gm-pantry 0.2.0 → 0.3.0

package/dist/verify.d.ts

@@ -1,3 +1,4 @@
+import { type HashOptions } from "./hash.ts";
 import type { ArchiveFile } from "./types.ts";
 export type VerifyResult = {
     ok: true;
@@ -9,6 +10,6 @@ export type VerifyResult = {
 };
 /**
  * Checks bytes against a `file` entry: size first, then sha256. A consumer discards the archive on `ok: false`.
- * shortcut: a stream is buffered whole (Web Crypto has no incremental digest), upgrade when archives outgrow memory.
+ * A Blob or stream is hashed chunk by chunk, never buffered whole.
  */
-export declare function verifyArchive(data: Uint8Array | ArrayBuffer | ReadableStream<Uint8Array>, file: Pick<ArchiveFile, "sha256" | "size">): Promise<VerifyResult>;
+export declare function verifyArchive(data: Uint8Array | ArrayBuffer | Blob | ReadableStream<Uint8Array>, file: Pick<ArchiveFile, "sha256" | "size">, options?: HashOptions): Promise<VerifyResult>;

package/dist/verify.js

@@ -1,15 +1,21 @@
-// SPEC.md §6: the sha256 check on a downloaded archive. Web Crypto only, so it runs in a browser.
-const hex = (buf) => [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, "0")).join("");
+// SPEC.md §6: the sha256 check on a downloaded archive. Runs in a browser.
+import { hashStream, sha256Hex } from "./hash.js";
 /**
  * Checks bytes against a `file` entry: size first, then sha256. A consumer discards the archive on `ok: false`.
- * shortcut: a stream is buffered whole (Web Crypto has no incremental digest), upgrade when archives outgrow memory.
+ * A Blob or stream is hashed chunk by chunk, never buffered whole.
  */
-export async function verifyArchive(data, file) {
-    const bytes = data instanceof ReadableStream
-        ? new Uint8Array(await new Response(data).arrayBuffer())
-        : new Uint8Array(data);
-    if (bytes.byteLength !== file.size)
-        return { ok: false, reason: "size", expected: file.size, actual: bytes.byteLength };
-    const actual = hex(await crypto.subtle.digest("SHA-256", bytes));
-    return actual === file.sha256 ? { ok: true } : { ok: false, reason: "sha256", expected: file.sha256, actual };
+export async function verifyArchive(data, file, options) {
+    let actual;
+    if (data instanceof ReadableStream || data instanceof Blob) {
+        actual = await hashStream(data instanceof Blob ? data.stream() : data, options);
+    }
+    else {
+        const bytes = new Uint8Array(data);
+        if (bytes.byteLength !== file.size)
+            return { ok: false, reason: "size", expected: file.size, actual: bytes.byteLength };
+        actual = { sha256: await sha256Hex(bytes), size: bytes.byteLength };
+    }
+    if (actual.size !== file.size)
+        return { ok: false, reason: "size", expected: file.size, actual: actual.size };
+    return actual.sha256 === file.sha256 ? { ok: true } : { ok: false, reason: "sha256", expected: file.sha256, actual: actual.sha256 };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-pantry",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Game repositories: static directories of game archives with a repo.json, plus a parser, validator and CLI.",
   "keywords": [
     "gamemaker",
@@ -26,6 +26,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./s3": {
+      "types": "./dist/s3.d.ts",
+      "default": "./dist/s3.js"
     }
   },
   "bin": {
@@ -40,6 +44,10 @@
     "test": "node --test test/*.test.ts scripts/*.test.mjs",
     "prepublishOnly": "npm run build"
   },
+  "dependencies": {
+    "aws4fetch": "^1.0.20",
+    "hash-wasm": "^4.13.0"
+  },
   "devDependencies": {
     "@types/node": "^24.0.0",
     "typescript": "^5.9.0"