@atlastodo/client-core 0.1.11-rc.9 → 0.1.12

package/dist/index.d.ts

@@ -26,3 +26,4 @@ export * from "./password.js";
 export * from "./rootKey.js";
 export * from "./passkeys.js";
 export * from "./crypto/index.js";
+export * from "./text.js";

package/dist/index.js

@@ -1172,6 +1172,18 @@ function unwrapAppPrivateKey(wrap, appKey, userId, app) {
 // src/crypto/passkey.ts
 import { sha256 as sha2567 } from "@noble/hashes/sha2.js";
 import { hkdf as hkdf6 } from "@noble/hashes/hkdf.js";
+
+// src/text.ts
+function trimTrailing(text, char) {
+  if (char.length !== 1)
+    throw new Error("trimTrailing takes one character");
+  let end = text.length;
+  while (end > 0 && text[end - 1] === char)
+    end--;
+  return end === text.length ? text : text.slice(0, end);
+}
+
+// src/crypto/passkey.ts
 var PASSKEY_PRF_LABEL = "atlas-passkey-prf-v1";
 var SLOT_INFO = "atlas-passkey-slot-v1";
 function passkeyPrfInput() {
@@ -1181,7 +1193,7 @@ function passkeyPrfInputBase64Url() {
   return bytesToBase64Url(passkeyPrfInput());
 }
 function decodeBase64Url(text) {
-  const bytes = base64UrlToBytes(text.replace(/=+$/, ""));
+  const bytes = base64UrlToBytes(trimTrailing(text, "="));
   if (!bytes)
     throw new Error("not base64url");
   return bytes;
@@ -6995,6 +7007,7 @@ export {
   toWireReport,
   todoAppKeyRow,
   tokenPolicyFor,
+  trimTrailing,
   unpadPlaintext,
   unpinMemberKey,
   unsealKey,

package/dist/text.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `text` without its trailing run of `char` (one character), in linear time. A regex such as
+ * `/=+$/` backtracks at every `char` that is not at the end, which is quadratic on a long run of
+ * them followed by anything else, and these strings come from outside (a server, a config, a
+ * pasted secret).
+ */
+export declare function trimTrailing(text: string, char: string): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlastodo/client-core",
-  "version": "0.1.11-rc.9",
+  "version": "0.1.12",
   "description": "Atlas core client: hybrid logical clocks, the op log and per-field LWW merge, end-to-end encryption, the local store and the sync client",
   "license": "AGPL-3.0-only",
   "homepage": "https://github.com/atlastodo/atlas/tree/main/packages/client-core",
@@ -58,8 +58,8 @@
   },
   "devDependencies": {
     "@types/node": "^26.6.5",
-    "fake-indexeddb": "^6.0.0",
+    "fake-indexeddb": "^6.2.6",
     "typescript": "^7.0.2",
-    "vitest": "^5.0.3"
+    "vitest": "^5.0.5"
   }
 }