@wpelevator/wp-release 0.13.0 → 0.14.0

package/dist/commands/zip.d.ts

@@ -1,12 +1,13 @@
+import type { ZipPackageResult } from '../package-zip.ts';
 import type { CommandOutcome } from './command.ts';
 /** Result of the zip command. */
-export interface ZipResult {
-    /** Absolute path of the ZIP. */
-    zipPath: string;
-    /** Absolute path of the checksums manifest, set with --checksums. */
-    checksumsPath?: string;
-    /** Number of archived files. */
-    files: number;
+export interface ZipResult extends ZipPackageResult {
+    /** Plugin or theme slug. */
+    slug: string;
+    /** Version in the filename and the checksums manifest, null when it's unknown. */
+    version: string | null;
+    /** Zipped package, with --package. */
+    package?: string;
 }
 declare const _default: {
     name: string;
@@ -14,6 +15,9 @@ declare const _default: {
     summary: string;
     help: string;
     options: {
+        package: {
+            type: "string";
+        };
         checksums: {
             type: "boolean";
         };
@@ -39,6 +43,6 @@ declare const _default: {
             type: "string";
         };
     };
-    run({ values, positionals, cwd, logger, }: import("./command.ts").CommandContext): Promise<CommandOutcome<ZipResult>>;
+    run({ values, positionals, cwd, configFile, logger, }: import("./command.ts").CommandContext): Promise<CommandOutcome<ZipResult>>;
 };
 export default _default;

package/dist/commands/zip.js

@@ -1,49 +1,122 @@
-import { existsSync } from 'node:fs';
 import { basename, resolve } from 'node:path';
-import { CHECKSUMS_EXTENSION, createChecksums, writeChecksums, } from "../checksums.js";
 import { ValidationError } from "../errors.js";
-import { loadFileRules, resolveFileSelection, selectFiles, } from "../file-selection.js";
+import { resolveFileSelection } from "../file-selection.js";
 import { FILENAME_FORMAT, formatFilename } from "../filename.js";
+import { getPackageFiles } from "../package-deploy.js";
 import { readPackageMeta } from "../package-meta.js";
+import { zipPackage } from "../package-zip.js";
 import { getZipSummary } from "../summary.js";
-import { createZip } from "../zip.js";
-import { checkDirectory, fileSelectionArgs, getFileSelectionInput, getSourceDirArg, ignoreOwnFile, ignoreOwnSignature, resolveOutput, sourceDirArgs, } from "./args.js";
-import { getBoolean, getString } from "./command.js";
-const ZIP_EXTENSION = '.zip';
+import { checkDirectory, fileSelectionArgs, getFileSelectionInput, getSourceDirArg, resolveOutput, sourceDirArgs, } from "./args.js";
+import { getBoolean, getString, getStrings } from "./command.js";
+/** Options of a source directory and its files, which --package takes from the config. */
+const SOURCE_FLAGS = [
+    'source-dir',
+    'distignore',
+    'no-distignore',
+    'exclude',
+    'exclude-gitattributes',
+];
 /**
- * Get the checksums manifest path next to an archive, with .checksums.json
- * instead of .zip.
+ * Get the configured package to zip, failing for the options that set the
+ * source directory and the files instead.
  *
- * @param zipPath Archive path.
- * @return Manifest path.
+ * @param  values      Parsed CLI values.
+ * @param  positionals Positional arguments.
+ * @return The package identifier or path, or undefined without --package.
+ * @throws {ValidationError} For an empty --package, or --package with a source directory or file selection option.
  */
-function getChecksumsPath(zipPath) {
-    const name = zipPath.endsWith(ZIP_EXTENSION)
-        ? zipPath.slice(0, -ZIP_EXTENSION.length)
-        : zipPath;
-    return name + CHECKSUMS_EXTENSION;
+function getPackageArg(values, positionals) {
+    const name = getString(values, 'package')?.trim();
+    const conflicts = SOURCE_FLAGS.filter((flag) => undefined !== getString(values, flag) ||
+        getBoolean(values, flag) ||
+        getStrings(values, flag).length);
+    if ('' === name) {
+        throw new ValidationError('--package <name> must not be empty.');
+    }
+    if (name && (positionals.length || conflicts.length)) {
+        throw new ValidationError(`--package takes the directory and files of the package from the config, so it can't be combined with ${positionals.length
+            ? 'a source directory'
+            : conflicts.map((flag) => `--${flag}`).join(', ')}.`);
+    }
+    return name;
 }
 /**
- * Fail before writing anything when an output file exists.
+ * Describe the files of a directory with the slug and the version from the
+ * options, or from the plugin or theme headers.
  *
- * @param  paths Output paths.
- * @param  force Whether existing files are overwritten.
- * @throws {ValidationError} If a file exists and force isn't set.
+ * @param values    Parsed CLI values.
+ * @param sourceDir Directory to zip.
+ * @param selection File selection.
+ * @param slug      Default slug.
+ * @return Source directory, file selection, slug, version and type.
  */
-function checkOverwrite(paths, force) {
-    const existing = paths.filter((path) => !force && existsSync(path));
-    if (existing.length) {
-        throw new ValidationError(`${existing.join(' and ')} already exists, pass --force to overwrite it.`);
-    }
+async function describeSource(values, sourceDir, selection, slug) {
+    const name = getString(values, 'slug') ?? slug;
+    const meta = await readPackageMeta({ dir: sourceDir, slug: name });
+    return {
+        sourceDir,
+        selection,
+        slug: name,
+        version: getString(values, 'version') ?? meta?.version ?? null,
+        ...(meta ? { type: meta.type } : {}),
+    };
+}
+/**
+ * Get the files of a source directory from the CLI options.
+ *
+ * @param values      Parsed CLI values.
+ * @param positionals Positional arguments.
+ * @param cwd         Working directory.
+ * @return Source directory, file selection, slug and version.
+ */
+async function getDirectorySource(values, positionals, cwd) {
+    const sourceDir = resolve(cwd, getSourceDirArg(values, positionals));
+    await checkDirectory(sourceDir);
+    return describeSource(values, sourceDir, resolveFileSelection({
+        cwd,
+        sourceDir,
+        ...getFileSelectionInput(values),
+    }), basename(cwd));
+}
+/**
+ * Get the directory of a configured package with the files config of its
+ * package group, which its deploys use too.
+ *
+ * @param  values     Parsed CLI values.
+ * @param  cwd        Repository root with the wp-release config.
+ * @param  name       Package identifier or path under the configured root.
+ * @param  configFile Config file, instead of the conventional one.
+ * @return Source directory, file selection, slug, version and package.
+ * @throws {ValidationError} Without a config or for an unknown package.
+ */
+async function getPackageSource(values, cwd, name, configFile) {
+    const pkg = await getPackageFiles({
+        cwd,
+        package: name,
+        ...(configFile ? { configFile } : {}),
+    });
+    const source = await describeSource(values, pkg.directory, resolveFileSelection({
+        cwd,
+        sourceDir: pkg.directory,
+        ...pkg.files,
+    }), basename(pkg.directory));
+    return { ...source, package: pkg.name };
 }
 export default {
     name: 'zip',
-    usage: 'zip [<source-dir>] [options]',
+    usage: 'zip [<source-dir>] [options] | zip --package <name> [options]',
     summary: 'Create a ZIP archive of a plugin or theme with a {slug}/ root folder.',
     help: `Arguments:
   <source-dir>                Directory to archive (default: .), also accepted
                               as --source-dir <dir>
 
+Configured packages (instead of the source directory and the file selection
+options):
+  --package <name>            Zip this package of the wp-release config, by
+                              identifier or path under the configured root,
+                              like plugins/alpha, with the files config of its
+                              package group, the same files as its deploys
+
 Options:
   --output <file>             ZIP file (default: the --filename-format name with
                               .zip in the current directory)
@@ -64,7 +137,13 @@ Options:
   --force                     Overwrite existing output files
 
 Entries are sorted and use a fixed timestamp and file mode, so the same files
-always give the same ZIP.`,
+always give the same ZIP.
+
+Examples:
+  wp-release zip dist --slug my-plugin --checksums
+      Zip a build with its checksums manifest
+  wp-release zip --package plugins/alpha --checksums
+      Zip a package of the config with its configured files`,
     options: {
         slug: { type: 'string' },
         version: { type: 'string' },
@@ -74,65 +153,43 @@ always give the same ZIP.`,
         output: { type: 'string' },
         ...sourceDirArgs,
         ...fileSelectionArgs,
+        package: { type: 'string' },
         checksums: { type: 'boolean' },
         force: { type: 'boolean' },
     },
-    async run({ values, positionals, cwd, logger, }) {
-        const sourceDir = resolve(cwd, getSourceDirArg(values, positionals));
-        const slug = getString(values, 'slug') ?? basename(cwd);
-        const force = getBoolean(values, 'force');
-        await checkDirectory(sourceDir);
-        const meta = await readPackageMeta({ dir: sourceDir, slug });
-        const version = getString(values, 'version') ?? meta?.version ?? null;
-        const filename = formatFilename(getString(values, 'filename-format') ?? FILENAME_FORMAT, { slug, version });
-        const zipPath = resolveOutput({
-            cwd,
-            output: getString(values, 'output'),
-            filename: filename + ZIP_EXTENSION,
-        });
-        const checksumsPath = getBoolean(values, 'checksums')
-            ? getChecksumsPath(zipPath)
-            : null;
-        const selection = resolveFileSelection({
-            cwd,
-            sourceDir,
-            ...getFileSelectionInput(values),
-        });
-        const rules = ignoreOwnSignature(ignoreOwnFile(await loadFileRules(selection), sourceDir, zipPath), sourceDir, zipPath);
-        if (checksumsPath) {
-            ignoreOwnSignature(ignoreOwnFile(rules, sourceDir, checksumsPath), sourceDir, checksumsPath);
-        }
-        const files = await selectFiles(sourceDir, rules);
-        if (!files.length) {
-            throw new ValidationError(`No files to archive in ${sourceDir}.`);
-        }
-        checkOverwrite([zipPath, checksumsPath ?? ''].filter(Boolean), force);
-        await createZip({
-            sourceDir,
-            files,
-            zipPath,
+    async run({ values, positionals, cwd, configFile, logger, }) {
+        const name = getPackageArg(values, positionals);
+        const source = name
+            ? await getPackageSource(values, cwd, name, configFile)
+            : await getDirectorySource(values, positionals, cwd);
+        const filename = formatFilename(getString(values, 'filename-format') ?? FILENAME_FORMAT, { slug: source.slug, version: source.version });
+        const zipped = await zipPackage({
+            sourceDir: source.sourceDir,
+            selection: source.selection,
+            zipPath: resolveOutput({
+                cwd,
+                output: getString(values, 'output'),
+                filename: `${filename}.zip`,
+            }),
             rootFolder: getBoolean(values, 'no-root-folder')
                 ? null
-                : getString(values, 'root-folder') ?? slug,
-            force,
+                : getString(values, 'root-folder') ?? source.slug,
+            slug: source.slug,
+            version: source.version,
+            ...(source.type ? { type: source.type } : {}),
+            checksums: getBoolean(values, 'checksums'),
+            force: getBoolean(values, 'force'),
         });
-        logger.debug(`Archived ${files.length} files from ${sourceDir}.`);
-        logger.info(zipPath);
-        if (checksumsPath) {
-            const manifest = await createChecksums({
-                sourceDir,
-                rules,
-                slug,
-                version,
-                type: meta?.type,
-            });
-            await writeChecksums(checksumsPath, manifest, force);
-            logger.info(checksumsPath);
+        logger.debug(`Archived ${zipped.files} files from ${source.sourceDir}.`);
+        logger.info(zipped.zipPath);
+        if (zipped.checksumsPath) {
+            logger.info(zipped.checksumsPath);
         }
         const result = {
-            zipPath,
-            ...(checksumsPath ? { checksumsPath } : {}),
-            files: files.length,
+            ...zipped,
+            slug: source.slug,
+            version: source.version,
+            ...(source.package ? { package: source.package } : {}),
         };
         logger.summary((context) => getZipSummary(context, result));
         return { exitCode: 0, result };

package/dist/ed25519.d.ts

@@ -0,0 +1,25 @@
+import type { KeyObject } from 'node:crypto';
+export declare const PUBLIC_KEY_BYTES = 32;
+/**
+ * Get the raw 32 bytes of an Ed25519 public key.
+ *
+ * @param key Private or public key.
+ * @return Public key bytes.
+ */
+export declare function getRawPublicKey(key: KeyObject): Buffer;
+/**
+ * Get an Ed25519 public key from its raw 32 bytes.
+ *
+ * @param bytes Public key bytes.
+ * @return Public key.
+ */
+export declare function createRawPublicKey(bytes: Buffer): KeyObject;
+/**
+ * Get the raw digest of a file, which the signature formats sign instead of
+ * the whole file.
+ *
+ * @param path      File path.
+ * @param algorithm Node.js hash algorithm, like sha384 or blake2b512.
+ * @return Digest bytes.
+ */
+export declare function digestFile(path: string, algorithm: string): Promise<Buffer>;

package/dist/ed25519.js

@@ -0,0 +1,44 @@
+import { createHash, createPublicKey } from 'node:crypto';
+import { createReadStream } from 'node:fs';
+export const PUBLIC_KEY_BYTES = 32;
+// DER prefix of a SPKI Ed25519 public key, followed by the 32-byte key.
+const SPKI_PREFIX = Buffer.from('302a300506032b6570032100', 'hex');
+/**
+ * Get the raw 32 bytes of an Ed25519 public key.
+ *
+ * @param key Private or public key.
+ * @return Public key bytes.
+ */
+export function getRawPublicKey(key) {
+    return ('private' === key.type ? createPublicKey(key) : key)
+        .export({ format: 'der', type: 'spki' })
+        .subarray(SPKI_PREFIX.length);
+}
+/**
+ * Get an Ed25519 public key from its raw 32 bytes.
+ *
+ * @param bytes Public key bytes.
+ * @return Public key.
+ */
+export function createRawPublicKey(bytes) {
+    return createPublicKey({
+        key: Buffer.concat([SPKI_PREFIX, bytes]),
+        format: 'der',
+        type: 'spki',
+    });
+}
+/**
+ * Get the raw digest of a file, which the signature formats sign instead of
+ * the whole file.
+ *
+ * @param path      File path.
+ * @param algorithm Node.js hash algorithm, like sha384 or blake2b512.
+ * @return Digest bytes.
+ */
+export async function digestFile(path, algorithm) {
+    const hash = createHash(algorithm);
+    for await (const chunk of createReadStream(path)) {
+        hash.update(chunk);
+    }
+    return hash.digest();
+}

package/dist/file-selection.d.ts

@@ -82,3 +82,24 @@ export declare function isErrorCode(error: unknown, code: string): boolean;
  * @throws {ValidationError} For selected symbolic links, which ZIP archives and WordPress.org SVN don't support.
  */
 export declare function selectFiles(sourceDir: string, rules: FileRules): Promise<string[]>;
+/**
+ * Ignore a file that a command writes or reads, such as the checksums
+ * manifest, when it's inside the selected directory.
+ *
+ * @param rules     Matcher from loadFileRules().
+ * @param sourceDir Selected directory.
+ * @param path      Absolute file path.
+ * @return The same matcher.
+ */
+export declare function ignoreOwnFile(rules: FileRules, sourceDir: string, path: string): FileRules;
+/**
+ * Ignore the signature files of every format that "wp-release sign" writes
+ * next to a file a command writes, when they're inside the selected
+ * directory.
+ *
+ * @param rules     Matcher from loadFileRules().
+ * @param sourceDir Selected directory.
+ * @param path      Absolute path of the signed file.
+ * @return The same matcher.
+ */
+export declare function ignoreOwnSignature(rules: FileRules, sourceDir: string, path: string): FileRules;

package/dist/file-selection.js

@@ -3,6 +3,7 @@ import { isAbsolute, join, posix, relative, resolve } from 'node:path';
 import ignore from 'ignore';
 import { ValidationError } from "./errors.js";
 import { createGitRunner } from "./git.js";
+import { SIGNATURE_FORMATS } from "./signing.js";
 export const DISTIGNORE_FILENAME = '.distignore';
 /**
  * Version control metadata that is never released, at any depth. Without
@@ -227,3 +228,37 @@ async function findEntryFiles(sourceDir, path, entry, rules) {
     }
     return [];
 }
+/**
+ * Ignore a file that a command writes or reads, such as the checksums
+ * manifest, when it's inside the selected directory.
+ *
+ * @param rules     Matcher from loadFileRules().
+ * @param sourceDir Selected directory.
+ * @param path      Absolute file path.
+ * @return The same matcher.
+ */
+export function ignoreOwnFile(rules, sourceDir, path) {
+    const relativePath = relative(sourceDir, path).split('\\').join('/');
+    const isInside = relativePath &&
+        '..' !== relativePath &&
+        !relativePath.startsWith('../') &&
+        !isAbsolute(relativePath);
+    if (isInside) {
+        // Escape the gitignore wildcards so that the pattern matches only this file.
+        rules.add(`/${relativePath.replace(/[\\*?[\]!#]/g, '\\$&')}`);
+    }
+    return rules;
+}
+/**
+ * Ignore the signature files of every format that "wp-release sign" writes
+ * next to a file a command writes, when they're inside the selected
+ * directory.
+ *
+ * @param rules     Matcher from loadFileRules().
+ * @param sourceDir Selected directory.
+ * @param path      Absolute path of the signed file.
+ * @return The same matcher.
+ */
+export function ignoreOwnSignature(rules, sourceDir, path) {
+    return Object.values(SIGNATURE_FORMATS).reduce((matcher, { extension }) => ignoreOwnFile(matcher, sourceDir, path + extension), rules);
+}

package/dist/git.d.ts

@@ -26,6 +26,23 @@ export type GitRunner = (input: GitCommandInput) => Promise<GitCommandOutput>;
  * @return Text with the user info of URLs replaced by ***.
  */
 export declare function redactUrls(text: string): string;
+/** Host and path of a repository URL. */
+export interface RepositoryLocation {
+    /** Host with the port, like github.com or git.example.test:8443. */
+    host: string;
+    /** Path without the leading slash and the .git suffix, like owner/repo or group/subgroup/project. */
+    path: string;
+}
+/**
+ * Get the host and path of a remote repository URL, like github.com and
+ * owner/repo for https://github.com/owner/repo.git or
+ * git@github.com:owner/repo.git, for steps that call the API of the forge
+ * that hosts it. Credentials in the URL aren't part of either.
+ *
+ * @param url Repository URL: HTTP(S), SSH or git, or the scp-like SSH form.
+ * @return Host and path, or undefined for a local repository or another URL.
+ */
+export declare function parseRepositoryUrl(url: string): RepositoryLocation | undefined;
 /**
  * Failed git command.
  */

package/dist/git.js

@@ -9,6 +9,29 @@ import { spawn } from 'node:child_process';
 export function redactUrls(text) {
     return text.replace(/(\w+:\/\/)[^/@\s]+@/g, '$1***@');
 }
+/**
+ * Get the host and path of a remote repository URL, like github.com and
+ * owner/repo for https://github.com/owner/repo.git or
+ * git@github.com:owner/repo.git, for steps that call the API of the forge
+ * that hosts it. Credentials in the URL aren't part of either.
+ *
+ * @param url Repository URL: HTTP(S), SSH or git, or the scp-like SSH form.
+ * @return Host and path, or undefined for a local repository or another URL.
+ */
+export function parseRepositoryUrl(url) {
+    const scpLike = url.match(/^(?:[^@/:]+@)?([^/:\\]{2,}):(?!\/\/)(.+)$/);
+    const parsed = !scpLike && URL.canParse(url) ? new URL(url) : undefined;
+    const isRemote = ['http:', 'https:', 'ssh:', 'git:'].includes(parsed?.protocol ?? '');
+    const location = scpLike
+        ? { host: scpLike[1] ?? '', path: scpLike[2] ?? '' }
+        : { host: parsed?.host ?? '', path: parsed?.pathname ?? '' };
+    const path = location.path
+        .replace(/^\/+|\/+$/g, '')
+        .replace(/\.git$/, '');
+    return (scpLike || isRemote) && location.host && path
+        ? { host: location.host, path }
+        : undefined;
+}
 /**
  * Failed git command.
  */

package/dist/index.d.ts

@@ -9,7 +9,10 @@ export { DISTIGNORE_FILENAME, parseExclude, resolveFileSelection, loadFileRules,
 export { FILENAME_FORMAT, formatFilename } from './filename.ts';
 export { CHECKSUMS_EXTENSION, CHECKSUM_ALGORITHMS, hashFile, hashFiles, createChecksums, writeChecksums, readChecksums, parseChecksums, compareChecksums, verifyChecksums, } from './checksums.ts';
 export { HEADER_BYTES, PLUGIN_HEADERS, THEME_HEADERS, README_HEADERS, README_FILENAMES, parseFileHeaders, parseReadmeHeaders, readFileStart, findFileHeaderLine, findReadmeHeaderLine, findMainPluginFile, readPackageMeta, } from './package-meta.ts';
-export { SIGNATURE_EXTENSION, SIGNING_KEY_ENV, parseSigningKey, parsePublicKey, generateSigningKeyPair, getPublicKey, getFileDigest, signFile, writeSignature, verifyFileSignature, } from './signing.ts';
+export { DEFAULT_SIGNATURE_FORMAT, SIGNATURE_EXTENSION, SIGNATURE_FORMATS, SIGNING_KEY_ENV, parseSigningKey, parsePublicKey, generateSigningKeyPair, getPublicKey, getPublicKeys, getFileDigest, getSignaturePath, isSignatureFormat, signFile, writeSignature, verifyFileSignature, } from './signing.ts';
+export type { SignatureFormat, SignatureFormatHandler } from './signing.ts';
+export { MINISIGN_EXTENSION, createMinisignSignature, getMinisignPublicKey, parseMinisignPublicKey, verifyMinisignSignature, } from './minisign.ts';
+export { SSH_SIGNATURE_EXTENSION, SSH_SIGNATURE_NAMESPACE, createSshSignature, getSshPublicKey, parseSshPublicKey, verifySshSignature, } from './ssh-signature.ts';
 export { ZIP_MTIME, ZIP_FILE_MODE, createZip } from './zip.ts';
 export { isUrl, downloadFile } from './download.ts';
 export { readZipEntries, getZipEntryErrors, extractZip } from './unzip.ts';
@@ -20,10 +23,12 @@ export { defineConfig, packageJsonVersion, composerJsonVersion, wordpressPluginV
 export { Svn, SvnError, createSvnRunner, parseStatus, toSvnPath, } from './svn.ts';
 export { syncDirectory, copyFileIfChanged } from './sync.ts';
 export { ASSET_MIME_TYPES, SvnDeploy } from './svn-deploy.ts';
-export { GitError, createGitRunner, redactUrls } from './git.ts';
+export { GitError, createGitRunner, parseRepositoryUrl, redactUrls, } from './git.ts';
 export { GitDeploy, getDefaultToken, getGitAuthEnv, isValidRefName, resolveGitDeployOptions, } from './git-deploy.ts';
 export { getGitDeployInputFromArgs } from './commands/deploy-git.ts';
-export { getDeployPackages, getGitDeploys, getSvnDeploys, } from './package-deploy.ts';
+export { getDeployPackages, getGitDeploys, getPackageFiles, getSvnDeploys, } from './package-deploy.ts';
+export { zipPackage } from './package-zip.ts';
+export type { ZipPackageInput, ZipPackageResult } from './package-zip.ts';
 export type { PackageDeploy, PackageDeployFiles, PackageDeployOptions, PackageFileSelection, PackageDeployPlanItem, PackageDeployRelease, } from './package-deploy.ts';
 export type { PackageDeployOutcome } from './commands/package-deploys.ts';
 export type { CliIo, CommandResults } from './cli.ts';
@@ -51,5 +56,5 @@ export type { SvnCheckoutInput, SvnCommandInput, SvnCommandOutput, SvnCommitInpu
 export type { SyncDirectoryInput, SyncResult } from './sync.ts';
 export type { SummaryContext } from './summary.ts';
 export type { CheckoutPath, DeployResult } from './svn-deploy.ts';
-export type { GitCommandInput, GitCommandOutput, GitRunner } from './git.ts';
+export type { GitCommandInput, GitCommandOutput, GitRunner, RepositoryLocation, } from './git.ts';
 export type { GitDeployInput, GitDeployOptions, GitDeployResult, } from './git-deploy.ts';

package/dist/index.js

@@ -9,7 +9,9 @@ export { DISTIGNORE_FILENAME, parseExclude, resolveFileSelection, loadFileRules,
 export { FILENAME_FORMAT, formatFilename } from "./filename.js";
 export { CHECKSUMS_EXTENSION, CHECKSUM_ALGORITHMS, hashFile, hashFiles, createChecksums, writeChecksums, readChecksums, parseChecksums, compareChecksums, verifyChecksums, } from "./checksums.js";
 export { HEADER_BYTES, PLUGIN_HEADERS, THEME_HEADERS, README_HEADERS, README_FILENAMES, parseFileHeaders, parseReadmeHeaders, readFileStart, findFileHeaderLine, findReadmeHeaderLine, findMainPluginFile, readPackageMeta, } from "./package-meta.js";
-export { SIGNATURE_EXTENSION, SIGNING_KEY_ENV, parseSigningKey, parsePublicKey, generateSigningKeyPair, getPublicKey, getFileDigest, signFile, writeSignature, verifyFileSignature, } from "./signing.js";
+export { DEFAULT_SIGNATURE_FORMAT, SIGNATURE_EXTENSION, SIGNATURE_FORMATS, SIGNING_KEY_ENV, parseSigningKey, parsePublicKey, generateSigningKeyPair, getPublicKey, getPublicKeys, getFileDigest, getSignaturePath, isSignatureFormat, signFile, writeSignature, verifyFileSignature, } from "./signing.js";
+export { MINISIGN_EXTENSION, createMinisignSignature, getMinisignPublicKey, parseMinisignPublicKey, verifyMinisignSignature, } from "./minisign.js";
+export { SSH_SIGNATURE_EXTENSION, SSH_SIGNATURE_NAMESPACE, createSshSignature, getSshPublicKey, parseSshPublicKey, verifySshSignature, } from "./ssh-signature.js";
 export { ZIP_MTIME, ZIP_FILE_MODE, createZip } from "./zip.js";
 export { isUrl, downloadFile } from "./download.js";
 export { readZipEntries, getZipEntryErrors, extractZip } from "./unzip.js";
@@ -20,7 +22,8 @@ export { defineConfig, packageJsonVersion, composerJsonVersion, wordpressPluginV
 export { Svn, SvnError, createSvnRunner, parseStatus, toSvnPath, } from "./svn.js";
 export { syncDirectory, copyFileIfChanged } from "./sync.js";
 export { ASSET_MIME_TYPES, SvnDeploy } from "./svn-deploy.js";
-export { GitError, createGitRunner, redactUrls } from "./git.js";
+export { GitError, createGitRunner, parseRepositoryUrl, redactUrls, } from "./git.js";
 export { GitDeploy, getDefaultToken, getGitAuthEnv, isValidRefName, resolveGitDeployOptions, } from "./git-deploy.js";
 export { getGitDeployInputFromArgs } from "./commands/deploy-git.js";
-export { getDeployPackages, getGitDeploys, getSvnDeploys, } from "./package-deploy.js";
+export { getDeployPackages, getGitDeploys, getPackageFiles, getSvnDeploys, } from "./package-deploy.js";
+export { zipPackage } from "./package-zip.js";

package/dist/minisign.d.ts

@@ -0,0 +1,41 @@
+import type { KeyObject } from 'node:crypto';
+export declare const MINISIGN_EXTENSION = ".minisig";
+/**
+ * Get the minisign public key of a key, the base64 line that `minisign -P`
+ * takes and that the second line of a minisign .pub file holds.
+ *
+ * @param key Private or public key.
+ * @return Base64 minisign public key.
+ */
+export declare function getMinisignPublicKey(key: KeyObject): string;
+/**
+ * Get the raw public key from a minisign public key, the base64 line or the
+ * whole two-line .pub file.
+ *
+ * @param encoded Minisign public key.
+ * @return Public key bytes, or null when it isn't a minisign public key.
+ */
+export declare function parseMinisignPublicKey(encoded: string): Buffer | null;
+/**
+ * Create a minisign signature of a file: an Ed25519 signature of its
+ * BLAKE2b-512 digest, and a global signature that also covers the trusted
+ * comment with the signing time and file name.
+ *
+ * @param path       File path.
+ * @param privateKey Private key.
+ * @return Contents of the .minisig file.
+ */
+export declare function createMinisignSignature(path: string, privateKey: KeyObject): Promise<string>;
+/**
+ * Check a file against a minisign signature file, including the global
+ * signature of the trusted comment. Both the BLAKE2b-512 prehashed (ED)
+ * and the legacy (Ed) signatures of minisign are accepted. The key ID isn't
+ * compared, since it only tells minisign which key to use, so signatures of
+ * keys that minisign generated with a random ID are accepted too.
+ *
+ * @param path          File path.
+ * @param signaturePath Signature file path.
+ * @param publicKey     Public key.
+ * @return Whether the signature matches.
+ */
+export declare function verifyMinisignSignature(path: string, signaturePath: string, publicKey: KeyObject): Promise<boolean>;