mdenc 0.1.2 → 0.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/dist/cli.js +939 -371
  2. package/dist/cli.js.map +1 -1
  3. package/dist/index.cjs +144 -126
  4. package/dist/index.cjs.map +1 -1
  5. package/dist/index.d.cts +2 -3
  6. package/dist/index.d.ts +2 -3
  7. package/dist/index.js +144 -126
  8. package/dist/index.js.map +1 -1
  9. package/package.json +10 -9
  10. package/dist/chunk-KNJGGFI4.js +0 -672
  11. package/dist/chunk-KNJGGFI4.js.map +0 -1
  12. package/dist/hooks-FL46SI4A.js +0 -16
  13. package/dist/hooks-FL46SI4A.js.map +0 -1
package/dist/cli.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/cli.ts","../src/seal.ts","../src/git/init.ts","../src/git/mark.ts","../src/git/status.ts","../src/git/watch.ts","../src/git/genpass.ts"],"sourcesContent":["import { readFileSync, writeFileSync } from 'node:fs';\nimport { encrypt, decrypt } from './encrypt.js';\nimport { verifySeal } from './seal.js';\nimport { initCommand, removeHooksCommand } from './git/init.js';\nimport { markCommand } from './git/mark.js';\nimport { statusCommand } from './git/status.js';\nimport { watchCommand } from './git/watch.js';\nimport { genpassCommand } from './git/genpass.js';\nimport {\n preCommitHook,\n postCheckoutHook,\n postMergeHook,\n postRewriteHook,\n} from './git/hooks.js';\n\nfunction readPasswordFromTTY(prompt: string): Promise<string> {\n return new Promise((resolve) => {\n if (!process.stdin.isTTY) {\n // Non-TTY fallback: read a line from stdin\n process.stderr.write(prompt);\n let data = '';\n process.stdin.setEncoding('utf-8');\n process.stdin.on('data', (chunk: string) => {\n const nlIdx = chunk.indexOf('\\n');\n if (nlIdx >= 0) {\n data += chunk.slice(0, nlIdx);\n process.stdin.pause();\n resolve(data);\n } else {\n data += chunk;\n }\n });\n process.stdin.on('end', () => resolve(data));\n process.stdin.resume();\n return;\n }\n\n process.stderr.write(prompt);\n const buf: string[] = [];\n\n process.stdin.setRawMode(true);\n process.stdin.setEncoding('utf-8');\n process.stdin.resume();\n\n const onData = (ch: string) => {\n if (ch === '\\u0003') {\n // Ctrl+C\n process.stderr.write('\\n');\n process.stdin.setRawMode(false);\n process.stdin.pause();\n process.stdin.removeListener('data', onData);\n process.exit(130);\n } else if (ch === '\\r' || ch === '\\n') {\n // Enter\n process.stderr.write('\\n');\n process.stdin.setRawMode(false);\n process.stdin.pause();\n process.stdin.removeListener('data', onData);\n resolve(buf.join(''));\n } else if (ch === '\\u007F' || ch === '\\b') {\n // Backspace\n buf.pop();\n } else if (ch === '\\u0004') {\n // Ctrl+D (EOF)\n process.stderr.write('\\n');\n process.stdin.setRawMode(false);\n process.stdin.pause();\n process.stdin.removeListener('data', onData);\n resolve(buf.join(''));\n } else if (ch >= ' ') {\n buf.push(ch);\n }\n };\n\n process.stdin.on('data', onData);\n });\n}\n\nasync function getPassword(prompt = 'Password: '): Promise<string> {\n const envPassword = process.env['MDENC_PASSWORD'];\n if (envPassword) return envPassword;\n\n return readPasswordFromTTY(prompt);\n}\n\nasync function getPasswordWithConfirmation(): Promise<string> {\n if (process.env['MDENC_PASSWORD']) return process.env['MDENC_PASSWORD'];\n\n const password = await readPasswordFromTTY('Password: ');\n const confirm = await readPasswordFromTTY('Confirm password: ');\n if (password !== confirm) {\n console.error('Error: passwords do not match');\n process.exit(1);\n }\n return password;\n}\n\nfunction usage(): never {\n console.error(`Usage:\n mdenc encrypt <file> [-o output] Encrypt a markdown file\n mdenc decrypt <file> [-o output] Decrypt an mdenc file\n mdenc verify <file> Verify file integrity\n\nGit integration:\n mdenc init Set up git hooks for automatic encryption\n mdenc mark <directory> Mark a directory for encryption\n mdenc status Show encryption status\n mdenc watch Watch and encrypt on file changes\n mdenc remove-hooks Remove mdenc git hooks\n mdenc genpass [--force] Generate a random password into .mdenc-password`);\n process.exit(1);\n}\n\nasync function main(): Promise<void> {\n const args = process.argv.slice(2);\n\n if (args.length === 0) usage();\n\n const command = args[0];\n\n try {\n switch (command) {\n case 'encrypt': {\n if (!args[1]) usage();\n const inputFile = args[1];\n const outputIdx = args.indexOf('-o');\n const outputFile = outputIdx >= 0 ? args[outputIdx + 1] : undefined;\n const password = await getPasswordWithConfirmation();\n const plaintext = readFileSync(inputFile, 'utf-8');\n const encrypted = await encrypt(plaintext, password);\n if (outputFile) {\n writeFileSync(outputFile, encrypted);\n } else {\n process.stdout.write(encrypted);\n }\n break;\n }\n\n case 'decrypt': {\n if (!args[1]) usage();\n const inputFile = args[1];\n const outputIdx = args.indexOf('-o');\n const outputFile = outputIdx >= 0 ? args[outputIdx + 1] : undefined;\n const password = await getPassword();\n const fileContent = readFileSync(inputFile, 'utf-8');\n const decrypted = await decrypt(fileContent, password);\n if (outputFile) {\n writeFileSync(outputFile, decrypted);\n } else {\n process.stdout.write(decrypted);\n }\n break;\n }\n\n case 'verify': {\n if (!args[1]) usage();\n const inputFile = args[1];\n const password = await getPassword();\n const fileContent = readFileSync(inputFile, 'utf-8');\n const valid = await verifySeal(fileContent, password);\n if (valid) {\n console.error('Seal verified: OK');\n process.exit(0);\n } else {\n console.error('Seal verification FAILED');\n process.exit(1);\n }\n break;\n }\n\n case 'init':\n await initCommand();\n break;\n\n case 'mark': {\n if (!args[1]) {\n console.error('Usage: mdenc mark <directory>');\n process.exit(1);\n }\n markCommand(args[1]);\n break;\n }\n\n case 'status':\n statusCommand();\n break;\n\n case 'watch':\n await watchCommand();\n break;\n\n case 'remove-hooks':\n removeHooksCommand();\n break;\n\n case 'genpass':\n genpassCommand(args.includes('--force'));\n break;\n\n // Git hook handlers (called by hook scripts, not directly by user)\n case 'pre-commit':\n await preCommitHook();\n break;\n\n case 'post-checkout':\n await postCheckoutHook();\n break;\n\n case 'post-merge':\n await postMergeHook();\n break;\n\n case 'post-rewrite':\n await postRewriteHook();\n break;\n\n default:\n console.error(`Unknown command: ${command}`);\n usage();\n }\n } catch (err) {\n console.error(`Error: ${err instanceof Error ? err.message : err}`);\n process.exit(1);\n }\n}\n\nmain();\n","import { hmac } from '@noble/hashes/hmac';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { deriveMasterKey, deriveKeys } from './kdf.js';\nimport {\n parseHeader,\n verifyHeader,\n fromBase64,\n} from './header.js';\nimport { constantTimeEqual, zeroize } from './crypto-utils.js';\n\nexport async function verifySeal(\n fileContent: string,\n password: string,\n): Promise<boolean> {\n const lines = fileContent.split('\\n');\n if (lines.length > 0 && lines[lines.length - 1] === '') lines.pop();\n if (lines.length < 3) throw new Error('Invalid mdenc file: too few lines');\n\n const headerLine = lines[0];\n const header = parseHeader(headerLine);\n\n // Parse header auth\n const authLine = lines[1];\n const authMatch = authLine.match(/^hdrauth_b64=([A-Za-z0-9+/=]+)$/);\n if (!authMatch) throw new Error('Invalid mdenc file: missing hdrauth_b64 line');\n const headerHmac = fromBase64(authMatch[1]);\n\n // Derive keys\n const masterKey = deriveMasterKey(password, header.salt, header.scrypt);\n const { headerKey, nonceKey } = deriveKeys(masterKey);\n\n try {\n // Verify header\n if (!verifyHeader(headerKey, headerLine, headerHmac)) {\n throw new Error('Header authentication failed');\n }\n\n // Find seal line\n const chunkAndSealLines = lines.slice(2);\n const sealIndex = chunkAndSealLines.findIndex(l => l.startsWith('seal_b64='));\n if (sealIndex < 0) {\n throw new Error('File is not sealed: no seal_b64 line found');\n }\n\n const chunkLines = chunkAndSealLines.slice(0, sealIndex);\n const sealMatch = chunkAndSealLines[sealIndex].match(/^seal_b64=([A-Za-z0-9+/=]+)$/);\n if (!sealMatch) throw new Error('Invalid seal line');\n const storedHmac = fromBase64(sealMatch[1]);\n\n // Verify seal HMAC (covers header + auth + chunk lines)\n const sealInput = headerLine + '\\n' + authLine + '\\n' + chunkLines.join('\\n');\n const sealData = new TextEncoder().encode(sealInput);\n const computed = hmac(sha256, headerKey, sealData);\n\n return constantTimeEqual(computed, storedHmac);\n } finally {\n zeroize(masterKey, headerKey, nonceKey);\n }\n}\n","import { readFileSync, writeFileSync, existsSync, chmodSync, unlinkSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { findGitRoot, getHooksDir } from './utils.js';\n\nconst MARKER = '# mdenc-hook-marker';\n\nconst HOOK_NAMES = [\n 'pre-commit',\n 'post-checkout',\n 'post-merge',\n 'post-rewrite',\n] as const;\n\nfunction hookBlock(hookName: string): string {\n return `\n${MARKER}\nif command -v mdenc >/dev/null 2>&1; then\n mdenc ${hookName}\nelif [ -x \"./node_modules/.bin/mdenc\" ]; then\n ./node_modules/.bin/mdenc ${hookName}\nelse\n echo \"mdenc: not found, skipping ${hookName} hook\" >&2\nfi`;\n}\n\nfunction newHookScript(hookName: string): string {\n return `#!/bin/sh${hookBlock(hookName)}\n`;\n}\n\nfunction isBinary(content: string): boolean {\n return content.slice(0, 512).includes('\\0');\n}\n\nfunction hasShellShebang(content: string): boolean {\n const firstLine = content.split('\\n')[0];\n return /^#!.*\\b(sh|bash|zsh|dash)\\b/.test(firstLine);\n}\n\nfunction looksLikeFrameworkHook(content: string): boolean {\n // Detect husky-style hooks that source/exec another script as their main logic\n const lines = content.split('\\n').filter(l => l.trim() && !l.startsWith('#'));\n if (lines.length <= 2) {\n // Very short hook that sources or execs something else\n return lines.some(l => /^\\.\\s+\"/.test(l.trim()) || /^exec\\s+/.test(l.trim()));\n }\n return false;\n}\n\nfunction printManualInstructions(hookName: string): void {\n process.stderr.write(\n `mdenc: ${hookName} hook exists but has an unrecognized format.\\n` +\n ` Add the following to your hook manually:\\n\\n` +\n ` ${MARKER}\\n` +\n ` if command -v mdenc >/dev/null 2>&1; then\\n` +\n ` mdenc ${hookName}\\n` +\n ` elif [ -x \"./node_modules/.bin/mdenc\" ]; then\\n` +\n ` ./node_modules/.bin/mdenc ${hookName}\\n` +\n ` fi\\n\\n`,\n );\n}\n\nexport async function initCommand(): Promise<void> {\n const repoRoot = findGitRoot();\n const hooksDir = getHooksDir();\n\n for (const hookName of HOOK_NAMES) {\n const hookPath = join(hooksDir, hookName);\n\n if (!existsSync(hookPath)) {\n writeFileSync(hookPath, newHookScript(hookName));\n chmodSync(hookPath, 0o755);\n console.log(`Installed ${hookName} hook`);\n continue;\n }\n\n const content = readFileSync(hookPath, 'utf-8');\n\n if (content.includes(MARKER)) {\n console.log(`${hookName} hook already installed (skipped)`);\n continue;\n }\n\n // Safety checks\n if (isBinary(content)) {\n process.stderr.write(\n `mdenc: ${hookName} hook appears to be a binary file. Skipping.\\n`,\n );\n printManualInstructions(hookName);\n continue;\n }\n\n if (!hasShellShebang(content)) {\n process.stderr.write(\n `mdenc: ${hookName} hook has no shell shebang. Skipping.\\n`,\n );\n printManualInstructions(hookName);\n continue;\n }\n\n if (looksLikeFrameworkHook(content)) {\n process.stderr.write(\n `mdenc: ${hookName} hook appears to be managed by a framework. Skipping.\\n`,\n );\n printManualInstructions(hookName);\n continue;\n }\n\n // Safe to append\n writeFileSync(hookPath, content.trimEnd() + '\\n' + hookBlock(hookName) + '\\n');\n chmodSync(hookPath, 0o755);\n console.log(`Appended mdenc to existing ${hookName} hook`);\n }\n\n // Add .mdenc-password to root .gitignore\n const gitignorePath = join(repoRoot, '.gitignore');\n const entry = '.mdenc-password';\n\n if (existsSync(gitignorePath)) {\n const content = readFileSync(gitignorePath, 'utf-8');\n const lines = content.split('\\n').map(l => l.trim());\n if (!lines.includes(entry)) {\n writeFileSync(gitignorePath, content.trimEnd() + '\\n' + entry + '\\n');\n console.log('Added .mdenc-password to .gitignore');\n } else {\n console.log('.mdenc-password already in .gitignore (skipped)');\n }\n } else {\n writeFileSync(gitignorePath, entry + '\\n');\n console.log('Created .gitignore with .mdenc-password');\n }\n\n // Decrypt existing .mdenc files\n const { decryptAll } = await import('./hooks.js');\n const count = await decryptAll();\n if (count > 0) {\n console.log(`Decrypted ${count} existing file(s)`);\n }\n\n console.log('mdenc git integration initialized.');\n}\n\nexport function removeHooksCommand(): void {\n const hooksDir = getHooksDir();\n let removedCount = 0;\n\n for (const hookName of HOOK_NAMES) {\n const hookPath = join(hooksDir, hookName);\n\n if (!existsSync(hookPath)) continue;\n\n const content = readFileSync(hookPath, 'utf-8');\n if (!content.includes(MARKER)) {\n console.log(`${hookName}: no mdenc block found (skipped)`);\n continue;\n }\n\n // Remove the mdenc block: from the marker line through the matching fi\n const lines = content.split('\\n');\n const filtered: string[] = [];\n let inBlock = false;\n\n for (const line of lines) {\n if (line.trim() === MARKER) {\n inBlock = true;\n continue;\n }\n if (inBlock) {\n if (line.trim() === 'fi') {\n inBlock = false;\n continue;\n }\n continue;\n }\n filtered.push(line);\n }\n\n const result = filtered.join('\\n');\n const isEmpty = result.split('\\n').every(l => l.trim() === '' || l.startsWith('#!'));\n\n if (isEmpty) {\n unlinkSync(hookPath);\n console.log(`Removed ${hookName} hook (was mdenc-only)`);\n } else {\n writeFileSync(hookPath, result);\n console.log(`Removed mdenc block from ${hookName} hook`);\n }\n\n removedCount++;\n }\n\n if (removedCount === 0) {\n console.log('No mdenc hooks found to remove.');\n } else {\n console.log('mdenc hooks removed.');\n }\n}\n","import { existsSync, readFileSync, writeFileSync } from 'node:fs';\nimport { join, relative, resolve } from 'node:path';\nimport {\n findGitRoot,\n getMdFilesInDir,\n gitAdd,\n gitRmCached,\n isFileTracked,\n} from './utils.js';\n\nconst MARKER_FILE = '.mdenc.conf';\nconst MARKER_CONTENT = '# mdenc: .md files in this directory are automatically encrypted\\n';\nconst GITIGNORE_PATTERN = '*.md';\n\nexport function markCommand(dirArg: string): void {\n const repoRoot = findGitRoot();\n const dir = resolve(dirArg);\n\n if (!existsSync(dir)) {\n console.error(`Error: directory \"${dirArg}\" does not exist`);\n process.exit(1);\n }\n\n const rel = relative(repoRoot, dir);\n if (rel.startsWith('..')) {\n console.error(`Error: directory \"${dirArg}\" is outside the git repository`);\n process.exit(1);\n }\n\n const relDir = rel || '.';\n\n // Create .mdenc.conf\n const confPath = join(dir, MARKER_FILE);\n if (!existsSync(confPath)) {\n writeFileSync(confPath, MARKER_CONTENT);\n console.log(`Created ${relDir}/${MARKER_FILE}`);\n } else {\n console.log(`${relDir}/${MARKER_FILE} already exists (skipped)`);\n }\n\n // Create/update .gitignore\n const gitignorePath = join(dir, '.gitignore');\n if (existsSync(gitignorePath)) {\n const content = readFileSync(gitignorePath, 'utf-8');\n const lines = content.split('\\n').map(l => l.trim());\n if (!lines.includes(GITIGNORE_PATTERN)) {\n writeFileSync(gitignorePath, content.trimEnd() + '\\n' + GITIGNORE_PATTERN + '\\n');\n console.log(`Updated ${relDir}/.gitignore (added ${GITIGNORE_PATTERN})`);\n } else {\n console.log(`${relDir}/.gitignore already has ${GITIGNORE_PATTERN} (skipped)`);\n }\n } else {\n writeFileSync(gitignorePath, GITIGNORE_PATTERN + '\\n');\n console.log(`Created ${relDir}/.gitignore with ${GITIGNORE_PATTERN}`);\n }\n\n // Untrack any currently-tracked .md files\n const mdFiles = getMdFilesInDir(dir);\n const trackedMd: string[] = [];\n for (const f of mdFiles) {\n const relPath = relative(repoRoot, join(dir, f));\n if (isFileTracked(repoRoot, relPath)) {\n trackedMd.push(relPath);\n }\n }\n\n if (trackedMd.length > 0) {\n gitRmCached(repoRoot, trackedMd);\n for (const f of trackedMd) {\n console.log(`Untracked ${f} from git (still exists locally)`);\n }\n }\n\n // Stage .mdenc.conf and .gitignore\n const toStage = [\n relative(repoRoot, confPath),\n relative(repoRoot, gitignorePath),\n ];\n gitAdd(repoRoot, toStage);\n\n console.log(`Marked ${relDir}/ for mdenc encryption`);\n}\n","import { existsSync, readFileSync, statSync } from 'node:fs';\nimport { join, relative } from 'node:path';\nimport { resolvePassword } from './password.js';\nimport {\n findGitRoot,\n findMarkedDirs,\n getHooksDir,\n getMdFilesInDir,\n getMdencFilesInDir,\n} from './utils.js';\n\nconst HOOK_NAMES = ['pre-commit', 'post-checkout', 'post-merge', 'post-rewrite'];\nconst MARKER = '# mdenc-hook-marker';\n\nexport function statusCommand(): void {\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n const markedDirs = findMarkedDirs(repoRoot);\n\n if (markedDirs.length === 0) {\n console.log('No directories marked for mdenc encryption.');\n console.log('Use \"mdenc mark <directory>\" to designate a directory.');\n } else {\n console.log('Marked directories:\\n');\n\n for (const dir of markedDirs) {\n const relDir = relative(repoRoot, dir) || '.';\n console.log(` ${relDir}/`);\n\n const mdFiles = getMdFilesInDir(dir);\n const mdencFiles = getMdencFilesInDir(dir);\n\n const mdBases = new Set(mdFiles.map(f => f.replace(/\\.md$/, '')));\n const mdencBases = new Set(mdencFiles.map(f => f.replace(/\\.mdenc$/, '')));\n\n // Paired files (both .md and .mdenc exist)\n for (const base of mdBases) {\n if (mdencBases.has(base)) {\n const mdPath = join(dir, `${base}.md`);\n const mdencPath = join(dir, `${base}.mdenc`);\n const mdMtime = statSync(mdPath).mtimeMs;\n const mdencMtime = statSync(mdencPath).mtimeMs;\n\n if (mdMtime > mdencMtime) {\n console.log(` ${base}.md [needs re-encryption]`);\n } else {\n console.log(` ${base}.md [up to date]`);\n }\n } else {\n console.log(` ${base}.md [not yet encrypted]`);\n }\n }\n\n // Orphaned .mdenc files (no corresponding .md)\n for (const base of mdencBases) {\n if (!mdBases.has(base)) {\n console.log(` ${base}.mdenc [needs decryption]`);\n }\n }\n\n // Check .gitignore health\n const gitignorePath = join(dir, '.gitignore');\n if (!existsSync(gitignorePath)) {\n console.log(` WARNING: no .gitignore in this directory`);\n } else {\n const content = readFileSync(gitignorePath, 'utf-8');\n if (!content.split('\\n').some(l => l.trim() === '*.md')) {\n console.log(` WARNING: .gitignore missing *.md pattern`);\n }\n }\n\n console.log();\n }\n }\n\n // Password status\n if (!password) {\n console.log('Password: NOT AVAILABLE');\n console.log(' Set MDENC_PASSWORD env var or create .mdenc-password file');\n } else {\n console.log('Password: available');\n }\n\n // Hook status\n const hooksDir = getHooksDir();\n const missing: string[] = [];\n for (const name of HOOK_NAMES) {\n const hookPath = join(hooksDir, name);\n if (!existsSync(hookPath)) {\n missing.push(name);\n } else {\n const content = readFileSync(hookPath, 'utf-8');\n if (!content.includes(MARKER)) {\n missing.push(name);\n }\n }\n }\n\n if (missing.length > 0) {\n console.log(`Hooks: MISSING (${missing.join(', ')})`);\n console.log(' Run \"mdenc init\" to install hooks');\n } else {\n console.log('Hooks: all installed');\n }\n}\n","import { readFileSync, writeFileSync, existsSync } from 'node:fs';\nimport { join, relative } from 'node:path';\nimport { watch } from 'chokidar';\nimport { encrypt } from '../encrypt.js';\nimport { resolvePassword } from './password.js';\nimport { findGitRoot, findMarkedDirs, getMdFilesInDir } from './utils.js';\n\nexport async function watchCommand(): Promise<void> {\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n\n if (!password) {\n console.error(\n 'mdenc: no password available (set MDENC_PASSWORD or create .mdenc-password)',\n );\n process.exit(1);\n }\n\n const markedDirs = findMarkedDirs(repoRoot);\n if (markedDirs.length === 0) {\n console.error('mdenc: no marked directories found');\n process.exit(1);\n }\n\n // Initial encryption pass\n for (const dir of markedDirs) {\n const mdFiles = getMdFilesInDir(dir);\n for (const mdFile of mdFiles) {\n await encryptFile(dir, mdFile, repoRoot, password);\n }\n }\n\n // Watch each marked directory for .md file changes\n const pending = new Set<string>();\n\n const watcher = watch(\n markedDirs.map(dir => join(dir, '*.md')),\n { ignoreInitial: true, awaitWriteFinish: { stabilityThreshold: 100 } },\n );\n\n watcher.on('change', (filePath) => {\n handleFileEvent(filePath, repoRoot, password, pending);\n });\n watcher.on('add', (filePath) => {\n handleFileEvent(filePath, repoRoot, password, pending);\n });\n\n for (const dir of markedDirs) {\n const relDir = relative(repoRoot, dir) || '.';\n console.error(`mdenc: watching ${relDir}/`);\n }\n console.error('mdenc: watching for changes (Ctrl+C to stop)');\n}\n\nfunction handleFileEvent(\n filePath: string,\n repoRoot: string,\n password: string,\n pending: Set<string>,\n): void {\n if (pending.has(filePath)) return;\n pending.add(filePath);\n\n const dir = join(filePath, '..');\n const filename = filePath.slice(dir.length + 1);\n\n encryptFile(dir, filename, repoRoot, password).finally(() => {\n pending.delete(filePath);\n });\n}\n\nasync function encryptFile(\n dir: string,\n mdFile: string,\n repoRoot: string,\n password: string,\n): Promise<void> {\n const mdPath = join(dir, mdFile);\n const mdencPath = mdPath.replace(/\\.md$/, '.mdenc');\n const relMdPath = relative(repoRoot, mdPath);\n\n if (!existsSync(mdPath)) return;\n\n try {\n const plaintext = readFileSync(mdPath, 'utf-8');\n\n let previousFile: string | undefined;\n if (existsSync(mdencPath)) {\n previousFile = readFileSync(mdencPath, 'utf-8');\n }\n\n const encrypted = await encrypt(plaintext, password, { previousFile });\n if (encrypted === previousFile) return;\n writeFileSync(mdencPath, encrypted);\n console.error(`mdenc: encrypted ${relMdPath}`);\n } catch (err) {\n console.error(\n `mdenc: failed to encrypt ${relMdPath}: ${err instanceof Error ? err.message : err}`,\n );\n }\n}\n","import { existsSync, readFileSync, writeFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { findGitRoot } from './utils.js';\n\nconst PASSWORD_FILE = '.mdenc-password';\n\nexport function genpassCommand(force: boolean): void {\n const repoRoot = findGitRoot();\n const passwordPath = join(repoRoot, PASSWORD_FILE);\n\n if (existsSync(passwordPath) && !force) {\n console.error(`${PASSWORD_FILE} already exists. Use --force to overwrite.`);\n process.exit(1);\n }\n\n const password = Buffer.from(randomBytes(32)).toString('base64url');\n writeFileSync(passwordPath, password + '\\n', { mode: 0o600 });\n console.error(`Generated password and wrote to ${PASSWORD_FILE}`);\n console.error(password);\n\n // Ensure .mdenc-password is in .gitignore\n const gitignorePath = join(repoRoot, '.gitignore');\n const entry = PASSWORD_FILE;\n\n if (existsSync(gitignorePath)) {\n const content = readFileSync(gitignorePath, 'utf-8');\n const lines = content.split('\\n').map(l => l.trim());\n if (!lines.includes(entry)) {\n writeFileSync(gitignorePath, content.trimEnd() + '\\n' + entry + '\\n');\n console.error('Added .mdenc-password to .gitignore');\n }\n } else {\n writeFileSync(gitignorePath, entry + '\\n');\n console.error('Created .gitignore with .mdenc-password');\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAAA,eAAc,iBAAAC,sBAAqB;;;ACA5C,SAAS,YAAY;AACrB,SAAS,cAAc;AASvB,eAAsB,WACpB,aACA,UACkB;AAClB,QAAM,QAAQ,YAAY,MAAM,IAAI;AACpC,MAAI,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,CAAC,MAAM,GAAI,OAAM,IAAI;AAClE,MAAI,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,mCAAmC;AAEzE,QAAM,aAAa,MAAM,CAAC;AAC1B,QAAM,SAAS,YAAY,UAAU;AAGrC,QAAM,WAAW,MAAM,CAAC;AACxB,QAAM,YAAY,SAAS,MAAM,iCAAiC;AAClE,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8CAA8C;AAC9E,QAAM,aAAa,WAAW,UAAU,CAAC,CAAC;AAG1C,QAAM,YAAY,gBAAgB,UAAU,OAAO,MAAM,OAAO,MAAM;AACtE,QAAM,EAAE,WAAW,SAAS,IAAI,WAAW,SAAS;AAEpD,MAAI;AAEF,QAAI,CAAC,aAAa,WAAW,YAAY,UAAU,GAAG;AACpD,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAGA,UAAM,oBAAoB,MAAM,MAAM,CAAC;AACvC,UAAM,YAAY,kBAAkB,UAAU,OAAK,EAAE,WAAW,WAAW,CAAC;AAC5E,QAAI,YAAY,GAAG;AACjB,YAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAEA,UAAM,aAAa,kBAAkB,MAAM,GAAG,SAAS;AACvD,UAAM,YAAY,kBAAkB,SAAS,EAAE,MAAM,8BAA8B;AACnF,QAAI,CAAC,UAAW,OAAM,IAAI,MAAM,mBAAmB;AACnD,UAAM,aAAa,WAAW,UAAU,CAAC,CAAC;AAG1C,UAAM,YAAY,aAAa,OAAO,WAAW,OAAO,WAAW,KAAK,IAAI;AAC5E,UAAM,WAAW,IAAI,YAAY,EAAE,OAAO,SAAS;AACnD,UAAM,WAAW,KAAK,QAAQ,WAAW,QAAQ;AAEjD,WAAO,kBAAkB,UAAU,UAAU;AAAA,EAC/C,UAAE;AACA,YAAQ,WAAW,WAAW,QAAQ;AAAA,EACxC;AACF;;;AC1DA,SAAS,cAAc,eAAe,YAAY,WAAW,kBAAkB;AAC/E,SAAS,YAAY;AAGrB,IAAM,SAAS;AAEf,IAAM,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,UAAU,UAA0B;AAC3C,SAAO;AAAA,EACP,MAAM;AAAA;AAAA,UAEE,QAAQ;AAAA;AAAA,8BAEY,QAAQ;AAAA;AAAA,qCAED,QAAQ;AAAA;AAE7C;AAEA,SAAS,cAAc,UAA0B;AAC/C,SAAO,YAAY,UAAU,QAAQ,CAAC;AAAA;AAExC;AAEA,SAAS,SAAS,SAA0B;AAC1C,SAAO,QAAQ,MAAM,GAAG,GAAG,EAAE,SAAS,IAAI;AAC5C;AAEA,SAAS,gBAAgB,SAA0B;AACjD,QAAM,YAAY,QAAQ,MAAM,IAAI,EAAE,CAAC;AACvC,SAAO,8BAA8B,KAAK,SAAS;AACrD;AAEA,SAAS,uBAAuB,SAA0B;AAExD,QAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,OAAO,OAAK,EAAE,KAAK,KAAK,CAAC,EAAE,WAAW,GAAG,CAAC;AAC5E,MAAI,MAAM,UAAU,GAAG;AAErB,WAAO,MAAM,KAAK,OAAK,UAAU,KAAK,EAAE,KAAK,CAAC,KAAK,WAAW,KAAK,EAAE,KAAK,CAAC,CAAC;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAwB;AACvD,UAAQ,OAAO;AAAA,IACb,UAAU,QAAQ;AAAA;AAAA;AAAA,IAEX,MAAM;AAAA;AAAA,YAEE,QAAQ;AAAA;AAAA,gCAEY,QAAQ;AAAA;AAAA;AAAA;AAAA,EAE7C;AACF;AAEA,eAAsB,cAA6B;AACjD,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,YAAY;AAE7B,aAAW,YAAY,YAAY;AACjC,UAAM,WAAW,KAAK,UAAU,QAAQ;AAExC,QAAI,CAAC,WAAW,QAAQ,GAAG;AACzB,oBAAc,UAAU,cAAc,QAAQ,CAAC;AAC/C,gBAAU,UAAU,GAAK;AACzB,cAAQ,IAAI,aAAa,QAAQ,OAAO;AACxC;AAAA,IACF;AAEA,UAAM,UAAU,aAAa,UAAU,OAAO;AAE9C,QAAI,QAAQ,SAAS,MAAM,GAAG;AAC5B,cAAQ,IAAI,GAAG,QAAQ,mCAAmC;AAC1D;AAAA,IACF;AAGA,QAAI,SAAS,OAAO,GAAG;AACrB,cAAQ,OAAO;AAAA,QACb,UAAU,QAAQ;AAAA;AAAA,MACpB;AACA,8BAAwB,QAAQ;AAChC;AAAA,IACF;AAEA,QAAI,CAAC,gBAAgB,OAAO,GAAG;AAC7B,cAAQ,OAAO;AAAA,QACb,UAAU,QAAQ;AAAA;AAAA,MACpB;AACA,8BAAwB,QAAQ;AAChC;AAAA,IACF;AAEA,QAAI,uBAAuB,OAAO,GAAG;AACnC,cAAQ,OAAO;AAAA,QACb,UAAU,QAAQ;AAAA;AAAA,MACpB;AACA,8BAAwB,QAAQ;AAChC;AAAA,IACF;AAGA,kBAAc,UAAU,QAAQ,QAAQ,IAAI,OAAO,UAAU,QAAQ,IAAI,IAAI;AAC7E,cAAU,UAAU,GAAK;AACzB,YAAQ,IAAI,8BAA8B,QAAQ,OAAO;AAAA,EAC3D;AAGA,QAAM,gBAAgB,KAAK,UAAU,YAAY;AACjD,QAAM,QAAQ;AAEd,MAAI,WAAW,aAAa,GAAG;AAC7B,UAAM,UAAU,aAAa,eAAe,OAAO;AACnD,UAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACnD,QAAI,CAAC,MAAM,SAAS,KAAK,GAAG;AAC1B,oBAAc,eAAe,QAAQ,QAAQ,IAAI,OAAO,QAAQ,IAAI;AACpE,cAAQ,IAAI,qCAAqC;AAAA,IACnD,OAAO;AACL,cAAQ,IAAI,iDAAiD;AAAA,IAC/D;AAAA,EACF,OAAO;AACL,kBAAc,eAAe,QAAQ,IAAI;AACzC,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAGA,QAAM,EAAE,WAAW,IAAI,MAAM,OAAO,qBAAY;AAChD,QAAM,QAAQ,MAAM,WAAW;AAC/B,MAAI,QAAQ,GAAG;AACb,YAAQ,IAAI,aAAa,KAAK,mBAAmB;AAAA,EACnD;AAEA,UAAQ,IAAI,oCAAoC;AAClD;AAEO,SAAS,qBAA2B;AACzC,QAAM,WAAW,YAAY;AAC7B,MAAI,eAAe;AAEnB,aAAW,YAAY,YAAY;AACjC,UAAM,WAAW,KAAK,UAAU,QAAQ;AAExC,QAAI,CAAC,WAAW,QAAQ,EAAG;AAE3B,UAAM,UAAU,aAAa,UAAU,OAAO;AAC9C,QAAI,CAAC,QAAQ,SAAS,MAAM,GAAG;AAC7B,cAAQ,IAAI,GAAG,QAAQ,kCAAkC;AACzD;AAAA,IACF;AAGA,UAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,UAAM,WAAqB,CAAC;AAC5B,QAAI,UAAU;AAEd,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,KAAK,MAAM,QAAQ;AAC1B,kBAAU;AACV;AAAA,MACF;AACA,UAAI,SAAS;AACX,YAAI,KAAK,KAAK,MAAM,MAAM;AACxB,oBAAU;AACV;AAAA,QACF;AACA;AAAA,MACF;AACA,eAAS,KAAK,IAAI;AAAA,IACpB;AAEA,UAAM,SAAS,SAAS,KAAK,IAAI;AACjC,UAAM,UAAU,OAAO,MAAM,IAAI,EAAE,MAAM,OAAK,EAAE,KAAK,MAAM,MAAM,EAAE,WAAW,IAAI,CAAC;AAEnF,QAAI,SAAS;AACX,iBAAW,QAAQ;AACnB,cAAQ,IAAI,WAAW,QAAQ,wBAAwB;AAAA,IACzD,OAAO;AACL,oBAAc,UAAU,MAAM;AAC9B,cAAQ,IAAI,4BAA4B,QAAQ,OAAO;AAAA,IACzD;AAEA;AAAA,EACF;AAEA,MAAI,iBAAiB,GAAG;AACtB,YAAQ,IAAI,iCAAiC;AAAA,EAC/C,OAAO;AACL,YAAQ,IAAI,sBAAsB;AAAA,EACpC;AACF;;;ACpMA,SAAS,cAAAC,aAAY,gBAAAC,eAAc,iBAAAC,sBAAqB;AACxD,SAAS,QAAAC,OAAM,UAAU,eAAe;AASxC,IAAM,cAAc;AACpB,IAAM,iBAAiB;AACvB,IAAM,oBAAoB;AAEnB,SAAS,YAAY,QAAsB;AAChD,QAAM,WAAW,YAAY;AAC7B,QAAM,MAAM,QAAQ,MAAM;AAE1B,MAAI,CAACC,YAAW,GAAG,GAAG;AACpB,YAAQ,MAAM,qBAAqB,MAAM,kBAAkB;AAC3D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,MAAM,SAAS,UAAU,GAAG;AAClC,MAAI,IAAI,WAAW,IAAI,GAAG;AACxB,YAAQ,MAAM,qBAAqB,MAAM,iCAAiC;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,OAAO;AAGtB,QAAM,WAAWC,MAAK,KAAK,WAAW;AACtC,MAAI,CAACD,YAAW,QAAQ,GAAG;AACzB,IAAAE,eAAc,UAAU,cAAc;AACtC,YAAQ,IAAI,WAAW,MAAM,IAAI,WAAW,EAAE;AAAA,EAChD,OAAO;AACL,YAAQ,IAAI,GAAG,MAAM,IAAI,WAAW,2BAA2B;AAAA,EACjE;AAGA,QAAM,gBAAgBD,MAAK,KAAK,YAAY;AAC5C,MAAID,YAAW,aAAa,GAAG;AAC7B,UAAM,UAAUG,cAAa,eAAe,OAAO;AACnD,UAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACnD,QAAI,CAAC,MAAM,SAAS,iBAAiB,GAAG;AACtC,MAAAD,eAAc,eAAe,QAAQ,QAAQ,IAAI,OAAO,oBAAoB,IAAI;AAChF,cAAQ,IAAI,WAAW,MAAM,sBAAsB,iBAAiB,GAAG;AAAA,IACzE,OAAO;AACL,cAAQ,IAAI,GAAG,MAAM,2BAA2B,iBAAiB,YAAY;AAAA,IAC/E;AAAA,EACF,OAAO;AACL,IAAAA,eAAc,eAAe,oBAAoB,IAAI;AACrD,YAAQ,IAAI,WAAW,MAAM,oBAAoB,iBAAiB,EAAE;AAAA,EACtE;AAGA,QAAM,UAAU,gBAAgB,GAAG;AACnC,QAAM,YAAsB,CAAC;AAC7B,aAAW,KAAK,SAAS;AACvB,UAAM,UAAU,SAAS,UAAUD,MAAK,KAAK,CAAC,CAAC;AAC/C,QAAI,cAAc,UAAU,OAAO,GAAG;AACpC,gBAAU,KAAK,OAAO;AAAA,IACxB;AAAA,EACF;AAEA,MAAI,UAAU,SAAS,GAAG;AACxB,gBAAY,UAAU,SAAS;AAC/B,eAAW,KAAK,WAAW;AACzB,cAAQ,IAAI,aAAa,CAAC,kCAAkC;AAAA,IAC9D;AAAA,EACF;AAGA,QAAM,UAAU;AAAA,IACd,SAAS,UAAU,QAAQ;AAAA,IAC3B,SAAS,UAAU,aAAa;AAAA,EAClC;AACA,SAAO,UAAU,OAAO;AAExB,UAAQ,IAAI,UAAU,MAAM,wBAAwB;AACtD;;;ACjFA,SAAS,cAAAG,aAAY,gBAAAC,eAAc,gBAAgB;AACnD,SAAS,QAAAC,OAAM,YAAAC,iBAAgB;AAU/B,IAAMC,cAAa,CAAC,cAAc,iBAAiB,cAAc,cAAc;AAC/E,IAAMC,UAAS;AAER,SAAS,gBAAsB;AACpC,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AACzC,QAAM,aAAa,eAAe,QAAQ;AAE1C,MAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,IAAI,6CAA6C;AACzD,YAAQ,IAAI,wDAAwD;AAAA,EACtE,OAAO;AACL,YAAQ,IAAI,uBAAuB;AAEnC,eAAW,OAAO,YAAY;AAC5B,YAAM,SAASC,UAAS,UAAU,GAAG,KAAK;AAC1C,cAAQ,IAAI,KAAK,MAAM,GAAG;AAE1B,YAAM,UAAU,gBAAgB,GAAG;AACnC,YAAM,aAAa,mBAAmB,GAAG;AAEzC,YAAM,UAAU,IAAI,IAAI,QAAQ,IAAI,OAAK,EAAE,QAAQ,SAAS,EAAE,CAAC,CAAC;AAChE,YAAM,aAAa,IAAI,IAAI,WAAW,IAAI,OAAK,EAAE,QAAQ,YAAY,EAAE,CAAC,CAAC;AAGzE,iBAAW,QAAQ,SAAS;AAC1B,YAAI,WAAW,IAAI,IAAI,GAAG;AACxB,gBAAM,SAASC,MAAK,KAAK,GAAG,IAAI,KAAK;AACrC,gBAAM,YAAYA,MAAK,KAAK,GAAG,IAAI,QAAQ;AAC3C,gBAAM,UAAU,SAAS,MAAM,EAAE;AACjC,gBAAM,aAAa,SAAS,SAAS,EAAE;AAEvC,cAAI,UAAU,YAAY;AACxB,oBAAQ,IAAI,OAAO,IAAI,4BAA4B;AAAA,UACrD,OAAO;AACL,oBAAQ,IAAI,OAAO,IAAI,mBAAmB;AAAA,UAC5C;AAAA,QACF,OAAO;AACL,kBAAQ,IAAI,OAAO,IAAI,0BAA0B;AAAA,QACnD;AAAA,MACF;AAGA,iBAAW,QAAQ,YAAY;AAC7B,YAAI,CAAC,QAAQ,IAAI,IAAI,GAAG;AACtB,kBAAQ,IAAI,OAAO,IAAI,4BAA4B;AAAA,QACrD;AAAA,MACF;AAGA,YAAM,gBAAgBA,MAAK,KAAK,YAAY;AAC5C,UAAI,CAACC,YAAW,aAAa,GAAG;AAC9B,gBAAQ,IAAI,8CAA8C;AAAA,MAC5D,OAAO;AACL,cAAM,UAAUC,cAAa,eAAe,OAAO;AACnD,YAAI,CAAC,QAAQ,MAAM,IAAI,EAAE,KAAK,OAAK,EAAE,KAAK,MAAM,MAAM,GAAG;AACvD,kBAAQ,IAAI,8CAA8C;AAAA,QAC5D;AAAA,MACF;AAEA,cAAQ,IAAI;AAAA,IACd;AAAA,EACF;AAGA,MAAI,CAAC,UAAU;AACb,YAAQ,IAAI,yBAAyB;AACrC,YAAQ,IAAI,6DAA6D;AAAA,EAC3E,OAAO;AACL,YAAQ,IAAI,qBAAqB;AAAA,EACnC;AAGA,QAAM,WAAW,YAAY;AAC7B,QAAM,UAAoB,CAAC;AAC3B,aAAW,QAAQL,aAAY;AAC7B,UAAM,WAAWG,MAAK,UAAU,IAAI;AACpC,QAAI,CAACC,YAAW,QAAQ,GAAG;AACzB,cAAQ,KAAK,IAAI;AAAA,IACnB,OAAO;AACL,YAAM,UAAUC,cAAa,UAAU,OAAO;AAC9C,UAAI,CAAC,QAAQ,SAASJ,OAAM,GAAG;AAC7B,gBAAQ,KAAK,IAAI;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,YAAQ,IAAI,mBAAmB,QAAQ,KAAK,IAAI,CAAC,GAAG;AACpD,YAAQ,IAAI,qCAAqC;AAAA,EACnD,OAAO;AACL,YAAQ,IAAI,sBAAsB;AAAA,EACpC;AACF;;;ACxGA,SAAS,gBAAAK,eAAc,iBAAAC,gBAAe,cAAAC,mBAAkB;AACxD,SAAS,QAAAC,OAAM,YAAAC,iBAAgB;AAC/B,SAAS,aAAa;AAKtB,eAAsB,eAA8B;AAClD,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AAEzC,MAAI,CAAC,UAAU;AACb,YAAQ;AAAA,MACN;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,eAAe,QAAQ;AAC1C,MAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,MAAM,oCAAoC;AAClD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,aAAW,OAAO,YAAY;AAC5B,UAAM,UAAU,gBAAgB,GAAG;AACnC,eAAW,UAAU,SAAS;AAC5B,YAAM,YAAY,KAAK,QAAQ,UAAU,QAAQ;AAAA,IACnD;AAAA,EACF;AAGA,QAAM,UAAU,oBAAI,IAAY;AAEhC,QAAM,UAAU;AAAA,IACd,WAAW,IAAI,SAAOC,MAAK,KAAK,MAAM,CAAC;AAAA,IACvC,EAAE,eAAe,MAAM,kBAAkB,EAAE,oBAAoB,IAAI,EAAE;AAAA,EACvE;AAEA,UAAQ,GAAG,UAAU,CAAC,aAAa;AACjC,oBAAgB,UAAU,UAAU,UAAU,OAAO;AAAA,EACvD,CAAC;AACD,UAAQ,GAAG,OAAO,CAAC,aAAa;AAC9B,oBAAgB,UAAU,UAAU,UAAU,OAAO;AAAA,EACvD,CAAC;AAED,aAAW,OAAO,YAAY;AAC5B,UAAM,SAASC,UAAS,UAAU,GAAG,KAAK;AAC1C,YAAQ,MAAM,mBAAmB,MAAM,GAAG;AAAA,EAC5C;AACA,UAAQ,MAAM,8CAA8C;AAC9D;AAEA,SAAS,gBACP,UACA,UACA,UACA,SACM;AACN,MAAI,QAAQ,IAAI,QAAQ,EAAG;AAC3B,UAAQ,IAAI,QAAQ;AAEpB,QAAM,MAAMD,MAAK,UAAU,IAAI;AAC/B,QAAM,WAAW,SAAS,MAAM,IAAI,SAAS,CAAC;AAE9C,cAAY,KAAK,UAAU,UAAU,QAAQ,EAAE,QAAQ,MAAM;AAC3D,YAAQ,OAAO,QAAQ;AAAA,EACzB,CAAC;AACH;AAEA,eAAe,YACb,KACA,QACA,UACA,UACe;AACf,QAAM,SAASA,MAAK,KAAK,MAAM;AAC/B,QAAM,YAAY,OAAO,QAAQ,SAAS,QAAQ;AAClD,QAAM,YAAYC,UAAS,UAAU,MAAM;AAE3C,MAAI,CAACC,YAAW,MAAM,EAAG;AAEzB,MAAI;AACF,UAAM,YAAYC,cAAa,QAAQ,OAAO;AAE9C,QAAI;AACJ,QAAID,YAAW,SAAS,GAAG;AACzB,qBAAeC,cAAa,WAAW,OAAO;AAAA,IAChD;AAEA,UAAM,YAAY,MAAM,QAAQ,WAAW,UAAU,EAAE,aAAa,CAAC;AACrE,QAAI,cAAc,aAAc;AAChC,IAAAC,eAAc,WAAW,SAAS;AAClC,YAAQ,MAAM,oBAAoB,SAAS,EAAE;AAAA,EAC/C,SAAS,KAAK;AACZ,YAAQ;AAAA,MACN,4BAA4B,SAAS,KAAK,eAAe,QAAQ,IAAI,UAAU,GAAG;AAAA,IACpF;AAAA,EACF;AACF;;;ACpGA,SAAS,cAAAC,aAAY,gBAAAC,eAAc,iBAAAC,sBAAqB;AACxD,SAAS,QAAAC,aAAY;AACrB,SAAS,mBAAmB;AAG5B,IAAM,gBAAgB;AAEf,SAAS,eAAe,OAAsB;AACnD,QAAM,WAAW,YAAY;AAC7B,QAAM,eAAeC,MAAK,UAAU,aAAa;AAEjD,MAAIC,YAAW,YAAY,KAAK,CAAC,OAAO;AACtC,YAAQ,MAAM,GAAG,aAAa,4CAA4C;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,OAAO,KAAK,YAAY,EAAE,CAAC,EAAE,SAAS,WAAW;AAClE,EAAAC,eAAc,cAAc,WAAW,MAAM,EAAE,MAAM,IAAM,CAAC;AAC5D,UAAQ,MAAM,mCAAmC,aAAa,EAAE;AAChE,UAAQ,MAAM,QAAQ;AAGtB,QAAM,gBAAgBF,MAAK,UAAU,YAAY;AACjD,QAAM,QAAQ;AAEd,MAAIC,YAAW,aAAa,GAAG;AAC7B,UAAM,UAAUE,cAAa,eAAe,OAAO;AACnD,UAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AACnD,QAAI,CAAC,MAAM,SAAS,KAAK,GAAG;AAC1B,MAAAD,eAAc,eAAe,QAAQ,QAAQ,IAAI,OAAO,QAAQ,IAAI;AACpE,cAAQ,MAAM,qCAAqC;AAAA,IACrD;AAAA,EACF,OAAO;AACL,IAAAA,eAAc,eAAe,QAAQ,IAAI;AACzC,YAAQ,MAAM,yCAAyC;AAAA,EACzD;AACF;;;ANrBA,SAAS,oBAAoB,QAAiC;AAC5D,SAAO,IAAI,QAAQ,CAACE,aAAY;AAC9B,QAAI,CAAC,QAAQ,MAAM,OAAO;AAExB,cAAQ,OAAO,MAAM,MAAM;AAC3B,UAAI,OAAO;AACX,cAAQ,MAAM,YAAY,OAAO;AACjC,cAAQ,MAAM,GAAG,QAAQ,CAAC,UAAkB;AAC1C,cAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,YAAI,SAAS,GAAG;AACd,kBAAQ,MAAM,MAAM,GAAG,KAAK;AAC5B,kBAAQ,MAAM,MAAM;AACpB,UAAAA,SAAQ,IAAI;AAAA,QACd,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF,CAAC;AACD,cAAQ,MAAM,GAAG,OAAO,MAAMA,SAAQ,IAAI,CAAC;AAC3C,cAAQ,MAAM,OAAO;AACrB;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,MAAM;AAC3B,UAAM,MAAgB,CAAC;AAEvB,YAAQ,MAAM,WAAW,IAAI;AAC7B,YAAQ,MAAM,YAAY,OAAO;AACjC,YAAQ,MAAM,OAAO;AAErB,UAAM,SAAS,CAAC,OAAe;AAC7B,UAAI,OAAO,KAAU;AAEnB,gBAAQ,OAAO,MAAM,IAAI;AACzB,gBAAQ,MAAM,WAAW,KAAK;AAC9B,gBAAQ,MAAM,MAAM;AACpB,gBAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,gBAAQ,KAAK,GAAG;AAAA,MAClB,WAAW,OAAO,QAAQ,OAAO,MAAM;AAErC,gBAAQ,OAAO,MAAM,IAAI;AACzB,gBAAQ,MAAM,WAAW,KAAK;AAC9B,gBAAQ,MAAM,MAAM;AACpB,gBAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,QAAAA,SAAQ,IAAI,KAAK,EAAE,CAAC;AAAA,MACtB,WAAW,OAAO,UAAY,OAAO,MAAM;AAEzC,YAAI,IAAI;AAAA,MACV,WAAW,OAAO,KAAU;AAE1B,gBAAQ,OAAO,MAAM,IAAI;AACzB,gBAAQ,MAAM,WAAW,KAAK;AAC9B,gBAAQ,MAAM,MAAM;AACpB,gBAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,QAAAA,SAAQ,IAAI,KAAK,EAAE,CAAC;AAAA,MACtB,WAAW,MAAM,KAAK;AACpB,YAAI,KAAK,EAAE;AAAA,MACb;AAAA,IACF;AAEA,YAAQ,MAAM,GAAG,QAAQ,MAAM;AAAA,EACjC,CAAC;AACH;AAEA,eAAe,YAAY,SAAS,cAA+B;AACjE,QAAM,cAAc,QAAQ,IAAI,gBAAgB;AAChD,MAAI,YAAa,QAAO;AAExB,SAAO,oBAAoB,MAAM;AACnC;AAEA,eAAe,8BAA+C;AAC5D,MAAI,QAAQ,IAAI,gBAAgB,EAAG,QAAO,QAAQ,IAAI,gBAAgB;AAEtE,QAAM,WAAW,MAAM,oBAAoB,YAAY;AACvD,QAAM,UAAU,MAAM,oBAAoB,oBAAoB;AAC9D,MAAI,aAAa,SAAS;AACxB,YAAQ,MAAM,+BAA+B;AAC7C,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,SAAS,QAAe;AACtB,UAAQ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sFAWsE;AACpF,UAAQ,KAAK,CAAC;AAChB;AAEA,eAAe,OAAsB;AACnC,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAEjC,MAAI,KAAK,WAAW,EAAG,OAAM;AAE7B,QAAM,UAAU,KAAK,CAAC;AAEtB,MAAI;AACF,YAAQ,SAAS;AAAA,MACf,KAAK,WAAW;AACd,YAAI,CAAC,KAAK,CAAC,EAAG,OAAM;AACpB,cAAM,YAAY,KAAK,CAAC;AACxB,cAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,cAAM,aAAa,aAAa,IAAI,KAAK,YAAY,CAAC,IAAI;AAC1D,cAAM,WAAW,MAAM,4BAA4B;AACnD,cAAM,YAAYC,cAAa,WAAW,OAAO;AACjD,cAAM,YAAY,MAAM,QAAQ,WAAW,QAAQ;AACnD,YAAI,YAAY;AACd,UAAAC,eAAc,YAAY,SAAS;AAAA,QACrC,OAAO;AACL,kBAAQ,OAAO,MAAM,SAAS;AAAA,QAChC;AACA;AAAA,MACF;AAAA,MAEA,KAAK,WAAW;AACd,YAAI,CAAC,KAAK,CAAC,EAAG,OAAM;AACpB,cAAM,YAAY,KAAK,CAAC;AACxB,cAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,cAAM,aAAa,aAAa,IAAI,KAAK,YAAY,CAAC,IAAI;AAC1D,cAAM,WAAW,MAAM,YAAY;AACnC,cAAM,cAAcD,cAAa,WAAW,OAAO;AACnD,cAAM,YAAY,MAAM,QAAQ,aAAa,QAAQ;AACrD,YAAI,YAAY;AACd,UAAAC,eAAc,YAAY,SAAS;AAAA,QACrC,OAAO;AACL,kBAAQ,OAAO,MAAM,SAAS;AAAA,QAChC;AACA;AAAA,MACF;AAAA,MAEA,KAAK,UAAU;AACb,YAAI,CAAC,KAAK,CAAC,EAAG,OAAM;AACpB,cAAM,YAAY,KAAK,CAAC;AACxB,cAAM,WAAW,MAAM,YAAY;AACnC,cAAM,cAAcD,cAAa,WAAW,OAAO;AACnD,cAAM,QAAQ,MAAM,WAAW,aAAa,QAAQ;AACpD,YAAI,OAAO;AACT,kBAAQ,MAAM,mBAAmB;AACjC,kBAAQ,KAAK,CAAC;AAAA,QAChB,OAAO;AACL,kBAAQ,MAAM,0BAA0B;AACxC,kBAAQ,KAAK,CAAC;AAAA,QAChB;AACA;AAAA,MACF;AAAA,MAEA,KAAK;AACH,cAAM,YAAY;AAClB;AAAA,MAEF,KAAK,QAAQ;AACX,YAAI,CAAC,KAAK,CAAC,GAAG;AACZ,kBAAQ,MAAM,+BAA+B;AAC7C,kBAAQ,KAAK,CAAC;AAAA,QAChB;AACA,oBAAY,KAAK,CAAC,CAAC;AACnB;AAAA,MACF;AAAA,MAEA,KAAK;AACH,sBAAc;AACd;AAAA,MAEF,KAAK;AACH,cAAM,aAAa;AACnB;AAAA,MAEF,KAAK;AACH,2BAAmB;AACnB;AAAA,MAEF,KAAK;AACH,uBAAe,KAAK,SAAS,SAAS,CAAC;AACvC;AAAA;AAAA,MAGF,KAAK;AACH,cAAM,cAAc;AACpB;AAAA,MAEF,KAAK;AACH,cAAM,iBAAiB;AACvB;AAAA,MAEF,KAAK;AACH,cAAM,cAAc;AACpB;AAAA,MAEF,KAAK;AACH,cAAM,gBAAgB;AACtB;AAAA,MAEF;AACE,gBAAQ,MAAM,oBAAoB,OAAO,EAAE;AAC3C,cAAM;AAAA,IACV;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,GAAG,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,KAAK;","names":["readFileSync","writeFileSync","existsSync","readFileSync","writeFileSync","join","existsSync","join","writeFileSync","readFileSync","existsSync","readFileSync","join","relative","HOOK_NAMES","MARKER","relative","join","existsSync","readFileSync","readFileSync","writeFileSync","existsSync","join","relative","join","relative","existsSync","readFileSync","writeFileSync","existsSync","readFileSync","writeFileSync","join","join","existsSync","writeFileSync","readFileSync","resolve","readFileSync","writeFileSync"]}
1
+ {"version":3,"sources":["../src/cli.ts","../src/crypto/encrypt.ts","../src/crypto/aead.ts","../src/crypto/chunking.ts","../src/crypto/crypto-utils.ts","../src/crypto/header.ts","../src/crypto/types.ts","../src/crypto/kdf.ts","../src/crypto/seal.ts","../src/git/password.ts","../src/git/utils.ts","../src/git/filter.ts","../src/git/filter-process.ts","../src/git/genpass.ts","../src/git/init.ts","../src/git/mark.ts","../src/git/status.ts","../src/git/textconv.ts"],"sourcesContent":["import { readFileSync, writeFileSync } from \"node:fs\";\nimport { decrypt, encrypt } from \"./crypto/encrypt.js\";\nimport { verifySeal } from \"./crypto/seal.js\";\nimport { simpleCleanFilter, simpleSmudgeFilter } from \"./git/filter.js\";\nimport { filterProcessMain } from \"./git/filter-process.js\";\nimport { genpassCommand } from \"./git/genpass.js\";\nimport { initCommand, removeFilterCommand } from \"./git/init.js\";\nimport { markCommand } from \"./git/mark.js\";\nimport { statusCommand } from \"./git/status.js\";\nimport { textconvCommand } from \"./git/textconv.js\";\n\nfunction readPasswordFromTTY(prompt: string): Promise<string> {\n return new Promise((resolve) => {\n if (!process.stdin.isTTY) {\n // Non-TTY fallback: read a line from stdin\n process.stderr.write(prompt);\n let data = \"\";\n process.stdin.setEncoding(\"utf-8\");\n process.stdin.on(\"data\", (chunk: string) => {\n const nlIdx = chunk.indexOf(\"\\n\");\n if (nlIdx >= 0) {\n data += chunk.slice(0, nlIdx);\n process.stdin.pause();\n resolve(data);\n } else {\n data += chunk;\n }\n });\n process.stdin.on(\"end\", () => resolve(data));\n process.stdin.resume();\n return;\n }\n\n process.stderr.write(prompt);\n const buf: string[] = [];\n\n process.stdin.setRawMode(true);\n process.stdin.setEncoding(\"utf-8\");\n process.stdin.resume();\n\n const onData = (ch: string) => {\n if (ch === \"\\u0003\") {\n // Ctrl+C\n process.stderr.write(\"\\n\");\n process.stdin.setRawMode(false);\n process.stdin.pause();\n process.stdin.removeListener(\"data\", onData);\n process.exit(130);\n } else if (ch === \"\\r\" || ch === \"\\n\") {\n // Enter\n process.stderr.write(\"\\n\");\n process.stdin.setRawMode(false);\n process.stdin.pause();\n process.stdin.removeListener(\"data\", onData);\n resolve(buf.join(\"\"));\n } else if (ch === \"\\u007F\" || ch === \"\\b\") {\n // Backspace\n buf.pop();\n } else if (ch === \"\\u0004\") {\n // Ctrl+D (EOF)\n process.stderr.write(\"\\n\");\n process.stdin.setRawMode(false);\n process.stdin.pause();\n process.stdin.removeListener(\"data\", onData);\n resolve(buf.join(\"\"));\n } else if (ch >= \" \") {\n buf.push(ch);\n }\n };\n\n process.stdin.on(\"data\", onData);\n });\n}\n\nasync function getPassword(prompt = \"Password: \"): Promise<string> {\n const envPassword = process.env[\"MDENC_PASSWORD\"];\n if (envPassword) return envPassword;\n\n return readPasswordFromTTY(prompt);\n}\n\nasync function getPasswordWithConfirmation(): Promise<string> {\n if (process.env[\"MDENC_PASSWORD\"]) return process.env[\"MDENC_PASSWORD\"];\n\n const password = await readPasswordFromTTY(\"Password: \");\n const confirm = await readPasswordFromTTY(\"Confirm password: \");\n if (password !== confirm) {\n console.error(\"Error: passwords do not match\");\n process.exit(1);\n }\n return password;\n}\n\nfunction usage(): never {\n console.error(`Usage:\n mdenc encrypt <file> [-o output] Encrypt a markdown file\n mdenc decrypt <file> [-o output] Decrypt an mdenc file\n mdenc verify <file> Verify file integrity\n\nGit integration:\n mdenc init Set up git filter for automatic encryption\n mdenc mark <directory> Mark a directory for encryption\n mdenc status Show encryption status\n mdenc remove-filter Remove git filter configuration\n mdenc genpass [--force] Generate a random password into .mdenc-password\n\nInternal (called by git):\n mdenc filter-process Long-running filter process\n mdenc filter-clean <path> Single-file clean filter\n mdenc filter-smudge <path> Single-file smudge filter\n mdenc textconv <file> Output plaintext for git diff`);\n process.exit(1);\n}\n\nasync function main(): Promise<void> {\n const args = process.argv.slice(2);\n\n if (args.length === 0) usage();\n\n const command = args[0];\n\n try {\n switch (command) {\n case \"encrypt\": {\n if (!args[1]) usage();\n const inputFile = args[1];\n const outputIdx = args.indexOf(\"-o\");\n const outputFile = outputIdx >= 0 ? args[outputIdx + 1] : undefined;\n const password = await getPasswordWithConfirmation();\n const plaintext = readFileSync(inputFile, \"utf-8\");\n const encrypted = await encrypt(plaintext, password);\n if (outputFile) {\n writeFileSync(outputFile, encrypted);\n } else {\n process.stdout.write(encrypted);\n }\n break;\n }\n\n case \"decrypt\": {\n if (!args[1]) usage();\n const inputFile = args[1];\n const outputIdx = args.indexOf(\"-o\");\n const outputFile = outputIdx >= 0 ? args[outputIdx + 1] : undefined;\n const password = await getPassword();\n const fileContent = readFileSync(inputFile, \"utf-8\");\n const decrypted = await decrypt(fileContent, password);\n if (outputFile) {\n writeFileSync(outputFile, decrypted);\n } else {\n process.stdout.write(decrypted);\n }\n break;\n }\n\n case \"verify\": {\n if (!args[1]) usage();\n const inputFile = args[1];\n const password = await getPassword();\n const fileContent = readFileSync(inputFile, \"utf-8\");\n const valid = await verifySeal(fileContent, password);\n if (valid) {\n console.error(\"Seal verified: OK\");\n process.exit(0);\n } else {\n console.error(\"Seal verification FAILED\");\n process.exit(1);\n }\n break;\n }\n\n case \"init\":\n await initCommand();\n break;\n\n case \"mark\": {\n if (!args[1]) {\n console.error(\"Usage: mdenc mark <directory>\\n\\nRun \\\"mdenc mark --help\\\" for details.\");\n process.exit(1);\n }\n markCommand(args[1]);\n break;\n }\n\n case \"status\":\n statusCommand();\n break;\n\n case \"remove-filter\":\n removeFilterCommand();\n break;\n\n case \"genpass\":\n genpassCommand(args.includes(\"--force\"));\n break;\n\n // Git filter commands (called by git, not directly by user)\n case \"filter-process\":\n await filterProcessMain();\n break;\n\n case \"filter-clean\":\n await simpleCleanFilter(args[1] ?? \"\");\n break;\n\n case \"filter-smudge\":\n await simpleSmudgeFilter();\n break;\n\n case \"textconv\":\n if (!args[1]) {\n console.error(\"Usage: mdenc textconv <file>\");\n process.exit(1);\n }\n await textconvCommand(args[1]);\n break;\n\n default:\n console.error(`Unknown command: ${command}`);\n usage();\n }\n } catch (err) {\n console.error(`Error: ${err instanceof Error ? err.message : err}`);\n process.exit(1);\n }\n}\n\nmain();\n","import { hmac } from \"@noble/hashes/hmac\";\nimport { sha256 } from \"@noble/hashes/sha256\";\nimport { decryptChunk, encryptChunk } from \"./aead.js\";\nimport { chunkByFixedSize, chunkByParagraph } from \"./chunking.js\";\nimport { constantTimeEqual, zeroize } from \"./crypto-utils.js\";\nimport {\n authenticateHeader,\n fromBase64,\n generateFileId,\n generateSalt,\n parseHeader,\n serializeHeader,\n toBase64,\n verifyHeader,\n} from \"./header.js\";\nimport { deriveKeys, deriveMasterKey } from \"./kdf.js\";\nimport type { EncryptOptions, MdencHeader } from \"./types.js\";\nimport { ChunkingStrategy, DEFAULT_SCRYPT_PARAMS } from \"./types.js\";\n\nexport async function encrypt(\n plaintext: string,\n password: string,\n options?: EncryptOptions,\n): Promise<string> {\n const chunking = options?.chunking ?? ChunkingStrategy.Paragraph;\n const maxChunkSize = options?.maxChunkSize ?? 65536;\n const scryptParams = options?.scrypt ?? DEFAULT_SCRYPT_PARAMS;\n\n // Chunk the plaintext\n let chunks: string[];\n if (chunking === ChunkingStrategy.FixedSize) {\n const fixedSize = options?.fixedChunkSize ?? 4096;\n chunks = chunkByFixedSize(plaintext, fixedSize);\n } else {\n chunks = chunkByParagraph(plaintext, maxChunkSize);\n }\n\n // If previousFile provided, extract salt/fileId/keys from its header to avoid\n // deriving the same master key twice (same password + same salt).\n let salt: Uint8Array;\n let fileId: Uint8Array;\n let masterKey: Uint8Array;\n\n const prev = options?.previousFile\n ? parsePreviousFileHeader(options.previousFile, password)\n : undefined;\n\n if (prev) {\n salt = prev.salt;\n fileId = prev.fileId;\n masterKey = prev.masterKey;\n } else {\n salt = generateSalt();\n fileId = generateFileId();\n masterKey = deriveMasterKey(password, salt, scryptParams);\n }\n\n const { encKey, headerKey, nonceKey } = deriveKeys(masterKey);\n\n try {\n // Build header\n const header: MdencHeader = { version: \"v1\", salt, fileId, scrypt: scryptParams };\n const headerLine = serializeHeader(header);\n const headerHmac = authenticateHeader(headerKey, headerLine);\n const headerAuthLine = `hdrauth_b64=${toBase64(headerHmac)}`;\n\n // Encrypt chunks — deterministic encryption handles reuse automatically\n const chunkLines: string[] = [];\n for (const chunkText of chunks) {\n const chunkBytes = new TextEncoder().encode(chunkText);\n const payload = encryptChunk(encKey, nonceKey, chunkBytes, fileId);\n chunkLines.push(toBase64(payload));\n }\n\n // Compute seal HMAC over header + auth + chunk lines\n const sealInput = `${headerLine}\\n${headerAuthLine}\\n${chunkLines.join(\"\\n\")}`;\n const sealData = new TextEncoder().encode(sealInput);\n const sealHmac = hmac(sha256, headerKey, sealData);\n const sealLine = `seal_b64=${toBase64(sealHmac)}`;\n\n return [headerLine, headerAuthLine, ...chunkLines, sealLine, \"\"].join(\"\\n\");\n } finally {\n zeroize(masterKey, encKey, headerKey, nonceKey);\n }\n}\n\nexport async function decrypt(fileContent: string, password: string): Promise<string> {\n const lines = fileContent.split(\"\\n\");\n\n // Remove trailing empty line if present\n if (lines.length > 0 && lines[lines.length - 1] === \"\") {\n lines.pop();\n }\n\n if (lines.length < 3) {\n throw new Error(\"Invalid mdenc file: too few lines\");\n }\n\n // Parse header\n const headerLine = lines[0]!;\n const header = parseHeader(headerLine);\n\n // Parse header auth\n const authLine = lines[1]!;\n const authMatch = authLine.match(/^hdrauth_b64=([A-Za-z0-9+/=]+)$/);\n if (!authMatch?.[1]) {\n throw new Error(\"Invalid mdenc file: missing hdrauth_b64 line\");\n }\n const headerHmac = fromBase64(authMatch[1]);\n\n // Derive keys\n const masterKey = deriveMasterKey(password, header.salt, header.scrypt);\n const { encKey, headerKey, nonceKey } = deriveKeys(masterKey);\n\n try {\n // Verify header HMAC\n if (!verifyHeader(headerKey, headerLine, headerHmac)) {\n throw new Error(\"Header authentication failed (wrong password or tampered header)\");\n }\n\n // Collect chunk lines and seal line\n const remaining = lines.slice(2);\n const sealIndex = remaining.findIndex((l) => l.startsWith(\"seal_b64=\"));\n if (sealIndex < 0) {\n throw new Error(\"Invalid mdenc file: missing seal\");\n }\n\n const chunkLines = remaining.slice(0, sealIndex);\n if (chunkLines.length === 0) {\n throw new Error(\"Invalid mdenc file: no chunk lines\");\n }\n\n // Verify seal HMAC\n const sealLine = remaining[sealIndex]!;\n const sealMatch = sealLine.match(/^seal_b64=([A-Za-z0-9+/=]+)$/);\n if (!sealMatch?.[1]) throw new Error(\"Invalid mdenc file: malformed seal line\");\n const storedSealHmac = fromBase64(sealMatch[1]);\n\n const sealInput = `${headerLine}\\n${authLine}\\n${chunkLines.join(\"\\n\")}`;\n const sealData = new TextEncoder().encode(sealInput);\n const computedSealHmac = hmac(sha256, headerKey, sealData);\n if (!constantTimeEqual(computedSealHmac, storedSealHmac)) {\n throw new Error(\"Seal verification failed (file tampered or chunks reordered)\");\n }\n\n // Decrypt chunks\n const plaintextParts: string[] = [];\n for (const line of chunkLines) {\n const payload = fromBase64(line);\n const decrypted = decryptChunk(encKey, payload, header.fileId);\n plaintextParts.push(new TextDecoder().decode(decrypted));\n }\n\n return plaintextParts.join(\"\");\n } finally {\n zeroize(masterKey, encKey, headerKey, nonceKey);\n }\n}\n\nfunction parsePreviousFileHeader(\n fileContent: string,\n password: string,\n): { salt: Uint8Array; fileId: Uint8Array; masterKey: Uint8Array } | undefined {\n try {\n const lines = fileContent.split(\"\\n\");\n if (lines.length > 0 && lines[lines.length - 1] === \"\") lines.pop();\n if (lines.length < 3) return undefined;\n\n const headerLine = lines[0]!;\n const header = parseHeader(headerLine);\n\n // Parse and verify header HMAC before trusting\n const authLine = lines[1]!;\n const authMatch = authLine.match(/^hdrauth_b64=([A-Za-z0-9+/=]+)$/);\n if (!authMatch?.[1]) return undefined;\n const headerHmac = fromBase64(authMatch[1]);\n\n const masterKey = deriveMasterKey(password, header.salt, header.scrypt);\n const { encKey, headerKey, nonceKey } = deriveKeys(masterKey);\n\n if (!verifyHeader(headerKey, headerLine, headerHmac)) {\n zeroize(masterKey, encKey, headerKey, nonceKey);\n return undefined;\n }\n\n zeroize(encKey, headerKey, nonceKey);\n // Return masterKey for reuse — same password + same salt produces the same key,\n // so the caller can skip a redundant scrypt derivation.\n return { salt: header.salt, fileId: header.fileId, masterKey };\n } catch {\n return undefined;\n }\n}\n","import { xchacha20poly1305 } from \"@noble/ciphers/chacha\";\nimport { hmac } from \"@noble/hashes/hmac\";\nimport { sha256 } from \"@noble/hashes/sha256\";\n\nconst NONCE_LENGTH = 24;\n\nexport function buildAAD(fileId: Uint8Array): Uint8Array {\n const fileIdHex = bytesToHex(fileId);\n const aadString = `mdenc:v1\\n${fileIdHex}`;\n return new TextEncoder().encode(aadString);\n}\n\nexport function deriveNonce(nonceKey: Uint8Array, plaintext: Uint8Array): Uint8Array {\n const full = hmac(sha256, nonceKey, plaintext);\n return full.slice(0, NONCE_LENGTH);\n}\n\nexport function encryptChunk(\n encKey: Uint8Array,\n nonceKey: Uint8Array,\n plaintext: Uint8Array,\n fileId: Uint8Array,\n): Uint8Array {\n const nonce = deriveNonce(nonceKey, plaintext);\n const aad = buildAAD(fileId);\n const cipher = xchacha20poly1305(encKey, nonce, aad);\n const ciphertext = cipher.encrypt(plaintext);\n // Output: nonce || ciphertext || tag (tag is appended by noble)\n const result = new Uint8Array(NONCE_LENGTH + ciphertext.length);\n result.set(nonce, 0);\n result.set(ciphertext, NONCE_LENGTH);\n return result;\n}\n\nexport function decryptChunk(\n encKey: Uint8Array,\n payload: Uint8Array,\n fileId: Uint8Array,\n): Uint8Array {\n if (payload.length < NONCE_LENGTH + 16) {\n throw new Error(\"Chunk payload too short\");\n }\n const nonce = payload.slice(0, NONCE_LENGTH);\n const ciphertext = payload.slice(NONCE_LENGTH);\n const aad = buildAAD(fileId);\n const cipher = xchacha20poly1305(encKey, nonce, aad);\n try {\n return cipher.decrypt(ciphertext);\n } catch {\n throw new Error(\"Chunk authentication failed\");\n }\n}\n\nfunction bytesToHex(bytes: Uint8Array): string {\n let hex = \"\";\n for (let i = 0; i < bytes.length; i++) {\n hex += bytes[i]!.toString(16).padStart(2, \"0\");\n }\n return hex;\n}\n","const DEFAULT_MAX_CHUNK_SIZE = 65536; // 64 KiB\n\nexport function chunkByParagraph(text: string, maxSize = DEFAULT_MAX_CHUNK_SIZE): string[] {\n // Normalize line endings\n const normalized = text.replace(/\\r\\n/g, \"\\n\");\n\n if (normalized.length === 0) {\n return [\"\"];\n }\n\n // Split on runs of 2+ newlines, attaching each boundary to the preceding chunk\n const chunks: string[] = [];\n const boundary = /\\n{2,}/g;\n let lastEnd = 0;\n let match: RegExpExecArray | null;\n\n while ((match = boundary.exec(normalized)) !== null) {\n // Content up to and including the boundary goes to the preceding chunk\n const chunkEnd = match.index + match[0].length;\n chunks.push(normalized.slice(lastEnd, chunkEnd));\n lastEnd = chunkEnd;\n }\n\n // Remaining content after the last boundary (or the entire string if no boundary)\n if (lastEnd < normalized.length) {\n chunks.push(normalized.slice(lastEnd));\n } else if (chunks.length === 0) {\n // No boundaries found and nothing remaining — shouldn't happen since we checked length > 0\n chunks.push(normalized);\n }\n\n // Split any oversized chunks at byte boundaries\n const result: string[] = [];\n for (const chunk of chunks) {\n if (byteLength(chunk) <= maxSize) {\n result.push(chunk);\n } else {\n result.push(...splitAtByteLimit(chunk, maxSize));\n }\n }\n\n return result;\n}\n\nexport function chunkByFixedSize(text: string, size: number): string[] {\n const normalized = text.replace(/\\r\\n/g, \"\\n\");\n\n if (normalized.length === 0) {\n return [\"\"];\n }\n\n const bytes = new TextEncoder().encode(normalized);\n if (bytes.length <= size) {\n return [normalized];\n }\n\n const chunks: string[] = [];\n const decoder = new TextDecoder();\n let offset = 0;\n while (offset < bytes.length) {\n const end = Math.min(offset + size, bytes.length);\n // Avoid splitting in the middle of a multi-byte UTF-8 character\n let adjusted = end;\n if (adjusted < bytes.length) {\n while (adjusted > offset && (bytes[adjusted]! & 0xc0) === 0x80) {\n adjusted--;\n }\n }\n chunks.push(decoder.decode(bytes.slice(offset, adjusted)));\n offset = adjusted;\n }\n\n return chunks;\n}\n\nfunction byteLength(s: string): number {\n return new TextEncoder().encode(s).length;\n}\n\nfunction splitAtByteLimit(text: string, maxSize: number): string[] {\n const bytes = new TextEncoder().encode(text);\n const decoder = new TextDecoder();\n const parts: string[] = [];\n let offset = 0;\n while (offset < bytes.length) {\n let end = Math.min(offset + maxSize, bytes.length);\n // Avoid splitting multi-byte characters\n if (end < bytes.length) {\n while (end > offset && (bytes[end]! & 0xc0) === 0x80) {\n end--;\n }\n }\n parts.push(decoder.decode(bytes.slice(offset, end)));\n offset = end;\n }\n return parts;\n}\n","export function constantTimeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a[i]! ^ b[i]!;\n }\n return diff === 0;\n}\n\nexport function zeroize(...arrays: Uint8Array[]): void {\n for (const arr of arrays) {\n arr.fill(0);\n }\n}\n","import { randomBytes } from \"@noble/ciphers/webcrypto\";\nimport { hmac } from \"@noble/hashes/hmac\";\nimport { sha256 } from \"@noble/hashes/sha256\";\nimport { constantTimeEqual } from \"./crypto-utils.js\";\nimport type { MdencHeader, ScryptParams } from \"./types.js\";\nimport { SCRYPT_BOUNDS } from \"./types.js\";\n\nexport function generateSalt(): Uint8Array {\n return randomBytes(16);\n}\n\nexport function generateFileId(): Uint8Array {\n return randomBytes(16);\n}\n\nexport function serializeHeader(header: MdencHeader): string {\n const saltB64 = toBase64(header.salt);\n const fileIdB64 = toBase64(header.fileId);\n const { N, r, p } = header.scrypt;\n return `mdenc:v1 salt_b64=${saltB64} file_id_b64=${fileIdB64} scrypt=N=${N},r=${r},p=${p}`;\n}\n\nexport function parseHeader(line: string): MdencHeader {\n if (!line.startsWith(\"mdenc:v1 \")) {\n throw new Error(\"Invalid header: missing mdenc:v1 prefix\");\n }\n\n const saltMatch = line.match(/salt_b64=([A-Za-z0-9+/=]+)/);\n if (!saltMatch?.[1]) throw new Error(\"Invalid header: missing salt_b64\");\n const salt = fromBase64(saltMatch[1]);\n if (salt.length !== 16) throw new Error(\"Invalid header: salt must be 16 bytes\");\n\n const fileIdMatch = line.match(/file_id_b64=([A-Za-z0-9+/=]+)/);\n if (!fileIdMatch?.[1]) throw new Error(\"Invalid header: missing file_id_b64\");\n const fileId = fromBase64(fileIdMatch[1]);\n if (fileId.length !== 16) throw new Error(\"Invalid header: file_id must be 16 bytes\");\n\n const scryptMatch = line.match(/scrypt=N=(\\d+),r=(\\d+),p=(\\d+)/);\n if (!scryptMatch?.[1] || !scryptMatch[2] || !scryptMatch[3])\n throw new Error(\"Invalid header: missing scrypt parameters\");\n const scryptParams: ScryptParams = {\n N: parseInt(scryptMatch[1], 10),\n r: parseInt(scryptMatch[2], 10),\n p: parseInt(scryptMatch[3], 10),\n };\n\n validateScryptParams(scryptParams);\n\n return { version: \"v1\", salt, fileId, scrypt: scryptParams };\n}\n\nexport function validateScryptParams(params: ScryptParams): void {\n const { N, r, p } = SCRYPT_BOUNDS;\n if (params.N < N.min || params.N > N.max) {\n throw new Error(`Invalid scrypt N: ${params.N} (must be ${N.min}–${N.max})`);\n }\n if ((params.N & (params.N - 1)) !== 0) {\n throw new Error(`Invalid scrypt N: ${params.N} (must be a power of 2)`);\n }\n if (params.r < r.min || params.r > r.max) {\n throw new Error(`Invalid scrypt r: ${params.r} (must be ${r.min}–${r.max})`);\n }\n if (params.p < p.min || params.p > p.max) {\n throw new Error(`Invalid scrypt p: ${params.p} (must be ${p.min}–${p.max})`);\n }\n}\n\nexport function authenticateHeader(headerKey: Uint8Array, headerLine: string): Uint8Array {\n const headerBytes = new TextEncoder().encode(headerLine);\n return hmac(sha256, headerKey, headerBytes);\n}\n\nexport function verifyHeader(\n headerKey: Uint8Array,\n headerLine: string,\n hmacBytes: Uint8Array,\n): boolean {\n const computed = authenticateHeader(headerKey, headerLine);\n return constantTimeEqual(computed, hmacBytes);\n}\n\nexport function toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (let i = 0; i < bytes.length; i++) {\n binary += String.fromCharCode(bytes[i]!);\n }\n return btoa(binary);\n}\n\nexport function fromBase64(b64: string): Uint8Array {\n const binary = atob(b64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return bytes;\n}\n","export interface ScryptParams {\n N: number; // CPU/memory cost (default 16384 = 2^14, ~16 MiB with r=8)\n r: number; // block size (default 8)\n p: number; // parallelism (default 1)\n}\n\nexport const DEFAULT_SCRYPT_PARAMS: ScryptParams = {\n N: 16384,\n r: 8,\n p: 1,\n};\n\nexport const SCRYPT_BOUNDS = {\n N: { min: 1024, max: 1048576 }, // 2^10 – 2^20\n r: { min: 1, max: 64 },\n p: { min: 1, max: 16 },\n} as const;\n\nexport interface MdencHeader {\n version: \"v1\";\n salt: Uint8Array; // 16 bytes\n fileId: Uint8Array; // 16 bytes\n scrypt: ScryptParams;\n}\n\nexport interface MdencChunk {\n payload: Uint8Array; // nonce || ciphertext || tag\n}\n\nexport interface MdencFile {\n header: MdencHeader;\n headerLine: string;\n headerHmac: Uint8Array;\n chunks: MdencChunk[];\n sealHmac: Uint8Array; // file-level HMAC\n}\n\nexport enum ChunkingStrategy {\n Paragraph = \"paragraph\",\n FixedSize = \"fixed-size\",\n}\n\nexport interface EncryptOptions {\n chunking?: ChunkingStrategy;\n maxChunkSize?: number; // bytes, default 65536 (64 KiB)\n fixedChunkSize?: number; // bytes, for fixed-size chunking\n scrypt?: ScryptParams;\n previousFile?: string; // previous encrypted file content for ciphertext reuse\n}\n\nexport type DecryptOptions = Record<string, never>;\n","import { hkdf } from \"@noble/hashes/hkdf\";\nimport { scrypt } from \"@noble/hashes/scrypt\";\nimport { sha256 } from \"@noble/hashes/sha256\";\nimport { zeroize } from \"./crypto-utils.js\";\nimport type { ScryptParams } from \"./types.js\";\nimport { DEFAULT_SCRYPT_PARAMS } from \"./types.js\";\n\nconst ENC_INFO = new TextEncoder().encode(\"mdenc-v1-enc\");\nconst HDR_INFO = new TextEncoder().encode(\"mdenc-v1-hdr\");\nconst NONCE_INFO = new TextEncoder().encode(\"mdenc-v1-nonce\");\n\nexport function normalizePassword(password: string): Uint8Array {\n const normalized = password.normalize(\"NFKC\");\n return new TextEncoder().encode(normalized);\n}\n\nexport function deriveMasterKey(\n password: string,\n salt: Uint8Array,\n params: ScryptParams = DEFAULT_SCRYPT_PARAMS,\n): Uint8Array {\n const passwordBytes = normalizePassword(password);\n try {\n return scrypt(passwordBytes, salt, {\n N: params.N,\n r: params.r,\n p: params.p,\n dkLen: 32,\n });\n } finally {\n zeroize(passwordBytes);\n }\n}\n\nexport function deriveKeys(masterKey: Uint8Array): {\n encKey: Uint8Array;\n headerKey: Uint8Array;\n nonceKey: Uint8Array;\n} {\n const encKey = hkdf(sha256, masterKey, undefined, ENC_INFO, 32);\n const headerKey = hkdf(sha256, masterKey, undefined, HDR_INFO, 32);\n const nonceKey = hkdf(sha256, masterKey, undefined, NONCE_INFO, 32);\n return { encKey, headerKey, nonceKey };\n}\n","import { hmac } from \"@noble/hashes/hmac\";\nimport { sha256 } from \"@noble/hashes/sha256\";\nimport { constantTimeEqual, zeroize } from \"./crypto-utils.js\";\nimport { fromBase64, parseHeader, verifyHeader } from \"./header.js\";\nimport { deriveKeys, deriveMasterKey } from \"./kdf.js\";\n\nexport async function verifySeal(fileContent: string, password: string): Promise<boolean> {\n const lines = fileContent.split(\"\\n\");\n if (lines.length > 0 && lines[lines.length - 1] === \"\") lines.pop();\n if (lines.length < 3) throw new Error(\"Invalid mdenc file: too few lines\");\n\n const headerLine = lines[0]!;\n const header = parseHeader(headerLine);\n\n // Parse header auth\n const authLine = lines[1]!;\n const authMatch = authLine.match(/^hdrauth_b64=([A-Za-z0-9+/=]+)$/);\n if (!authMatch?.[1]) throw new Error(\"Invalid mdenc file: missing hdrauth_b64 line\");\n const headerHmac = fromBase64(authMatch[1]);\n\n // Derive keys\n const masterKey = deriveMasterKey(password, header.salt, header.scrypt);\n const { encKey, headerKey, nonceKey } = deriveKeys(masterKey);\n\n try {\n // Verify header\n if (!verifyHeader(headerKey, headerLine, headerHmac)) {\n throw new Error(\"Header authentication failed\");\n }\n\n // Find seal line\n const chunkAndSealLines = lines.slice(2);\n const sealIndex = chunkAndSealLines.findIndex((l) => l.startsWith(\"seal_b64=\"));\n if (sealIndex < 0) {\n throw new Error(\"File is not sealed: no seal_b64 line found\");\n }\n\n const chunkLines = chunkAndSealLines.slice(0, sealIndex);\n const sealLine = chunkAndSealLines[sealIndex]!;\n const sealMatch = sealLine.match(/^seal_b64=([A-Za-z0-9+/=]+)$/);\n if (!sealMatch?.[1]) throw new Error(\"Invalid seal line\");\n const storedHmac = fromBase64(sealMatch[1]);\n\n // Verify seal HMAC (covers header + auth + chunk lines)\n const sealInput = `${headerLine}\\n${authLine}\\n${chunkLines.join(\"\\n\")}`;\n const sealData = new TextEncoder().encode(sealInput);\n const computed = hmac(sha256, headerKey, sealData);\n\n return constantTimeEqual(computed, storedHmac);\n } finally {\n zeroize(masterKey, encKey, headerKey, nonceKey);\n }\n}\n","import { readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nconst PASSWORD_FILE = \".mdenc-password\";\n\n/**\n * Resolve password for non-interactive use (git hooks).\n * Checks MDENC_PASSWORD env var, then .mdenc-password file.\n * Returns null if neither is available — never prompts on TTY.\n */\nexport function resolvePassword(repoRoot: string): string | null {\n const envPassword = process.env[\"MDENC_PASSWORD\"];\n if (envPassword) return envPassword;\n\n try {\n const content = readFileSync(join(repoRoot, PASSWORD_FILE), \"utf-8\").trim();\n if (content.length > 0) return content;\n } catch {\n // File doesn't exist or unreadable\n }\n\n return null;\n}\n","import { execFileSync } from \"node:child_process\";\nimport { readdirSync, statSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nconst SKIP_DIRS = new Set([\".git\", \"node_modules\", \".hg\", \".svn\"]);\nconst MARKER_FILE = \".mdenc.conf\";\n\nexport function findGitRoot(): string {\n try {\n return execFileSync(\"git\", [\"rev-parse\", \"--show-toplevel\"], {\n encoding: \"utf-8\",\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n }).trim();\n } catch {\n throw new Error(\"Not a git repository\");\n }\n}\n\nexport function gitShow(repoRoot: string, ref: string, path: string): string | undefined {\n try {\n return execFileSync(\"git\", [\"show\", `${ref}:${path}`], {\n cwd: repoRoot,\n encoding: \"utf-8\",\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n } catch {\n return undefined;\n }\n}\n\nexport function findMarkedDirs(repoRoot: string): string[] {\n const results: string[] = [];\n walkForMarker(repoRoot, results);\n return results;\n}\n\nfunction walkForMarker(dir: string, results: string[]): void {\n let entries: string[];\n try {\n entries = readdirSync(dir);\n } catch {\n return;\n }\n\n if (entries.includes(MARKER_FILE)) {\n results.push(dir);\n }\n\n for (const entry of entries) {\n if (SKIP_DIRS.has(entry) || entry.startsWith(\".\")) continue;\n const full = join(dir, entry);\n try {\n if (statSync(full).isDirectory()) {\n walkForMarker(full, results);\n }\n } catch {\n // Skip inaccessible entries\n }\n }\n}\n\nexport function getMdFilesInDir(dir: string): string[] {\n try {\n return readdirSync(dir).filter((f) => f.endsWith(\".md\") && statSync(join(dir, f)).isFile());\n } catch {\n return [];\n }\n}\n\nexport function getMdencFilesInDir(dir: string): string[] {\n try {\n return readdirSync(dir).filter((f) => f.endsWith(\".mdenc\") && statSync(join(dir, f)).isFile());\n } catch {\n return [];\n }\n}\n\nexport function gitAdd(repoRoot: string, files: string[]): void {\n if (files.length === 0) return;\n execFileSync(\"git\", [\"add\", \"--\", ...files], {\n cwd: repoRoot,\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n}\n\nexport function gitRmCached(repoRoot: string, files: string[]): void {\n if (files.length === 0) return;\n execFileSync(\"git\", [\"rm\", \"--cached\", \"--ignore-unmatch\", \"--\", ...files], {\n cwd: repoRoot,\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n}\n\nexport function isFileStaged(repoRoot: string, file: string): boolean {\n try {\n const output = execFileSync(\"git\", [\"diff\", \"--cached\", \"--name-only\", \"--\", file], {\n cwd: repoRoot,\n encoding: \"utf-8\",\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n return output.trim().length > 0;\n } catch {\n return false;\n }\n}\n\nexport function isFileTracked(repoRoot: string, file: string): boolean {\n try {\n execFileSync(\"git\", [\"ls-files\", \"--error-unmatch\", \"--\", file], {\n cwd: repoRoot,\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n return true;\n } catch {\n return false;\n }\n}\n","import { decrypt, encrypt } from \"../crypto/encrypt.js\";\nimport { resolvePassword } from \"./password.js\";\nimport { findGitRoot, gitShow } from \"./utils.js\";\n\nexport async function cleanFilter(\n pathname: string,\n plaintext: string,\n password: string,\n repoRoot: string,\n): Promise<string> {\n const previousFile = gitShow(repoRoot, \"HEAD\", pathname);\n return encrypt(plaintext, password, previousFile ? { previousFile } : {});\n}\n\nexport async function smudgeFilter(content: string, password: string | null): Promise<string> {\n if (!password || !content.startsWith(\"mdenc:v1\")) {\n return content;\n }\n\n try {\n return await decrypt(content, password);\n } catch {\n // Decryption failed (wrong password, corrupt data) — pass through\n return content;\n }\n}\n\nexport async function simpleCleanFilter(pathname: string): Promise<void> {\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n\n if (!password) {\n process.stderr.write(\"mdenc: no password available, cannot encrypt\\n\");\n process.exit(1);\n }\n\n const input = await readStdin();\n const encrypted = await cleanFilter(pathname, input, password, repoRoot);\n process.stdout.write(encrypted);\n}\n\nexport async function simpleSmudgeFilter(): Promise<void> {\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n\n const input = await readStdin();\n const output = await smudgeFilter(input, password);\n process.stdout.write(output);\n}\n\nfunction readStdin(): Promise<string> {\n return new Promise((resolve) => {\n const chunks: Buffer[] = [];\n process.stdin.on(\"data\", (chunk) => chunks.push(chunk as Buffer));\n process.stdin.on(\"end\", () => resolve(Buffer.concat(chunks).toString(\"utf-8\")));\n process.stdin.resume();\n });\n}\n","import { cleanFilter, smudgeFilter } from \"./filter.js\";\nimport { resolvePassword } from \"./password.js\";\nimport { findGitRoot } from \"./utils.js\";\n\n// --- Pkt-line protocol ---\n\nconst FLUSH = Buffer.from(\"0000\", \"ascii\");\nconst MAX_PKT_DATA = 65516; // max payload per pkt-line (65520 - 4)\n\nfunction writePktLine(data: string): void {\n const payload = Buffer.from(data, \"utf-8\");\n const len = (payload.length + 4).toString(16).padStart(4, \"0\");\n process.stdout.write(len, \"ascii\");\n process.stdout.write(payload);\n}\n\nfunction writeFlush(): void {\n process.stdout.write(FLUSH);\n}\n\nfunction writeBinaryPktLines(data: Buffer): void {\n let offset = 0;\n while (offset < data.length) {\n const chunk = data.subarray(offset, offset + MAX_PKT_DATA);\n const len = (chunk.length + 4).toString(16).padStart(4, \"0\");\n process.stdout.write(len, \"ascii\");\n process.stdout.write(chunk);\n offset += chunk.length;\n }\n}\n\nclass PktLineReader {\n private buf = Buffer.alloc(0);\n // biome-ignore lint/suspicious/noConfusingVoidType: standard Promise resolve signature\n private resolveWait: ((value: void) => void) | null = null;\n private ended = false;\n\n constructor(stream: NodeJS.ReadableStream) {\n stream.on(\"data\", (chunk: Buffer) => {\n this.buf = Buffer.concat([this.buf, chunk]);\n if (this.resolveWait) {\n const r = this.resolveWait;\n this.resolveWait = null;\n r();\n }\n });\n stream.on(\"end\", () => {\n this.ended = true;\n if (this.resolveWait) {\n const r = this.resolveWait;\n this.resolveWait = null;\n r();\n }\n });\n stream.resume();\n }\n\n private async waitForData(): Promise<void> {\n if (this.buf.length > 0 || this.ended) return;\n return new Promise((resolve) => {\n this.resolveWait = resolve;\n });\n }\n\n private async readExact(n: number): Promise<Buffer | null> {\n while (this.buf.length < n) {\n if (this.ended) return null;\n await this.waitForData();\n }\n const result = this.buf.subarray(0, n);\n this.buf = this.buf.subarray(n);\n return result;\n }\n\n /** Read one pkt-line. Returns string for data, null for flush, undefined for EOF. */\n async readPacket(): Promise<string | null | undefined> {\n const lenBuf = await this.readExact(4);\n if (!lenBuf) return undefined; // EOF\n\n const lenStr = lenBuf.toString(\"ascii\");\n const len = parseInt(lenStr, 16);\n\n if (len === 0) return null; // flush packet\n\n if (len <= 4) throw new Error(`Invalid pkt-line length: ${len}`);\n\n const payload = await this.readExact(len - 4);\n if (!payload) throw new Error(\"Unexpected EOF in pkt-line payload\");\n return payload.toString(\"utf-8\");\n }\n\n /** Read lines until flush. Returns array of strings (newlines stripped). */\n async readUntilFlush(): Promise<string[]> {\n const lines: string[] = [];\n while (true) {\n const pkt = await this.readPacket();\n if (pkt === null || pkt === undefined) break;\n lines.push(pkt.replace(/\\n$/, \"\"));\n }\n return lines;\n }\n\n /** Read binary content until flush. Returns concatenated buffer. */\n async readContentUntilFlush(): Promise<Buffer> {\n const chunks: Buffer[] = [];\n while (true) {\n const lenBuf = await this.readExact(4);\n if (!lenBuf) break; // EOF\n\n const len = parseInt(lenBuf.toString(\"ascii\"), 16);\n if (len === 0) break; // flush\n if (len <= 4) throw new Error(`Invalid pkt-line length: ${len}`);\n\n const payload = await this.readExact(len - 4);\n if (!payload) throw new Error(\"Unexpected EOF in pkt-line content\");\n chunks.push(payload);\n }\n return Buffer.concat(chunks);\n }\n}\n\n// --- Protocol handshake + command loop ---\n\nexport async function filterProcessMain(): Promise<void> {\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n\n const reader = new PktLineReader(process.stdin);\n\n // --- Handshake ---\n const welcome = await reader.readUntilFlush();\n if (!welcome.includes(\"git-filter-client\") || !welcome.includes(\"version=2\")) {\n process.stderr.write(\"mdenc: invalid filter protocol handshake\\n\");\n process.exit(1);\n }\n\n writePktLine(\"git-filter-server\\n\");\n writePktLine(\"version=2\\n\");\n writeFlush();\n\n // Read capabilities\n const caps = await reader.readUntilFlush();\n // Respond with the capabilities we support\n if (caps.includes(\"capability=clean\")) writePktLine(\"capability=clean\\n\");\n if (caps.includes(\"capability=smudge\")) writePktLine(\"capability=smudge\\n\");\n writeFlush();\n\n // --- Command loop ---\n while (true) {\n const commandLines = await reader.readUntilFlush();\n if (commandLines.length === 0) break; // EOF / no more commands\n\n let cmd = \"\";\n let pathname = \"\";\n for (const line of commandLines) {\n if (line.startsWith(\"command=\")) cmd = line.slice(\"command=\".length);\n if (line.startsWith(\"pathname=\")) pathname = line.slice(\"pathname=\".length);\n }\n\n // Read file content\n const content = await reader.readContentUntilFlush();\n const contentStr = content.toString(\"utf-8\");\n\n try {\n let result: string;\n\n if (cmd === \"clean\") {\n if (!password) {\n writePktLine(\"status=error\\n\");\n writeFlush();\n writeFlush();\n continue;\n }\n result = await cleanFilter(pathname, contentStr, password, repoRoot);\n } else if (cmd === \"smudge\") {\n result = await smudgeFilter(contentStr, password);\n } else {\n process.stderr.write(`mdenc: unknown filter command: ${cmd}\\n`);\n writePktLine(\"status=error\\n\");\n writeFlush();\n writeFlush();\n continue;\n }\n\n const resultBuf = Buffer.from(result, \"utf-8\");\n writePktLine(\"status=success\\n\");\n writeFlush();\n writeBinaryPktLines(resultBuf);\n writeFlush();\n } catch (err) {\n process.stderr.write(\n `mdenc: filter error for ${pathname}: ${err instanceof Error ? err.message : err}\\n`,\n );\n writePktLine(\"status=error\\n\");\n writeFlush();\n writeFlush();\n }\n }\n}\n","import { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { randomBytes } from \"@noble/ciphers/webcrypto\";\nimport { findGitRoot } from \"./utils.js\";\n\nconst PASSWORD_FILE = \".mdenc-password\";\n\nexport function genpassCommand(force: boolean): void {\n const repoRoot = findGitRoot();\n const passwordPath = join(repoRoot, PASSWORD_FILE);\n\n if (existsSync(passwordPath) && !force) {\n console.error(`${PASSWORD_FILE} already exists. Use --force to overwrite.`);\n process.exit(1);\n }\n\n const password = Buffer.from(randomBytes(32)).toString(\"base64url\");\n writeFileSync(passwordPath, `${password}\\n`, { mode: 0o600 });\n console.error(`Generated password and wrote to ${PASSWORD_FILE}`);\n console.error(password);\n\n // Ensure .mdenc-password is in .gitignore\n const gitignorePath = join(repoRoot, \".gitignore\");\n const entry = PASSWORD_FILE;\n\n if (existsSync(gitignorePath)) {\n const content = readFileSync(gitignorePath, \"utf-8\");\n const lines = content.split(\"\\n\").map((l) => l.trim());\n if (!lines.includes(entry)) {\n writeFileSync(gitignorePath, `${content.trimEnd()}\\n${entry}\\n`);\n console.error(\"Added .mdenc-password to .gitignore\");\n }\n } else {\n writeFileSync(gitignorePath, `${entry}\\n`);\n console.error(\"Created .gitignore with .mdenc-password\");\n }\n}\n","import { execFileSync } from \"node:child_process\";\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { findGitRoot, findMarkedDirs } from \"./utils.js\";\n\nconst FILTER_CONFIGS: [string, string][] = [\n [\"filter.mdenc.process\", \"mdenc filter-process\"],\n [\"filter.mdenc.clean\", \"mdenc filter-clean %f\"],\n [\"filter.mdenc.smudge\", \"mdenc filter-smudge %f\"],\n [\"filter.mdenc.required\", \"true\"],\n [\"diff.mdenc.textconv\", \"mdenc textconv\"],\n];\n\nfunction configureGitFilter(repoRoot: string): void {\n for (const [key, value] of FILTER_CONFIGS) {\n execFileSync(\"git\", [\"config\", \"--local\", key, value], {\n cwd: repoRoot,\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n }\n}\n\nfunction isFilterConfigured(repoRoot: string): boolean {\n try {\n const val = execFileSync(\"git\", [\"config\", \"--get\", \"filter.mdenc.process\"], {\n cwd: repoRoot,\n encoding: \"utf-8\",\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n }).trim();\n return val.length > 0;\n } catch {\n return false;\n }\n}\n\nexport async function initCommand(): Promise<void> {\n const repoRoot = findGitRoot();\n\n // Configure git filter\n if (isFilterConfigured(repoRoot)) {\n console.log(\"Git filter already configured (skipped)\");\n } else {\n configureGitFilter(repoRoot);\n console.log(\"Configured git filter (filter.mdenc + diff.mdenc)\");\n }\n\n // Add .mdenc-password to root .gitignore\n const gitignorePath = join(repoRoot, \".gitignore\");\n const entry = \".mdenc-password\";\n\n if (existsSync(gitignorePath)) {\n const content = readFileSync(gitignorePath, \"utf-8\");\n const lines = content.split(\"\\n\").map((l) => l.trim());\n if (!lines.includes(entry)) {\n writeFileSync(gitignorePath, `${content.trimEnd()}\\n${entry}\\n`);\n console.log(\"Added .mdenc-password to .gitignore\");\n } else {\n console.log(\".mdenc-password already in .gitignore (skipped)\");\n }\n } else {\n writeFileSync(gitignorePath, `${entry}\\n`);\n console.log(\"Created .gitignore with .mdenc-password\");\n }\n\n // Re-checkout marked dirs to trigger smudge filter\n const markedDirs = findMarkedDirs(repoRoot);\n if (markedDirs.length > 0) {\n const { relative } = await import(\"node:path\");\n for (const dir of markedDirs) {\n const relDir = relative(repoRoot, dir) || \".\";\n try {\n execFileSync(\"git\", [\"checkout\", \"HEAD\", \"--\", `${relDir}/*.md`], {\n cwd: repoRoot,\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n } catch {\n // No .md files tracked yet — fine\n }\n }\n }\n\n console.log(\"mdenc git integration initialized.\");\n}\n\nexport function removeFilterCommand(): void {\n const repoRoot = findGitRoot();\n\n for (const section of [\"filter.mdenc\", \"diff.mdenc\"]) {\n try {\n execFileSync(\"git\", [\"config\", \"--local\", \"--remove-section\", section], {\n cwd: repoRoot,\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n });\n } catch {\n // Section may not exist\n }\n }\n\n console.log(\"Removed git filter configuration.\");\n}\n","import { execFileSync } from \"node:child_process\";\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join, relative, resolve } from \"node:path\";\nimport { findGitRoot, gitAdd } from \"./utils.js\";\n\nconst MARKER_FILE = \".mdenc.conf\";\nconst MARKER_CONTENT = \"# mdenc: .md files in this directory are automatically encrypted\\n\";\nconst GITATTR_PATTERN = \"*.md filter=mdenc diff=mdenc\";\n\nfunction isFilterConfigured(repoRoot: string): boolean {\n try {\n const val = execFileSync(\"git\", [\"config\", \"--get\", \"filter.mdenc.process\"], {\n cwd: repoRoot,\n encoding: \"utf-8\",\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n }).trim();\n return val.length > 0;\n } catch {\n return false;\n }\n}\n\nfunction markUsage(): never {\n console.error(`Usage: mdenc mark <directory>\n\nMark a directory so that all *.md files inside it are automatically\nencrypted when staged (git add) and decrypted when checked out.\n\nWhat it does:\n 1. Creates <directory>/.mdenc.conf Marker file for mdenc to discover\n 2. Creates <directory>/.gitattributes Assigns the mdenc filter to *.md files\n 3. Stages both files in git\n\nPrerequisites:\n Run \"mdenc init\" first to configure the git filter in this clone.\n Run \"mdenc genpass\" to generate a password (or set MDENC_PASSWORD).\n\nExample:\n mdenc init\n mdenc genpass\n mdenc mark docs/private\n echo \"# Secret\" > docs/private/notes.md\n git add docs/private/notes.md # encrypted automatically`);\n process.exit(1);\n}\n\nexport function markCommand(dirArg: string): void {\n if (dirArg === \"--help\" || dirArg === \"-h\") {\n markUsage();\n }\n\n const repoRoot = findGitRoot();\n const dir = resolve(dirArg);\n\n if (!existsSync(dir)) {\n console.error(`Error: directory \"${dirArg}\" does not exist`);\n process.exit(1);\n }\n\n const rel = relative(repoRoot, dir);\n if (rel.startsWith(\"..\")) {\n console.error(`Error: directory \"${dirArg}\" is outside the git repository`);\n process.exit(1);\n }\n\n const relDir = rel || \".\";\n const filterReady = isFilterConfigured(repoRoot);\n\n // Create .mdenc.conf\n const confPath = join(dir, MARKER_FILE);\n if (!existsSync(confPath)) {\n writeFileSync(confPath, MARKER_CONTENT);\n console.log(`Created ${relDir}/${MARKER_FILE}`);\n } else {\n console.log(`${relDir}/${MARKER_FILE} already exists (skipped)`);\n }\n\n // Create/update .gitattributes\n const gitattrsPath = join(dir, \".gitattributes\");\n if (existsSync(gitattrsPath)) {\n const content = readFileSync(gitattrsPath, \"utf-8\");\n if (content.includes(\"filter=mdenc\")) {\n console.log(`${relDir}/.gitattributes already has filter=mdenc (skipped)`);\n } else {\n writeFileSync(gitattrsPath, `${content.trimEnd()}\\n${GITATTR_PATTERN}\\n`);\n console.log(`Updated ${relDir}/.gitattributes`);\n }\n } else {\n writeFileSync(gitattrsPath, `${GITATTR_PATTERN}\\n`);\n console.log(`Created ${relDir}/.gitattributes`);\n }\n\n // Stage .mdenc.conf and .gitattributes\n const toStage = [relative(repoRoot, confPath), relative(repoRoot, gitattrsPath)];\n gitAdd(repoRoot, toStage);\n\n console.log(`Marked ${relDir}/ for mdenc encryption`);\n\n if (!filterReady) {\n console.log(`\\nWarning: git filter not configured yet. Run \"mdenc init\" to enable encryption.`);\n }\n}\n","import { execFileSync } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, relative } from \"node:path\";\nimport { resolvePassword } from \"./password.js\";\nimport { findGitRoot, findMarkedDirs, getMdFilesInDir } from \"./utils.js\";\n\ninterface FilterConfig {\n process: string | null;\n clean: string | null;\n smudge: string | null;\n required: boolean;\n textconv: string | null;\n}\n\nfunction getFilterConfig(repoRoot: string): FilterConfig {\n const get = (key: string): string | null => {\n try {\n return execFileSync(\"git\", [\"config\", \"--get\", key], {\n cwd: repoRoot,\n encoding: \"utf-8\",\n stdio: [\"pipe\", \"pipe\", \"pipe\"],\n }).trim();\n } catch {\n return null;\n }\n };\n\n return {\n process: get(\"filter.mdenc.process\"),\n clean: get(\"filter.mdenc.clean\"),\n smudge: get(\"filter.mdenc.smudge\"),\n required: get(\"filter.mdenc.required\") === \"true\",\n textconv: get(\"diff.mdenc.textconv\"),\n };\n}\n\nexport function statusCommand(): void {\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n const markedDirs = findMarkedDirs(repoRoot);\n\n if (markedDirs.length === 0) {\n console.log(\"No directories marked for mdenc encryption.\");\n console.log('Use \"mdenc mark <directory>\" to designate a directory.');\n } else {\n console.log(\"Marked directories:\\n\");\n\n for (const dir of markedDirs) {\n const relDir = relative(repoRoot, dir) || \".\";\n console.log(` ${relDir}/`);\n\n // List .md files and their state\n const mdFiles = getMdFilesInDir(dir);\n for (const f of mdFiles) {\n const content = readFileSync(join(dir, f), \"utf-8\");\n if (content.startsWith(\"mdenc:v1\")) {\n console.log(` ${f} [encrypted — needs smudge]`);\n } else {\n console.log(` ${f} [plaintext]`);\n }\n }\n\n if (mdFiles.length === 0) {\n console.log(\" (no .md files)\");\n }\n\n // Check .gitattributes health\n const gitattrsPath = join(dir, \".gitattributes\");\n if (!existsSync(gitattrsPath)) {\n console.log(\" WARNING: no .gitattributes in this directory\");\n } else {\n const content = readFileSync(gitattrsPath, \"utf-8\");\n if (!content.includes(\"filter=mdenc\")) {\n console.log(\" WARNING: .gitattributes missing filter=mdenc pattern\");\n }\n }\n\n console.log();\n }\n }\n\n // Password status\n if (!password) {\n console.log(\"Password: NOT AVAILABLE\");\n console.log(\" Set MDENC_PASSWORD env var or create .mdenc-password file\");\n } else {\n console.log(\"Password: available\");\n }\n\n // Filter config status\n const config = getFilterConfig(repoRoot);\n if (!config.process && !config.clean) {\n console.log(\"Filter: NOT CONFIGURED\");\n console.log(' Run \"mdenc init\" to configure');\n } else {\n console.log(\"Filter: configured\");\n if (!config.required) {\n console.log(\" WARNING: filter.mdenc.required is not set to true\");\n }\n }\n}\n","import { readFileSync } from \"node:fs\";\nimport { decrypt } from \"../crypto/encrypt.js\";\nimport { resolvePassword } from \"./password.js\";\nimport { findGitRoot } from \"./utils.js\";\n\nexport async function textconvCommand(filePath: string): Promise<void> {\n const content = readFileSync(filePath, \"utf-8\");\n\n if (!content.startsWith(\"mdenc:v1\")) {\n process.stdout.write(content);\n return;\n }\n\n const repoRoot = findGitRoot();\n const password = resolvePassword(repoRoot);\n\n if (!password) {\n process.stdout.write(content);\n return;\n }\n\n try {\n const plaintext = await decrypt(content, password);\n process.stdout.write(plaintext);\n } catch {\n process.stdout.write(content);\n }\n}\n"],"mappings":";;;AAAA,SAAS,gBAAAA,eAAc,iBAAAC,sBAAqB;;;ACA5C,SAAS,QAAAC,aAAY;AACrB,SAAS,UAAAC,eAAc;;;ACDvB,SAAS,yBAAyB;AAClC,SAAS,YAAY;AACrB,SAAS,cAAc;AAEvB,IAAM,eAAe;AAEd,SAAS,SAAS,QAAgC;AACvD,QAAM,YAAY,WAAW,MAAM;AACnC,QAAM,YAAY;AAAA,EAAa,SAAS;AACxC,SAAO,IAAI,YAAY,EAAE,OAAO,SAAS;AAC3C;AAEO,SAAS,YAAY,UAAsB,WAAmC;AACnF,QAAM,OAAO,KAAK,QAAQ,UAAU,SAAS;AAC7C,SAAO,KAAK,MAAM,GAAG,YAAY;AACnC;AAEO,SAAS,aACd,QACA,UACA,WACA,QACY;AACZ,QAAM,QAAQ,YAAY,UAAU,SAAS;AAC7C,QAAM,MAAM,SAAS,MAAM;AAC3B,QAAM,SAAS,kBAAkB,QAAQ,OAAO,GAAG;AACnD,QAAM,aAAa,OAAO,QAAQ,SAAS;AAE3C,QAAM,SAAS,IAAI,WAAW,eAAe,WAAW,MAAM;AAC9D,SAAO,IAAI,OAAO,CAAC;AACnB,SAAO,IAAI,YAAY,YAAY;AACnC,SAAO;AACT;AAEO,SAAS,aACd,QACA,SACA,QACY;AACZ,MAAI,QAAQ,SAAS,eAAe,IAAI;AACtC,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AACA,QAAM,QAAQ,QAAQ,MAAM,GAAG,YAAY;AAC3C,QAAM,aAAa,QAAQ,MAAM,YAAY;AAC7C,QAAM,MAAM,SAAS,MAAM;AAC3B,QAAM,SAAS,kBAAkB,QAAQ,OAAO,GAAG;AACnD,MAAI;AACF,WAAO,OAAO,QAAQ,UAAU;AAAA,EAClC,QAAQ;AACN,UAAM,IAAI,MAAM,6BAA6B;AAAA,EAC/C;AACF;AAEA,SAAS,WAAW,OAA2B;AAC7C,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,WAAO,MAAM,CAAC,EAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAA,EAC/C;AACA,SAAO;AACT;;;AC3DA,IAAM,yBAAyB;AAExB,SAAS,iBAAiB,MAAc,UAAU,wBAAkC;AAEzF,QAAM,aAAa,KAAK,QAAQ,SAAS,IAAI;AAE7C,MAAI,WAAW,WAAW,GAAG;AAC3B,WAAO,CAAC,EAAE;AAAA,EACZ;AAGA,QAAM,SAAmB,CAAC;AAC1B,QAAM,WAAW;AACjB,MAAI,UAAU;AACd,MAAI;AAEJ,UAAQ,QAAQ,SAAS,KAAK,UAAU,OAAO,MAAM;AAEnD,UAAM,WAAW,MAAM,QAAQ,MAAM,CAAC,EAAE;AACxC,WAAO,KAAK,WAAW,MAAM,SAAS,QAAQ,CAAC;AAC/C,cAAU;AAAA,EACZ;AAGA,MAAI,UAAU,WAAW,QAAQ;AAC/B,WAAO,KAAK,WAAW,MAAM,OAAO,CAAC;AAAA,EACvC,WAAW,OAAO,WAAW,GAAG;AAE9B,WAAO,KAAK,UAAU;AAAA,EACxB;AAGA,QAAM,SAAmB,CAAC;AAC1B,aAAW,SAAS,QAAQ;AAC1B,QAAI,WAAW,KAAK,KAAK,SAAS;AAChC,aAAO,KAAK,KAAK;AAAA,IACnB,OAAO;AACL,aAAO,KAAK,GAAG,iBAAiB,OAAO,OAAO,CAAC;AAAA,IACjD;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,MAAc,MAAwB;AACrE,QAAM,aAAa,KAAK,QAAQ,SAAS,IAAI;AAE7C,MAAI,WAAW,WAAW,GAAG;AAC3B,WAAO,CAAC,EAAE;AAAA,EACZ;AAEA,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,UAAU;AACjD,MAAI,MAAM,UAAU,MAAM;AACxB,WAAO,CAAC,UAAU;AAAA,EACpB;AAEA,QAAM,SAAmB,CAAC;AAC1B,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,SAAS;AACb,SAAO,SAAS,MAAM,QAAQ;AAC5B,UAAM,MAAM,KAAK,IAAI,SAAS,MAAM,MAAM,MAAM;AAEhD,QAAI,WAAW;AACf,QAAI,WAAW,MAAM,QAAQ;AAC3B,aAAO,WAAW,WAAW,MAAM,QAAQ,IAAK,SAAU,KAAM;AAC9D;AAAA,MACF;AAAA,IACF;AACA,WAAO,KAAK,QAAQ,OAAO,MAAM,MAAM,QAAQ,QAAQ,CAAC,CAAC;AACzD,aAAS;AAAA,EACX;AAEA,SAAO;AACT;AAEA,SAAS,WAAW,GAAmB;AACrC,SAAO,IAAI,YAAY,EAAE,OAAO,CAAC,EAAE;AACrC;AAEA,SAAS,iBAAiB,MAAc,SAA2B;AACjE,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,IAAI;AAC3C,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,QAAkB,CAAC;AACzB,MAAI,SAAS;AACb,SAAO,SAAS,MAAM,QAAQ;AAC5B,QAAI,MAAM,KAAK,IAAI,SAAS,SAAS,MAAM,MAAM;AAEjD,QAAI,MAAM,MAAM,QAAQ;AACtB,aAAO,MAAM,WAAW,MAAM,GAAG,IAAK,SAAU,KAAM;AACpD;AAAA,MACF;AAAA,IACF;AACA,UAAM,KAAK,QAAQ,OAAO,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnD,aAAS;AAAA,EACX;AACA,SAAO;AACT;;;AChGO,SAAS,kBAAkB,GAAe,GAAwB;AACvE,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,YAAQ,EAAE,CAAC,IAAK,EAAE,CAAC;AAAA,EACrB;AACA,SAAO,SAAS;AAClB;AAEO,SAAS,WAAW,QAA4B;AACrD,aAAW,OAAO,QAAQ;AACxB,QAAI,KAAK,CAAC;AAAA,EACZ;AACF;;;ACbA,SAAS,mBAAmB;AAC5B,SAAS,QAAAC,aAAY;AACrB,SAAS,UAAAC,eAAc;;;ACIhB,IAAM,wBAAsC;AAAA,EACjD,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL;AAEO,IAAM,gBAAgB;AAAA,EAC3B,GAAG,EAAE,KAAK,MAAM,KAAK,QAAQ;AAAA;AAAA,EAC7B,GAAG,EAAE,KAAK,GAAG,KAAK,GAAG;AAAA,EACrB,GAAG,EAAE,KAAK,GAAG,KAAK,GAAG;AACvB;;;ADTO,SAAS,eAA2B;AACzC,SAAO,YAAY,EAAE;AACvB;AAEO,SAAS,iBAA6B;AAC3C,SAAO,YAAY,EAAE;AACvB;AAEO,SAAS,gBAAgB,QAA6B;AAC3D,QAAM,UAAU,SAAS,OAAO,IAAI;AACpC,QAAM,YAAY,SAAS,OAAO,MAAM;AACxC,QAAM,EAAE,GAAG,GAAG,EAAE,IAAI,OAAO;AAC3B,SAAO,qBAAqB,OAAO,gBAAgB,SAAS,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;AAC1F;AAEO,SAAS,YAAY,MAA2B;AACrD,MAAI,CAAC,KAAK,WAAW,WAAW,GAAG;AACjC,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAEA,QAAM,YAAY,KAAK,MAAM,4BAA4B;AACzD,MAAI,CAAC,YAAY,CAAC,EAAG,OAAM,IAAI,MAAM,kCAAkC;AACvE,QAAM,OAAO,WAAW,UAAU,CAAC,CAAC;AACpC,MAAI,KAAK,WAAW,GAAI,OAAM,IAAI,MAAM,uCAAuC;AAE/E,QAAM,cAAc,KAAK,MAAM,+BAA+B;AAC9D,MAAI,CAAC,cAAc,CAAC,EAAG,OAAM,IAAI,MAAM,qCAAqC;AAC5E,QAAM,SAAS,WAAW,YAAY,CAAC,CAAC;AACxC,MAAI,OAAO,WAAW,GAAI,OAAM,IAAI,MAAM,0CAA0C;AAEpF,QAAM,cAAc,KAAK,MAAM,gCAAgC;AAC/D,MAAI,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC;AACxD,UAAM,IAAI,MAAM,2CAA2C;AAC7D,QAAM,eAA6B;AAAA,IACjC,GAAG,SAAS,YAAY,CAAC,GAAG,EAAE;AAAA,IAC9B,GAAG,SAAS,YAAY,CAAC,GAAG,EAAE;AAAA,IAC9B,GAAG,SAAS,YAAY,CAAC,GAAG,EAAE;AAAA,EAChC;AAEA,uBAAqB,YAAY;AAEjC,SAAO,EAAE,SAAS,MAAM,MAAM,QAAQ,QAAQ,aAAa;AAC7D;AAEO,SAAS,qBAAqB,QAA4B;AAC/D,QAAM,EAAE,GAAG,GAAG,EAAE,IAAI;AACpB,MAAI,OAAO,IAAI,EAAE,OAAO,OAAO,IAAI,EAAE,KAAK;AACxC,UAAM,IAAI,MAAM,qBAAqB,OAAO,CAAC,aAAa,EAAE,GAAG,SAAI,EAAE,GAAG,GAAG;AAAA,EAC7E;AACA,OAAK,OAAO,IAAK,OAAO,IAAI,OAAQ,GAAG;AACrC,UAAM,IAAI,MAAM,qBAAqB,OAAO,CAAC,yBAAyB;AAAA,EACxE;AACA,MAAI,OAAO,IAAI,EAAE,OAAO,OAAO,IAAI,EAAE,KAAK;AACxC,UAAM,IAAI,MAAM,qBAAqB,OAAO,CAAC,aAAa,EAAE,GAAG,SAAI,EAAE,GAAG,GAAG;AAAA,EAC7E;AACA,MAAI,OAAO,IAAI,EAAE,OAAO,OAAO,IAAI,EAAE,KAAK;AACxC,UAAM,IAAI,MAAM,qBAAqB,OAAO,CAAC,aAAa,EAAE,GAAG,SAAI,EAAE,GAAG,GAAG;AAAA,EAC7E;AACF;AAEO,SAAS,mBAAmB,WAAuB,YAAgC;AACxF,QAAM,cAAc,IAAI,YAAY,EAAE,OAAO,UAAU;AACvD,SAAOC,MAAKC,SAAQ,WAAW,WAAW;AAC5C;AAEO,SAAS,aACd,WACA,YACA,WACS;AACT,QAAM,WAAW,mBAAmB,WAAW,UAAU;AACzD,SAAO,kBAAkB,UAAU,SAAS;AAC9C;AAEO,SAAS,SAAS,OAA2B;AAClD,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,cAAU,OAAO,aAAa,MAAM,CAAC,CAAE;AAAA,EACzC;AACA,SAAO,KAAK,MAAM;AACpB;AAEO,SAAS,WAAW,KAAyB;AAClD,QAAM,SAAS,KAAK,GAAG;AACvB,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,UAAM,CAAC,IAAI,OAAO,WAAW,CAAC;AAAA,EAChC;AACA,SAAO;AACT;;;AEhGA,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,UAAAC,eAAc;AAKvB,IAAM,WAAW,IAAI,YAAY,EAAE,OAAO,cAAc;AACxD,IAAM,WAAW,IAAI,YAAY,EAAE,OAAO,cAAc;AACxD,IAAM,aAAa,IAAI,YAAY,EAAE,OAAO,gBAAgB;AAErD,SAAS,kBAAkB,UAA8B;AAC9D,QAAM,aAAa,SAAS,UAAU,MAAM;AAC5C,SAAO,IAAI,YAAY,EAAE,OAAO,UAAU;AAC5C;AAEO,SAAS,gBACd,UACA,MACA,SAAuB,uBACX;AACZ,QAAM,gBAAgB,kBAAkB,QAAQ;AAChD,MAAI;AACF,WAAO,OAAO,eAAe,MAAM;AAAA,MACjC,GAAG,OAAO;AAAA,MACV,GAAG,OAAO;AAAA,MACV,GAAG,OAAO;AAAA,MACV,OAAO;AAAA,IACT,CAAC;AAAA,EACH,UAAE;AACA,YAAQ,aAAa;AAAA,EACvB;AACF;AAEO,SAAS,WAAW,WAIzB;AACA,QAAM,SAAS,KAAKC,SAAQ,WAAW,QAAW,UAAU,EAAE;AAC9D,QAAM,YAAY,KAAKA,SAAQ,WAAW,QAAW,UAAU,EAAE;AACjE,QAAM,WAAW,KAAKA,SAAQ,WAAW,QAAW,YAAY,EAAE;AAClE,SAAO,EAAE,QAAQ,WAAW,SAAS;AACvC;;;ANxBA,eAAsB,QACpB,WACA,UACA,SACiB;AACjB,QAAM,WAAW,SAAS;AAC1B,QAAM,eAAe,SAAS,gBAAgB;AAC9C,QAAM,eAAe,SAAS,UAAU;AAGxC,MAAI;AACJ,MAAI,2CAAyC;AAC3C,UAAM,YAAY,SAAS,kBAAkB;AAC7C,aAAS,iBAAiB,WAAW,SAAS;AAAA,EAChD,OAAO;AACL,aAAS,iBAAiB,WAAW,YAAY;AAAA,EACnD;AAIA,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,QAAM,OAAO,SAAS,eAClB,wBAAwB,QAAQ,cAAc,QAAQ,IACtD;AAEJ,MAAI,MAAM;AACR,WAAO,KAAK;AACZ,aAAS,KAAK;AACd,gBAAY,KAAK;AAAA,EACnB,OAAO;AACL,WAAO,aAAa;AACpB,aAAS,eAAe;AACxB,gBAAY,gBAAgB,UAAU,MAAM,YAAY;AAAA,EAC1D;AAEA,QAAM,EAAE,QAAQ,WAAW,SAAS,IAAI,WAAW,SAAS;AAE5D,MAAI;AAEF,UAAM,SAAsB,EAAE,SAAS,MAAM,MAAM,QAAQ,QAAQ,aAAa;AAChF,UAAM,aAAa,gBAAgB,MAAM;AACzC,UAAM,aAAa,mBAAmB,WAAW,UAAU;AAC3D,UAAM,iBAAiB,eAAe,SAAS,UAAU,CAAC;AAG1D,UAAM,aAAuB,CAAC;AAC9B,eAAW,aAAa,QAAQ;AAC9B,YAAM,aAAa,IAAI,YAAY,EAAE,OAAO,SAAS;AACrD,YAAM,UAAU,aAAa,QAAQ,UAAU,YAAY,MAAM;AACjE,iBAAW,KAAK,SAAS,OAAO,CAAC;AAAA,IACnC;AAGA,UAAM,YAAY,GAAG,UAAU;AAAA,EAAK,cAAc;AAAA,EAAK,WAAW,KAAK,IAAI,CAAC;AAC5E,UAAM,WAAW,IAAI,YAAY,EAAE,OAAO,SAAS;AACnD,UAAM,WAAWC,MAAKC,SAAQ,WAAW,QAAQ;AACjD,UAAM,WAAW,YAAY,SAAS,QAAQ,CAAC;AAE/C,WAAO,CAAC,YAAY,gBAAgB,GAAG,YAAY,UAAU,EAAE,EAAE,KAAK,IAAI;AAAA,EAC5E,UAAE;AACA,YAAQ,WAAW,QAAQ,WAAW,QAAQ;AAAA,EAChD;AACF;AAEA,eAAsB,QAAQ,aAAqB,UAAmC;AACpF,QAAM,QAAQ,YAAY,MAAM,IAAI;AAGpC,MAAI,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,CAAC,MAAM,IAAI;AACtD,UAAM,IAAI;AAAA,EACZ;AAEA,MAAI,MAAM,SAAS,GAAG;AACpB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAGA,QAAM,aAAa,MAAM,CAAC;AAC1B,QAAM,SAAS,YAAY,UAAU;AAGrC,QAAM,WAAW,MAAM,CAAC;AACxB,QAAM,YAAY,SAAS,MAAM,iCAAiC;AAClE,MAAI,CAAC,YAAY,CAAC,GAAG;AACnB,UAAM,IAAI,MAAM,8CAA8C;AAAA,EAChE;AACA,QAAM,aAAa,WAAW,UAAU,CAAC,CAAC;AAG1C,QAAM,YAAY,gBAAgB,UAAU,OAAO,MAAM,OAAO,MAAM;AACtE,QAAM,EAAE,QAAQ,WAAW,SAAS,IAAI,WAAW,SAAS;AAE5D,MAAI;AAEF,QAAI,CAAC,aAAa,WAAW,YAAY,UAAU,GAAG;AACpD,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAGA,UAAM,YAAY,MAAM,MAAM,CAAC;AAC/B,UAAM,YAAY,UAAU,UAAU,CAAC,MAAM,EAAE,WAAW,WAAW,CAAC;AACtE,QAAI,YAAY,GAAG;AACjB,YAAM,IAAI,MAAM,kCAAkC;AAAA,IACpD;AAEA,UAAM,aAAa,UAAU,MAAM,GAAG,SAAS;AAC/C,QAAI,WAAW,WAAW,GAAG;AAC3B,YAAM,IAAI,MAAM,oCAAoC;AAAA,IACtD;AAGA,UAAM,WAAW,UAAU,SAAS;AACpC,UAAM,YAAY,SAAS,MAAM,8BAA8B;AAC/D,QAAI,CAAC,YAAY,CAAC,EAAG,OAAM,IAAI,MAAM,yCAAyC;AAC9E,UAAM,iBAAiB,WAAW,UAAU,CAAC,CAAC;AAE9C,UAAM,YAAY,GAAG,UAAU;AAAA,EAAK,QAAQ;AAAA,EAAK,WAAW,KAAK,IAAI,CAAC;AACtE,UAAM,WAAW,IAAI,YAAY,EAAE,OAAO,SAAS;AACnD,UAAM,mBAAmBD,MAAKC,SAAQ,WAAW,QAAQ;AACzD,QAAI,CAAC,kBAAkB,kBAAkB,cAAc,GAAG;AACxD,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AAGA,UAAM,iBAA2B,CAAC;AAClC,eAAW,QAAQ,YAAY;AAC7B,YAAM,UAAU,WAAW,IAAI;AAC/B,YAAM,YAAY,aAAa,QAAQ,SAAS,OAAO,MAAM;AAC7D,qBAAe,KAAK,IAAI,YAAY,EAAE,OAAO,SAAS,CAAC;AAAA,IACzD;AAEA,WAAO,eAAe,KAAK,EAAE;AAAA,EAC/B,UAAE;AACA,YAAQ,WAAW,QAAQ,WAAW,QAAQ;AAAA,EAChD;AACF;AAEA,SAAS,wBACP,aACA,UAC6E;AAC7E,MAAI;AACF,UAAM,QAAQ,YAAY,MAAM,IAAI;AACpC,QAAI,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,CAAC,MAAM,GAAI,OAAM,IAAI;AAClE,QAAI,MAAM,SAAS,EAAG,QAAO;AAE7B,UAAM,aAAa,MAAM,CAAC;AAC1B,UAAM,SAAS,YAAY,UAAU;AAGrC,UAAM,WAAW,MAAM,CAAC;AACxB,UAAM,YAAY,SAAS,MAAM,iCAAiC;AAClE,QAAI,CAAC,YAAY,CAAC,EAAG,QAAO;AAC5B,UAAM,aAAa,WAAW,UAAU,CAAC,CAAC;AAE1C,UAAM,YAAY,gBAAgB,UAAU,OAAO,MAAM,OAAO,MAAM;AACtE,UAAM,EAAE,QAAQ,WAAW,SAAS,IAAI,WAAW,SAAS;AAE5D,QAAI,CAAC,aAAa,WAAW,YAAY,UAAU,GAAG;AACpD,cAAQ,WAAW,QAAQ,WAAW,QAAQ;AAC9C,aAAO;AAAA,IACT;AAEA,YAAQ,QAAQ,WAAW,QAAQ;AAGnC,WAAO,EAAE,MAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,UAAU;AAAA,EAC/D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;AOhMA,SAAS,QAAAC,aAAY;AACrB,SAAS,UAAAC,eAAc;AAKvB,eAAsB,WAAW,aAAqB,UAAoC;AACxF,QAAM,QAAQ,YAAY,MAAM,IAAI;AACpC,MAAI,MAAM,SAAS,KAAK,MAAM,MAAM,SAAS,CAAC,MAAM,GAAI,OAAM,IAAI;AAClE,MAAI,MAAM,SAAS,EAAG,OAAM,IAAI,MAAM,mCAAmC;AAEzE,QAAM,aAAa,MAAM,CAAC;AAC1B,QAAM,SAAS,YAAY,UAAU;AAGrC,QAAM,WAAW,MAAM,CAAC;AACxB,QAAM,YAAY,SAAS,MAAM,iCAAiC;AAClE,MAAI,CAAC,YAAY,CAAC,EAAG,OAAM,IAAI,MAAM,8CAA8C;AACnF,QAAM,aAAa,WAAW,UAAU,CAAC,CAAC;AAG1C,QAAM,YAAY,gBAAgB,UAAU,OAAO,MAAM,OAAO,MAAM;AACtE,QAAM,EAAE,QAAQ,WAAW,SAAS,IAAI,WAAW,SAAS;AAE5D,MAAI;AAEF,QAAI,CAAC,aAAa,WAAW,YAAY,UAAU,GAAG;AACpD,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AAGA,UAAM,oBAAoB,MAAM,MAAM,CAAC;AACvC,UAAM,YAAY,kBAAkB,UAAU,CAAC,MAAM,EAAE,WAAW,WAAW,CAAC;AAC9E,QAAI,YAAY,GAAG;AACjB,YAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAEA,UAAM,aAAa,kBAAkB,MAAM,GAAG,SAAS;AACvD,UAAM,WAAW,kBAAkB,SAAS;AAC5C,UAAM,YAAY,SAAS,MAAM,8BAA8B;AAC/D,QAAI,CAAC,YAAY,CAAC,EAAG,OAAM,IAAI,MAAM,mBAAmB;AACxD,UAAM,aAAa,WAAW,UAAU,CAAC,CAAC;AAG1C,UAAM,YAAY,GAAG,UAAU;AAAA,EAAK,QAAQ;AAAA,EAAK,WAAW,KAAK,IAAI,CAAC;AACtE,UAAM,WAAW,IAAI,YAAY,EAAE,OAAO,SAAS;AACnD,UAAM,WAAWC,MAAKC,SAAQ,WAAW,QAAQ;AAEjD,WAAO,kBAAkB,UAAU,UAAU;AAAA,EAC/C,UAAE;AACA,YAAQ,WAAW,QAAQ,WAAW,QAAQ;AAAA,EAChD;AACF;;;ACpDA,SAAS,oBAAoB;AAC7B,SAAS,YAAY;AAErB,IAAM,gBAAgB;AAOf,SAAS,gBAAgB,UAAiC;AAC/D,QAAM,cAAc,QAAQ,IAAI,gBAAgB;AAChD,MAAI,YAAa,QAAO;AAExB,MAAI;AACF,UAAM,UAAU,aAAa,KAAK,UAAU,aAAa,GAAG,OAAO,EAAE,KAAK;AAC1E,QAAI,QAAQ,SAAS,EAAG,QAAO;AAAA,EACjC,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;;;ACtBA,SAAS,oBAAoB;AAC7B,SAAS,aAAa,gBAAgB;AACtC,SAAS,QAAAC,aAAY;AAErB,IAAM,YAAY,oBAAI,IAAI,CAAC,QAAQ,gBAAgB,OAAO,MAAM,CAAC;AACjE,IAAM,cAAc;AAEb,SAAS,cAAsB;AACpC,MAAI;AACF,WAAO,aAAa,OAAO,CAAC,aAAa,iBAAiB,GAAG;AAAA,MAC3D,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC,EAAE,KAAK;AAAA,EACV,QAAQ;AACN,UAAM,IAAI,MAAM,sBAAsB;AAAA,EACxC;AACF;AAEO,SAAS,QAAQ,UAAkB,KAAa,MAAkC;AACvF,MAAI;AACF,WAAO,aAAa,OAAO,CAAC,QAAQ,GAAG,GAAG,IAAI,IAAI,EAAE,GAAG;AAAA,MACrD,KAAK;AAAA,MACL,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,eAAe,UAA4B;AACzD,QAAM,UAAoB,CAAC;AAC3B,gBAAc,UAAU,OAAO;AAC/B,SAAO;AACT;AAEA,SAAS,cAAc,KAAa,SAAyB;AAC3D,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,GAAG;AAAA,EAC3B,QAAQ;AACN;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,WAAW,GAAG;AACjC,YAAQ,KAAK,GAAG;AAAA,EAClB;AAEA,aAAW,SAAS,SAAS;AAC3B,QAAI,UAAU,IAAI,KAAK,KAAK,MAAM,WAAW,GAAG,EAAG;AACnD,UAAM,OAAOA,MAAK,KAAK,KAAK;AAC5B,QAAI;AACF,UAAI,SAAS,IAAI,EAAE,YAAY,GAAG;AAChC,sBAAc,MAAM,OAAO;AAAA,MAC7B;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEO,SAAS,gBAAgB,KAAuB;AACrD,MAAI;AACF,WAAO,YAAY,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,KAAK,SAASA,MAAK,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;AAAA,EAC5F,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAUO,SAAS,OAAO,UAAkB,OAAuB;AAC9D,MAAI,MAAM,WAAW,EAAG;AACxB,eAAa,OAAO,CAAC,OAAO,MAAM,GAAG,KAAK,GAAG;AAAA,IAC3C,KAAK;AAAA,IACL,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AACH;;;AC/EA,eAAsB,YACpB,UACA,WACA,UACA,UACiB;AACjB,QAAM,eAAe,QAAQ,UAAU,QAAQ,QAAQ;AACvD,SAAO,QAAQ,WAAW,UAAU,eAAe,EAAE,aAAa,IAAI,CAAC,CAAC;AAC1E;AAEA,eAAsB,aAAa,SAAiB,UAA0C;AAC5F,MAAI,CAAC,YAAY,CAAC,QAAQ,WAAW,UAAU,GAAG;AAChD,WAAO;AAAA,EACT;AAEA,MAAI;AACF,WAAO,MAAM,QAAQ,SAAS,QAAQ;AAAA,EACxC,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,kBAAkB,UAAiC;AACvE,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AAEzC,MAAI,CAAC,UAAU;AACb,YAAQ,OAAO,MAAM,gDAAgD;AACrE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,QAAQ,MAAM,UAAU;AAC9B,QAAM,YAAY,MAAM,YAAY,UAAU,OAAO,UAAU,QAAQ;AACvE,UAAQ,OAAO,MAAM,SAAS;AAChC;AAEA,eAAsB,qBAAoC;AACxD,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AAEzC,QAAM,QAAQ,MAAM,UAAU;AAC9B,QAAM,SAAS,MAAM,aAAa,OAAO,QAAQ;AACjD,UAAQ,OAAO,MAAM,MAAM;AAC7B;AAEA,SAAS,YAA6B;AACpC,SAAO,IAAI,QAAQ,CAACC,aAAY;AAC9B,UAAM,SAAmB,CAAC;AAC1B,YAAQ,MAAM,GAAG,QAAQ,CAAC,UAAU,OAAO,KAAK,KAAe,CAAC;AAChE,YAAQ,MAAM,GAAG,OAAO,MAAMA,SAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO,CAAC,CAAC;AAC9E,YAAQ,MAAM,OAAO;AAAA,EACvB,CAAC;AACH;;;ACnDA,IAAM,QAAQ,OAAO,KAAK,QAAQ,OAAO;AACzC,IAAM,eAAe;AAErB,SAAS,aAAa,MAAoB;AACxC,QAAM,UAAU,OAAO,KAAK,MAAM,OAAO;AACzC,QAAM,OAAO,QAAQ,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC7D,UAAQ,OAAO,MAAM,KAAK,OAAO;AACjC,UAAQ,OAAO,MAAM,OAAO;AAC9B;AAEA,SAAS,aAAmB;AAC1B,UAAQ,OAAO,MAAM,KAAK;AAC5B;AAEA,SAAS,oBAAoB,MAAoB;AAC/C,MAAI,SAAS;AACb,SAAO,SAAS,KAAK,QAAQ;AAC3B,UAAM,QAAQ,KAAK,SAAS,QAAQ,SAAS,YAAY;AACzD,UAAM,OAAO,MAAM,SAAS,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC3D,YAAQ,OAAO,MAAM,KAAK,OAAO;AACjC,YAAQ,OAAO,MAAM,KAAK;AAC1B,cAAU,MAAM;AAAA,EAClB;AACF;AAEA,IAAM,gBAAN,MAAoB;AAAA,EACV,MAAM,OAAO,MAAM,CAAC;AAAA;AAAA,EAEpB,cAA8C;AAAA,EAC9C,QAAQ;AAAA,EAEhB,YAAY,QAA+B;AACzC,WAAO,GAAG,QAAQ,CAAC,UAAkB;AACnC,WAAK,MAAM,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC;AAC1C,UAAI,KAAK,aAAa;AACpB,cAAM,IAAI,KAAK;AACf,aAAK,cAAc;AACnB,UAAE;AAAA,MACJ;AAAA,IACF,CAAC;AACD,WAAO,GAAG,OAAO,MAAM;AACrB,WAAK,QAAQ;AACb,UAAI,KAAK,aAAa;AACpB,cAAM,IAAI,KAAK;AACf,aAAK,cAAc;AACnB,UAAE;AAAA,MACJ;AAAA,IACF,CAAC;AACD,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAc,cAA6B;AACzC,QAAI,KAAK,IAAI,SAAS,KAAK,KAAK,MAAO;AACvC,WAAO,IAAI,QAAQ,CAACC,aAAY;AAC9B,WAAK,cAAcA;AAAA,IACrB,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,UAAU,GAAmC;AACzD,WAAO,KAAK,IAAI,SAAS,GAAG;AAC1B,UAAI,KAAK,MAAO,QAAO;AACvB,YAAM,KAAK,YAAY;AAAA,IACzB;AACA,UAAM,SAAS,KAAK,IAAI,SAAS,GAAG,CAAC;AACrC,SAAK,MAAM,KAAK,IAAI,SAAS,CAAC;AAC9B,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,aAAiD;AACrD,UAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,QAAI,CAAC,OAAQ,QAAO;AAEpB,UAAM,SAAS,OAAO,SAAS,OAAO;AACtC,UAAM,MAAM,SAAS,QAAQ,EAAE;AAE/B,QAAI,QAAQ,EAAG,QAAO;AAEtB,QAAI,OAAO,EAAG,OAAM,IAAI,MAAM,4BAA4B,GAAG,EAAE;AAE/D,UAAM,UAAU,MAAM,KAAK,UAAU,MAAM,CAAC;AAC5C,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,oCAAoC;AAClE,WAAO,QAAQ,SAAS,OAAO;AAAA,EACjC;AAAA;AAAA,EAGA,MAAM,iBAAoC;AACxC,UAAM,QAAkB,CAAC;AACzB,WAAO,MAAM;AACX,YAAM,MAAM,MAAM,KAAK,WAAW;AAClC,UAAI,QAAQ,QAAQ,QAAQ,OAAW;AACvC,YAAM,KAAK,IAAI,QAAQ,OAAO,EAAE,CAAC;AAAA,IACnC;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,wBAAyC;AAC7C,UAAM,SAAmB,CAAC;AAC1B,WAAO,MAAM;AACX,YAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,UAAI,CAAC,OAAQ;AAEb,YAAM,MAAM,SAAS,OAAO,SAAS,OAAO,GAAG,EAAE;AACjD,UAAI,QAAQ,EAAG;AACf,UAAI,OAAO,EAAG,OAAM,IAAI,MAAM,4BAA4B,GAAG,EAAE;AAE/D,YAAM,UAAU,MAAM,KAAK,UAAU,MAAM,CAAC;AAC5C,UAAI,CAAC,QAAS,OAAM,IAAI,MAAM,oCAAoC;AAClE,aAAO,KAAK,OAAO;AAAA,IACrB;AACA,WAAO,OAAO,OAAO,MAAM;AAAA,EAC7B;AACF;AAIA,eAAsB,oBAAmC;AACvD,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AAEzC,QAAM,SAAS,IAAI,cAAc,QAAQ,KAAK;AAG9C,QAAM,UAAU,MAAM,OAAO,eAAe;AAC5C,MAAI,CAAC,QAAQ,SAAS,mBAAmB,KAAK,CAAC,QAAQ,SAAS,WAAW,GAAG;AAC5E,YAAQ,OAAO,MAAM,4CAA4C;AACjE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,eAAa,qBAAqB;AAClC,eAAa,aAAa;AAC1B,aAAW;AAGX,QAAM,OAAO,MAAM,OAAO,eAAe;AAEzC,MAAI,KAAK,SAAS,kBAAkB,EAAG,cAAa,oBAAoB;AACxE,MAAI,KAAK,SAAS,mBAAmB,EAAG,cAAa,qBAAqB;AAC1E,aAAW;AAGX,SAAO,MAAM;AACX,UAAM,eAAe,MAAM,OAAO,eAAe;AACjD,QAAI,aAAa,WAAW,EAAG;AAE/B,QAAI,MAAM;AACV,QAAI,WAAW;AACf,eAAW,QAAQ,cAAc;AAC/B,UAAI,KAAK,WAAW,UAAU,EAAG,OAAM,KAAK,MAAM,WAAW,MAAM;AACnE,UAAI,KAAK,WAAW,WAAW,EAAG,YAAW,KAAK,MAAM,YAAY,MAAM;AAAA,IAC5E;AAGA,UAAM,UAAU,MAAM,OAAO,sBAAsB;AACnD,UAAM,aAAa,QAAQ,SAAS,OAAO;AAE3C,QAAI;AACF,UAAI;AAEJ,UAAI,QAAQ,SAAS;AACnB,YAAI,CAAC,UAAU;AACb,uBAAa,gBAAgB;AAC7B,qBAAW;AACX,qBAAW;AACX;AAAA,QACF;AACA,iBAAS,MAAM,YAAY,UAAU,YAAY,UAAU,QAAQ;AAAA,MACrE,WAAW,QAAQ,UAAU;AAC3B,iBAAS,MAAM,aAAa,YAAY,QAAQ;AAAA,MAClD,OAAO;AACL,gBAAQ,OAAO,MAAM,kCAAkC,GAAG;AAAA,CAAI;AAC9D,qBAAa,gBAAgB;AAC7B,mBAAW;AACX,mBAAW;AACX;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,KAAK,QAAQ,OAAO;AAC7C,mBAAa,kBAAkB;AAC/B,iBAAW;AACX,0BAAoB,SAAS;AAC7B,iBAAW;AAAA,IACb,SAAS,KAAK;AACZ,cAAQ,OAAO;AAAA,QACb,2BAA2B,QAAQ,KAAK,eAAe,QAAQ,IAAI,UAAU,GAAG;AAAA;AAAA,MAClF;AACA,mBAAa,gBAAgB;AAC7B,iBAAW;AACX,iBAAW;AAAA,IACb;AAAA,EACF;AACF;;;ACtMA,SAAS,YAAY,gBAAAC,eAAc,qBAAqB;AACxD,SAAS,QAAAC,aAAY;AACrB,SAAS,eAAAC,oBAAmB;AAG5B,IAAMC,iBAAgB;AAEf,SAAS,eAAe,OAAsB;AACnD,QAAM,WAAW,YAAY;AAC7B,QAAM,eAAeC,MAAK,UAAUD,cAAa;AAEjD,MAAI,WAAW,YAAY,KAAK,CAAC,OAAO;AACtC,YAAQ,MAAM,GAAGA,cAAa,4CAA4C;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,OAAO,KAAKE,aAAY,EAAE,CAAC,EAAE,SAAS,WAAW;AAClE,gBAAc,cAAc,GAAG,QAAQ;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAC5D,UAAQ,MAAM,mCAAmCF,cAAa,EAAE;AAChE,UAAQ,MAAM,QAAQ;AAGtB,QAAM,gBAAgBC,MAAK,UAAU,YAAY;AACjD,QAAM,QAAQD;AAEd,MAAI,WAAW,aAAa,GAAG;AAC7B,UAAM,UAAUG,cAAa,eAAe,OAAO;AACnD,UAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACrD,QAAI,CAAC,MAAM,SAAS,KAAK,GAAG;AAC1B,oBAAc,eAAe,GAAG,QAAQ,QAAQ,CAAC;AAAA,EAAK,KAAK;AAAA,CAAI;AAC/D,cAAQ,MAAM,qCAAqC;AAAA,IACrD;AAAA,EACF,OAAO;AACL,kBAAc,eAAe,GAAG,KAAK;AAAA,CAAI;AACzC,YAAQ,MAAM,yCAAyC;AAAA,EACzD;AACF;;;ACpCA,SAAS,gBAAAC,qBAAoB;AAC7B,SAAS,cAAAC,aAAY,gBAAAC,eAAc,iBAAAC,sBAAqB;AACxD,SAAS,QAAAC,aAAY;AAGrB,IAAM,iBAAqC;AAAA,EACzC,CAAC,wBAAwB,sBAAsB;AAAA,EAC/C,CAAC,sBAAsB,uBAAuB;AAAA,EAC9C,CAAC,uBAAuB,wBAAwB;AAAA,EAChD,CAAC,yBAAyB,MAAM;AAAA,EAChC,CAAC,uBAAuB,gBAAgB;AAC1C;AAEA,SAAS,mBAAmB,UAAwB;AAClD,aAAW,CAAC,KAAK,KAAK,KAAK,gBAAgB;AACzC,IAAAC,cAAa,OAAO,CAAC,UAAU,WAAW,KAAK,KAAK,GAAG;AAAA,MACrD,KAAK;AAAA,MACL,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAAA,EACH;AACF;AAEA,SAAS,mBAAmB,UAA2B;AACrD,MAAI;AACF,UAAM,MAAMA,cAAa,OAAO,CAAC,UAAU,SAAS,sBAAsB,GAAG;AAAA,MAC3E,KAAK;AAAA,MACL,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC,EAAE,KAAK;AACR,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,cAA6B;AACjD,QAAM,WAAW,YAAY;AAG7B,MAAI,mBAAmB,QAAQ,GAAG;AAChC,YAAQ,IAAI,yCAAyC;AAAA,EACvD,OAAO;AACL,uBAAmB,QAAQ;AAC3B,YAAQ,IAAI,mDAAmD;AAAA,EACjE;AAGA,QAAM,gBAAgBC,MAAK,UAAU,YAAY;AACjD,QAAM,QAAQ;AAEd,MAAIC,YAAW,aAAa,GAAG;AAC7B,UAAM,UAAUC,cAAa,eAAe,OAAO;AACnD,UAAM,QAAQ,QAAQ,MAAM,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;AACrD,QAAI,CAAC,MAAM,SAAS,KAAK,GAAG;AAC1B,MAAAC,eAAc,eAAe,GAAG,QAAQ,QAAQ,CAAC;AAAA,EAAK,KAAK;AAAA,CAAI;AAC/D,cAAQ,IAAI,qCAAqC;AAAA,IACnD,OAAO;AACL,cAAQ,IAAI,iDAAiD;AAAA,IAC/D;AAAA,EACF,OAAO;AACL,IAAAA,eAAc,eAAe,GAAG,KAAK;AAAA,CAAI;AACzC,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAGA,QAAM,aAAa,eAAe,QAAQ;AAC1C,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,EAAE,UAAAC,UAAS,IAAI,MAAM,OAAO,MAAW;AAC7C,eAAW,OAAO,YAAY;AAC5B,YAAM,SAASA,UAAS,UAAU,GAAG,KAAK;AAC1C,UAAI;AACF,QAAAL,cAAa,OAAO,CAAC,YAAY,QAAQ,MAAM,GAAG,MAAM,OAAO,GAAG;AAAA,UAChE,KAAK;AAAA,UACL,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,QAChC,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAEA,UAAQ,IAAI,oCAAoC;AAClD;AAEO,SAAS,sBAA4B;AAC1C,QAAM,WAAW,YAAY;AAE7B,aAAW,WAAW,CAAC,gBAAgB,YAAY,GAAG;AACpD,QAAI;AACF,MAAAA,cAAa,OAAO,CAAC,UAAU,WAAW,oBAAoB,OAAO,GAAG;AAAA,QACtE,KAAK;AAAA,QACL,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAChC,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,UAAQ,IAAI,mCAAmC;AACjD;;;ACnGA,SAAS,gBAAAM,qBAAoB;AAC7B,SAAS,cAAAC,aAAY,gBAAAC,eAAc,iBAAAC,sBAAqB;AACxD,SAAS,QAAAC,OAAM,UAAU,eAAe;AAGxC,IAAMC,eAAc;AACpB,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAExB,SAASC,oBAAmB,UAA2B;AACrD,MAAI;AACF,UAAM,MAAMC,cAAa,OAAO,CAAC,UAAU,SAAS,sBAAsB,GAAG;AAAA,MAC3E,KAAK;AAAA,MACL,UAAU;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC,EAAE,KAAK;AACR,WAAO,IAAI,SAAS;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAmB;AAC1B,UAAQ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,4DAmB4C;AAC1D,UAAQ,KAAK,CAAC;AAChB;AAEO,SAAS,YAAY,QAAsB;AAChD,MAAI,WAAW,YAAY,WAAW,MAAM;AAC1C,cAAU;AAAA,EACZ;AAEA,QAAM,WAAW,YAAY;AAC7B,QAAM,MAAM,QAAQ,MAAM;AAE1B,MAAI,CAACC,YAAW,GAAG,GAAG;AACpB,YAAQ,MAAM,qBAAqB,MAAM,kBAAkB;AAC3D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,MAAM,SAAS,UAAU,GAAG;AAClC,MAAI,IAAI,WAAW,IAAI,GAAG;AACxB,YAAQ,MAAM,qBAAqB,MAAM,iCAAiC;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,OAAO;AACtB,QAAM,cAAcF,oBAAmB,QAAQ;AAG/C,QAAM,WAAWG,MAAK,KAAKJ,YAAW;AACtC,MAAI,CAACG,YAAW,QAAQ,GAAG;AACzB,IAAAE,eAAc,UAAU,cAAc;AACtC,YAAQ,IAAI,WAAW,MAAM,IAAIL,YAAW,EAAE;AAAA,EAChD,OAAO;AACL,YAAQ,IAAI,GAAG,MAAM,IAAIA,YAAW,2BAA2B;AAAA,EACjE;AAGA,QAAM,eAAeI,MAAK,KAAK,gBAAgB;AAC/C,MAAID,YAAW,YAAY,GAAG;AAC5B,UAAM,UAAUG,cAAa,cAAc,OAAO;AAClD,QAAI,QAAQ,SAAS,cAAc,GAAG;AACpC,cAAQ,IAAI,GAAG,MAAM,oDAAoD;AAAA,IAC3E,OAAO;AACL,MAAAD,eAAc,cAAc,GAAG,QAAQ,QAAQ,CAAC;AAAA,EAAK,eAAe;AAAA,CAAI;AACxE,cAAQ,IAAI,WAAW,MAAM,iBAAiB;AAAA,IAChD;AAAA,EACF,OAAO;AACL,IAAAA,eAAc,cAAc,GAAG,eAAe;AAAA,CAAI;AAClD,YAAQ,IAAI,WAAW,MAAM,iBAAiB;AAAA,EAChD;AAGA,QAAM,UAAU,CAAC,SAAS,UAAU,QAAQ,GAAG,SAAS,UAAU,YAAY,CAAC;AAC/E,SAAO,UAAU,OAAO;AAExB,UAAQ,IAAI,UAAU,MAAM,wBAAwB;AAEpD,MAAI,CAAC,aAAa;AAChB,YAAQ,IAAI;AAAA,+EAAkF;AAAA,EAChG;AACF;;;ACrGA,SAAS,gBAAAE,qBAAoB;AAC7B,SAAS,cAAAC,aAAY,gBAAAC,qBAAoB;AACzC,SAAS,QAAAC,OAAM,YAAAC,iBAAgB;AAY/B,SAAS,gBAAgB,UAAgC;AACvD,QAAM,MAAM,CAAC,QAA+B;AAC1C,QAAI;AACF,aAAOC,cAAa,OAAO,CAAC,UAAU,SAAS,GAAG,GAAG;AAAA,QACnD,KAAK;AAAA,QACL,UAAU;AAAA,QACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAChC,CAAC,EAAE,KAAK;AAAA,IACV,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS,IAAI,sBAAsB;AAAA,IACnC,OAAO,IAAI,oBAAoB;AAAA,IAC/B,QAAQ,IAAI,qBAAqB;AAAA,IACjC,UAAU,IAAI,uBAAuB,MAAM;AAAA,IAC3C,UAAU,IAAI,qBAAqB;AAAA,EACrC;AACF;AAEO,SAAS,gBAAsB;AACpC,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AACzC,QAAM,aAAa,eAAe,QAAQ;AAE1C,MAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,IAAI,6CAA6C;AACzD,YAAQ,IAAI,wDAAwD;AAAA,EACtE,OAAO;AACL,YAAQ,IAAI,uBAAuB;AAEnC,eAAW,OAAO,YAAY;AAC5B,YAAM,SAASC,UAAS,UAAU,GAAG,KAAK;AAC1C,cAAQ,IAAI,KAAK,MAAM,GAAG;AAG1B,YAAM,UAAU,gBAAgB,GAAG;AACnC,iBAAW,KAAK,SAAS;AACvB,cAAM,UAAUC,cAAaC,MAAK,KAAK,CAAC,GAAG,OAAO;AAClD,YAAI,QAAQ,WAAW,UAAU,GAAG;AAClC,kBAAQ,IAAI,OAAO,CAAC,mCAA8B;AAAA,QACpD,OAAO;AACL,kBAAQ,IAAI,OAAO,CAAC,eAAe;AAAA,QACrC;AAAA,MACF;AAEA,UAAI,QAAQ,WAAW,GAAG;AACxB,gBAAQ,IAAI,oBAAoB;AAAA,MAClC;AAGA,YAAM,eAAeA,MAAK,KAAK,gBAAgB;AAC/C,UAAI,CAACC,YAAW,YAAY,GAAG;AAC7B,gBAAQ,IAAI,kDAAkD;AAAA,MAChE,OAAO;AACL,cAAM,UAAUF,cAAa,cAAc,OAAO;AAClD,YAAI,CAAC,QAAQ,SAAS,cAAc,GAAG;AACrC,kBAAQ,IAAI,0DAA0D;AAAA,QACxE;AAAA,MACF;AAEA,cAAQ,IAAI;AAAA,IACd;AAAA,EACF;AAGA,MAAI,CAAC,UAAU;AACb,YAAQ,IAAI,yBAAyB;AACrC,YAAQ,IAAI,6DAA6D;AAAA,EAC3E,OAAO;AACL,YAAQ,IAAI,qBAAqB;AAAA,EACnC;AAGA,QAAM,SAAS,gBAAgB,QAAQ;AACvC,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,OAAO;AACpC,YAAQ,IAAI,wBAAwB;AACpC,YAAQ,IAAI,iCAAiC;AAAA,EAC/C,OAAO;AACL,YAAQ,IAAI,oBAAoB;AAChC,QAAI,CAAC,OAAO,UAAU;AACpB,cAAQ,IAAI,qDAAqD;AAAA,IACnE;AAAA,EACF;AACF;;;ACpGA,SAAS,gBAAAG,qBAAoB;AAK7B,eAAsB,gBAAgB,UAAiC;AACrE,QAAM,UAAUC,cAAa,UAAU,OAAO;AAE9C,MAAI,CAAC,QAAQ,WAAW,UAAU,GAAG;AACnC,YAAQ,OAAO,MAAM,OAAO;AAC5B;AAAA,EACF;AAEA,QAAM,WAAW,YAAY;AAC7B,QAAM,WAAW,gBAAgB,QAAQ;AAEzC,MAAI,CAAC,UAAU;AACb,YAAQ,OAAO,MAAM,OAAO;AAC5B;AAAA,EACF;AAEA,MAAI;AACF,UAAM,YAAY,MAAM,QAAQ,SAAS,QAAQ;AACjD,YAAQ,OAAO,MAAM,SAAS;AAAA,EAChC,QAAQ;AACN,YAAQ,OAAO,MAAM,OAAO;AAAA,EAC9B;AACF;;;AjBhBA,SAAS,oBAAoB,QAAiC;AAC5D,SAAO,IAAI,QAAQ,CAACC,aAAY;AAC9B,QAAI,CAAC,QAAQ,MAAM,OAAO;AAExB,cAAQ,OAAO,MAAM,MAAM;AAC3B,UAAI,OAAO;AACX,cAAQ,MAAM,YAAY,OAAO;AACjC,cAAQ,MAAM,GAAG,QAAQ,CAAC,UAAkB;AAC1C,cAAM,QAAQ,MAAM,QAAQ,IAAI;AAChC,YAAI,SAAS,GAAG;AACd,kBAAQ,MAAM,MAAM,GAAG,KAAK;AAC5B,kBAAQ,MAAM,MAAM;AACpB,UAAAA,SAAQ,IAAI;AAAA,QACd,OAAO;AACL,kBAAQ;AAAA,QACV;AAAA,MACF,CAAC;AACD,cAAQ,MAAM,GAAG,OAAO,MAAMA,SAAQ,IAAI,CAAC;AAC3C,cAAQ,MAAM,OAAO;AACrB;AAAA,IACF;AAEA,YAAQ,OAAO,MAAM,MAAM;AAC3B,UAAM,MAAgB,CAAC;AAEvB,YAAQ,MAAM,WAAW,IAAI;AAC7B,YAAQ,MAAM,YAAY,OAAO;AACjC,YAAQ,MAAM,OAAO;AAErB,UAAM,SAAS,CAAC,OAAe;AAC7B,UAAI,OAAO,KAAU;AAEnB,gBAAQ,OAAO,MAAM,IAAI;AACzB,gBAAQ,MAAM,WAAW,KAAK;AAC9B,gBAAQ,MAAM,MAAM;AACpB,gBAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,gBAAQ,KAAK,GAAG;AAAA,MAClB,WAAW,OAAO,QAAQ,OAAO,MAAM;AAErC,gBAAQ,OAAO,MAAM,IAAI;AACzB,gBAAQ,MAAM,WAAW,KAAK;AAC9B,gBAAQ,MAAM,MAAM;AACpB,gBAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,QAAAA,SAAQ,IAAI,KAAK,EAAE,CAAC;AAAA,MACtB,WAAW,OAAO,UAAY,OAAO,MAAM;AAEzC,YAAI,IAAI;AAAA,MACV,WAAW,OAAO,KAAU;AAE1B,gBAAQ,OAAO,MAAM,IAAI;AACzB,gBAAQ,MAAM,WAAW,KAAK;AAC9B,gBAAQ,MAAM,MAAM;AACpB,gBAAQ,MAAM,eAAe,QAAQ,MAAM;AAC3C,QAAAA,SAAQ,IAAI,KAAK,EAAE,CAAC;AAAA,MACtB,WAAW,MAAM,KAAK;AACpB,YAAI,KAAK,EAAE;AAAA,MACb;AAAA,IACF;AAEA,YAAQ,MAAM,GAAG,QAAQ,MAAM;AAAA,EACjC,CAAC;AACH;AAEA,eAAe,YAAY,SAAS,cAA+B;AACjE,QAAM,cAAc,QAAQ,IAAI,gBAAgB;AAChD,MAAI,YAAa,QAAO;AAExB,SAAO,oBAAoB,MAAM;AACnC;AAEA,eAAe,8BAA+C;AAC5D,MAAI,QAAQ,IAAI,gBAAgB,EAAG,QAAO,QAAQ,IAAI,gBAAgB;AAEtE,QAAM,WAAW,MAAM,oBAAoB,YAAY;AACvD,QAAM,UAAU,MAAM,oBAAoB,oBAAoB;AAC9D,MAAI,aAAa,SAAS;AACxB,YAAQ,MAAM,+BAA+B;AAC7C,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,SAAO;AACT;AAEA,SAAS,QAAe;AACtB,UAAQ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oEAgBoD;AAClE,UAAQ,KAAK,CAAC;AAChB;AAEA,eAAe,OAAsB;AACnC,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AAEjC,MAAI,KAAK,WAAW,EAAG,OAAM;AAE7B,QAAM,UAAU,KAAK,CAAC;AAEtB,MAAI;AACF,YAAQ,SAAS;AAAA,MACf,KAAK,WAAW;AACd,YAAI,CAAC,KAAK,CAAC,EAAG,OAAM;AACpB,cAAM,YAAY,KAAK,CAAC;AACxB,cAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,cAAM,aAAa,aAAa,IAAI,KAAK,YAAY,CAAC,IAAI;AAC1D,cAAM,WAAW,MAAM,4BAA4B;AACnD,cAAM,YAAYC,cAAa,WAAW,OAAO;AACjD,cAAM,YAAY,MAAM,QAAQ,WAAW,QAAQ;AACnD,YAAI,YAAY;AACd,UAAAC,eAAc,YAAY,SAAS;AAAA,QACrC,OAAO;AACL,kBAAQ,OAAO,MAAM,SAAS;AAAA,QAChC;AACA;AAAA,MACF;AAAA,MAEA,KAAK,WAAW;AACd,YAAI,CAAC,KAAK,CAAC,EAAG,OAAM;AACpB,cAAM,YAAY,KAAK,CAAC;AACxB,cAAM,YAAY,KAAK,QAAQ,IAAI;AACnC,cAAM,aAAa,aAAa,IAAI,KAAK,YAAY,CAAC,IAAI;AAC1D,cAAM,WAAW,MAAM,YAAY;AACnC,cAAM,cAAcD,cAAa,WAAW,OAAO;AACnD,cAAM,YAAY,MAAM,QAAQ,aAAa,QAAQ;AACrD,YAAI,YAAY;AACd,UAAAC,eAAc,YAAY,SAAS;AAAA,QACrC,OAAO;AACL,kBAAQ,OAAO,MAAM,SAAS;AAAA,QAChC;AACA;AAAA,MACF;AAAA,MAEA,KAAK,UAAU;AACb,YAAI,CAAC,KAAK,CAAC,EAAG,OAAM;AACpB,cAAM,YAAY,KAAK,CAAC;AACxB,cAAM,WAAW,MAAM,YAAY;AACnC,cAAM,cAAcD,cAAa,WAAW,OAAO;AACnD,cAAM,QAAQ,MAAM,WAAW,aAAa,QAAQ;AACpD,YAAI,OAAO;AACT,kBAAQ,MAAM,mBAAmB;AACjC,kBAAQ,KAAK,CAAC;AAAA,QAChB,OAAO;AACL,kBAAQ,MAAM,0BAA0B;AACxC,kBAAQ,KAAK,CAAC;AAAA,QAChB;AACA;AAAA,MACF;AAAA,MAEA,KAAK;AACH,cAAM,YAAY;AAClB;AAAA,MAEF,KAAK,QAAQ;AACX,YAAI,CAAC,KAAK,CAAC,GAAG;AACZ,kBAAQ,MAAM,uEAAyE;AACvF,kBAAQ,KAAK,CAAC;AAAA,QAChB;AACA,oBAAY,KAAK,CAAC,CAAC;AACnB;AAAA,MACF;AAAA,MAEA,KAAK;AACH,sBAAc;AACd;AAAA,MAEF,KAAK;AACH,4BAAoB;AACpB;AAAA,MAEF,KAAK;AACH,uBAAe,KAAK,SAAS,SAAS,CAAC;AACvC;AAAA;AAAA,MAGF,KAAK;AACH,cAAM,kBAAkB;AACxB;AAAA,MAEF,KAAK;AACH,cAAM,kBAAkB,KAAK,CAAC,KAAK,EAAE;AACrC;AAAA,MAEF,KAAK;AACH,cAAM,mBAAmB;AACzB;AAAA,MAEF,KAAK;AACH,YAAI,CAAC,KAAK,CAAC,GAAG;AACZ,kBAAQ,MAAM,8BAA8B;AAC5C,kBAAQ,KAAK,CAAC;AAAA,QAChB;AACA,cAAM,gBAAgB,KAAK,CAAC,CAAC;AAC7B;AAAA,MAEF;AACE,gBAAQ,MAAM,oBAAoB,OAAO,EAAE;AAC3C,cAAM;AAAA,IACV;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,GAAG,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;AAEA,KAAK;","names":["readFileSync","writeFileSync","hmac","sha256","hmac","sha256","hmac","sha256","sha256","sha256","hmac","sha256","hmac","sha256","hmac","sha256","join","resolve","resolve","readFileSync","join","randomBytes","PASSWORD_FILE","join","randomBytes","readFileSync","execFileSync","existsSync","readFileSync","writeFileSync","join","execFileSync","join","existsSync","readFileSync","writeFileSync","relative","execFileSync","existsSync","readFileSync","writeFileSync","join","MARKER_FILE","isFilterConfigured","execFileSync","existsSync","join","writeFileSync","readFileSync","execFileSync","existsSync","readFileSync","join","relative","execFileSync","relative","readFileSync","join","existsSync","readFileSync","readFileSync","resolve","readFileSync","writeFileSync"]}