@pipobscure/bundle 0.0.1

package/dist/provider.js

@@ -0,0 +1,206 @@
+import * as VFS from 'node:vfs';
+import * as ZLIB from 'node:zlib';
+import * as CRYPTO from 'node:crypto';
+import * as PATH from 'node:path';
+import * as FS from 'node:fs';
+import { AUTHORITY, signatureOf, verifySync } from './manifest.js';
+// A `node:vfs` file provider for signed archives — `.bundle` files — layered on
+// the built-in `ZipProvider`. It is what turns "this archive is signed" into
+// "this archive is what runs":
+//
+//   * At mount time (`open()` below) the whole-file hash is recomputed, the
+//     signature over it is checked against the leaf certificate in
+//     `AUTHORITY.PEM`, and that chain is anchored in the trust store. An
+//     archive that fails any of those never becomes a filesystem at all.
+//
+//   * At *fetch* time every member is hashed as it is read and compared with
+//     the digest recorded for it in the archive that was verified at mount.
+//     The mount-time hash already covers every member's bytes, but it covers
+//     them *as they were when the file was hashed* — a `ZipFile` reads members
+//     lazily from an open fd, so anything that rewrites the file underneath a
+//     running program would otherwise be served unchecked. Verified content is
+//     kept (members are an application's own files, not the runtime), so each
+//     member is read and hashed at most once and what later reads see is the
+//     copy that was verified, not a fresh read of the file.
+//
+// Registering this with `vfs.registerProvider()` puts it ahead of the built-in
+// ZIP provider, so `--vfs-load` hands it the source first. It claims files by
+// extension (`.bundle`) *and* by content — anything carrying our signature
+// marker — so renaming a signed archive cannot quietly downgrade it to the
+// unverified built-in provider.
+export const EXTENSION = '.bundle';
+const READ_FLAGS = FS.constants.O_WRONLY | FS.constants.O_RDWR | FS.constants.O_CREAT |
+    FS.constants.O_TRUNC | FS.constants.O_APPEND | FS.constants.O_EXCL;
+/**
+ * Verify `path` and return a provider that serves it, or throw. `options` are
+ * the same as `register()`'s.
+ */
+export function open(path, options) {
+    const opts = settings(options);
+    const resolved = PATH.resolve(path);
+    // One ZipFile is opened here and handed to both the verification and the
+    // provider: the central directory is read once, and the digests the
+    // provider checks against are the ones the verified hash covered.
+    const archive = ZLIB.ZipFile.openSync(resolved);
+    try {
+        const res = verifySync(resolved, {
+            archive, deep: opts.deep, extraRoots: opts.extraRoots,
+            trustedRoot: opts.trustedRoot, identity: opts.identity, issuer: opts.issuer,
+        });
+        const acceptable = res.state === 'valid' || (opts.allowUntrusted && res.state === 'valid-untrusted');
+        if (!acceptable)
+            throw refusal(resolved, res);
+        return new BundleProvider(archive, { hashAlg: res.hashAlg, digests: res.digests });
+    }
+    catch (err) {
+        archive.closeSync();
+        throw err;
+    }
+}
+/**
+ * Register this provider with `node:vfs` so the `--vfs-load` startup flag
+ * selects it for signed archives. Meant to be preloaded, before `--vfs-load`
+ * picks a provider:
+ *
+ *   node --experimental-vfs -r @pipobscure/bundle/register --vfs-load=app.bundle
+ */
+export function register(options) {
+    const opts = settings(options);
+    VFS.registerProvider({
+        name: opts.name,
+        canHandle: (resolvedPath, stats) => stats.isFile() && claims(resolvedPath, opts),
+        create: (resolvedPath) => open(resolvedPath, opts),
+    });
+    return opts;
+}
+/**
+ * A read-only `ZipProvider` that will not hand out a member's content until
+ * that content has been hashed and matched against the digest recorded for it.
+ */
+export class BundleProvider extends VFS.ZipProvider {
+    #archive;
+    #hashAlg;
+    #digests;
+    #verified;
+    /**
+     * `digests` is the member-name -> hex-digest map from a `verifySync()` of
+     * this very archive; `hashAlg` the algorithm those digests are in.
+     */
+    constructor(archive, { hashAlg = 'sha256', digests = new Map() } = {}) {
+        super(archive);
+        this.#archive = archive;
+        this.#hashAlg = hashAlg;
+        this.#digests = digests;
+        this.#verified = new VFS.MemoryProvider();
+        // The manifest itself carries no digest of its own — it is what names
+        // the algorithms — but its bytes were read during the mount-time check,
+        // which the whole-file hash covered. Keep that copy so every path the
+        // mount serves comes from verified bytes.
+        if (archive.has(AUTHORITY)) {
+            const entry = archive.getSync(AUTHORITY);
+            this.#keep(AUTHORITY, entry.contentSync(), entry.mode);
+        }
+    }
+    // A signed archive is a fixed artifact: any write would invalidate the
+    // signature it was mounted on, so the mount is read-only regardless of how
+    // the underlying archive was opened.
+    get readonly() { return true; }
+    async open(path, flags, mode) {
+        const name = normalize(path);
+        if (reads(flags) && this.#check(name))
+            return this.#verified.open(path, flags, mode);
+        return super.open(path, flags, mode);
+    }
+    openSync(path, flags, mode) {
+        const name = normalize(path);
+        if (reads(flags) && this.#check(name))
+            return this.#verified.openSync(path, flags, mode);
+        return super.openSync(path, flags, mode);
+    }
+    // Whether `name` can be served from verified content, reading and checking
+    // it on first use. `false` means this is not a member with a recorded
+    // digest (a directory, or nothing at all) and the base provider should
+    // answer — including with the ENOENT/EISDIR it would normally raise.
+    #check(name) {
+        if (this.#verified.existsSync(`/${name}`))
+            return true;
+        const recorded = this.#digests.get(name);
+        if (recorded === undefined)
+            return false;
+        const entry = this.#archive.getSync(name);
+        const content = entry.contentSync();
+        const actual = CRYPTO.createHash(this.#hashAlg).update(content).digest('hex');
+        if (actual !== recorded) {
+            throw Object.assign(new Error(`bundle: content of '${name}' does not match its signed digest ` +
+                `(expected ${recorded}, got ${actual})`), { code: 'ERR_BUNDLE_INTEGRITY', member: name });
+        }
+        this.#keep(name, content, entry.mode);
+        return true;
+    }
+    #keep(name, content, mode) {
+        const dir = PATH.posix.dirname(`/${name}`);
+        if (dir !== '/' && dir !== '.')
+            this.#verified.mkdirSync(dir, { recursive: true });
+        this.#verified.writeFileSync(`/${name}`, content, { mode: mode || 0o444 });
+    }
+}
+// Whether this provider should back `resolvedPath` (already known to be a
+// file): by name for the extensions it owns, and by content for anything
+// carrying our signature marker.
+function claims(resolvedPath, opts) {
+    const lower = resolvedPath.toLowerCase();
+    if (opts.extensions.some((ext) => lower.endsWith(ext)))
+        return true;
+    return opts.claimSigned && signatureOf(resolvedPath) !== null;
+}
+function refusal(path, res) {
+    const detail = res.subject ? `${res.reason} [${res.subject.replace(/\n/g, ', ')}]` : res.reason;
+    return Object.assign(new Error(`bundle: refusing to mount '${path}': ${res.state} — ${detail}`), { code: 'ERR_BUNDLE_UNTRUSTED', state: res.state });
+}
+// VFS paths are normalized to `/`-rooted POSIX paths; ZIP member names
+// have no leading slash.
+function normalize(path) {
+    return path.startsWith('/') ? path.slice(1) : path;
+}
+// Whether `flags` opens purely for reading — the only case verified content can
+// answer. Anything else goes to the base provider, which refuses it (EROFS)
+// because this provider is read-only. Mirrors how `node:fs` itself reads flags:
+// a string means what it says, a number is a bitmask, anything else is 'r'.
+function reads(flags) {
+    if (typeof flags === 'string')
+        return flags === 'r';
+    if (typeof flags !== 'number')
+        return true;
+    return (flags & READ_FLAGS) === 0;
+}
+const kSettings = Symbol('bundle.settings');
+function settings(options = {}) {
+    if (options[kSettings])
+        return options;
+    const opts = options;
+    return {
+        [kSettings]: true,
+        name: opts.name ?? 'bundle',
+        extensions: (opts.extensions ?? [EXTENSION]).map((ext) => ext.toLowerCase()),
+        claimSigned: opts.claimSigned ?? true,
+        extraRoots: pems(opts.roots ?? envList('BUNDLE_ROOTS')),
+        allowUntrusted: opts.allowUntrusted ?? envFlag('BUNDLE_ALLOW_UNTRUSTED'),
+        deep: opts.deep ?? false,
+        identity: opts.identity ?? (process.env['BUNDLE_IDENTITY'] || undefined),
+        issuer: opts.issuer ?? (process.env['BUNDLE_ISSUER'] || undefined),
+        trustedRoot: opts.trustedRoot ?? (process.env['BUNDLE_SIGSTORE_ROOT'] || undefined),
+    };
+}
+// Accepts roots as PEM text or as paths to PEM files, so a caller can pass
+// either and `BUNDLE_ROOTS` can name files.
+function pems(roots) {
+    return (roots ?? []).map((root) => (root.includes('-----BEGIN') ? root : FS.readFileSync(root, 'utf-8')));
+}
+function envList(name) {
+    return (process.env[name] ?? '').split(PATH.delimiter).filter(Boolean);
+}
+function envFlag(name) {
+    const value = process.env[name];
+    return value !== undefined && value !== '' && value !== '0' && value !== 'false';
+}
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAA2B,MAAM,eAAe,CAAC;AAE5F,gFAAgF;AAChF,6EAA6E;AAC7E,+BAA+B;AAC/B,EAAE;AACF,4EAA4E;AAC5E,mEAAmE;AACnE,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,4DAA4D;AAC5D,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,gCAAgC;AAEhC,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAC;AAEnC,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO;IACjF,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;AAiDvE;;;GAGG;AACH,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,OAAoC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpC,yEAAyE;IACzE,oEAAoE;IACpE,kEAAkE;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE;YAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;YACrD,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM;SAC9E,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,CAAC,CAAC;QACrG,IAAI,CAAC,UAAU;YAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAyB;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,gBAAgB,CAAC;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC;QAChF,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC;KACrD,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,GAAG,CAAC,WAAW;IAC/C,QAAQ,CAAe;IACvB,QAAQ,CAAS;IACjB,QAAQ,CAAsB;IAC9B,SAAS,CAAqB;IAE9B;;;OAGG;IACH,YAAY,OAAqB,EAAE,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,EAAkB,EAAE,GAG1F,EAAE;QACF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QAE1C,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,0CAA0C;QAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,qCAAqC;IACrC,IAAa,QAAQ,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;IAExC,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,KAAuB,EAAE,IAAa;QACpE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAEQ,QAAQ,CAAC,IAAY,EAAE,KAAuB,EAAE,IAAa;QAClE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,CAAC,IAAY;QACf,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9E,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CACzB,uBAAuB,IAAI,qCAAqC;gBAChE,aAAa,QAAQ,SAAS,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,OAAe,EAAE,IAAY;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG;YAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;CACJ;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,iCAAiC;AACjC,SAAS,MAAM,CAAC,YAAoB,EAAE,IAAc;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAuB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,MAAM,GAAG,CAAC,KAAK,MAAM,MAAM,EAAE,CAAC,EAC3F,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,uEAAuE;AACvE,yBAAyB;AACzB,SAAS,SAAS,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAC5E,SAAS,KAAK,CAAC,KAAkC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,GAAG,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,SAAS,GAAkB,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAE3D,SAAS,QAAQ,CAAC,OAAO,GAA+B,EAAE;IACtD,IAAK,OAAoB,CAAC,SAAS,CAAC;QAAE,OAAO,OAAmB,CAAC;IACjE,MAAM,IAAI,GAAG,OAA0B,CAAC;IACxC,OAAO;QACH,CAAC,SAAS,CAAC,EAAE,IAAI;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5E,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;QACvD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,wBAAwB,CAAC;QACxE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC;QACxE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;QAClE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;KACtF,CAAC;AACN,CAAC;AAED,2EAA2E;AAC3E,4CAA4C;AAC5C,SAAS,IAAI,CAAC,KAA2B;IACrC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IACzB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,OAAO,CAAC;AACrF,CAAC"}

package/dist/record.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=record.d.ts.map

package/dist/record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":""}

package/dist/record.js

@@ -0,0 +1,23 @@
+import { preload, sibling } from './preload.js';
+// The preload that puts manifest recording back where `--vfs-manifest` used to
+// be: registering a recording provider is all it does, so `--vfs-load` finds it
+// already in place when it picks a provider for a directory.
+//
+//   BUNDLE_MANIFEST=app.manifest node --experimental-vfs \
+//       -r @pipobscure/bundle/record --vfs-load=./lib
+//
+// `--import @pipobscure/bundle/record` works just as well: mounting is deferred
+// until both `-r` and `--import` preloads have run, and this module imports
+// cleanly from ESM.
+//
+// Configure it through the environment — a preload takes no arguments:
+//
+//   BUNDLE_MANIFEST  where to write the file list; unset records nothing
+//
+// For anything more (recording an archive mount, several manifests, keeping an
+// existing list), import `@pipobscure/bundle/recorder` and call `register()` or
+// `recording()` from a preload module of your own.
+preload(() => {
+    sibling(import.meta.filename, 'recorder').register();
+});
+//# sourceMappingURL=record.js.map

package/dist/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGhD,+EAA+E;AAC/E,gFAAgF;AAChF,6DAA6D;AAC7D,EAAE;AACF,2DAA2D;AAC3D,sDAAsD;AACtD,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,oBAAoB;AACpB,EAAE;AACF,uEAAuE;AACvE,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,mDAAmD;AAEnD,OAAO,CAAC,GAAG,EAAE;IACT,OAAO,CAAkB,OAAO,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC1E,CAAC,CAAC,CAAC"}

package/dist/recorder.d.ts

@@ -0,0 +1,64 @@
+import * as VFS from 'node:vfs';
+export interface ManifestOptions {
+    /**
+     * Start a fresh list. Defaults to true only on the main thread: worker
+     * threads inherit `execArgv`, so this preload runs in them too, and a
+     * worker must append to what the main thread already wrote rather than
+     * wipe it mid-run.
+     */
+    truncate?: boolean | undefined;
+}
+export interface RecorderOptions extends ManifestOptions {
+    /** Where to write the file list (default: the `BUNDLE_MANIFEST` variable). */
+    manifest?: string | Manifest | undefined;
+    /** Identifier reported in diagnostics (default: 'bundle-manifest'). */
+    name?: string | undefined;
+}
+/**
+ * The manifest file itself: which paths have been written, and the appending.
+ * Paths are appended as soon as they are read rather than buffered and flushed
+ * at exit, so nothing is lost if the process is killed instead of exiting.
+ */
+export declare class Manifest {
+    #private;
+    constructor(path: string, { truncate }?: ManifestOptions);
+    get path(): string;
+    /** Every path recorded so far, in the order they were first read. */
+    get paths(): string[];
+    /**
+     * Record one VFS path, once. Best effort: bookkeeping must never break the
+     * read that triggered it.
+     */
+    record(path: string): void;
+}
+/**
+ * The shape `recording()` accepts and returns — any provider class. The rest
+ * parameter is what lets the wrapper be a mixin over a class whose constructor
+ * takes whatever it likes, and hand back one with the same signature.
+ */
+type ProviderClass = new (...args: any[]) => VFS.VirtualProvider;
+/**
+ * Wrap a provider class so every read through it is recorded in `manifest`.
+ * Works over any `VirtualProvider` subclass — a `RealFSProvider` for a
+ * directory mount, a `ZipProvider` or the signed-archive provider from
+ * './provider.ts' for an archive one — and leaves the constructor signature of
+ * the class it wraps untouched:
+ *
+ *   const Recording = recording(VFS.RealFSProvider, new Manifest('app.manifest'));
+ *   const provider = new Recording('/path/to/directory');
+ */
+export declare function recording<T extends ProviderClass>(Base: T, manifest: Manifest): T;
+/**
+ * Register a recording `RealFSProvider` so a directory loaded with
+ * `--vfs-load` is backed by it. Meant to be preloaded, before the mount is made:
+ *
+ *   BUNDLE_MANIFEST=app.manifest node --experimental-vfs \
+ *       -r @pipobscure/bundle/record --vfs-load=./lib
+ *
+ * With no manifest destination there is nothing to record, so nothing is
+ * registered and directory mounts are left exactly as node makes them; the
+ * return value is then null.
+ */
+export declare function register(options?: RecorderOptions): Manifest | null;
+export {};
+//# sourceMappingURL=recorder.d.ts.map

package/dist/recorder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder.d.ts","sourceRoot":"","sources":["../src/recorder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAgChC,MAAM,WAAW,eAAe;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACpD,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED;;;;GAIG;AACH,qBAAa,QAAQ;;IAMjB,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,QAAuB,EAAE,GAAE,eAAoB,EAG1E;IAED,IAAI,IAAI,IAAI,MAAM,CAAuB;IAEzC,qEAAqE;IACrE,IAAI,KAAK,IAAI,MAAM,EAAE,CAA4B;IAEjD;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CASzB;CACJ;AAED;;;;GAIG;AACH,KAAK,aAAa,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,eAAe,CAAC;AAEjE;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,CA0BjF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,GAAG,IAAI,CAevE"}

package/dist/recorder.js

@@ -0,0 +1,111 @@
+import * as VFS from 'node:vfs';
+import * as FS from 'node:fs';
+import { isMainThread } from 'node:worker_threads';
+/**
+ * The manifest file itself: which paths have been written, and the appending.
+ * Paths are appended as soon as they are read rather than buffered and flushed
+ * at exit, so nothing is lost if the process is killed instead of exiting.
+ */
+export class Manifest {
+    #path;
+    #seen = new Set();
+    // Concurrent appends are safe without any coordination — O_APPEND writes do
+    // not interleave — which is what lets worker threads share one manifest.
+    constructor(path, { truncate = isMainThread } = {}) {
+        this.#path = path;
+        if (truncate)
+            FS.writeFileSync(path, '');
+    }
+    get path() { return this.#path; }
+    /** Every path recorded so far, in the order they were first read. */
+    get paths() { return [...this.#seen]; }
+    /**
+     * Record one VFS path, once. Best effort: bookkeeping must never break the
+     * read that triggered it.
+     */
+    record(path) {
+        try {
+            const relative = String(path).replace(/^\/+/, '');
+            if (relative === '' || this.#seen.has(relative))
+                return;
+            this.#seen.add(relative);
+            FS.appendFileSync(this.#path, `${relative}\n`);
+        }
+        catch {
+            // ignored
+        }
+    }
+}
+/**
+ * Wrap a provider class so every read through it is recorded in `manifest`.
+ * Works over any `VirtualProvider` subclass — a `RealFSProvider` for a
+ * directory mount, a `ZipProvider` or the signed-archive provider from
+ * './provider.ts' for an archive one — and leaves the constructor signature of
+ * the class it wraps untouched:
+ *
+ *   const Recording = recording(VFS.RealFSProvider, new Manifest('app.manifest'));
+ *   const provider = new Recording('/path/to/directory');
+ */
+export function recording(Base, manifest) {
+    return class Recording extends Base {
+        async readFile(path, options) {
+            const content = await super.readFile(path, options);
+            manifest.record(path);
+            return content;
+        }
+        readFileSync(path, options) {
+            const content = super.readFileSync(path, options);
+            manifest.record(path);
+            return content;
+        }
+        async open(path, flags, mode) {
+            const handle = await super.open(path, flags, mode);
+            if (reads(flags))
+                manifest.record(path);
+            return handle;
+        }
+        openSync(path, flags, mode) {
+            const handle = super.openSync(path, flags, mode);
+            if (reads(flags))
+                manifest.record(path);
+            return handle;
+        }
+    };
+}
+/**
+ * Register a recording `RealFSProvider` so a directory loaded with
+ * `--vfs-load` is backed by it. Meant to be preloaded, before the mount is made:
+ *
+ *   BUNDLE_MANIFEST=app.manifest node --experimental-vfs \
+ *       -r @pipobscure/bundle/record --vfs-load=./lib
+ *
+ * With no manifest destination there is nothing to record, so nothing is
+ * registered and directory mounts are left exactly as node makes them; the
+ * return value is then null.
+ */
+export function register(options = {}) {
+    const configured = options.manifest ?? process.env['BUNDLE_MANIFEST'];
+    if (!configured)
+        return null;
+    const manifest = configured instanceof Manifest ? configured : new Manifest(configured, options);
+    const Recording = recording(VFS.RealFSProvider, manifest);
+    VFS.registerProvider({
+        name: options.name ?? 'bundle-manifest',
+        // Directory mounts only: an archive mount has its own provider (and,
+        // for a `.bundle`, one that verifies what it serves), and quietly
+        // replacing it here would be the wrong trade for a file list.
+        canHandle: (_resolvedPath, stats) => stats.isDirectory(),
+        create: (resolvedPath) => new Recording(resolvedPath),
+    });
+    return manifest;
+}
+// Whether `flags` opens for reading. Mirrors how `node:fs` reads them: a string
+// means what it says, a number is a bitmask, anything else is 'r'.
+function reads(flags) {
+    if (typeof flags === 'string')
+        return flags[0] === 'r' || flags.includes('+');
+    if (typeof flags !== 'number')
+        return true;
+    return (flags & (FS.constants.O_WRONLY | FS.constants.O_TRUNC)) === 0;
+}
+//# sourceMappingURL=recorder.js.map

package/dist/recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder.js","sourceRoot":"","sources":["../src/recorder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA+CnD;;;;GAIG;AACH,MAAM,OAAO,QAAQ;IACjB,KAAK,CAAS;IACd,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1B,4EAA4E;IAC5E,yEAAyE;IACzE,YAAY,IAAY,EAAE,EAAE,QAAQ,GAAG,YAAY,EAAE,GAAoB,EAAE;QACvE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,QAAQ;YAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,KAAa,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEzC,qEAAqE;IACrE,IAAI,KAAK,KAAe,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjD;;;OAGG;IACH,MAAM,CAAC,IAAY;QACf,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO;YACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzB,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACL,UAAU;QACd,CAAC;IACL,CAAC;CACJ;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAA0B,IAAO,EAAE,QAAkB;IAC1E,OAAO,MAAM,SAAU,SAAQ,IAAI;QACtB,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAiB;YACnD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACpD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACnB,CAAC;QAEQ,YAAY,CAAC,IAAY,EAAE,OAAiB;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAClD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,OAAO,CAAC;QACnB,CAAC;QAEQ,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,KAAuB,EAAE,IAAa;YACpE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAClB,CAAC;QAEQ,QAAQ,CAAC,IAAY,EAAE,KAAuB,EAAE,IAAa;YAClE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAClB,CAAC;KACC,CAAC;AACX,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAO,GAAoB,EAAE;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,MAAM,QAAQ,GAAG,UAAU,YAAY,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC1D,GAAG,CAAC,gBAAgB,CAAC;QACjB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,iBAAiB;QACvC,qEAAqE;QACrE,kEAAkE;QAClE,8DAA8D;QAC9D,SAAS,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;QACxD,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC;KACxD,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,gFAAgF;AAChF,mEAAmE;AACnE,SAAS,KAAK,CAAC,KAAkC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC"}

package/dist/register.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":""}

package/dist/register.js

@@ -0,0 +1,28 @@
+import { preload, sibling } from './preload.js';
+// The preload entry point: registering the signed-archive provider is all this
+// does, so `--vfs-load` finds it already in place when it picks a provider for
+// its source.
+//
+//   node --experimental-vfs -r @pipobscure/bundle/register --vfs-load=app.bundle
+//
+// `--import @pipobscure/bundle/register` works just as well: mounting is
+// deferred until both `-r` and `--import` preloads have run, and this module
+// imports cleanly from ESM. Either way the point is that registering is a
+// preload flag and nothing more — no module of your own to write.
+//
+// Configure it through the environment — a preload takes no arguments:
+//
+//   BUNDLE_ROOTS            extra trusted root certificates, as a
+//                           path-delimiter-separated list of PEM files
+//   BUNDLE_ALLOW_UNTRUSTED  accept a good signature whose chain is not anchored
+//                           in the trust store
+//   BUNDLE_IDENTITY         require this sigstore signing identity
+//   BUNDLE_ISSUER           require this sigstore OIDC issuer
+//   BUNDLE_SIGSTORE_ROOT    path to the sigstore trust root to check against
+//
+// For anything more, import `@pipobscure/bundle/provider` and call `register()`
+// with options from a preload module of your own.
+preload(() => {
+    sibling(import.meta.filename, 'provider').register();
+});
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGhD,+EAA+E;AAC/E,+EAA+E;AAC/E,cAAc;AACd,EAAE;AACF,iFAAiF;AACjF,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,0EAA0E;AAC1E,kEAAkE;AAClE,EAAE;AACF,uEAAuE;AACvE,EAAE;AACF,kEAAkE;AAClE,uEAAuE;AACvE,gFAAgF;AAChF,+CAA+C;AAC/C,mEAAmE;AACnE,8DAA8D;AAC9D,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,kDAAkD;AAElD,OAAO,CAAC,GAAG,EAAE;IACT,OAAO,CAAkB,OAAO,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC1E,CAAC,CAAC,CAAC"}

package/dist/sea.d.ts

@@ -0,0 +1,97 @@
+import { type Baked, type Mounted } from './launch.ts';
+import { type BuildResult } from './api.ts';
+import type { VerificationResult } from './manifest.ts';
+import type { Signer } from './archive.ts';
+export interface BootstrapOptions extends Baked {
+    /** The container to verify and mount (default: `process.execPath`). */
+    container?: string | undefined;
+}
+export type { Mounted };
+/**
+ * Verify the running container and mount the archive appended to it. Returns
+ * where it landed; nothing has been executed out of it yet.
+ */
+export declare function mountSelf(options?: BootstrapOptions): Mounted;
+/** Verify the running container, mount it, and run the application inside. */
+export declare function bootstrap(options?: BootstrapOptions): Promise<void>;
+/**
+ * Verify the running container without mounting it — for an application that
+ * wants to report on its own provenance ("signed by X at Y").
+ */
+export declare function verifySelf(options?: BootstrapOptions): VerificationResult;
+/** The default flags the container runs itself with. */
+export declare const SEA_EXEC_ARGV: string[];
+export interface VerifierOptions {
+    /**
+     * Include the sigstore libraries, so the container can check a
+     * sigstore-signed archive rather than degrading it to untrusted
+     * (default: true). Costs roughly a megabyte of dependency tree.
+     */
+    sigstore?: boolean | undefined;
+}
+export interface SeaBaseOptions extends VerifierOptions {
+    /** Where to write the base binary. */
+    output: string;
+    /**
+     * The node binary to embed (default: the running one). This is the runtime
+     * the finished container ships, so it decides which platform it runs on.
+     */
+    node?: string | undefined;
+    /** Options baked into the stub and handed to `bootstrap()` at startup. */
+    bootstrap?: BootstrapOptions | undefined;
+    /** Runtime flags the container applies to itself. */
+    execArgv?: string[] | undefined;
+    /** A prebuilt verifier bundle to embed, instead of building one. */
+    verifier?: string | undefined;
+    /** Scratch directory for the generated stub and config. */
+    scratch?: string | undefined;
+}
+export interface SeaOptions extends SeaBaseOptions {
+    /** The application archive to append. Signed or not; it is re-signed here. */
+    app: string;
+    /** A base built earlier, instead of building one now. */
+    base?: string | undefined;
+    /** Sign the finished container. Without one it is built but left unsigned. */
+    signer?: Signer | undefined;
+    hashAlg?: string | undefined;
+    signAlg?: string | undefined;
+    /** Progress, one line at a time. */
+    log?: ((line: string) => void) | undefined;
+}
+export interface SeaBaseResult {
+    output: string;
+    size: number;
+    /** Members of the verifier bundle embedded in the blob. */
+    verifier: string[];
+}
+/**
+ * Build the SEA base: a node runtime whose injected main mounts this package
+ * out of its own blob and hands over to `bootstrap()`. The result is a binary
+ * with no application in it yet — append one with `buildSea` or with
+ * `sign --prefix`.
+ */
+export declare function createSeaBase(options: SeaBaseOptions): Promise<SeaBaseResult>;
+/**
+ * Build a self-validating executable: a SEA base with `app` appended and the
+ * whole thing signed as one file. Everything the container will check — the
+ * runtime, the verifier and the application — is inside what the signature
+ * covers.
+ */
+export declare function buildSea(options: SeaOptions): Promise<BuildResult>;
+/**
+ * The files the embedded verifier needs, as paths relative to this package's
+ * root. That is this package's own compiled modules plus, unless turned off,
+ * the sigstore libraries — resolved through `node_modules` rather than listed,
+ * so the set cannot fall behind the dependency tree.
+ */
+export declare function verifierFiles({ sigstore }?: VerifierOptions): string[];
+/**
+ * The CommonJS stub injected as the SEA's main script. It runs at the root of
+ * the mounted verifier bundle, so requiring this package is a relative path and
+ * nothing more; everything else it needs to decide, `launch` decides by looking
+ * at the binary's own tail.
+ *
+ * It stays the one piece no test can exercise from source, so it stays small.
+ */
+export declare function stubSource(options: BootstrapOptions): string;
+//# sourceMappingURL=sea.d.ts.map

package/dist/sea.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sea.d.ts","sourceRoot":"","sources":["../src/sea.ts"],"names":[],"mappings":"AAIA,OAAO,EAAwB,KAAK,KAAK,EAAE,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAA4B,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAyD3C,MAAM,WAAW,gBAAiB,SAAQ,KAAK;IAC3C,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AACD,YAAY,EAAE,OAAO,EAAE,CAAC;AAExB;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAEjE;AAED,8EAA8E;AAC9E,wBAAsB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,gBAAqB,GAAG,kBAAkB,CAE7E;AAID,wDAAwD;AACxD,eAAO,MAAM,aAAa,UAA0C,CAAC;AAErE,MAAM,WAAW,eAAe;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,cAAe,SAAQ,eAAe;IACnD,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,0EAA0E;IAC1E,SAAS,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACzC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAC9C,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,oCAAoC;IACpC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA+DnF;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CA4BxE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,EAAE,QAAe,EAAE,GAAE,eAAoB,GAAG,MAAM,EAAE,CAWjF;AAuCD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAyB5D"}