@hugoalh/github-sodium 5.1.0 → 6.0.1

package/LICENSE.md

@@ -1,6 +1,6 @@
 # MIT License
 
-Copyright © 2020\~2024 hugoalh
+Copyright © 2020\~2026 HUGOALH
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

package/README.md

@@ -2,83 +2,95 @@
 
 [**⚖️** MIT](./LICENSE.md)
 
-[![GitHub: hugoalh/github-sodium-es](https://img.shields.io/github/v/release/hugoalh/github-sodium-es?label=hugoalh/github-sodium-es&labelColor=181717&logo=github&logoColor=ffffff&sort=semver&style=flat "GitHub: hugoalh/github-sodium-es")](https://github.com/hugoalh/github-sodium-es)
-[![JSR: @hugoalh/github-sodium](https://img.shields.io/jsr/v/@hugoalh/github-sodium?label=@hugoalh/github-sodium&labelColor=F7DF1E&logo=jsr&logoColor=000000&style=flat "JSR: @hugoalh/github-sodium")](https://jsr.io/@hugoalh/github-sodium)
-[![NPM: @hugoalh/github-sodium](https://img.shields.io/npm/v/@hugoalh/github-sodium?label=@hugoalh/github-sodium&labelColor=CB3837&logo=npm&logoColor=ffffff&style=flat "NPM: @hugoalh/github-sodium")](https://www.npmjs.com/package/@hugoalh/github-sodium)
+🔗
+[DistBoard @hugoalh](https://hugoalh.github.io/distboard/github_sodium_ecmascript)
+● [GitHub](https://github.com/hugoalh/github-sodium-es)
+● [JSR](https://jsr.io/@hugoalh/github-sodium)
+● [NPM](https://www.npmjs.com/package/@hugoalh/github-sodium)
 
-An ES (JavaScript & TypeScript) module to provide an easier and simplified method for encrypt GitHub secrets, based on the NPM package [`libsodium.js`](https://www.npmjs.com/package/libsodium-wrappers).
+An ECMAScript module to provide an easier and simplified method for encrypt GitHub secrets.
 
-## 🔰 Begin
+## 🌟 Features
 
-### 🎯 Targets
+- Support multiple implementations:
+  - **LibSodium:** Default; Recommended by GitHub; Bad compatibility with bundler or compiler.
+  - **TweetSodium:** Originally created by GitHub but deprecated and unmaintained ([Repository](https://github.com/github/tweetsodium)), currently maintain here; Good compatibility with bundler or compiler.
 
-|  | **Remote** | **JSR** | **NPM** |
-|:--|:--|:--|:--|
-| **[Bun](https://bun.sh/)** >= v1.1.0 | ❌ | ❓ | ✔️ |
-| **[Cloudflare Workers](https://workers.cloudflare.com/)** | ❌ | ❓ | ✔️ |
-| **[Deno](https://deno.land/)** >= v1.42.0 | ✔️ | ✔️ | ✔️ |
-| **[NodeJS](https://nodejs.org/)** >= v16.13.0 | ❌ | ❓ | ✔️ |
+## 🎯 Runtime Targets
 
-> [!NOTE]
-> - It is possible to use this module in other methods/ways which not listed in here, however those methods/ways are not officially supported, and should beware maybe cause security issues.
+Any runtime which support ECMAScript should able to use this; These runtimes are officially supported:
+
+- **[Bun](https://bun.sh/)** >= v1.1.0
+- **[Deno](https://deno.land/)** >= v2.1.0
+- **[NodeJS](https://nodejs.org/)** >= v20.9.0
+
+## 🛡️ Runtime Permissions
+
+This does not request any runtime permission.
 
-### #️⃣ Resources Identifier
+## #️⃣ Sources & Entrypoints
 
-- **Remote - GitHub Raw:**
+- GitHub Raw
   ```
   https://raw.githubusercontent.com/hugoalh/github-sodium-es/{Tag}/mod.ts
   ```
-- **JSR:**
+- JSR
   ```
-  [jsr:]@hugoalh/github-sodium[@{Tag}]
+  jsr:@hugoalh/github-sodium[@{Tag}]
   ```
-- **NPM:**
+- NPM
   ```
-  [npm:]@hugoalh/github-sodium[@{Tag}]
+  npm:@hugoalh/github-sodium[@{Tag}]
   ```
 
-> [!NOTE]
-> - For usage of remote resources, it is recommended to import the entire module with the main path `mod.ts`, however it is also able to import part of the module with sub path if available, but do not import if:
->
->   - it's path has an underscore prefix (e.g.: `_foo.ts`, `_util/bar.ts`), or
->   - it is a benchmark or test file (e.g.: `foo.bench.ts`, `foo.test.ts`), or
->   - it's symbol has an underscore prefix (e.g.: `_bar`, `_foo`).
->
->   These elements are not considered part of the public API, thus no stability is guaranteed for them.
-> - For usage of JSR or NPM resources, it is recommended to import the entire module with the main entrypoint, however it is also able to import part of the module with sub entrypoint if available, please visit the [file `jsr.jsonc`](./jsr.jsonc) property `exports` for available sub entrypoints.
-> - It is recommended to use this module with tag for immutability.
-
-### 🛡️ Require Runtime Permissions
+| **Name** | **Path** | **Description** |
+|:--|:--|:--|
+| `.` | `./mod.ts` | Default (LibSodium). |
+| `./cli` | N/A | CLI for default (LibSodium). |
+| `./libsodium` | `./libsodium.ts` | LibSodium. |
+| `./libsodium/cli` | `./libsodium/cli.ts` | CLI for LibSodium. |
+| `./tweetsodium` | `./tweetsodium.ts` | TweetSodium. |
+| `./tweetsodium/cli` | `./tweetsodium/cli.ts` | CLI for TweetSodium. |
 
-*This module does not require any runtime permission.*
+> [!NOTE]
+> - Different runtimes have vary support for the sources and entrypoints, visit the runtime documentation for more information.
+> - It is recommended to include tag for immutability.
+> - These are not part of the public APIs hence should not be used:
+>   - Benchmark/Test file (e.g.: `example.bench.ts`, `example.test.ts`).
+>   - Entrypoint name or path include any underscore prefix (e.g.: `_example.ts`, `foo/_example.ts`).
+>   - Identifier/Namespace/Symbol include any underscore prefix (e.g.: `_example`, `Foo._example`).
 
-## 🧩 APIs (Excerpt)
+## 🧩 APIs
 
 - ```ts
   class GitHubSodiumSealer {
-    constructor(publicKey: string, keyID?: string);
+    constructor(publicKey: string);
     encrypt(value: string): string;
-    encryptToRequestBody(value: string): GitHubRESTSetPublicKeyRequestBody;
-    getKeyID(): string | undefined;
-    get keyID(): string | undefined;
-    static fromJSON(input: JSONObject): GitHubSodiumSealer;
-    static async fromResponse(input: Response): Promise<GitHubSodiumSealer>;
-  }
-  ```
-- ```ts
-  interface GitHubRESTSetPublicKeyRequestBody {
-    encrypted_value: string;
-    key_id: string;
   }
   ```
 
 > [!NOTE]
 > - For the full or prettier documentation, can visit via:
->   - [Deno CLI `deno doc`](https://docs.deno.com/runtime/reference/cli/documentation_generator/)
+>   - [Deno CLI `deno doc`](https://docs.deno.com/runtime/reference/cli/doc/)
 >   - [JSR](https://jsr.io/@hugoalh/github-sodium)
 
+## 🧩 CLIs
+
+- ```powershell
+  ghs $PublicKey $SecretValue
+  ```
+- ```powershell
+  ghs-ls $PublicKey $SecretValue
+  ```
+- ```powershell
+  ghs-ts $PublicKey $SecretValue
+  ```
+
 ## ✍️ Examples
 
 - ```ts
   new GitHubSodiumSealer("2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234").encrypt("plain-text-secret");
   ```
+- ```powershell
+  ghs '2Sg8iYjAxxmI2LvUXpJjkYrMxURPc8r+dB7TJyvv1234' 'plain-text-secret'
+  ```

package/_dnt.polyfills.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Based on [import-meta-ponyfill](https://github.com/gaubee/import-meta-ponyfill),
+ * but instead of using npm to install additional dependencies,
+ * this approach manually consolidates cjs/mjs/d.ts into a single file.
+ *
+ * Note that this code might be imported multiple times
+ * (for example, both dnt.test.polyfills.ts and dnt.polyfills.ts contain this code;
+ *  or Node.js might dynamically clear the cache and then force a require).
+ * Therefore, it's important to avoid redundant writes to global objects.
+ * Additionally, consider that commonjs is used alongside esm,
+ * so the two ponyfill functions are stored independently in two separate global objects.
+ */
+import { createRequire } from "node:module";
+import { type URL } from "node:url";
+declare global {
+    interface ImportMeta {
+        /** A string representation of the fully qualified module URL. When the
+         * module is loaded locally, the value will be a file URL (e.g.
+         * `file:///path/module.ts`).
+         *
+         * You can also parse the string as a URL to determine more information about
+         * how the current module was loaded. For example to determine if a module was
+         * local or not:
+         *
+         * ```ts
+         * const url = new URL(import.meta.url);
+         * if (url.protocol === "file:") {
+         *   console.log("this module was loaded locally");
+         * }
+         * ```
+         */
+        url: string;
+        /**
+         * A function that returns resolved specifier as if it would be imported
+         * using `import(specifier)`.
+         *
+         * ```ts
+         * console.log(import.meta.resolve("./foo.js"));
+         * // file:///dev/foo.js
+         * ```
+         *
+         * @param specifier The module specifier to resolve relative to `parent`.
+         * @param parent The absolute parent module URL to resolve from.
+         * @returns The absolute (`file:`) URL string for the resolved module.
+         */
+        resolve(specifier: string, parent?: string | URL | undefined): string;
+        /** A flag that indicates if the current module is the main module that was
+         * called when starting the program under Deno.
+         *
+         * ```ts
+         * if (import.meta.main) {
+         *   // this was loaded as the main module, maybe do some bootstrapping
+         * }
+         * ```
+         */
+        main: boolean;
+        /** The absolute path of the current module.
+         *
+         * This property is only provided for local modules (ie. using `file://` URLs).
+         *
+         * Example:
+         * ```
+         * // Unix
+         * console.log(import.meta.filename); // /home/alice/my_module.ts
+         *
+         * // Windows
+         * console.log(import.meta.filename); // C:\alice\my_module.ts
+         * ```
+         */
+        filename: string;
+        /** The absolute path of the directory containing the current module.
+         *
+         * This property is only provided for local modules (ie. using `file://` URLs).
+         *
+         * * Example:
+         * ```
+         * // Unix
+         * console.log(import.meta.dirname); // /home/alice
+         *
+         * // Windows
+         * console.log(import.meta.dirname); // C:\alice
+         * ```
+         */
+        dirname: string;
+    }
+}
+type NodeRequest = ReturnType<typeof createRequire>;
+type NodeModule = NonNullable<NodeRequest["main"]>;
+interface ImportMetaPonyfillCommonjs {
+    (require: NodeRequest, module: NodeModule): ImportMeta;
+}
+interface ImportMetaPonyfillEsmodule {
+    (importMeta: ImportMeta): ImportMeta;
+}
+interface ImportMetaPonyfill extends ImportMetaPonyfillCommonjs, ImportMetaPonyfillEsmodule {
+}
+export declare let import_meta_ponyfill_commonjs: ImportMetaPonyfillCommonjs;
+export declare let import_meta_ponyfill_esmodule: ImportMetaPonyfillEsmodule;
+export declare let import_meta_ponyfill: ImportMetaPonyfill;
+export {};
+//# sourceMappingURL=_dnt.polyfills.d.ts.map

package/_dnt.polyfills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.polyfills.d.ts","sourceRoot":"","sources":["src/_dnt.polyfills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAgC,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAGlE,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,UAAU;QAClB;;;;;;;;;;;;;;WAcG;QACH,GAAG,EAAE,MAAM,CAAC;QACZ;;;;;;;;;;;;WAYG;QACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,SAAS,GAAG,MAAM,CAAC;QACtE;;;;;;;;WAQG;QACH,IAAI,EAAE,OAAO,CAAC;QAEd;;;;;;;;;;;;WAYG;QACH,QAAQ,EAAE,MAAM,CAAC;QAEjB;;;;;;;;;;;;WAYG;QACH,OAAO,EAAE,MAAM,CAAC;KACjB;CACF;AAED,KAAK,WAAW,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,KAAK,UAAU,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AACnD,UAAU,0BAA0B;IAClC,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;CACxD;AACD,UAAU,0BAA0B;IAClC,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAAC;CACtC;AACD,UAAU,kBACR,SAAQ,0BAA0B,EAAE,0BAA0B;CAC/D;AAiBD,eAAO,IAAI,6BAA6B,EA2BnC,0BAA0B,CAAC;AAMhC,eAAO,IAAI,6BAA6B,EA4DnC,0BAA0B,CAAC;AAMhC,eAAO,IAAI,oBAAoB,EAoB1B,kBAAkB,CAAC"}

package/_dnt.polyfills.js

@@ -0,0 +1,127 @@
+/**
+ * Based on [import-meta-ponyfill](https://github.com/gaubee/import-meta-ponyfill),
+ * but instead of using npm to install additional dependencies,
+ * this approach manually consolidates cjs/mjs/d.ts into a single file.
+ *
+ * Note that this code might be imported multiple times
+ * (for example, both dnt.test.polyfills.ts and dnt.polyfills.ts contain this code;
+ *  or Node.js might dynamically clear the cache and then force a require).
+ * Therefore, it's important to avoid redundant writes to global objects.
+ * Additionally, consider that commonjs is used alongside esm,
+ * so the two ponyfill functions are stored independently in two separate global objects.
+ */
+//@ts-ignore
+import { createRequire } from "node:module";
+//@ts-ignore
+import { fileURLToPath, pathToFileURL } from "node:url";
+//@ts-ignore
+import { dirname } from "node:path";
+const defineGlobalPonyfill = (symbolFor, fn) => {
+    if (!Reflect.has(globalThis, Symbol.for(symbolFor))) {
+        Object.defineProperty(globalThis, Symbol.for(symbolFor), {
+            configurable: true,
+            get() {
+                return fn;
+            },
+        });
+    }
+};
+export let import_meta_ponyfill_commonjs = (Reflect.get(globalThis, Symbol.for("import-meta-ponyfill-commonjs")) ??
+    (() => {
+        const moduleImportMetaWM = new WeakMap();
+        return (require, module) => {
+            let importMetaCache = moduleImportMetaWM.get(module);
+            if (importMetaCache == null) {
+                const importMeta = Object.assign(Object.create(null), {
+                    url: pathToFileURL(module.filename).href,
+                    main: require.main == module,
+                    resolve: (specifier, parentURL = importMeta.url) => {
+                        return pathToFileURL((importMeta.url === parentURL
+                            ? require
+                            : createRequire(parentURL))
+                            .resolve(specifier)).href;
+                    },
+                    filename: module.filename,
+                    dirname: module.path,
+                });
+                moduleImportMetaWM.set(module, importMeta);
+                importMetaCache = importMeta;
+            }
+            return importMetaCache;
+        };
+    })());
+defineGlobalPonyfill("import-meta-ponyfill-commonjs", import_meta_ponyfill_commonjs);
+export let import_meta_ponyfill_esmodule = (Reflect.get(globalThis, Symbol.for("import-meta-ponyfill-esmodule")) ??
+    ((importMeta) => {
+        const resolveFunStr = String(importMeta.resolve);
+        const shimWs = new WeakSet();
+        //@ts-ignore
+        const mainUrl = ("file:///" + process.argv[1].replace(/\\/g, "/"))
+            .replace(/\/{3,}/, "///");
+        const commonShim = (importMeta) => {
+            if (typeof importMeta.main !== "boolean") {
+                importMeta.main = importMeta.url === mainUrl;
+            }
+            if (typeof importMeta.filename !== "string") {
+                importMeta.filename = fileURLToPath(importMeta.url);
+                importMeta.dirname = dirname(importMeta.filename);
+            }
+        };
+        if (
+        // v16.2.0+, v14.18.0+: Add support for WHATWG URL object to parentURL parameter.
+        resolveFunStr === "undefined" ||
+            // v20.0.0+, v18.19.0+"" This API now returns a string synchronously instead of a Promise.
+            resolveFunStr.startsWith("async")
+        // enable by --experimental-import-meta-resolve flag
+        ) {
+            import_meta_ponyfill_esmodule = (importMeta) => {
+                if (!shimWs.has(importMeta)) {
+                    shimWs.add(importMeta);
+                    const importMetaUrlRequire = {
+                        url: importMeta.url,
+                        require: createRequire(importMeta.url),
+                    };
+                    importMeta.resolve = function resolve(specifier, parentURL = importMeta.url) {
+                        return pathToFileURL((importMetaUrlRequire.url === parentURL
+                            ? importMetaUrlRequire.require
+                            : createRequire(parentURL)).resolve(specifier)).href;
+                    };
+                    commonShim(importMeta);
+                }
+                return importMeta;
+            };
+        }
+        else {
+            /// native support
+            import_meta_ponyfill_esmodule = (importMeta) => {
+                if (!shimWs.has(importMeta)) {
+                    shimWs.add(importMeta);
+                    commonShim(importMeta);
+                }
+                return importMeta;
+            };
+        }
+        return import_meta_ponyfill_esmodule(importMeta);
+    }));
+defineGlobalPonyfill("import-meta-ponyfill-esmodule", import_meta_ponyfill_esmodule);
+export let import_meta_ponyfill = ((...args) => {
+    const _MODULE = (() => {
+        if (typeof require === "function" && typeof module === "object") {
+            return "commonjs";
+        }
+        else {
+            // eval("typeof import.meta");
+            return "esmodule";
+        }
+    })();
+    if (_MODULE === "commonjs") {
+        //@ts-ignore
+        import_meta_ponyfill = (r, m) => import_meta_ponyfill_commonjs(r, m);
+    }
+    else {
+        //@ts-ignore
+        import_meta_ponyfill = (im) => import_meta_ponyfill_esmodule(im);
+    }
+    //@ts-ignore
+    return import_meta_ponyfill(...args);
+});

package/_dnt.shims.d.ts

@@ -0,0 +1,12 @@
+export { Deno } from "@deno/shim-deno";
+export { alert, confirm, prompt } from "@deno/shim-prompts";
+export { setInterval, setTimeout } from "@deno/shim-timers";
+export declare const dntGlobalThis: Omit<typeof globalThis, "Deno" | "alert" | "confirm" | "prompt" | "setInterval" | "setTimeout"> & {
+    Deno: any;
+    alert: any;
+    confirm: any;
+    prompt: any;
+    setInterval: any;
+    setTimeout: any;
+};
+//# sourceMappingURL=_dnt.shims.d.ts.map

package/_dnt.shims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_dnt.shims.d.ts","sourceRoot":"","sources":["src/_dnt.shims.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAU5D,eAAO,MAAM,aAAa;;;;;;;CAA2C,CAAC"}

package/_dnt.shims.js

@@ -0,0 +1,70 @@
+import { Deno } from "@deno/shim-deno";
+export { Deno } from "@deno/shim-deno";
+import { alert, confirm, prompt } from "@deno/shim-prompts";
+export { alert, confirm, prompt } from "@deno/shim-prompts";
+import { setInterval, setTimeout } from "@deno/shim-timers";
+export { setInterval, setTimeout } from "@deno/shim-timers";
+const dntGlobals = {
+    Deno,
+    alert,
+    confirm,
+    prompt,
+    setInterval,
+    setTimeout,
+};
+export const dntGlobalThis = createMergeProxy(globalThis, dntGlobals);
+function createMergeProxy(baseObj, extObj) {
+    return new Proxy(baseObj, {
+        get(_target, prop, _receiver) {
+            if (prop in extObj) {
+                return extObj[prop];
+            }
+            else {
+                return baseObj[prop];
+            }
+        },
+        set(_target, prop, value) {
+            if (prop in extObj) {
+                delete extObj[prop];
+            }
+            baseObj[prop] = value;
+            return true;
+        },
+        deleteProperty(_target, prop) {
+            let success = false;
+            if (prop in extObj) {
+                delete extObj[prop];
+                success = true;
+            }
+            if (prop in baseObj) {
+                delete baseObj[prop];
+                success = true;
+            }
+            return success;
+        },
+        ownKeys(_target) {
+            const baseKeys = Reflect.ownKeys(baseObj);
+            const extKeys = Reflect.ownKeys(extObj);
+            const extKeysSet = new Set(extKeys);
+            return [...baseKeys.filter((k) => !extKeysSet.has(k)), ...extKeys];
+        },
+        defineProperty(_target, prop, desc) {
+            if (prop in extObj) {
+                delete extObj[prop];
+            }
+            Reflect.defineProperty(baseObj, prop, desc);
+            return true;
+        },
+        getOwnPropertyDescriptor(_target, prop) {
+            if (prop in extObj) {
+                return Reflect.getOwnPropertyDescriptor(extObj, prop);
+            }
+            else {
+                return Reflect.getOwnPropertyDescriptor(baseObj, prop);
+            }
+        },
+        has(_target, prop) {
+            return prop in extObj || prop in baseObj;
+        },
+    });
+}

package/_polyfill.d.ts

@@ -0,0 +1 @@
+//# sourceMappingURL=_polyfill.d.ts.map

package/_polyfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_polyfill.d.ts","sourceRoot":"","sources":["src/_polyfill.ts"],"names":[],"mappings":""}

package/_polyfill.js

@@ -0,0 +1,9 @@
+"use strict";
+if (typeof Uint8Array.fromBase64 === "undefined") {
+    //deno-lint-ignore hugoalh/no-import-dynamic -- Polyfill.
+    await import("es-arraybuffer-base64/Uint8Array.fromBase64/auto");
+}
+if (typeof Uint8Array.prototype.toBase64 === "undefined") {
+    //deno-lint-ignore hugoalh/no-import-dynamic -- Polyfill.
+    await import("es-arraybuffer-base64/Uint8Array.prototype.toBase64/auto");
+}

package/libsodium/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+//# sourceMappingURL=cli.d.ts.map

package/libsodium/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/libsodium/cli.ts"],"names":[],"mappings":";AACA,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC"}

package/libsodium/cli.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+import * as dntShim from "../_dnt.shims.js";
+import { GitHubSodiumSealer } from "../libsodium.js";
+if (!globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta).main) {
+    throw new Error(`This entrypoint is for command line only!`);
+}
+const args = dntShim.Deno.args;
+if (args.length !== 2) {
+    throw new Error(`Invalid arguments length; Expect: 2, Current: ${args.length}.`);
+}
+const [publicKey, secretValue] = args;
+console.log(new GitHubSodiumSealer(publicKey).encrypt(secretValue));

package/libsodium.d.ts

@@ -0,0 +1,22 @@
+import "./_dnt.polyfills.js";
+import "./_polyfill.js";
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export declare class GitHubSodiumSealer {
+    #private;
+    get [Symbol.toStringTag](): string;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey: string);
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value: string): string;
+}
+export default GitHubSodiumSealer;
+//# sourceMappingURL=libsodium.d.ts.map

package/libsodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"libsodium.d.ts","sourceRoot":"","sources":["src/libsodium.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAC7B,OAAO,qBAAqB,CAAC;AAE7B,OAAO,gBAAgB,CAAC;AAExB;;GAEG;AACH,qBAAa,kBAAkB;;IAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAEjC;IAED;;;OAGG;gBACS,SAAS,EAAE,MAAM;IAM7B;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAM9B;AACD,eAAe,kBAAkB,CAAC"}

package/libsodium.js

@@ -0,0 +1,35 @@
+import "./_dnt.polyfills.js";
+import libsodium from "libsodium-wrappers";
+import "./_polyfill.js";
+await libsodium.ready;
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export class GitHubSodiumSealer {
+    get [Symbol.toStringTag]() {
+        return "GitHubSodiumSealer/LibSodium";
+    }
+    #publicKey;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey) {
+        if (!(publicKey.length > 0)) {
+            throw new SyntaxError(`Parameter \`publicKey\` is not a string which is non empty!`);
+        }
+        this.#publicKey = Uint8Array.fromBase64(publicKey);
+    }
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value) {
+        if (!(value.length > 0)) {
+            throw new SyntaxError(`Parameter \`value\` is not a string which is non empty!`);
+        }
+        return libsodium.crypto_box_seal(new TextEncoder().encode(value), this.#publicKey).toBase64();
+    }
+}
+export default GitHubSodiumSealer;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@hugoalh/github-sodium",
-	"version": "5.1.0",
+	"version": "6.0.1",
 	"description": "A module to provide an easier and simplified method for encrypt GitHub secrets.",
 	"keywords": [
 		"github",
@@ -13,31 +13,67 @@
 	"license": "MIT",
 	"author": "hugoalh",
 	"type": "module",
-	"main": "./mod.js",
-	"module": "./mod.js",
+	"bin": {
+		"ghs": "./libsodium/cli.js",
+		"ghs-ls": "./libsodium/cli.js",
+		"ghs-ts": "./tweetsodium/cli.js"
+	},
+	"main": "./libsodium.js",
+	"module": "./libsodium.js",
 	"exports": {
+		"./cli": {
+			"import": {
+				"types": "./libsodium/cli.d.ts",
+				"default": "./libsodium/cli.js"
+			}
+		},
+		"./libsodium": {
+			"import": {
+				"types": "./libsodium.d.ts",
+				"default": "./libsodium.js"
+			}
+		},
+		"./libsodium/cli": {
+			"import": {
+				"types": "./libsodium/cli.d.ts",
+				"default": "./libsodium/cli.js"
+			}
+		},
+		"./tweetsodium": {
+			"import": {
+				"types": "./tweetsodium.d.ts",
+				"default": "./tweetsodium.js"
+			}
+		},
+		"./tweetsodium/cli": {
+			"import": {
+				"types": "./tweetsodium/cli.d.ts",
+				"default": "./tweetsodium/cli.js"
+			}
+		},
 		".": {
 			"import": {
-				"types": "./mod.d.ts",
-				"default": "./mod.js"
+				"types": "./libsodium.d.ts",
+				"default": "./libsodium.js"
 			}
 		}
 	},
-	"types": "./mod.d.ts",
+	"types": "./libsodium.d.ts",
 	"repository": {
 		"type": "git",
 		"url": "git+https://github.com/hugoalh/github-sodium-es.git"
 	},
-	"scripts": {},
 	"dependencies": {
-		"@hugoalh/is-json": "^1.0.4",
-		"libsodium-wrappers": "^0.7.15"
+		"@hugoalh/blake": "^0.2.2",
+		"@hugoalh/nacl": "^0.2.1",
+		"es-arraybuffer-base64": "^1.1.2",
+		"libsodium-wrappers": "^0.8.4",
+		"@deno/shim-deno": "^0.19.2",
+		"@deno/shim-prompts": "^0.1.1",
+		"@deno/shim-timers": "^0.1.0"
 	},
 	"devDependencies": {
-		"@types/node": "^20.9.0"
-	},
-	"engines": {
-		"node": ">=16.13.0"
+		"@types/node": "^24.5.0"
 	},
 	"private": false,
 	"publishConfig": {

package/tweetsodium/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+//# sourceMappingURL=cli.d.ts.map

package/tweetsodium/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/tweetsodium/cli.ts"],"names":[],"mappings":";AACA,OAAO,sBAAsB,CAAC;AAC9B,OAAO,sBAAsB,CAAC"}

package/tweetsodium/cli.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import "../_dnt.polyfills.js";
+import * as dntShim from "../_dnt.shims.js";
+import { GitHubSodiumSealer } from "../tweetsodium.js";
+if (!globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta).main) {
+    throw new Error(`This entrypoint is for command line only!`);
+}
+const args = dntShim.Deno.args;
+if (args.length !== 2) {
+    throw new Error(`Invalid arguments length; Expect: 2, Current: ${args.length}.`);
+}
+const [publicKey, secretValue] = args;
+console.log(new GitHubSodiumSealer(publicKey).encrypt(secretValue));

package/tweetsodium.d.ts

@@ -0,0 +1,22 @@
+import "./_dnt.polyfills.js";
+import "./_polyfill.js";
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export declare class GitHubSodiumSealer {
+    #private;
+    get [Symbol.toStringTag](): string;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey: string);
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value: string): string;
+}
+export default GitHubSodiumSealer;
+//# sourceMappingURL=tweetsodium.d.ts.map

package/tweetsodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tweetsodium.d.ts","sourceRoot":"","sources":["src/tweetsodium.ts"],"names":[],"mappings":"AAAA,OAAO,qBAAqB,CAAC;AAU7B,OAAO,gBAAgB,CAAC;AAExB;;GAEG;AACH,qBAAa,kBAAkB;;IAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAEjC;IAED;;;OAGG;gBACS,SAAS,EAAE,MAAM;IAM7B;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAe9B;AACD,eAAe,kBAAkB,CAAC"}

package/tweetsodium.js

@@ -0,0 +1,43 @@
+import "./_dnt.polyfills.js";
+import { Blake2B } from "@hugoalh/blake/2b";
+import { box, boxKeyPair, boxNonceLength, boxOverheadLength, boxPublicKeyLength } from "@hugoalh/nacl";
+import "./_polyfill.js";
+const sodiumOverheadLength = boxOverheadLength + boxPublicKeyLength;
+/**
+ * GitHub sodium sealer for encrypt value to the GitHub secret value.
+ */
+export class GitHubSodiumSealer {
+    get [Symbol.toStringTag]() {
+        return "GitHubSodiumSealer/TweetSodium";
+    }
+    #publicKey;
+    /**
+     * Initialize.
+     * @param {string} publicKey Public key (recipient's public key), which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
+     */
+    constructor(publicKey) {
+        if (!(publicKey.length > 0)) {
+            throw new SyntaxError(`Parameter \`publicKey\` is not a string which is non empty!`);
+        }
+        this.#publicKey = Uint8Array.fromBase64(publicKey);
+    }
+    /**
+     * Encrypt value to the GitHub secret value.
+     * @param {string} value Value that need to encrypt as the GitHub secret value.
+     * @returns {string} An encrypted GitHub secret value.
+     */
+    encrypt(value) {
+        if (!(value.length > 0)) {
+            throw new SyntaxError(`Parameter \`value\` is not a string which is non empty!`);
+        }
+        const ekp = boxKeyPair();
+        const result = new Uint8Array(sodiumOverheadLength + value.length);
+        result.set(ekp.publicKey, 0);
+        // 24 bytes nonce, which is a Blake2B digest from the ephemeral public key and the recipient's public key.
+        const nonce = new Blake2B({ length: boxNonceLength }).update(ekp.publicKey).update(this.#publicKey).hash();
+        const cipherText = box(new TextEncoder().encode(value), nonce, this.#publicKey, ekp.secretKey);
+        result.set(cipherText, boxPublicKeyLength);
+        return result.toBase64();
+    }
+}
+export default GitHubSodiumSealer;

package/mod.d.ts

@@ -1,70 +0,0 @@
-import { type JSONObject } from "@hugoalh/is-json";
-export interface GitHubRESTSetPublicKeyRequestBody {
-    encrypted_value: string;
-    key_id: string;
-}
-/**
- * GitHub sodium sealer for encrypt value to the GitHub secret value.
- */
-export declare class GitHubSodiumSealer {
-    #private;
-    get [Symbol.toStringTag](): string;
-    /**
-     * Initialize the GitHub sodium sealer.
-     * @param {string} publicKey Public key, which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
-     * @param {string} [keyID] ID of the key, which get from the GitHub organization or repository, need for create or update the GitHub secret. This parameter is optional if no need to output as part of the {@linkcode Request} body.
-     */
-    constructor(publicKey: string, keyID?: string);
-    /**
-     * Encrypt value to the GitHub secret value.
-     * @param {string} value Value that need to encrypt as the GitHub secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     */
-    encrypt(value: string): string;
-    /**
-     * Encrypt value to the GitHub secret value, and output as part of the {@linkcode Request} body for create or update GitHub secret via the GitHub REST API.
-     * @param {string} value Value that need to encrypt as the GitHub secret value.
-     * @returns {GitHubRESTSetPublicKeyRequestBody} Part of the {@linkcode Request} body for create or update GitHub secret via the GitHub REST API.
-     */
-    encryptToRequestBody(value: string): GitHubRESTSetPublicKeyRequestBody;
-    /**
-     * Get the ID of the key.
-     * @returns {string | undefined} ID of the key.
-     */
-    getKeyID(): string | undefined;
-    /**
-     * Get the ID of the key.
-     * @returns {string | undefined} ID of the key.
-     */
-    get keyID(): string | undefined;
-    /**
-     * Initialize the GitHub sodium sealer with the {@linkcode Response} JSON body from get GitHub secret public key via the GitHub REST API.
-     * @param {JSONObject} input {@linkcode Response} JSON body.
-     * @returns {GitHubSodiumSealer} GitHub sodium sealer.
-     */
-    static fromJSON(input: JSONObject): GitHubSodiumSealer;
-    /**
-     * Initialize the GitHub sodium sealer with the {@linkcode Response} from get GitHub secret public key via the GitHub REST API.
-     * @param {Response} input {@linkcode Response}.
-     * @returns {Promise<GitHubSodiumSealer>} GitHub sodium sealer.
-     */
-    static fromResponse(input: Response): Promise<GitHubSodiumSealer>;
-    /**
-     * Encrypt value to the GitHub secret value.
-     * @param {string} publicKey Public key, which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
-     * @param {string} value Value that need to encrypt as the GitHub secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     * @deprecated Migrate to `new GitHubSodiumSealer(publicKey).encrypt(value)`.
-     */
-    static seal(publicKey: string, value: string): string;
-}
-export default GitHubSodiumSealer;
-/**
- * Encrypt value to the GitHub secret value.
- * @param {string} publicKey Public key, which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
- * @param {string} value Value that need to encrypt as the GitHub secret value.
- * @returns {string} An encrypted GitHub secret value.
- * @deprecated Migrate to `new GitHubSodiumSealer(publicKey).encrypt(value)`.
- */
-export declare function seal(publicKey: string, value: string): string;
-//# sourceMappingURL=mod.d.ts.map

package/mod.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../src/mod.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,KAAK,UAAU,EACf,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,iCAAiC;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,qBAAa,kBAAkB;;IAC9B,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAEjC;IAGD;;;;OAIG;gBACS,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAa7C;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAM9B;;;;OAIG;IACH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,iCAAiC;IAStE;;;OAGG;IACH,QAAQ,IAAI,MAAM,GAAG,SAAS;IAG9B;;;OAGG;IACH,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IACD;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB;IAStD;;;;OAIG;WACU,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAOvE;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;CAGrD;AACD,eAAe,kBAAkB,CAAC;AAClC;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/mod.js

@@ -1,114 +0,0 @@
-import { Buffer } from "node:buffer";
-import libsodium from "libsodium-wrappers";
-import { isJSONObject } from "@hugoalh/is-json";
-await libsodium.ready;
-/**
- * GitHub sodium sealer for encrypt value to the GitHub secret value.
- */
-export class GitHubSodiumSealer {
-    get [Symbol.toStringTag]() {
-        return "GitHubSodiumSealer";
-    }
-    #keyID;
-    #publicKey;
-    /**
-     * Initialize the GitHub sodium sealer.
-     * @param {string} publicKey Public key, which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
-     * @param {string} [keyID] ID of the key, which get from the GitHub organization or repository, need for create or update the GitHub secret. This parameter is optional if no need to output as part of the {@linkcode Request} body.
-     */
-    constructor(publicKey, keyID) {
-        if (!(typeof keyID === "undefined" ||
-            (typeof keyID === "string" && keyID.length > 0))) {
-            throw new TypeError(`Parameter \`keyID\` is not \`undefined\`, or a string which is non empty!`);
-        }
-        if (!(publicKey.length > 0)) {
-            throw new SyntaxError(`Parameter \`publicKey\` is not a string which is non empty!`);
-        }
-        this.#keyID = keyID;
-        this.#publicKey = Buffer.from(publicKey, "base64");
-    }
-    /**
-     * Encrypt value to the GitHub secret value.
-     * @param {string} value Value that need to encrypt as the GitHub secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     */
-    encrypt(value) {
-        if (!(value.length > 0)) {
-            throw new SyntaxError(`Parameter \`value\` is not a string which is non empty!`);
-        }
-        return Buffer.from(libsodium.crypto_box_seal(Buffer.from(value), this.#publicKey)).toString("base64");
-    }
-    /**
-     * Encrypt value to the GitHub secret value, and output as part of the {@linkcode Request} body for create or update GitHub secret via the GitHub REST API.
-     * @param {string} value Value that need to encrypt as the GitHub secret value.
-     * @returns {GitHubRESTSetPublicKeyRequestBody} Part of the {@linkcode Request} body for create or update GitHub secret via the GitHub REST API.
-     */
-    encryptToRequestBody(value) {
-        if (this.#keyID !== "string") {
-            throw new Error(`Key ID was not defined at the initialize stage!`);
-        }
-        return {
-            encrypted_value: this.encrypt(value),
-            key_id: this.#keyID
-        };
-    }
-    /**
-     * Get the ID of the key.
-     * @returns {string | undefined} ID of the key.
-     */
-    getKeyID() {
-        return this.#keyID;
-    }
-    /**
-     * Get the ID of the key.
-     * @returns {string | undefined} ID of the key.
-     */
-    get keyID() {
-        return this.#keyID;
-    }
-    /**
-     * Initialize the GitHub sodium sealer with the {@linkcode Response} JSON body from get GitHub secret public key via the GitHub REST API.
-     * @param {JSONObject} input {@linkcode Response} JSON body.
-     * @returns {GitHubSodiumSealer} GitHub sodium sealer.
-     */
-    static fromJSON(input) {
-        if (typeof input.key !== "string" ||
-            typeof input.key_id !== "string") {
-            throw new Error(`Parameter \`input\` is not a valid response JSON body!`);
-        }
-        return new this(input.key, input.key_id);
-    }
-    /**
-     * Initialize the GitHub sodium sealer with the {@linkcode Response} from get GitHub secret public key via the GitHub REST API.
-     * @param {Response} input {@linkcode Response}.
-     * @returns {Promise<GitHubSodiumSealer>} GitHub sodium sealer.
-     */
-    static async fromResponse(input) {
-        const responsePayload = await input.clone().json();
-        if (!isJSONObject(responsePayload)) {
-            throw new Error(`Parameter \`input\` is not a valid response!`);
-        }
-        return GitHubSodiumSealer.fromJSON(responsePayload);
-    }
-    /**
-     * Encrypt value to the GitHub secret value.
-     * @param {string} publicKey Public key, which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
-     * @param {string} value Value that need to encrypt as the GitHub secret value.
-     * @returns {string} An encrypted GitHub secret value.
-     * @deprecated Migrate to `new GitHubSodiumSealer(publicKey).encrypt(value)`.
-     */
-    static seal(publicKey, value) {
-        return new this(publicKey).encrypt(value);
-    }
-}
-export default GitHubSodiumSealer;
-/**
- * Encrypt value to the GitHub secret value.
- * @param {string} publicKey Public key, which get from the GitHub organization or repository, need for encrypt value to the GitHub secret value before create or update the GitHub secret.
- * @param {string} value Value that need to encrypt as the GitHub secret value.
- * @returns {string} An encrypted GitHub secret value.
- * @deprecated Migrate to `new GitHubSodiumSealer(publicKey).encrypt(value)`.
- */
-export function seal(publicKey, value) {
-    return new GitHubSodiumSealer(publicKey).encrypt(value);
-}