@gbuerk/gcrypt 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+interface Prompt {
+    ask(question: string): Promise<string>;
+    confirm(question: string, defaultValue?: boolean): Promise<boolean>;
+    close(): void;
+}
+export declare function findEncryptedFiles(rootDirectory?: string): Promise<string[]>;
+export declare function createProgram(providedPrompt?: Prompt): Command;
+export {};

package/dist/index.js

@@ -0,0 +1,285 @@
+#!/usr/bin/env node
+import { realpathSync } from 'node:fs';
+import { access, mkdir, readdir, readFile, writeFile } from 'node:fs/promises';
+import { createInterface } from 'node:readline/promises';
+import { stdin, stdout } from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join, relative, sep } from 'node:path';
+import { Command } from 'commander';
+import inquirer from 'inquirer';
+import { createEncryptedDocument, decryptEncryptedDocument, editEncryptedDocument, executeDotenv, grantMaintainer, grantRecipient, maintainerSetup, revokeMaintainer, revokeRecipient, setup, verifyEncryptedDocument, } from './commands.js';
+import { parseEncryptedDocument } from './document.js';
+function terminalPrompt() {
+    const readline = createInterface({ input: stdin, output: stdout });
+    return {
+        ask: (question) => readline.question(question),
+        async confirm(question, defaultValue = false) {
+            const answer = (await readline.question(`${question} ${defaultValue ? '[Y/n]' : '[y/N]'} `)).trim();
+            return answer === '' ? defaultValue : /^(y|yes)$/iu.test(answer);
+        },
+        close: () => readline.close(),
+    };
+}
+async function selectedFile(file, getPrompt) {
+    if (file)
+        return file;
+    const files = await findEncryptedFiles();
+    if (files.length > 0 && stdin.isTTY) {
+        const manual = '__gcrypt_manual_path__';
+        const { selected } = await inquirer.prompt([
+            {
+                type: 'select',
+                name: 'selected',
+                message: 'Select an encrypted file:',
+                pageSize: 12,
+                choices: [
+                    ...files.map((candidate) => ({ name: candidate, value: candidate })),
+                    new inquirer.Separator(),
+                    { name: 'Enter a path manually', value: manual },
+                ],
+            },
+        ]);
+        if (selected !== manual)
+            return selected;
+    }
+    const value = (await getPrompt().ask('Encrypted file path: ')).trim();
+    if (!value)
+        throw new Error('An encrypted file path is required');
+    if (!value.endsWith('.enc'))
+        throw new Error('Encrypted files must end in .enc');
+    return value;
+}
+async function selectedMemberId(filePath, message, eligible) {
+    const source = await readFile(filePath, 'utf8');
+    const format = source.trimStart().startsWith('{') ? 'json' : 'dotenv';
+    const members = parseEncryptedDocument(source, format).metadata.members.filter(eligible);
+    if (members.length === 0)
+        throw new Error('No eligible members are listed');
+    const { memberId } = await inquirer.prompt([
+        {
+            type: 'select',
+            name: 'memberId',
+            message,
+            pageSize: 12,
+            choices: members.map((member) => ({ name: `${member.id} (${member.recipient})`, value: member.id })),
+        },
+    ]);
+    return memberId;
+}
+export async function findEncryptedFiles(rootDirectory = process.cwd()) {
+    const files = [];
+    const ignoredDirectories = new Set(['.git', 'node_modules']);
+    async function visit(directory) {
+        const entries = await readdir(directory, { withFileTypes: true });
+        await Promise.all(entries.map(async (entry) => {
+            const filePath = join(directory, entry.name);
+            if (entry.isDirectory() && !ignoredDirectories.has(entry.name))
+                await visit(filePath);
+            else if (entry.isFile() && entry.name.endsWith('.enc'))
+                files.push(relative(rootDirectory, filePath));
+        }));
+    }
+    await visit(rootDirectory);
+    return files.sort((left, right) => left.localeCompare(right));
+}
+function reportPrivateKey(result, identity) {
+    stdout.write(`${result.created ? 'Created' : 'Using'} private ${identity} (never share) at ${result.path}\n`);
+}
+async function runSetup() {
+    const result = await setup();
+    reportPrivateKey(result.age, 'access key');
+    reportPrivateKey(result.signing, 'signing key');
+    stdout.write(`Share this member setup code with a maintainer:\n${result.memberSetupCode}\n`);
+    return result;
+}
+async function runMaintainerSetup() {
+    reportPrivateKey(await maintainerSetup(), 'signing key');
+}
+async function initialMemberId(prompt) {
+    const memberId = (await prompt.ask('Initial maintainer ID: ')).trim();
+    if (!memberId || /\s/u.test(memberId))
+        throw new Error('Initial maintainer ID must be a non-empty string without whitespace');
+    return memberId;
+}
+async function initializeProject(file, getPrompt) {
+    const packagePath = join(process.cwd(), 'package.json');
+    let packageJson;
+    try {
+        packageJson = JSON.parse(await readFile(packagePath, 'utf8'));
+    }
+    catch {
+        throw new Error('init requires package.json in the current directory');
+    }
+    const target = file ?? '.env.dev.enc';
+    if (!target.endsWith('.enc'))
+        throw new Error('Encrypted files must end in .enc');
+    try {
+        await access(target);
+        throw new Error(`Refusing to overwrite existing encrypted file: ${target}`);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    const scripts = { ...packageJson.scripts };
+    if (scripts.dev) {
+        const prompt = getPrompt();
+        if (!await prompt.confirm(`Move the current dev command to dev:app exactly as written?\n${scripts.dev}`, true))
+            throw new Error('init cancelled');
+        if (scripts['dev:app'] && !await prompt.confirm('Replace existing dev:app script?'))
+            throw new Error('init cancelled');
+        scripts['dev:app'] = scripts.dev;
+    }
+    else {
+        const prompt = getPrompt();
+        const command = (await prompt.ask('Project development command: ')).trim();
+        if (!command)
+            throw new Error('A project development command is required');
+        scripts['dev:app'] = command;
+    }
+    scripts.dev = 'node scripts/dev.mjs';
+    for (const [name, command] of Object.entries({ 'dev:setup': 'gcrypt setup', secrets: 'gcrypt edit', 'secrets:grant': 'gcrypt grant', 'secrets:revoke': 'gcrypt revoke', 'secrets:maintainer:grant': 'gcrypt maintainer grant', 'secrets:maintainer:revoke': 'gcrypt maintainer revoke', 'secrets:init': 'gcrypt secrets init', 'secrets:verify': 'gcrypt verify' })) {
+        if (!scripts[name])
+            scripts[name] = command;
+        else if (scripts[name] !== command && await getPrompt().confirm(`Replace existing ${name} script?`))
+            scripts[name] = command;
+    }
+    packageJson.scripts = scripts;
+    await mkdir(join(process.cwd(), 'scripts'), { recursive: true });
+    await writeFile(join(process.cwd(), 'scripts', 'dev.mjs'), `import { spawn } from 'node:child_process'\n\nconst child = spawn('gcrypt', ['exec', ${JSON.stringify(target)}, '--', 'npm', 'run', 'dev:app'], { stdio: 'inherit' })\nchild.on('exit', (code) => process.exit(code ?? 1))\n`);
+    await writeFile(packagePath, `${JSON.stringify(packageJson, undefined, 2)}\n`);
+    if (!packageJson.dependencies?.['@gbuerk/gcrypt'] && !packageJson.devDependencies?.['@gbuerk/gcrypt']) {
+        await installGcrypt(localPackageSource());
+    }
+    const identities = await runSetup();
+    const memberId = await initialMemberId(getPrompt());
+    const examplePath = '.env.example';
+    try {
+        await access(examplePath);
+    }
+    catch {
+        await writeFile(examplePath, '');
+    }
+    await createEncryptedDocument(target, '', {
+        members: [{ id: memberId, recipient: identities.age.recipient, signingKey: identities.signing.publicKey, isMaintainer: true }],
+    });
+    stdout.write(`Created ${target}. Run npm run secrets to add values.\n`);
+}
+async function installGcrypt(source) {
+    const packageManager = await exists('pnpm-lock.yaml') ? 'pnpm' : await exists('yarn.lock') ? 'yarn' : 'npm';
+    const packageReference = source ?? '@gbuerk/gcrypt';
+    const arguments_ = packageManager === 'yarn' ? ['add', '--dev', packageReference] : ['install', '--save-dev', packageReference];
+    const status = await new Promise((resolve, reject) => {
+        const child = spawn(packageManager, arguments_, { stdio: 'inherit' });
+        child.once('error', reject);
+        child.once('exit', resolve);
+    });
+    if (status !== 0)
+        throw new Error(`${packageManager} failed to install @gbuerk/gcrypt`);
+}
+async function exists(path) { try {
+    await access(path);
+    return true;
+}
+catch {
+    return false;
+} }
+function localPackageSource() {
+    const packageRoot = join(dirname(fileURLToPath(import.meta.url)), '..');
+    return packageRoot.includes(`${sep}node_modules${sep}`) ? undefined : packageRoot;
+}
+export function createProgram(providedPrompt) {
+    let prompt = providedPrompt;
+    const getPrompt = () => {
+        prompt ??= terminalPrompt();
+        return prompt;
+    };
+    const program = new Command();
+    program.name('gcrypt').description('Safely share app settings with your team').version('0.1.0').exitOverride();
+    program.hook('postAction', () => { prompt?.close(); });
+    program.command('setup').description('Set up your local access and signing keys').action(async () => { await runSetup(); });
+    const maintainer = program.command('maintainer').description('Manage who can approve changes');
+    maintainer.command('setup').action(() => runMaintainerSetup());
+    maintainer.command('grant [file]').action(async (file) => {
+        const selected = await selectedFile(file, getPrompt);
+        await grantMaintainer(selected, {
+            prompt: {
+                memberId: () => selectedMemberId(selected, 'Select a member who can approve changes:', (member) => !member.isMaintainer),
+            },
+        });
+    });
+    maintainer.command('revoke [file]').action(async (file) => {
+        const selected = await selectedFile(file, getPrompt);
+        await revokeMaintainer(selected, { prompt: { memberId: () => selectedMemberId(selected, 'Select a member who can no longer approve changes:', (member) => member.isMaintainer) } });
+    });
+    program.command('grant [file]').action(async (file) => {
+        const selected = await selectedFile(file, getPrompt);
+        const activePrompt = getPrompt();
+        await grantRecipient(selected, { prompt: { memberId: () => activePrompt.ask('Member ID: '), memberSetupCode: () => activePrompt.ask('Member setup code: ') } });
+    });
+    program.command('revoke [file]').action(async (file) => {
+        const selected = await selectedFile(file, getPrompt);
+        await revokeRecipient(selected, { prompt: { memberId: () => selectedMemberId(selected, 'Select a member to revoke:', () => true) } });
+    });
+    program.command('verify [file]').action(async (file) => {
+        await verifyEncryptedDocument(await selectedFile(file, getPrompt));
+        stdout.write('This file is valid and has maintainer approval.\n');
+    });
+    program.command('decrypt [file]').action(async (file) => {
+        stdout.write(await decryptEncryptedDocument(await selectedFile(file, getPrompt)));
+    });
+    program.command('edit [file]').action(async (file) => {
+        const selected = await selectedFile(file, getPrompt);
+        const editor = process.env.VISUAL || process.env.EDITOR;
+        if (!editor)
+            throw new Error('Set VISUAL or EDITOR to edit secrets');
+        await editEncryptedDocument(selected, editor);
+    });
+    program.command('exec <file> [command...]').allowUnknownOption().action(async (file, command) => {
+        const status = await executeDotenv(file, command, undefined);
+        process.exitCode = status;
+    });
+    program.command('init [file]').action((file) => initializeProject(file, getPrompt));
+    const secrets = program.command('secrets').description('Manage encrypted secrets');
+    secrets.command('init [file]').action(async (file) => {
+        const target = file ?? '.env.dev.enc';
+        try {
+            await access(target);
+            throw new Error(`Refusing to overwrite existing encrypted file: ${target}`);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        const identities = await runSetup();
+        await createEncryptedDocument(target, '', {
+            members: [{ id: await initialMemberId(getPrompt()), recipient: identities.age.recipient, signingKey: identities.signing.publicKey, isMaintainer: true }],
+        });
+        stdout.write(`Created ${target}. Run npm run secrets to add values.\n`);
+    });
+    return program;
+}
+async function main() {
+    try {
+        await createProgram().parseAsync(process.argv);
+    }
+    catch (error) {
+        stderr(error);
+        process.exitCode = 1;
+    }
+}
+function stderr(error) { process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`); }
+function invokedAsCli() {
+    if (!process.argv[1])
+        return false;
+    try {
+        return realpathSync(process.argv[1]) === fileURLToPath(import.meta.url);
+    }
+    catch {
+        return false;
+    }
+}
+if (invokedAsCli())
+    void main();
+import { spawn } from 'node:child_process';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,QAAQ,MAAM,UAAU,CAAA;AAC/B,OAAO,EACH,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,KAAK,EACL,uBAAuB,GAC1B,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,sBAAsB,EAAuB,MAAM,eAAe,CAAA;AAQ3E,SAAS,cAAc;IACnB,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAClE,OAAO;QACH,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,GAAG,KAAK;YACxC,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACnG,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpE,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE;KAChC,CAAA;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAwB,EAAE,SAAuB;IACzE,IAAI,IAAI;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAA;IACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,wBAAwB,CAAA;QACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;YAC7D;gBACI,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,2BAA2B;gBACpC,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE;oBACL,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;oBACpE,IAAI,QAAQ,CAAC,SAAS,EAAE;oBACxB,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE;iBACnD;aACJ;SACJ,CAAC,CAAA;QACF,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAA;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACrE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACjE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAChF,OAAO,KAAK,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,OAAe,EAAE,QAA6C;IAC5G,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;IACrE,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAuB;QAC7D;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,UAAU;YAChB,OAAO;YACP,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;SACvG;KACJ,CAAC,CAAA;IACF,OAAO,QAAQ,CAAA;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE;IAClE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;IAE5D,KAAK,UAAU,KAAK,CAAC,SAAiB;QAClC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAA;iBAChF,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzG,CAAC,CAAC,CAAC,CAAA;IACP,CAAC;IAED,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0C,EAAE,QAAgB;IAClF,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,YAAY,QAAQ,qBAAqB,MAAM,CAAC,IAAI,IAAI,CAAC,CAAA;AACjH,CAAC;AAED,KAAK,UAAU,QAAQ;IACnB,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAA;IAC5B,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IAC1C,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAC/C,MAAM,CAAC,KAAK,CAAC,oDAAoD,MAAM,CAAC,eAAe,IAAI,CAAC,CAAA;IAC5F,OAAO,MAAM,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC7B,gBAAgB,CAAC,MAAM,eAAe,EAAE,EAAE,aAAa,CAAC,CAAA;AAC5D,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc;IACzC,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACrE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IAC7H,OAAO,QAAQ,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAwB,EAAE,SAAuB;IAC9E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAA;IACvD,IAAI,WAAkI,CAAA;IACtI,IAAI,CAAC;QAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAA0H,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAAC,CAAC;IAC/Q,MAAM,MAAM,GAAG,IAAI,IAAI,cAAc,CAAA;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACjF,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,EAAE,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAAC,CAAC;IAC/L,MAAM,OAAO,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAA;IAC1C,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;QAC1B,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,gEAAgE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;QACjJ,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAA;QACtH,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,CAAA;IACpC,CAAC;SAAM,CAAC;QACJ,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;QAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1E,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;QAC1E,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAA;IAChC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,sBAAsB,CAAA;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,cAAc,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QAClW,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAA;aACtC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,MAAM,SAAS,EAAE,CAAC,OAAO,CAAC,oBAAoB,IAAI,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAA;IAChI,CAAC;IACD,WAAW,CAAC,OAAO,GAAG,OAAO,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,wFAAwF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gHAAgH,CAAC,CAAA;IAC1R,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAC9E,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpG,MAAM,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAC7C,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,QAAQ,EAAE,CAAA;IACnC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,CAAA;IACnD,MAAM,WAAW,GAAG,cAAc,CAAA;IAClC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IAAC,CAAC;IAC5E,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE;QACtC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;KACjI,CAAC,CAAA;IACF,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,wCAAwC,CAAC,CAAA;AAC3E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAe;IACxC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;IAC3G,MAAM,gBAAgB,GAAG,MAAM,IAAI,gBAAgB,CAAA;IACnD,MAAM,UAAU,GAAG,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAA;IAC/H,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;QACrE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,mCAAmC,CAAC,CAAA;AAC3F,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY,IAAsB,IAAI,CAAC;IAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,IAAI,CAAA;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,KAAK,CAAA;AAAC,CAAC,CAAC,CAAC;AAExH,SAAS,kBAAkB;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACvE,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,cAAuB;IACjD,IAAI,MAAM,GAAG,cAAc,CAAA;IAC3B,MAAM,SAAS,GAAG,GAAW,EAAE;QAC3B,MAAM,KAAK,cAAc,EAAE,CAAA;QAC3B,OAAO,MAAM,CAAA;IACjB,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;IAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAA;IAC9G,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IACrD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA;IAC1H,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAA;IAC9F,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAC9D,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,eAAe,CAAC,QAAQ,EAAE;YAC5B,MAAM,EAAE;gBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,0CAA0C,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;aAC3H;SACJ,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;IACF,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,oDAAoD,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAA;IACvL,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,YAAY,GAAG,SAAS,EAAE,CAAA;QAChC,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAA;IACnK,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,4BAA4B,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IACzI,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACnD,MAAM,uBAAuB,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;QAClE,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACpD,MAAM,CAAC,KAAK,CAAC,MAAM,wBAAwB,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAA;QACvD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACpE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC5F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;QAC5D,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAA;IAC7B,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAA;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAA;IAClF,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,IAAI,cAAc,CAAA;QACrC,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAA;QAAC,CAAC;QAC/L,MAAM,UAAU,GAAG,MAAM,QAAQ,EAAE,CAAA;QACnC,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,EAAE;YACtC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SAC3J,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,wCAAwC,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACf,IAAI,CAAC;QAAC,MAAM,aAAa,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,CAAA;QACb,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;IACxB,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA,CAAC,CAAC;AAE7H,SAAS,YAAY;IACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAA;IAChB,CAAC;AACL,CAAC;AAED,IAAI,YAAY,EAAE;IAAE,KAAK,IAAI,EAAE,CAAA;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/key-storage.d.ts

@@ -0,0 +1,6 @@
+export declare function defaultAgeIdentityPath(homeDirectory?: string): string;
+export declare function defaultSigningIdentityPath(homeDirectory?: string): string;
+export declare function writeDefaultAgeIdentity(identity: string, homeDirectory?: string): Promise<string>;
+export declare function readDefaultAgeIdentity(homeDirectory?: string): Promise<string>;
+export declare function writeDefaultSigningIdentity(identity: string, homeDirectory?: string): Promise<string>;
+export declare function readDefaultSigningIdentity(homeDirectory?: string): Promise<string>;

package/dist/key-storage.js

@@ -0,0 +1,41 @@
+import { chmod, mkdir, readFile, stat, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const configDirectoryName = '.config/gcrypt';
+export function defaultAgeIdentityPath(homeDirectory = homedir()) {
+    return join(homeDirectory, configDirectoryName, 'keys', 'default.txt');
+}
+export function defaultSigningIdentityPath(homeDirectory = homedir()) {
+    return join(homeDirectory, configDirectoryName, 'signing', 'default.txt');
+}
+export async function writeDefaultAgeIdentity(identity, homeDirectory = homedir()) {
+    return writePrivateKey(defaultAgeIdentityPath(homeDirectory), identity);
+}
+export async function readDefaultAgeIdentity(homeDirectory = homedir()) {
+    return readPrivateKey(defaultAgeIdentityPath(homeDirectory));
+}
+export async function writeDefaultSigningIdentity(identity, homeDirectory = homedir()) {
+    return writePrivateKey(defaultSigningIdentityPath(homeDirectory), identity);
+}
+export async function readDefaultSigningIdentity(homeDirectory = homedir()) {
+    return readPrivateKey(defaultSigningIdentityPath(homeDirectory));
+}
+async function writePrivateKey(filePath, value) {
+    const configDirectory = dirname(dirname(filePath));
+    const directory = dirname(filePath);
+    await mkdir(configDirectory, { mode: 0o700, recursive: true });
+    await chmod(configDirectory, 0o700);
+    await mkdir(directory, { mode: 0o700, recursive: true });
+    await chmod(directory, 0o700);
+    await writeFile(filePath, `${value}\n`, { encoding: 'utf8', mode: 0o600 });
+    await chmod(filePath, 0o600);
+    return filePath;
+}
+async function readPrivateKey(filePath) {
+    const fileStatus = await stat(filePath);
+    if ((fileStatus.mode & 0o077) !== 0) {
+        throw new Error(`Refusing group- or world-readable private key file: ${filePath}`);
+    }
+    return (await readFile(filePath, 'utf8')).trim();
+}
+//# sourceMappingURL=key-storage.js.map

package/dist/key-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-storage.js","sourceRoot":"","sources":["../src/key-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC,MAAM,mBAAmB,GAAG,gBAAgB,CAAA;AAE5C,MAAM,UAAU,sBAAsB,CAAC,aAAa,GAAG,OAAO,EAAE;IAC5D,OAAO,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,aAAa,GAAG,OAAO,EAAE;IAChE,OAAO,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAgB,EAAE,aAAa,GAAG,OAAO,EAAE;IACrF,OAAO,eAAe,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,aAAa,GAAG,OAAO,EAAE;IAClE,OAAO,cAAc,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAgB,EAAE,aAAa,GAAG,OAAO,EAAE;IACzF,OAAO,eAAe,CAAC,0BAA0B,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,aAAa,GAAG,OAAO,EAAE;IACtE,OAAO,cAAc,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC,CAAA;AACpE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAa;IAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,KAAK,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9D,MAAM,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IACnC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC7B,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1E,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC5B,OAAO,QAAQ,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,QAAQ,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AACpD,CAAC"}

package/dist/member-setup-code.d.ts

@@ -0,0 +1,6 @@
+export interface MemberSetupCode {
+    recipient: string;
+    signingKey: string;
+}
+export declare function encodeMemberSetupCode({ recipient, signingKey }: MemberSetupCode): string;
+export declare function decodeMemberSetupCode(value: string): MemberSetupCode;

package/dist/member-setup-code.js

@@ -0,0 +1,39 @@
+import { validateAgeRecipient, validateSigningPublicKey } from './crypto.js';
+const prefix = 'gcrypt-member-v1.';
+export function encodeMemberSetupCode({ recipient, signingKey }) {
+    validateAgeRecipient(recipient);
+    validateSigningPublicKey(signingKey);
+    return `${prefix}${Buffer.from(JSON.stringify({ recipient, signingKey })).toString('base64url')}`;
+}
+export function decodeMemberSetupCode(value) {
+    try {
+        const code = value.trim();
+        if (!code.startsWith(prefix))
+            throw new Error();
+        const encoded = code.slice(prefix.length);
+        if (!/^[A-Za-z0-9_-]+$/u.test(encoded) || Buffer.from(encoded, 'base64url').toString('base64url') !== encoded)
+            throw new Error();
+        const parsed = JSON.parse(Buffer.from(encoded, 'base64url').toString('utf8'));
+        if (!isMemberSetupCode(parsed))
+            throw new Error();
+        validateAgeRecipient(parsed.recipient);
+        validateSigningPublicKey(parsed.signingKey);
+        if (encodeMemberSetupCode(parsed) !== code)
+            throw new Error();
+        return parsed;
+    }
+    catch {
+        throw new Error('Invalid member setup code');
+    }
+}
+function isMemberSetupCode(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const record = value;
+    const entries = Object.entries(record);
+    return entries.length === 2
+        && typeof record.recipient === 'string'
+        && typeof record.signingKey === 'string'
+        && entries.every(([key]) => key === 'recipient' || key === 'signingKey');
+}
+//# sourceMappingURL=member-setup-code.js.map

package/dist/member-setup-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-setup-code.js","sourceRoot":"","sources":["../src/member-setup-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAE5E,MAAM,MAAM,GAAG,mBAAmB,CAAA;AAOlC,MAAM,UAAU,qBAAqB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAmB;IAC5E,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC/B,wBAAwB,CAAC,UAAU,CAAC,CAAA;IACpC,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAA;AACrG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAC/C,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QAChI,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACtF,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QACjD,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACtC,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC3C,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QAC7D,OAAO,MAAM,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAChD,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;WACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;WACpC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;WACrC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,YAAY,CAAC,CAAA;AAChF,CAAC"}

package/dist/node-types.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/node-types.js

@@ -0,0 +1,3 @@
+export {};
+/// <reference types="node" />
+//# sourceMappingURL=node-types.js.map

package/dist/node-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-types.js","sourceRoot":"","sources":["../src/node-types.ts"],"names":[],"mappings":";AAAA,8BAA8B"}

package/package.json

@@ -0,0 +1,59 @@
+{
+    "name": "@gbuerk/gcrypt",
+    "version": "0.1.0",
+    "description": "Git-friendly encrypted dotenv and JSON configuration",
+    "type": "module",
+    "keywords": [
+        "secrets",
+        "encryption",
+        "dotenv",
+        "configuration",
+        "age",
+        "git"
+    ],
+    "license": "MIT",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/gbuerk/gcrypt.git"
+    },
+    "homepage": "https://github.com/gbuerk/gcrypt#readme",
+    "bugs": {
+        "url": "https://github.com/gbuerk/gcrypt/issues"
+    },
+    "publishConfig": {
+        "access": "public"
+    },
+    "bin": {
+        "gcrypt": "dist/index.js"
+    },
+    "files": [
+        "dist"
+    ],
+    "engines": {
+        "node": "^22.13.0 || >=23.5.0"
+    },
+    "scripts": {
+        "build": "tsc -p tsconfig.json",
+        "dev": "tsx src/index.ts",
+        "lint": "eslint .",
+        "test": "vitest run",
+        "test:watch": "vitest",
+        "prepack": "npm run build",
+        "prepublishOnly": "npm run lint && npm test"
+    },
+    "dependencies": {
+        "age-encryption": "^0.3.1",
+        "commander": "^15.0.0",
+        "dotenv": "^17.2.3",
+        "inquirer": "^14.0.2"
+    },
+    "devDependencies": {
+        "@types/node": "^25.9.3",
+        "@typescript-eslint/eslint-plugin": "^8.59.0",
+        "@typescript-eslint/parser": "^8.59.0",
+        "eslint": "^9.39.4",
+        "tsx": "^4.21.0",
+        "typescript": "^6.0.3",
+        "vitest": "^4.1.0"
+    }
+}