@tinyrack/dotweave 0.39.4

package/dist/config/xdg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xdg.d.ts","sourceRoot":"","sources":["../../src/config/xdg.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,oBAAoB,GAAI,MAAM,MAAM,GAAG,SAAS,WAQ5D,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,MAAM,MAAM,GAAG,SAAS,EACxB,eAAe,MAAM,GAAG,SAAS,WASlC,CAAC;AAEF,eAAO,MAAM,8BAA8B,GAAI,eAAe,MAAM,WAEnE,CAAC;AAEF,eAAO,MAAM,mCAAmC,GAC9C,yBAAyB,MAAM,WAGhC,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACvC,yBAAyB,MAAM,WAGhC,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,EAAE,MAAM,MAAM,GAAG,SAAS,WAWrE,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,OAAO,MAAM,EACb,MAAM,MAAM,GAAG,SAAS,EACxB,eAAe,MAAM,GAAG,SAAS,EACjC,UAAU,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,WA4B/C,CAAC;AAEF,eAAO,MAAM,6BAA6B,GACxC,OAAO,MAAM,EACb,MAAM,MAAM,GAAG,SAAS,EACxB,eAAe,MAAM,GAAG,SAAS,EACjC,UAAU,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,WAgB/C,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,OAAO,MAAM,EACb,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,KAC5C,MAUF,CAAC"}

package/dist/config/xdg.js

@@ -0,0 +1,90 @@
+import { homedir } from "node:os";
+import { isAbsolute, resolve } from "node:path";
+import { CONSTANTS } from "#app/config/constants.ts";
+const xdgConfigHomeToken = "$XDG_CONFIG_HOME";
+const xdgConfigHomeTokenPrefix = `${xdgConfigHomeToken}/`;
+const bracedXdgConfigHomeToken = "${XDG_CONFIG_HOME}";
+const bracedXdgConfigHomePrefix = `${bracedXdgConfigHomeToken}/`;
+const trimConfiguredValue = (value) => {
+    if (value === undefined) {
+        return undefined;
+    }
+    const trimmedValue = value.trim();
+    return trimmedValue === "" ? undefined : trimmedValue;
+};
+const readTrimmedEnvironmentValue = (readEnv, key) => {
+    const value = readEnv(key);
+    return value === undefined ? undefined : trimConfiguredValue(value);
+};
+export const resolveHomeDirectory = (home) => {
+    const configuredValue = trimConfiguredValue(home);
+    if (configuredValue !== undefined) {
+        return resolve(configuredValue);
+    }
+    return resolve(homedir());
+};
+export const resolveXdgConfigHome = (home, xdgConfigHome) => {
+    const configuredValue = trimConfiguredValue(xdgConfigHome);
+    if (configuredValue !== undefined) {
+        return resolve(configuredValue);
+    }
+    return resolve(resolveHomeDirectory(home), ".config");
+};
+export const resolveDotweaveConfigDirectory = (xdgConfigHome) => {
+    return resolve(xdgConfigHome, CONSTANTS.XDG.APP_DIRECTORY_NAME);
+};
+export const resolveDotweaveGlobalConfigFilePath = (dotweaveConfigDirectory) => {
+    return resolve(dotweaveConfigDirectory, CONSTANTS.GLOBAL_CONFIG.FILE_NAME);
+};
+export const resolveDotweaveSyncDirectory = (dotweaveConfigDirectory) => {
+    return resolve(dotweaveConfigDirectory, CONSTANTS.XDG.SYNC_DIRECTORY_NAME);
+};
+export const expandHomePath = (value, home) => {
+    let expandedValue = value.trim();
+    const homeDirectory = resolveHomeDirectory(home);
+    if (expandedValue === "~") {
+        expandedValue = homeDirectory;
+    }
+    else if (expandedValue.startsWith("~/")) {
+        expandedValue = resolve(homeDirectory, expandedValue.slice(2));
+    }
+    return expandedValue;
+};
+export const expandConfiguredPath = (value, home, xdgConfigHome, readEnv) => {
+    let expandedValue = value.trim();
+    if (readEnv !== undefined && expandedValue.includes("%")) {
+        expandedValue = expandWindowsEnvVars(expandedValue, readEnv);
+    }
+    expandedValue = expandHomePath(expandedValue, home);
+    const resolvedXdgConfigHome = resolveXdgConfigHome(home, xdgConfigHome);
+    if (expandedValue === xdgConfigHomeToken) {
+        expandedValue = resolvedXdgConfigHome;
+    }
+    else if (expandedValue.startsWith(xdgConfigHomeTokenPrefix)) {
+        expandedValue = resolve(resolvedXdgConfigHome, expandedValue.slice(xdgConfigHomeTokenPrefix.length));
+    }
+    else if (expandedValue === bracedXdgConfigHomeToken) {
+        expandedValue = resolvedXdgConfigHome;
+    }
+    else if (expandedValue.startsWith(bracedXdgConfigHomePrefix)) {
+        expandedValue = resolve(resolvedXdgConfigHome, expandedValue.slice(bracedXdgConfigHomePrefix.length));
+    }
+    return expandedValue;
+};
+export const resolveConfiguredAbsolutePath = (value, home, xdgConfigHome, readEnv) => {
+    const expandedValue = expandConfiguredPath(value, home, xdgConfigHome, readEnv);
+    if (!isAbsolute(expandedValue)) {
+        throw new Error(`Configured path must be absolute or start with ~ or ${xdgConfigHomeToken}: ${value}`);
+    }
+    return resolve(expandedValue);
+};
+export const expandWindowsEnvVars = (value, readEnv) => {
+    return value.replace(/%([^%]+)%/g, (_match, varName) => {
+        const envValue = readTrimmedEnvironmentValue(readEnv, varName);
+        if (envValue === undefined) {
+            throw new Error(`Environment variable %${varName}% is not defined.`);
+        }
+        return envValue;
+    });
+};
+//# sourceMappingURL=xdg.js.map

package/dist/config/xdg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xdg.js","sourceRoot":"","sources":["../../src/config/xdg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,wBAAwB,GAAG,GAAG,kBAAkB,GAAG,CAAC;AAC1D,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AACtD,MAAM,yBAAyB,GAAG,GAAG,wBAAwB,GAAG,CAAC;AAEjE,MAAM,mBAAmB,GAAG,CAAC,KAAyB,EAAE,EAAE;IACxD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAElC,OAAO,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,OAA6C,EAC7C,GAAW,EACX,EAAE;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE3B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAwB,EAAE,EAAE;IAC/D,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAElD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAwB,EACxB,aAAiC,EACjC,EAAE;IACF,MAAM,eAAe,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAE3D,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,aAAqB,EAAE,EAAE;IACtE,OAAO,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,uBAA+B,EAC/B,EAAE;IACF,OAAO,OAAO,CAAC,uBAAuB,EAAE,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,uBAA+B,EAC/B,EAAE;IACF,OAAO,OAAO,CAAC,uBAAuB,EAAE,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,IAAwB,EAAE,EAAE;IACxE,IAAI,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,aAAa,KAAK,GAAG,EAAE,CAAC;QAC1B,aAAa,GAAG,aAAa,CAAC;IAChC,CAAC;SAAM,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAa,EACb,IAAwB,EACxB,aAAiC,EACjC,OAA8C,EAC9C,EAAE;IACF,IAAI,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAEjC,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,aAAa,GAAG,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,aAAa,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAExE,IAAI,aAAa,KAAK,kBAAkB,EAAE,CAAC;QACzC,aAAa,GAAG,qBAAqB,CAAC;IACxC,CAAC;SAAM,IAAI,aAAa,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC9D,aAAa,GAAG,OAAO,CACrB,qBAAqB,EACrB,aAAa,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CACrD,CAAC;IACJ,CAAC;SAAM,IAAI,aAAa,KAAK,wBAAwB,EAAE,CAAC;QACtD,aAAa,GAAG,qBAAqB,CAAC;IACxC,CAAC;SAAM,IAAI,aAAa,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC/D,aAAa,GAAG,OAAO,CACrB,qBAAqB,EACrB,aAAa,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,KAAa,EACb,IAAwB,EACxB,aAAiC,EACjC,OAA8C,EAC9C,EAAE;IACF,MAAM,aAAa,GAAG,oBAAoB,CACxC,KAAK,EACL,IAAI,EACJ,aAAa,EACb,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,uDAAuD,kBAAkB,KAAK,KAAK,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,aAAa,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAa,EACb,OAA6C,EACrC,EAAE;IACV,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,OAAe,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,mBAAmB,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCli } from "#app/application.ts";
+await runCli(process.argv.slice(2));
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/lib/content.d.ts

@@ -0,0 +1,5 @@
+export declare const fileContentsEqual: (left: Uint8Array, right: Uint8Array, options?: Readonly<{
+    normalizeTextLineEndings?: boolean;
+}>) => boolean;
+export declare const shouldNormalizeTextLineEndings: () => boolean;
+//# sourceMappingURL=content.d.ts.map

package/dist/lib/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/lib/content.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,iBAAiB,GAC5B,MAAM,UAAU,EAChB,OAAO,UAAU,EACjB,UAAS,QAAQ,CAAC;IAChB,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAM,YAkBR,CAAC;AAEF,eAAO,MAAM,8BAA8B,eAE1C,CAAC"}

package/dist/lib/content.js

@@ -0,0 +1,29 @@
+const decodeUtf8 = (contents) => {
+    try {
+        return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(contents);
+    }
+    catch {
+        return undefined;
+    }
+};
+const normalizeLineEndings = (contents) => {
+    return contents.replaceAll("\r\n", "\n");
+};
+export const fileContentsEqual = (left, right, options = {}) => {
+    if (Buffer.compare(Buffer.from(left), Buffer.from(right)) === 0) {
+        return true;
+    }
+    if (options.normalizeTextLineEndings !== true) {
+        return false;
+    }
+    const leftText = decodeUtf8(left);
+    const rightText = decodeUtf8(right);
+    if (leftText === undefined || rightText === undefined) {
+        return false;
+    }
+    return normalizeLineEndings(leftText) === normalizeLineEndings(rightText);
+};
+export const shouldNormalizeTextLineEndings = () => {
+    return process.platform === "win32";
+};
+//# sourceMappingURL=content.js.map

package/dist/lib/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/lib/content.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,CAAC,QAAoB,EAAE,EAAE;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CACtE,QAAQ,CACT,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,QAAgB,EAAE,EAAE;IAChD,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAAgB,EAChB,KAAiB,EACjB,UAEK,EAAE,EACP,EAAE;IACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,wBAAwB,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAEpC,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,EAAE;IACjD,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtC,CAAC,CAAC"}

package/dist/lib/crypto.d.ts

@@ -0,0 +1,45 @@
+/**
+ * @description
+ * Validates and normalizes a single age identity for dotweave use.
+ */
+export declare const resolveAgeIdentity: (identity: string) => Promise<{
+    identity: string;
+    recipient: string;
+}>;
+/**
+ * @description
+ * Reads usable age identities from an identity file.
+ */
+export declare const readAgeIdentityLines: (identityFile: string) => Promise<string[]>;
+/**
+ * @description
+ * Derives the unique recipient list represented by an identity file.
+ */
+export declare const readAgeRecipientsFromIdentityFile: (identityFile: string) => Promise<string[]>;
+/**
+ * @description
+ * Generates and persists a new age identity file for dotweave.
+ */
+export declare const createAgeIdentityFile: (identityFile: string) => Promise<{
+    identity: string;
+    recipient: string;
+}>;
+/**
+ * @description
+ * Persists a supplied age identity after validating it.
+ */
+export declare const writeAgeIdentityFile: (identityFile: string, identity: string) => Promise<{
+    identity: string;
+    recipient: string;
+}>;
+/**
+ * @description
+ * Encrypts secret file contents for the configured recipients.
+ */
+export declare const encryptSecretFile: (contents: Uint8Array, recipients: readonly string[]) => Promise<string>;
+/**
+ * @description
+ * Decrypts an armored secret artifact with identities from the configured file.
+ */
+export declare const decryptSecretFile: (armoredCiphertext: string, identityFile: string) => Promise<Uint8Array<ArrayBufferLike>>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/lib/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/lib/crypto.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAU,UAAU,MAAM;;;EAqBxD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,GAAU,cAAc,MAAM,sBAqB9D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iCAAiC,GAC5C,cAAc,MAAM,sBAwBrB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAU,cAAc,MAAM;;;EAW/D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,GAC/B,cAAc,MAAM,EACpB,UAAU,MAAM;;;EAYjB,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAC5B,UAAU,UAAU,EACpB,YAAY,SAAS,MAAM,EAAE,oBAW9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAC5B,mBAAmB,MAAM,EACzB,cAAc,MAAM,yCAkBrB,CAAC"}

package/dist/lib/crypto.js

@@ -0,0 +1,130 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { armor, Decrypter, Encrypter, generateIdentity, identityToRecipient, } from "age-encryption";
+import { DotweaveError, wrapUnknownError } from "#app/lib/error.ts";
+import { ensureTrailingNewline } from "#app/lib/string.ts";
+/**
+ * @description
+ * Validates and normalizes a single age identity for dotweave use.
+ */
+export const resolveAgeIdentity = async (identity) => {
+    const normalizedIdentity = identity.trim();
+    if (normalizedIdentity === "") {
+        throw new DotweaveError("Age private key cannot be empty.", {
+            code: "AGE_IDENTITY_INVALID",
+            hint: "Provide a valid age private key starting with 'AGE-SECRET-KEY-'.",
+        });
+    }
+    try {
+        return {
+            identity: normalizedIdentity,
+            recipient: await identityToRecipient(normalizedIdentity),
+        };
+    }
+    catch (error) {
+        throw wrapUnknownError("Invalid age private key.", error, {
+            code: "AGE_IDENTITY_INVALID",
+            hint: "Provide a valid age private key starting with 'AGE-SECRET-KEY-'.",
+        });
+    }
+};
+/**
+ * @description
+ * Reads usable age identities from an identity file.
+ */
+export const readAgeIdentityLines = async (identityFile) => {
+    const contents = await readFile(identityFile, "utf8");
+    const identities = contents
+        .split(/\r?\n/u)
+        .map((line) => line.trim())
+        .filter((line) => {
+        return line !== "" && !line.startsWith("#");
+    });
+    if (identities.length === 0) {
+        throw new DotweaveError("No age identities were found in the configured identity file.", {
+            code: "AGE_IDENTITY_EMPTY",
+            details: [`Identity file: ${identityFile}`],
+            hint: "Add at least one age private key to the identity file, or run 'dotweave init' to generate one.",
+        });
+    }
+    return identities;
+};
+/**
+ * @description
+ * Derives the unique recipient list represented by an identity file.
+ */
+export const readAgeRecipientsFromIdentityFile = async (identityFile) => {
+    const identities = await readAgeIdentityLines(identityFile);
+    let recipients;
+    try {
+        recipients = await Promise.all(identities.map(async (identity) => {
+            return await identityToRecipient(identity);
+        }));
+    }
+    catch (error) {
+        throw wrapUnknownError("Failed to read age recipients from the configured identity file.", error, {
+            code: "AGE_RECIPIENT_READ_FAILED",
+            details: [`Identity file: ${identityFile}`],
+            hint: "Check that the identity file contains valid age private keys.",
+        });
+    }
+    return [...new Set(recipients)];
+};
+/**
+ * @description
+ * Generates and persists a new age identity file for dotweave.
+ */
+export const createAgeIdentityFile = async (identityFile) => {
+    const identity = await generateIdentity();
+    const recipient = await identityToRecipient(identity);
+    await mkdir(dirname(identityFile), { recursive: true });
+    await writeFile(identityFile, ensureTrailingNewline(identity), "utf8");
+    return {
+        identity,
+        recipient,
+    };
+};
+/**
+ * @description
+ * Persists a supplied age identity after validating it.
+ */
+export const writeAgeIdentityFile = async (identityFile, identity) => {
+    const resolvedIdentity = await resolveAgeIdentity(identity);
+    await mkdir(dirname(identityFile), { recursive: true });
+    await writeFile(identityFile, ensureTrailingNewline(resolvedIdentity.identity), "utf8");
+    return resolvedIdentity;
+};
+/**
+ * @description
+ * Encrypts secret file contents for the configured recipients.
+ */
+export const encryptSecretFile = async (contents, recipients) => {
+    const encrypter = new Encrypter();
+    for (const recipient of recipients) {
+        encrypter.addRecipient(recipient);
+    }
+    const ciphertext = await encrypter.encrypt(contents);
+    return armor.encode(ciphertext);
+};
+/**
+ * @description
+ * Decrypts an armored secret artifact with identities from the configured file.
+ */
+export const decryptSecretFile = async (armoredCiphertext, identityFile) => {
+    const decrypter = new Decrypter();
+    const identities = await readAgeIdentityLines(identityFile);
+    for (const identity of identities) {
+        decrypter.addIdentity(identity);
+    }
+    try {
+        return await decrypter.decrypt(armor.decode(armoredCiphertext));
+    }
+    catch (error) {
+        throw wrapUnknownError("Failed to decrypt a secret artifact.", error, {
+            code: "AGE_DECRYPT_FAILED",
+            details: [`Identity file: ${identityFile}`],
+            hint: "Check that the artifact is valid age data and that the configured identity file matches one of its recipients.",
+        });
+    }
+};
+//# sourceMappingURL=crypto.js.map

package/dist/lib/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/lib/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACL,KAAK,EACL,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;IAC3D,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAE3C,IAAI,kBAAkB,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE;YAC1D,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,kEAAkE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,SAAS,EAAE,MAAM,mBAAmB,CAAC,kBAAkB,CAAC;SACzD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,gBAAgB,CAAC,0BAA0B,EAAE,KAAK,EAAE;YACxD,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,kEAAkE;SACzE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,YAAoB,EAAE,EAAE;IACjE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,QAAQ;SACxB,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEL,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CACrB,+DAA+D,EAC/D;YACE,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,kBAAkB,YAAY,EAAE,CAAC;YAC3C,IAAI,EAAE,gGAAgG;SACvG,CACF,CAAC;IACJ,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,KAAK,EACpD,YAAoB,EACpB,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,UAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YAChC,OAAO,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,gBAAgB,CACpB,kEAAkE,EAClE,KAAK,EACL;YACE,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,CAAC,kBAAkB,YAAY,EAAE,CAAC;YAC3C,IAAI,EAAE,+DAA+D;SACtE,CACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,YAAoB,EAAE,EAAE;IAClE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAEtD,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,YAAY,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvE,OAAO;QACL,QAAQ;QACR,SAAS;KACV,CAAC;AACJ,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACvC,YAAoB,EACpB,QAAgB,EAChB,EAAE;IACF,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAE5D,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,CACb,YAAY,EACZ,qBAAqB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAChD,MAAM,CACP,CAAC;IAEF,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,QAAoB,EACpB,UAA6B,EAC7B,EAAE;IACF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAElC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAErD,OAAO,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,iBAAyB,EACzB,YAAoB,EACpB,EAAE;IACF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;IAE5D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,gBAAgB,CAAC,sCAAsC,EAAE,KAAK,EAAE;YACpE,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,CAAC,kBAAkB,YAAY,EAAE,CAAC;YAC3C,IAAI,EAAE,gHAAgH;SACvH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC"}

package/dist/lib/env.d.ts

@@ -0,0 +1,13 @@
+import z from "zod";
+declare const EnvSchema: z.ZodObject<{
+    COMSPEC: z.ZodOptional<z.ZodString>;
+    HOME: z.ZodOptional<z.ZodString>;
+    SHELL: z.ZodOptional<z.ZodString>;
+    WSL_DISTRO_NAME: z.ZodOptional<z.ZodString>;
+    WSL_INTEROP: z.ZodOptional<z.ZodString>;
+    XDG_CONFIG_HOME: z.ZodOptional<z.ZodString>;
+}, z.z.core.$catchall<z.ZodOptional<z.ZodString>>>;
+export type Env = z.infer<typeof EnvSchema>;
+export declare const ENV: Env;
+export {};
+//# sourceMappingURL=env.d.ts.map

package/dist/lib/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,QAAA,MAAM,SAAS;;;;;;;kDAmDmB,CAAC;AAEnC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAE5C,eAAO,MAAM,GAAG,EAAE,GAAkC,CAAC"}

package/dist/lib/env.js

@@ -0,0 +1,50 @@
+import z from "zod";
+const EnvSchema = z
+    .object({
+    /**
+     * @description
+     * Windows only. Path to the default command interpreter (usually `cmd.exe`).
+     * Used as the fallback shell command when no explicit override is configured
+     * and no parent PowerShell process is detected on the Windows platform.
+     */
+    COMSPEC: z.string().optional(),
+    /**
+     * @description
+     * The current user's home directory. Used as the root for resolving `~`-prefixed
+     * local paths throughout config loading, path expansion, and sync entry
+     * resolution on all platforms.
+     */
+    HOME: z.string().optional(),
+    /**
+     * @description
+     * Unix/macOS/WSL. Absolute path to the user's preferred login shell (e.g.
+     * `/bin/zsh` or `/usr/bin/fish`). Read by the `dotweave cd` command to select
+     * the shell to launch when no explicit override is configured.
+     */
+    SHELL: z.string().optional(),
+    /**
+     * @description
+     * WSL (Windows Subsystem for Linux) only. Set by WSL to the name of the active
+     * distro (e.g. `Ubuntu`). Its presence is used to detect the WSL platform so
+     * that WSL-specific sync mode overrides are applied when resolving config entries.
+     */
+    WSL_DISTRO_NAME: z.string().optional(),
+    /**
+     * @description
+     * WSL (Windows Subsystem for Linux) only. Path to the WSL interop socket used
+     * to communicate with the Windows host. Its presence is used as a secondary
+     * signal for detecting the WSL platform alongside `WSL_DISTRO_NAME`.
+     */
+    WSL_INTEROP: z.string().optional(),
+    /**
+     * @description
+     * XDG Base Directory spec override for the user's config home. When set,
+     * replaces the default `~/.config` location for all dotweave configuration
+     * files (global config, identity keys, the sync directory). Expanded via
+     * Windows-style `%VARIABLE%` expansion when running under WSL or Windows.
+     */
+    XDG_CONFIG_HOME: z.string().optional(),
+})
+    .catchall(z.string().optional());
+export const ENV = EnvSchema.parse(process.env);
+//# sourceMappingURL=env.js.map

package/dist/lib/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,CAAC;IACN;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE9B;;;;;OAKG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE3B;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE5B;;;;;OAKG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC;;;;;;OAMG;IACH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAInC,MAAM,CAAC,MAAM,GAAG,GAAQ,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC"}

package/dist/lib/error.d.ts

@@ -0,0 +1,22 @@
+export type DotweaveErrorOptions = Readonly<{
+    code?: string;
+    details?: readonly string[];
+    hint?: string;
+}>;
+export declare class DotweaveError extends Error {
+    readonly code?: string;
+    readonly details: readonly string[];
+    readonly hint?: string;
+    constructor(message: string, options?: DotweaveErrorOptions);
+}
+/**
+ * @description
+ * Renders supported error values into the user-facing dotweave error format.
+ */
+export declare const formatDotweaveError: (error: DotweaveError | Error | string) => string;
+/**
+ * @description
+ * Wraps unknown failures in a DotweaveError with normalized detail lines.
+ */
+export declare const wrapUnknownError: (message: string, error: unknown, options?: DotweaveErrorOptions) => DotweaveError;
+//# sourceMappingURL=error.d.ts.map

package/dist/lib/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/lib/error.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAYH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAgB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB;CAOvE;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,aAAa,GAAG,KAAK,GAAG,MAAM,WAcxE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,GAC3B,SAAS,MAAM,EACf,OAAO,OAAO,EACd,UAAS,oBAAyB,kBAQnC,CAAC"}

package/dist/lib/error.js

@@ -0,0 +1,50 @@
+/**
+ * @description
+ * Removes empty lines before error details are rendered or stored.
+ */
+const compactLines = (lines) => {
+    return lines.filter((line) => {
+        return typeof line === "string" && line.trim().length > 0;
+    });
+};
+export class DotweaveError extends Error {
+    code;
+    details;
+    hint;
+    constructor(message, options = {}) {
+        super(message);
+        this.name = "DotweaveError";
+        this.code = options.code;
+        this.details = options.details ?? [];
+        this.hint = options.hint;
+    }
+}
+/**
+ * @description
+ * Renders supported error values into the user-facing dotweave error format.
+ */
+export const formatDotweaveError = (error) => {
+    if (typeof error === "string") {
+        return error;
+    }
+    if (!(error instanceof DotweaveError)) {
+        return error.message;
+    }
+    return compactLines([
+        error.message,
+        ...error.details,
+        error.hint === undefined ? undefined : `Hint: ${error.hint}`,
+    ]).join("\n");
+};
+/**
+ * @description
+ * Wraps unknown failures in a DotweaveError with normalized detail lines.
+ */
+export const wrapUnknownError = (message, error, options = {}) => {
+    const detail = error instanceof Error ? error.message.trim() : String(error);
+    return new DotweaveError(message, {
+        ...options,
+        details: compactLines([...(options.details ?? []), detail]),
+    });
+};
+//# sourceMappingURL=error.js.map

package/dist/lib/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/lib/error.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,KAAsC,EAAE,EAAE;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE;QAC3C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAU;IACd,OAAO,CAAoB;IAC3B,IAAI,CAAU;IAE9B,YAAmB,OAAe,EAAE,UAAgC,EAAE;QACpE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAqC,EAAE,EAAE;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,YAAY,CAAC;QAClB,KAAK,CAAC,OAAO;QACb,GAAG,KAAK,CAAC,OAAO;QAChB,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE;KAC7D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAAe,EACf,KAAc,EACd,UAAgC,EAAE,EAClC,EAAE;IACF,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7E,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE;QAChC,GAAG,OAAO;QACV,OAAO,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;KAC5D,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/lib/file-mode.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @description
+ * Indicates whether the current filesystem can reliably round-trip POSIX modes.
+ */
+export declare const supportsPosixFileModes: () => boolean;
+/**
+ * @description
+ * Builds the default file mode for regular sync artifacts.
+ */
+export declare const buildExecutableMode: (executable: boolean) => 493 | 420;
+/**
+ * @description
+ * Expands directory permissions so readable entries remain searchable.
+ */
+export declare const buildSearchableDirectoryMode: (mode: number) => number;
+/**
+ * @description
+ * Determines whether a mode grants execute permission to any class.
+ */
+export declare const isExecutableMode: (mode: number | bigint) => boolean;
+/**
+ * @description
+ * Validates permission strings accepted by dotweave configuration.
+ */
+export declare const isPermissionOctal: (value: string) => boolean;
+/**
+ * @description
+ * Converts a validated permission string into a numeric file mode.
+ */
+export declare const parsePermissionOctal: (value: string) => number;
+/**
+ * @description
+ * Formats a mode as the permission string shape used in configuration.
+ */
+export declare const formatPermissionOctal: (mode: number) => string;
+//# sourceMappingURL=file-mode.d.ts.map

package/dist/lib/file-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-mode.d.ts","sourceRoot":"","sources":["../../src/lib/file-mode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,sBAAsB,eAElC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,YAAY,OAAO,cAEtD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,GAAI,MAAM,MAAM,WAIxD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,GAAG,MAAM,YAErD,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,MAAM,YAE9C,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,MAAM,WAQjD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,MAAM,MAAM,WAEjD,CAAC"}

package/dist/lib/file-mode.js

@@ -0,0 +1,55 @@
+/**
+ * @description
+ * Indicates whether the current filesystem can reliably round-trip POSIX modes.
+ */
+export const supportsPosixFileModes = () => {
+    return process.platform !== "win32";
+};
+/**
+ * @description
+ * Builds the default file mode for regular sync artifacts.
+ */
+export const buildExecutableMode = (executable) => {
+    return executable ? 0o755 : 0o644;
+};
+/**
+ * @description
+ * Expands directory permissions so readable entries remain searchable.
+ */
+export const buildSearchableDirectoryMode = (mode) => {
+    const normalizedMode = mode & 0o777;
+    return normalizedMode | ((normalizedMode & 0o444) >> 2);
+};
+/**
+ * @description
+ * Determines whether a mode grants execute permission to any class.
+ */
+export const isExecutableMode = (mode) => {
+    return (Number(mode) & 0o111) !== 0;
+};
+const permissionOctalPattern = /^0[0-7]{3}$/;
+/**
+ * @description
+ * Validates permission strings accepted by dotweave configuration.
+ */
+export const isPermissionOctal = (value) => {
+    return permissionOctalPattern.test(value);
+};
+/**
+ * @description
+ * Converts a validated permission string into a numeric file mode.
+ */
+export const parsePermissionOctal = (value) => {
+    if (!isPermissionOctal(value)) {
+        throw new Error(`Invalid permission octal: ${value}. Expected a 4-character octal string like "0600" or "0755".`);
+    }
+    return Number.parseInt(value, 8);
+};
+/**
+ * @description
+ * Formats a mode as the permission string shape used in configuration.
+ */
+export const formatPermissionOctal = (mode) => {
+    return `0${(mode & 0o777).toString(8).padStart(3, "0")}`;
+};
+//# sourceMappingURL=file-mode.js.map

package/dist/lib/file-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-mode.js","sourceRoot":"","sources":["../../src/lib/file-mode.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,EAAE;IACzC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,UAAmB,EAAE,EAAE;IACzD,OAAO,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AACpC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,IAAY,EAAE,EAAE;IAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,KAAK,CAAC;IAEpC,OAAO,cAAc,GAAG,CAAC,CAAC,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAqB,EAAE,EAAE;IACxD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,EAAE;IACjD,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAE,EAAE;IACpD,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,8DAA8D,CACjG,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAE,EAAE;IACpD,OAAO,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC,CAAC"}