@tavora/pack 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# Changelog
+
+What changed in `@tavora/pack`, newest first.
+
+## 0.1.0
+
+- First release on npm: `tavora-pack <folder>` packs and signs a module, `tavora-pack link <code>` links your publisher key to your Tavora account.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wellbrained
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,29 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# @tavora/pack
+
+Packs a built [Tavora](https://mytavora.app) module into a zip signed with your publisher key, and links that key to your Tavora account so players see your developer name.
+
+```sh
+npm install --save-dev @tavora/pack
+npx tavora-pack .                 # packs the module in this folder into <id>-<version>.zip
+npx tavora-pack link ABCD-EFGH    # links your key, with a code from Tavora
+```
+
+## Pack
+
+`tavora-pack <module folder> [--out <file.zip>] [--key <key file>]` checks `tavora.module.json`, takes the manifest, the folder its `entry` page is in (usually `dist/`) and the icon, and writes a zip with a signature of every file.
+
+The first run makes your publisher key in `~/.tavora/publisher-key.pem`. **Back it up and never share it.** Tavora knows a publisher by the key, not by a name: an update must be signed with the same key, and the data your module saves for players belongs to it. A new key makes you a new publisher.
+
+Players install the zip with **Settings > Modules > Install from zip**.
+
+## Link your key
+
+`tavora-pack link <code> [--key <key file>]`: in Tavora, sign in under **Settings > Account**, choose a developer name under **Module developer** and press **Link a publisher key**. It shows a code that works once for 10 minutes. The command signs the code with your key and sends the key's public half; the private key never leaves your PC.
+
+## From code
+
+```ts
+import { loadOrCreateKey, packModule } from "@tavora/pack";
+```
+
+`packModule`, `readZip` and `verifyFiles` are what Tavora's installer uses too. More in the [developer docs](https://docs.mytavora.app/guide/getting-started#share-the-module).

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+// tavora-pack <module folder> [--out <file.zip>] [--key <key file>]
+//   Packs a built module into a zip signed with your publisher key, made on
+//   first use. Back the key up: a new key makes you a new publisher.
+// tavora-pack link <code> [--key <key file>]
+//   Links your publisher key to your Tavora account with a code from Tavora
+//   (Settings > Account > Link a publisher key), so players see your
+//   developer name. Only the key's public half leaves this PC.
+// Installed from npm as @tavora/pack; in Tavora's own repository: pnpm tavora-pack ...
+import { writeFile } from "node:fs/promises";
+import path from "node:path";
+import { parseArgs } from "node:util";
+import { defaultKeyFile, loadOrCreateKey } from "./keys.js";
+import { DEFAULT_API_URL, LinkError, linkKey } from "./link.js";
+import { packModule, PackError } from "./pack.js";
+import { fingerprint } from "./signature.js";
+const USAGE = [
+    "usage: tavora-pack <module folder> [--out <file.zip>] [--key <key file>]",
+    "       tavora-pack link <code> [--key <key file>]",
+].join("\n");
+async function main() {
+    let parsed;
+    try {
+        parsed = parseArgs({
+            allowPositionals: true,
+            // --api points link at another copy of Tavora's service, for testing.
+            options: { out: { type: "string" }, key: { type: "string" }, api: { type: "string" }, help: { type: "boolean", short: "h" } },
+        });
+    }
+    catch (error) {
+        console.error(`${error.message}\n${USAGE}`);
+        return 2;
+    }
+    const { values, positionals } = parsed;
+    const linking = positionals[0] === "link";
+    if (values.help || positionals.length !== (linking ? 2 : 1) || (linking && values.out) || (!linking && values.api)) {
+        console.error(USAGE);
+        return values.help ? 0 : 2;
+    }
+    const keyFile = path.resolve(values.key ?? defaultKeyFile());
+    const { key, created } = await loadOrCreateKey(keyFile);
+    const owner = fingerprint(key);
+    if (created) {
+        console.log(`Made your publisher key: ${keyFile}`);
+        console.log("Back this file up and never share it. Without it your next version counts as a different publisher.");
+    }
+    if (linking) {
+        const linked = await linkKey({ key, code: positionals[1], apiUrl: values.api ?? DEFAULT_API_URL });
+        console.log(`Linked publisher key ${linked.fingerprint} to your Tavora account.`);
+        console.log(linked.name ? `Players now see your modules as "by ${linked.name}".` : "Choose a developer name in Tavora so players see it.");
+        return 0;
+    }
+    const dir = path.resolve(positionals[0]);
+    const { manifest, zip } = await packModule(dir, key);
+    const out = path.resolve(values.out ?? `${manifest.id}-${manifest.version}.zip`);
+    await writeFile(out, zip);
+    console.log(`Packed ${manifest.name} ${manifest.version} into ${out} (${zip.length} bytes)`);
+    console.log(`Signed by publisher ${owner}`);
+    return 0;
+}
+main().then((code) => (process.exitCode = code), (error) => {
+    console.error(error instanceof PackError || error instanceof LinkError ? `tavora-pack: ${error.message}` : error);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,oEAAoE;AACpE,4EAA4E;AAC5E,qEAAqE;AACrE,6CAA6C;AAC7C,4EAA4E;AAC5E,qEAAqE;AACrE,+DAA+D;AAC/D,uFAAuF;AACvF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,KAAK,GAAG;IACZ,0EAA0E;IAC1E,mDAAmD;CACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;YACjB,gBAAgB,EAAE,IAAI;YACtB,sEAAsE;YACtE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;SAC9H,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,GAAI,KAAe,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IACvC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,WAAW,0BAA0B,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,uCAAuC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC;QAC3I,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC;IACjF,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,SAAS,GAAG,KAAK,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC;IAC7F,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,EACnC,CAAC,KAAc,EAAE,EAAE;IACjB,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,SAAS,IAAI,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { defaultKeyFile, loadOrCreateKey } from "./keys.ts";
+export { cleanLinkCode, DEFAULT_API_URL, LINK_STATEMENT, LinkError, linkKey, linkRequest } from "./link.ts";
+export { collectFiles, MANIFEST_FILE, packModule, PackError } from "./pack.ts";
+export { fingerprint, SIGNATURE_FILE, signFiles, verifyFiles, type PackageSignature, type VerifyResult } from "./signature.ts";
+export { isSafeEntryName, readZip, writeZip, ZIP_LIMITS, ZipError, type ZipFile, type ZipLimits } from "./zip.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC/H,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { defaultKeyFile, loadOrCreateKey } from "./keys.js";
+export { cleanLinkCode, DEFAULT_API_URL, LINK_STATEMENT, LinkError, linkKey, linkRequest } from "./link.js";
+export { collectFiles, MANIFEST_FILE, packModule, PackError } from "./pack.js";
+export { fingerprint, SIGNATURE_FILE, signFiles, verifyFiles } from "./signature.js";
+export { isSafeEntryName, readZip, writeZip, ZIP_LIMITS, ZipError } from "./zip.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAA4C,MAAM,gBAAgB,CAAC;AAC/H,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAgC,MAAM,UAAU,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,13 @@
+import { type KeyObject } from "node:crypto";
+/** Where the pack command keeps a publisher's key unless told otherwise. */
+export declare function defaultKeyFile(): string;
+/**
+ * The publisher's private key, made the first time. The key never leaves
+ * this PC: only its public half goes into packages (and, with accounts, into
+ * the publisher's profile). `created` is true when it was made just now.
+ */
+export declare function loadOrCreateKey(file: string): Promise<{
+    key: KeyObject;
+    created: boolean;
+}>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAKpF,4EAA4E;AAC5E,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAajG"}

package/dist/keys.js

@@ -0,0 +1,31 @@
+import { generateKeyPairSync, createPrivateKey } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+/** Where the pack command keeps a publisher's key unless told otherwise. */
+export function defaultKeyFile() {
+    return path.join(homedir(), ".tavora", "publisher-key.pem");
+}
+/**
+ * The publisher's private key, made the first time. The key never leaves
+ * this PC: only its public half goes into packages (and, with accounts, into
+ * the publisher's profile). `created` is true when it was made just now.
+ */
+export async function loadOrCreateKey(file) {
+    try {
+        const key = createPrivateKey(await readFile(file, "utf8"));
+        if (key.asymmetricKeyType !== "ed25519")
+            throw new Error(`${file} is not an Ed25519 key`);
+        return { key, created: false };
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const { privateKey } = generateKeyPairSync("ed25519");
+    await mkdir(path.dirname(file), { recursive: true });
+    // "wx" never replaces a key that appeared in the meantime; 0600 keeps it the owner's.
+    await writeFile(file, privateKey.export({ format: "pem", type: "pkcs8" }), { flag: "wx", mode: 0o600 });
+    return { key: privateKey, created: true };
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAkB,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,4EAA4E;AAC5E,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;QAC1F,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,sFAAsF;IACtF,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxG,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC"}

package/dist/link.d.ts

@@ -0,0 +1,25 @@
+import { type KeyObject } from "node:crypto";
+export declare const DEFAULT_API_URL = "https://api.mytavora.app";
+/** What is signed: this line, then the code. Nothing else Tavora signs starts like it. */
+export declare const LINK_STATEMENT = "tavora-key-link-1";
+export declare class LinkError extends Error {
+}
+/** The code as Tavora shows it ("ABCD-EFGH"), also typed in small letters or with spaces; null when it cannot be one. */
+export declare function cleanLinkCode(input: string): string | null;
+/** What the service is sent: the code, the public half and the key's signature over the link statement. */
+export declare function linkRequest(key: KeyObject, code: string): {
+    code: string;
+    publicKey: string;
+    signature: string;
+};
+/** Links the key with the code. Resolves with the key's fingerprint and the developer name players will see. */
+export declare function linkKey(options: {
+    key: KeyObject;
+    code: string;
+    apiUrl?: string;
+    fetch?: typeof fetch;
+}): Promise<{
+    fingerprint: string;
+    name: string | null;
+}>;
+//# sourceMappingURL=link.d.ts.map

package/dist/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../src/link.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAGpE,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAC1D,0FAA0F;AAC1F,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAGlD,qBAAa,SAAU,SAAQ,KAAK;CAAG;AAEvC,yHAAyH;AACzH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D;AAOD,2GAA2G;AAC3G,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAEhH;AAWD,gHAAgH;AAChH,wBAAsB,OAAO,CAAC,OAAO,EAAE;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAqBrK"}

package/dist/link.js

@@ -0,0 +1,61 @@
+// Links a publisher key to a Tavora account, so players see the account's developer name instead
+// of the key's fingerprint. The developer gets a one-time code in Tavora (Settings > Account,
+// signed in); this signs the code with the key and sends the signature and the key's public half to
+// Tavora's service. The secret key never leaves this PC.
+import { createPublicKey, sign } from "node:crypto";
+import { fingerprint } from "./signature.js";
+export const DEFAULT_API_URL = "https://api.mytavora.app";
+/** What is signed: this line, then the code. Nothing else Tavora signs starts like it. */
+export const LINK_STATEMENT = "tavora-key-link-1";
+const CODE = /^[23456789ABCDEFGHJKMNPQRSTUVWXYZ]{8}$/;
+export class LinkError extends Error {
+}
+/** The code as Tavora shows it ("ABCD-EFGH"), also typed in small letters or with spaces; null when it cannot be one. */
+export function cleanLinkCode(input) {
+    const code = input.toUpperCase().replace(/[\s-]/g, "");
+    return CODE.test(code) ? code : null;
+}
+/** The raw 32-byte public half of an Ed25519 key, base64. */
+function publicHalf(key) {
+    return (key.type === "private" ? createPublicKey(key) : key).export({ format: "der", type: "spki" }).subarray(12).toString("base64");
+}
+/** What the service is sent: the code, the public half and the key's signature over the link statement. */
+export function linkRequest(key, code) {
+    return { code, publicKey: publicHalf(key), signature: sign(null, Buffer.from(`${LINK_STATEMENT}\n${code}`, "utf8"), key).toString("base64") };
+}
+const MESSAGES = {
+    "wrong-code": "That code is wrong or has expired. Get a new one in Tavora: Settings > Account > Link a publisher key.",
+    "bad-signature": "The service could not check the key's signature.",
+    "key-taken": "This key is already linked to another Tavora account.",
+    "too-many-keys": "Your account has as many keys as it can link. Unlink one in Tavora first.",
+    "too-many": "Too many tries. Wait a few minutes and try again.",
+    unavailable: "Linking keys is not available right now.",
+};
+/** Links the key with the code. Resolves with the key's fingerprint and the developer name players will see. */
+export async function linkKey(options) {
+    const code = cleanLinkCode(options.code);
+    if (!code)
+        throw new LinkError("That is not a link code. It looks like ABCD-EFGH, from Tavora: Settings > Account > Link a publisher key.");
+    const url = `${(options.apiUrl ?? DEFAULT_API_URL).replace(/\/+$/, "")}/v1/publishers/link`;
+    let response;
+    try {
+        response = await (options.fetch ?? fetch)(url, {
+            method: "POST",
+            headers: { "Content-Type": "application/json", Accept: "application/json" },
+            body: JSON.stringify(linkRequest(options.key, code)),
+            redirect: "error",
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch {
+        throw new LinkError(`Tavora's service could not be reached (${url}). Check your internet connection.`);
+    }
+    const answer = (await response.json().catch(() => ({})));
+    if (!response.ok)
+        throw new LinkError((typeof answer.reason === "string" && MESSAGES[answer.reason]) || `The service refused the link (${response.status}).`);
+    const own = fingerprint(options.key);
+    if (answer.fingerprint !== own)
+        throw new LinkError("The service answered for a different key.");
+    return { fingerprint: own, name: typeof answer.name === "string" ? answer.name : null };
+}
+//# sourceMappingURL=link.js.map

package/dist/link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.js","sourceRoot":"","sources":["../src/link.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,8FAA8F;AAC9F,oGAAoG;AACpG,yDAAyD;AACzD,OAAO,EAAE,eAAe,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAClD,MAAM,IAAI,GAAG,wCAAwC,CAAC;AAEtD,MAAM,OAAO,SAAU,SAAQ,KAAK;CAAG;AAEvC,yHAAyH;AACzH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,6DAA6D;AAC7D,SAAS,UAAU,CAAC,GAAc;IAChC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvI,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,GAAc,EAAE,IAAY;IACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChJ,CAAC;AAED,MAAM,QAAQ,GAA2B;IACvC,YAAY,EAAE,wGAAwG;IACtH,eAAe,EAAE,kDAAkD;IACnE,WAAW,EAAE,uDAAuD;IACpE,eAAe,EAAE,2EAA2E;IAC5F,UAAU,EAAE,mDAAmD;IAC/D,WAAW,EAAE,0CAA0C;CACxD,CAAC;AAEF,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAgF;IAC5G,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,2GAA2G,CAAC,CAAC;IAC5I,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC;IAC5F,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACpD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,0CAA0C,GAAG,oCAAoC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAgE,CAAC;IACxH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,iCAAiC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC9J,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,WAAW,KAAK,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACjG,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1F,CAAC"}

package/dist/pack.d.ts

@@ -0,0 +1,21 @@
+import type { KeyObject } from "node:crypto";
+import { type ModuleManifest } from "@tavora/module-schema";
+import { type ZipFile } from "./zip.ts";
+export declare const MANIFEST_FILE = "tavora.module.json";
+export declare class PackError extends Error {
+}
+/**
+ * The files of a module folder that go into its zip: the manifest, the folders
+ * its entry pages are in (usually dist/), and the icons. When the entry page sits
+ * next to the manifest, everything goes except node_modules and dot files.
+ */
+export declare function collectFiles(dir: string): Promise<{
+    manifest: ModuleManifest;
+    files: ZipFile[];
+}>;
+/** Packs a module folder into a zip signed with the publisher's key. */
+export declare function packModule(dir: string, key: KeyObject): Promise<{
+    manifest: ModuleManifest;
+    zip: Buffer;
+}>;
+//# sourceMappingURL=pack.d.ts.map

package/dist/pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack.d.ts","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAmC,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE7F,OAAO,EAA4D,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAElG,eAAO,MAAM,aAAa,uBAAuB,CAAC;AAElD,qBAAa,SAAU,SAAQ,KAAK;CAAG;AAEvC;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAgCvG;AAmBD,wEAAwE;AACxE,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAWhH"}

package/dist/pack.js

@@ -0,0 +1,92 @@
+import { lstat, readdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import { manifestFiles, validateManifest } from "@tavora/module-schema";
+import { signFiles, SIGNATURE_FILE } from "./signature.js";
+import { isSafeEntryName, readZip, writeZip, ZIP_LIMITS, ZipError } from "./zip.js";
+export const MANIFEST_FILE = "tavora.module.json";
+export class PackError extends Error {
+}
+/**
+ * The files of a module folder that go into its zip: the manifest, the folders
+ * its entry pages are in (usually dist/), and the icons. When the entry page sits
+ * next to the manifest, everything goes except node_modules and dot files.
+ */
+export async function collectFiles(dir) {
+    let raw;
+    try {
+        raw = JSON.parse(await readFile(path.join(dir, MANIFEST_FILE), "utf8"));
+    }
+    catch {
+        throw new PackError(`${MANIFEST_FILE} is missing or not valid JSON in ${dir}`);
+    }
+    const result = validateManifest(raw);
+    if (!result.ok)
+        throw new PackError(`${MANIFEST_FILE} is not valid: ${result.errors.join("; ")}`);
+    const { manifest } = result;
+    const names = new Set([MANIFEST_FILE]);
+    const { entries, icons } = manifestFiles(manifest);
+    // Panel types may have pages of their own; each page's folder goes in.
+    const folders = new Set(entries.map((entry) => (entry.includes("/") ? entry.split("/")[0] : "")));
+    for (const folder of folders)
+        for (const name of await walk(dir, folder))
+            names.add(name);
+    for (const icon of icons)
+        names.add(icon);
+    for (const entry of entries)
+        if (!names.has(entry))
+            throw new PackError(`the entry page ${entry} is missing (is the module built?)`);
+    names.delete(SIGNATURE_FILE);
+    const files = [];
+    let total = 0;
+    for (const name of [...names].sort()) {
+        if (!isSafeEntryName(name))
+            throw new PackError(`${name} cannot go into a module zip (its name is not allowed)`);
+        const info = await lstat(path.join(dir, name)).catch(() => null);
+        if (!info?.isFile())
+            throw new PackError(`${name} is missing or not a plain file`);
+        total += info.size;
+        if (total > ZIP_LIMITS.maxUnpackedBytes)
+            throw new PackError("the module is bigger than a module zip may be");
+        files.push({ name, data: await readFile(path.join(dir, name)) });
+    }
+    if (files.length > ZIP_LIMITS.maxFiles - 1)
+        throw new PackError(`a module zip may have at most ${ZIP_LIMITS.maxFiles - 1} files`);
+    return { manifest, files };
+}
+async function walk(root, folder) {
+    const found = [];
+    const visit = async (relative) => {
+        for (const entry of await readdir(path.join(root, relative), { withFileTypes: true })) {
+            const name = relative ? `${relative}/${entry.name}` : entry.name;
+            if (!folder && (entry.name.startsWith(".") || entry.name === "node_modules"))
+                continue;
+            // Links are never followed: the zip holds what is really in the folder.
+            if (entry.isDirectory())
+                await visit(name);
+            else if (entry.isFile())
+                found.push(name);
+        }
+    };
+    await visit(folder).catch((error) => {
+        if (error.code !== "ENOENT")
+            throw error;
+    });
+    return found;
+}
+/** Packs a module folder into a zip signed with the publisher's key. */
+export async function packModule(dir, key) {
+    const { manifest, files } = await collectFiles(dir);
+    const zip = writeZip([...files, signFiles(files, key)]);
+    if (zip.length > ZIP_LIMITS.maxArchiveBytes)
+        throw new PackError("the zip is bigger than a module zip may be");
+    try {
+        readZip(zip);
+    }
+    catch (error) {
+        if (error instanceof ZipError)
+            throw new PackError(`Tavora would refuse this zip: ${error.message}`);
+        throw error;
+    }
+    return { manifest, zip };
+}
+//# sourceMappingURL=pack.js.map

package/dist/pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack.js","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAuB,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAgB,MAAM,UAAU,CAAC;AAElG,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAElD,MAAM,OAAO,SAAU,SAAQ,KAAK;CAAG;AAEvC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,aAAa,oCAAoC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,aAAa,kBAAkB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAE5B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnD,uEAAuE;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnG,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1F,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,KAAK,oCAAoC,CAAC,CAAC;IACrI,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAE7B,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,wDAAwD,CAAC,CAAC;QACjH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;QACnF,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,IAAI,KAAK,GAAG,UAAU,CAAC,gBAAgB;YAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;QAC9G,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,UAAU,CAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClI,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACjE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;gBAAE,SAAS;YACvF,wEAAwE;YACxE,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;iBACtC,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACzD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,GAAc;IAC1D,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,eAAe;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IAC/G,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC"}

package/dist/signature.d.ts

@@ -0,0 +1,33 @@
+import { type KeyObject } from "node:crypto";
+import type { ZipFile } from "./zip.ts";
+export declare const SIGNATURE_FILE = "tavora.signature.json";
+declare const FORMAT = "tavora-signature-1";
+export interface PackageSignature {
+    format: typeof FORMAT;
+    /** The raw 32-byte Ed25519 public key, base64. */
+    publicKey: string;
+    /** SHA-256 (hex) of every file in the zip except this one. */
+    files: Record<string, string>;
+    /** Ed25519 signature (base64) over signedBytes(). */
+    signature: string;
+}
+export type VerifyResult = {
+    ok: true;
+    owner: string;
+    signed: boolean;
+} | {
+    ok: false;
+    reason: string;
+};
+/** The owner id of a key (either half): the first 16 bytes of the SHA-256 of the raw public key, in hex. */
+export declare function fingerprint(key: KeyObject): string;
+/** The tavora.signature.json for these files, signed with the publisher's private key. */
+export declare function signFiles(files: readonly ZipFile[], privateKey: KeyObject): ZipFile;
+/**
+ * Who owns a package's data. A zip without a signature belongs to `local`,
+ * like an unsigned folder. A signature must cover exactly the zip's other
+ * files, each with its hash, or the zip is refused.
+ */
+export declare function verifyFiles(files: readonly ZipFile[]): VerifyResult;
+export {};
+//# sourceMappingURL=signature.d.ts.map

package/dist/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../src/signature.ts"],"names":[],"mappings":"AAIA,OAAO,EAA6C,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAExF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAExC,eAAO,MAAM,cAAc,0BAA0B,CAAC;AACtD,QAAA,MAAM,MAAM,uBAAuB,CAAC;AAIpC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,MAAM,CAAC;IACtB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExG,4GAA4G;AAC5G,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAElD;AAoBD,0FAA0F;AAC1F,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,GAAG,OAAO,CAUnF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,YAAY,CA8BnE"}

package/dist/signature.js

@@ -0,0 +1,97 @@
+// Publisher signatures for module zips (the decision log, publisher row of
+// 2026-10-16). The publisher is an Ed25519 key; the owner of a module's data
+// is the fingerprint of that key. The zip carries tavora.signature.json with
+// the public key, a SHA-256 of every other file and a signature over them.
+import { createHash, createPublicKey, sign, verify } from "node:crypto";
+import { isOwnerId, LOCAL_OWNER } from "@tavora/module-schema";
+export const SIGNATURE_FILE = "tavora.signature.json";
+const FORMAT = "tavora-signature-1";
+// DER prefix of an Ed25519 public key in SubjectPublicKeyInfo form; the raw key follows.
+const ED25519_SPKI = Buffer.from("302a300506032b6570032100", "hex");
+/** The owner id of a key (either half): the first 16 bytes of the SHA-256 of the raw public key, in hex. */
+export function fingerprint(key) {
+    return createHash("sha256").update(rawPublicKey(key)).digest("hex").slice(0, 32);
+}
+function rawPublicKey(key) {
+    const der = (key.type === "private" ? createPublicKey(key) : key).export({ format: "der", type: "spki" });
+    if (der.length !== 44 || !der.subarray(0, 12).equals(ED25519_SPKI))
+        throw new Error("not an Ed25519 public key");
+    return der.subarray(12);
+}
+function sha256(data) {
+    return createHash("sha256").update(data).digest("hex");
+}
+/** What is signed: the format, the key and every file's hash in path order, as JSON. */
+function signedBytes(publicKey, files) {
+    const sorted = Object.keys(files)
+        .sort()
+        .map((name) => [name, files[name]]);
+    return Buffer.from(JSON.stringify({ format: FORMAT, publicKey, files: sorted }), "utf8");
+}
+/** The tavora.signature.json for these files, signed with the publisher's private key. */
+export function signFiles(files, privateKey) {
+    const publicKey = rawPublicKey(privateKey).toString("base64");
+    const hashes = {};
+    for (const file of files) {
+        if (file.name === SIGNATURE_FILE)
+            throw new Error(`${SIGNATURE_FILE} is made by the pack command`);
+        hashes[file.name] = sha256(file.data);
+    }
+    const signature = sign(null, signedBytes(publicKey, hashes), privateKey).toString("base64");
+    const body = { format: FORMAT, publicKey, files: hashes, signature };
+    return { name: SIGNATURE_FILE, data: Buffer.from(`${JSON.stringify(body, null, 2)}\n`, "utf8") };
+}
+/**
+ * Who owns a package's data. A zip without a signature belongs to `local`,
+ * like an unsigned folder. A signature must cover exactly the zip's other
+ * files, each with its hash, or the zip is refused.
+ */
+export function verifyFiles(files) {
+    const signatureFile = files.find((file) => file.name === SIGNATURE_FILE);
+    if (!signatureFile)
+        return { ok: true, owner: LOCAL_OWNER, signed: false };
+    let body;
+    try {
+        body = JSON.parse(signatureFile.data.toString("utf8"));
+    }
+    catch {
+        return { ok: false, reason: "its signature file cannot be read" };
+    }
+    if (!isSignature(body))
+        return { ok: false, reason: "its signature file is not in a format this Tavora knows" };
+    const raw = Buffer.from(body.publicKey, "base64");
+    if (raw.length !== 32 || raw.toString("base64") !== body.publicKey)
+        return { ok: false, reason: "its signature has no valid key" };
+    const publicKey = createPublicKey({ key: Buffer.concat([ED25519_SPKI, raw]), format: "der", type: "spki" });
+    const signature = Buffer.from(body.signature, "base64");
+    if (signature.length !== 64 || !verify(null, signedBytes(body.publicKey, body.files), publicKey, signature)) {
+        return { ok: false, reason: "its signature does not match" };
+    }
+    const others = files.filter((file) => file !== signatureFile);
+    const listed = Object.keys(body.files);
+    if (listed.length !== others.length)
+        return { ok: false, reason: "its files do not match what was signed" };
+    for (const file of others) {
+        if (!Object.hasOwn(body.files, file.name) || body.files[file.name] !== sha256(file.data)) {
+            return { ok: false, reason: "its files do not match what was signed" };
+        }
+    }
+    const owner = fingerprint(publicKey);
+    if (!isOwnerId(owner))
+        return { ok: false, reason: "its signature has no valid key" };
+    return { ok: true, owner, signed: true };
+}
+function isSignature(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const body = value;
+    if (Object.keys(body).sort().join() !== "files,format,publicKey,signature")
+        return false;
+    if (body.format !== FORMAT || typeof body.publicKey !== "string" || typeof body.signature !== "string")
+        return false;
+    const files = body.files;
+    if (typeof files !== "object" || files === null || Array.isArray(files))
+        return false;
+    return Object.values(files).every((hash) => typeof hash === "string" && /^[0-9a-f]{64}$/.test(hash));
+}
+//# sourceMappingURL=signature.js.map

package/dist/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../src/signature.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAG/D,MAAM,CAAC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC;AACpC,yFAAyF;AACzF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAcpE,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,GAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,YAAY,CAAC,GAAc;IAClC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjH,OAAO,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,SAAiB,EAAE,KAA6B;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC9B,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3F,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,SAAS,CAAC,KAAyB,EAAE,UAAqB;IACxE,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,8BAA8B,CAAC,CAAC;QACnG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACvF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAyB;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;IACzE,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3E,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC;IAEhH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACnI,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QAC5G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC5G,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,kCAAkC;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvG,CAAC"}

package/dist/zip.d.ts

@@ -0,0 +1,28 @@
+export interface ZipLimits {
+    maxArchiveBytes: number;
+    maxUnpackedBytes: number;
+    maxFiles: number;
+    maxRatio: number;
+}
+export declare const ZIP_LIMITS: Readonly<ZipLimits>;
+export declare class ZipError extends Error {
+}
+export interface ZipFile {
+    /** Path inside the package, with "/" between folders. */
+    name: string;
+    data: Buffer;
+}
+/**
+ * A path a package may contain: relative, "/" only, no "." or ".." parts, no
+ * drive letters or other colons, no control characters, and no part Windows
+ * cannot create (reserved device names, a trailing dot or space).
+ */
+export declare function isSafeEntryName(name: string): boolean;
+export declare function writeZip(files: readonly ZipFile[]): Buffer;
+/**
+ * Reads every file of a package zip into memory, or throws a ZipError saying
+ * why the zip is refused. Folder entries are skipped; anything that is not a
+ * plain file is refused.
+ */
+export declare function readZip(zip: Buffer, limits?: Readonly<ZipLimits>): ZipFile[];
+//# sourceMappingURL=zip.d.ts.map

package/dist/zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.d.ts","sourceRoot":"","sources":["../src/zip.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,SAAS;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,SAAS,CAQ1C,CAAC;AAEF,qBAAa,QAAS,SAAQ,KAAK;CAAG;AAEtC,MAAM,WAAW,OAAO;IACtB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAWD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIrD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAiD1D;AAED;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,QAAQ,CAAC,SAAS,CAAc,GAAG,OAAO,EAAE,CA0ExF"}

package/dist/zip.js

@@ -0,0 +1,190 @@
+// A small zip writer and a strict zip reader for module packages. The reader
+// is the installer's first line (the threat model, "Rules for a future zip
+// installer"): it refuses links, unsafe names, encryption and zip64, and caps
+// sizes and compression before anything is unpacked.
+import { crc32, deflateRawSync, inflateRawSync } from "node:zlib";
+export const ZIP_LIMITS = {
+    /** The zip file itself. */
+    maxArchiveBytes: 50 * 1024 * 1024,
+    /** All files unpacked together. */
+    maxUnpackedBytes: 200 * 1024 * 1024,
+    maxFiles: 2_000,
+    /** Unpacked size over packed size, checked once a package unpacks to more than 1 MiB. */
+    maxRatio: 100,
+};
+export class ZipError extends Error {
+}
+const LOCAL = 0x04034b50;
+const CENTRAL = 0x02014b50;
+const END = 0x06054b50;
+const UTF8 = 0x0800;
+// 1980-01-01 00:00, so the same files always give the same zip.
+const DOS_DATE = (1 << 5) | 1;
+const RESERVED = /^(con|prn|aux|nul|com[0-9]|lpt[0-9])(\..*)?$/i;
+/**
+ * A path a package may contain: relative, "/" only, no "." or ".." parts, no
+ * drive letters or other colons, no control characters, and no part Windows
+ * cannot create (reserved device names, a trailing dot or space).
+ */
+export function isSafeEntryName(name) {
+    if (name.length === 0 || name.length > 256)
+        return false;
+    if (name.startsWith("/") || name.includes("\\") || name.includes(":") || /[\u0000-\u001f\u007f<>"|?*]/.test(name))
+        return false;
+    return name.split("/").every((part) => part !== "" && part !== "." && part !== ".." && !RESERVED.test(part) && !/[. ]$/.test(part));
+}
+export function writeZip(files) {
+    const locals = [];
+    const centrals = [];
+    let offset = 0;
+    for (const file of files) {
+        if (!isSafeEntryName(file.name))
+            throw new ZipError(`unsafe file name: ${file.name}`);
+        const name = Buffer.from(file.name, "utf8");
+        const packed = deflateRawSync(file.data, { level: 9 });
+        const crc = crc32(file.data);
+        const local = Buffer.alloc(30);
+        local.writeUInt32LE(LOCAL, 0);
+        local.writeUInt16LE(20, 4);
+        local.writeUInt16LE(UTF8, 6);
+        local.writeUInt16LE(8, 8);
+        local.writeUInt16LE(0, 10);
+        local.writeUInt16LE(DOS_DATE, 12);
+        local.writeUInt32LE(crc, 14);
+        local.writeUInt32LE(packed.length, 18);
+        local.writeUInt32LE(file.data.length, 22);
+        local.writeUInt16LE(name.length, 26);
+        local.writeUInt16LE(0, 28);
+        const central = Buffer.alloc(46);
+        central.writeUInt32LE(CENTRAL, 0);
+        central.writeUInt16LE(20, 4); // made by: MS-DOS, so no Unix modes are claimed
+        central.writeUInt16LE(20, 6);
+        central.writeUInt16LE(UTF8, 8);
+        central.writeUInt16LE(8, 10);
+        central.writeUInt16LE(0, 12);
+        central.writeUInt16LE(DOS_DATE, 14);
+        central.writeUInt32LE(crc, 16);
+        central.writeUInt32LE(packed.length, 20);
+        central.writeUInt32LE(file.data.length, 24);
+        central.writeUInt16LE(name.length, 28);
+        central.writeUInt32LE(offset, 42);
+        locals.push(local, name, packed);
+        centrals.push(central, name);
+        offset += local.length + name.length + packed.length;
+    }
+    const directory = Buffer.concat(centrals);
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(END, 0);
+    end.writeUInt16LE(files.length, 8);
+    end.writeUInt16LE(files.length, 10);
+    end.writeUInt32LE(directory.length, 12);
+    end.writeUInt32LE(offset, 16);
+    return Buffer.concat([...locals, directory, end]);
+}
+/**
+ * Reads every file of a package zip into memory, or throws a ZipError saying
+ * why the zip is refused. Folder entries are skipped; anything that is not a
+ * plain file is refused.
+ */
+export function readZip(zip, limits = ZIP_LIMITS) {
+    if (zip.length > limits.maxArchiveBytes)
+        throw new ZipError("the zip is too big");
+    const endAt = findEnd(zip);
+    const count = zip.readUInt16LE(endAt + 10);
+    const size = zip.readUInt32LE(endAt + 12);
+    const start = zip.readUInt32LE(endAt + 16);
+    if (zip.readUInt16LE(endAt + 4) !== 0 || zip.readUInt16LE(endAt + 6) !== 0 || zip.readUInt16LE(endAt + 8) !== count) {
+        throw new ZipError("split zips are not supported");
+    }
+    if (count === 0xffff || size === 0xffffffff || start === 0xffffffff)
+        throw new ZipError("zip64 is not supported");
+    if (start + size > endAt)
+        throw new ZipError("the zip is damaged");
+    if (count > limits.maxFiles)
+        throw new ZipError("the zip has too many files");
+    const files = [];
+    const seen = new Set();
+    let unpacked = 0;
+    let at = start;
+    for (let i = 0; i < count; i++) {
+        if (at + 46 > endAt || zip.readUInt32LE(at) !== CENTRAL)
+            throw new ZipError("the zip is damaged");
+        const madeBy = zip.readUInt16LE(at + 4) >> 8;
+        const flags = zip.readUInt16LE(at + 8);
+        const method = zip.readUInt16LE(at + 10);
+        const crc = zip.readUInt32LE(at + 16);
+        const packedSize = zip.readUInt32LE(at + 20);
+        const plainSize = zip.readUInt32LE(at + 24);
+        const nameLength = zip.readUInt16LE(at + 28);
+        const extraLength = zip.readUInt16LE(at + 30);
+        const commentLength = zip.readUInt16LE(at + 32);
+        const external = zip.readUInt32LE(at + 38);
+        const localAt = zip.readUInt32LE(at + 42);
+        const raw = zip.subarray(at + 46, at + 46 + nameLength);
+        at += 46 + nameLength + extraLength + commentLength;
+        if (at > endAt)
+            throw new ZipError("the zip is damaged");
+        const name = new TextDecoder("utf-8", { fatal: false }).decode(raw);
+        if (flags & 0x0001)
+            throw new ZipError("encrypted zips are not supported");
+        // Unix zips keep the file type in the top bits: only plain files (and folders) are allowed.
+        const type = madeBy === 3 ? (external >>> 16) & 0o170000 : 0;
+        const isFolder = name.endsWith("/");
+        if (type !== 0 && type !== (isFolder ? 0o040000 : 0o100000))
+            throw new ZipError(`${name} is a link or special file`);
+        if (isFolder) {
+            if (!isSafeEntryName(name.slice(0, -1)))
+                throw new ZipError(`unsafe path: ${name}`);
+            continue;
+        }
+        if (!isSafeEntryName(name))
+            throw new ZipError(`unsafe path: ${name}`);
+        const folded = name.toLowerCase();
+        if (seen.has(folded))
+            throw new ZipError(`${name} is in the zip twice`);
+        seen.add(folded);
+        if (method !== 0 && method !== 8)
+            throw new ZipError(`${name} uses a compression zips for Tavora do not support`);
+        if (packedSize === 0xffffffff || plainSize === 0xffffffff)
+            throw new ZipError("zip64 is not supported");
+        unpacked += plainSize;
+        if (unpacked > limits.maxUnpackedBytes)
+            throw new ZipError("the module is too big unpacked");
+        if (localAt + 30 > start || zip.readUInt32LE(localAt) !== LOCAL)
+            throw new ZipError("the zip is damaged");
+        const dataAt = localAt + 30 + zip.readUInt16LE(localAt + 26) + zip.readUInt16LE(localAt + 28);
+        if (!zip.subarray(localAt + 30, localAt + 30 + zip.readUInt16LE(localAt + 26)).equals(raw))
+            throw new ZipError("the zip is damaged");
+        if (dataAt + packedSize > start)
+            throw new ZipError("the zip is damaged");
+        const packed = zip.subarray(dataAt, dataAt + packedSize);
+        let data;
+        if (method === 0) {
+            if (packedSize !== plainSize)
+                throw new ZipError("the zip is damaged");
+            data = Buffer.from(packed);
+        }
+        else {
+            try {
+                data = inflateRawSync(packed, { maxOutputLength: Math.max(plainSize, 1) });
+            }
+            catch {
+                throw new ZipError(`${name} cannot be unpacked`);
+            }
+        }
+        if (data.length !== plainSize || crc32(data) !== crc)
+            throw new ZipError(`${name} is damaged`);
+        files.push({ name, data });
+    }
+    if (unpacked > 1024 * 1024 && unpacked > zip.length * limits.maxRatio)
+        throw new ZipError("the zip unpacks to far more than its size");
+    return files;
+}
+function findEnd(zip) {
+    for (let at = zip.length - 22; at >= Math.max(0, zip.length - 22 - 0xffff); at--) {
+        if (zip.readUInt32LE(at) === END && at + 22 + zip.readUInt16LE(at + 20) === zip.length)
+            return at;
+    }
+    throw new ZipError("this is not a zip file");
+}
+//# sourceMappingURL=zip.js.map

package/dist/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../src/zip.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,qDAAqD;AACrD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AASlE,MAAM,CAAC,MAAM,UAAU,GAAwB;IAC7C,2BAA2B;IAC3B,eAAe,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACjC,mCAAmC;IACnC,gBAAgB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACnC,QAAQ,EAAE,KAAK;IACf,yFAAyF;IACzF,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF,MAAM,OAAO,QAAS,SAAQ,KAAK;CAAG;AAQtC,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,OAAO,GAAG,UAAU,CAAC;AAC3B,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,IAAI,GAAG,MAAM,CAAC;AACpB,gEAAgE;AAChE,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAE9B,MAAM,QAAQ,GAAG,+CAA+C,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChI,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtI,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAyB;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,qBAAqB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE3B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,gDAAgD;QAC9E,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,SAA8B,UAAU;IAC3E,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QACpH,MAAM,IAAI,QAAQ,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAClH,IAAI,KAAK,GAAG,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACnE,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;QACxD,EAAE,IAAI,EAAE,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;QACpD,IAAI,EAAE,GAAG,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,KAAK,GAAG,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;QAC3E,4FAA4F;QAC5F,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;QACrH,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,oDAAoD,CAAC,CAAC;QAClH,IAAI,UAAU,KAAK,UAAU,IAAI,SAAS,KAAK,UAAU;YAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QACxG,QAAQ,IAAI,SAAS,CAAC;QACtB,IAAI,QAAQ,GAAG,MAAM,CAAC,gBAAgB;YAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;QAE7F,IAAI,OAAO,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACrI,IAAI,MAAM,GAAG,UAAU,GAAG,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC;QACzD,IAAI,IAAY,CAAC;QACjB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,IAAI,UAAU,KAAK,SAAS;gBAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACvE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,QAAQ,GAAG,IAAI,GAAG,IAAI,IAAI,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IACvI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,KAAK,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QACjF,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,CAAC,CAAC;AAC/C,CAAC"}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "@tavora/pack",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "Packs a Tavora module into a zip signed with your publisher key, links the key to your Tavora account, and reads and checks such zips.",
+  "type": "module",
+  "keywords": [
+    "tavora",
+    "module",
+    "pack",
+    "sign",
+    "ed25519"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wellbrained/tavora.git",
+    "directory": "packages/pack"
+  },
+  "homepage": "https://docs.mytavora.app/guide/getting-started#share-the-module",
+  "bugs": "https://github.com/wellbrained/tavora/issues",
+  "bin": {
+    "tavora-pack": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=22.12"
+  },
+  "dependencies": {
+    "@tavora/module-schema": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.20.5"
+  },
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit -p ."
+  }
 }