nodedist

type ChecksumVerifier struct {
	// Keyring is the set of trusted Node release public keys. A nil or empty
	// keyring causes VerifyAndParse to fail closed (every signature is
	// untrusted).
	Keyring openpgp.EntityList
}

type Checksums map[string]string

type Error struct {
	Kind    ErrorKind
	Message string
	Cause   error
}

type ErrorKind string

type Fetcher struct {
	// HTTP downloads the archive and the clearsigned SHASUMS256.txt.asc.
	// Required.
	HTTP cstore.Fetcher

	// Keyring is the set of trusted Node release public keys the checksums
	// signature is verified against. Required and must be non-empty;
	// verification fails closed otherwise.
	Keyring openpgp.EntityList

	// Root is the cache subtree root for unpacked Node trees. The store lays
	// out entries as `<Root>/sha256/<verified-hash>/`. Required. Callers
	// typically pass `filepath.Join(cstore.DefaultRoot(), "node")` so the
	// Node cache never collides with the connector store's `connectors/`
	// subtree.
	Root string
}

type NodeDist struct {
	// Version is the resolved version (no leading "v").
	Version string

	// EntryDir is the absolute path to the cached unpacked tree
	// (`<Root>/sha256/<hash>/`). On Unix the layout has `bin/node`; on
	// Windows `node.exe` at the root.
	EntryDir string

	// SHA256 is the verified hex SHA-256 of the source archive — the cache
	// key. Equal to the entry's SHASUMS256.txt value.
	SHA256 string

	// NodeBinary is the absolute path to the node executable inside
	// EntryDir.
	NodeBinary string

	// FromCache is true when the request was served from the
	// content-addressed cache without re-downloading the archive.
	FromCache bool
}

type Request struct {
	// Version is the Node version, with or without a leading "v" (e.g.
	// "24.2.0" or "v24.2.0"). Required.
	Version string

	// Target is the platform to fetch for. When zero-valued, the running
	// host's GOOS/GOARCH is used.
	Target Target
}

type Target struct {
	GOOS   string
	GOARCH string
}

type URLs struct {
	// Archive is the platform-specific distribution archive.
	Archive string
	// Checksums is the SHASUMS256.txt covering every artifact for the
	// version. Resolved for reference; verification uses the clearsigned
	// Signature below, which embeds these checksums.
	Checksums string
	// Signature is the clearsigned SHASUMS256.txt.asc — a PGP "SIGNED MESSAGE"
	// that embeds the checksum lines inside the signed body (not a detached
	// signature over a separate file).
	Signature string
}