@sebastienrousseau/crypto-cli 0.0.7 → 0.0.9

package/dist/commands/modern/sign.command.js

@@ -49,83 +49,93 @@ const ALGORITHMS = [
     "ml-dsa-65",
     "ml-dsa-87",
 ];
-const handleModernSign = async () => {
-    const response = await (0, prompts_1.default)([
-        {
-            type: "select",
-            name: "algorithm",
-            message: "Select signing algorithm",
-            choices: ALGORITHMS.map((a) => ({ title: a, value: a })),
-        },
-        {
-            type: "select",
-            name: "action",
-            message: "Action",
-            choices: [
-                { title: "Generate key pair + sign", value: "keygen-sign" },
-                { title: "Sign with existing key", value: "sign" },
-                { title: "Verify signature", value: "verify" },
-            ],
-        },
-        {
-            type: "text",
-            name: "message",
-            message: "Message to sign/verify",
-        },
+const QUESTIONS = [
+    {
+        type: "select",
+        name: "algorithm",
+        message: "Select signing algorithm",
+        choices: ALGORITHMS.map((a) => ({ title: a, value: a })),
+    },
+    {
+        type: "select",
+        name: "action",
+        message: "Action",
+        choices: [
+            { title: "Generate key pair + sign", value: "keygen-sign" },
+            { title: "Sign with existing key", value: "sign" },
+            { title: "Verify signature", value: "verify" },
+        ],
+    },
+    {
+        type: "text",
+        name: "message",
+        message: "Message to sign/verify",
+    },
+];
+const KEYGEN_ALGORITHM = {
+    "ecdsa-p256": "p256",
+    "ecdsa-p384": "p384",
+};
+function printJson(value) {
+    write_utils_1.writeUtils.writeLn(kleur_1.default.green(JSON.stringify(value, null, 2)));
+}
+async function keygenAndSign(crypto, algorithm, message) {
+    if (algorithm === "schnorr") {
+        const { generateSchnorrKeyPair } = await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib/modern")));
+        const kp = generateSchnorrKeyPair();
+        const sig = crypto.sign("schnorr", kp.privateKey, message);
+        printJson({
+            publicKey: kp.publicKey,
+            privateKey: kp.privateKey,
+            signature: sig,
+            algorithm: "schnorr",
+        });
+        return;
+    }
+    const { generateKeyPair } = await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib/keys")));
+    const keyAlgo = KEYGEN_ALGORITHM[algorithm] ?? algorithm;
+    const kp = generateKeyPair(keyAlgo);
+    const sig = crypto.sign(algorithm, kp.privateKey, message);
+    printJson({
+        publicKey: kp.publicKey,
+        privateKey: kp.privateKey,
+        signature: sig,
+        algorithm,
+    });
+}
+async function signWithKey(crypto, algorithm, message) {
+    const keyResp = await (0, prompts_1.default)({
+        type: "password",
+        name: "privateKey",
+        message: "Private key (hex)",
+    });
+    if (!keyResp.privateKey)
+        return;
+    const sig = crypto.sign(algorithm, keyResp.privateKey, message);
+    printJson({ signature: sig, algorithm });
+}
+async function verifySignature(crypto, algorithm, message) {
+    const verifyResp = await (0, prompts_1.default)([
+        { type: "text", name: "publicKey", message: "Public key (hex)" },
+        { type: "text", name: "signature", message: "Signature (hex)" },
     ]);
+    if (!verifyResp.publicKey || !verifyResp.signature)
+        return;
+    const valid = crypto.verify(algorithm, verifyResp.publicKey, message, verifyResp.signature);
+    printJson({ valid, algorithm });
+}
+const handleModernSign = async () => {
+    const response = await (0, prompts_1.default)(QUESTIONS);
     if (!response.algorithm || !response.action || !response.message)
         return;
     try {
-        const { crypto } = await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib/dist/crypto")));
-        if (response.action === "keygen-sign") {
-            const { generateKeyPair } = await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib/dist/keys/keygen")));
-            let keyAlgo = response.algorithm;
-            if (keyAlgo === "ecdsa-p256")
-                keyAlgo = "p256";
-            if (keyAlgo === "ecdsa-p384")
-                keyAlgo = "p384";
-            if (keyAlgo === "schnorr") {
-                const { generateSchnorrKeyPair } = await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib/dist/modern/curves")));
-                const kp = generateSchnorrKeyPair();
-                const sig = crypto.sign("schnorr", kp.privateKey, response.message);
-                write_utils_1.writeUtils.writeLn(kleur_1.default.green(JSON.stringify({
-                    publicKey: kp.publicKey,
-                    privateKey: kp.privateKey,
-                    signature: sig,
-                    algorithm: "schnorr",
-                }, null, 2)));
-                return;
-            }
-            const kp = generateKeyPair(keyAlgo);
-            const sig = crypto.sign(response.algorithm, kp.privateKey, response.message);
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(JSON.stringify({
-                publicKey: kp.publicKey,
-                privateKey: kp.privateKey,
-                signature: sig,
-                algorithm: response.algorithm,
-            }, null, 2)));
-        }
-        else if (response.action === "sign") {
-            const keyResp = await (0, prompts_1.default)({
-                type: "password",
-                name: "privateKey",
-                message: "Private key (hex)",
-            });
-            if (!keyResp.privateKey)
-                return;
-            const sig = crypto.sign(response.algorithm, keyResp.privateKey, response.message);
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(JSON.stringify({ signature: sig, algorithm: response.algorithm }, null, 2)));
-        }
-        else {
-            const verifyResp = await (0, prompts_1.default)([
-                { type: "text", name: "publicKey", message: "Public key (hex)" },
-                { type: "text", name: "signature", message: "Signature (hex)" },
-            ]);
-            if (!verifyResp.publicKey || !verifyResp.signature)
-                return;
-            const valid = crypto.verify(response.algorithm, verifyResp.publicKey, response.message, verifyResp.signature);
-            write_utils_1.writeUtils.writeLn(kleur_1.default.green(JSON.stringify({ valid, algorithm: response.algorithm }, null, 2)));
-        }
+        const { crypto } = await Promise.resolve().then(() => __importStar(require("@sebastienrousseau/crypto-lib")));
+        let run = verifySignature;
+        if (response.action === "keygen-sign")
+            run = keygenAndSign;
+        else if (response.action === "sign")
+            run = signWithKey;
+        await run(crypto, response.algorithm, response.message);
     }
     catch (err) {
         write_utils_1.writeUtils.writeLn(kleur_1.default.red(`Operation failed: ${err.message}`));

package/dist/commands/reformat.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const reformat_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/reformat"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleReformat = async () => {
     const responseReformat = await (0, prompts_1.default)([
@@ -49,7 +49,7 @@ const handleReformat = async () => {
         console.error("\n🔔 You must provide a value for each of the properties.\n");
     }
     else {
-        await (0, reformat_1.default)(data);
+        await (0, pgp_1.reformat)(data);
     }
 };
 exports.default = handleReformat;

package/dist/commands/revoke.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const revoke_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/revoke"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleRevoke = async () => {
     const responseRevoke = await (0, prompts_1.default)([
@@ -33,7 +33,7 @@ const handleRevoke = async () => {
         console.error("\n🔔 You must provide a value for each of the properties.\n");
     }
     else {
-        await (0, revoke_1.default)(data);
+        await (0, pgp_1.revoke)(data);
     }
 };
 exports.default = handleRevoke;

package/dist/commands/session.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const session_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/session"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleSession = async () => {
     const responseSession = await (0, prompts_1.default)([
@@ -35,7 +35,7 @@ const handleSession = async () => {
     }
     else {
         console.log(data);
-        await (0, session_1.default)(data);
+        await (0, pgp_1.session)(data);
     }
 };
 exports.default = handleSession;

package/dist/commands/sign.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const sign_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/sign"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleSign = async () => {
     const responseSign = await (0, prompts_1.default)([
@@ -42,7 +42,7 @@ const handleSign = async () => {
         console.error("\n🔔 You must provide a value for each of the properties.\n");
     }
     else {
-        await (0, sign_1.default)(data);
+        await (0, pgp_1.sign)(data);
     }
 };
 exports.default = handleSign;

package/dist/commands/verify.command.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const verify_1 = __importDefault(require("@sebastienrousseau/crypto-lib/dist/lib/verify"));
+const pgp_1 = require("@sebastienrousseau/crypto-lib/pgp");
 const prompts_1 = __importDefault(require("prompts"));
 const handleVerify = async () => {
     const responseVerify = await (0, prompts_1.default)([
@@ -35,7 +35,7 @@ const handleVerify = async () => {
     }
     else {
         console.log(data);
-        await (0, verify_1.default)(data);
+        await (0, pgp_1.verify)(data);
     }
 };
 exports.default = handleVerify;

package/dist/menu.d.ts

@@ -0,0 +1,12 @@
+import { Command } from "./commands/index";
+type Handler = keyof typeof Command;
+export interface MenuEntry {
+    title: string;
+    description: string;
+    heading: string;
+    handler: Handler;
+}
+export declare const menuEntries: () => MenuEntry[];
+export declare const runMenu: () => Promise<void>;
+export {};
+//# sourceMappingURL=menu.d.ts.map

package/dist/menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"menu.d.ts","sourceRoot":"","sources":["../src/menu.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAM3C,KAAK,OAAO,GAAG,MAAM,OAAO,OAAO,CAAC;AAGpC,MAAM,WAAW,SAAS;IAExB,KAAK,EAAE,MAAM,CAAC;IAEd,WAAW,EAAE,MAAM,CAAC;IAEpB,OAAO,EAAE,MAAM,CAAC;IAEhB,OAAO,EAAE,OAAO,CAAC;CAClB;AA0DD,eAAO,MAAM,WAAW,QAAO,SAAS,EAcvC,CAAC;AAMF,eAAO,MAAM,OAAO,QAAa,OAAO,CAAC,IAAI,CA8B5C,CAAC"}

package/dist/menu.js

@@ -0,0 +1,107 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runMenu = exports.menuEntries = void 0;
+const kleur_1 = __importDefault(require("kleur"));
+const prompts_1 = __importDefault(require("prompts"));
+const index_1 = require("./commands/index");
+const index_2 = require("./constants/index");
+const banner_1 = require("./helpers/banner");
+const write_utils_1 = require("./utils/write.utils");
+const LEGACY = [
+    [1, "handleGenerate"],
+    [2, "handleEncrypt"],
+    [3, "handleDecrypt"],
+    [4, "handleReformat"],
+    [5, "handleRevoke"],
+    [6, "handleSession"],
+    [7, "handleSign"],
+    [8, "handleVerify"],
+];
+const MODERN = [
+    {
+        title: "Modern Keygen",
+        description: "Generate keys (Ed25519, ML-DSA, ML-KEM, P-256, etc.)",
+        heading: "Modern Key Generation",
+        handler: "handleModernKeygen",
+    },
+    {
+        title: "Modern Hash",
+        description: "Hash data (SHA-2, SHA-3, BLAKE2b, BLAKE3)",
+        heading: "Modern Hashing",
+        handler: "handleModernHash",
+    },
+    {
+        title: "Modern Encrypt",
+        description: "Encrypt (XChaCha20, AES-GCM, AES-GCM-SIV)",
+        heading: "Modern Encryption",
+        handler: "handleModernEncrypt",
+    },
+    {
+        title: "Modern Sign",
+        description: "Sign/verify (Ed25519, ECDSA, Schnorr, ML-DSA)",
+        heading: "Modern Signing",
+        handler: "handleModernSign",
+    },
+    {
+        title: "Password Hash",
+        description: "Hash/verify passwords (Argon2id/i/d)",
+        heading: "Password Hashing (Argon2)",
+        handler: "handlePasswordHash",
+    },
+    {
+        title: "CBOM",
+        description: "Generate or audit Cryptographic Bill of Materials",
+        heading: "Cryptographic Bill of Materials (CBOM)",
+        handler: "handleModernCbom",
+    },
+];
+const menuEntries = () => [
+    ...LEGACY.map(([n, handler]) => ({
+        title: index_2.constants[`CLI_FN_${n}_TTL`],
+        description: index_2.constants[`CLI_FN_${n}_DES`],
+        heading: index_2.constants.CLI_HDL_1_DES,
+        handler,
+    })),
+    ...MODERN,
+    {
+        title: index_2.constants.CLI_FN_9_TTL,
+        description: index_2.constants.CLI_FN_9_DES,
+        heading: index_2.constants.CLI_FN_9_TTL,
+        handler: "handleHelp",
+    },
+];
+exports.menuEntries = menuEntries;
+const runMenu = async () => {
+    (0, index_2.language)(index_2.locale);
+    console.clear();
+    (0, banner_1.welcome)(index_2.constants.CLI_TITLE);
+    write_utils_1.writeUtils.writeLn(index_2.constants.CLI_TITLE);
+    write_utils_1.writeUtils.writeLn("");
+    write_utils_1.writeUtils.writeLn(index_2.constants.CLI_DESCRIPTION);
+    write_utils_1.writeUtils.writeLn("");
+    const entries = (0, exports.menuEntries)();
+    const response = await (0, prompts_1.default)({
+        type: "select",
+        name: index_2.constants.PROMPT_SELECT_TTL,
+        message: index_2.constants.PROMPT_SELECT_DES + "\n\n",
+        choices: entries.map(({ title, description }) => ({
+            title,
+            description,
+            value: title,
+        })),
+    });
+    const selected = response[index_2.constants.PROMPT_SELECT_TTL];
+    const entry = entries.find((e) => e.title === selected);
+    write_utils_1.writeUtils.writeLn("");
+    if (!entry) {
+        write_utils_1.writeUtils.writeLn(kleur_1.default.red(index_2.constants.CLI_ERR_1));
+        return;
+    }
+    write_utils_1.writeUtils.writeLn(kleur_1.default.green(entry.heading));
+    await index_1.Command[entry.handler]();
+};
+exports.runMenu = runMenu;
+//# sourceMappingURL=menu.js.map

package/dist/program/cbom.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+import { type RunContext } from "./io";
+export declare const registerCbom: (program: Command, ctx: RunContext) => Command;
+//# sourceMappingURL=cbom.d.ts.map

package/dist/program/cbom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbom.d.ts","sourceRoot":"","sources":["../../src/program/cbom.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAO5C,OAAO,EAAyB,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAiF9D,eAAO,MAAM,YAAY,GAAI,SAAS,OAAO,EAAE,KAAK,UAAU,YAQ7D,CAAC"}

package/dist/program/cbom.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerCbom = void 0;
+const promises_1 = require("node:fs/promises");
+const commander_1 = require("commander");
+const cbom_core_1 = require("../commands/modern/cbom.core");
+const io_1 = require("./io");
+const deliver = async (ctx, document, opts, label) => {
+    const pretty = JSON.stringify(document, null, 2);
+    if (opts.output === undefined) {
+        (0, io_1.emit)(ctx.io, Boolean(opts.json), document, pretty);
+        return;
+    }
+    await (0, promises_1.writeFile)(opts.output, `${pretty}\n`, "utf8");
+    ctx.io.stderr(`${label} written to ${opts.output}\n`);
+};
+const withOutputOptions = (command, what) => command
+    .option("-o, --output <file>", `write the ${what} to a file, not stdout`)
+    .option("--json", `print the ${what} as one line of JSON`);
+const registerScan = (cbom, ctx) => withOutputOptions(cbom
+    .command("scan")
+    .description("Scan source code and print its CBOM")
+    .argument("[directory]", "directory or file to scan", ".")
+    .addOption(new commander_1.Option("-f, --format <format>", "CBOM standard")
+    .choices(cbom_core_1.CBOM_FORMATS)
+    .default("cyclonedx")), "CBOM").action(async (directory, opts) => {
+    await deliver(ctx, await (0, cbom_core_1.buildCbom)(directory, opts.format), opts, "CBOM");
+});
+const registerAudit = (cbom, ctx) => withOutputOptions(cbom
+    .command("audit")
+    .description("Validate and audit a CBOM; exits 1 when the audit status is FAIL")
+    .argument("[file]", "CBOM JSON file; '-' or omitted reads standard input"), "audit report").action(async (file, opts) => {
+    const raw = (await (0, io_1.readInput)(file, ctx.io)).toString("utf8");
+    const result = await (0, cbom_core_1.auditCbomJson)(raw);
+    await deliver(ctx, result, opts, "Audit report");
+    if (result.status === "FAIL")
+        ctx.exitCode = io_1.EXIT.FAILURE;
+});
+const registerCbom = (program, ctx) => {
+    const cbom = program
+        .command("cbom")
+        .description("Generate or audit a Cryptographic Bill of Materials")
+        .helpCommand(false);
+    registerScan(cbom, ctx);
+    registerAudit(cbom, ctx);
+    return cbom;
+};
+exports.registerCbom = registerCbom;
+//# sourceMappingURL=cbom.js.map

package/dist/program/encrypt.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "commander";
+import { type RunContext } from "./io";
+export declare const parseSymmetricKey: (raw: Buffer) => Uint8Array;
+export declare const registerEncrypt: (program: Command, ctx: RunContext) => Command;
+export declare const registerDecrypt: (program: Command, ctx: RunContext) => Command;
+//# sourceMappingURL=encrypt.d.ts.map

package/dist/program/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/program/encrypt.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,MAAM,CAAC;AA6Bd,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,UAQ/C,CAAC;AAgEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,EAAE,KAAK,UAAU,YAU7D,CAAC;AASL,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,EAAE,KAAK,UAAU,YA+B7D,CAAC"}

package/dist/program/encrypt.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDecrypt = exports.registerEncrypt = exports.parseSymmetricKey = void 0;
+const high_level_1 = require("@sebastienrousseau/crypto-lib/high-level");
+const io_1 = require("./io");
+const secrets_1 = require("./secrets");
+const KEY_LENGTH = 32;
+const HEX_KEY = /^[0-9a-fA-F]{64}$/;
+const BASE64 = /^[A-Za-z0-9+/]+={0,2}$/;
+const parseSymmetricKey = (raw) => {
+    const text = raw.toString("latin1").trim();
+    if (HEX_KEY.test(text))
+        return Buffer.from(text, "hex");
+    if (raw.length === KEY_LENGTH)
+        return raw;
+    throw new Error(`the key must be ${KEY_LENGTH} bytes: 64 hexadecimal characters ` +
+        `or ${KEY_LENGTH} raw bytes`);
+};
+exports.parseSymmetricKey = parseSymmetricKey;
+const readKey = async (ctx, opts, file) => {
+    const source = { file: opts.keyFile, stdin: opts.keyStdin };
+    const raw = await (0, secrets_1.requireSecret)({
+        io: ctx.io,
+        source,
+        flags: secrets_1.KEY_FLAGS,
+        dataOnStdin: (0, io_1.isStdin)(file),
+        checkMode: true,
+    }, "key");
+    return (0, exports.parseSymmetricKey)(raw);
+};
+const parseSealed = (input) => {
+    const sealed = (0, io_1.valueOrJsonField)(input, "sealed");
+    if (!BASE64.test(sealed)) {
+        throw new Error("the input is not base64 from crypto-cli encrypt");
+    }
+    return Buffer.from(sealed, "base64");
+};
+const secretboxCommand = (program, name, description, input) => (0, secrets_1.withSecretOptions)(program
+    .command(name)
+    .description(description)
+    .argument("[file]", `${input}; '-' or omitted reads standard input`), secrets_1.KEY_FLAGS, {
+    what: "key",
+    format: "32 bytes, as 64 hex characters or raw",
+    takesData: true,
+}).option("--json", "print the result as one line of JSON");
+const registerEncrypt = (program, ctx) => secretboxCommand(program, "encrypt", "Encrypt with XChaCha20-Poly1305 and print the sealed box as base64", "file to encrypt").action(async (file, opts) => {
+    const key = await readKey(ctx, opts, file);
+    const result = high_level_1.secretbox.seal(key, await (0, io_1.readInput)(file, ctx.io));
+    (0, io_1.emit)(ctx.io, Boolean(opts.json), result, result.sealed);
+});
+exports.registerEncrypt = registerEncrypt;
+const registerDecrypt = (program, ctx) => secretboxCommand(program, "decrypt", "Decrypt the output of encrypt; exits 1 on a wrong key or modified input", "output of encrypt (base64 or its --json line)").action(async (file, opts) => {
+    const key = await readKey(ctx, opts, file);
+    const sealed = parseSealed(await (0, io_1.readInput)(file, ctx.io));
+    let plaintext;
+    try {
+        plaintext = high_level_1.secretbox.open(key, sealed);
+    }
+    catch {
+        throw new Error("decryption failed: wrong key, or the input was modified or truncated");
+    }
+    if (!opts.json) {
+        ctx.io.stdout(plaintext);
+        return;
+    }
+    (0, io_1.emit)(ctx.io, true, {
+        plaintext: Buffer.from(plaintext).toString("base64"),
+        encoding: "base64",
+        algorithm: "xchacha20-poly1305",
+    }, "");
+});
+exports.registerDecrypt = registerDecrypt;
+//# sourceMappingURL=encrypt.js.map

package/dist/program/hash.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+import { type RunContext } from "./io";
+export declare const registerHash: (program: Command, ctx: RunContext) => Command;
+//# sourceMappingURL=hash.d.ts.map

package/dist/program/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/program/hash.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAM5C,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAcxD,eAAO,MAAM,YAAY,GAAI,SAAS,OAAO,EAAE,KAAK,UAAU,YAexD,CAAC"}

package/dist/program/hash.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerHash = void 0;
+const commander_1 = require("commander");
+const modern_1 = require("@sebastienrousseau/crypto-lib/modern");
+const io_1 = require("./io");
+const registerHash = (program, ctx) => program
+    .command("hash")
+    .description("Hash a file, or standard input when no file is given")
+    .argument("[file]", "file to hash; '-' or omitted reads standard input")
+    .addOption(new commander_1.Option("-a, --algorithm <name>", "hash algorithm")
+    .choices(modern_1.HASH_ALGORITHMS)
+    .default("sha256"))
+    .option("--json", "print the result as one line of JSON")
+    .action(async (file, opts) => {
+    const data = await (0, io_1.readInput)(file, ctx.io);
+    const result = (0, modern_1.hash)({ algorithm: opts.algorithm, data });
+    (0, io_1.emit)(ctx.io, Boolean(opts.json), result, result.digest);
+});
+exports.registerHash = registerHash;
+//# sourceMappingURL=hash.js.map

package/dist/program/index.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "commander";
+import { type CliIO, type RunContext } from "./io";
+export { EXIT, exitOnClosedPipe, processIO, type CliIO, type RunContext, } from "./io";
+export declare const buildProgram: (ctx: RunContext, version: string) => Command;
+export declare const run: (args: string[], io: CliIO) => Promise<number>;
+export declare const main: (args: string[], io: CliIO, menu: () => Promise<void>) => Promise<number>;
+//# sourceMappingURL=index.d.ts.map

package/dist/program/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/program/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAkB,MAAM,WAAW,CAAC;AAKpD,OAAO,EAAoB,KAAK,KAAK,EAAE,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAKrE,OAAO,EACL,IAAI,EACJ,gBAAgB,EAChB,SAAS,EACT,KAAK,KAAK,EACV,KAAK,UAAU,GAChB,MAAM,MAAM,CAAC;AASd,eAAO,MAAM,YAAY,GAAI,KAAK,UAAU,EAAE,SAAS,MAAM,KAAG,OAqB/D,CAAC;AAmBF,eAAO,MAAM,GAAG,GAAU,MAAM,MAAM,EAAE,EAAE,IAAI,KAAK,KAAG,OAAO,CAAC,MAAM,CASnE,CAAC;AAWF,eAAO,MAAM,IAAI,GACf,MAAM,MAAM,EAAE,EACd,IAAI,KAAK,EACT,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC,KACxB,OAAO,CAAC,MAAM,CAShB,CAAC"}

package/dist/program/index.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.main = exports.run = exports.buildProgram = exports.processIO = exports.exitOnClosedPipe = exports.EXIT = void 0;
+const commander_1 = require("commander");
+const version_utils_1 = require("../utils/version.utils");
+const cbom_1 = require("./cbom");
+const hash_1 = require("./hash");
+const encrypt_1 = require("./encrypt");
+const io_1 = require("./io");
+const keygen_1 = require("./keygen");
+const password_1 = require("./password");
+const sign_1 = require("./sign");
+var io_2 = require("./io");
+Object.defineProperty(exports, "EXIT", { enumerable: true, get: function () { return io_2.EXIT; } });
+Object.defineProperty(exports, "exitOnClosedPipe", { enumerable: true, get: function () { return io_2.exitOnClosedPipe; } });
+Object.defineProperty(exports, "processIO", { enumerable: true, get: function () { return io_2.processIO; } });
+const buildProgram = (ctx, version) => {
+    const program = new commander_1.Command("crypto-cli")
+        .description("Cryptographic operations from the command line. Run without " +
+        "arguments in a terminal for the interactive menu.")
+        .version(version, "-V, --version", "print the version")
+        .helpOption("-h, --help", "print help")
+        .helpCommand(false)
+        .exitOverride()
+        .configureOutput({ writeOut: ctx.io.stdout, writeErr: ctx.io.stderr })
+        .showSuggestionAfterError();
+    (0, hash_1.registerHash)(program, ctx);
+    (0, keygen_1.registerKeygen)(program, ctx);
+    (0, encrypt_1.registerEncrypt)(program, ctx);
+    (0, encrypt_1.registerDecrypt)(program, ctx);
+    (0, sign_1.registerSign)(program, ctx);
+    (0, sign_1.registerVerify)(program, ctx);
+    (0, password_1.registerPassword)(program, ctx);
+    (0, cbom_1.registerCbom)(program, ctx);
+    return program;
+};
+exports.buildProgram = buildProgram;
+const exitCodeFor = (err, io) => {
+    if (err instanceof commander_1.CommanderError) {
+        return err.exitCode === 0 ? io_1.EXIT.OK : io_1.EXIT.USAGE;
+    }
+    io.stderr(`crypto-cli: ${err.message}\n`);
+    return err instanceof io_1.UsageError ? io_1.EXIT.USAGE : io_1.EXIT.FAILURE;
+};
+const run = async (args, io) => {
+    const ctx = { io, exitCode: io_1.EXIT.OK };
+    const program = (0, exports.buildProgram)(ctx, await (0, version_utils_1.getVersion)());
+    try {
+        await program.parseAsync(args, { from: "user" });
+        return ctx.exitCode;
+    }
+    catch (err) {
+        return exitCodeFor(err, io);
+    }
+};
+exports.run = run;
+const main = async (args, io, menu) => {
+    if (args.length > 0)
+        return (0, exports.run)(args, io);
+    if (io.isTTY) {
+        await menu();
+        return io_1.EXIT.OK;
+    }
+    const ctx = { io, exitCode: io_1.EXIT.OK };
+    io.stderr((0, exports.buildProgram)(ctx, await (0, version_utils_1.getVersion)()).helpInformation());
+    return io_1.EXIT.USAGE;
+};
+exports.main = main;
+//# sourceMappingURL=index.js.map