@scalebun-release/cli 2.5.0

package/lib/utils/signer.js

@@ -0,0 +1,230 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalCommandSigner = exports.LocalPemSigner = void 0;
+exports.resolveSigner = resolveSigner;
+/**
+ * Where a release signature comes from.
+ *
+ * ── Why this exists ──────────────────────────────────────────────────────────
+ *
+ * Control T-1 of a customer's security assessment reads: "Signing key held in an
+ * HSM or approved key vault; signing only within controlled CI/CD." That is an
+ * obligation on THEM — we never hold the key — but until now our CLI could only
+ * sign with a PEM on disk, so a customer whose security policy requires an HSM
+ * had no way to use the product at all.
+ *
+ * ── Why an external COMMAND rather than an SDK per vault ─────────────────────
+ *
+ * A command covers AWS KMS, Google Cloud KMS, Azure Key Vault, PKCS#11, YubiHSM
+ * and whatever the customer has already standardised on, without this package
+ * taking a dependency on any of them. Every dependency a signing tool carries is
+ * a dependency someone has to audit forever, and the customers who need this are
+ * precisely the ones who will audit it.
+ *
+ * ── What does NOT change ─────────────────────────────────────────────────────
+ *
+ * The bytes that get signed, and the self-verify that happens afterwards. The
+ * canonical payload is serialized exactly as before, and the resulting signature
+ * is verified before it is returned, so a vault that produces an unusable
+ * signature fails on the build machine instead of on a million handsets.
+ *
+ * That check is the reason an external signer must ALSO supply the public key:
+ * with a local PEM the public half is derived from the private one, and we do
+ * not have the private one here. Skipping the verification instead would remove
+ * the guarantee exactly where it matters most — a remote signer is the case with
+ * the most ways to go quietly wrong.
+ */
+const crypto = __importStar(require("crypto"));
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+/** RSA-3072 produces a 384-byte signature. Anything else is not our algorithm. */
+const RSA3072_SIGNATURE_BYTES = 384;
+/** A remote signer that hangs must fail the build, not hold it open forever. */
+const DEFAULT_TIMEOUT_MS = 60000;
+/** Today's behaviour, unchanged: a PKCS#8 PEM on this machine. */
+class LocalPemSigner {
+    constructor(privateKeyPem, passphrase) {
+        this.key = crypto.createPrivateKey(passphrase ? { key: privateKeyPem, passphrase } : privateKeyPem);
+        if (this.key.asymmetricKeyType !== 'rsa') {
+            throw new Error(`private key is ${this.key.asymmetricKeyType}, not RSA`);
+        }
+    }
+    async sign(bytes) {
+        return crypto.sign('sha256', Buffer.from(bytes), this.key);
+    }
+    async publicKey() {
+        return crypto.createPublicKey(this.key);
+    }
+    describe() {
+        return 'local PEM';
+    }
+}
+exports.LocalPemSigner = LocalPemSigner;
+/**
+ * Sign by handing the payload to a command on stdin and reading the signature
+ * from stdout.
+ *
+ * The contract is deliberately the smallest one that can work:
+ *
+ *   stdin   the raw canonical payload bytes
+ *   stdout  the raw signature bytes, or the same base64-encoded
+ *   exit 0  success; anything else is a failure and the build stops
+ *
+ * Base64 is accepted because most cloud KMS CLIs emit it by default, and
+ * requiring every customer to pipe through a decoder would be a footgun that
+ * buys nothing.
+ */
+class ExternalCommandSigner {
+    // Assigned explicitly rather than as a parameter property: the test runner
+    // uses Node type-stripping, which does not support them.
+    constructor(cfg) {
+        this.cfg = cfg;
+        if (!cfg.command?.trim())
+            throw new Error('external signer: no command configured');
+        if (!cfg.publicKeyPem?.trim()) {
+            throw new Error('external signer: a public key is required. The signature is verified ' +
+                'before it is used, and the public half cannot be derived from a key ' +
+                'this machine does not hold.');
+        }
+    }
+    async sign(bytes) {
+        const out = await this.run(Buffer.from(bytes));
+        // Raw bytes of the right length, or base64 of the same.
+        if (out.length === RSA3072_SIGNATURE_BYTES)
+            return out;
+        const text = out.toString('utf8').trim();
+        if (/^[A-Za-z0-9+/=\s]+$/.test(text) && text.length > 0) {
+            const decoded = Buffer.from(text.replace(/\s+/g, ''), 'base64');
+            if (decoded.length === RSA3072_SIGNATURE_BYTES)
+                return decoded;
+            throw new Error(`external signer returned ${decoded.length} bytes after base64-decoding; ` +
+                `SB-OTA-RSA-SHA256-V1 expects ${RSA3072_SIGNATURE_BYTES} (RSA-3072)`);
+        }
+        throw new Error(`external signer returned ${out.length} bytes, which is neither a ` +
+            `${RSA3072_SIGNATURE_BYTES}-byte RSA-3072 signature nor base64 of one`);
+    }
+    async publicKey() {
+        if (this.pub)
+            return this.pub;
+        const raw = this.cfg.publicKeyPem.includes('-----BEGIN')
+            ? this.cfg.publicKeyPem
+            : fs.readFileSync(this.cfg.publicKeyPem, 'utf8');
+        const key = crypto.createPublicKey(raw);
+        if (key.asymmetricKeyType !== 'rsa') {
+            throw new Error(`external signer public key is ${key.asymmetricKeyType}, not RSA`);
+        }
+        this.pub = key;
+        return key;
+    }
+    describe() {
+        return `external command (${this.cfg.command.split(/\s+/)[0]})`;
+    }
+    run(input) {
+        const timeoutMs = this.cfg.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        return new Promise((resolve, reject) => {
+            // `shell: true` so a customer can configure a pipeline as one string. The
+            // command comes from this machine's own configuration, not from the
+            // payload or from anything the server sent — it is the operator's shell,
+            // used deliberately.
+            const child = (0, child_process_1.spawn)(this.cfg.command, { shell: true });
+            const stdout = [];
+            const stderr = [];
+            let settled = false;
+            const timer = setTimeout(() => {
+                if (settled)
+                    return;
+                settled = true;
+                child.kill('SIGKILL');
+                reject(new Error(`external signer timed out after ${timeoutMs}ms. A signing command ` +
+                    'that hangs must fail the build rather than hold it open.'));
+            }, timeoutMs);
+            child.stdout.on('data', (d) => stdout.push(d));
+            child.stderr.on('data', (d) => stderr.push(d));
+            child.on('error', (err) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                reject(new Error(`external signer could not be started: ${err.message}`));
+            });
+            child.on('close', (code) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                if (code !== 0) {
+                    const msg = Buffer.concat(stderr).toString('utf8').trim();
+                    reject(new Error(`external signer exited ${code}${msg ? `: ${msg.slice(0, 500)}` : ''}`));
+                    return;
+                }
+                const out = Buffer.concat(stdout);
+                if (out.length === 0) {
+                    reject(new Error('external signer exited 0 but produced no signature'));
+                    return;
+                }
+                resolve(out);
+            });
+            child.stdin.on('error', () => {
+                /* the close handler reports it; an EPIPE here must not crash the CLI */
+            });
+            child.stdin.end(input);
+        });
+    }
+}
+exports.ExternalCommandSigner = ExternalCommandSigner;
+const ENV_SIGNER_COMMAND = 'SCALEBUN_SIGNER_COMMAND';
+const ENV_SIGNER_PUBLIC_KEY = 'SCALEBUN_SIGNER_PUBLIC_KEY';
+/**
+ * Build a signer from configuration.
+ *
+ * An external signer is used ONLY when explicitly configured. With nothing set,
+ * this returns the local PEM signer and every existing flow behaves exactly as
+ * it did — which is the whole point: this is additive, and a customer who has
+ * not asked for an HSM must not notice it exists.
+ */
+function resolveSigner(opts) {
+    const command = opts.signerCommand ?? process.env[ENV_SIGNER_COMMAND];
+    if (command?.trim()) {
+        const publicKeyPem = opts.signerPublicKey ?? process.env[ENV_SIGNER_PUBLIC_KEY] ?? '';
+        return new ExternalCommandSigner({ command, publicKeyPem });
+    }
+    if (!opts.privateKeyPem) {
+        throw new Error('no signing key configured: set a private key, or configure an external ' +
+            `signer with ${ENV_SIGNER_COMMAND} and ${ENV_SIGNER_PUBLIC_KEY}`);
+    }
+    return new LocalPemSigner(opts.privateKeyPem, opts.passphrase);
+}
+//# sourceMappingURL=signer.js.map

package/lib/utils/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/utils/signer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0OA,sCAkBC;AA5PD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,+CAAiC;AACjC,iDAAsC;AACtC,uCAAyB;AAEzB,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAWlC,kEAAkE;AAClE,MAAa,cAAc;IAGzB,YAAY,aAA8B,EAAE,UAAmB;QAC7D,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAChC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,aAAa,CAChE,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,iBAAiB,WAAW,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,QAAQ;QACN,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAvBD,wCAuBC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAa,qBAAqB;IAKhC,2EAA2E;IAC3E,yDAAyD;IACzD,YAAY,GAAyB;QACnC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,uEAAuE;gBACrE,sEAAsE;gBACtE,6BAA6B,CAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAE/C,wDAAwD;QACxD,IAAI,GAAG,CAAC,MAAM,KAAK,uBAAuB;YAAE,OAAO,GAAG,CAAC;QAEvD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,MAAM,KAAK,uBAAuB;gBAAE,OAAO,OAAO,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,4BAA4B,OAAO,CAAC,MAAM,gCAAgC;gBACxE,gCAAgC,uBAAuB,aAAa,CACvE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,CAAC,MAAM,6BAA6B;YACjE,GAAG,uBAAuB,4CAA4C,CACzE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY;YACvB,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,iBAAiB,WAAW,CAClE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,OAAO,GAAG,CAAC;IACb,CAAC;IAED,QAAQ;QACN,OAAO,qBAAqB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,CAAC;IAEO,GAAG,CAAC,KAAa;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAC;QAC3D,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,0EAA0E;YAC1E,oEAAoE;YACpE,yEAAyE;YACzE,qBAAqB;YACrB,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CACJ,IAAI,KAAK,CACP,mCAAmC,SAAS,wBAAwB;oBAClE,0DAA0D,CAC7D,CACF,CAAC;YACJ,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAEvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC1D,MAAM,CACJ,IAAI,KAAK,CACP,0BAA0B,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACvE,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;oBACxE,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC3B,wEAAwE;YAC1E,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA1HD,sDA0HC;AAED,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AACrD,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAE3D;;;;;;;GAOG;AACH,SAAgB,aAAa,CAAC,IAK7B;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACtE,IAAI,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yEAAyE;YACvE,eAAe,kBAAkB,QAAQ,qBAAqB,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;AACjE,CAAC"}

package/lib/utils/signing.d.ts

@@ -0,0 +1,102 @@
+/**
+ * RSA-3072 / SHA-256 release signing for SB-OTA-RSA-SHA256-V1.
+ *
+ * Security model (unchanged in spirit from the ed25519 era, stronger in fact):
+ * the private key is generated on the developer's machine and NEVER leaves it —
+ * only the SPKI public key is registered, and only the detached signature +
+ * signed payload are uploaded. A server that cannot sign cannot forge a release.
+ *
+ * The signed object is the exact binary ScaleBunSignedReleaseV1 payload (see the
+ * vendored codec + docs/ota/SB-OTA-RSA-SHA256-V1.md). We sign those bytes and
+ * immediately self-verify with the derived public key before returning, so a
+ * broken key or a codec regression fails here rather than on a user's device.
+ */
+import * as crypto from 'crypto';
+import { ScaleBunSignedReleaseV1, OtaReleaseEnvelope } from '../vendor/ota-protocol';
+import type { Signer } from './signer';
+export { LocalPemSigner, ExternalCommandSigner, resolveSigner } from './signer';
+export type { Signer, ExternalSignerConfig } from './signer';
+export interface KeyInfo {
+    algorithm: 'RSA_SHA256';
+    modulusBits: number;
+    /** SHA-256 over the SPKI DER, lowercase hex. */
+    fingerprint: string;
+    /** Colon-grouped uppercase hex, for display. */
+    fingerprintDisplay: string;
+    spkiPem: string;
+}
+/** SHA-256 fingerprint over the SPKI DER of a public key. */
+export declare function spkiFingerprint(publicKey: crypto.KeyObject): {
+    hex: string;
+    display: string;
+};
+/**
+ * Validate that a public key is RSA of an acceptable size and describe it.
+ * Throws on non-RSA keys or a modulus below {@link MIN_RSA_MODULUS_BITS}.
+ */
+export declare function inspectPublicKey(pem: string | Buffer): KeyInfo;
+export interface GeneratedKeyPair {
+    privatePem: string;
+    publicPem: string;
+    info: KeyInfo;
+}
+/**
+ * Generate a fresh RSA keypair (default 3072-bit). The private key is exported as
+ * PKCS#8 PEM (encrypted when a passphrase is supplied); the public key as SPKI
+ * PEM. This function never writes to disk or prints the private key — callers own
+ * storage + permissions.
+ */
+export declare function generateRsaKeyPair(opts?: {
+    modulusBits?: number;
+    passphrase?: string;
+}): GeneratedKeyPair;
+export interface SignResult {
+    /** standard Base64 of the binary payload. */
+    signedPayload: string;
+    /** standard Base64 of the RSA signature. */
+    signature: string;
+    /** raw payload bytes (handy for tests / diagnostics). */
+    payloadBytes: Uint8Array;
+}
+/**
+ * Serialize + RSA-SHA256 sign a release payload, then self-verify. Throws if the
+ * payload is invalid (codec validation), the key is not usable RSA, or the
+ * self-verify fails.
+ */
+export declare function signReleasePayload(payload: ScaleBunSignedReleaseV1, privateKeyPem: string | Buffer, passphrase?: string): SignResult;
+/** Build the full transport envelope (docs §4) around a signed payload. */
+export declare function buildReleaseEnvelope(payload: ScaleBunSignedReleaseV1, privateKeyPem: string | Buffer, opts?: {
+    passphrase?: string;
+    downloadUrl?: string;
+    displayMetadata?: Record<string, unknown>;
+}): OtaReleaseEnvelope;
+/**
+ * Sign a release payload with any Signer — a local PEM, or an HSM behind a
+ * command.
+ *
+ * The async sibling of `signReleasePayload`. That function is deliberately left
+ * alone and still used by everything that has a private key on disk: the whole
+ * value of this change is that it is ADDITIVE, and a customer who has not asked
+ * for an external signer must not be able to tell it exists.
+ *
+ * What is identical either way, and has to be:
+ *
+ *   - the bytes. `serializeSignedRelease` produces the canonical payload, and
+ *     nothing here touches it. A signer sees exactly what the local path signs.
+ *   - the SELF-VERIFY. The signature is checked before it is returned, so a
+ *     vault that produced an unusable one fails on the build machine rather
+ *     than on a million devices that will each reject it.
+ *
+ * The self-verify is also what catches the single most likely misconfiguration
+ * of a cloud KMS: signing with PSS padding instead of PKCS#1 v1.5. `crypto.verify`
+ * with an RSA key defaults to PKCS#1 v1.5, so a PSS signature simply fails here —
+ * at build time, with a message, instead of silently shipping a release every
+ * device refuses.
+ */
+export declare function signReleasePayloadWith(payload: ScaleBunSignedReleaseV1, signer: Signer): Promise<SignResult>;
+/** `buildReleaseEnvelope`, for any Signer. */
+export declare function buildReleaseEnvelopeWith(payload: ScaleBunSignedReleaseV1, signer: Signer, opts?: {
+    downloadUrl?: string;
+    displayMetadata?: Record<string, unknown>;
+}): Promise<OtaReleaseEnvelope>;
+//# sourceMappingURL=signing.d.ts.map

package/lib/utils/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../../src/utils/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAML,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAChF,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAE7D,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,YAAY,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAUD,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAK7F;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAsB9D;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,gBAAgB,CAkBnB;AAED,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,YAAY,EAAE,UAAU,CAAC;CAC1B;AAkBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,uBAAuB,EAChC,aAAa,EAAE,MAAM,GAAG,MAAM,EAC9B,UAAU,CAAC,EAAE,MAAM,GAClB,UAAU,CAgBZ;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,uBAAuB,EAChC,aAAa,EAAE,MAAM,GAAG,MAAM,EAC9B,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAC9F,kBAAkB,CAUpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,uBAAuB,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAmBrB;AAED,8CAA8C;AAC9C,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,uBAAuB,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACzE,OAAO,CAAC,kBAAkB,CAAC,CAU7B"}

package/lib/utils/signing.js

@@ -0,0 +1,229 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSigner = exports.ExternalCommandSigner = exports.LocalPemSigner = void 0;
+exports.spkiFingerprint = spkiFingerprint;
+exports.inspectPublicKey = inspectPublicKey;
+exports.generateRsaKeyPair = generateRsaKeyPair;
+exports.signReleasePayload = signReleasePayload;
+exports.buildReleaseEnvelope = buildReleaseEnvelope;
+exports.signReleasePayloadWith = signReleasePayloadWith;
+exports.buildReleaseEnvelopeWith = buildReleaseEnvelopeWith;
+/**
+ * RSA-3072 / SHA-256 release signing for SB-OTA-RSA-SHA256-V1.
+ *
+ * Security model (unchanged in spirit from the ed25519 era, stronger in fact):
+ * the private key is generated on the developer's machine and NEVER leaves it —
+ * only the SPKI public key is registered, and only the detached signature +
+ * signed payload are uploaded. A server that cannot sign cannot forge a release.
+ *
+ * The signed object is the exact binary ScaleBunSignedReleaseV1 payload (see the
+ * vendored codec + docs/ota/SB-OTA-RSA-SHA256-V1.md). We sign those bytes and
+ * immediately self-verify with the derived public key before returning, so a
+ * broken key or a codec regression fails here rather than on a user's device.
+ */
+const crypto = __importStar(require("crypto"));
+const ota_protocol_1 = require("../vendor/ota-protocol");
+var signer_1 = require("./signer");
+Object.defineProperty(exports, "LocalPemSigner", { enumerable: true, get: function () { return signer_1.LocalPemSigner; } });
+Object.defineProperty(exports, "ExternalCommandSigner", { enumerable: true, get: function () { return signer_1.ExternalCommandSigner; } });
+Object.defineProperty(exports, "resolveSigner", { enumerable: true, get: function () { return signer_1.resolveSigner; } });
+function modulusBits(key) {
+    const bits = key.asymmetricKeyDetails?.modulusLength;
+    if (typeof bits !== 'number') {
+        throw new Error('key has no RSA modulus length — not an RSA key?');
+    }
+    return bits;
+}
+/** SHA-256 fingerprint over the SPKI DER of a public key. */
+function spkiFingerprint(publicKey) {
+    const der = publicKey.export({ type: 'spki', format: 'der' });
+    const hex = crypto.createHash('sha256').update(der).digest('hex');
+    const display = (hex.match(/.{2}/g) ?? []).join(':').toUpperCase();
+    return { hex, display };
+}
+/**
+ * Validate that a public key is RSA of an acceptable size and describe it.
+ * Throws on non-RSA keys or a modulus below {@link MIN_RSA_MODULUS_BITS}.
+ */
+function inspectPublicKey(pem) {
+    let key;
+    try {
+        key = crypto.createPublicKey(pem);
+    }
+    catch (err) {
+        throw new Error(`not a valid public key: ${err?.message ?? err}`);
+    }
+    if (key.asymmetricKeyType !== 'rsa') {
+        throw new Error(`unsupported key type "${key.asymmetricKeyType}" — SB-OTA-RSA-SHA256-V1 requires RSA`);
+    }
+    const bits = modulusBits(key);
+    if (bits < ota_protocol_1.MIN_RSA_MODULUS_BITS) {
+        throw new Error(`RSA modulus ${bits} bits is below the ${ota_protocol_1.MIN_RSA_MODULUS_BITS}-bit minimum`);
+    }
+    const fp = spkiFingerprint(key);
+    return {
+        algorithm: 'RSA_SHA256',
+        modulusBits: bits,
+        fingerprint: fp.hex,
+        fingerprintDisplay: fp.display,
+        spkiPem: key.export({ type: 'spki', format: 'pem' }),
+    };
+}
+/**
+ * Generate a fresh RSA keypair (default 3072-bit). The private key is exported as
+ * PKCS#8 PEM (encrypted when a passphrase is supplied); the public key as SPKI
+ * PEM. This function never writes to disk or prints the private key — callers own
+ * storage + permissions.
+ */
+function generateRsaKeyPair(opts) {
+    const bits = opts?.modulusBits ?? ota_protocol_1.RECOMMENDED_RSA_MODULUS_BITS;
+    if (bits < ota_protocol_1.MIN_RSA_MODULUS_BITS) {
+        throw new Error(`refusing to generate a ${bits}-bit key; minimum is ${ota_protocol_1.MIN_RSA_MODULUS_BITS}`);
+    }
+    const { privateKey, publicKey } = crypto.generateKeyPairSync('rsa', { modulusLength: bits });
+    const privatePem = (opts?.passphrase
+        ? privateKey.export({
+            type: 'pkcs8',
+            format: 'pem',
+            cipher: 'aes-256-cbc',
+            passphrase: opts.passphrase,
+        })
+        : privateKey.export({ type: 'pkcs8', format: 'pem' }));
+    const publicPem = publicKey.export({ type: 'spki', format: 'pem' });
+    return { privatePem, publicPem, info: inspectPublicKey(publicPem) };
+}
+function loadRsaPrivateKey(pem, passphrase) {
+    let key;
+    try {
+        key = crypto.createPrivateKey(passphrase ? { key: pem, passphrase } : pem);
+    }
+    catch (err) {
+        throw new Error(`could not load private key: ${err?.message ?? err}`);
+    }
+    if (key.asymmetricKeyType !== 'rsa') {
+        throw new Error(`private key is ${key.asymmetricKeyType}, not RSA`);
+    }
+    if (modulusBits(key) < ota_protocol_1.MIN_RSA_MODULUS_BITS) {
+        throw new Error(`private key modulus below ${ota_protocol_1.MIN_RSA_MODULUS_BITS} bits`);
+    }
+    return key;
+}
+/**
+ * Serialize + RSA-SHA256 sign a release payload, then self-verify. Throws if the
+ * payload is invalid (codec validation), the key is not usable RSA, or the
+ * self-verify fails.
+ */
+function signReleasePayload(payload, privateKeyPem, passphrase) {
+    const bytes = (0, ota_protocol_1.serializeSignedRelease)(payload);
+    const privateKey = loadRsaPrivateKey(privateKeyPem, passphrase);
+    const signature = crypto.sign('sha256', Buffer.from(bytes), privateKey);
+    // Self-check with the derived public key — the same check the backend runs
+    // after signing (PROMPT §7.9). A failure here means we would have shipped an
+    // unverifiable release.
+    const publicKey = crypto.createPublicKey(privateKey);
+    if (!crypto.verify('sha256', Buffer.from(bytes), publicKey, signature)) {
+        throw new Error('self-verify failed: produced signature does not verify with its own public key');
+    }
+    return {
+        signedPayload: (0, ota_protocol_1.encodeBase64)(bytes),
+        signature: signature.toString('base64'),
+        payloadBytes: bytes,
+    };
+}
+/** Build the full transport envelope (docs §4) around a signed payload. */
+function buildReleaseEnvelope(payload, privateKeyPem, opts) {
+    const signed = signReleasePayload(payload, privateKeyPem, opts?.passphrase);
+    return {
+        protocol: ota_protocol_1.SIGNATURE_ALGORITHM,
+        keyId: payload.keyId,
+        signedPayload: signed.signedPayload,
+        signature: signed.signature,
+        downloadUrl: opts?.downloadUrl,
+        displayMetadata: opts?.displayMetadata,
+    };
+}
+/**
+ * Sign a release payload with any Signer — a local PEM, or an HSM behind a
+ * command.
+ *
+ * The async sibling of `signReleasePayload`. That function is deliberately left
+ * alone and still used by everything that has a private key on disk: the whole
+ * value of this change is that it is ADDITIVE, and a customer who has not asked
+ * for an external signer must not be able to tell it exists.
+ *
+ * What is identical either way, and has to be:
+ *
+ *   - the bytes. `serializeSignedRelease` produces the canonical payload, and
+ *     nothing here touches it. A signer sees exactly what the local path signs.
+ *   - the SELF-VERIFY. The signature is checked before it is returned, so a
+ *     vault that produced an unusable one fails on the build machine rather
+ *     than on a million devices that will each reject it.
+ *
+ * The self-verify is also what catches the single most likely misconfiguration
+ * of a cloud KMS: signing with PSS padding instead of PKCS#1 v1.5. `crypto.verify`
+ * with an RSA key defaults to PKCS#1 v1.5, so a PSS signature simply fails here —
+ * at build time, with a message, instead of silently shipping a release every
+ * device refuses.
+ */
+async function signReleasePayloadWith(payload, signer) {
+    const bytes = (0, ota_protocol_1.serializeSignedRelease)(payload);
+    const signature = await signer.sign(bytes);
+    const publicKey = await signer.publicKey();
+    if (!crypto.verify('sha256', Buffer.from(bytes), publicKey, signature)) {
+        throw new Error(`self-verify failed: the signature produced by ${signer.describe()} does not ` +
+            'verify against the configured public key. Check that the signer uses ' +
+            'RSA PKCS#1 v1.5 with SHA-256 (not PSS) and that the public key belongs ' +
+            'to the key it signed with.');
+    }
+    return {
+        signedPayload: (0, ota_protocol_1.encodeBase64)(bytes),
+        signature: signature.toString('base64'),
+        payloadBytes: bytes,
+    };
+}
+/** `buildReleaseEnvelope`, for any Signer. */
+async function buildReleaseEnvelopeWith(payload, signer, opts) {
+    const signed = await signReleasePayloadWith(payload, signer);
+    return {
+        protocol: ota_protocol_1.SIGNATURE_ALGORITHM,
+        keyId: payload.keyId,
+        signedPayload: signed.signedPayload,
+        signature: signed.signature,
+        downloadUrl: opts?.downloadUrl,
+        displayMetadata: opts?.displayMetadata,
+    };
+}
+//# sourceMappingURL=signing.js.map

package/lib/utils/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/utils/signing.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,0CAKC;AAMD,4CAsBC;AAcD,gDAqBC;AAgCD,gDAoBC;AAGD,oDAcC;AAyBD,wDAsBC;AAGD,4DAcC;AAxPD;;;;;;;;;;;;GAYG;AACH,+CAAiC;AACjC,yDAQgC;AAGhC,mCAAgF;AAAvE,wGAAA,cAAc,OAAA;AAAE,+GAAA,qBAAqB,OAAA;AAAE,uGAAA,aAAa,OAAA;AAa7D,SAAS,WAAW,CAAC,GAAqB;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAC7D,SAAgB,eAAe,CAAC,SAA2B;IACzD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,GAAoB;IACnD,IAAI,GAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,iBAAiB,uCAAuC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,GAAG,mCAAoB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,sBAAsB,mCAAoB,cAAc,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO;QACL,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,EAAE,CAAC,GAAG;QACnB,kBAAkB,EAAE,EAAE,CAAC,OAAO;QAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW;KAC/D,CAAC;AACJ,CAAC;AAQD;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,IAGlC;IACC,MAAM,IAAI,GAAG,IAAI,EAAE,WAAW,IAAI,2CAA4B,CAAC;IAC/D,IAAI,IAAI,GAAG,mCAAoB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,wBAAwB,mCAAoB,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,CACjB,IAAI,EAAE,UAAU;QACd,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACJ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC9C,CAAC;IACZ,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;IAC9E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;AACtE,CAAC;AAWD,SAAS,iBAAiB,CAAC,GAAoB,EAAE,UAAmB;IAClE,IAAI,GAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,iBAAiB,WAAW,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,mCAAoB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,mCAAoB,OAAO,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAChC,OAAgC,EAChC,aAA8B,EAC9B,UAAmB;IAEnB,MAAM,KAAK,GAAG,IAAA,qCAAsB,EAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IACxE,2EAA2E;IAC3E,6EAA6E;IAC7E,wBAAwB;IACxB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,OAAO;QACL,aAAa,EAAE,IAAA,2BAAY,EAAC,KAAK,CAAC;QAClC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvC,YAAY,EAAE,KAAK;KACpB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAgB,oBAAoB,CAClC,OAAgC,EAChC,aAA8B,EAC9B,IAA+F;IAE/F,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5E,OAAO;QACL,QAAQ,EAAE,kCAAmB;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,eAAe,EAAE,IAAI,EAAE,eAAe;KACvC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACI,KAAK,UAAU,sBAAsB,CAC1C,OAAgC,EAChC,MAAc;IAEd,MAAM,KAAK,GAAG,IAAA,qCAAsB,EAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;IAE3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,iDAAiD,MAAM,CAAC,QAAQ,EAAE,YAAY;YAC5E,uEAAuE;YACvE,yEAAyE;YACzE,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAA,2BAAY,EAAC,KAAK,CAAC;QAClC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvC,YAAY,EAAE,KAAK;KACpB,CAAC;AACJ,CAAC;AAED,8CAA8C;AACvC,KAAK,UAAU,wBAAwB,CAC5C,OAAgC,EAChC,MAAc,EACd,IAA0E;IAE1E,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO;QACL,QAAQ,EAAE,kCAAmB;QAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,eAAe,EAAE,IAAI,EAAE,eAAe;KACvC,CAAC;AACJ,CAAC"}

package/lib/utils/transportSecurity.d.ts

@@ -0,0 +1,36 @@
+/**
+ * HTTPS enforcement for everything the CLI authenticates to.
+ *
+ * WHAT WAS WRONG. The API client picked its transport straight off the URL
+ * scheme — `parsed.protocol === 'https:' ? https : http` — with nothing
+ * requiring HTTPS in the first place, and every request attaches
+ * `Authorization: Bearer <token>`. `scalebun login` accepts an arbitrary
+ * `--api-url` and POSTs an email and password to it. So a CLI pointed at an
+ * `http://` URL — by a typo, a copied CI snippet, or a tampered config —
+ * would put a personal access token, or the user's actual password, on the
+ * wire in cleartext, with no warning and no failure.
+ *
+ * THE RULE. Credentials only travel over TLS. The single exception is
+ * loopback, because local development against `http://localhost:3000` is a
+ * real workflow and traffic that never leaves the machine cannot be
+ * intercepted on the network. Anything else is refused before a socket is
+ * opened, rather than warned about — a warning printed above a successful
+ * request is not a control.
+ *
+ * Loopback is matched on resolved literals, not on name. `localhost` and the
+ * reserved 127/8 and ::1 literals are loopback by definition; an arbitrary
+ * hostname that merely happens to resolve to 127.0.0.1 today is not, because
+ * whoever controls the DNS answer controls where the token goes tomorrow.
+ */
+export declare class InsecureApiUrlError extends Error {
+    constructor(url: string, hostname: string);
+}
+/**
+ * Validate an API base URL before it is used or persisted.
+ *
+ * @returns the normalised URL (trailing slashes stripped)
+ * @throws InsecureApiUrlError for a non-loopback `http://` URL
+ * @throws Error for a URL that is malformed or uses a non-HTTP scheme
+ */
+export declare function assertSecureApiUrl(rawUrl: string): string;
+//# sourceMappingURL=transportSecurity.d.ts.map

package/lib/utils/transportSecurity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transportSecurity.d.ts","sourceRoot":"","sources":["../../src/utils/transportSecurity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAYH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAW1C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAkBzD"}