@hugoalh/github-sodium 5.0.3 → 6.0.0

package/LICENSE.md

@@ -1,6 +1,6 @@
 # MIT License
 
-Copyright © 2020\~2024 hugoalh Studio
+Copyright © 2020\~2026 HUGOALH
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

package/README.md

@@ -2,162 +2,89 @@
 
 [**⚖️** MIT](./LICENSE.md)
 
-[![GitHub: hugoalh-studio/github-sodium-es](https://img.shields.io/github/v/release/hugoalh-studio/github-sodium-es?label=hugoalh-studio/github-sodium-es&labelColor=181717&logo=github&logoColor=ffffff&sort=semver&style=flat "GitHub: hugoalh-studio/github-sodium-es")](https://github.com/hugoalh-studio/github-sodium-es)
-[![JSR: @hugoalh/github-sodium](https://img.shields.io/jsr/v/@hugoalh/github-sodium?label=JSR%20@hugoalh/github-sodium&labelColor=F7DF1E&logoColor=000000&style=flat "JSR: @hugoalh/github-sodium")](https://jsr.io/@hugoalh/github-sodium)
-[![NPM: @hugoalh/github-sodium](https://img.shields.io/npm/v/@hugoalh/github-sodium?label=@hugoalh/github-sodium&labelColor=CB3837&logo=npm&logoColor=ffffff&style=flat "NPM: @hugoalh/github-sodium")](https://www.npmjs.com/package/@hugoalh/github-sodium)
-
-An ES (JavaScript & TypeScript) module to provide an easier sodium for GitHub secrets.
-
-This project is based on "[libsodium.js](https://github.com/jedisct1/libsodium.js)" with optimization for GitHub secrets.
-
-## 🎯 Target
-
-- Bun ^ v1.0.0
-- Cloudflare Workers
-- Deno >= v1.34.0 / >= v1.41.1 (For JSR Only)
-  > **🛡️ Require Permission**
-  >
-  > *N/A*
-- NodeJS >= v16.13.0
-
-## 🔰 Usage
-
-### Via JSR With `node_modules`
-
-> **🎯 Supported Target**
->
-> - Bun
-> - Cloudflare Workers
-> - NodeJS
-
-1. Install via:
-    - Bun
-      ```sh
-      bunx jsr add @hugoalh/github-sodium[@${Tag}]
-      ```
-    - NPM
-      ```sh
-      npx jsr add @hugoalh/github-sodium[@${Tag}]
-      ```
-    - PNPM
-      ```sh
-      pnpm dlx jsr add @hugoalh/github-sodium[@${Tag}]
-      ```
-    - Yarn
-      ```sh
-      yarn dlx jsr add @hugoalh/github-sodium[@${Tag}]
-      ```
-2. Import at the script:
-    ```ts
-    import ... from "@hugoalh/github-sodium";
-    ```
-
-> **ℹ️ Note**
->
-> - Although it is recommended to import the entire module, it is also able to import part of the module with sub path if available, please visit [file `jsr.jsonc`](./jsr.jsonc) property `exports` for available sub paths.
-> - It is recommended to import the module with tag for immutability.
-
-### Via JSR With Specifier
-
-> **🎯 Supported Target**
->
-> - Deno
-
-1. Import at the script:
-    ```ts
-    import ... from "jsr:@hugoalh/github-sodium[@${Tag}]";
-    ```
-
-> **ℹ️ Note**
->
-> - Although it is recommended to import the entire module, it is also able to import part of the module with sub path if available, please visit [file `jsr.jsonc`](./jsr.jsonc) property `exports` for available sub paths.
-> - It is recommended to import the module with tag for immutability.
-
-### Via NPM With `node_modules`
-
-> **🎯 Supported Target**
->
-> - Cloudflare Workers
-> - NodeJS
-
-1. Install via:
-    - NPM
-      ```sh
-      npm install @hugoalh/github-sodium[@${Tag}]
-      ```
-    - PNPM
-      ```sh
-      pnpm add @hugoalh/github-sodium[@${Tag}]
-      ```
-    - Yarn
-      ```sh
-      yarn add @hugoalh/github-sodium[@${Tag}]
-      ```
-2. Import at the script:
-    ```ts
-    import ... from "@hugoalh/github-sodium";
-    ```
-
-> **ℹ️ Note**
->
-> - Although it is recommended to import the entire module, it is also able to import part of the module with sub path if available, please visit [file `jsr.jsonc`](./jsr.jsonc) property `exports` for available sub paths.
-> - It is recommended to import the module with tag for immutability.
-
-### Via NPM With Specifier
-
-> **🎯 Supported Target**
->
-> - Bun
-> - Deno
-
-1. Import at the script:
-    ```ts
-    import ... from "npm:@hugoalh/github-sodium[@${Tag}]";
-    ```
-
-> **ℹ️ Note**
->
-> - Although it is recommended to import the entire module, it is also able to import part of the module with sub path if available, please visit [file `jsr.jsonc`](./jsr.jsonc) property `exports` for available sub paths.
-> - It is recommended to import the module with tag for immutability.
-
-### Via Remote Import
-
-> **🎯 Supported Target**
->
-> - Deno
-
-1. Import at the script:
-    ```ts
-    /* Via GitHub Raw (Require Tag) */
-    import ... from "https://raw.githubusercontent.com/hugoalh-studio/github-sodium-es/${Tag}/mod.ts";
-    ```
-
-> **ℹ️ Note**
->
-> - Although it is recommended to import the entire module with the main path `mod.ts`, it is also able to import part of the module with sub path if available, but do not import if:
->
->   - it's file path has an underscore prefix (e.g.: `_foo.ts`, `_util/bar.ts`), or
->   - it is a benchmark or test file (e.g.: `foo.bench.ts`, `foo.test.ts`), or
->   - it's symbol has an underscore prefix (e.g.: `export function _baz() {}`).
->
->   These elements are not considered part of the public API, thus no stability is guaranteed for them.
-> - Although there have 3rd party services which provide enhanced, equal, or similar methods/ways to remote import the module, beware these services maybe inject unrelated elements and thus affect the security.
-
-## 🧩 API
+🔗
+[DistBoard @hugoalh](https://hugoalh.github.io/distboard/github_sodium_ecmascript)
+● [GitHub](https://github.com/hugoalh/github-sodium-es)
+● [JSR](https://jsr.io/@hugoalh/github-sodium)
+● [NPM](https://www.npmjs.com/package/@hugoalh/github-sodium)
+
+An ECMAScript module to provide an easier and simplified method for encrypt GitHub secrets.
+
+## 🌟 Features
+
+- Support multiple implementations:
+  - **LibSodium:** Default; Recommended by GitHub; Bad compatibility with bundler or compiler.
+  - **TweetSodium:** Originally created by GitHub but deprecated and unmaintained ([Repository](https://github.com/github/tweetsodium)), currently maintain here; Good compatibility with bundler or compiler.
+
+## 🎯 Runtime Targets
+
+Any runtime which support ECMAScript should able to use this; These runtimes are officially supported:
+
+- **[Bun](https://bun.sh/)** >= v1.1.0
+- **[Deno](https://deno.land/)** >= v2.1.0
+- **[NodeJS](https://nodejs.org/)** >= v20.9.0
+
+## 🛡️ Runtime Permissions
+
+This does not request any runtime permission.
+
+## #️⃣ Sources & Entrypoints
+
+- GitHub Raw
+  ```
+  https://raw.githubusercontent.com/hugoalh/github-sodium-es/{Tag}/mod.ts
+  ```
+- JSR
+  ```
+  jsr:@hugoalh/github-sodium[@{Tag}]
+  ```
+- NPM
+  ```
+  npm:@hugoalh/github-sodium[@{Tag}]
+  ```
+
+| **Name** | **Path** | **Description** |
+|:--|:--|:--|
+| `.` | `./mod.ts` | Default (LibSodium). |
+| `./cli` | N/A | CLI for default (LibSodium). |
+| `./libsodium` | `./libsodium.ts` | LibSodium. |
+| `./libsodium/cli` | `./libsodium/cli.ts` | CLI for LibSodium. |
+| `./tweetsodium` | `./tweetsodium.ts` | TweetSodium. |
+| `./tweetsodium/cli` | `./tweetsodium/cli.ts` | CLI for TweetSodium. |
+
+> [!NOTE]
+> - Different runtimes have vary support for the sources and entrypoints, visit the runtime documentation for more information.
+> - It is recommended to include tag for immutability.
+> - These are not part of the public APIs hence should not be used:
+>   - Benchmark/Test file (e.g.: `example.bench.ts`, `example.test.ts`).
+>   - Entrypoint name or path include any underscore prefix (e.g.: `_example.ts`, `foo/_example.ts`).
+>   - Identifier/Namespace/Symbol include any underscore prefix (e.g.: `_example`, `Foo._example`).
+
+## 🧩 APIs
 
 - ```ts
   class GitHubSodiumSealer {
-    constructor(publicKey: string): GitHubSodiumSealer;
+    constructor(publicKey: string);
     encrypt(value: string): string;
-    static seal(publicKey: string, value: string): string;
   }
   ```
-- ```ts
-  function seal(publicKey: string, value: string): string;
-  ```
 
-## ✍️ Example
+> [!NOTE]
+> - For the full or prettier documentation, can visit via:
+>   - [Deno CLI `deno doc`](https://docs.deno.com/runtime/reference/cli/doc/)
+>   - [JSR](https://jsr.io/@hugoalh/github-sodium)
+
+## 🧩 CLIs
+
+```powershell
+ghs {PublicKey} {SecretValue}
+```
+
+## ✍️ Examples
 
 - ```ts
   new GitHubSodiumSealer("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234").encrypt("plain-text-secret");
   ```
+- ```powershell
+  ghs '2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234' 'plain-text-secret'
+  ```

package/_dnt.polyfills.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Based on [import-meta-ponyfill](https://github.com/gaubee/import-meta-ponyfill),
+ * but instead of using npm to install additional dependencies,
+ * this approach manually consolidates cjs/mjs/d.ts into a single file.
+ *
+ * Note that this code might be imported multiple times
+ * (for example, both dnt.test.polyfills.ts and dnt.polyfills.ts contain this code;
+ *  or Node.js might dynamically clear the cache and then force a require).
+ * Therefore, it's important to avoid redundant writes to global objects.
+ * Additionally, consider that commonjs is used alongside esm,
+ * so the two ponyfill functions are stored independently in two separate global objects.
+ */
+import { createRequire } from "node:module";
+import { type URL } from "node:url";
+declare global {
+    interface ImportMeta {
+        /** A string representation of the fully qualified module URL. When the
+         * module is loaded locally, the value will be a file URL (e.g.
+         * `file:///path/module.ts`).
+         *
+         * You can also parse the string as a URL to determine more information about
+         * how the current module was loaded. For example to determine if a module was
+         * local or not:
+         *
+         * ```ts
+         * const url = new URL(import.meta.url);
+         * if (url.protocol === "file:") {
+         *   console.log("this module was loaded locally");
+         * }
+         * ```
+         */
+        url: string;
+        /**
+         * A function that returns resolved specifier as if it would be imported
+         * using `import(specifier)`.
+         *
+         * ```ts
+         * console.log(import.meta.resolve("./foo.js"));
+         * // file:///dev/foo.js
+         * ```
+         *
+         * @param specifier The module specifier to resolve relative to `parent`.
+         * @param parent The absolute parent module URL to resolve from.
+         * @returns The absolute (`file:`) URL string for the resolved module.
+         */
+        resolve(specifier: string, parent?: string | URL | undefined): string;
+        /** A flag that indicates if the current module is the main module that was
+         * called when starting the program under Deno.
+         *
+         * ```ts
+         * if (import.meta.main) {
+         *   // this was loaded as the main module, maybe do some bootstrapping
+         * }
+         * ```
+         */
+        main: boolean;
+        /** The absolute path of the current module.
+         *
+         * This property is only provided for local modules (ie. using `file://` URLs).
+         *
+         * Example:
+         * ```
+         * // Unix
+         * console.log(import.meta.filename); // /home/alice/my_module.ts
+         *
+         * // Windows
+         * console.log(import.meta.filename); // C:\alice\my_module.ts
+         * ```
+         */
+        filename: string;
+        /** The absolute path of the directory containing the current module.
+         *
+         * This property is only provided for local modules (ie. using `file://` URLs).
+         *
+         * * Example:
+         * ```
+         * // Unix
+         * console.log(import.meta.dirname); // /home/alice
+         *
+         * // Windows
+         * console.log(import.meta.dirname); // C:\alice
+         * ```
+         */
+        dirname: string;
+    }
+}
+type NodeRequest = ReturnType<typeof createRequire>;
+type NodeModule = NonNullable<NodeRequest["main"]>;
+interface ImportMetaPonyfillCommonjs {
+    (require: NodeRequest, module: NodeModule): ImportMeta;
+}
+interface ImportMetaPonyfillEsmodule {
+    (importMeta: ImportMeta): ImportMeta;
+}
+interface ImportMetaPonyfill extends ImportMetaPonyfillCommonjs, ImportMetaPonyfillEsmodule {
+}
+export declare let import_meta_ponyfill_commonjs: ImportMetaPonyfillCommonjs;
+export declare let import_meta_ponyfill_esmodule: ImportMetaPonyfillEsmodule;
+export declare let import_meta_ponyfill: ImportMetaPonyfill;
+export {};
+//# sourceMappingURL=_dnt.polyfills.d.ts.map

package/_dnt.polyfills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["src/_dnt.polyfills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAgC,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAGlE,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,UAAU;QAClB;;;;;;;;;;;;;;WAcG;QACH,GAAG,EAAE,MAAM,CAAC;QACZ;;;;;;;;;;;;WAYG;QACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,GAAG,MAAM,CAAC;QACtE;;;;;;;;WAQG;QACH,IAAI,EAAE,OAAO,CAAC;QAEd;;;;;;;;;;;;WAYG;QACH,QAAQ,EAAE,MAAM,CAAC;QAEjB;;;;;;;;;;;;WAYG;QACH,OAAO,EAAE,MAAM,CAAC;KACjB;CACF;AAED,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,KAAK,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,UAAU,0BAA0B;IAClC,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;CACxD;AACD,UAAU,0BAA0B;IAClC,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;CACtC;AACD,UAAU,kBACR,SAAQ,0BAA0B,EAAE,0BAA0B;CAC/D;AAiBD,eAAO,IAAI,6BAA6B,EA2BnC,0BAA0B,CAAC;AAMhC,eAAO,IAAI,6BAA6B,EA4DnC,0BAA0B,CAAC;AAMhC,eAAO,IAAI,oBAAoB,EAoB1B,kBAAkB,CAAC"}

package/_dnt.polyfills.js

@@ -0,0 +1,127 @@
+/**
+ * Based on [import-meta-ponyfill](https://github.com/gaubee/import-meta-ponyfill),
+ * but instead of using npm to install additional dependencies,
+ * this approach manually consolidates cjs/mjs/d.ts into a single file.
+ *
+ * Note that this code might be imported multiple times
+ * (for example, both dnt.test.polyfills.ts and dnt.polyfills.ts contain this code;
+ *  or Node.js might dynamically clear the cache and then force a require).
+ * Therefore, it's important to avoid redundant writes to global objects.
+ * Additionally, consider that commonjs is used alongside esm,
+ * so the two ponyfill functions are stored independently in two separate global objects.
+ */
+//@ts-ignore
+import { createRequire } from "node:module";
+//@ts-ignore
+import { fileURLToPath, pathToFileURL } from "node:url";
+//@ts-ignore
+import { dirname } from "node:path";
+const defineGlobalPonyfill = (symbolFor, fn) => {
+    if (!Reflect.has(globalThis, Symbol.for(symbolFor))) {
+        Object.defineProperty(globalThis, Symbol.for(symbolFor), {
+            configurable: true,
+            get() {
+                return fn;
+            },
+        });
+    }
+};
+export let import_meta_ponyfill_commonjs = (Reflect.get(globalThis, Symbol.for("import-meta-ponyfill-commonjs")) ??
+    (() => {
+        const moduleImportMetaWM = new WeakMap();
+        return (require, module) => {
+            let importMetaCache = moduleImportMetaWM.get(module);
+            if (importMetaCache == null) {
+                const importMeta = Object.assign(Object.create(null), {
+                    url: pathToFileURL(module.filename).href,
+                    main: require.main == module,
+                    resolve: (specifier, parentURL = importMeta.url) => {
+                        return pathToFileURL((importMeta.url === parentURL
+                            ? require
+                            : createRequire(parentURL))
+                            .resolve(specifier)).href;
+                    },
+                    filename: module.filename,
+                    dirname: module.path,
+                });
+                moduleImportMetaWM.set(module, importMeta);
+                importMetaCache = importMeta;
+            }
+            return importMetaCache;
+        };
+    })());
+defineGlobalPonyfill("import-meta-ponyfill-commonjs", import_meta_ponyfill_commonjs);
+export let import_meta_ponyfill_esmodule = (Reflect.get(globalThis, Symbol.for("import-meta-ponyfill-esmodule")) ??
+    ((importMeta) => {
+        const resolveFunStr = String(importMeta.resolve);
+        const shimWs = new WeakSet();
+        //@ts-ignore
+        const mainUrl = ("file:///" + process.argv[1].replace(/\\/g, "/"))
+            .replace(/\/{3,}/, "///");
+        const commonShim = (importMeta) => {
+            if (typeof importMeta.main !== "boolean") {
+                importMeta.main = importMeta.url === mainUrl;
+            }
+            if (typeof importMeta.filename !== "string") {
+                importMeta.filename = fileURLToPath(importMeta.url);
+                importMeta.dirname = dirname(importMeta.filename);
+            }
+        };
+        if (
+        // v16.2.0+, v14.18.0+: Add support for WHATWG URL object to parentURL parameter.
+        resolveFunStr === "undefined" ||
+            // v20.0.0+, v18.19.0+"" This API now returns a string synchronously instead of a Promise.
+            resolveFunStr.startsWith("async")
+        // enable by --experimental-import-meta-resolve flag
+        ) {
+            import_meta_ponyfill_esmodule = (importMeta) => {
+                if (!shimWs.has(importMeta)) {
+                    shimWs.add(importMeta);
+                    const importMetaUrlRequire = {
+                        url: importMeta.url,
+                        require: createRequire(importMeta.url),
+                    };
+                    importMeta.resolve = function resolve(specifier, parentURL = importMeta.url) {
+                        return pathToFileURL((importMetaUrlRequire.url === parentURL
+                            ? importMetaUrlRequire.require
+                            : createRequire(parentURL)).resolve(specifier)).href;
+                    };
+                    commonShim(importMeta);
+                }
+                return importMeta;
+            };
+        }
+        else {
+            /// native support
+            import_meta_ponyfill_esmodule = (importMeta) => {
+                if (!shimWs.has(importMeta)) {
+                    shimWs.add(importMeta);
+                    commonShim(importMeta);
+                }
+                return importMeta;
+            };
+        }
+        return import_meta_ponyfill_esmodule(importMeta);
+    }));
+defineGlobalPonyfill("import-meta-ponyfill-esmodule", import_meta_ponyfill_esmodule);
+export let import_meta_ponyfill = ((...args) => {
+    const _MODULE = (() => {
+        if (typeof require === "function" && typeof module === "object") {
+            return "commonjs";
+        }
+        else {
+            // eval("typeof import.meta");
+            return "esmodule";
+        }
+    })();
+    if (_MODULE === "commonjs") {
+        //@ts-ignore
+        import_meta_ponyfill = (r, m) => import_meta_ponyfill_commonjs(r, m);
+    }
+    else {
+        //@ts-ignore
+        import_meta_ponyfill = (im) => import_meta_ponyfill_esmodule(im);
+    }
+    //@ts-ignore
+    return import_meta_ponyfill(...args);
+});

package/_dnt.shims.d.ts

@@ -0,0 +1,12 @@
+export { Deno } from "@deno/shim-deno";
+export { alert, confirm, prompt } from "@deno/shim-prompts";
+export { setInterval, setTimeout } from "@deno/shim-timers";
+export declare const dntGlobalThis: Omit<typeof globalThis, "Deno" | "alert" | "confirm" | "prompt" | "setInterval" | "setTimeout"> & {
+    Deno: any;
+    alert: any;
+    confirm: any;
+    prompt: any;
+    setInterval: any;
+    setTimeout: any;
+};
+//# sourceMappingURL=_dnt.shims.d.ts.map

package/_dnt.shims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.shims.d.ts","sourceRoot":"","sources":["src/_dnt.shims.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAU5D,eAAO,MAAM,aAAa;;;;;;;CAA2C,CAAC"}

package/_dnt.shims.js

@@ -0,0 +1,70 @@
+import { Deno } from "@deno/shim-deno";
+export { Deno } from "@deno/shim-deno";
+import { alert, confirm, prompt } from "@deno/shim-prompts";
+export { alert, confirm, prompt } from "@deno/shim-prompts";
+import { setInterval, setTimeout } from "@deno/shim-timers";
+export { setInterval, setTimeout } from "@deno/shim-timers";
+const dntGlobals = {
+    Deno,
+    alert,
+    confirm,
+    prompt,
+    setInterval,
+    setTimeout,
+};
+export const dntGlobalThis = createMergeProxy(globalThis, dntGlobals);
+function createMergeProxy(baseObj, extObj) {
+    return new Proxy(baseObj, {
+        get(_target, prop, _receiver) {
+            if (prop in extObj) {
+                return extObj[prop];
+            }
+            else {
+                return baseObj[prop];
+            }
+        },
+        set(_target, prop, value) {
+            if (prop in extObj) {
+                delete extObj[prop];
+            }
+            baseObj[prop] = value;
+            return true;
+        },
+        deleteProperty(_target, prop) {
+            let success = false;
+            if (prop in extObj) {
+                delete extObj[prop];
+                success = true;
+            }
+            if (prop in baseObj) {
+                delete baseObj[prop];
+                success = true;
+            }
+            return success;
+        },
+        ownKeys(_target) {
+            const baseKeys = Reflect.ownKeys(baseObj);
+            const extKeys = Reflect.ownKeys(extObj);
+            const extKeysSet = new Set(extKeys);
+            return [...baseKeys.filter((k) => !extKeysSet.has(k)), ...extKeys];
+        },
+        defineProperty(_target, prop, desc) {
+            if (prop in extObj) {
+                delete extObj[prop];
+            }
+            Reflect.defineProperty(baseObj, prop, desc);
+            return true;
+        },
+        getOwnPropertyDescriptor(_target, prop) {
+            if (prop in extObj) {
+                return Reflect.getOwnPropertyDescriptor(extObj, prop);
+            }
+            else {
+                return Reflect.getOwnPropertyDescriptor(baseObj, prop);
+            }
+        },
+        has(_target, prop) {
+            return prop in extObj || prop in baseObj;
+        },
+    });
+}

package/_polyfill.d.ts

@@ -0,0 +1 @@
+//# sourceMappingURL=_polyfill.d.ts.map

package/_polyfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_polyfill.d.ts","sourceRoot":"","sources":["src/_polyfill.ts"],"names":[],"mappings":""}

package/_polyfill.js

@@ -0,0 +1,9 @@
+"use strict";
+if (typeof Uint8Array.fromBase64 === "undefined") {
+    //deno-lint-ignore hugoalh/no-import-dynamic -- Polyfill.
+    await import("es-arraybuffer-base64/Uint8Array.fromBase64/auto");
+}
+if (typeof Uint8Array.prototype.toBase64 === "undefined") {
+    //deno-lint-ignore hugoalh/no-import-dynamic -- Polyfill.
+    await import("es-arraybuffer-base64/Uint8Array.prototype.toBase64/auto");
+}

package/libsodium/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+//# sourceMappingURL=cli.d.ts.map

package/libsodium/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/libsodium/cli.ts"],"names":[],"mappings":";AACA,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC"}

package/libsodium/cli.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+import * as dntShim from "../_dnt.shims.js";
+import { GitHubSodiumSealer } from "../libsodium.js";
+if (!globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta).main) {
+    throw new Error(`This entrypoint is for command line only!`);
+}
+const [publicKey = "", secretValue = ""] = dntShim.Deno.args;
+console.log(new GitHubSodiumSealer(publicKey).encrypt(secretValue));

package/libsodium.d.ts

@@ -0,0 +1,22 @@
+import "./_dnt.polyfills.js";
+import "./_polyfill.js";
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export declare class GitHubSodiumSealer {
+    #private;
+    get [Symbol.toStringTag](): string;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey: string);
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value: string): string;
+}
+export default GitHubSodiumSealer;
+//# sourceMappingURL=libsodium.d.ts.map

package/libsodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"libsodium.d.ts","sourceRoot":"","sources":["src/libsodium.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAC7B,OAAO,qBAAqB,CAAC;AAE7B,OAAO,gBAAgB,CAAC;AAExB;;GAEG;AACH,qBAAa,kBAAkB;;IAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAEjC;IAED;;;OAGG;gBACS,SAAS,EAAE,MAAM;IAM7B;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAM9B;AACD,eAAe,kBAAkB,CAAC"}

package/libsodium.js

@@ -0,0 +1,35 @@
+import "./_dnt.polyfills.js";
+import libsodium from "libsodium-wrappers";
+import "./_polyfill.js";
+await libsodium.ready;
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export class GitHubSodiumSealer {
+    get [Symbol.toStringTag]() {
+        return "GitHubSodiumSealer/LibSodium";
+    }
+    #publicKey;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey) {
+        if (!(publicKey.length > 0)) {
+            throw new SyntaxError(`Parameter \`publicKey\` is not a string which is non empty!`);
+        }
+        this.#publicKey = Uint8Array.fromBase64(publicKey);
+    }
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value) {
+        if (!(value.length > 0)) {
+            throw new SyntaxError(`Parameter \`value\` is not a string which is non empty!`);
+        }
+        return libsodium.crypto_box_seal(new TextEncoder().encode(value), this.#publicKey).toBase64();
+    }
+}
+export default GitHubSodiumSealer;

package/package.json

@@ -1,53 +1,83 @@
 {
 	"name": "@hugoalh/github-sodium",
-	"version": "5.0.3",
-	"description": "A module to provide an easier sodium for GitHub secrets.",
+	"version": "6.0.0",
+	"description": "A module to provide an easier and simplified method for encrypt GitHub secrets.",
 	"keywords": [
 		"github",
 		"sodium"
 	],
-	"homepage": "https://github.com/hugoalh-studio/github-sodium-es#readme",
+	"homepage": "https://github.com/hugoalh/github-sodium-es#readme",
 	"bugs": {
-		"url": "https://github.com/hugoalh-studio/github-sodium-es/issues"
+		"url": "https://github.com/hugoalh/github-sodium-es/issues"
 	},
 	"license": "MIT",
 	"author": "hugoalh",
-	"files": [
-		"asset/**",
-		"bin/**",
-		"dist/**",
-		"lib/**",
-		"LICENSE*.md",
-		"package.json",
-		"README*.md"
-	],
 	"type": "module",
-	"main": "./dist/mod.js",
+	"bin": {
+		"ghs": "./libsodium/cli.js",
+		"ghs-ls": "./libsodium/cli.js",
+		"ghs-ts": "./tweetsodium/cli.js"
+	},
+	"main": "./libsodium.js",
+	"module": "./libsodium.js",
 	"exports": {
-		"types": "./dist/mod.d.ts",
-		"import": "./dist/mod.js"
+		"./cli": {
+			"import": {
+				"types": "./libsodium/cli.d.ts",
+				"default": "./libsodium/cli.js"
+			}
+		},
+		"./libsodium": {
+			"import": {
+				"types": "./libsodium.d.ts",
+				"default": "./libsodium.js"
+			}
+		},
+		"./libsodium/cli": {
+			"import": {
+				"types": "./libsodium/cli.d.ts",
+				"default": "./libsodium/cli.js"
+			}
+		},
+		"./tweetsodium": {
+			"import": {
+				"types": "./tweetsodium.d.ts",
+				"default": "./tweetsodium.js"
+			}
+		},
+		"./tweetsodium/cli": {
+			"import": {
+				"types": "./tweetsodium/cli.d.ts",
+				"default": "./tweetsodium/cli.js"
+			}
+		},
+		".": {
+			"import": {
+				"types": "./libsodium.d.ts",
+				"default": "./libsodium.js"
+			}
+		}
 	},
-	"types": "./dist/mod.d.ts",
+	"types": "./libsodium.d.ts",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/hugoalh-studio/github-sodium-es.git"
-	},
-	"scripts": {
-		"build": "tsc"
+		"url": "git+https://github.com/hugoalh/github-sodium-es.git"
 	},
 	"dependencies": {
-		"libsodium-wrappers": "0.7.13"
+		"@hugoalh/blake": "^0.2.2",
+		"@hugoalh/nacl": "^0.2.1",
+		"es-arraybuffer-base64": "^1.1.2",
+		"libsodium-wrappers": "^0.8.4",
+		"@deno/shim-deno": "^0.19.2",
+		"@deno/shim-prompts": "^0.1.1",
+		"@deno/shim-timers": "^0.1.0"
 	},
 	"devDependencies": {
-		"@types/libsodium-wrappers": "0.7.14",
-		"@types/node": "20.12.7",
-		"typescript": "^5.4.5"
-	},
-	"engines": {
-		"node": ">=16.13.0"
+		"@types/node": "^24.5.0"
 	},
 	"private": false,
 	"publishConfig": {
 		"access": "public"
-	}
-}
+	},
+	"_generatedBy": "dnt@dev"
+}

package/tweetsodium/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+//# sourceMappingURL=cli.d.ts.map

package/tweetsodium/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/tweetsodium/cli.ts"],"names":[],"mappings":";AACA,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC"}

package/tweetsodium/cli.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+import * as dntShim from "../_dnt.shims.js";
+import { GitHubSodiumSealer } from "../tweetsodium.js";
+if (!globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta).main) {
+    throw new Error(`This entrypoint is for command line only!`);
+}
+const [publicKey = "", secretValue = ""] = dntShim.Deno.args;
+console.log(new GitHubSodiumSealer(publicKey).encrypt(secretValue));

package/tweetsodium.d.ts

@@ -0,0 +1,22 @@
+import "./_dnt.polyfills.js";
+import "./_polyfill.js";
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export declare class GitHubSodiumSealer {
+    #private;
+    get [Symbol.toStringTag](): string;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey: string);
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value: string): string;
+}
+export default GitHubSodiumSealer;
+//# sourceMappingURL=tweetsodium.d.ts.map

package/tweetsodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tweetsodium.d.ts","sourceRoot":"","sources":["src/tweetsodium.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAU7B,OAAO,gBAAgB,CAAC;AAExB;;GAEG;AACH,qBAAa,kBAAkB;;IAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAEjC;IAED;;;OAGG;gBACS,SAAS,EAAE,MAAM;IAM7B;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAe9B;AACD,eAAe,kBAAkB,CAAC"}

package/tweetsodium.js

@@ -0,0 +1,43 @@
+import "./_dnt.polyfills.js";
+import { Blake2B } from "@hugoalh/blake/2b";
+import { box, boxKeyPair, boxNonceLength, boxOverheadLength, boxPublicKeyLength } from "@hugoalh/nacl";
+import "./_polyfill.js";
+const sodiumOverheadLength = boxOverheadLength + boxPublicKeyLength;
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export class GitHubSodiumSealer {
+    get [Symbol.toStringTag]() {
+        return "GitHubSodiumSealer/TweetSodium";
+    }
+    #publicKey;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey) {
+        if (!(publicKey.length > 0)) {
+            throw new SyntaxError(`Parameter \`publicKey\` is not a string which is non empty!`);
+        }
+        this.#publicKey = Uint8Array.fromBase64(publicKey);
+    }
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value) {
+        if (!(value.length > 0)) {
+            throw new SyntaxError(`Parameter \`value\` is not a string which is non empty!`);
+        }
+        const ekp = boxKeyPair();
+        const result = new Uint8Array(sodiumOverheadLength + value.length);
+        result.set(ekp.publicKey, 0);
+        // 24 bytes nonce, which is a Blake2B digest from the ephemeral public key and the recipient's public key.
+        const nonce = new Blake2B({ length: boxNonceLength }).update(ekp.publicKey).update(this.#publicKey).hash();
+        const cipherText = box(new TextEncoder().encode(value), nonce, this.#publicKey, ekp.secretKey);
+        result.set(cipherText, boxPublicKeyLength);
+        return result.toBase64();
+    }
+}
+export default GitHubSodiumSealer;

package/dist/mod.d.ts

@@ -1,33 +0,0 @@
-/**
- * GitHub sodium sealer for encrypt value to GitHub secret value.
- */
-export declare class GitHubSodiumSealer {
-    #private;
-    /**
-     * Initialize GitHub sodium sealer.
-     * @param {string} publicKey Organization's or repository's public key, which need for encrypt value to secret value before create or update a secret.
-     */
-    constructor(publicKey: string);
-    /**
-     * Encrypt value to GitHub secret value.
-     * @param {string} value Value that need to encrypt as secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     */
-    encrypt(value: string): string;
-    /**
-     * Encrypt value to GitHub secret value.
-     * @param {string} publicKey Organization's or repository's public key, which need for encrypt value to secret value before create or update a secret.
-     * @param {string} value Value that need to encrypt as secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     */
-    static seal(publicKey: string, value: string): string;
-}
-export default GitHubSodiumSealer;
-/**
- * Encrypt value to GitHub secret value.
- * @param {string} publicKey Organization's or repository's public key, which need for encrypt value to secret value before create or update a secret.
- * @param {string} value Value that need to encrypt as secret value.
- * @returns {string} An encrypted GitHub secret value.
- */
-export declare function seal(publicKey: string, value: string): string;
-//# sourceMappingURL=mod.d.ts.map

package/dist/mod.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../src/mod.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,qBAAa,kBAAkB;;IAE9B;;;OAGG;gBACS,SAAS,EAAE,MAAM;IAM7B;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAM9B;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;CAGrD;AACD,eAAe,kBAAkB,CAAC;AAClC;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/dist/mod.js

@@ -1,49 +0,0 @@
-import { Buffer } from "node:buffer";
-import libsodium from "libsodium-wrappers";
-await libsodium.ready;
-/**
- * GitHub sodium sealer for encrypt value to GitHub secret value.
- */
-export class GitHubSodiumSealer {
-    #publicKey;
-    /**
-     * Initialize GitHub sodium sealer.
-     * @param {string} publicKey Organization's or repository's public key, which need for encrypt value to secret value before create or update a secret.
-     */
-    constructor(publicKey) {
-        if (!(publicKey.length > 0)) {
-            throw new SyntaxError(`Argument \`publicKey\` is not a string which is non-empty!`);
-        }
-        this.#publicKey = Buffer.from(publicKey, "base64");
-    }
-    /**
-     * Encrypt value to GitHub secret value.
-     * @param {string} value Value that need to encrypt as secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     */
-    encrypt(value) {
-        if (!(value.length > 0)) {
-            throw new SyntaxError(`Argument \`value\` is not a string which is non-empty!`);
-        }
-        return Buffer.from(libsodium.crypto_box_seal(Buffer.from(value), this.#publicKey)).toString("base64");
-    }
-    /**
-     * Encrypt value to GitHub secret value.
-     * @param {string} publicKey Organization's or repository's public key, which need for encrypt value to secret value before create or update a secret.
-     * @param {string} value Value that need to encrypt as secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     */
-    static seal(publicKey, value) {
-        return new this(publicKey).encrypt(value);
-    }
-}
-export default GitHubSodiumSealer;
-/**
- * Encrypt value to GitHub secret value.
- * @param {string} publicKey Organization's or repository's public key, which need for encrypt value to secret value before create or update a secret.
- * @param {string} value Value that need to encrypt as secret value.
- * @returns {string} An encrypted GitHub secret value.
- */
-export function seal(publicKey, value) {
-    return new GitHubSodiumSealer(publicKey).encrypt(value);
-}