@tengx5383/aitool-sync-cli 0.1.0

package/dist/types/gist.d.ts

@@ -0,0 +1,25 @@
+export interface GistFile {
+    filename: string;
+    content: string;
+}
+export interface GistDescriptor {
+    gistId: string;
+    description: string;
+    files: GistFile[];
+    updatedAt: string;
+}
+export interface GistClientInterface {
+    /** Create a new Gist */
+    createGist(description: string, files: Record<string, {
+        content: string;
+    }>): Promise<GistDescriptor>;
+    /** Get a Gist by ID */
+    getGist(gistId: string): Promise<GistDescriptor>;
+    /** Update an existing Gist */
+    updateGist(gistId: string, files: Record<string, {
+        content: string;
+    }>): Promise<GistDescriptor>;
+    /** Delete a Gist (for cleanup) */
+    deleteGist(gistId: string): Promise<void>;
+}
+//# sourceMappingURL=gist.d.ts.map

package/dist/types/gist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gist.d.ts","sourceRoot":"","sources":["../../src/types/gist.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrG,uBAAuB;IACvB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,8BAA8B;IAC9B,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChG,kCAAkC;IAClC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C"}

package/dist/types/gist.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gist.js.map

package/dist/types/gist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gist.js","sourceRoot":"","sources":["../../src/types/gist.ts"],"names":[],"mappings":""}

package/dist/types/index.d.ts

@@ -0,0 +1,4 @@
+export type { AppConfig, SyncPathEntry, ExclusionRule, EncryptionRule, ToolPresetId, ToolPreset, } from './config.js';
+export type { Manifest, ManifestEntry, SyncFile, SyncPackage, DiffEntry, ConflictEntry, SyncDiff, SyncResult, } from './sync.js';
+export type { GistFile, GistDescriptor, GistClientInterface, } from './gist.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,SAAS,EACT,aAAa,EACb,aAAa,EACb,cAAc,EACd,YAAY,EACZ,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,WAAW,EACX,SAAS,EACT,aAAa,EACb,QAAQ,EACR,UAAU,GACX,MAAM,WAAW,CAAC;AAEnB,YAAY,EACV,QAAQ,EACR,cAAc,EACd,mBAAmB,GACpB,MAAM,WAAW,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/types/sync.d.ts

@@ -0,0 +1,78 @@
+export interface ManifestEntry {
+    /** Relative path of the file within the sync root */
+    relativePath: string;
+    /** SHA-256 checksum of file contents */
+    checksum: string;
+    /** File size in bytes */
+    size: number;
+    /** Last modified timestamp (ISO 8601) */
+    modifiedAt: string;
+    /** Originating SyncPathEntry name */
+    sourceName: string;
+    /** Whether this file content is encrypted */
+    encrypted: boolean;
+    /** Encryption rule pattern that matched (null if not encrypted) */
+    encryptionPattern: string | null;
+}
+export interface Manifest {
+    /** Manifest format version */
+    version: 1;
+    /** Timestamp when manifest was generated */
+    generatedAt: string;
+    /** All file entries */
+    entries: ManifestEntry[];
+}
+export interface SyncFile {
+    /** Relative path of the file */
+    relativePath: string;
+    /** File content as Base64 string */
+    content: string;
+    /** Whether content is encrypted */
+    encrypted: boolean;
+    /** Entry metadata */
+    entry: ManifestEntry;
+}
+export interface SyncPackage {
+    /** Package format version */
+    version: 1;
+    /** Timestamp of package creation */
+    createdAt: string;
+    /** Manifest of all synced files */
+    manifest: Manifest;
+    /** File contents */
+    files: SyncFile[];
+}
+export interface DiffEntry {
+    relativePath: string;
+    status: 'added' | 'removed' | 'modified' | 'renamed';
+    localChecksum: string | null;
+    remoteChecksum: string | null;
+}
+export interface ConflictEntry {
+    relativePath: string;
+    localChecksum: string;
+    remoteChecksum: string;
+    lastKnownChecksum: string | null;
+}
+export interface SyncDiff {
+    /** Only in local manifest */
+    added: DiffEntry[];
+    /** Only in remote manifest */
+    removed: DiffEntry[];
+    /** Present in both, checksum differs, lastKnown matches one side */
+    modified: DiffEntry[];
+    /** Present in both, checksum differs, lastKnown matches neither (both sides changed) */
+    conflicts: ConflictEntry[];
+    /** Whether any conflicts exist */
+    hasConflicts: boolean;
+    /** Whether there are any differences at all */
+    hasChanges: boolean;
+}
+export interface SyncResult {
+    success: boolean;
+    action: 'push' | 'pull' | 'force-push' | 'force-pull';
+    filesUploaded: number;
+    filesDownloaded: number;
+    errors: string[];
+}
+//# sourceMappingURL=sync.d.ts.map

package/dist/types/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/types/sync.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;IACnB,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,QAAQ;IACvB,8BAA8B;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB;IACvB,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,oBAAoB;IACpB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACrD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,QAAQ;IACvB,6BAA6B;IAC7B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,8BAA8B;IAC9B,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,oEAAoE;IACpE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtB,wFAAwF;IACxF,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,kCAAkC;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;IACtD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB"}

package/dist/types/sync.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sync.js.map

package/dist/types/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/types/sync.ts"],"names":[],"mappings":""}

package/dist/utils/diff.d.ts

@@ -0,0 +1,7 @@
+import type { Manifest, SyncDiff } from '../types/sync.js';
+/**
+ * Compare two manifests and produce a SyncDiff.
+ * Uses lastKnownManifest for three-way merge detection.
+ */
+export declare function diffManifests(local: Manifest, remote: Manifest, lastKnown: Manifest | null): SyncDiff;
+//# sourceMappingURL=diff.d.ts.map

package/dist/utils/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/utils/diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAiB,QAAQ,EAA4B,MAAM,kBAAkB,CAAC;AAEpG;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,QAAQ,EACf,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,QAAQ,GAAG,IAAI,GACzB,QAAQ,CAqGV"}

package/dist/utils/diff.js

@@ -0,0 +1,99 @@
+/**
+ * Compare two manifests and produce a SyncDiff.
+ * Uses lastKnownManifest for three-way merge detection.
+ */
+export function diffManifests(local, remote, lastKnown) {
+    const localMap = new Map();
+    const remoteMap = new Map();
+    const lastKnownMap = new Map();
+    for (const entry of local.entries) {
+        localMap.set(entry.relativePath, entry);
+    }
+    for (const entry of remote.entries) {
+        remoteMap.set(entry.relativePath, entry);
+    }
+    if (lastKnown) {
+        for (const entry of lastKnown.entries) {
+            lastKnownMap.set(entry.relativePath, entry);
+        }
+    }
+    const allPaths = new Set([
+        ...localMap.keys(),
+        ...remoteMap.keys(),
+    ]);
+    const added = [];
+    const removed = [];
+    const modified = [];
+    const conflicts = [];
+    for (const path of allPaths) {
+        const localEntry = localMap.get(path);
+        const remoteEntry = remoteMap.get(path);
+        const lastKnownEntry = lastKnownMap.get(path);
+        // Only local
+        if (localEntry && !remoteEntry) {
+            added.push({
+                relativePath: path,
+                status: 'added',
+                localChecksum: localEntry.checksum,
+                remoteChecksum: null,
+            });
+            continue;
+        }
+        // Only remote
+        if (!localEntry && remoteEntry) {
+            removed.push({
+                relativePath: path,
+                status: 'removed',
+                localChecksum: null,
+                remoteChecksum: remoteEntry.checksum,
+            });
+            continue;
+        }
+        // Both exist
+        if (localEntry && remoteEntry) {
+            if (localEntry.checksum === remoteEntry.checksum) {
+                // Same — no diff
+                continue;
+            }
+            // Different checksums — use three-way merge detection
+            const localChanged = !lastKnownEntry || localEntry.checksum !== lastKnownEntry.checksum;
+            const remoteChanged = !lastKnownEntry || remoteEntry.checksum !== lastKnownEntry.checksum;
+            if (localChanged && !remoteChanged) {
+                // Only local changed — safe to push
+                modified.push({
+                    relativePath: path,
+                    status: 'modified',
+                    localChecksum: localEntry.checksum,
+                    remoteChecksum: remoteEntry.checksum,
+                });
+            }
+            else if (!localChanged && remoteChanged) {
+                // Only remote changed — safe to pull
+                modified.push({
+                    relativePath: path,
+                    status: 'modified',
+                    localChecksum: localEntry.checksum,
+                    remoteChecksum: remoteEntry.checksum,
+                });
+            }
+            else {
+                // Both changed or no base — conflict
+                conflicts.push({
+                    relativePath: path,
+                    localChecksum: localEntry.checksum,
+                    remoteChecksum: remoteEntry.checksum,
+                    lastKnownChecksum: lastKnownEntry?.checksum || null,
+                });
+            }
+        }
+    }
+    return {
+        added,
+        removed,
+        modified,
+        conflicts,
+        hasConflicts: conflicts.length > 0,
+        hasChanges: added.length > 0 || removed.length > 0 || modified.length > 0 || conflicts.length > 0,
+    };
+}
+//# sourceMappingURL=diff.js.map

package/dist/utils/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/utils/diff.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAe,EACf,MAAgB,EAChB,SAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEtD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YACtC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,GAAG,QAAQ,CAAC,IAAI,EAAE;QAClB,GAAG,SAAS,CAAC,IAAI,EAAE;KACpB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAgB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE9C,aAAa;QACb,IAAI,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC;gBACT,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,OAAO;gBACf,aAAa,EAAE,UAAU,CAAC,QAAQ;gBAClC,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,cAAc;QACd,IAAI,CAAC,UAAU,IAAI,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,SAAS;gBACjB,aAAa,EAAE,IAAI;gBACnB,cAAc,EAAE,WAAW,CAAC,QAAQ;aACrC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,aAAa;QACb,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,EAAE,CAAC;gBACjD,iBAAiB;gBACjB,SAAS;YACX,CAAC;YAED,sDAAsD;YACtD,MAAM,YAAY,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,CAAC;YACxF,MAAM,aAAa,GAAG,CAAC,cAAc,IAAI,WAAW,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,CAAC;YAE1F,IAAI,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnC,oCAAoC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE,UAAU;oBAClB,aAAa,EAAE,UAAU,CAAC,QAAQ;oBAClC,cAAc,EAAE,WAAW,CAAC,QAAQ;iBACrC,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,CAAC,YAAY,IAAI,aAAa,EAAE,CAAC;gBAC1C,qCAAqC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE,UAAU;oBAClB,aAAa,EAAE,UAAU,CAAC,QAAQ;oBAClC,cAAc,EAAE,WAAW,CAAC,QAAQ;iBACrC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,qCAAqC;gBACrC,SAAS,CAAC,IAAI,CAAC;oBACb,YAAY,EAAE,IAAI;oBAClB,aAAa,EAAE,UAAU,CAAC,QAAQ;oBAClC,cAAc,EAAE,WAAW,CAAC,QAAQ;oBACpC,iBAAiB,EAAE,cAAc,EAAE,QAAQ,IAAI,IAAI;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,OAAO;QACP,QAAQ;QACR,SAAS;QACT,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC;QAClC,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;KAClG,CAAC;AACJ,CAAC"}

package/dist/utils/env.d.ts

@@ -0,0 +1,13 @@
+import type { AppConfig } from '../types/config.js';
+/**
+ * Environment variable helpers.
+ */
+export declare function getEnv(key: string, defaultValue?: string): string | undefined;
+export declare function requireEnv(key: string): string;
+export declare function getGithubToken(): string | undefined;
+/**
+ * Resolve the GitHub token from config file first, then environment variable.
+ */
+export declare function resolveGithubToken(config?: AppConfig | null): string | undefined;
+export declare function getEncryptionPassword(): string | undefined;
+//# sourceMappingURL=env.d.ts.map

package/dist/utils/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD;;GAEG;AAEH,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE7E;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM9C;AAED,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAKhF;AAED,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D"}

package/dist/utils/env.js

@@ -0,0 +1,29 @@
+/**
+ * Environment variable helpers.
+ */
+export function getEnv(key, defaultValue) {
+    return process.env[key] || defaultValue;
+}
+export function requireEnv(key) {
+    const value = process.env[key];
+    if (!value) {
+        throw new Error(`Required environment variable ${key} is not set.`);
+    }
+    return value;
+}
+export function getGithubToken() {
+    return getEnv('GITHUB_TOKEN');
+}
+/**
+ * Resolve the GitHub token from config file first, then environment variable.
+ */
+export function resolveGithubToken(config) {
+    if (config?.githubToken) {
+        return config.githubToken;
+    }
+    return getGithubToken();
+}
+export function getEncryptionPassword() {
+    return getEnv('AITOOLSYNC_PASSWORD');
+}
+//# sourceMappingURL=env.js.map

package/dist/utils/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAEA;;GAEG;AAEH,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,YAAqB;IACvD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,IAAI,MAAM,EAAE,WAAW,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IACD,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACvC,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,14 @@
+export declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3
+}
+export declare function setLogLevel(level: LogLevel): void;
+export declare function debug(msg: string): void;
+export declare function info(msg: string): void;
+export declare function success(msg: string): void;
+export declare function warn(msg: string): void;
+export declare function error(msg: string): void;
+export declare function plain(msg: string): void;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAEA,oBAAY,QAAQ;IAClB,KAAK,IAAI;IACT,IAAI,IAAI;IACR,IAAI,IAAI;IACR,KAAK,IAAI;CACV;AAID,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAEjD;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvC;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAItC;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEzC;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAItC;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvC;AAED,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEvC"}

package/dist/utils/logger.js

@@ -0,0 +1,39 @@
+import chalk from 'chalk';
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
+    LogLevel[LogLevel["INFO"] = 1] = "INFO";
+    LogLevel[LogLevel["WARN"] = 2] = "WARN";
+    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
+})(LogLevel || (LogLevel = {}));
+let currentLevel = LogLevel.INFO;
+export function setLogLevel(level) {
+    currentLevel = level;
+}
+export function debug(msg) {
+    if (currentLevel <= LogLevel.DEBUG) {
+        process.stderr.write(chalk.gray(`[debug] ${msg}\n`));
+    }
+}
+export function info(msg) {
+    if (currentLevel <= LogLevel.INFO) {
+        process.stderr.write(chalk.blue(`[info] ${msg}\n`));
+    }
+}
+export function success(msg) {
+    process.stderr.write(chalk.green(`[success] ${msg}\n`));
+}
+export function warn(msg) {
+    if (currentLevel <= LogLevel.WARN) {
+        process.stderr.write(chalk.yellow(`[warn] ${msg}\n`));
+    }
+}
+export function error(msg) {
+    if (currentLevel <= LogLevel.ERROR) {
+        process.stderr.write(chalk.red(`[error] ${msg}\n`));
+    }
+}
+export function plain(msg) {
+    process.stdout.write(`${msg}\n`);
+}
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAN,IAAY,QAKX;AALD,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;AACX,CAAC,EALW,QAAQ,KAAR,QAAQ,QAKnB;AAED,IAAI,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC;AAEjC,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,YAAY,GAAG,KAAK,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,IAAI,YAAY,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,IAAI,YAAY,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,IAAI,YAAY,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,IAAI,YAAY,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/utils/table.d.ts

@@ -0,0 +1,5 @@
+import type { SyncPathEntry } from '../types/config.js';
+import type { DiffEntry, ConflictEntry } from '../types/sync.js';
+export declare function renderPathList(entries: SyncPathEntry[]): void;
+export declare function renderDiffTable(added: DiffEntry[], removed: DiffEntry[], modified: DiffEntry[], conflicts: ConflictEntry[]): void;
+//# sourceMappingURL=table.d.ts.map

package/dist/utils/table.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/utils/table.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAqB7D;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAAE,EAClB,OAAO,EAAE,SAAS,EAAE,EACpB,QAAQ,EAAE,SAAS,EAAE,EACrB,SAAS,EAAE,aAAa,EAAE,GACzB,IAAI,CA2CN"}

package/dist/utils/table.js

@@ -0,0 +1,59 @@
+import Table from 'cli-table3';
+import chalk from 'chalk';
+export function renderPathList(entries) {
+    if (entries.length === 0) {
+        console.log(chalk.gray('  No paths configured.'));
+        return;
+    }
+    const table = new Table({
+        head: [chalk.bold('Name'), chalk.bold('Path'), chalk.bold('Enabled')],
+        style: { head: [] },
+        colWidths: [20, 50, 10],
+    });
+    for (const entry of entries) {
+        table.push([
+            entry.name,
+            entry.path,
+            entry.enabled ? chalk.green('yes') : chalk.gray('no'),
+        ]);
+    }
+    console.log(table.toString());
+}
+export function renderDiffTable(added, removed, modified, conflicts) {
+    if (added.length === 0 && removed.length === 0 && modified.length === 0 && conflicts.length === 0) {
+        console.log(chalk.green('  No differences found. Local and remote are in sync.'));
+        return;
+    }
+    const table = new Table({
+        head: [chalk.bold('File'), chalk.bold('Status'), chalk.bold('Local'), chalk.bold('Remote')],
+        style: { head: [] },
+        colWidths: [40, 12, 14, 14],
+    });
+    for (const entry of added) {
+        table.push([entry.relativePath, chalk.green('added'), entry.localChecksum?.slice(0, 8) || '-', '-']);
+    }
+    for (const entry of removed) {
+        table.push([entry.relativePath, chalk.red('removed'), '-', entry.remoteChecksum?.slice(0, 8) || '-']);
+    }
+    for (const entry of modified) {
+        table.push([
+            entry.relativePath,
+            chalk.yellow('modified'),
+            entry.localChecksum?.slice(0, 8) || '-',
+            entry.remoteChecksum?.slice(0, 8) || '-',
+        ]);
+    }
+    for (const entry of conflicts) {
+        table.push([
+            entry.relativePath,
+            chalk.red('CONFLICT'),
+            entry.localChecksum.slice(0, 8),
+            entry.remoteChecksum.slice(0, 8),
+        ]);
+    }
+    console.log(table.toString());
+    if (conflicts.length > 0) {
+        console.log(chalk.red(`\n  ${conflicts.length} conflict(s) detected. Use --force to override.`));
+    }
+}
+//# sourceMappingURL=table.js.map

package/dist/utils/table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.js","sourceRoot":"","sources":["../../src/utils/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACnB,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;KACxB,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAkB,EAClB,OAAoB,EACpB,QAAqB,EACrB,SAA0B;IAE1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3F,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACnB,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;KAC5B,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;YACxB,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG;YACvC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG;SACzC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YACrB,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/B,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE9B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,MAAM,iDAAiD,CAAC,CAAC,CAAC;IACnG,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@tengx5383/aitool-sync-cli",
+  "version": "0.1.0",
+  "description": "CLI for syncing AI agent tool configs across devices via GitHub Gist",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "aitool-sync": "./dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "postbuild": "node -e \"require('fs').chmodSync('dist/index.js', 0o755)\"",
+    "prepare": "npm run build",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prettier": "prettier --write ."
+  },
+  "keywords": ["cli", "sync", "ai-tools", "claude-code", "config"],
+  "license": "MIT",
+  "dependencies": {
+    "@octokit/rest": "^21.0.0",
+    "chalk": "^5.3.0",
+    "cli-table3": "^0.6.5",
+    "commander": "^12.1.0",
+    "dayjs": "^1.11.13",
+    "inquirer": "^12.0.0",
+    "micromatch": "^4.0.8",
+    "ora": "^8.1.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/inquirer": "^9.0.7",
+    "@types/micromatch": "^4.0.9",
+    "@types/node": "^22.0.0",
+    "prettier": "^3.3.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0"
+  }
+}

package/tests/integration/encryption-flow.test.ts

@@ -0,0 +1,142 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { encrypt, decrypt, isEncrypted } from '../../src/crypto/encryptor.js';
+import { setPassword, clearPassword, resolvePassword, encryptWithPassword, decryptWithPassword, hasPassword } from '../../src/crypto/key-resolver.js';
+import { createDefaultConfig, writeConfig } from '../../src/config/config-file.js';
+import { buildSyncPackage, parseSyncPackage } from '../../src/core/sync-package.js';
+import { createManifest, serializeManifest } from '../../src/core/manifest.js';
+import { pushSync, pullSync, writeRemoteFiles } from '../../src/core/sync-engine.js';
+import { MockGistClient } from '../../src/gist/mock-client.js';
+import type { AppConfig } from '../../src/types/index.js';
+
+const TEST_PASSWORD = 'test-secret-password-123';
+
+function createTestDir(base: string): string {
+  const dir = path.join(base, 'encrypted-tools');
+  fs.mkdirSync(dir, { recursive: true });
+  fs.writeFileSync(path.join(dir, 'config.json'), JSON.stringify({ version: 1 }));
+  fs.writeFileSync(path.join(dir, 'token.json'), JSON.stringify({ apiKey: 'secret-token-123' }));
+  return dir;
+}
+
+describe('encryption flow', () => {
+  let tmpDir: string;
+  let mockClient: MockGistClient;
+
+  beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'aitoolsync-crypto-'));
+    process.chdir(tmpDir);
+    mockClient = new MockGistClient();
+    setPassword(TEST_PASSWORD);
+  });
+
+  afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+    clearPassword();
+  });
+
+  it('encrypts and decrypts a string', () => {
+    const plaintext = 'Hello, World!';
+    const encrypted = encrypt(plaintext, TEST_PASSWORD);
+    expect(encrypted).not.toBe(plaintext);
+
+    const decrypted = decrypt(encrypted, TEST_PASSWORD);
+    expect(decrypted).toBe(plaintext);
+  });
+
+  it('detects encrypted payloads', () => {
+    const encrypted = encrypt('test data', TEST_PASSWORD);
+    expect(isEncrypted(encrypted)).toBe(true);
+    expect(isEncrypted('plain text')).toBe(false);
+  });
+
+  it('key resolver caches and resolves password', () => {
+    clearPassword();
+    expect(hasPassword()).toBe(false);
+
+    setPassword('my-password');
+    expect(hasPassword()).toBe(true);
+    expect(resolvePassword()).toBe('my-password');
+
+    clearPassword();
+    expect(hasPassword()).toBe(false);
+  });
+
+  it('encrypt with password convenience function', () => {
+    const plaintext = 'sensitive data';
+    const encrypted = encryptWithPassword(plaintext);
+    expect(encrypted).not.toBe(plaintext);
+
+    const decrypted = decryptWithPassword(encrypted);
+    expect(decrypted).toBe(plaintext);
+  });
+
+  it('push and pull with encrypted files', async () => {
+    const testDir = createTestDir(tmpDir);
+    const config = createDefaultConfig();
+    config.syncPaths = [{ name: 'enc-tools', path: testDir, enabled: true }];
+    config.encryption = [{ pattern: '**/token.json' }];
+
+    const gist = await mockClient.createGist('aitoolsync', {
+      'aitoolsync-package.json': { content: '{}' },
+    });
+    config.gistId = gist.gistId;
+    writeConfig(config);
+
+    // Push with encryption
+    const pushResult = await pushSync(config, mockClient, false, encryptWithPassword);
+    expect(pushResult.success).toBe(true);
+
+    // Verify Gist content is encrypted for token.json
+    const fetched = await mockClient.getGist(gist.gistId);
+    const pkgFile = fetched.files.find((f) => f.filename === 'aitoolsync-package.json');
+    const pkg = parseSyncPackage(pkgFile!.content);
+    const tokenFile = pkg!.files.find((f) => f.relativePath === 'token.json');
+    expect(tokenFile!.encrypted).toBe(true);
+    expect(tokenFile!.content).not.toContain('secret-token');
+
+    const configFile = pkg!.files.find((f) => f.relativePath === 'config.json');
+    expect(configFile!.encrypted).toBe(false);
+  });
+
+  it('pull and decrypt files', async () => {
+    const testDir = createTestDir(tmpDir);
+    const config = createDefaultConfig();
+    config.syncPaths = [{ name: 'enc-tools', path: testDir, enabled: true }];
+    config.encryption = [{ pattern: '**/token.json' }];
+
+    const gist = await mockClient.createGist('aitoolsync', {
+      'aitoolsync-package.json': { content: '{}' },
+    });
+    config.gistId = gist.gistId;
+    writeConfig(config);
+
+    // Push with encryption first
+    await pushSync(config, mockClient, false, encryptWithPassword);
+
+    // Corrupt local files
+    fs.writeFileSync(path.join(testDir, 'token.json'), 'CORRUPTED');
+
+    // Pull and decrypt
+    const pullResult = await pullSync(config, mockClient, false, decryptWithPassword);
+    expect(pullResult.success).toBe(true);
+
+    // Verify file was restored correctly
+    const content = JSON.parse(fs.readFileSync(path.join(testDir, 'token.json'), 'utf-8'));
+    expect(content.apiKey).toBe('secret-token-123');
+  });
+
+  it('fails to decrypt with wrong password', () => {
+    const encrypted = encrypt('secret', TEST_PASSWORD);
+    expect(() => decrypt(encrypted, 'wrong-password')).toThrow();
+  });
+
+  it('encrypted content does not leak plaintext', () => {
+    const plaintext = 'super-secret-api-key-12345';
+    const encrypted = encrypt(plaintext, TEST_PASSWORD);
+    expect(encrypted).not.toContain('super-secret-api-key');
+    expect(encrypted).not.toContain('12345');
+  });
+});