@zincapp/znvault-cli 2.1.0

package/dist/lib/prompts.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Prompt for username
+ */
+export declare function promptUsername(message?: string): Promise<string>;
+/**
+ * Prompt for password
+ */
+export declare function promptPassword(message?: string): Promise<string>;
+/**
+ * Prompt for TOTP code
+ */
+export declare function promptTotp(message?: string): Promise<string | undefined>;
+/**
+ * Prompt for confirmation
+ */
+export declare function promptConfirm(message: string, defaultValue?: boolean): Promise<boolean>;
+/**
+ * Prompt for text input
+ */
+export declare function promptInput(message: string, defaultValue?: string): Promise<string>;
+/**
+ * Prompt for selection
+ */
+export declare function promptSelect<T extends string>(message: string, choices: {
+    name: string;
+    value: T;
+}[]): Promise<T>;
+/**
+ * Prompt for new password with confirmation
+ */
+export declare function promptNewPassword(message?: string): Promise<string>;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/lib/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,wBAAsB,cAAc,CAAC,OAAO,SAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ1E;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,OAAO,SAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1E;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,OAAO,SAA2B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAShG;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAK3F;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKzF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,SAAS,MAAM,EACjD,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,EAAE,GACpC,OAAO,CAAC,CAAC,CAAC,CAKZ;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,SAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBjF"}

package/dist/lib/prompts.js

@@ -0,0 +1,96 @@
+import { input, password, confirm, select } from '@inquirer/prompts';
+/**
+ * Prompt for username
+ */
+export async function promptUsername(message = 'Username') {
+    return input({
+        message,
+        validate: (value) => {
+            if (!value.trim())
+                return 'Username is required';
+            return true;
+        },
+    });
+}
+/**
+ * Prompt for password
+ */
+export async function promptPassword(message = 'Password') {
+    return password({
+        message,
+        mask: '*',
+        validate: (value) => {
+            if (!value)
+                return 'Password is required';
+            return true;
+        },
+    });
+}
+/**
+ * Prompt for TOTP code
+ */
+export async function promptTotp(message = 'TOTP Code (if enabled)') {
+    const code = await input({
+        message,
+        validate: (value) => {
+            if (value && !/^\d{6}$/.test(value))
+                return 'TOTP code must be 6 digits';
+            return true;
+        },
+    });
+    return code || undefined;
+}
+/**
+ * Prompt for confirmation
+ */
+export async function promptConfirm(message, defaultValue = false) {
+    return confirm({
+        message,
+        default: defaultValue,
+    });
+}
+/**
+ * Prompt for text input
+ */
+export async function promptInput(message, defaultValue) {
+    return input({
+        message,
+        default: defaultValue,
+    });
+}
+/**
+ * Prompt for selection
+ */
+export async function promptSelect(message, choices) {
+    return select({
+        message,
+        choices,
+    });
+}
+/**
+ * Prompt for new password with confirmation
+ */
+export async function promptNewPassword(message = 'New Password') {
+    const newPass = await password({
+        message,
+        mask: '*',
+        validate: (value) => {
+            if (!value)
+                return 'Password is required';
+            if (value.length < 8)
+                return 'Password must be at least 8 characters';
+            return true;
+        },
+    });
+    const confirmPass = await password({
+        message: 'Confirm Password',
+        mask: '*',
+        validate: (value) => {
+            if (value !== newPass)
+                return 'Passwords do not match';
+            return true;
+        },
+    });
+    return confirmPass;
+}
+//# sourceMappingURL=prompts.js.map

package/dist/lib/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/lib/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAErE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAO,GAAG,UAAU;IACvD,OAAO,KAAK,CAAC;QACX,OAAO;QACP,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,OAAO,sBAAsB,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAO,GAAG,UAAU;IACvD,OAAO,QAAQ,CAAC;QACd,OAAO;QACP,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,sBAAsB,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAO,GAAG,wBAAwB;IACjE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC;QACvB,OAAO;QACP,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,4BAA4B,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IACH,OAAO,IAAI,IAAI,SAAS,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,YAAY,GAAG,KAAK;IACvE,OAAO,OAAO,CAAC;QACb,OAAO;QACP,OAAO,EAAE,YAAY;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,YAAqB;IACtE,OAAO,KAAK,CAAC;QACX,OAAO;QACP,OAAO,EAAE,YAAY;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,OAAqC;IAErC,OAAO,MAAM,CAAC;QACZ,OAAO;QACP,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAO,GAAG,cAAc;IAC9D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC;QAC7B,OAAO;QACP,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,sBAAsB,CAAC;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,wCAAwC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC;QACjC,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,KAAK,KAAK,OAAO;gBAAE,OAAO,wBAAwB,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/services/auto-update-daemon.d.ts

@@ -0,0 +1,48 @@
+import type { UpdateConfig } from '../types/update.js';
+export declare class AutoUpdateDaemon {
+    private config;
+    private checker;
+    private ws;
+    private checkTimer;
+    private reconnectTimer;
+    private isShuttingDown;
+    private pendingUpdate;
+    constructor(config: UpdateConfig);
+    /**
+     * Log with timestamp
+     */
+    private log;
+    /**
+     * Log error with timestamp
+     */
+    private logError;
+    /**
+     * Start the daemon
+     */
+    start(): Promise<void>;
+    /**
+     * Check for updates and install if appropriate
+     */
+    private checkForUpdates;
+    /**
+     * Try to install pending update if within maintenance window
+     */
+    private tryInstallPendingUpdate;
+    /**
+     * Install the pending update
+     */
+    private installUpdate;
+    /**
+     * Connect to vault WebSocket for real-time notifications
+     */
+    private connectWebSocket;
+    /**
+     * Schedule WebSocket reconnection
+     */
+    private scheduleReconnect;
+    /**
+     * Shutdown the daemon
+     */
+    private shutdown;
+}
+//# sourceMappingURL=auto-update-daemon.d.ts.map

package/dist/services/auto-update-daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-update-daemon.d.ts","sourceRoot":"","sources":["../../src/services/auto-update-daemon.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAqC,MAAM,oBAAoB,CAAC;AA2D1F,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAyC;IACxD,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,aAAa,CAAmD;gBAE5D,MAAM,EAAE,YAAY;IAKhC;;OAEG;IACH,OAAO,CAAC,GAAG;IAIX;;OAEG;IACH,OAAO,CAAC,QAAQ;IAIhB;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B5B;;OAEG;YACW,eAAe;IAgC7B;;OAEG;YACW,uBAAuB;IAiBrC;;OAEG;YACW,aAAa;IAkC3B;;OAEG;YACW,gBAAgB;IA4D9B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAgBzB;;OAEG;IACH,OAAO,CAAC,QAAQ;CA+BjB"}

package/dist/services/auto-update-daemon.js

@@ -0,0 +1,296 @@
+// Path: znvault-cli/src/services/auto-update-daemon.ts
+/**
+ * Auto-Update Daemon
+ *
+ * Background service that periodically checks for updates
+ * and installs them during configured maintenance windows.
+ * Supports WebSocket notifications from vault for real-time updates.
+ */
+import WebSocket from 'ws';
+import { createUpdateChecker } from './update-checker.js';
+import { createUpdateInstaller } from './update-installer.js';
+import * as mode from '../lib/mode.js';
+/**
+ * Get current version from package.json
+ */
+function getCurrentVersion() {
+    // This should match the implementation in update.ts
+    // In a real scenario, we'd share this utility
+    try {
+        const pkg = require('../../package.json');
+        return pkg.version || 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+/**
+ * Check if current time is within a maintenance window
+ */
+function isWithinMaintenanceWindow(window) {
+    const now = new Date();
+    // Parse window times
+    const [startHour, startMin] = window.start.split(':').map(Number);
+    const [endHour, endMin] = window.end.split(':').map(Number);
+    // Get current time in the specified timezone
+    let currentHour;
+    let currentMin;
+    try {
+        const formatter = new Intl.DateTimeFormat('en-US', {
+            timeZone: window.timezone,
+            hour: 'numeric',
+            minute: 'numeric',
+            hour12: false,
+        });
+        const parts = formatter.formatToParts(now);
+        currentHour = parseInt(parts.find(p => p.type === 'hour')?.value || '0', 10);
+        currentMin = parseInt(parts.find(p => p.type === 'minute')?.value || '0', 10);
+    }
+    catch {
+        // Fallback to local time
+        currentHour = now.getHours();
+        currentMin = now.getMinutes();
+    }
+    const currentTime = currentHour * 60 + currentMin;
+    const startTime = startHour * 60 + startMin;
+    const endTime = endHour * 60 + endMin;
+    // Handle windows that span midnight
+    if (endTime < startTime) {
+        return currentTime >= startTime || currentTime < endTime;
+    }
+    return currentTime >= startTime && currentTime < endTime;
+}
+export class AutoUpdateDaemon {
+    config;
+    checker;
+    ws = null;
+    checkTimer = null;
+    reconnectTimer = null;
+    isShuttingDown = false;
+    pendingUpdate = null;
+    constructor(config) {
+        this.config = config;
+        this.checker = createUpdateChecker(config.channel);
+    }
+    /**
+     * Log with timestamp
+     */
+    log(message) {
+        console.log(`[${new Date().toISOString()}] [AutoUpdate] ${message}`);
+    }
+    /**
+     * Log error with timestamp
+     */
+    logError(message) {
+        console.error(`[${new Date().toISOString()}] [AutoUpdate] ERROR: ${message}`);
+    }
+    /**
+     * Start the daemon
+     */
+    async start() {
+        this.log('Starting auto-update daemon...');
+        this.log(`Channel: ${this.config.channel}`);
+        this.log(`Check interval: ${this.config.checkInterval / 60000} minutes`);
+        if (this.config.maintenanceWindow) {
+            this.log(`Maintenance window: ${this.config.maintenanceWindow.start}-${this.config.maintenanceWindow.end} ${this.config.maintenanceWindow.timezone}`);
+        }
+        else {
+            this.log('No maintenance window configured - updates allowed anytime');
+        }
+        // Initial check
+        await this.checkForUpdates();
+        // Start periodic checks
+        this.checkTimer = setInterval(() => {
+            this.checkForUpdates().catch(err => {
+                this.logError(`Check failed: ${err.message}`);
+            });
+        }, this.config.checkInterval);
+        // Connect to vault WebSocket if URL configured
+        if (this.config.vaultUrl) {
+            await this.connectWebSocket();
+        }
+        // Handle shutdown signals
+        process.on('SIGINT', () => this.shutdown());
+        process.on('SIGTERM', () => this.shutdown());
+    }
+    /**
+     * Check for updates and install if appropriate
+     */
+    async checkForUpdates() {
+        this.log('Checking for updates...');
+        try {
+            const currentVersion = getCurrentVersion();
+            const result = await this.checker.checkForUpdates(currentVersion);
+            if (result.error) {
+                this.logError(result.error);
+                return;
+            }
+            if (!result.updateAvailable) {
+                this.log(`Up to date (${currentVersion})`);
+                return;
+            }
+            this.log(`Update available: ${currentVersion} -> ${result.latestVersion}`);
+            // Store pending update
+            this.pendingUpdate = {
+                version: result.latestVersion,
+                artifact: result.artifact,
+            };
+            // Check if we can install now
+            await this.tryInstallPendingUpdate();
+        }
+        catch (err) {
+            this.logError(`Check failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /**
+     * Try to install pending update if within maintenance window
+     */
+    async tryInstallPendingUpdate() {
+        if (!this.pendingUpdate) {
+            return;
+        }
+        // Check maintenance window
+        if (this.config.maintenanceWindow) {
+            if (!isWithinMaintenanceWindow(this.config.maintenanceWindow)) {
+                this.log('Outside maintenance window - update deferred');
+                return;
+            }
+            this.log('Within maintenance window - proceeding with update');
+        }
+        await this.installUpdate();
+    }
+    /**
+     * Install the pending update
+     */
+    async installUpdate() {
+        if (!this.pendingUpdate) {
+            return;
+        }
+        const { version, artifact } = this.pendingUpdate;
+        this.log(`Installing update to version ${version}...`);
+        const progressHandler = (progress) => {
+            this.log(`${progress.stage}: ${progress.message}`);
+        };
+        try {
+            const installer = createUpdateInstaller(this.config.installPath, progressHandler);
+            // Check permissions
+            const { canInstall, reason } = installer.canInstall();
+            if (!canInstall) {
+                this.logError(`Cannot install: ${reason}`);
+                return;
+            }
+            await installer.install(artifact, version);
+            this.log(`Successfully updated to version ${version}`);
+            this.pendingUpdate = null;
+            // Save last known version
+            this.checker.saveLastKnownVersion(version);
+        }
+        catch (err) {
+            this.logError(`Installation failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /**
+     * Connect to vault WebSocket for real-time notifications
+     */
+    async connectWebSocket() {
+        if (!this.config.vaultUrl || this.isShuttingDown) {
+            return;
+        }
+        try {
+            const wsUrl = this.config.vaultUrl
+                .replace(/^https?:/, 'wss:')
+                .replace(/\/$/, '') + '/v1/ws/agent-updates';
+            this.log(`Connecting to ${wsUrl}...`);
+            // Get auth headers if available
+            let headers = {};
+            try {
+                headers = await mode.getAuthHeaders();
+            }
+            catch {
+                // No auth available
+            }
+            this.ws = new WebSocket(wsUrl, {
+                headers,
+                rejectUnauthorized: false, // Allow self-signed certs
+            });
+            this.ws.on('open', () => {
+                this.log('Connected to vault WebSocket');
+            });
+            this.ws.on('message', async (data) => {
+                try {
+                    const msg = JSON.parse(data.toString());
+                    if (msg.type === 'event' && msg.data?.event === 'agent.update.available') {
+                        this.log(`Received update notification: ${msg.data.version}`);
+                        // Trigger immediate check
+                        await this.checkForUpdates();
+                    }
+                    else if (msg.type === 'pong') {
+                        // Heartbeat response
+                    }
+                }
+                catch (err) {
+                    this.logError(`Failed to parse message: ${err}`);
+                }
+            });
+            this.ws.on('close', () => {
+                this.log('WebSocket disconnected');
+                this.ws = null;
+                this.scheduleReconnect();
+            });
+            this.ws.on('error', (err) => {
+                this.logError(`WebSocket error: ${err.message}`);
+            });
+        }
+        catch (err) {
+            this.logError(`Failed to connect: ${err instanceof Error ? err.message : String(err)}`);
+            this.scheduleReconnect();
+        }
+    }
+    /**
+     * Schedule WebSocket reconnection
+     */
+    scheduleReconnect() {
+        if (this.isShuttingDown || !this.config.vaultUrl) {
+            return;
+        }
+        if (this.reconnectTimer) {
+            return; // Already scheduled
+        }
+        this.log('Reconnecting in 30 seconds...');
+        this.reconnectTimer = setTimeout(() => {
+            this.reconnectTimer = null;
+            this.connectWebSocket();
+        }, 30000);
+    }
+    /**
+     * Shutdown the daemon
+     */
+    shutdown() {
+        if (this.isShuttingDown) {
+            return;
+        }
+        this.isShuttingDown = true;
+        this.log('Shutting down...');
+        // Clear timers
+        if (this.checkTimer) {
+            clearInterval(this.checkTimer);
+            this.checkTimer = null;
+        }
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = null;
+        }
+        // Close WebSocket
+        if (this.ws) {
+            try {
+                this.ws.close(1000, 'Daemon shutdown');
+            }
+            catch {
+                // Ignore
+            }
+            this.ws = null;
+        }
+        process.exit(0);
+    }
+}
+//# sourceMappingURL=auto-update-daemon.js.map

package/dist/services/auto-update-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-update-daemon.js","sourceRoot":"","sources":["../../src/services/auto-update-daemon.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD;;;;;;GAMG;AAEH,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AAEvC;;GAEG;AACH,SAAS,iBAAiB;IACxB,oDAAoD;IACpD,8CAA8C;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,MAAyB;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,qBAAqB;IACrB,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE5D,6CAA6C;IAC7C,IAAI,WAAmB,CAAC;IACxB,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3C,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7E,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;QACzB,WAAW,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,GAAG,EAAE,GAAG,UAAU,CAAC;IAClD,MAAM,SAAS,GAAG,SAAS,GAAG,EAAE,GAAG,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC;IAEtC,oCAAoC;IACpC,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;QACxB,OAAO,WAAW,IAAI,SAAS,IAAI,WAAW,GAAG,OAAO,CAAC;IAC3D,CAAC;IAED,OAAO,WAAW,IAAI,SAAS,IAAI,WAAW,GAAG,OAAO,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAe;IACrB,OAAO,CAAyC;IAChD,EAAE,GAAqB,IAAI,CAAC;IAC5B,UAAU,GAA0C,IAAI,CAAC;IACzD,cAAc,GAAyC,IAAI,CAAC;IAC5D,cAAc,GAAG,KAAK,CAAC;IACvB,aAAa,GAA8C,IAAI,CAAC;IAExE,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACK,GAAG,CAAC,OAAe;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,OAAe;QAC9B,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,yBAAyB,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,UAAU,CAAC,CAAC;QAEzE,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QACzE,CAAC;QAED,gBAAgB;QAChB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAE7B,wBAAwB;QACxB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACjC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE9B,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAED,0BAA0B;QAC1B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAElE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,eAAe,cAAc,GAAG,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,qBAAqB,cAAc,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YAE3E,uBAAuB;YACvB,IAAI,CAAC,aAAa,GAAG;gBACnB,OAAO,EAAE,MAAM,CAAC,aAAa;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;YAEF,8BAA8B;YAC9B,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,uBAAuB;QACnC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,gCAAgC,OAAO,KAAK,CAAC,CAAC;QAEvD,MAAM,eAAe,GAAG,CAAC,QAAwB,EAAE,EAAE;YACnD,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAElF,oBAAoB;YACpB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACtD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,IAAI,CAAC,QAAQ,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE3C,IAAI,CAAC,GAAG,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAE1B,0BAA0B;YAC1B,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC/B,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC;iBAC3B,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,sBAAsB,CAAC;YAE/C,IAAI,CAAC,GAAG,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC;YAEtC,gCAAgC;YAChC,IAAI,OAAO,GAA2B,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;YAED,IAAI,CAAC,EAAE,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE;gBAC7B,OAAO;gBACP,kBAAkB,EAAE,KAAK,EAAE,0BAA0B;aACtD,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,IAAI,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACnC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAExC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,wBAAwB,EAAE,CAAC;wBACzE,IAAI,CAAC,GAAG,CAAC,iCAAiC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC9D,0BAA0B;wBAC1B,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC/B,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC/B,qBAAqB;oBACvB,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,QAAQ,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACnC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC1B,IAAI,CAAC,QAAQ,CAAC,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,oBAAoB;QAC9B,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,QAAQ;QACd,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAE7B,eAAe;QACf,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;CACF"}

package/dist/services/signature-verifier.d.ts

@@ -0,0 +1,38 @@
+export declare class SignatureVerifier {
+    private publicKeyArmored;
+    private publicKeyFetched;
+    /**
+     * Verify SHA256 checksum of a file
+     */
+    verifyChecksum(filePath: string, expectedSha256: string): boolean;
+    /**
+     * Calculate SHA256 checksum of a file
+     */
+    calculateChecksum(filePath: string): string;
+    /**
+     * Fetch the public key from S3
+     */
+    private fetchPublicKey;
+    /**
+     * Get the public key for verification
+     * Tries to fetch from S3, falls back to embedded key
+     */
+    private getPublicKey;
+    /**
+     * Verify GPG signature of a file
+     *
+     * @param filePath - Path to the file to verify
+     * @param signatureBase64 - Base64-encoded detached signature
+     * @returns true if signature is valid
+     */
+    verifySignature(filePath: string, signatureBase64: string): Promise<boolean>;
+    /**
+     * Verify both checksum and signature
+     */
+    verifyArtifact(filePath: string, expectedSha256: string, signatureBase64: string): Promise<{
+        valid: boolean;
+        error?: string;
+    }>;
+}
+export declare function getSignatureVerifier(): SignatureVerifier;
+//# sourceMappingURL=signature-verifier.d.ts.map

package/dist/services/signature-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-verifier.d.ts","sourceRoot":"","sources":["../../src/services/signature-verifier.ts"],"names":[],"mappings":"AAwFA,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,gBAAgB,CAAS;IAEjC;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO;IAMjE;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAK3C;;OAEG;YACW,cAAc;IAyB5B;;;OAGG;YACW,YAAY;IAc1B;;;;;;OAMG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2ClF;;OAEG;IACG,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAc/C;AAKD,wBAAgB,oBAAoB,IAAI,iBAAiB,CAKxD"}