#!/usr/bin/env bash

#
# blackbox_edit_end -- Re-encrypt file after edits.
#

set -e
source "${0%/*}/_blackbox_common.sh"

unencrypted_file=$(get_unencrypted_filename "$1")
encrypted_file=$(get_encrypted_filename "$1")
echo ========== PLAINFILE '"'$unencrypted_file'"'
echo ========== ENCRYPTED '"'$encrypted_file'"'

fail_if_not_on_cryptlist "$unencrypted_file"
fail_if_not_exists "$unencrypted_file" "No unencrypted version to encrypt!"
fail_if_keychain_has_secrets

encrypt_file "$unencrypted_file" "$encrypted_file"
shred_file "$unencrypted_file"

echo ========== UPDATED '"'$encrypted_file'"'
echo "Likely next step:"
echo "    $VCS_TYPE commit -m\"${encrypted_file} updated\" \"$encrypted_file\""