@tmpxinchen/tmp1 0.0.1 → 1.0.1

package/MANIFEST.json

@@ -0,0 +1,14 @@
+{
+  "package": "@tmpxinchen/tmp1",
+  "version": "1.0.1",
+  "chunkIndex": 1,
+  "totalChunks": 44,
+  "chunkFile": "chunk.bin",
+  "chunkBytes": 94371840,
+  "chunkSha256": "4c4b1b86ef51c7aa8515e0c69ebcb74829244d6cb8110827080fee27435b7872",
+  "sourceFile": "gitlab-ce-18.11.12.tar",
+  "sourceBytes": 4148393984,
+  "sourceSha256": "6fa679d1a99a65bbdf157086f4a3943e5f40c48275375c961b6d64eaa627bb8b",
+  "createdAt": "2026-10-21T07:15:44.397Z",
+  "rejoin": "tar -xf gitlab-ce-18.11.12.tar   # after ./reassemble.sh gitlab-ce-18.11.12.tar 1.0.1"
+}

package/chunk.bin

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/chunk.bin
+size: 94371840 bytes
+sha256: 4c4b1b86ef51c7aa8515e0c69ebcb74829244d6cb8110827080fee27435b7872

package/package.json

@@ -1 +1,12 @@
-{"name":"@tmpxinchen/tmp1","version":"0.0.1","description":"","license":"ISC"}
+{
+  "name": "@tmpxinchen/tmp1",
+  "version": "1.0.1",
+  "description": "gitlab-ce-18.11.12.tar transfer chunk 1/44",
+  "files": [
+    "chunk.bin",
+    "MANIFEST.json",
+    "reassemble.sh"
+  ],
+  "license": "ISC",
+  "author": "xinchen12"
+}

package/reassemble.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# Reassemble the split tarball published as npm packages.
+#   usage: ./reassemble.sh <out-file> [first-version]
+# example: ./reassemble.sh gitlab-ce-18.11.12.tar 1.0.1
+set -euo pipefail
+PKG="@tmpxinchen/tmp1"
+OUT="${1:?usage: reassemble.sh <out-file> [first-version]}"
+START="${2:-1.0.1}"
+WORK="$(mktemp -d)"
+trap 'rm -rf "$WORK"' EXIT
+
+echo "[1/3] listing versions of $PKG ..."
+npm view "$PKG" versions --json > "$WORK/versions.json"
+python3 - "$WORK/versions.json" "$START" > "$WORK/list.txt" <<'PY'
+import json, re, sys
+vs = json.load(open(sys.argv[1]))
+start = sys.argv[2]
+def key(v):
+    return tuple(int(x) for x in re.findall(r'\d+', v))
+vs = [v for v in vs if '-' not in v and key(v) >= key(start)]
+for v in sorted(vs, key=key):
+    print(v)
+PY
+[[ -s "$WORK/list.txt" ]] || { echo "no versions >= $START found"; exit 1; }
+echo "      $(wc -l < "$WORK/list.txt") chunks: $(head -1 "$WORK/list.txt") .. $(tail -1 "$WORK/list.txt")"
+
+echo "[2/3] downloading + verifying chunks ..."
+: > "$OUT"
+i=0
+total=$(wc -l < "$WORK/list.txt")
+src_sha=""; src_size=0
+while read -r v; do
+  i=$((i+1))
+  mkdir -p "$WORK/$v"
+  npm pack "$PKG@$v" --silent --pack-destination "$WORK" >/dev/null
+  tar -xzf "$WORK/$PKG-$(echo "$v" | sed 's|.*/||')" -C "$WORK/$v" 2>/dev/null || \
+  tar -xzf "$WORK"/tmpxinchen-tmp1-"$v".tgz -C "$WORK/$v"
+  python3 - "$WORK/$v/package/MANIFEST.json" "$i" "$OUT" <<'PY'
+import hashlib, json, sys
+m = json.load(open(sys.argv[1]))
+idx = int(sys.argv[2]); out = sys.argv[3]
+assert m["chunkIndex"] == idx, f'order mismatch: expected {idx}, got {m["chunkIndex"]}'
+data = open(m["chunkFile"], 'rb').read()
+assert len(data) == m["chunkBytes"], f'chunk {idx} size mismatch'
+assert hashlib.sha256(data).hexdigest() == m["chunkSha256"], f'chunk {idx} sha256 mismatch'
+with open(out, 'ab') as f:
+    f.write(data)
+print(f"      chunk {idx}/{m['totalChunks']} v{m['version']} ok ({m['chunkBytes']} bytes)")
+PY
+  src_sha=$(python3 -c "import json;print(json.load(open('$WORK/$v/package/MANIFEST.json'))['sourceSha256'])")
+  src_size=$(python3 -c "import json;print(json.load(open('$WORK/$v/package/MANIFEST.json'))['sourceBytes'])")
+done < "$WORK/list.txt"
+
+echo "[3/3] verifying reassembled file ..."
+[[ "$(wc -c < "$OUT")" -eq "$src_size" ]] || { echo "size mismatch"; exit 1; }
+echo "$src_sha  $OUT" | sha256sum -c -
+echo "done: $OUT"

package/a.txt

@@ -1 +0,0 @@
-hi

package/put.js

@@ -1,68 +0,0 @@
-// Diagnose npm publish: send a real publish payload and print the registry's raw response.
-const fs = require('fs');
-const path = require('path');
-const https = require('https');
-const crypto = require('crypto');
-const { execFileSync } = require('child_process');
-
-const dir = process.argv[2];
-const name = process.argv[3];
-const version = process.argv[4];
-const token = fs.readFileSync(path.join(process.env.HOME, 'npm-pubish/.npmrc'), 'utf8').match(/npm_\w+/)[0];
-
-const pkgPath = path.join(dir, 'package.json');
-const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
-pkg.name = name; pkg.version = version;
-fs.writeFileSync(pkgPath, JSON.stringify(pkg));
-
-const tgzName = execFileSync('npm', ['pack', '--silent', '--pack-destination', dir], { cwd: dir }).toString().trim().split('\n').pop();
-const tgz = fs.readFileSync(path.join(dir, tgzName));
-const shasum = crypto.createHash('sha1').update(tgz).digest('hex');
-const integrity = 'sha512-' + crypto.createHash('sha512').update(tgz).digest('base64');
-const shortName = name.replace(/^@[^/]+\//, '');
-
-const tarballUrl = `https://registry.npmjs.org/${name}/-/${shortName}-${version}.tgz`;
-const body = {
-  _id: name,
-  name,
-  description: pkg.description || '',
-  'dist-tags': { latest: version },
-  versions: {
-    [version]: {
-      ...pkg,
-      _id: `${name}@${version}`,
-      dist: { tarball: tarballUrl, shasum, integrity },
-    },
-  },
-  access: 'public',
-  _attachments: {
-    [`${shortName}-${version}.tgz`]: {
-      content_type: 'application/octet-stream',
-      data: tgz.toString('base64'),
-      length: tgz.length,
-    },
-  },
-};
-
-const payload = JSON.stringify(body);
-const url = new URL(`https://registry.npmjs.org/${encodeURIComponent(name)}`);
-const req = https.request({
-  method: 'PUT',
-  hostname: url.hostname,
-  path: url.pathname,
-  headers: {
-    authorization: `Bearer ${token}`,
-    'content-type': 'application/json',
-    'content-length': Buffer.byteLength(payload),
-    'npm-command': 'publish',
-  },
-}, (res) => {
-  let d = '';
-  res.on('data', (c) => (d += c));
-  res.on('end', () => {
-    console.log(`HTTP ${res.statusCode}`);
-    console.log(d.slice(0, 800));
-  });
-});
-req.on('error', (e) => console.error('ERR', e.message));
-req.end(payload);