    await write(out, Buffer.concat([region, length, comment]));
+    return { hash: digest.toString('hex'), signed: true };
+}
+/**
+ * Build an archive from files on disk. `key`/`chain` are accepted as a
+ * shorthand for `signer: keySigner({ key, chain, signAlg })`, so the
+ * create-and-sign-in-one-step path stays available.
+ */
+export async function bundle({ base, files, prefix, hashAlg = 'sha256', signAlg = 'sha256', key, chain, signer, out }) {
+    const active = signer ?? (key && chain ? keySigner({ key, chain, signAlg }) : undefined);
+    return emit({ members: fromDirectory(base, files), prefix, hashAlg, signer: active, out });
+}
+/**
+ * Re-emit an existing archive: same members, new prefix, new signature. This is
+ * what `bundle sign` runs. `source` is a path to an archive (signed or not,
+ * prefixed or not) — its members are read out, its old AUTHORITY.PEM is
+ * dropped, and everything is laid down again at the offsets the new prefix
+ * implies before the result is hashed and signed as a whole.
+ */
+export async function rebundle({ source, prefix, hashAlg = 'sha256', signAlg = 'sha256', key, chain, signer, out }) {
+    const active = signer ?? (key && chain ? keySigner({ key, chain, signAlg }) : undefined);
+    const zip = ZLIB.ZipFile.openSync(PATH.resolve(source));
+    try {
+        // The member list is drained into memory before writing starts: the
+        // source archive may be the file being overwritten, and in any case the
+        // entries have to outlive the ZipFile handle closed below.
+        const members = [];
+        for await (const member of fromArchive(zip))
+            members.push(member);
+        if (!members.length)
+            throw new Error(`'${source}' contains no members to sign`);
+        return await emit({ members, prefix, hashAlg, signer: active, out });
+    }
+    finally {
+        zip.closeSync();
+    }
+}
+/**
+ * The member names an archive holds, in order, excluding AUTHORITY.PEM — for
+ * reporting what is about to be re-signed without reading every member's bytes.
+ */
+export function members(source) {
+    const zip = ZLIB.ZipFile.openSync(PATH.resolve(source));
+    try {
+        return [...zip.entriesSync()]
+            .filter(([name, entry]) => name !== AUTHORITY && !entry.isDirectory)
+            .map(([name]) => name);
+    }
+    finally {
+        zip.closeSync();
+    }
+}
+function prepend(file, out, sink) {
+    return new Promise((resolve, reject) => {
+        const tap = new Transform({
+            transform(chunk, _enc, cb) { if (sink)
+                sink.update(chunk); cb(null, chunk); },
+        });
+        FS.createReadStream(file).on('error', reject)
+            .pipe(tap).on('error', reject).on('end', () => resolve())
+            .pipe(out, { end: false });
+    });
+}
+async function collect(readable) {
+    const chunks = [];
+    for await (const chunk of readable)
+        chunks.push(chunk);
+    return Buffer.concat(chunks);
+}
+function write(out, buffer) {
+    return new Promise((resolve, reject) => {
+        out.write(buffer, (err) => (err ? reject(err) : resolve()));
+    });
+}
+//# sourceMappingURL=archive.js.map