@push.rocks/smartlinuxrepo 0.0.0-stage → 0.1.0

package/dist_ts/shared/url.js

@@ -0,0 +1,371 @@
+/**
+ * Gitea 28.2.0's URL check for package metadata (`validation.IsValidURL`,
+ * `modules/validation/helpers.go:42-50`): Go 1.27's `url.ParseRequestURI`
+ * succeeds, the scheme is `http` or `https` (case-insensitive), and the host's
+ * port part holds only digits (`portOnly`/`validPort`,
+ * `modules/validation/binding.go:131-152`; no range check, an empty port
+ * passes). Readers keep a URL field only when this returns true.
+ *
+ * The port follows Go's `net/url` byte for byte on the UTF-8 encoding of the
+ * value, including its quirks: `http:x` is an opaque URL and passes,
+ * `http://` (empty host) passes, a query or fragment is never validated, and a
+ * `#` before the first `/` is part of the host and fails. Only the parts of the
+ * parser that can change the result for `http`/`https` are ported. Expected
+ * values come from Go: `test/fixtures/url/isvalidurl.gitea.json`.
+ *
+ * Internal: not exported from the package entry.
+ */
+export function isValidUrl(valueArg) {
+    if (typeof valueArg !== 'string') {
+        return false;
+    }
+    const raw = utf8.encode(valueArg);
+    // parse(): control characters anywhere, then the empty and `*` forms
+    if (raw.some((byte) => byte < 0x20 || byte === 0x7f) || raw.length === 0) {
+        return false;
+    }
+    const scheme = splitScheme(raw);
+    if (scheme === null) {
+        return false;
+    }
+    const schemeName = ascii(raw.subarray(0, scheme)).toLowerCase();
+    if (schemeName !== 'http' && schemeName !== 'https') {
+        return false;
+    }
+    let rest = raw.subarray(scheme + 1);
+    const questionMarks = count(rest, QUESTION);
+    if (questionMarks === 1 && rest[rest.length - 1] === QUESTION) {
+        rest = rest.subarray(0, rest.length - 1);
+    }
+    else if (questionMarks > 0) {
+        rest = rest.subarray(0, rest.indexOf(QUESTION));
+    }
+    if (rest[0] !== SLASH) {
+        // a rootless path with a scheme is opaque and not validated further
+        return true;
+    }
+    let host = new Uint8Array(0);
+    let path = rest;
+    if (rest[1] === SLASH) {
+        const slash = rest.indexOf(SLASH, 2);
+        const authority = slash < 0 ? rest.subarray(2) : rest.subarray(2, slash);
+        path = slash < 0 ? new Uint8Array(0) : rest.subarray(slash);
+        const parsedHost = parseAuthority(authority);
+        if (parsedHost === null) {
+            return false;
+        }
+        host = parsedHost;
+    }
+    if (unescape(path, 'other') === null) {
+        return false;
+    }
+    return isDigits(portOnly(host));
+}
+const utf8 = new TextEncoder();
+const SLASH = 0x2f;
+const QUESTION = 0x3f;
+const COLON = 0x3a;
+const PERCENT = 0x25;
+const AT = 0x40;
+const OPEN_BRACKET = 0x5b;
+const CLOSE_BRACKET = 0x5d;
+const DOT = 0x2e;
+/** Characters Go's `shouldEscape` leaves alone in a host besides alphanumerics and `-_.~`. */
+const HOST_SAFE = new Set([..."!$&'()*+,;=:[]<>\""].map((character) => character.charCodeAt(0)));
+/** Characters `validUserinfo` accepts besides alphanumerics. */
+const USERINFO_SAFE = new Set([..."-._:~!$&'()*+,;=%@"].map((character) => character.charCodeAt(0)));
+/** `getScheme`: the index of the scheme's colon, or `null` when there is no scheme or it is malformed. */
+function splitScheme(rawArg) {
+    for (let i = 0; i < rawArg.length; i++) {
+        const c = rawArg[i];
+        if (isAlpha(c)) {
+            continue;
+        }
+        if (isDigit(c) || c === 0x2b || c === 0x2d || c === DOT) {
+            if (i === 0) {
+                return null;
+            }
+            continue;
+        }
+        return c === COLON && i > 0 ? i : null;
+    }
+    return null;
+}
+/** `parseAuthority`: the unescaped host, or `null` on a parse error. */
+function parseAuthority(authorityArg) {
+    const at = authorityArg.lastIndexOf(AT);
+    const host = parseHost(at < 0 ? authorityArg : authorityArg.subarray(at + 1));
+    if (host === null || at < 0) {
+        return host;
+    }
+    const userinfo = authorityArg.subarray(0, at);
+    // validUserinfo iterates runes: any byte >= 0x80 is a rune outside the allowed set
+    if (!userinfo.every((byte) => isAlpha(byte) || isDigit(byte) || USERINFO_SAFE.has(byte))) {
+        return null;
+    }
+    const colon = userinfo.indexOf(COLON);
+    const parts = colon < 0 ? [userinfo] : [userinfo.subarray(0, colon), userinfo.subarray(colon + 1)];
+    return parts.every((part) => unescape(part, 'other') !== null) ? host : null;
+}
+/** `parseHost` for `http`/`https` (strict colons, the Go 1.26+ default Gitea's go.mod selects). */
+function parseHost(hostArg) {
+    const openBracket = hostArg.lastIndexOf(OPEN_BRACKET);
+    if (openBracket > 0) {
+        return null;
+    }
+    if (openBracket === 0) {
+        const closeBracket = hostArg.lastIndexOf(CLOSE_BRACKET);
+        if (closeBracket < 0) {
+            return null;
+        }
+        const colonPort = hostArg.subarray(closeBracket + 1);
+        if (!isOptionalPort(colonPort)) {
+            return null;
+        }
+        const hostname = hostArg.subarray(1, closeBracket);
+        const zone = indexOfZone(hostname);
+        let unescapedHostname;
+        if (zone >= 0) {
+            const hostPart = unescape(hostname.subarray(0, zone), 'host');
+            const zonePart = unescape(hostname.subarray(zone), 'zone');
+            unescapedHostname = hostPart === null || zonePart === null ? null : concat(hostPart, zonePart);
+        }
+        else {
+            unescapedHostname = unescape(hostname, 'host');
+        }
+        // only an IPv6 address may sit in brackets (netip.ParseAddr, then !Is4)
+        if (unescapedHostname === null || !isIpv6Address(unescapedHostname)) {
+            return null;
+        }
+        return concat(Uint8Array.of(OPEN_BRACKET), unescapedHostname, Uint8Array.of(CLOSE_BRACKET), colonPort);
+    }
+    const colon = hostArg.indexOf(COLON);
+    if (colon >= 0 && !isOptionalPort(hostArg.subarray(colon))) {
+        return null;
+    }
+    return unescape(hostArg, 'host');
+}
+/** Go's `unescape` for the path, userinfo, host and zone modes; `null` on an invalid escape or host byte. */
+function unescape(bytesArg, modeArg) {
+    let escapes = 0;
+    for (let i = 0; i < bytesArg.length;) {
+        const c = bytesArg[i];
+        if (c === PERCENT) {
+            escapes++;
+            if (i + 2 >= bytesArg.length || !isHex(bytesArg[i + 1]) || !isHex(bytesArg[i + 2])) {
+                return null;
+            }
+            const isPercentEscape = bytesArg[i + 1] === 0x32 && bytesArg[i + 2] === 0x35;
+            if (modeArg === 'host' && unhex(bytesArg[i + 1]) < 8 && !isPercentEscape) {
+                return null;
+            }
+            if (modeArg === 'zone') {
+                const value = (unhex(bytesArg[i + 1]) << 4) | unhex(bytesArg[i + 2]);
+                if (!isPercentEscape && value !== 0x20 && shouldEscapeInHost(value)) {
+                    return null;
+                }
+            }
+            i += 3;
+            continue;
+        }
+        if (modeArg !== 'other' && c < 0x80 && shouldEscapeInHost(c)) {
+            return null;
+        }
+        i++;
+    }
+    if (escapes === 0) {
+        return bytesArg;
+    }
+    const result = new Uint8Array(bytesArg.length - 2 * escapes);
+    let length = 0;
+    for (let i = 0; i < bytesArg.length; i++) {
+        if (bytesArg[i] === PERCENT) {
+            result[length++] = (unhex(bytesArg[i + 1]) << 4) | unhex(bytesArg[i + 2]);
+            i += 2;
+        }
+        else {
+            result[length++] = bytesArg[i];
+        }
+    }
+    return result;
+}
+/** Go's `shouldEscape(c, encodeHost)` (identical for `encodeZone`). */
+function shouldEscapeInHost(cArg) {
+    if (isAlpha(cArg) || isDigit(cArg)) {
+        return false;
+    }
+    return !(HOST_SAFE.has(cArg) || cArg === 0x2d || cArg === 0x5f || cArg === DOT || cArg === 0x7e);
+}
+/** Index of the first `%25` (the RFC 6874 zone introducer), or -1. */
+function indexOfZone(bytesArg) {
+    for (let i = 0; i + 2 < bytesArg.length; i++) {
+        if (bytesArg[i] === PERCENT && bytesArg[i + 1] === 0x32 && bytesArg[i + 2] === 0x35) {
+            return i;
+        }
+    }
+    return -1;
+}
+/**
+ * Whether `netip.ParseAddr` parses the bytes as an IPv6 address (with an
+ * optional non-empty zone). An input whose first `.`, `:` or `%` is not `:` is
+ * an IPv4 address or an error, both refused in brackets.
+ */
+function isIpv6Address(bytesArg) {
+    const first = bytesArg.findIndex((byte) => byte === DOT || byte === COLON || byte === PERCENT);
+    if (first < 0 || bytesArg[first] !== COLON) {
+        return false;
+    }
+    let s = bytesArg;
+    const zone = s.indexOf(PERCENT);
+    if (zone >= 0) {
+        if (zone === s.length - 1) {
+            return false;
+        }
+        s = s.subarray(0, zone);
+    }
+    let ellipsis = -1;
+    if (s.length >= 2 && s[0] === COLON && s[1] === COLON) {
+        ellipsis = 0;
+        s = s.subarray(2);
+        if (s.length === 0) {
+            return true;
+        }
+    }
+    let i = 0;
+    while (i < 16) {
+        let off = 0;
+        let acc = 0;
+        for (; off < s.length; off++) {
+            const c = s[off];
+            if (!isHex(c)) {
+                break;
+            }
+            acc = acc * 16 + unhex(c);
+            if (off > 3 || acc > 0xffff) {
+                return false;
+            }
+        }
+        if (off === 0) {
+            return false;
+        }
+        if (off < s.length && s[off] === DOT) {
+            if ((ellipsis < 0 && i !== 12) || i + 4 > 16 || !isIpv4Fields(s)) {
+                return false;
+            }
+            s = s.subarray(s.length);
+            i += 4;
+            break;
+        }
+        i += 2;
+        s = s.subarray(off);
+        if (s.length === 0) {
+            break;
+        }
+        if (s[0] !== COLON || s.length === 1) {
+            return false;
+        }
+        s = s.subarray(1);
+        if (s[0] === COLON) {
+            if (ellipsis >= 0) {
+                return false;
+            }
+            ellipsis = i;
+            s = s.subarray(1);
+            if (s.length === 0) {
+                break;
+            }
+        }
+    }
+    if (s.length !== 0) {
+        return false;
+    }
+    return i < 16 ? ellipsis >= 0 : ellipsis < 0;
+}
+/** `parseIPv4Fields`: four decimal octets without leading zeros. */
+function isIpv4Fields(bytesArg) {
+    let value = 0;
+    let digits = 0;
+    let dots = 0;
+    for (let i = 0; i < bytesArg.length; i++) {
+        const c = bytesArg[i];
+        if (isDigit(c)) {
+            if (digits === 1 && value === 0) {
+                return false;
+            }
+            value = value * 10 + (c - 0x30);
+            digits++;
+            if (value > 255) {
+                return false;
+            }
+        }
+        else if (c === DOT) {
+            if (i === 0 || i === bytesArg.length - 1 || bytesArg[i - 1] === DOT || dots === 3) {
+                return false;
+            }
+            dots++;
+            value = 0;
+            digits = 0;
+        }
+        else {
+            return false;
+        }
+    }
+    return dots === 3;
+}
+/** `validOptionalPort`: empty, or `:` followed by digits only. */
+function isOptionalPort(bytesArg) {
+    return bytesArg.length === 0 || (bytesArg[0] === COLON && isDigits(bytesArg.subarray(1)));
+}
+/** Gitea's `portOnly` on the parsed host. */
+function portOnly(hostArg) {
+    const colon = hostArg.indexOf(COLON);
+    if (colon < 0) {
+        return new Uint8Array(0);
+    }
+    for (let i = 0; i + 1 < hostArg.length; i++) {
+        if (hostArg[i] === CLOSE_BRACKET && hostArg[i + 1] === COLON) {
+            return hostArg.subarray(i + 2);
+        }
+    }
+    if (hostArg.includes(CLOSE_BRACKET)) {
+        return new Uint8Array(0);
+    }
+    return hostArg.subarray(colon + 1);
+}
+function isDigits(bytesArg) {
+    return bytesArg.every(isDigit);
+}
+function isDigit(cArg) {
+    return cArg >= 0x30 && cArg <= 0x39;
+}
+function isAlpha(cArg) {
+    return (cArg >= 0x41 && cArg <= 0x5a) || (cArg >= 0x61 && cArg <= 0x7a);
+}
+function isHex(cArg) {
+    return isDigit(cArg) || (cArg >= 0x41 && cArg <= 0x46) || (cArg >= 0x61 && cArg <= 0x66);
+}
+function unhex(cArg) {
+    return isDigit(cArg) ? cArg - 0x30 : (cArg | 0x20) - 0x61 + 10;
+}
+function count(bytesArg, byteArg) {
+    let total = 0;
+    for (const byte of bytesArg) {
+        if (byte === byteArg) {
+            total++;
+        }
+    }
+    return total;
+}
+function ascii(bytesArg) {
+    return String.fromCharCode(...bytesArg);
+}
+function concat(...partsArg) {
+    const result = new Uint8Array(partsArg.reduce((sum, part) => sum + part.length, 0));
+    let offset = 0;
+    for (const part of partsArg) {
+        result.set(part, offset);
+        offset += part.length;
+    }
+    return result;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/shared/validation.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Refuses anything but a valid `Date` whose whole seconds fit an OpenPGP v4
+ * time field (1970-01-01 to 2106-02-07).
+ */
+export declare function assertTimestamp(valueArg: unknown, fieldArg?: string): asserts valueArg is Date;
+export declare function assertBytes(valueArg: unknown, fieldArg: string): asserts valueArg is Uint8Array;
+/** Refuses anything that is not an object with a `Symbol.asyncIterator` method; the chunks are checked as they arrive. */
+export declare function assertAsyncIterable(valueArg: unknown, fieldArg: string): asserts valueArg is AsyncIterable<unknown>;
+export declare function assertString(valueArg: unknown, fieldArg: string): asserts valueArg is string;
+/** True when the text contains a C0 control character, DEL or a C1 control character. */
+export declare function hasControlCharacter(textArg: string): boolean;
+/**
+ * True when the text can name one path segment of a served file: non-empty,
+ * not `.` or `..`, no `/` and no control characters.
+ */
+export declare function isPathSegment(valueArg: string): boolean;
+/**
+ * A name that becomes one path or tar-entry segment: non-empty, no `/`, no
+ * control characters.
+ */
+export declare function assertSegmentName(valueArg: unknown, fieldArg: string): asserts valueArg is string;

package/dist_ts/shared/validation.js

@@ -0,0 +1,58 @@
+import { LinuxRepoError } from './errors.js';
+/** The largest creation time an OpenPGP v4 packet can carry (seconds since the epoch). */
+const MAX_OPENPGP_SECONDS = 0xffffffff;
+/**
+ * Refuses anything but a valid `Date` whose whole seconds fit an OpenPGP v4
+ * time field (1970-01-01 to 2106-02-07).
+ */
+export function assertTimestamp(valueArg, fieldArg = 'timestamp') {
+    if (!(valueArg instanceof Date) || !Number.isFinite(valueArg.getTime())) {
+        throw new LinuxRepoError('invalid-input', `${fieldArg} must be a valid Date`, { field: fieldArg });
+    }
+    const seconds = Math.floor(valueArg.getTime() / 1000);
+    if (seconds < 0 || seconds > MAX_OPENPGP_SECONDS) {
+        throw new LinuxRepoError('invalid-input', `${fieldArg} is outside 1970-01-01..2106-02-07`, {
+            field: fieldArg,
+        });
+    }
+}
+export function assertBytes(valueArg, fieldArg) {
+    if (!(valueArg instanceof Uint8Array)) {
+        throw new LinuxRepoError('invalid-input', `${fieldArg} must be a Uint8Array`, { field: fieldArg });
+    }
+}
+/** Refuses anything that is not an object with a `Symbol.asyncIterator` method; the chunks are checked as they arrive. */
+export function assertAsyncIterable(valueArg, fieldArg) {
+    if (valueArg === null ||
+        typeof valueArg !== 'object' ||
+        typeof valueArg[Symbol.asyncIterator] !== 'function') {
+        throw new LinuxRepoError('invalid-input', `${fieldArg} must be an AsyncIterable<Uint8Array>`, { field: fieldArg });
+    }
+}
+export function assertString(valueArg, fieldArg) {
+    if (typeof valueArg !== 'string') {
+        throw new LinuxRepoError('invalid-input', `${fieldArg} must be a string`, { field: fieldArg });
+    }
+}
+/** True when the text contains a C0 control character, DEL or a C1 control character. */
+export function hasControlCharacter(textArg) {
+    return /\p{Cc}/u.test(textArg);
+}
+/**
+ * True when the text can name one path segment of a served file: non-empty,
+ * not `.` or `..`, no `/` and no control characters.
+ */
+export function isPathSegment(valueArg) {
+    return valueArg !== '' && valueArg !== '.' && valueArg !== '..' && !valueArg.includes('/') && !hasControlCharacter(valueArg);
+}
+/**
+ * A name that becomes one path or tar-entry segment: non-empty, no `/`, no
+ * control characters.
+ */
+export function assertSegmentName(valueArg, fieldArg) {
+    assertString(valueArg, fieldArg);
+    if (valueArg.length === 0 || valueArg.includes('/') || hasControlCharacter(valueArg)) {
+        throw new LinuxRepoError('invalid-input', `${fieldArg} must be non-empty and contain no "/" or control characters`, { field: fieldArg });
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidmFsaWRhdGlvbi5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3RzL3NoYXJlZC92YWxpZGF0aW9uLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxjQUFjLEVBQUUsTUFBTSxhQUFhLENBQUM7QUFFN0MsMEZBQTBGO0FBQzFGLE1BQU0sbUJBQW1CLEdBQUcsVUFBVSxDQUFDO0FBRXZDOzs7R0FHRztBQUNILE1BQU0sVUFBVSxlQUFlLENBQUMsUUFBaUIsRUFBRSxRQUFRLEdBQUcsV0FBVztJQUN2RSxJQUFJLENBQUMsQ0FBQyxRQUFRLFlBQVksSUFBSSxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxFQUFFLENBQUM7UUFDeEUsTUFBTSxJQUFJLGNBQWMsQ0FBQyxlQUFlLEVBQUUsR0FBRyxRQUFRLHVCQUF1QixFQUFFLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxDQUFDLENBQUM7SUFDckcsQ0FBQztJQUNELE1BQU0sT0FBTyxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDLE9BQU8sRUFBRSxHQUFHLElBQUksQ0FBQyxDQUFDO0lBQ3RELElBQUksT0FBTyxHQUFHLENBQUMsSUFBSSxPQUFPLEdBQUcsbUJBQW1CLEVBQUUsQ0FBQztRQUNqRCxNQUFNLElBQUksY0FBYyxDQUFDLGVBQWUsRUFBRSxHQUFHLFFBQVEsb0NBQW9DLEVBQUU7WUFDekYsS0FBSyxFQUFFLFFBQVE7U0FDaEIsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztBQUNILENBQUM7QUFFRCxNQUFNLFVBQVUsV0FBVyxDQUFDLFFBQWlCLEVBQUUsUUFBZ0I7SUFDN0QsSUFBSSxDQUFDLENBQUMsUUFBUSxZQUFZLFVBQVUsQ0FBQyxFQUFFLENBQUM7UUFDdEMsTUFBTSxJQUFJLGNBQWMsQ0FBQyxlQUFlLEVBQUUsR0FBRyxRQUFRLHVCQUF1QixFQUFFLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxDQUFDLENBQUM7SUFDckcsQ0FBQztBQUNILENBQUM7QUFFRCwwSEFBMEg7QUFDMUgsTUFBTSxVQUFVLG1CQUFtQixDQUFDLFFBQWlCLEVBQUUsUUFBZ0I7SUFDckUsSUFDRSxRQUFRLEtBQUssSUFBSTtRQUNqQixPQUFPLFFBQVEsS0FBSyxRQUFRO1FBQzVCLE9BQVEsUUFBNEMsQ0FBQyxNQUFNLENBQUMsYUFBYSxDQUFDLEtBQUssVUFBVSxFQUN6RixDQUFDO1FBQ0QsTUFBTSxJQUFJLGNBQWMsQ0FBQyxlQUFlLEVBQUUsR0FBRyxRQUFRLHVDQUF1QyxFQUFFLEVBQUUsS0FBSyxFQUFFLFFBQVEsRUFBRSxDQUFDLENBQUM7SUFDckgsQ0FBQztBQUNILENBQUM7QUFFRCxNQUFNLFVBQVUsWUFBWSxDQUFDLFFBQWlCLEVBQUUsUUFBZ0I7SUFDOUQsSUFBSSxPQUFPLFFBQVEsS0FBSyxRQUFRLEVBQUUsQ0FBQztRQUNqQyxNQUFNLElBQUksY0FBYyxDQUFDLGVBQWUsRUFBRSxHQUFHLFFBQVEsbUJBQW1CLEVBQUUsRUFBRSxLQUFLLEVBQUUsUUFBUSxFQUFFLENBQUMsQ0FBQztJQUNqRyxDQUFDO0FBQ0gsQ0FBQztBQUVELHlGQUF5RjtBQUN6RixNQUFNLFVBQVUsbUJBQW1CLENBQUMsT0FBZTtJQUNqRCxPQUFPLFNBQVMsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLENBQUM7QUFDakMsQ0FBQztBQUVEOzs7R0FHRztBQUNILE1BQU0sVUFBVSxhQUFhLENBQUMsUUFBZ0I7SUFDNUMsT0FBTyxRQUFRLEtBQUssRUFBRSxJQUFJLFFBQVEsS0FBSyxHQUFHLElBQUksUUFBUSxLQUFLLElBQUksSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxtQkFBbUIsQ0FBQyxRQUFRLENBQUMsQ0FBQztBQUMvSCxDQUFDO0FBRUQ7OztHQUdHO0FBQ0gsTUFBTSxVQUFVLGlCQUFpQixDQUFDLFFBQWlCLEVBQUUsUUFBZ0I7SUFDbkUsWUFBWSxDQUFDLFFBQVEsRUFBRSxRQUFRLENBQUMsQ0FBQztJQUNqQyxJQUFJLFFBQVEsQ0FBQyxNQUFNLEtBQUssQ0FBQyxJQUFJLFFBQVEsQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLElBQUksbUJBQW1CLENBQUMsUUFBUSxDQUFDLEVBQUUsQ0FBQztRQUNyRixNQUFNLElBQUksY0FBYyxDQUN0QixlQUFlLEVBQ2YsR0FBRyxRQUFRLDZEQUE2RCxFQUN4RSxFQUFFLEtBQUssRUFBRSxRQUFRLEVBQUUsQ0FDcEIsQ0FBQztJQUNKLENBQUM7QUFDSCxDQUFDIn0=

package/dist_ts/signing/keys.d.ts

@@ -0,0 +1,36 @@
+/** An Alpine key pair in Gitea's stored forms. */
+export interface IAlpineKeyPair {
+    /** PKCS#1 PEM (`RSA PRIVATE KEY`). */
+    privateKeyPem: string;
+    /** PKIX/SPKI PEM (`PUBLIC KEY`). */
+    publicKeyPem: string;
+}
+/** An OpenPGP key pair, armored. */
+export interface IOpenPgpKeyPair {
+    privateKeyArmored: string;
+    publicKeyArmored: string;
+    /** The v4 fingerprint, 40 uppercase hex digits. */
+    fingerprint: string;
+}
+/**
+ * Generates an RSA-4096 Alpine key pair in Gitea's forms (Gitea
+ * `util.GenerateKeyPair(4096)`: PKCS#1 private key, PKIX public key, e=65537).
+ * The codec stores nothing. A failure inside node:crypto propagates unchanged.
+ */
+export declare function generateAlpineKeyPair(): Promise<IAlpineKeyPair>;
+/**
+ * Generates an RSA-4096 OpenPGP v4 key pair (primary key for certification and
+ * signing, RSA-4096 encryption subkey, no expiry) whose creation time is
+ * `timestamp` and whose single user ID is exactly `userId`. Bad input is
+ * `invalid-input`; a failure inside openpgp.js propagates unchanged.
+ */
+export declare function generateOpenPgpKeyPair(inputArg: {
+    userId: string;
+    timestamp: Date;
+}): Promise<IOpenPgpKeyPair>;
+/**
+ * Gitea's Alpine key name: `<ownerLowerName>@<hex>.rsa.pub`, where `<hex>` is
+ * the lowercase hex SHA-256 of the PKIX (SPKI) DER of the RSA public key
+ * (Gitea `util.CreatePublicKeyFingerprint`). Pass the owner's lower-case name.
+ */
+export declare function giteaAlpineKeyName(ownerLowerName: string, publicKeyPem: string): string;

package/dist_ts/signing/keys.js

@@ -0,0 +1,89 @@
+import * as plugins from '../plugins.js';
+import { LinuxRepoError } from '../shared/errors.js';
+import { assertSegmentName, assertString, assertTimestamp, hasControlCharacter } from '../shared/validation.js';
+const RSA_BITS = 4096;
+/**
+ * Generates an RSA-4096 Alpine key pair in Gitea's forms (Gitea
+ * `util.GenerateKeyPair(4096)`: PKCS#1 private key, PKIX public key, e=65537).
+ * The codec stores nothing. A failure inside node:crypto propagates unchanged.
+ */
+export async function generateAlpineKeyPair() {
+    const { privateKey, publicKey } = await new Promise((resolve, reject) => {
+        plugins.crypto.generateKeyPair('rsa', {
+            modulusLength: RSA_BITS,
+            publicExponent: 0x10001,
+            privateKeyEncoding: { type: 'pkcs1', format: 'pem' },
+            publicKeyEncoding: { type: 'spki', format: 'pem' },
+        }, (error, publicKeyArg, privateKeyArg) => {
+            if (error) {
+                reject(error);
+            }
+            else {
+                resolve({ privateKey: privateKeyArg, publicKey: publicKeyArg });
+            }
+        });
+    });
+    return { privateKeyPem: privateKey, publicKeyPem: publicKey };
+}
+/**
+ * Generates an RSA-4096 OpenPGP v4 key pair (primary key for certification and
+ * signing, RSA-4096 encryption subkey, no expiry) whose creation time is
+ * `timestamp` and whose single user ID is exactly `userId`. Bad input is
+ * `invalid-input`; a failure inside openpgp.js propagates unchanged.
+ */
+export async function generateOpenPgpKeyPair(inputArg) {
+    if (inputArg === null || typeof inputArg !== 'object') {
+        throw new LinuxRepoError('invalid-input', 'input must be an object', { field: 'input' });
+    }
+    assertString(inputArg.userId, 'userId');
+    if (inputArg.userId.length === 0 || hasControlCharacter(inputArg.userId)) {
+        throw new LinuxRepoError('invalid-input', 'userId must be non-empty and contain no control characters', {
+            field: 'userId',
+        });
+    }
+    assertTimestamp(inputArg.timestamp);
+    const generated = await plugins.openpgp.generateKey({
+        type: 'rsa',
+        rsaBits: RSA_BITS,
+        userIDs: [{ name: inputArg.userId }],
+        date: inputArg.timestamp,
+        format: 'object',
+        config: { v6Keys: false },
+    });
+    return {
+        privateKeyArmored: generated.privateKey.armor(),
+        publicKeyArmored: generated.publicKey.armor(),
+        fingerprint: generated.privateKey.getFingerprint().toUpperCase(),
+    };
+}
+/**
+ * Gitea's Alpine key name: `<ownerLowerName>@<hex>.rsa.pub`, where `<hex>` is
+ * the lowercase hex SHA-256 of the PKIX (SPKI) DER of the RSA public key
+ * (Gitea `util.CreatePublicKeyFingerprint`). Pass the owner's lower-case name.
+ */
+export function giteaAlpineKeyName(ownerLowerName, publicKeyPem) {
+    assertSegmentName(ownerLowerName, 'ownerLowerName');
+    assertString(publicKeyPem, 'publicKeyPem');
+    const label = /-----BEGIN ([A-Z0-9 ]+)-----/.exec(publicKeyPem)?.[1];
+    if (label !== 'PUBLIC KEY') {
+        throw new LinuxRepoError('invalid-key', 'the Alpine public key must be a PKIX "PUBLIC KEY" PEM', {
+            field: 'publicKeyPem',
+        });
+    }
+    let key;
+    try {
+        key = plugins.crypto.createPublicKey({ key: publicKeyPem, format: 'pem' });
+    }
+    catch (error) {
+        throw new LinuxRepoError('invalid-key', 'the Alpine public key cannot be read', { field: 'publicKeyPem' }, {
+            cause: error,
+        });
+    }
+    if (key.asymmetricKeyType !== 'rsa') {
+        throw new LinuxRepoError('invalid-key', 'the Alpine public key must be an RSA key', { field: 'publicKeyPem' });
+    }
+    const der = key.export({ type: 'spki', format: 'der' });
+    const hex = plugins.crypto.createHash('sha256').update(der).digest('hex');
+    return `${ownerLowerName}@${hex}.rsa.pub`;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/signing/openpgpframing.d.ts

@@ -0,0 +1,33 @@
+import { type IOpenPgpSigner } from './signers.js';
+/**
+ * Signs the concatenation of the chunks of `data` and returns the signer's
+ * binary packet unchanged (Arch `.sig`, RPM header tags). The signer reads
+ * `data` to its end exactly once.
+ */
+export declare function createDetachedBinarySignature(inputArg: {
+    data: AsyncIterable<Uint8Array>;
+    signer: IOpenPgpSigner;
+    timestamp: Date;
+}): Promise<Uint8Array>;
+/** Signs `data` and returns an armored detached signature (`Release.gpg`, `repomd.xml.asc`). */
+export declare function createDetachedArmoredSignature(inputArg: {
+    data: Uint8Array;
+    signer: IOpenPgpSigner;
+    timestamp: Date;
+}): Promise<string>;
+/**
+ * Cleartext-signs `text` (`InRelease`). The text must be canonical: no CR and
+ * no trailing spaces or tabs on any line. The signed text is `text` without
+ * its final line break; the output always ends the text with one line break
+ * before the signature block, as GnuPG and Go do. Lines starting with `-` are
+ * dash-escaped. The header is always `Hash: SHA256`.
+ */
+export declare function createCleartextSignedMessage(inputArg: {
+    text: string;
+    signer: IOpenPgpSigner;
+    timestamp: Date;
+}): Promise<string>;
+/** ASCII armor for one signature packet list. */
+export declare function armorSignature(packetArg: Uint8Array): string;
+/** Refuses text that is not canonical cleartext input. */
+export declare function assertCanonicalText(textArg: unknown): asserts textArg is string;