@etree/cli 2.0.2 → 2.0.3

package/dist/lib/crypto.d.ts

@@ -1,23 +1,8 @@
-/**
- * Generate a new X25519 key pair.
- */
 export declare function generateKeys(): Promise<{
     private_key: string;
     public_key: string;
 }>;
-/**
- * Derive the public key from an existing private key.
- */
 export declare function derivePublicKey(privateKey: string): Promise<string>;
-/**
- * Encrypt a plaintext value using the recipient's public key (SealedBox).
- */
 export declare function encrypt(plaintext: string, publicKey: string): Promise<string>;
-/**
- * Decrypt a ciphertext using the recipient's private key (SealedBox).
- */
 export declare function decrypt(ciphertext: string, privateKey: string): Promise<string>;
-/**
- * Shut down the crypto engine process.
- */
 export declare function shutdown(): void;

package/dist/lib/crypto.js

@@ -1,173 +1,49 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateKeys = generateKeys;
 exports.derivePublicKey = derivePublicKey;
 exports.encrypt = encrypt;
 exports.decrypt = decrypt;
 exports.shutdown = shutdown;
-const child_process_1 = require("child_process");
-const path = __importStar(require("path"));
-const CRYPTO_ENGINE_PATH = path.resolve(__dirname, "../../../../packages/crypto/engine.py");
-let engineProcess = null;
-/**
- * Get or spawn the crypto engine Python process.
- */
-function getEngine() {
-    if (engineProcess && !engineProcess.killed) {
-        return engineProcess;
-    }
-    // Try venv python first, fall back to system python
-    const venvDir = path.resolve(__dirname, "../../../../packages/crypto/.venv");
-    const isWindows = process.platform === "win32";
-    // Potential Venv Paths
-    const potentialVenvPaths = isWindows
-        ? [
-            path.join(venvDir, "Scripts", "python.exe"),
-            path.join(venvDir, "bin", "python.exe"),
-        ]
-        : [path.join(venvDir, "bin", "python")];
-    let pythonCmd = isWindows ? "python" : "python3";
-    for (const venvPath of potentialVenvPaths) {
-        if (require("fs").existsSync(venvPath)) {
-            pythonCmd = venvPath;
-            break;
-        }
-    }
-    // If we haven't found a venv python, verify the system command exists
-    if (pythonCmd === "python" || pythonCmd === "python3") {
-        try {
-            // Use system python if it exists and works
-            require("child_process").execSync(`${pythonCmd} --version`, {
-                stdio: "ignore",
-            });
-        }
-        catch {
-            // If the preferred one fails, try the fallback
-            pythonCmd = pythonCmd === "python3" ? "python" : "python3";
-        }
-    }
-    engineProcess = (0, child_process_1.spawn)(pythonCmd, [CRYPTO_ENGINE_PATH], {
-        stdio: ["pipe", "pipe", "pipe"],
-        cwd: path.resolve(__dirname, "../../../../packages/crypto"),
-    });
-    engineProcess.on("exit", () => {
-        engineProcess = null;
-    });
-    return engineProcess;
-}
-/**
- * Send a command to the crypto engine and get the response.
- */
-function sendCommand(request) {
-    return new Promise((resolve, reject) => {
-        const engine = getEngine();
-        const onData = (data) => {
-            try {
-                const response = JSON.parse(data.toString().trim());
-                engine.stdout.removeListener("data", onData);
-                engine.stderr.removeListener("data", onError);
-                if (response.status === "error") {
-                    reject(new Error(response.message));
-                }
-                else {
-                    resolve(response);
-                }
-            }
-            catch (e) {
-                // partial data, wait for more
-            }
-        };
-        const onError = (data) => {
-            engine.stdout.removeListener("data", onData);
-            engine.stderr.removeListener("data", onError);
-            reject(new Error(`Crypto engine error: ${data.toString()}`));
-        };
-        engine.stdout.on("data", onData);
-        engine.stderr.on("data", onError);
-        engine.stdin.write(JSON.stringify(request) + "\n");
-    });
+const libsodium_wrappers_1 = __importDefault(require("libsodium-wrappers"));
+const buffer_1 = require("buffer");
+async function getSodium() {
+    await libsodium_wrappers_1.default.ready;
+    return libsodium_wrappers_1.default;
 }
-/**
- * Generate a new X25519 key pair.
- */
 async function generateKeys() {
-    const result = await sendCommand({ action: "generate_keys" });
+    const sodium = await getSodium();
+    const keypair = sodium.crypto_box_keypair();
     return {
-        private_key: result.private_key,
-        public_key: result.public_key,
+        private_key: buffer_1.Buffer.from(keypair.privateKey).toString("base64"),
+        public_key: buffer_1.Buffer.from(keypair.publicKey).toString("base64"),
     };
 }
-/**
- * Derive the public key from an existing private key.
- */
 async function derivePublicKey(privateKey) {
-    const result = await sendCommand({
-        action: "derive_public_key",
-        data: { private_key: privateKey },
-    });
-    return result.public_key;
+    const sodium = await getSodium();
+    const sk = buffer_1.Buffer.from(privateKey, "base64");
+    const pk = sodium.crypto_scalarmult_base(sk);
+    return buffer_1.Buffer.from(pk).toString("base64");
 }
-/**
- * Encrypt a plaintext value using the recipient's public key (SealedBox).
- */
 async function encrypt(plaintext, publicKey) {
-    const result = await sendCommand({
-        action: "encrypt",
-        data: { plaintext, public_key: publicKey },
-    });
-    return result.ciphertext;
+    const sodium = await getSodium();
+    const pk = buffer_1.Buffer.from(publicKey, "base64");
+    const encrypted = sodium.crypto_box_seal(sodium.from_string(plaintext), pk);
+    return buffer_1.Buffer.from(encrypted).toString("base64");
 }
-/**
- * Decrypt a ciphertext using the recipient's private key (SealedBox).
- */
 async function decrypt(ciphertext, privateKey) {
-    const result = await sendCommand({
-        action: "decrypt",
-        data: { ciphertext, private_key: privateKey },
-    });
-    return result.plaintext;
+    const sodium = await getSodium();
+    const ct = buffer_1.Buffer.from(ciphertext, "base64");
+    const sk = buffer_1.Buffer.from(privateKey, "base64");
+    // Need to compute public key corresponding to private key for unsealing
+    const pk = sodium.crypto_scalarmult_base(sk);
+    const decrypted = sodium.crypto_box_seal_open(ct, pk, sk);
+    return sodium.to_string(decrypted);
 }
-/**
- * Shut down the crypto engine process.
- */
 function shutdown() {
-    if (engineProcess && !engineProcess.killed) {
-        engineProcess.stdin.end();
-        engineProcess.kill();
-        engineProcess = null;
-    }
+    // Graceful stub for backward compatibility
 }
 //# sourceMappingURL=crypto.js.map

package/dist/lib/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/lib/crypto.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiHA,oCASC;AAKD,0CAMC;AAKD,0BASC;AAKD,0BASC;AAKD,4BAMC;AA5KD,iDAAsE;AACtE,2CAA6B;AAE7B,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CACrC,SAAS,EACT,uCAAuC,CACxC,CAAC;AAEF,IAAI,aAAa,GAA0C,IAAI,CAAC;AAYhE;;GAEG;AACH,SAAS,SAAS;IAChB,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC3C,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAE/C,uBAAuB;IACvB,MAAM,kBAAkB,GAAG,SAAS;QAClC,CAAC,CAAC;YACE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC;SACxC;QACH,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1C,IAAI,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,SAAS,GAAG,QAAQ,CAAC;YACrB,MAAM;QACR,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,2CAA2C;YAC3C,OAAO,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,YAAY,EAAE;gBAC1D,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,aAAa,GAAG,IAAA,qBAAK,EAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,EAAE;QACrD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,6BAA6B,CAAC;KAC5D,CAAC,CAAC;IAEH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QAC5B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,OAAsB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;YAC9B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE9C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,8BAA8B;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAElC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,YAAY;IAIhC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,EAAE,mBAAmB;QAC3B,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;KAClC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAC3B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE;KAC3C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC;AAC3B,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE;KAC9C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,SAAS,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,QAAQ;IACtB,IAAI,aAAa,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC3C,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,aAAa,CAAC,IAAI,EAAE,CAAC;QACrB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/lib/crypto.ts"],"names":[],"mappings":";;;;;AAQA,oCAUC;AAED,0CAKC;AAED,0BAQC;AAED,0BAaC;AAED,4BAEC;AAtDD,4EAAyC;AACzC,mCAAgC;AAEhC,KAAK,UAAU,SAAS;IACtB,MAAM,4BAAO,CAAC,KAAK,CAAC;IACpB,OAAO,4BAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,YAAY;IAIhC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;IAC5C,OAAO;QACL,WAAW,EAAE,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/D,UAAU,EAAE,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9D,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAEM,KAAK,UAAU,OAAO,CAC3B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,eAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAEM,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,eAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE7C,wEAAwE;IACxE,MAAM,EAAE,GAAG,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,QAAQ;IACtB,2CAA2C;AAC7C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@etree/cli",
-  "version": "2.0.2",
+  "version": "2.0.3",
   "private": false,
   "files": [
     "dist"
@@ -20,12 +20,14 @@
     "commander": "^13.1.0",
     "conf": "^10.2.0",
     "inquirer": "^8.2.6",
+    "libsodium-wrappers": "^0.8.2",
     "ora": "^5.4.1"
   },
   "devDependencies": {
     "@envtree/eslint-config": "workspace:*",
     "@envtree/typescript-config": "workspace:*",
     "@types/inquirer": "^8.2.10",
+    "@types/libsodium-wrappers": "^0.8.2",
     "@types/node": "^22.15.2",
     "tsx": "^4.19.4",
     "typescript": "5.9.2"