@backblaze-labs/b2-sdk 0.1.0 → 0.3.0

package/dist/util/http.d.cts

@@ -0,0 +1,13 @@
+/**
+ * Detect HTTP header value control characters.
+ *
+ * Header values used by this SDK must not contain C0 controls or DEL. Rejecting
+ * them before signing avoids relying on later whitespace normalization to
+ * neutralize CR/LF header injection.
+ *
+ * @param value - Header value to inspect.
+ *
+ * @returns `true` when the value contains a disallowed control character.
+ */
+export declare function hasHttpHeaderControlCharacter(value: string): boolean;
+//# sourceMappingURL=http.d.ts.map

package/dist/util/http.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/util/http.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOpE"}

package/dist/util/http.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Detect HTTP header value control characters.
+ *
+ * Header values used by this SDK must not contain C0 controls or DEL. Rejecting
+ * them before signing avoids relying on later whitespace normalization to
+ * neutralize CR/LF header injection.
+ *
+ * @param value - Header value to inspect.
+ *
+ * @returns `true` when the value contains a disallowed control character.
+ */
+export declare function hasHttpHeaderControlCharacter(value: string): boolean;
+//# sourceMappingURL=http.d.ts.map

package/dist/util/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/util/http.js"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOpE"}

package/dist/util/http.js

@@ -0,0 +1,23 @@
+//#region src/util/http.ts
+/**
+* Detect HTTP header value control characters.
+*
+* Header values used by this SDK must not contain C0 controls or DEL. Rejecting
+* them before signing avoids relying on later whitespace normalization to
+* neutralize CR/LF header injection.
+*
+* @param value - Header value to inspect.
+*
+* @returns `true` when the value contains a disallowed control character.
+*/
+function hasHttpHeaderControlCharacter(value) {
+	for (let i = 0; i < value.length; i++) {
+		const code = value.charCodeAt(i);
+		if (code <= 31 || code === 127) return true;
+	}
+	return false;
+}
+//#endregion
+export { hasHttpHeaderControlCharacter };
+
+//# sourceMappingURL=http.js.map

package/dist/util/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","names":[],"sources":["../../src/util/http.ts"],"sourcesContent":["/**\n * Detect HTTP header value control characters.\n *\n * Header values used by this SDK must not contain C0 controls or DEL. Rejecting\n * them before signing avoids relying on later whitespace normalization to\n * neutralize CR/LF header injection.\n *\n * @param value - Header value to inspect.\n *\n * @returns `true` when the value contains a disallowed control character.\n */\nexport function hasHttpHeaderControlCharacter(value: string): boolean {\n  for (let i = 0; i < value.length; i++) {\n    const code = value.charCodeAt(i)\n    if (code <= 0x1f || code === 0x7f) return true\n  }\n\n  return false\n}\n"],"mappings":";;;;;;;;;;;;AAWA,SAAgB,8BAA8B,OAAwB;CACpE,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,OAAO,MAAM,WAAW,CAAC;EAC/B,IAAI,QAAQ,MAAQ,SAAS,KAAM,OAAO;CAC5C;CAEA,OAAO;AACT"}

package/dist/util/md5.cjs

@@ -0,0 +1,211 @@
+//#region src/util/md5.ts
+/**
+* Encodes raw bytes as base64 in an isomorphic way (Node Buffer fallback to btoa).
+*
+* @param bytes - The raw bytes to encode.
+*
+* @returns The base64-encoded string.
+*/
+function bytesToBase64(bytes) {
+	const g = globalThis;
+	if (g.Buffer) return g.Buffer.from(bytes).toString("base64");
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary);
+}
+var loadNodeCrypto = () => import("node:crypto");
+function syncNodeCreateHash() {
+	const crypto = globalThis.process?.getBuiltinModule?.("node:crypto");
+	if (!crypto || typeof crypto !== "object") return null;
+	const { createHash } = crypto;
+	return typeof createHash === "function" ? createHash : null;
+}
+/**
+* Computes the MD5 digest of the given bytes as a base64 string. Prefers
+* `node:crypto` for native speed when available; falls back to a pure-JS
+* implementation in browser / edge runtimes because WebCrypto's
+* `crypto.subtle.digest` deliberately does not support MD5.
+*
+* MD5 is used only for wire-protocol integrity checks, not as a security
+* boundary.
+*
+* @param bytes - The bytes to digest.
+*
+* @returns The base64-encoded MD5 digest.
+*
+* @internal
+*/
+async function md5Base64(bytes) {
+	return md5Base64WithCryptoLoader(bytes, loadNodeCrypto);
+}
+/**
+* Computes the MD5 digest with an injected async crypto loader.
+*
+* @param bytes - The bytes to digest.
+* @param loadCrypto - Crypto module loader used by runtime fallback tests.
+*
+* @returns The base64-encoded MD5 digest.
+*
+* @internal
+*/
+async function md5Base64WithCryptoLoader(bytes, loadCrypto) {
+	try {
+		const { createHash } = await loadCrypto();
+		if (typeof createHash !== "function") throw new Error("createHash unavailable");
+		return createHash("md5").update(bytes).digest("base64");
+	} catch {
+		return md5Base64Sync(bytes);
+	}
+}
+/**
+* Computes the MD5 digest of the given bytes as a base64 string without
+* dynamic imports.
+*
+* @param bytes - The bytes to digest.
+*
+* @returns The base64-encoded MD5 digest.
+*
+* @internal
+*/
+function md5Base64Sync(bytes) {
+	const createHash = syncNodeCreateHash();
+	if (createHash) return createHash("md5").update(bytes).digest("base64");
+	return bytesToBase64(md5Bytes(bytes));
+}
+/**
+* Pure-JS MD5 implementation per RFC 1321. Returns the 16-byte digest of the
+* input. Used as a browser fallback for SSE-C key MD5 computation; not
+* intended for security-sensitive purposes (MD5 is broken cryptographically).
+*
+* @param data - The bytes to hash.
+*
+* @returns The 16-byte MD5 digest.
+*/
+function md5Bytes(data) {
+	const originalBitLength = data.length * 8;
+	const paddedLength = data.length + 1 + 8 + 63 & -64;
+	const msg = new Uint8Array(paddedLength);
+	msg.set(data);
+	msg[data.length] = 128;
+	const view = new DataView(msg.buffer);
+	view.setUint32(paddedLength - 8, originalBitLength >>> 0, true);
+	view.setUint32(paddedLength - 4, Math.floor(originalBitLength / 4294967296), true);
+	let a0 = 1732584193;
+	let b0 = 4023233417;
+	let c0 = 2562383102;
+	let d0 = 271733878;
+	const s = [
+		7,
+		12,
+		17,
+		22,
+		7,
+		12,
+		17,
+		22,
+		7,
+		12,
+		17,
+		22,
+		7,
+		12,
+		17,
+		22,
+		5,
+		9,
+		14,
+		20,
+		5,
+		9,
+		14,
+		20,
+		5,
+		9,
+		14,
+		20,
+		5,
+		9,
+		14,
+		20,
+		4,
+		11,
+		16,
+		23,
+		4,
+		11,
+		16,
+		23,
+		4,
+		11,
+		16,
+		23,
+		4,
+		11,
+		16,
+		23,
+		6,
+		10,
+		15,
+		21,
+		6,
+		10,
+		15,
+		21,
+		6,
+		10,
+		15,
+		21,
+		6,
+		10,
+		15,
+		21
+	];
+	const k = Array.from({ length: 64 }, (_, i) => Math.floor(Math.abs(Math.sin(i + 1)) * 4294967296));
+	const leftRotate = (x, c) => x << c | x >>> 32 - c;
+	for (let offset = 0; offset < paddedLength; offset += 64) {
+		let a = a0;
+		let b = b0;
+		let c = c0;
+		let d = d0;
+		const m = Array.from({ length: 16 }, (_, i) => view.getUint32(offset + i * 4, true));
+		for (let i = 0; i < 64; i++) {
+			let f;
+			let g;
+			if (i < 16) {
+				f = b & c | ~b & d;
+				g = i;
+			} else if (i < 32) {
+				f = d & b | ~d & c;
+				g = (5 * i + 1) % 16;
+			} else if (i < 48) {
+				f = b ^ c ^ d;
+				g = (3 * i + 5) % 16;
+			} else {
+				f = c ^ (b | ~d);
+				g = 7 * i % 16;
+			}
+			const temp = d;
+			d = c;
+			c = b;
+			b = b + leftRotate(a + f + k[i] + m[g] >>> 0, s[i]) >>> 0;
+			a = temp;
+		}
+		a0 = a0 + a >>> 0;
+		b0 = b0 + b >>> 0;
+		c0 = c0 + c >>> 0;
+		d0 = d0 + d >>> 0;
+	}
+	const out = /* @__PURE__ */ new Uint8Array(16);
+	const outView = new DataView(out.buffer);
+	outView.setUint32(0, a0, true);
+	outView.setUint32(4, b0, true);
+	outView.setUint32(8, c0, true);
+	outView.setUint32(12, d0, true);
+	return out;
+}
+//#endregion
+exports.md5Base64 = md5Base64;
+exports.md5Base64Sync = md5Base64Sync;
+exports.md5Base64WithCryptoLoader = md5Base64WithCryptoLoader;
+
+//# sourceMappingURL=md5.cjs.map

package/dist/util/md5.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"md5.cjs","names":[],"sources":["../../src/util/md5.ts"],"sourcesContent":["/**\n * Encodes raw bytes as base64 in an isomorphic way (Node Buffer fallback to btoa).\n *\n * @param bytes - The raw bytes to encode.\n *\n * @returns The base64-encoded string.\n */\nfunction bytesToBase64(bytes: Uint8Array): string {\n  const g = globalThis as {\n    Buffer?: { from(b: Uint8Array): { toString(encoding: string): string } }\n  }\n  if (g.Buffer) return g.Buffer.from(bytes).toString('base64')\n\n  let binary = ''\n  for (const byte of bytes) binary += String.fromCharCode(byte)\n  return btoa(binary)\n}\n\ntype SyncNodeHash = {\n  update(bytes: Uint8Array): SyncNodeHash\n  digest(encoding: 'base64'): string\n}\n\ntype AsyncNodeCryptoLoader = () => Promise<{ createHash?: unknown }>\n\nconst loadNodeCrypto: AsyncNodeCryptoLoader = () => import('node:crypto')\n\nfunction syncNodeCreateHash(): ((algorithm: string) => SyncNodeHash) | null {\n  const g = globalThis as {\n    process?: {\n      getBuiltinModule?: (name: string) => unknown\n    }\n  }\n  const crypto = g.process?.getBuiltinModule?.('node:crypto')\n  if (!crypto || typeof crypto !== 'object') return null\n  const { createHash } = crypto as { createHash?: unknown }\n  return typeof createHash === 'function'\n    ? (createHash as (algorithm: string) => SyncNodeHash)\n    : null\n}\n\n/**\n * Computes the MD5 digest of the given bytes as a base64 string. Prefers\n * `node:crypto` for native speed when available; falls back to a pure-JS\n * implementation in browser / edge runtimes because WebCrypto's\n * `crypto.subtle.digest` deliberately does not support MD5.\n *\n * MD5 is used only for wire-protocol integrity checks, not as a security\n * boundary.\n *\n * @param bytes - The bytes to digest.\n *\n * @returns The base64-encoded MD5 digest.\n *\n * @internal\n */\nexport async function md5Base64(bytes: Uint8Array): Promise<string> {\n  return md5Base64WithCryptoLoader(bytes, loadNodeCrypto)\n}\n\n/**\n * Computes the MD5 digest with an injected async crypto loader.\n *\n * @param bytes - The bytes to digest.\n * @param loadCrypto - Crypto module loader used by runtime fallback tests.\n *\n * @returns The base64-encoded MD5 digest.\n *\n * @internal\n */\nexport async function md5Base64WithCryptoLoader(\n  bytes: Uint8Array,\n  loadCrypto: AsyncNodeCryptoLoader,\n): Promise<string> {\n  try {\n    const { createHash } = await loadCrypto()\n    // Vite's browser shim resolves the import but does not implement\n    // `createHash`. Probe explicitly so we fall through to the pure-JS path.\n    if (typeof createHash !== 'function') throw new Error('createHash unavailable')\n    return createHash('md5').update(bytes).digest('base64')\n  } catch {\n    return md5Base64Sync(bytes)\n  }\n}\n\n/**\n * Computes the MD5 digest of the given bytes as a base64 string without\n * dynamic imports.\n *\n * @param bytes - The bytes to digest.\n *\n * @returns The base64-encoded MD5 digest.\n *\n * @internal\n */\nexport function md5Base64Sync(bytes: Uint8Array): string {\n  const createHash = syncNodeCreateHash()\n  if (createHash) return createHash('md5').update(bytes).digest('base64')\n\n  return bytesToBase64(md5Bytes(bytes))\n}\n\n/**\n * Pure-JS MD5 implementation per RFC 1321. Returns the 16-byte digest of the\n * input. Used as a browser fallback for SSE-C key MD5 computation; not\n * intended for security-sensitive purposes (MD5 is broken cryptographically).\n *\n * @param data - The bytes to hash.\n *\n * @returns The 16-byte MD5 digest.\n */\nfunction md5Bytes(data: Uint8Array): Uint8Array {\n  const originalBitLength = data.length * 8\n  const withOne = data.length + 1\n  const paddedLength = (withOne + 8 + 63) & ~63\n  const msg = new Uint8Array(paddedLength)\n  msg.set(data)\n  msg[data.length] = 0x80\n  const view = new DataView(msg.buffer)\n  view.setUint32(paddedLength - 8, originalBitLength >>> 0, true)\n  view.setUint32(paddedLength - 4, Math.floor(originalBitLength / 0x1_0000_0000), true)\n\n  let a0 = 0x67452301\n  let b0 = 0xefcdab89\n  let c0 = 0x98badcfe\n  let d0 = 0x10325476\n\n  const s = [\n    7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9,\n    14, 20, 5, 9, 14, 20, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 6, 10, 15, 21,\n    6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21,\n  ]\n  const k = Array.from({ length: 64 }, (_, i) =>\n    Math.floor(Math.abs(Math.sin(i + 1)) * 0x1_0000_0000),\n  )\n\n  const leftRotate = (x: number, c: number) => (x << c) | (x >>> (32 - c))\n\n  for (let offset = 0; offset < paddedLength; offset += 64) {\n    let a = a0\n    let b = b0\n    let c = c0\n    let d = d0\n\n    const m = Array.from({ length: 16 }, (_, i) => view.getUint32(offset + i * 4, true))\n\n    for (let i = 0; i < 64; i++) {\n      let f: number\n      let g: number\n      if (i < 16) {\n        f = (b & c) | (~b & d)\n        g = i\n      } else if (i < 32) {\n        f = (d & b) | (~d & c)\n        g = (5 * i + 1) % 16\n      } else if (i < 48) {\n        f = b ^ c ^ d\n        g = (3 * i + 5) % 16\n      } else {\n        f = c ^ (b | ~d)\n        g = (7 * i) % 16\n      }\n\n      const temp = d\n      d = c\n      c = b\n      b =\n        (b + leftRotate((a + f + (k[i] as number) + (m[g] as number)) >>> 0, s[i] as number)) >>> 0\n      a = temp\n    }\n\n    a0 = (a0 + a) >>> 0\n    b0 = (b0 + b) >>> 0\n    c0 = (c0 + c) >>> 0\n    d0 = (d0 + d) >>> 0\n  }\n\n  const out = new Uint8Array(16)\n  const outView = new DataView(out.buffer)\n  outView.setUint32(0, a0, true)\n  outView.setUint32(4, b0, true)\n  outView.setUint32(8, c0, true)\n  outView.setUint32(12, d0, true)\n  return out\n}\n"],"mappings":";;;;;;;;AAOA,SAAS,cAAc,OAA2B;CAChD,MAAM,IAAI;CAGV,IAAI,EAAE,QAAQ,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ;CAE3D,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO,UAAU,OAAO,aAAa,IAAI;CAC5D,OAAO,KAAK,MAAM;AACpB;AASA,IAAM,uBAA8C,OAAO;AAE3D,SAAS,qBAAmE;CAM1E,MAAM,SAAS,WAAE,SAAS,mBAAmB,aAAa;CAC1D,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO;CAClD,MAAM,EAAE,eAAe;CACvB,OAAO,OAAO,eAAe,aACxB,aACD;AACN;;;;;;;;;;;;;;;;AAiBA,eAAsB,UAAU,OAAoC;CAClE,OAAO,0BAA0B,OAAO,cAAc;AACxD;;;;;;;;;;;AAYA,eAAsB,0BACpB,OACA,YACiB;CACjB,IAAI;EACF,MAAM,EAAE,eAAe,MAAM,WAAW;EAGxC,IAAI,OAAO,eAAe,YAAY,MAAM,IAAI,MAAM,wBAAwB;EAC9E,OAAO,WAAW,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ;CACxD,QAAQ;EACN,OAAO,cAAc,KAAK;CAC5B;AACF;;;;;;;;;;;AAYA,SAAgB,cAAc,OAA2B;CACvD,MAAM,aAAa,mBAAmB;CACtC,IAAI,YAAY,OAAO,WAAW,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ;CAEtE,OAAO,cAAc,SAAS,KAAK,CAAC;AACtC;;;;;;;;;;AAWA,SAAS,SAAS,MAA8B;CAC9C,MAAM,oBAAoB,KAAK,SAAS;CAExC,MAAM,eADU,KAAK,SAAS,IACE,IAAI,KAAM;CAC1C,MAAM,MAAM,IAAI,WAAW,YAAY;CACvC,IAAI,IAAI,IAAI;CACZ,IAAI,KAAK,UAAU;CACnB,MAAM,OAAO,IAAI,SAAS,IAAI,MAAM;CACpC,KAAK,UAAU,eAAe,GAAG,sBAAsB,GAAG,IAAI;CAC9D,KAAK,UAAU,eAAe,GAAG,KAAK,MAAM,oBAAoB,UAAa,GAAG,IAAI;CAEpF,IAAI,KAAK;CACT,IAAI,KAAK;CACT,IAAI,KAAK;CACT,IAAI,KAAK;CAET,MAAM,IAAI;EACR;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAG;EAAI;EAAI;EAAG;EAAG;EAAI;EAAI;EAAG;EAC3F;EAAI;EAAI;EAAG;EAAG;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAC7F;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;CAC3C;CACA,MAAM,IAAI,MAAM,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,MACvC,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,UAAa,CACtD;CAEA,MAAM,cAAc,GAAW,MAAe,KAAK,IAAM,MAAO,KAAK;CAErE,KAAK,IAAI,SAAS,GAAG,SAAS,cAAc,UAAU,IAAI;EACxD,IAAI,IAAI;EACR,IAAI,IAAI;EACR,IAAI,IAAI;EACR,IAAI,IAAI;EAER,MAAM,IAAI,MAAM,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,MAAM,KAAK,UAAU,SAAS,IAAI,GAAG,IAAI,CAAC;EAEnF,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;GAC3B,IAAI;GACJ,IAAI;GACJ,IAAI,IAAI,IAAI;IACV,IAAK,IAAI,IAAM,CAAC,IAAI;IACpB,IAAI;GACN,OAAO,IAAI,IAAI,IAAI;IACjB,IAAK,IAAI,IAAM,CAAC,IAAI;IACpB,KAAK,IAAI,IAAI,KAAK;GACpB,OAAO,IAAI,IAAI,IAAI;IACjB,IAAI,IAAI,IAAI;IACZ,KAAK,IAAI,IAAI,KAAK;GACpB,OAAO;IACL,IAAI,KAAK,IAAI,CAAC;IACd,IAAK,IAAI,IAAK;GAChB;GAEA,MAAM,OAAO;GACb,IAAI;GACJ,IAAI;GACJ,IACG,IAAI,WAAY,IAAI,IAAK,EAAE,KAAiB,EAAE,OAAmB,GAAG,EAAE,EAAY,MAAO;GAC5F,IAAI;EACN;EAEA,KAAM,KAAK,MAAO;EAClB,KAAM,KAAK,MAAO;EAClB,KAAM,KAAK,MAAO;EAClB,KAAM,KAAK,MAAO;CACpB;CAEA,MAAM,sBAAM,IAAI,WAAW,EAAE;CAC7B,MAAM,UAAU,IAAI,SAAS,IAAI,MAAM;CACvC,QAAQ,UAAU,GAAG,IAAI,IAAI;CAC7B,QAAQ,UAAU,GAAG,IAAI,IAAI;CAC7B,QAAQ,UAAU,GAAG,IAAI,IAAI;CAC7B,QAAQ,UAAU,IAAI,IAAI,IAAI;CAC9B,OAAO;AACT"}

package/dist/util/md5.d.cts

@@ -0,0 +1,43 @@
+type AsyncNodeCryptoLoader = () => Promise<{
+    createHash?: unknown;
+}>;
+/**
+ * Computes the MD5 digest of the given bytes as a base64 string. Prefers
+ * `node:crypto` for native speed when available; falls back to a pure-JS
+ * implementation in browser / edge runtimes because WebCrypto's
+ * `crypto.subtle.digest` deliberately does not support MD5.
+ *
+ * MD5 is used only for wire-protocol integrity checks, not as a security
+ * boundary.
+ *
+ * @param bytes - The bytes to digest.
+ *
+ * @returns The base64-encoded MD5 digest.
+ *
+ * @internal
+ */
+export declare function md5Base64(bytes: Uint8Array): Promise<string>;
+/**
+ * Computes the MD5 digest with an injected async crypto loader.
+ *
+ * @param bytes - The bytes to digest.
+ * @param loadCrypto - Crypto module loader used by runtime fallback tests.
+ *
+ * @returns The base64-encoded MD5 digest.
+ *
+ * @internal
+ */
+export declare function md5Base64WithCryptoLoader(bytes: Uint8Array, loadCrypto: AsyncNodeCryptoLoader): Promise<string>;
+/**
+ * Computes the MD5 digest of the given bytes as a base64 string without
+ * dynamic imports.
+ *
+ * @param bytes - The bytes to digest.
+ *
+ * @returns The base64-encoded MD5 digest.
+ *
+ * @internal
+ */
+export declare function md5Base64Sync(bytes: Uint8Array): string;
+export {};
+//# sourceMappingURL=md5.d.ts.map

package/dist/util/md5.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"md5.d.ts","sourceRoot":"","sources":["../../src/util/md5.js"],"names":[],"mappings":"AAuBA,KAAK,qBAAqB,GAAG,MAAM,OAAO,CAAC;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAA;AAkBpE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAElE;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAKvD"}

package/dist/util/md5.d.ts

@@ -0,0 +1,43 @@
+type AsyncNodeCryptoLoader = () => Promise<{
+    createHash?: unknown;
+}>;
+/**
+ * Computes the MD5 digest of the given bytes as a base64 string. Prefers
+ * `node:crypto` for native speed when available; falls back to a pure-JS
+ * implementation in browser / edge runtimes because WebCrypto's
+ * `crypto.subtle.digest` deliberately does not support MD5.
+ *
+ * MD5 is used only for wire-protocol integrity checks, not as a security
+ * boundary.
+ *
+ * @param bytes - The bytes to digest.
+ *
+ * @returns The base64-encoded MD5 digest.
+ *
+ * @internal
+ */
+export declare function md5Base64(bytes: Uint8Array): Promise<string>;
+/**
+ * Computes the MD5 digest with an injected async crypto loader.
+ *
+ * @param bytes - The bytes to digest.
+ * @param loadCrypto - Crypto module loader used by runtime fallback tests.
+ *
+ * @returns The base64-encoded MD5 digest.
+ *
+ * @internal
+ */
+export declare function md5Base64WithCryptoLoader(bytes: Uint8Array, loadCrypto: AsyncNodeCryptoLoader): Promise<string>;
+/**
+ * Computes the MD5 digest of the given bytes as a base64 string without
+ * dynamic imports.
+ *
+ * @param bytes - The bytes to digest.
+ *
+ * @returns The base64-encoded MD5 digest.
+ *
+ * @internal
+ */
+export declare function md5Base64Sync(bytes: Uint8Array): string;
+export {};
+//# sourceMappingURL=md5.d.ts.map

package/dist/util/md5.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"md5.d.ts","sourceRoot":"","sources":["../../src/util/md5.js"],"names":[],"mappings":"AAuBA,KAAK,qBAAqB,GAAG,MAAM,OAAO,CAAC;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAA;AAkBpE;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAElE;AAED;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAKvD"}

package/dist/util/md5.js

@@ -0,0 +1,209 @@
+//#region src/util/md5.ts
+/**
+* Encodes raw bytes as base64 in an isomorphic way (Node Buffer fallback to btoa).
+*
+* @param bytes - The raw bytes to encode.
+*
+* @returns The base64-encoded string.
+*/
+function bytesToBase64(bytes) {
+	const g = globalThis;
+	if (g.Buffer) return g.Buffer.from(bytes).toString("base64");
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary);
+}
+var loadNodeCrypto = () => import("node:crypto");
+function syncNodeCreateHash() {
+	const crypto = globalThis.process?.getBuiltinModule?.("node:crypto");
+	if (!crypto || typeof crypto !== "object") return null;
+	const { createHash } = crypto;
+	return typeof createHash === "function" ? createHash : null;
+}
+/**
+* Computes the MD5 digest of the given bytes as a base64 string. Prefers
+* `node:crypto` for native speed when available; falls back to a pure-JS
+* implementation in browser / edge runtimes because WebCrypto's
+* `crypto.subtle.digest` deliberately does not support MD5.
+*
+* MD5 is used only for wire-protocol integrity checks, not as a security
+* boundary.
+*
+* @param bytes - The bytes to digest.
+*
+* @returns The base64-encoded MD5 digest.
+*
+* @internal
+*/
+async function md5Base64(bytes) {
+	return md5Base64WithCryptoLoader(bytes, loadNodeCrypto);
+}
+/**
+* Computes the MD5 digest with an injected async crypto loader.
+*
+* @param bytes - The bytes to digest.
+* @param loadCrypto - Crypto module loader used by runtime fallback tests.
+*
+* @returns The base64-encoded MD5 digest.
+*
+* @internal
+*/
+async function md5Base64WithCryptoLoader(bytes, loadCrypto) {
+	try {
+		const { createHash } = await loadCrypto();
+		if (typeof createHash !== "function") throw new Error("createHash unavailable");
+		return createHash("md5").update(bytes).digest("base64");
+	} catch {
+		return md5Base64Sync(bytes);
+	}
+}
+/**
+* Computes the MD5 digest of the given bytes as a base64 string without
+* dynamic imports.
+*
+* @param bytes - The bytes to digest.
+*
+* @returns The base64-encoded MD5 digest.
+*
+* @internal
+*/
+function md5Base64Sync(bytes) {
+	const createHash = syncNodeCreateHash();
+	if (createHash) return createHash("md5").update(bytes).digest("base64");
+	return bytesToBase64(md5Bytes(bytes));
+}
+/**
+* Pure-JS MD5 implementation per RFC 1321. Returns the 16-byte digest of the
+* input. Used as a browser fallback for SSE-C key MD5 computation; not
+* intended for security-sensitive purposes (MD5 is broken cryptographically).
+*
+* @param data - The bytes to hash.
+*
+* @returns The 16-byte MD5 digest.
+*/
+function md5Bytes(data) {
+	const originalBitLength = data.length * 8;
+	const paddedLength = data.length + 1 + 8 + 63 & -64;
+	const msg = new Uint8Array(paddedLength);
+	msg.set(data);
+	msg[data.length] = 128;
+	const view = new DataView(msg.buffer);
+	view.setUint32(paddedLength - 8, originalBitLength >>> 0, true);
+	view.setUint32(paddedLength - 4, Math.floor(originalBitLength / 4294967296), true);
+	let a0 = 1732584193;
+	let b0 = 4023233417;
+	let c0 = 2562383102;
+	let d0 = 271733878;
+	const s = [
+		7,
+		12,
+		17,
+		22,
+		7,
+		12,
+		17,
+		22,
+		7,
+		12,
+		17,
+		22,
+		7,
+		12,
+		17,
+		22,
+		5,
+		9,
+		14,
+		20,
+		5,
+		9,
+		14,
+		20,
+		5,
+		9,
+		14,
+		20,
+		5,
+		9,
+		14,
+		20,
+		4,
+		11,
+		16,
+		23,
+		4,
+		11,
+		16,
+		23,
+		4,
+		11,
+		16,
+		23,
+		4,
+		11,
+		16,
+		23,
+		6,
+		10,
+		15,
+		21,
+		6,
+		10,
+		15,
+		21,
+		6,
+		10,
+		15,
+		21,
+		6,
+		10,
+		15,
+		21
+	];
+	const k = Array.from({ length: 64 }, (_, i) => Math.floor(Math.abs(Math.sin(i + 1)) * 4294967296));
+	const leftRotate = (x, c) => x << c | x >>> 32 - c;
+	for (let offset = 0; offset < paddedLength; offset += 64) {
+		let a = a0;
+		let b = b0;
+		let c = c0;
+		let d = d0;
+		const m = Array.from({ length: 16 }, (_, i) => view.getUint32(offset + i * 4, true));
+		for (let i = 0; i < 64; i++) {
+			let f;
+			let g;
+			if (i < 16) {
+				f = b & c | ~b & d;
+				g = i;
+			} else if (i < 32) {
+				f = d & b | ~d & c;
+				g = (5 * i + 1) % 16;
+			} else if (i < 48) {
+				f = b ^ c ^ d;
+				g = (3 * i + 5) % 16;
+			} else {
+				f = c ^ (b | ~d);
+				g = 7 * i % 16;
+			}
+			const temp = d;
+			d = c;
+			c = b;
+			b = b + leftRotate(a + f + k[i] + m[g] >>> 0, s[i]) >>> 0;
+			a = temp;
+		}
+		a0 = a0 + a >>> 0;
+		b0 = b0 + b >>> 0;
+		c0 = c0 + c >>> 0;
+		d0 = d0 + d >>> 0;
+	}
+	const out = /* @__PURE__ */ new Uint8Array(16);
+	const outView = new DataView(out.buffer);
+	outView.setUint32(0, a0, true);
+	outView.setUint32(4, b0, true);
+	outView.setUint32(8, c0, true);
+	outView.setUint32(12, d0, true);
+	return out;
+}
+//#endregion
+export { md5Base64, md5Base64Sync, md5Base64WithCryptoLoader };
+
+//# sourceMappingURL=md5.js.map

package/dist/util/md5.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"md5.js","names":[],"sources":["../../src/util/md5.ts"],"sourcesContent":["/**\n * Encodes raw bytes as base64 in an isomorphic way (Node Buffer fallback to btoa).\n *\n * @param bytes - The raw bytes to encode.\n *\n * @returns The base64-encoded string.\n */\nfunction bytesToBase64(bytes: Uint8Array): string {\n  const g = globalThis as {\n    Buffer?: { from(b: Uint8Array): { toString(encoding: string): string } }\n  }\n  if (g.Buffer) return g.Buffer.from(bytes).toString('base64')\n\n  let binary = ''\n  for (const byte of bytes) binary += String.fromCharCode(byte)\n  return btoa(binary)\n}\n\ntype SyncNodeHash = {\n  update(bytes: Uint8Array): SyncNodeHash\n  digest(encoding: 'base64'): string\n}\n\ntype AsyncNodeCryptoLoader = () => Promise<{ createHash?: unknown }>\n\nconst loadNodeCrypto: AsyncNodeCryptoLoader = () => import('node:crypto')\n\nfunction syncNodeCreateHash(): ((algorithm: string) => SyncNodeHash) | null {\n  const g = globalThis as {\n    process?: {\n      getBuiltinModule?: (name: string) => unknown\n    }\n  }\n  const crypto = g.process?.getBuiltinModule?.('node:crypto')\n  if (!crypto || typeof crypto !== 'object') return null\n  const { createHash } = crypto as { createHash?: unknown }\n  return typeof createHash === 'function'\n    ? (createHash as (algorithm: string) => SyncNodeHash)\n    : null\n}\n\n/**\n * Computes the MD5 digest of the given bytes as a base64 string. Prefers\n * `node:crypto` for native speed when available; falls back to a pure-JS\n * implementation in browser / edge runtimes because WebCrypto's\n * `crypto.subtle.digest` deliberately does not support MD5.\n *\n * MD5 is used only for wire-protocol integrity checks, not as a security\n * boundary.\n *\n * @param bytes - The bytes to digest.\n *\n * @returns The base64-encoded MD5 digest.\n *\n * @internal\n */\nexport async function md5Base64(bytes: Uint8Array): Promise<string> {\n  return md5Base64WithCryptoLoader(bytes, loadNodeCrypto)\n}\n\n/**\n * Computes the MD5 digest with an injected async crypto loader.\n *\n * @param bytes - The bytes to digest.\n * @param loadCrypto - Crypto module loader used by runtime fallback tests.\n *\n * @returns The base64-encoded MD5 digest.\n *\n * @internal\n */\nexport async function md5Base64WithCryptoLoader(\n  bytes: Uint8Array,\n  loadCrypto: AsyncNodeCryptoLoader,\n): Promise<string> {\n  try {\n    const { createHash } = await loadCrypto()\n    // Vite's browser shim resolves the import but does not implement\n    // `createHash`. Probe explicitly so we fall through to the pure-JS path.\n    if (typeof createHash !== 'function') throw new Error('createHash unavailable')\n    return createHash('md5').update(bytes).digest('base64')\n  } catch {\n    return md5Base64Sync(bytes)\n  }\n}\n\n/**\n * Computes the MD5 digest of the given bytes as a base64 string without\n * dynamic imports.\n *\n * @param bytes - The bytes to digest.\n *\n * @returns The base64-encoded MD5 digest.\n *\n * @internal\n */\nexport function md5Base64Sync(bytes: Uint8Array): string {\n  const createHash = syncNodeCreateHash()\n  if (createHash) return createHash('md5').update(bytes).digest('base64')\n\n  return bytesToBase64(md5Bytes(bytes))\n}\n\n/**\n * Pure-JS MD5 implementation per RFC 1321. Returns the 16-byte digest of the\n * input. Used as a browser fallback for SSE-C key MD5 computation; not\n * intended for security-sensitive purposes (MD5 is broken cryptographically).\n *\n * @param data - The bytes to hash.\n *\n * @returns The 16-byte MD5 digest.\n */\nfunction md5Bytes(data: Uint8Array): Uint8Array {\n  const originalBitLength = data.length * 8\n  const withOne = data.length + 1\n  const paddedLength = (withOne + 8 + 63) & ~63\n  const msg = new Uint8Array(paddedLength)\n  msg.set(data)\n  msg[data.length] = 0x80\n  const view = new DataView(msg.buffer)\n  view.setUint32(paddedLength - 8, originalBitLength >>> 0, true)\n  view.setUint32(paddedLength - 4, Math.floor(originalBitLength / 0x1_0000_0000), true)\n\n  let a0 = 0x67452301\n  let b0 = 0xefcdab89\n  let c0 = 0x98badcfe\n  let d0 = 0x10325476\n\n  const s = [\n    7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9,\n    14, 20, 5, 9, 14, 20, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 6, 10, 15, 21,\n    6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21,\n  ]\n  const k = Array.from({ length: 64 }, (_, i) =>\n    Math.floor(Math.abs(Math.sin(i + 1)) * 0x1_0000_0000),\n  )\n\n  const leftRotate = (x: number, c: number) => (x << c) | (x >>> (32 - c))\n\n  for (let offset = 0; offset < paddedLength; offset += 64) {\n    let a = a0\n    let b = b0\n    let c = c0\n    let d = d0\n\n    const m = Array.from({ length: 16 }, (_, i) => view.getUint32(offset + i * 4, true))\n\n    for (let i = 0; i < 64; i++) {\n      let f: number\n      let g: number\n      if (i < 16) {\n        f = (b & c) | (~b & d)\n        g = i\n      } else if (i < 32) {\n        f = (d & b) | (~d & c)\n        g = (5 * i + 1) % 16\n      } else if (i < 48) {\n        f = b ^ c ^ d\n        g = (3 * i + 5) % 16\n      } else {\n        f = c ^ (b | ~d)\n        g = (7 * i) % 16\n      }\n\n      const temp = d\n      d = c\n      c = b\n      b =\n        (b + leftRotate((a + f + (k[i] as number) + (m[g] as number)) >>> 0, s[i] as number)) >>> 0\n      a = temp\n    }\n\n    a0 = (a0 + a) >>> 0\n    b0 = (b0 + b) >>> 0\n    c0 = (c0 + c) >>> 0\n    d0 = (d0 + d) >>> 0\n  }\n\n  const out = new Uint8Array(16)\n  const outView = new DataView(out.buffer)\n  outView.setUint32(0, a0, true)\n  outView.setUint32(4, b0, true)\n  outView.setUint32(8, c0, true)\n  outView.setUint32(12, d0, true)\n  return out\n}\n"],"mappings":";;;;;;;;AAOA,SAAS,cAAc,OAA2B;CAChD,MAAM,IAAI;CAGV,IAAI,EAAE,QAAQ,OAAO,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,QAAQ;CAE3D,IAAI,SAAS;CACb,KAAK,MAAM,QAAQ,OAAO,UAAU,OAAO,aAAa,IAAI;CAC5D,OAAO,KAAK,MAAM;AACpB;AASA,IAAM,uBAA8C,OAAO;AAE3D,SAAS,qBAAmE;CAM1E,MAAM,SAAS,WAAE,SAAS,mBAAmB,aAAa;CAC1D,IAAI,CAAC,UAAU,OAAO,WAAW,UAAU,OAAO;CAClD,MAAM,EAAE,eAAe;CACvB,OAAO,OAAO,eAAe,aACxB,aACD;AACN;;;;;;;;;;;;;;;;AAiBA,eAAsB,UAAU,OAAoC;CAClE,OAAO,0BAA0B,OAAO,cAAc;AACxD;;;;;;;;;;;AAYA,eAAsB,0BACpB,OACA,YACiB;CACjB,IAAI;EACF,MAAM,EAAE,eAAe,MAAM,WAAW;EAGxC,IAAI,OAAO,eAAe,YAAY,MAAM,IAAI,MAAM,wBAAwB;EAC9E,OAAO,WAAW,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ;CACxD,QAAQ;EACN,OAAO,cAAc,KAAK;CAC5B;AACF;;;;;;;;;;;AAYA,SAAgB,cAAc,OAA2B;CACvD,MAAM,aAAa,mBAAmB;CACtC,IAAI,YAAY,OAAO,WAAW,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,QAAQ;CAEtE,OAAO,cAAc,SAAS,KAAK,CAAC;AACtC;;;;;;;;;;AAWA,SAAS,SAAS,MAA8B;CAC9C,MAAM,oBAAoB,KAAK,SAAS;CAExC,MAAM,eADU,KAAK,SAAS,IACE,IAAI,KAAM;CAC1C,MAAM,MAAM,IAAI,WAAW,YAAY;CACvC,IAAI,IAAI,IAAI;CACZ,IAAI,KAAK,UAAU;CACnB,MAAM,OAAO,IAAI,SAAS,IAAI,MAAM;CACpC,KAAK,UAAU,eAAe,GAAG,sBAAsB,GAAG,IAAI;CAC9D,KAAK,UAAU,eAAe,GAAG,KAAK,MAAM,oBAAoB,UAAa,GAAG,IAAI;CAEpF,IAAI,KAAK;CACT,IAAI,KAAK;CACT,IAAI,KAAK;CACT,IAAI,KAAK;CAET,MAAM,IAAI;EACR;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAG;EAAI;EAAI;EAAG;EAAG;EAAI;EAAI;EAAG;EAC3F;EAAI;EAAI;EAAG;EAAG;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAC7F;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;EAAI;EAAG;EAAI;EAAI;CAC3C;CACA,MAAM,IAAI,MAAM,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,MACvC,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,UAAa,CACtD;CAEA,MAAM,cAAc,GAAW,MAAe,KAAK,IAAM,MAAO,KAAK;CAErE,KAAK,IAAI,SAAS,GAAG,SAAS,cAAc,UAAU,IAAI;EACxD,IAAI,IAAI;EACR,IAAI,IAAI;EACR,IAAI,IAAI;EACR,IAAI,IAAI;EAER,MAAM,IAAI,MAAM,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,MAAM,KAAK,UAAU,SAAS,IAAI,GAAG,IAAI,CAAC;EAEnF,KAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;GAC3B,IAAI;GACJ,IAAI;GACJ,IAAI,IAAI,IAAI;IACV,IAAK,IAAI,IAAM,CAAC,IAAI;IACpB,IAAI;GACN,OAAO,IAAI,IAAI,IAAI;IACjB,IAAK,IAAI,IAAM,CAAC,IAAI;IACpB,KAAK,IAAI,IAAI,KAAK;GACpB,OAAO,IAAI,IAAI,IAAI;IACjB,IAAI,IAAI,IAAI;IACZ,KAAK,IAAI,IAAI,KAAK;GACpB,OAAO;IACL,IAAI,KAAK,IAAI,CAAC;IACd,IAAK,IAAI,IAAK;GAChB;GAEA,MAAM,OAAO;GACb,IAAI;GACJ,IAAI;GACJ,IACG,IAAI,WAAY,IAAI,IAAK,EAAE,KAAiB,EAAE,OAAmB,GAAG,EAAE,EAAY,MAAO;GAC5F,IAAI;EACN;EAEA,KAAM,KAAK,MAAO;EAClB,KAAM,KAAK,MAAO;EAClB,KAAM,KAAK,MAAO;EAClB,KAAM,KAAK,MAAO;CACpB;CAEA,MAAM,sBAAM,IAAI,WAAW,EAAE;CAC7B,MAAM,UAAU,IAAI,SAAS,IAAI,MAAM;CACvC,QAAQ,UAAU,GAAG,IAAI,IAAI;CAC7B,QAAQ,UAAU,GAAG,IAAI,IAAI;CAC7B,QAAQ,UAAU,GAAG,IAAI,IAAI;CAC7B,QAAQ,UAAU,IAAI,IAAI,IAAI;CAC9B,OAAO;AACT"}