@batalabs/virlow-crypto 3.11.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Typelets Secure Notes
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,18 @@
+# @batalabs/virlow-crypto
+
+Client-side encryption primitives for [Virlow](https://virlow.com): PBKDF2 key
+derivation and AES-256-GCM. Framework-free; runs in browsers and Node 20+.
+
+Virlow encrypts notes on the user's device, so the key is derived from their
+master password and never sent anywhere. This package is that layer, extracted
+so the web app, the local MCP connector, and the hosted connector all use one
+implementation rather than three.
+
+```ts
+import { deriveMasterKey, encryptNoteFields, decryptNoteFields } from '@batalabs/virlow-crypto';
+
+const { key } = await deriveMasterKey(masterPassword, userId);
+const { encryptedTitle, encryptedContent, iv } = await encryptNoteFields(key, title, body);
+```
+
+Published from [batalabs/virlow-app](https://github.com/batalabs/virlow-app).

package/dist/base64.d.ts

@@ -0,0 +1,4 @@
+export declare function bytesToBase64(input: Uint8Array | ArrayBuffer): string;
+export declare function base64ToBytes(base64: string): Uint8Array;
+export declare function base64ToArrayBuffer(base64: string): ArrayBuffer;
+//# sourceMappingURL=base64.d.ts.map

package/dist/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../src/base64.ts"],"names":[],"mappings":"AAEA,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAQrE;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAOxD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAM/D"}

package/dist/base64.js

@@ -0,0 +1,23 @@
+const CHUNK_SIZE = 0x8000;
+export function bytesToBase64(input) {
+    const bytes = input instanceof Uint8Array ? input : new Uint8Array(input);
+    const chunks = [];
+    for (let i = 0; i < bytes.length; i += CHUNK_SIZE) {
+        const chunk = bytes.subarray(i, Math.min(i + CHUNK_SIZE, bytes.length));
+        chunks.push(String.fromCharCode.apply(null, Array.from(chunk)));
+    }
+    return btoa(chunks.join(''));
+}
+export function base64ToBytes(base64) {
+    const binary = atob(base64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+export function base64ToArrayBuffer(base64) {
+    const bytes = base64ToBytes(base64);
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+}
+//# sourceMappingURL=base64.js.map

package/dist/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../src/base64.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,UAAU,aAAa,CAAC,KAA+B;IAC3D,MAAM,KAAK,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CACvB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CACrB,CAAC;AACnB,CAAC"}

package/dist/blob.d.ts

@@ -0,0 +1,7 @@
+/** Encrypt bytes into a self-describing "v2:<ivB64>:<ciphertextB64>" blob. */
+export declare function encryptBytesBlob(key: CryptoKey, bytes: Uint8Array): Promise<string>;
+/** Decrypt a "v2:<ivB64>:<ciphertextB64>" blob back to bytes. */
+export declare function decryptBytesBlob(key: CryptoKey, blob: string): Promise<Uint8Array>;
+export declare function encryptStringBlob(key: CryptoKey, plaintext: string): Promise<string>;
+export declare function decryptStringBlob(key: CryptoKey, blob: string): Promise<string>;
+//# sourceMappingURL=blob.d.ts.map

package/dist/blob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.d.ts","sourceRoot":"","sources":["../src/blob.ts"],"names":[],"mappings":"AAGA,8EAA8E;AAC9E,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,iEAAiE;AACjE,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/blob.js

@@ -0,0 +1,29 @@
+import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
+import { ENCRYPTION_CONFIG } from './constants';
+/** Encrypt bytes into a self-describing "v2:<ivB64>:<ciphertextB64>" blob. */
+export async function encryptBytesBlob(key, bytes) {
+    const iv = crypto.getRandomValues(new Uint8Array(ENCRYPTION_CONFIG.IV_LENGTH));
+    const ciphertext = await crypto.subtle.encrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv }, key, bytes);
+    return 'v2:' + bytesToBase64(iv) + ':' + bytesToBase64(ciphertext);
+}
+/** Decrypt a "v2:<ivB64>:<ciphertextB64>" blob back to bytes. */
+export async function decryptBytesBlob(key, blob) {
+    if (!blob.startsWith('v2:')) {
+        throw new Error('Malformed encrypted blob: missing v2 prefix');
+    }
+    const rest = blob.slice(3);
+    const sep = rest.indexOf(':');
+    if (sep === -1) {
+        throw new Error('Malformed encrypted blob: missing IV separator');
+    }
+    const iv = base64ToBytes(rest.slice(0, sep));
+    const decrypted = await crypto.subtle.decrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, base64ToArrayBuffer(rest.slice(sep + 1)));
+    return new Uint8Array(decrypted);
+}
+export async function encryptStringBlob(key, plaintext) {
+    return encryptBytesBlob(key, new TextEncoder().encode(plaintext));
+}
+export async function decryptStringBlob(key, blob) {
+    return new TextDecoder().decode(await decryptBytesBlob(key, blob));
+}
+//# sourceMappingURL=blob.js.map

package/dist/blob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob.js","sourceRoot":"","sources":["../src/blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,KAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EACzC,GAAG,EACH,KAAqB,CACtB,CAAC;IACF,OAAO,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,IAAY;IAEZ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,SAAiB;IAEjB,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,IAAY;IAEZ,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,13 @@
+export declare const ENCRYPTION_CONFIG: {
+    readonly ALGORITHM: "AES-GCM";
+    readonly KEY_LENGTH: 256;
+    readonly IV_LENGTH: 16;
+    readonly ITERATIONS: 250000;
+    readonly SALT_LENGTH: 32;
+};
+/**
+ * Known constant encrypted under the master key to form the verifier blob.
+ * Verification = GCM-decrypt succeeds (auth tag) AND plaintext equals this.
+ */
+export declare const VERIFIER_CONSTANT = "virlow-mp-verifier-v1";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,iBAAiB,0BAA0B,CAAC"}

package/dist/constants.js

@@ -0,0 +1,13 @@
+export const ENCRYPTION_CONFIG = {
+    ALGORITHM: 'AES-GCM',
+    KEY_LENGTH: 256,
+    IV_LENGTH: 16,
+    ITERATIONS: 250000,
+    SALT_LENGTH: 32,
+};
+/**
+ * Known constant encrypted under the master key to form the verifier blob.
+ * Verification = GCM-decrypt succeeds (auth tag) AND plaintext equals this.
+ */
+export const VERIFIER_CONSTANT = 'virlow-mp-verifier-v1';
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,GAAG;IACf,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,EAAE;CACP,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
+export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob';
+export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants';
+export { deriveMasterKey, importMasterKey } from './keys';
+export { decryptNoteFields, decryptTitleField, encryptNoteFields, type EncryptedNoteFields, } from './notes';
+export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, type VerifierBlob, } from './verifier';
+export declare const PACKAGE_NAME = "@batalabs/virlow-crypto";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AACpB,eAAO,MAAM,YAAY,4BAA4B,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
+export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob';
+export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants';
+export { deriveMasterKey, importMasterKey } from './keys';
+export { decryptNoteFields, decryptTitleField, encryptNoteFields, } from './notes';
+export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, } from './verifier';
+export const PACKAGE_NAME = '@batalabs/virlow-crypto';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AACpB,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Derive the master key from (password, userId) exactly as the web app does:
+ * PBKDF2(password, salt = UTF8(`typelets-salt-${userId}-v1`), 250000, SHA-256)
+ * -> AES-GCM 256. Returned key is EXTRACTABLE so callers can obtain keyString
+ * for later importMasterKey; commit paths should re-import non-extractably.
+ */
+export declare function deriveMasterKey(masterPassword: string | Uint8Array, userId: string): Promise<{
+    key: CryptoKey;
+    keyString: string;
+}>;
+/** Import raw AES key bytes as a NON-extractable CryptoKey. */
+export declare function importMasterKey(keyString: string): Promise<CryptoKey>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,cAAc,EAAE,MAAM,GAAG,UAAU,EACnC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAqChD;AAED,+DAA+D;AAC/D,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAS3E"}

package/dist/keys.js

@@ -0,0 +1,36 @@
+import { base64ToBytes, bytesToBase64 } from './base64';
+import { ENCRYPTION_CONFIG } from './constants';
+/**
+ * Derive the master key from (password, userId) exactly as the web app does:
+ * PBKDF2(password, salt = UTF8(`typelets-salt-${userId}-v1`), 250000, SHA-256)
+ * -> AES-GCM 256. Returned key is EXTRACTABLE so callers can obtain keyString
+ * for later importMasterKey; commit paths should re-import non-extractably.
+ */
+export async function deriveMasterKey(masterPassword, userId) {
+    if (!userId) {
+        throw new Error('deriveMasterKey requires a userId');
+    }
+    const encoder = new TextEncoder();
+    const passwordBytes = typeof masterPassword === 'string'
+        ? encoder.encode(masterPassword)
+        : masterPassword;
+    const userSalt = encoder.encode(`typelets-salt-${userId}-v1`);
+    const keyMaterial = await crypto.subtle.importKey('raw', passwordBytes, { name: 'PBKDF2' }, false, ['deriveKey']);
+    const key = await crypto.subtle.deriveKey({
+        name: 'PBKDF2',
+        salt: userSalt,
+        iterations: ENCRYPTION_CONFIG.ITERATIONS,
+        hash: 'SHA-256',
+    }, keyMaterial, {
+        name: ENCRYPTION_CONFIG.ALGORITHM,
+        length: ENCRYPTION_CONFIG.KEY_LENGTH,
+    }, true, ['encrypt', 'decrypt']);
+    const exportedKey = await crypto.subtle.exportKey('raw', key);
+    return { key, keyString: bytesToBase64(new Uint8Array(exportedKey)) };
+}
+/** Import raw AES key bytes as a NON-extractable CryptoKey. */
+export async function importMasterKey(keyString) {
+    const keyData = base64ToBytes(keyString);
+    return crypto.subtle.importKey('raw', keyData, { name: ENCRYPTION_CONFIG.ALGORITHM }, false, ['encrypt', 'decrypt']);
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,cAAmC,EACnC,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,aAAa,GACjB,OAAO,cAAc,KAAK,QAAQ;QAChC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,MAAM,KAAK,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,aAA6B,EAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,iBAAiB,CAAC,UAAU;QACxC,IAAI,EAAE,SAAS;KAChB,EACD,WAAW,EACX;QACE,IAAI,EAAE,iBAAiB,CAAC,SAAS;QACjC,MAAM,EAAE,iBAAiB,CAAC,UAAU;KACrC,EACD,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,OAAuB,EACvB,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EACrC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC"}

package/dist/notes.d.ts

@@ -0,0 +1,14 @@
+export interface EncryptedNoteFields {
+    encryptedTitle: string;
+    /** "v2:<ivB64>:<ciphertextB64>" — carries its own IV. */
+    encryptedContent: string;
+    /** Title IV (v1 column back-compat). */
+    iv: string;
+}
+export declare function encryptNoteFields(key: CryptoKey, title: string, content: string): Promise<EncryptedNoteFields>;
+export declare function decryptNoteFields(key: CryptoKey, encryptedTitle: string, encryptedContent: string, ivBase64: string): Promise<{
+    title: string;
+    content: string;
+}>;
+export declare function decryptTitleField(key: CryptoKey, encryptedTitle: string, ivBase64: string): Promise<string>;
+//# sourceMappingURL=notes.d.ts.map

package/dist/notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.d.ts","sourceRoot":"","sources":["../src/notes.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,gBAAgB,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,mBAAmB,CAAC,CAgC9B;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA+B7C;AAED,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAQjB"}

package/dist/notes.js

@@ -0,0 +1,47 @@
+import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
+import { ENCRYPTION_CONFIG } from './constants';
+export async function encryptNoteFields(key, title, content) {
+    // VIR-7: AES-GCM must NEVER reuse a (key, IV) pair. Distinct IV for title
+    // and content; the `iv` field carries the title IV (v1 back-compat) and the
+    // content carries its own IV inline.
+    const ivTitle = crypto.getRandomValues(new Uint8Array(ENCRYPTION_CONFIG.IV_LENGTH));
+    const ivContent = crypto.getRandomValues(new Uint8Array(ENCRYPTION_CONFIG.IV_LENGTH));
+    const encoder = new TextEncoder();
+    const encryptedTitleBuffer = await crypto.subtle.encrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: ivTitle }, key, encoder.encode(title || ''));
+    const encryptedContentBuffer = await crypto.subtle.encrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: ivContent }, key, encoder.encode(content || ''));
+    return {
+        encryptedTitle: bytesToBase64(encryptedTitleBuffer),
+        encryptedContent: 'v2:' +
+            bytesToBase64(ivContent) +
+            ':' +
+            bytesToBase64(encryptedContentBuffer),
+        iv: bytesToBase64(ivTitle),
+    };
+}
+export async function decryptNoteFields(key, encryptedTitle, encryptedContent, ivBase64) {
+    const ivTitle = base64ToBytes(ivBase64);
+    // v2 content carries its own IV ("v2:<ivB64>:<ctB64>"); v1 content is plain
+    // base64 and shares the column IV with the title. base64 never contains ':',
+    // so detection is unambiguous.
+    let ivContent = ivTitle;
+    let contentCipher = encryptedContent;
+    if (encryptedContent.startsWith('v2:')) {
+        const rest = encryptedContent.slice(3);
+        const sep = rest.indexOf(':');
+        ivContent = base64ToBytes(rest.slice(0, sep));
+        contentCipher = rest.slice(sep + 1);
+    }
+    const decryptedTitleBuffer = await crypto.subtle.decrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: ivTitle }, key, base64ToArrayBuffer(encryptedTitle));
+    const decryptedContentBuffer = await crypto.subtle.decrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: ivContent }, key, base64ToArrayBuffer(contentCipher));
+    const decoder = new TextDecoder();
+    return {
+        title: decoder.decode(decryptedTitleBuffer),
+        content: decoder.decode(decryptedContentBuffer),
+    };
+}
+export async function decryptTitleField(key, encryptedTitle, ivBase64) {
+    const iv = base64ToBytes(ivBase64);
+    const decrypted = await crypto.subtle.decrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, base64ToArrayBuffer(encryptedTitle));
+    return new TextDecoder().decode(decrypted);
+}
+//# sourceMappingURL=notes.js.map

package/dist/notes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.js","sourceRoot":"","sources":["../src/notes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUhD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,KAAa,EACb,OAAe;IAEf,0EAA0E;IAC1E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CACpC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CACtC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAClD,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAC5B,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EACpD,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAC9B,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,aAAa,CAAC,oBAAoB,CAAC;QACnD,gBAAgB,EACd,KAAK;YACL,aAAa,CAAC,SAAS,CAAC;YACxB,GAAG;YACH,aAAa,CAAC,sBAAsB,CAAC;QACvC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,cAAsB,EACtB,gBAAwB,EACxB,QAAgB;IAEhB,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAExC,4EAA4E;IAC5E,6EAA6E;IAC7E,+BAA+B;IAC/B,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,IAAI,aAAa,GAAG,gBAAgB,CAAC;IACrC,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,OAAuB,EAAE,EAClE,GAAG,EACH,mBAAmB,CAAC,cAAc,CAAC,CACpC,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,SAAyB,EAAE,EACpE,GAAG,EACH,mBAAmB,CAAC,aAAa,CAAC,CACnC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC3C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,cAAsB,EACtB,QAAgB;IAEhB,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,cAAc,CAAC,CACpC,CAAC;IACF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/verifier.d.ts

@@ -0,0 +1,24 @@
+export type VerifierBlob = {
+    ciphertext: string;
+    iv: string;
+    salt: string;
+};
+/**
+ * Build a verifier blob: encrypt the known constant with the derived master
+ * key using the SAME AES-GCM primitive used for notes. `salt` is a fresh
+ * random value stored alongside the blob; it is NOT used to derive the master
+ * key (derivation stays password+userId).
+ */
+export declare function createVerifierBlob(key: CryptoKey): Promise<VerifierBlob>;
+/**
+ * Verify a verifier blob: GCM-decrypt (the auth tag guarantees integrity) and
+ * confirm the plaintext equals the known constant. False on any failure.
+ */
+export declare function verifyVerifierBlob(key: CryptoKey, blob: VerifierBlob): Promise<boolean>;
+/**
+ * True iff the key GCM-decrypts the given ciphertext (auth tag validates).
+ * Used to verify a migrated user's password against existing data when no
+ * verifier blob exists.
+ */
+export declare function canDecryptWithKey(key: CryptoKey, ciphertextBase64: string, ivBase64: string): Promise<boolean>;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,YAAY,GAAG;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAe9E;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,SAAS,EACd,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAYlB"}

package/dist/verifier.js

@@ -0,0 +1,48 @@
+import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
+import { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants';
+/**
+ * Build a verifier blob: encrypt the known constant with the derived master
+ * key using the SAME AES-GCM primitive used for notes. `salt` is a fresh
+ * random value stored alongside the blob; it is NOT used to derive the master
+ * key (derivation stays password+userId).
+ */
+export async function createVerifierBlob(key) {
+    const iv = crypto.getRandomValues(new Uint8Array(ENCRYPTION_CONFIG.IV_LENGTH));
+    const salt = crypto.getRandomValues(new Uint8Array(ENCRYPTION_CONFIG.SALT_LENGTH));
+    const ciphertextBuffer = await crypto.subtle.encrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv }, key, new TextEncoder().encode(VERIFIER_CONSTANT));
+    return {
+        ciphertext: bytesToBase64(ciphertextBuffer),
+        iv: bytesToBase64(iv),
+        salt: bytesToBase64(salt),
+    };
+}
+/**
+ * Verify a verifier blob: GCM-decrypt (the auth tag guarantees integrity) and
+ * confirm the plaintext equals the known constant. False on any failure.
+ */
+export async function verifyVerifierBlob(key, blob) {
+    try {
+        const iv = base64ToBytes(blob.iv);
+        const decrypted = await crypto.subtle.decrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, base64ToArrayBuffer(blob.ciphertext));
+        return new TextDecoder().decode(decrypted) === VERIFIER_CONSTANT;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * True iff the key GCM-decrypts the given ciphertext (auth tag validates).
+ * Used to verify a migrated user's password against existing data when no
+ * verifier blob exists.
+ */
+export async function canDecryptWithKey(key, ciphertextBase64, ivBase64) {
+    try {
+        const iv = base64ToBytes(ivBase64);
+        await crypto.subtle.decrypt({ name: ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, base64ToArrayBuffer(ciphertextBase64));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=verifier.js.map

package/dist/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAc;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CACjC,IAAI,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAC9C,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAClD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EACzC,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC5C,CAAC;IACF,OAAO;QACL,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC;QAC3C,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAc,EACd,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CACrC,CAAC;QACF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,iBAAiB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,gBAAwB,EACxB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,gBAAgB,CAAC,CACtC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@batalabs/virlow-crypto",
+  "version": "3.11.4",
+  "type": "module",
+  "description": "Virlow client-side encryption primitives (PBKDF2 + AES-256-GCM). Framework-free; browser and Node 20+.",
+  "license": "MIT",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.0.0"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "LICENSE",
+    "README.md",
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/batalabs/virlow-app.git",
+    "directory": "packages/crypto"
+  },
+  "scripts": {
+    "test": "vitest run",
+    "type-check": "tsc --noEmit",
+    "build": "tsc -p tsconfig.build.json"
+  }
+}