@push.rocks/smartlinuxrepo 1.1.1 → 1.2.0

package/dist_ts/debian/indexreader.d.ts

@@ -0,0 +1,107 @@
+import { type ILinuxPackageLimits } from '../shared/limits.js';
+import type { TLinuxCompression } from '../shared/types.js';
+/** One stanza of a `Packages` index. */
+export interface IDebianPackagesStanza {
+    /** The stanza's lines, first line through the last LF, without a separating empty line (a view into `decoded`). */
+    readonly bytes: Uint8Array;
+    /** The stanza's offset in `decoded`. */
+    readonly offset: number;
+    /** The first-line value of the stanza's last `Filename` field: the unit key. */
+    readonly filename: string;
+    /** The first-line values of the last `Package`, `Version` and `Architecture` fields; `''` when absent. */
+    readonly package: string;
+    readonly version: string;
+    readonly architecture: string;
+}
+/** A `Packages` index read into its stanzas. */
+export interface IDebianPackagesIndex {
+    /** The decompressed document (a copy for `'none'`); every `offset` indexes into it. */
+    readonly decoded: Uint8Array;
+    /** Every stanza in document order, duplicates included. */
+    readonly stanzas: readonly IDebianPackagesStanza[];
+}
+/** One field of a `Release` file. */
+export interface IDebianReleaseField {
+    /** The field name as written. */
+    readonly name: string;
+    /**
+     * The first-line value without surrounding spaces and tabs, then `"\n"`
+     * plus each continuation line verbatim.
+     */
+    readonly value: string;
+    /** The field's line(s), each with its LF. */
+    readonly bytes: Uint8Array;
+}
+/** One file of a `Release` checksum list. */
+export interface IDebianReleaseFile {
+    readonly path: string;
+    readonly size: number;
+    /** As written: hex of the algorithm's length. */
+    readonly digest: string;
+}
+/** A `Release` file read into its fields and checksum lists. */
+export interface IDebianRelease {
+    /** Every field in order, the checksum fields included. */
+    readonly fields: readonly IDebianReleaseField[];
+    /** The `MD5Sum`, `SHA1`, `SHA256` and `SHA512` lists; `[]` when the field is absent. */
+    readonly files: {
+        readonly md5Sum: readonly IDebianReleaseFile[];
+        readonly sha1: readonly IDebianReleaseFile[];
+        readonly sha256: readonly IDebianReleaseFile[];
+        readonly sha512: readonly IDebianReleaseFile[];
+    };
+}
+/**
+ * Reads a `Packages` index (`dists/<d>/<c>/binary-<a>/Packages`, `.gz`,
+ * `.xz`; the caller names `compression` from the file name) into its stanzas.
+ *
+ * - Lines end in LF, the last one too; a line longer than `maxHeaderBytes`
+ *   is `limit-exceeded`.
+ * - A stanza is a maximal run of non-empty lines; one or more empty lines
+ *   separate stanzas, and leading or trailing empty lines are accepted.
+ * - A line holding only spaces or tabs is `malformed-index` (Gitea and the
+ *   codec cannot write one; Debian Policy and the strip rule would read it
+ *   differently). A stanza starting with a continuation line is
+ *   `malformed-index`. A line without `:` is accepted (Gitea can write one).
+ * - Field names are the Go `TrimSpace` of the bytes before the first `:`,
+ *   matched ASCII case-insensitively; values are the Go `TrimSpace` of the
+ *   rest of the field's first line, decoded as Go does (U+FFFD for invalid
+ *   UTF-8), from the field's last occurrence.
+ * - A stanza without `Filename` is `missing-field` (`Filename`, `value` the
+ *   stanza offset).
+ *
+ * Bounds: the decoded document by `maxIndexBytes`, stanzas by `maxEntries`,
+ * one stanza by `maxMetadataBytes`. Every stanza is returned in document
+ * order, duplicates included; `bytes` are views into `decoded`.
+ */
+export declare function readDebianPackagesIndex(inputArg: {
+    bytes: Uint8Array;
+    compression: TLinuxCompression;
+    limits?: Partial<ILinuxPackageLimits>;
+}): Promise<IDebianPackagesIndex>;
+/**
+ * Reads a `Release` file (the plain `dists/<d>/Release`) into its fields and
+ * checksum lists. For an `InRelease`, verify it with `createOpenPgpVerifier`
+ * and pass the verified `signedText` here (plus a final LF when it lacks one).
+ *
+ * - Lines end in LF, the last one too; a line longer than `maxHeaderBytes`
+ *   is `limit-exceeded`.
+ * - Exactly one stanza: an empty line, a line holding only spaces or tabs, a
+ *   continuation line before the first field, a field line without `:`, a
+ *   field name that is empty or holds a space or tab, a second checksum field
+ *   of one algorithm, or an empty document is `malformed-index`.
+ * - `MD5Sum`, `SHA1`, `SHA256` and `SHA512` (ASCII case-insensitive) hold an
+ *   empty first-line value and continuation lines of leading whitespace, then
+ *   exactly three tokens separated by one or more spaces or tabs: the digest
+ *   (hex of the algorithm's length), the size (decimal digits within a safe
+ *   integer) and the path. Anything else is `invalid-field` (`field` the field
+ *   name as written, `value` the line's offset).
+ *
+ * Bounds: the document by `maxIndexBytes`, fields and the files per list by
+ * `maxEntries`. Field names and values are decoded as Go does (U+FFFD for
+ * invalid UTF-8); `bytes` are views into a copy of the input.
+ */
+export declare function readDebianRelease(inputArg: {
+    bytes: Uint8Array;
+    limits?: Partial<ILinuxPackageLimits>;
+}): Promise<IDebianRelease>;

package/dist_ts/debian/indexreader.js

@@ -0,0 +1,274 @@
+import { LinuxRepoError } from '../shared/errors.js';
+import { resolveLinuxPackageLimits } from '../shared/limits.js';
+import { assertLinuxCompression, assertReaderBytes, assertReaderInput, checkUnitBytes, countUnit, isBlankLine, lines, readIndexDocument, } from '../readers/document.js';
+import { decodeGoUtf8, decodeLatin1 } from '../readers/text.js';
+import { fromByteString, goTrimSpace } from './gostring.js';
+const SPACE = 0x20;
+const TAB = 0x09;
+const COLON = 0x3a;
+/** The four checksum fields of a Release, lower-cased, with their list key and hex length. */
+const RELEASE_CHECKSUM_FIELDS = new Map([
+    ['md5sum', { key: 'md5Sum', hexLength: 32 }],
+    ['sha1', { key: 'sha1', hexLength: 40 }],
+    ['sha256', { key: 'sha256', hexLength: 64 }],
+    ['sha512', { key: 'sha512', hexLength: 128 }],
+]);
+/**
+ * Reads a `Packages` index (`dists/<d>/<c>/binary-<a>/Packages`, `.gz`,
+ * `.xz`; the caller names `compression` from the file name) into its stanzas.
+ *
+ * - Lines end in LF, the last one too; a line longer than `maxHeaderBytes`
+ *   is `limit-exceeded`.
+ * - A stanza is a maximal run of non-empty lines; one or more empty lines
+ *   separate stanzas, and leading or trailing empty lines are accepted.
+ * - A line holding only spaces or tabs is `malformed-index` (Gitea and the
+ *   codec cannot write one; Debian Policy and the strip rule would read it
+ *   differently). A stanza starting with a continuation line is
+ *   `malformed-index`. A line without `:` is accepted (Gitea can write one).
+ * - Field names are the Go `TrimSpace` of the bytes before the first `:`,
+ *   matched ASCII case-insensitively; values are the Go `TrimSpace` of the
+ *   rest of the field's first line, decoded as Go does (U+FFFD for invalid
+ *   UTF-8), from the field's last occurrence.
+ * - A stanza without `Filename` is `missing-field` (`Filename`, `value` the
+ *   stanza offset).
+ *
+ * Bounds: the decoded document by `maxIndexBytes`, stanzas by `maxEntries`,
+ * one stanza by `maxMetadataBytes`. Every stanza is returned in document
+ * order, duplicates included; `bytes` are views into `decoded`.
+ */
+export async function readDebianPackagesIndex(inputArg) {
+    assertReaderInput(inputArg);
+    assertReaderBytes(inputArg.bytes);
+    assertLinuxCompression(inputArg.compression);
+    const limits = resolveLinuxPackageLimits(inputArg.limits);
+    const decoded = await readIndexDocument(inputArg.bytes, inputArg.compression, limits);
+    const stanzas = [];
+    let stanza = null;
+    const finish = (endArg) => {
+        if (stanza === null) {
+            return;
+        }
+        const current = stanza;
+        stanza = null;
+        if (current.filename === null) {
+            throw new LinuxRepoError('missing-field', 'a Packages stanza has no Filename field', {
+                field: 'Filename',
+                value: current.start,
+            });
+        }
+        stanzas.push({
+            bytes: decoded.subarray(current.start, endArg),
+            offset: current.start,
+            filename: current.filename,
+            package: current.package,
+            version: current.version,
+            architecture: current.architecture,
+        });
+    };
+    for (const line of lines(decoded, limits.maxHeaderBytes, 'Packages')) {
+        if (line.end === line.start) {
+            finish(line.start);
+            continue;
+        }
+        if (isBlankLine(decoded, line)) {
+            throw new LinuxRepoError('malformed-index', 'a Packages line holds only spaces or tabs', {
+                field: 'Packages',
+                value: line.start,
+            });
+        }
+        const first = decoded[line.start];
+        if (stanza === null) {
+            if (first === SPACE || first === TAB) {
+                throw new LinuxRepoError('malformed-index', 'a Packages stanza starts with a continuation line', {
+                    field: 'Packages',
+                    value: line.start,
+                });
+            }
+            countUnit(stanzas.length + 1, limits, 'Packages stanza');
+            stanza = { start: line.start, filename: null, package: '', version: '', architecture: '' };
+        }
+        checkUnitBytes(line.end + 1 - stanza.start, limits, 'Packages stanza');
+        if (first === SPACE || first === TAB) {
+            continue;
+        }
+        readPackagesField(decoded, line, stanza);
+    }
+    finish(decoded.length);
+    return { decoded, stanzas };
+}
+/** Takes the key fields' first-line values; a later occurrence replaces an earlier one. */
+function readPackagesField(bytesArg, lineArg, stanzaArg) {
+    const line = bytesArg.subarray(lineArg.start, lineArg.end);
+    const colon = line.indexOf(COLON);
+    if (colon < 0) {
+        return;
+    }
+    const name = asciiLower(goTrimSpace(decodeLatin1(line.subarray(0, colon))));
+    if (name !== 'filename' && name !== 'package' && name !== 'version' && name !== 'architecture') {
+        return;
+    }
+    const value = fromByteString(goTrimSpace(decodeLatin1(line.subarray(colon + 1))));
+    if (name === 'filename') {
+        stanzaArg.filename = value;
+    }
+    else if (name === 'package') {
+        stanzaArg.package = value;
+    }
+    else if (name === 'version') {
+        stanzaArg.version = value;
+    }
+    else {
+        stanzaArg.architecture = value;
+    }
+}
+/**
+ * Reads a `Release` file (the plain `dists/<d>/Release`) into its fields and
+ * checksum lists. For an `InRelease`, verify it with `createOpenPgpVerifier`
+ * and pass the verified `signedText` here (plus a final LF when it lacks one).
+ *
+ * - Lines end in LF, the last one too; a line longer than `maxHeaderBytes`
+ *   is `limit-exceeded`.
+ * - Exactly one stanza: an empty line, a line holding only spaces or tabs, a
+ *   continuation line before the first field, a field line without `:`, a
+ *   field name that is empty or holds a space or tab, a second checksum field
+ *   of one algorithm, or an empty document is `malformed-index`.
+ * - `MD5Sum`, `SHA1`, `SHA256` and `SHA512` (ASCII case-insensitive) hold an
+ *   empty first-line value and continuation lines of leading whitespace, then
+ *   exactly three tokens separated by one or more spaces or tabs: the digest
+ *   (hex of the algorithm's length), the size (decimal digits within a safe
+ *   integer) and the path. Anything else is `invalid-field` (`field` the field
+ *   name as written, `value` the line's offset).
+ *
+ * Bounds: the document by `maxIndexBytes`, fields and the files per list by
+ * `maxEntries`. Field names and values are decoded as Go does (U+FFFD for
+ * invalid UTF-8); `bytes` are views into a copy of the input.
+ */
+export async function readDebianRelease(inputArg) {
+    assertReaderInput(inputArg);
+    assertReaderBytes(inputArg.bytes);
+    const limits = resolveLinuxPackageLimits(inputArg.limits);
+    const decoded = await readIndexDocument(inputArg.bytes, 'none', limits);
+    const malformed = (messageArg, offsetArg) => new LinuxRepoError('malformed-index', messageArg, { field: 'Release', value: offsetArg });
+    const fields = [];
+    const files = {
+        md5Sum: [],
+        sha1: [],
+        sha256: [],
+        sha512: [],
+    };
+    const seenChecksumFields = new Set();
+    let field = null;
+    const finishField = (endArg) => {
+        if (field !== null) {
+            const value = [field.firstValue, ...field.continuations].join('\n');
+            fields.push({ name: field.name, value, bytes: decoded.subarray(field.start, endArg) });
+            field = null;
+        }
+    };
+    for (const line of lines(decoded, limits.maxHeaderBytes, 'Release')) {
+        if (line.end === line.start) {
+            throw malformed('a Release file holds an empty line', line.start);
+        }
+        if (isBlankLine(decoded, line)) {
+            throw malformed('a Release line holds only spaces or tabs', line.start);
+        }
+        const first = decoded[line.start];
+        if (first === SPACE || first === TAB) {
+            if (field === null) {
+                throw malformed('a Release file starts with a continuation line', line.start);
+            }
+            const current = field;
+            if (current.checksum !== null) {
+                const list = files[current.checksum.key];
+                countUnit(list.length + 1, limits, `Release ${current.name} file`);
+                list.push(readChecksumLine(decoded, line, current.name, current.checksum.hexLength));
+            }
+            current.continuations.push(decodeGoUtf8(decoded.subarray(line.start, line.end)));
+            continue;
+        }
+        finishField(line.start);
+        const colon = decoded.subarray(line.start, line.end).indexOf(COLON);
+        if (colon < 0) {
+            throw malformed('a Release field line has no ":"', line.start);
+        }
+        const nameBytes = decoded.subarray(line.start, line.start + colon);
+        if (nameBytes.length === 0 || nameBytes.includes(SPACE) || nameBytes.includes(TAB)) {
+            throw malformed('a Release field name is empty or holds a space or tab', line.start);
+        }
+        const name = decodeGoUtf8(nameBytes);
+        const lower = asciiLower(decodeLatin1(nameBytes));
+        const checksum = RELEASE_CHECKSUM_FIELDS.get(lower) ?? null;
+        const firstValue = decodeGoUtf8(trimSpaceTab(decoded.subarray(line.start + colon + 1, line.end)));
+        if (checksum !== null) {
+            if (seenChecksumFields.has(lower)) {
+                throw malformed(`a Release file holds a second ${name} field`, line.start);
+            }
+            seenChecksumFields.add(lower);
+            if (firstValue !== '') {
+                throw new LinuxRepoError('invalid-field', `the ${name} field has a value on its first line`, {
+                    field: name,
+                    value: line.start,
+                });
+            }
+        }
+        countUnit(fields.length + 1, limits, 'Release field');
+        field = { name, start: line.start, firstValue, continuations: [], checksum };
+    }
+    finishField(decoded.length);
+    if (fields.length === 0) {
+        throw malformed('a Release file holds no field', 0);
+    }
+    return { fields, files };
+}
+/** One checksum line: leading whitespace, then digest, size and path separated by spaces or tabs. */
+function readChecksumLine(bytesArg, lineArg, fieldArg, hexLengthArg) {
+    const tokens = [];
+    let i = lineArg.start;
+    while (i < lineArg.end) {
+        while (i < lineArg.end && (bytesArg[i] === SPACE || bytesArg[i] === TAB)) {
+            i += 1;
+        }
+        if (i === lineArg.end) {
+            break;
+        }
+        const start = i;
+        while (i < lineArg.end && bytesArg[i] !== SPACE && bytesArg[i] !== TAB) {
+            i += 1;
+        }
+        tokens.push([start, i]);
+        if (tokens.length > 3) {
+            break;
+        }
+    }
+    const last = bytesArg[lineArg.end - 1];
+    const invalid = (whatArg) => new LinuxRepoError('invalid-field', `a ${fieldArg} line ${whatArg}`, { field: fieldArg, value: lineArg.start });
+    if (tokens.length !== 3 || last === SPACE || last === TAB) {
+        throw invalid('is not "<digest> <size> <path>"');
+    }
+    const digest = decodeLatin1(bytesArg.subarray(tokens[0][0], tokens[0][1]));
+    if (digest.length !== hexLengthArg || !/^[0-9a-fA-F]+$/.test(digest)) {
+        throw invalid(`has a digest that is not ${hexLengthArg} hex digits`);
+    }
+    const sizeText = decodeLatin1(bytesArg.subarray(tokens[1][0], tokens[1][1]));
+    const size = /^[0-9]+$/.test(sizeText) ? Number(sizeText) : Number.NaN;
+    if (!Number.isSafeInteger(size)) {
+        throw invalid('has a size that is not decimal digits within a safe integer');
+    }
+    return { path: decodeGoUtf8(bytesArg.subarray(tokens[2][0], tokens[2][1])), size, digest };
+}
+function trimSpaceTab(bytesArg) {
+    let start = 0;
+    let end = bytesArg.length;
+    while (start < end && (bytesArg[start] === SPACE || bytesArg[start] === TAB)) {
+        start += 1;
+    }
+    while (end > start && (bytesArg[end - 1] === SPACE || bytesArg[end - 1] === TAB)) {
+        end -= 1;
+    }
+    return bytesArg.subarray(start, end);
+}
+/** ASCII-only lowercasing of a byte string. */
+function asciiLower(valueArg) {
+    return valueArg.replace(/[A-Z]+/g, (matchArg) => matchArg.toLowerCase());
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/debian/reader.js

@@ -78,7 +78,11 @@ async function readControl(inputArg, limitsArg) {
         if (member.size > limitsArg.maxMetadataBytes) {
             throw limitExceeded('maxMetadataBytes', limitsArg.maxMetadataBytes, `control member ${member.name}`);
         }
-        const control = await withDecompressingReader(member.body, compression, { maxOutputBytes: limitsArg.maxDecompressedMetadataBytes, outputLimit: 'maxDecompressedMetadataBytes' }, async (decompressed) => {
+        const control = await withDecompressingReader(member.body, compression, {
+            maxOutputBytes: limitsArg.maxDecompressedMetadataBytes,
+            outputLimit: 'maxDecompressedMetadataBytes',
+            maxZstdFrames: limitsArg.maxEntries,
+        }, async (decompressed) => {
             const tar = new TarReader(decompressed, {
                 maxEntries: limitsArg.maxEntries,
                 maxHeaderBytes: limitsArg.maxHeaderBytes,
@@ -107,4 +111,4 @@ async function readControl(inputArg, limitsArg) {
         }
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/debian/rules.d.ts

@@ -20,3 +20,21 @@ export declare function isDebianReleaseValue(valueArg: string): boolean;
  * returns a record the builder refuses for its file name.
  */
 export declare function hasPoolFileNameRefusedCharacter(textArg: string): boolean;
+/**
+ * The stanza without its index-owned fields: `Filename`, `Size`, `MD5sum`,
+ * `SHA1`, `SHA256` and `SHA512`, matched ASCII case-insensitively on the Go
+ * `TrimSpace` of the bytes before the line's first `:`, each with its
+ * continuation lines. The one line walk `renderDebianPackagesStanza` applies
+ * to a record's control text, on bytes:
+ * - a line starting with a space or tab follows the dropping state of its field;
+ * - otherwise the field is dropped exactly when its name is one of the six;
+ * - a line without a `:` is kept and ends dropping.
+ *
+ * Lines end at LF and keep it; a final line without LF is a line too. The
+ * result is a new array, the kept lines in order. Applied to a stanza that
+ * `readDebianPackagesIndex` returns, from Gitea or from the codec for the same
+ * control file, it yields the same bytes: the trimmed control text without
+ * the index-owned fields, plus a final LF. A non-`Uint8Array` is
+ * `invalid-input`.
+ */
+export declare function stripDebianIndexOwnedFields(stanzaArg: Uint8Array): Uint8Array;

package/dist_ts/debian/rules.js

@@ -1,4 +1,6 @@
-import { hasControlCharacter } from '../shared/validation.js';
+import { decodeLatin1 } from '../readers/text.js';
+import { assertBytes, hasControlCharacter } from '../shared/validation.js';
+import { goTrimSpace } from './gostring.js';
 /** Gitea's distribution and component rule (`modules/packages/debian/metadata.go:67`, applied at upload). */
 export const DEBIAN_SYMBOL_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9.~+_-]*$/;
 /**
@@ -37,4 +39,81 @@ const POOL_FILE_NAME_REFUSED_PATTERN = /[/#?\s\p{Cc}]/u;
 export function hasPoolFileNameRefusedCharacter(textArg) {
     return POOL_FILE_NAME_REFUSED_PATTERN.test(textArg);
 }
-//# sourceMappingURL=data:application/json;base64,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
+/**
+ * The fields a `Packages` stanza writes itself (`renderDebianPackagesStanza`;
+ * Gitea `services/packages/debian/repository.go:202-209`): `Filename`,
+ * `Size`, `MD5sum`, `SHA1`, `SHA256`, `SHA512`.
+ */
+const INDEX_OWNED_FIELDS = new Set(['filename', 'size', 'md5sum', 'sha1', 'sha256', 'sha512']);
+const LF = 0x0a;
+/**
+ * Whether the bytes before a line's first `:` name an index-owned field: Go
+ * `strings.TrimSpace` of them, matched ASCII case-insensitively. Every other
+ * byte is compared as is, so no non-ASCII text matches (for these six names
+ * this equals `toLowerCase()` on the decoded name, the renderer's former rule).
+ */
+function isIndexOwnedFieldName(nameArg) {
+    const name = goTrimSpace(decodeLatin1(nameArg));
+    if (name.length < 4 || name.length > 8) {
+        return false;
+    }
+    let lower = '';
+    for (let i = 0; i < name.length; i++) {
+        const code = name.charCodeAt(i);
+        lower += String.fromCharCode(code >= 0x41 && code <= 0x5a ? code + 0x20 : code);
+    }
+    return INDEX_OWNED_FIELDS.has(lower);
+}
+/**
+ * The stanza without its index-owned fields: `Filename`, `Size`, `MD5sum`,
+ * `SHA1`, `SHA256` and `SHA512`, matched ASCII case-insensitively on the Go
+ * `TrimSpace` of the bytes before the line's first `:`, each with its
+ * continuation lines. The one line walk `renderDebianPackagesStanza` applies
+ * to a record's control text, on bytes:
+ * - a line starting with a space or tab follows the dropping state of its field;
+ * - otherwise the field is dropped exactly when its name is one of the six;
+ * - a line without a `:` is kept and ends dropping.
+ *
+ * Lines end at LF and keep it; a final line without LF is a line too. The
+ * result is a new array, the kept lines in order. Applied to a stanza that
+ * `readDebianPackagesIndex` returns, from Gitea or from the codec for the same
+ * control file, it yields the same bytes: the trimmed control text without
+ * the index-owned fields, plus a final LF. A non-`Uint8Array` is
+ * `invalid-input`.
+ */
+export function stripDebianIndexOwnedFields(stanzaArg) {
+    assertBytes(stanzaArg, 'stanza');
+    const kept = [];
+    let total = 0;
+    let dropping = false;
+    let start = 0;
+    while (start < stanzaArg.length) {
+        const lineFeed = stanzaArg.indexOf(LF, start);
+        const end = lineFeed < 0 ? stanzaArg.length : lineFeed + 1;
+        const first = stanzaArg[start];
+        if (first === 0x20 || first === 0x09) {
+            if (!dropping) {
+                kept.push(stanzaArg.subarray(start, end));
+                total += end - start;
+            }
+        }
+        else {
+            const lineEnd = lineFeed < 0 ? stanzaArg.length : lineFeed;
+            const colon = stanzaArg.subarray(start, lineEnd).indexOf(0x3a);
+            dropping = colon >= 0 && isIndexOwnedFieldName(stanzaArg.subarray(start, start + colon));
+            if (!dropping) {
+                kept.push(stanzaArg.subarray(start, end));
+                total += end - start;
+            }
+        }
+        start = end;
+    }
+    const result = new Uint8Array(total);
+    let offset = 0;
+    for (const line of kept) {
+        result.set(line, offset);
+        offset += line.length;
+    }
+    return result;
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicnVsZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90cy9kZWJpYW4vcnVsZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxFQUFFLFlBQVksRUFBRSxNQUFNLG9CQUFvQixDQUFDO0FBQ2xELE9BQU8sRUFBRSxXQUFXLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSx5QkFBeUIsQ0FBQztBQUMzRSxPQUFPLEVBQUUsV0FBVyxFQUFFLE1BQU0sZUFBZSxDQUFDO0FBRTVDLDZHQUE2RztBQUM3RyxNQUFNLENBQUMsTUFBTSxxQkFBcUIsR0FBRyxnQ0FBZ0MsQ0FBQztBQUV0RTs7OztHQUlHO0FBQ0gsTUFBTSxVQUFVLGNBQWMsQ0FBQyxRQUFnQjtJQUM3QyxPQUFPLE9BQU8sUUFBUSxLQUFLLFFBQVEsSUFBSSxxQkFBcUIsQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLENBQUM7QUFDOUUsQ0FBQztBQUVEOzs7OztHQUtHO0FBQ0gsTUFBTSxVQUFVLG9CQUFvQixDQUFDLFFBQWdCO0lBQ25ELE9BQU8sT0FBTyxRQUFRLEtBQUssUUFBUSxJQUFJLFFBQVEsS0FBSyxFQUFFLElBQUksQ0FBQyxtQkFBbUIsQ0FBQyxRQUFRLENBQUMsSUFBSSxRQUFRLEtBQUssUUFBUSxDQUFDLElBQUksRUFBRSxDQUFDO0FBQzNILENBQUM7QUFFRDs7Ozs7Ozs7R0FRRztBQUNILE1BQU0sOEJBQThCLEdBQUcsZ0JBQWdCLENBQUM7QUFFeEQ7Ozs7O0dBS0c7QUFDSCxNQUFNLFVBQVUsK0JBQStCLENBQUMsT0FBZTtJQUM3RCxPQUFPLDhCQUE4QixDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQztBQUN0RCxDQUFDO0FBRUQ7Ozs7R0FJRztBQUNILE1BQU0sa0JBQWtCLEdBQXdCLElBQUksR0FBRyxDQUFDLENBQUMsVUFBVSxFQUFFLE1BQU0sRUFBRSxRQUFRLEVBQUUsTUFBTSxFQUFFLFFBQVEsRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDO0FBRXBILE1BQU0sRUFBRSxHQUFHLElBQUksQ0FBQztBQUVoQjs7Ozs7R0FLRztBQUNILFNBQVMscUJBQXFCLENBQUMsT0FBbUI7SUFDaEQsTUFBTSxJQUFJLEdBQUcsV0FBVyxDQUFDLFlBQVksQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDO0lBQ2hELElBQUksSUFBSSxDQUFDLE1BQU0sR0FBRyxDQUFDLElBQUksSUFBSSxDQUFDLE1BQU0sR0FBRyxDQUFDLEVBQUUsQ0FBQztRQUN2QyxPQUFPLEtBQUssQ0FBQztJQUNmLENBQUM7SUFDRCxJQUFJLEtBQUssR0FBRyxFQUFFLENBQUM7SUFDZixLQUFLLElBQUksQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLEdBQUcsSUFBSSxDQUFDLE1BQU0sRUFBRSxDQUFDLEVBQUUsRUFBRSxDQUFDO1FBQ3JDLE1BQU0sSUFBSSxHQUFHLElBQUksQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDaEMsS0FBSyxJQUFJLE1BQU0sQ0FBQyxZQUFZLENBQUMsSUFBSSxJQUFJLElBQUksSUFBSSxJQUFJLElBQUksSUFBSSxDQUFDLENBQUMsQ0FBQyxJQUFJLEdBQUcsSUFBSSxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsQ0FBQztJQUNsRixDQUFDO0lBQ0QsT0FBTyxrQkFBa0IsQ0FBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUM7QUFDdkMsQ0FBQztBQUVEOzs7Ozs7Ozs7Ozs7Ozs7O0dBZ0JHO0FBQ0gsTUFBTSxVQUFVLDJCQUEyQixDQUFDLFNBQXFCO0lBQy9ELFdBQVcsQ0FBQyxTQUFTLEVBQUUsUUFBUSxDQUFDLENBQUM7SUFDakMsTUFBTSxJQUFJLEdBQWlCLEVBQUUsQ0FBQztJQUM5QixJQUFJLEtBQUssR0FBRyxDQUFDLENBQUM7SUFDZCxJQUFJLFFBQVEsR0FBRyxLQUFLLENBQUM7SUFDckIsSUFBSSxLQUFLLEdBQUcsQ0FBQyxDQUFDO0lBQ2QsT0FBTyxLQUFLLEdBQUcsU0FBUyxDQUFDLE1BQU0sRUFBRSxDQUFDO1FBQ2hDLE1BQU0sUUFBUSxHQUFHLFNBQVMsQ0FBQyxPQUFPLENBQUMsRUFBRSxFQUFFLEtBQUssQ0FBQyxDQUFDO1FBQzlDLE1BQU0sR0FBRyxHQUFHLFFBQVEsR0FBRyxDQUFDLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLFFBQVEsR0FBRyxDQUFDLENBQUM7UUFDM0QsTUFBTSxLQUFLLEdBQUcsU0FBUyxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQy9CLElBQUksS0FBSyxLQUFLLElBQUksSUFBSSxLQUFLLEtBQUssSUFBSSxFQUFFLENBQUM7WUFDckMsSUFBSSxDQUFDLFFBQVEsRUFBRSxDQUFDO2dCQUNkLElBQUksQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLFFBQVEsQ0FBQyxLQUFLLEVBQUUsR0FBRyxDQUFDLENBQUMsQ0FBQztnQkFDMUMsS0FBSyxJQUFJLEdBQUcsR0FBRyxLQUFLLENBQUM7WUFDdkIsQ0FBQztRQUNILENBQUM7YUFBTSxDQUFDO1lBQ04sTUFBTSxPQUFPLEdBQUcsUUFBUSxHQUFHLENBQUMsQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsUUFBUSxDQUFDO1lBQzNELE1BQU0sS0FBSyxHQUFHLFNBQVMsQ0FBQyxRQUFRLENBQUMsS0FBSyxFQUFFLE9BQU8sQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUMvRCxRQUFRLEdBQUcsS0FBSyxJQUFJLENBQUMsSUFBSSxxQkFBcUIsQ0FBQyxTQUFTLENBQUMsUUFBUSxDQUFDLEtBQUssRUFBRSxLQUFLLEdBQUcsS0FBSyxDQUFDLENBQUMsQ0FBQztZQUN6RixJQUFJLENBQUMsUUFBUSxFQUFFLENBQUM7Z0JBQ2QsSUFBSSxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsUUFBUSxDQUFDLEtBQUssRUFBRSxHQUFHLENBQUMsQ0FBQyxDQUFDO2dCQUMxQyxLQUFLLElBQUksR0FBRyxHQUFHLEtBQUssQ0FBQztZQUN2QixDQUFDO1FBQ0gsQ0FBQztRQUNELEtBQUssR0FBRyxHQUFHLENBQUM7SUFDZCxDQUFDO0lBQ0QsTUFBTSxNQUFNLEdBQUcsSUFBSSxVQUFVLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDckMsSUFBSSxNQUFNLEdBQUcsQ0FBQyxDQUFDO0lBQ2YsS0FBSyxNQUFNLElBQUksSUFBSSxJQUFJLEVBQUUsQ0FBQztRQUN4QixNQUFNLENBQUMsR0FBRyxDQUFDLElBQUksRUFBRSxNQUFNLENBQUMsQ0FBQztRQUN6QixNQUFNLElBQUksSUFBSSxDQUFDLE1BQU0sQ0FBQztJQUN4QixDQUFDO0lBQ0QsT0FBTyxNQUFNLENBQUM7QUFDaEIsQ0FBQyJ9

package/dist_ts/index.d.ts

@@ -1,4 +1,4 @@
-export type { TLinuxPackageFormat, ILinuxPackageDigests, IAlpinePackageDigests, ILinuxPackageRecordBase, IAlpinePackageMetadata, IAlpinePackageRecord, IDebianPackageMetadata, IDebianPackageRecord, IRpmDependency, IRpmFile, IRpmChangelog, IRpmPackageMetadata, IRpmPackageRecord, IRpmUpdate, IRpmUpdateReference, IRpmUpdateCollection, IRpmUpdatePackage, IArchPackageMetadata, IArchPackageRecord, TLinuxPackageRecord, TLinuxIndexFileStage, ILinuxIndexFile, } from './shared/types.js';
+export type { TLinuxPackageFormat, ILinuxPackageDigests, IAlpinePackageDigests, ILinuxPackageRecordBase, IAlpinePackageMetadata, IAlpinePackageRecord, IDebianPackageMetadata, IDebianPackageRecord, IRpmDependency, IRpmFile, IRpmChangelog, IRpmPackageMetadata, IRpmPackageRecord, IRpmUpdate, IRpmUpdateReference, IRpmUpdateCollection, IRpmUpdatePackage, IArchPackageMetadata, IArchPackageRecord, TLinuxPackageRecord, TLinuxIndexFileStage, ILinuxIndexFile, TLinuxCompression, } from './shared/types.js';
 export { DEFAULT_LINUX_PACKAGE_LIMITS } from './shared/limits.js';
 export type { ILinuxPackageLimits } from './shared/limits.js';
 export { LinuxRepoError } from './shared/errors.js';
@@ -6,22 +6,32 @@ export type { TLinuxRepoErrorCode, ILinuxRepoErrorDetail } from './shared/errors
 export { isIndexableArchitecture } from './shared/architecture.js';
 export { createAlpineSigner, createOpenPgpSigner } from './signing/signers.js';
 export type { IAlpineSigner, IOpenPgpSigner } from './signing/signers.js';
-export { createOpenPgpVerifier } from './signing/verifiers.js';
-export type { IOpenPgpCleartextVerification, IOpenPgpSignatureVerification, IOpenPgpVerifier, TOpenPgpHashAlgorithm, } from './signing/verifiers.js';
+export { createAlpineVerifier, createOpenPgpVerifier } from './signing/verifiers.js';
+export type { IAlpineSignatureVerification, IAlpineVerifier, IOpenPgpCleartextVerification, IOpenPgpSignatureVerification, IOpenPgpVerifier, TOpenPgpHashAlgorithm, } from './signing/verifiers.js';
 export { generateAlpineKeyPair, generateOpenPgpKeyPair, giteaAlpineKeyName } from './signing/keys.js';
 export type { IAlpineKeyPair, IOpenPgpKeyPair } from './signing/keys.js';
 export { readDebianPackage } from './debian/reader.js';
 export { buildDebianIndex } from './debian/indexbuilder.js';
 export type { IDebianIndexEntry } from './debian/indexbuilder.js';
-export { isDebianReleaseValue, isDebianSymbol } from './debian/rules.js';
+export { isDebianReleaseValue, isDebianSymbol, stripDebianIndexOwnedFields } from './debian/rules.js';
+export { readDebianPackagesIndex, readDebianRelease } from './debian/indexreader.js';
+export type { IDebianPackagesIndex, IDebianPackagesStanza, IDebianRelease, IDebianReleaseField, IDebianReleaseFile, } from './debian/indexreader.js';
 export { readRpmPackage } from './rpm/reader.js';
 export { signRpmPackage } from './rpm/sign.js';
 export { buildRpmIndex } from './rpm/builder.js';
 export { mergeRpmUpdates } from './rpm/updates.js';
 export { renderRpmRepoConfig } from './rpm/repoconfig.js';
+export { isRpmPrimaryPath } from './rpm/repodata.js';
+export { readRpmRepodata, readRpmRepomd, readRpmUpdateInfo } from './rpm/repodatareader.js';
+export type { IRpmRepodata, IRpmRepodataFile, IRpmRepodataPackage, IRpmRepomd, IRpmRepomdChecksum, IRpmRepomdData, IRpmRepomdElement, IRpmUpdateInfo, IRpmUpdateInfoPackage, IRpmUpdateInfoUpdate, IRpmXmlAttribute, IRpmXmlFrame, TRpmRepodataDocument, } from './rpm/repodatareader.js';
 export { readArchPackage } from './arch/reader.js';
 export { buildArchIndex } from './arch/builder.js';
 export type { IArchIndexEntry } from './arch/builder.js';
 export { signArchPackage } from './arch/signer.js';
+export { compareArchVersions } from './arch/vercmp.js';
+export { readArchIndex } from './arch/indexreader.js';
+export type { IArchIndex, IArchIndexMember } from './arch/indexreader.js';
 export { readAlpinePackage } from './alpine/reader.js';
 export { buildAlpineIndex } from './alpine/apkindex.js';
+export { readAlpineIndex } from './alpine/apkindexreader.js';
+export type { IAlpineIndex, IAlpineIndexBlock, IAlpineIndexMember, IAlpineIndexSignatureEntry, } from './alpine/apkindexreader.js';

package/dist_ts/index.js

@@ -2,19 +2,25 @@ export { DEFAULT_LINUX_PACKAGE_LIMITS } from './shared/limits.js';
 export { LinuxRepoError } from './shared/errors.js';
 export { isIndexableArchitecture } from './shared/architecture.js';
 export { createAlpineSigner, createOpenPgpSigner } from './signing/signers.js';
-export { createOpenPgpVerifier } from './signing/verifiers.js';
+export { createAlpineVerifier, createOpenPgpVerifier } from './signing/verifiers.js';
 export { generateAlpineKeyPair, generateOpenPgpKeyPair, giteaAlpineKeyName } from './signing/keys.js';
 export { readDebianPackage } from './debian/reader.js';
 export { buildDebianIndex } from './debian/indexbuilder.js';
-export { isDebianReleaseValue, isDebianSymbol } from './debian/rules.js';
+export { isDebianReleaseValue, isDebianSymbol, stripDebianIndexOwnedFields } from './debian/rules.js';
+export { readDebianPackagesIndex, readDebianRelease } from './debian/indexreader.js';
 export { readRpmPackage } from './rpm/reader.js';
 export { signRpmPackage } from './rpm/sign.js';
 export { buildRpmIndex } from './rpm/builder.js';
 export { mergeRpmUpdates } from './rpm/updates.js';
 export { renderRpmRepoConfig } from './rpm/repoconfig.js';
+export { isRpmPrimaryPath } from './rpm/repodata.js';
+export { readRpmRepodata, readRpmRepomd, readRpmUpdateInfo } from './rpm/repodatareader.js';
 export { readArchPackage } from './arch/reader.js';
 export { buildArchIndex } from './arch/builder.js';
 export { signArchPackage } from './arch/signer.js';
+export { compareArchVersions } from './arch/vercmp.js';
+export { readArchIndex } from './arch/indexreader.js';
 export { readAlpinePackage } from './alpine/reader.js';
 export { buildAlpineIndex } from './alpine/apkindex.js';
-//# sourceMappingURL=data:application/json;base64,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
+export { readAlpineIndex } from './alpine/apkindexreader.js';
+//# sourceMappingURL=data:application/json;base64,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