@batalabs/virlow-crypto 3.11.4 → 3.11.6

package/dist/blob.js

@@ -1,5 +1,5 @@
-import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
-import { ENCRYPTION_CONFIG } from './constants';
+import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64.js';
+import { ENCRYPTION_CONFIG } from './constants.js';
 /** Encrypt bytes into a self-describing "v2:<ivB64>:<ciphertextB64>" blob. */
 export async function encryptBytesBlob(key, bytes) {
     const iv = crypto.getRandomValues(new Uint8Array(ENCRYPTION_CONFIG.IV_LENGTH));

package/dist/blob.js.map

@@ -1 +1 @@
-{"version":3,"file":"blob.js","sourceRoot":"","sources":["../src/blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,KAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EACzC,GAAG,EACH,KAAqB,CACtB,CAAC;IACF,OAAO,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,IAAY;IAEZ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,SAAiB;IAEjB,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,IAAY;IAEZ,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"blob.js","sourceRoot":"","sources":["../src/blob.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,KAAiB;IAEjB,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EACzC,GAAG,EACH,KAAqB,CACtB,CAAC;IACF,OAAO,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AACrE,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAc,EACd,IAAY;IAEZ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CACzC,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,SAAiB;IAEjB,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,IAAY;IAEZ,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/cjs/base64.d.ts

@@ -0,0 +1,3 @@
+export declare function bytesToBase64(input: Uint8Array | ArrayBuffer): string;
+export declare function base64ToBytes(base64: string): Uint8Array;
+export declare function base64ToArrayBuffer(base64: string): ArrayBuffer;

package/dist/cjs/base64.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bytesToBase64 = bytesToBase64;
+exports.base64ToBytes = base64ToBytes;
+exports.base64ToArrayBuffer = base64ToArrayBuffer;
+const CHUNK_SIZE = 0x8000;
+function bytesToBase64(input) {
+    const bytes = input instanceof Uint8Array ? input : new Uint8Array(input);
+    const chunks = [];
+    for (let i = 0; i < bytes.length; i += CHUNK_SIZE) {
+        const chunk = bytes.subarray(i, Math.min(i + CHUNK_SIZE, bytes.length));
+        chunks.push(String.fromCharCode.apply(null, Array.from(chunk)));
+    }
+    return btoa(chunks.join(''));
+}
+function base64ToBytes(base64) {
+    const binary = atob(base64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+function base64ToArrayBuffer(base64) {
+    const bytes = base64ToBytes(base64);
+    return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+}

package/dist/cjs/blob.d.ts

@@ -0,0 +1,6 @@
+/** Encrypt bytes into a self-describing "v2:<ivB64>:<ciphertextB64>" blob. */
+export declare function encryptBytesBlob(key: CryptoKey, bytes: Uint8Array): Promise<string>;
+/** Decrypt a "v2:<ivB64>:<ciphertextB64>" blob back to bytes. */
+export declare function decryptBytesBlob(key: CryptoKey, blob: string): Promise<Uint8Array>;
+export declare function encryptStringBlob(key: CryptoKey, plaintext: string): Promise<string>;
+export declare function decryptStringBlob(key: CryptoKey, blob: string): Promise<string>;

package/dist/cjs/blob.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptBytesBlob = encryptBytesBlob;
+exports.decryptBytesBlob = decryptBytesBlob;
+exports.encryptStringBlob = encryptStringBlob;
+exports.decryptStringBlob = decryptStringBlob;
+const base64_js_1 = require("./base64.js");
+const constants_js_1 = require("./constants.js");
+/** Encrypt bytes into a self-describing "v2:<ivB64>:<ciphertextB64>" blob. */
+async function encryptBytesBlob(key, bytes) {
+    const iv = crypto.getRandomValues(new Uint8Array(constants_js_1.ENCRYPTION_CONFIG.IV_LENGTH));
+    const ciphertext = await crypto.subtle.encrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv }, key, bytes);
+    return 'v2:' + (0, base64_js_1.bytesToBase64)(iv) + ':' + (0, base64_js_1.bytesToBase64)(ciphertext);
+}
+/** Decrypt a "v2:<ivB64>:<ciphertextB64>" blob back to bytes. */
+async function decryptBytesBlob(key, blob) {
+    if (!blob.startsWith('v2:')) {
+        throw new Error('Malformed encrypted blob: missing v2 prefix');
+    }
+    const rest = blob.slice(3);
+    const sep = rest.indexOf(':');
+    if (sep === -1) {
+        throw new Error('Malformed encrypted blob: missing IV separator');
+    }
+    const iv = (0, base64_js_1.base64ToBytes)(rest.slice(0, sep));
+    const decrypted = await crypto.subtle.decrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, (0, base64_js_1.base64ToArrayBuffer)(rest.slice(sep + 1)));
+    return new Uint8Array(decrypted);
+}
+async function encryptStringBlob(key, plaintext) {
+    return encryptBytesBlob(key, new TextEncoder().encode(plaintext));
+}
+async function decryptStringBlob(key, blob) {
+    return new TextDecoder().decode(await decryptBytesBlob(key, blob));
+}

package/dist/cjs/constants.d.ts

@@ -0,0 +1,12 @@
+export declare const ENCRYPTION_CONFIG: {
+    readonly ALGORITHM: "AES-GCM";
+    readonly KEY_LENGTH: 256;
+    readonly IV_LENGTH: 16;
+    readonly ITERATIONS: 250000;
+    readonly SALT_LENGTH: 32;
+};
+/**
+ * Known constant encrypted under the master key to form the verifier blob.
+ * Verification = GCM-decrypt succeeds (auth tag) AND plaintext equals this.
+ */
+export declare const VERIFIER_CONSTANT = "virlow-mp-verifier-v1";

package/dist/cjs/constants.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERIFIER_CONSTANT = exports.ENCRYPTION_CONFIG = void 0;
+exports.ENCRYPTION_CONFIG = {
+    ALGORITHM: 'AES-GCM',
+    KEY_LENGTH: 256,
+    IV_LENGTH: 16,
+    ITERATIONS: 250000,
+    SALT_LENGTH: 32,
+};
+/**
+ * Known constant encrypted under the master key to form the verifier blob.
+ * Verification = GCM-decrypt succeeds (auth tag) AND plaintext equals this.
+ */
+exports.VERIFIER_CONSTANT = 'virlow-mp-verifier-v1';

package/dist/cjs/index.d.ts

@@ -0,0 +1,7 @@
+export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64.js';
+export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob.js';
+export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants.js';
+export { deriveMasterKey, importMasterKey } from './keys.js';
+export { decryptNoteFields, decryptTitleField, encryptNoteFields, type EncryptedNoteFields, } from './notes.js';
+export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, type VerifierBlob, } from './verifier.js';
+export declare const PACKAGE_NAME = "@batalabs/virlow-crypto";

package/dist/cjs/index.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PACKAGE_NAME = exports.verifyVerifierBlob = exports.createVerifierBlob = exports.canDecryptWithKey = exports.encryptNoteFields = exports.decryptTitleField = exports.decryptNoteFields = exports.importMasterKey = exports.deriveMasterKey = exports.VERIFIER_CONSTANT = exports.ENCRYPTION_CONFIG = exports.encryptStringBlob = exports.encryptBytesBlob = exports.decryptStringBlob = exports.decryptBytesBlob = exports.bytesToBase64 = exports.base64ToBytes = exports.base64ToArrayBuffer = void 0;
+var base64_js_1 = require("./base64.js");
+Object.defineProperty(exports, "base64ToArrayBuffer", { enumerable: true, get: function () { return base64_js_1.base64ToArrayBuffer; } });
+Object.defineProperty(exports, "base64ToBytes", { enumerable: true, get: function () { return base64_js_1.base64ToBytes; } });
+Object.defineProperty(exports, "bytesToBase64", { enumerable: true, get: function () { return base64_js_1.bytesToBase64; } });
+var blob_js_1 = require("./blob.js");
+Object.defineProperty(exports, "decryptBytesBlob", { enumerable: true, get: function () { return blob_js_1.decryptBytesBlob; } });
+Object.defineProperty(exports, "decryptStringBlob", { enumerable: true, get: function () { return blob_js_1.decryptStringBlob; } });
+Object.defineProperty(exports, "encryptBytesBlob", { enumerable: true, get: function () { return blob_js_1.encryptBytesBlob; } });
+Object.defineProperty(exports, "encryptStringBlob", { enumerable: true, get: function () { return blob_js_1.encryptStringBlob; } });
+var constants_js_1 = require("./constants.js");
+Object.defineProperty(exports, "ENCRYPTION_CONFIG", { enumerable: true, get: function () { return constants_js_1.ENCRYPTION_CONFIG; } });
+Object.defineProperty(exports, "VERIFIER_CONSTANT", { enumerable: true, get: function () { return constants_js_1.VERIFIER_CONSTANT; } });
+var keys_js_1 = require("./keys.js");
+Object.defineProperty(exports, "deriveMasterKey", { enumerable: true, get: function () { return keys_js_1.deriveMasterKey; } });
+Object.defineProperty(exports, "importMasterKey", { enumerable: true, get: function () { return keys_js_1.importMasterKey; } });
+var notes_js_1 = require("./notes.js");
+Object.defineProperty(exports, "decryptNoteFields", { enumerable: true, get: function () { return notes_js_1.decryptNoteFields; } });
+Object.defineProperty(exports, "decryptTitleField", { enumerable: true, get: function () { return notes_js_1.decryptTitleField; } });
+Object.defineProperty(exports, "encryptNoteFields", { enumerable: true, get: function () { return notes_js_1.encryptNoteFields; } });
+var verifier_js_1 = require("./verifier.js");
+Object.defineProperty(exports, "canDecryptWithKey", { enumerable: true, get: function () { return verifier_js_1.canDecryptWithKey; } });
+Object.defineProperty(exports, "createVerifierBlob", { enumerable: true, get: function () { return verifier_js_1.createVerifierBlob; } });
+Object.defineProperty(exports, "verifyVerifierBlob", { enumerable: true, get: function () { return verifier_js_1.verifyVerifierBlob; } });
+exports.PACKAGE_NAME = '@batalabs/virlow-crypto';

package/dist/cjs/keys.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Derive the master key from (password, userId) exactly as the web app does:
+ * PBKDF2(password, salt = UTF8(`typelets-salt-${userId}-v1`), 250000, SHA-256)
+ * -> AES-GCM 256. Returned key is EXTRACTABLE so callers can obtain keyString
+ * for later importMasterKey; commit paths should re-import non-extractably.
+ */
+export declare function deriveMasterKey(masterPassword: string | Uint8Array, userId: string): Promise<{
+    key: CryptoKey;
+    keyString: string;
+}>;
+/** Import raw AES key bytes as a NON-extractable CryptoKey. */
+export declare function importMasterKey(keyString: string): Promise<CryptoKey>;

package/dist/cjs/keys.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveMasterKey = deriveMasterKey;
+exports.importMasterKey = importMasterKey;
+const base64_js_1 = require("./base64.js");
+const constants_js_1 = require("./constants.js");
+/**
+ * Derive the master key from (password, userId) exactly as the web app does:
+ * PBKDF2(password, salt = UTF8(`typelets-salt-${userId}-v1`), 250000, SHA-256)
+ * -> AES-GCM 256. Returned key is EXTRACTABLE so callers can obtain keyString
+ * for later importMasterKey; commit paths should re-import non-extractably.
+ */
+async function deriveMasterKey(masterPassword, userId) {
+    if (!userId) {
+        throw new Error('deriveMasterKey requires a userId');
+    }
+    const encoder = new TextEncoder();
+    const passwordBytes = typeof masterPassword === 'string'
+        ? encoder.encode(masterPassword)
+        : masterPassword;
+    const userSalt = encoder.encode(`typelets-salt-${userId}-v1`);
+    const keyMaterial = await crypto.subtle.importKey('raw', passwordBytes, { name: 'PBKDF2' }, false, ['deriveKey']);
+    const key = await crypto.subtle.deriveKey({
+        name: 'PBKDF2',
+        salt: userSalt,
+        iterations: constants_js_1.ENCRYPTION_CONFIG.ITERATIONS,
+        hash: 'SHA-256',
+    }, keyMaterial, {
+        name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM,
+        length: constants_js_1.ENCRYPTION_CONFIG.KEY_LENGTH,
+    }, true, ['encrypt', 'decrypt']);
+    const exportedKey = await crypto.subtle.exportKey('raw', key);
+    return { key, keyString: (0, base64_js_1.bytesToBase64)(new Uint8Array(exportedKey)) };
+}
+/** Import raw AES key bytes as a NON-extractable CryptoKey. */
+async function importMasterKey(keyString) {
+    const keyData = (0, base64_js_1.base64ToBytes)(keyString);
+    return crypto.subtle.importKey('raw', keyData, { name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM }, false, ['encrypt', 'decrypt']);
+}

package/dist/cjs/notes.d.ts

@@ -0,0 +1,13 @@
+export interface EncryptedNoteFields {
+    encryptedTitle: string;
+    /** "v2:<ivB64>:<ciphertextB64>" — carries its own IV. */
+    encryptedContent: string;
+    /** Title IV (v1 column back-compat). */
+    iv: string;
+}
+export declare function encryptNoteFields(key: CryptoKey, title: string, content: string): Promise<EncryptedNoteFields>;
+export declare function decryptNoteFields(key: CryptoKey, encryptedTitle: string, encryptedContent: string, ivBase64: string): Promise<{
+    title: string;
+    content: string;
+}>;
+export declare function decryptTitleField(key: CryptoKey, encryptedTitle: string, ivBase64: string): Promise<string>;

package/dist/cjs/notes.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encryptNoteFields = encryptNoteFields;
+exports.decryptNoteFields = decryptNoteFields;
+exports.decryptTitleField = decryptTitleField;
+const base64_js_1 = require("./base64.js");
+const constants_js_1 = require("./constants.js");
+async function encryptNoteFields(key, title, content) {
+    // VIR-7: AES-GCM must NEVER reuse a (key, IV) pair. Distinct IV for title
+    // and content; the `iv` field carries the title IV (v1 back-compat) and the
+    // content carries its own IV inline.
+    const ivTitle = crypto.getRandomValues(new Uint8Array(constants_js_1.ENCRYPTION_CONFIG.IV_LENGTH));
+    const ivContent = crypto.getRandomValues(new Uint8Array(constants_js_1.ENCRYPTION_CONFIG.IV_LENGTH));
+    const encoder = new TextEncoder();
+    const encryptedTitleBuffer = await crypto.subtle.encrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: ivTitle }, key, encoder.encode(title || ''));
+    const encryptedContentBuffer = await crypto.subtle.encrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: ivContent }, key, encoder.encode(content || ''));
+    return {
+        encryptedTitle: (0, base64_js_1.bytesToBase64)(encryptedTitleBuffer),
+        encryptedContent: 'v2:' +
+            (0, base64_js_1.bytesToBase64)(ivContent) +
+            ':' +
+            (0, base64_js_1.bytesToBase64)(encryptedContentBuffer),
+        iv: (0, base64_js_1.bytesToBase64)(ivTitle),
+    };
+}
+async function decryptNoteFields(key, encryptedTitle, encryptedContent, ivBase64) {
+    const ivTitle = (0, base64_js_1.base64ToBytes)(ivBase64);
+    // v2 content carries its own IV ("v2:<ivB64>:<ctB64>"); v1 content is plain
+    // base64 and shares the column IV with the title. base64 never contains ':',
+    // so detection is unambiguous.
+    let ivContent = ivTitle;
+    let contentCipher = encryptedContent;
+    if (encryptedContent.startsWith('v2:')) {
+        const rest = encryptedContent.slice(3);
+        const sep = rest.indexOf(':');
+        ivContent = (0, base64_js_1.base64ToBytes)(rest.slice(0, sep));
+        contentCipher = rest.slice(sep + 1);
+    }
+    const decryptedTitleBuffer = await crypto.subtle.decrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: ivTitle }, key, (0, base64_js_1.base64ToArrayBuffer)(encryptedTitle));
+    const decryptedContentBuffer = await crypto.subtle.decrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: ivContent }, key, (0, base64_js_1.base64ToArrayBuffer)(contentCipher));
+    const decoder = new TextDecoder();
+    return {
+        title: decoder.decode(decryptedTitleBuffer),
+        content: decoder.decode(decryptedContentBuffer),
+    };
+}
+async function decryptTitleField(key, encryptedTitle, ivBase64) {
+    const iv = (0, base64_js_1.base64ToBytes)(ivBase64);
+    const decrypted = await crypto.subtle.decrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, (0, base64_js_1.base64ToArrayBuffer)(encryptedTitle));
+    return new TextDecoder().decode(decrypted);
+}

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/cjs/verifier.d.ts

@@ -0,0 +1,23 @@
+export type VerifierBlob = {
+    ciphertext: string;
+    iv: string;
+    salt: string;
+};
+/**
+ * Build a verifier blob: encrypt the known constant with the derived master
+ * key using the SAME AES-GCM primitive used for notes. `salt` is a fresh
+ * random value stored alongside the blob; it is NOT used to derive the master
+ * key (derivation stays password+userId).
+ */
+export declare function createVerifierBlob(key: CryptoKey): Promise<VerifierBlob>;
+/**
+ * Verify a verifier blob: GCM-decrypt (the auth tag guarantees integrity) and
+ * confirm the plaintext equals the known constant. False on any failure.
+ */
+export declare function verifyVerifierBlob(key: CryptoKey, blob: VerifierBlob): Promise<boolean>;
+/**
+ * True iff the key GCM-decrypts the given ciphertext (auth tag validates).
+ * Used to verify a migrated user's password against existing data when no
+ * verifier blob exists.
+ */
+export declare function canDecryptWithKey(key: CryptoKey, ciphertextBase64: string, ivBase64: string): Promise<boolean>;

package/dist/cjs/verifier.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createVerifierBlob = createVerifierBlob;
+exports.verifyVerifierBlob = verifyVerifierBlob;
+exports.canDecryptWithKey = canDecryptWithKey;
+const base64_js_1 = require("./base64.js");
+const constants_js_1 = require("./constants.js");
+/**
+ * Build a verifier blob: encrypt the known constant with the derived master
+ * key using the SAME AES-GCM primitive used for notes. `salt` is a fresh
+ * random value stored alongside the blob; it is NOT used to derive the master
+ * key (derivation stays password+userId).
+ */
+async function createVerifierBlob(key) {
+    const iv = crypto.getRandomValues(new Uint8Array(constants_js_1.ENCRYPTION_CONFIG.IV_LENGTH));
+    const salt = crypto.getRandomValues(new Uint8Array(constants_js_1.ENCRYPTION_CONFIG.SALT_LENGTH));
+    const ciphertextBuffer = await crypto.subtle.encrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv }, key, new TextEncoder().encode(constants_js_1.VERIFIER_CONSTANT));
+    return {
+        ciphertext: (0, base64_js_1.bytesToBase64)(ciphertextBuffer),
+        iv: (0, base64_js_1.bytesToBase64)(iv),
+        salt: (0, base64_js_1.bytesToBase64)(salt),
+    };
+}
+/**
+ * Verify a verifier blob: GCM-decrypt (the auth tag guarantees integrity) and
+ * confirm the plaintext equals the known constant. False on any failure.
+ */
+async function verifyVerifierBlob(key, blob) {
+    try {
+        const iv = (0, base64_js_1.base64ToBytes)(blob.iv);
+        const decrypted = await crypto.subtle.decrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, (0, base64_js_1.base64ToArrayBuffer)(blob.ciphertext));
+        return new TextDecoder().decode(decrypted) === constants_js_1.VERIFIER_CONSTANT;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * True iff the key GCM-decrypts the given ciphertext (auth tag validates).
+ * Used to verify a migrated user's password against existing data when no
+ * verifier blob exists.
+ */
+async function canDecryptWithKey(key, ciphertextBase64, ivBase64) {
+    try {
+        const iv = (0, base64_js_1.base64ToBytes)(ivBase64);
+        await crypto.subtle.decrypt({ name: constants_js_1.ENCRYPTION_CONFIG.ALGORITHM, iv: iv }, key, (0, base64_js_1.base64ToArrayBuffer)(ciphertextBase64));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
-export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob';
-export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants';
-export { deriveMasterKey, importMasterKey } from './keys';
-export { decryptNoteFields, decryptTitleField, encryptNoteFields, type EncryptedNoteFields, } from './notes';
-export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, type VerifierBlob, } from './verifier';
+export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64.js';
+export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob.js';
+export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants.js';
+export { deriveMasterKey, importMasterKey } from './keys.js';
+export { decryptNoteFields, decryptTitleField, encryptNoteFields, type EncryptedNoteFields, } from './notes.js';
+export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, type VerifierBlob, } from './verifier.js';
 export declare const PACKAGE_NAME = "@batalabs/virlow-crypto";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AACpB,eAAO,MAAM,YAAY,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,eAAe,CAAC;AACvB,eAAO,MAAM,YAAY,4BAA4B,CAAC"}

package/dist/index.js

@@ -1,8 +1,8 @@
-export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
-export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob';
-export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants';
-export { deriveMasterKey, importMasterKey } from './keys';
-export { decryptNoteFields, decryptTitleField, encryptNoteFields, } from './notes';
-export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, } from './verifier';
+export { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64.js';
+export { decryptBytesBlob, decryptStringBlob, encryptBytesBlob, encryptStringBlob, } from './blob.js';
+export { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants.js';
+export { deriveMasterKey, importMasterKey } from './keys.js';
+export { decryptNoteFields, decryptTitleField, encryptNoteFields, } from './notes.js';
+export { canDecryptWithKey, createVerifierBlob, verifyVerifierBlob, } from './verifier.js';
 export const PACKAGE_NAME = '@batalabs/virlow-crypto';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AACpB,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,eAAe,CAAC;AACvB,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAC"}

package/dist/keys.js

@@ -1,5 +1,5 @@
-import { base64ToBytes, bytesToBase64 } from './base64';
-import { ENCRYPTION_CONFIG } from './constants';
+import { base64ToBytes, bytesToBase64 } from './base64.js';
+import { ENCRYPTION_CONFIG } from './constants.js';
 /**
  * Derive the master key from (password, userId) exactly as the web app does:
  * PBKDF2(password, salt = UTF8(`typelets-salt-${userId}-v1`), 250000, SHA-256)

package/dist/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,cAAmC,EACnC,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,aAAa,GACjB,OAAO,cAAc,KAAK,QAAQ;QAChC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,MAAM,KAAK,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,aAA6B,EAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,iBAAiB,CAAC,UAAU;QACxC,IAAI,EAAE,SAAS;KAChB,EACD,WAAW,EACX;QACE,IAAI,EAAE,iBAAiB,CAAC,SAAS;QACjC,MAAM,EAAE,iBAAiB,CAAC,UAAU;KACrC,EACD,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,OAAuB,EACvB,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EACrC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,cAAmC,EACnC,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,aAAa,GACjB,OAAO,cAAc,KAAK,QAAQ;QAChC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QAChC,CAAC,CAAC,cAAc,CAAC;IACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,MAAM,KAAK,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,aAA6B,EAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,iBAAiB,CAAC,UAAU;QACxC,IAAI,EAAE,SAAS;KAChB,EACD,WAAW,EACX;QACE,IAAI,EAAE,iBAAiB,CAAC,SAAS;QACjC,MAAM,EAAE,iBAAiB,CAAC,UAAU;KACrC,EACD,IAAI,EACJ,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,OAAuB,EACvB,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EACrC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC"}

package/dist/notes.js

@@ -1,5 +1,5 @@
-import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
-import { ENCRYPTION_CONFIG } from './constants';
+import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64.js';
+import { ENCRYPTION_CONFIG } from './constants.js';
 export async function encryptNoteFields(key, title, content) {
     // VIR-7: AES-GCM must NEVER reuse a (key, IV) pair. Distinct IV for title
     // and content; the `iv` field carries the title IV (v1 back-compat) and the

package/dist/notes.js.map

@@ -1 +1 @@
-{"version":3,"file":"notes.js","sourceRoot":"","sources":["../src/notes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUhD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,KAAa,EACb,OAAe;IAEf,0EAA0E;IAC1E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CACpC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CACtC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAClD,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAC5B,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EACpD,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAC9B,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,aAAa,CAAC,oBAAoB,CAAC;QACnD,gBAAgB,EACd,KAAK;YACL,aAAa,CAAC,SAAS,CAAC;YACxB,GAAG;YACH,aAAa,CAAC,sBAAsB,CAAC;QACvC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,cAAsB,EACtB,gBAAwB,EACxB,QAAgB;IAEhB,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAExC,4EAA4E;IAC5E,6EAA6E;IAC7E,+BAA+B;IAC/B,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,IAAI,aAAa,GAAG,gBAAgB,CAAC;IACrC,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,OAAuB,EAAE,EAClE,GAAG,EACH,mBAAmB,CAAC,cAAc,CAAC,CACpC,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,SAAyB,EAAE,EACpE,GAAG,EACH,mBAAmB,CAAC,aAAa,CAAC,CACnC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC3C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,cAAsB,EACtB,QAAgB;IAEhB,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,cAAc,CAAC,CACpC,CAAC;IACF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"notes.js","sourceRoot":"","sources":["../src/notes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAUnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,KAAa,EACb,OAAe;IAEf,0EAA0E;IAC1E,4EAA4E;IAC5E,qCAAqC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CACpC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CACtC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAC5C,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAClD,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAC5B,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EACpD,GAAG,EACH,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAC9B,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,aAAa,CAAC,oBAAoB,CAAC;QACnD,gBAAgB,EACd,KAAK;YACL,aAAa,CAAC,SAAS,CAAC;YACxB,GAAG;YACH,aAAa,CAAC,sBAAsB,CAAC;QACvC,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,cAAsB,EACtB,gBAAwB,EACxB,QAAgB;IAEhB,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAExC,4EAA4E;IAC5E,6EAA6E;IAC7E,+BAA+B;IAC/B,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,IAAI,aAAa,GAAG,gBAAgB,CAAC;IACrC,IAAI,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,oBAAoB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACtD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,OAAuB,EAAE,EAClE,GAAG,EACH,mBAAmB,CAAC,cAAc,CAAC,CACpC,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,SAAyB,EAAE,EACpE,GAAG,EACH,mBAAmB,CAAC,aAAa,CAAC,CACnC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC3C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,cAAsB,EACtB,QAAgB;IAEhB,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,cAAc,CAAC,CACpC,CAAC;IACF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/verifier.js

@@ -1,5 +1,5 @@
-import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64';
-import { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants';
+import { base64ToArrayBuffer, base64ToBytes, bytesToBase64 } from './base64.js';
+import { ENCRYPTION_CONFIG, VERIFIER_CONSTANT } from './constants.js';
 /**
  * Build a verifier blob: encrypt the known constant with the derived master
  * key using the SAME AES-GCM primitive used for notes. `salt` is a fresh

package/dist/verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAc;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CACjC,IAAI,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAC9C,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAClD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EACzC,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC5C,CAAC;IACF,OAAO;QACL,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC;QAC3C,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAc,EACd,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CACrC,CAAC;QACF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,iBAAiB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,gBAAwB,EACxB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,gBAAgB,CAAC,CACtC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAQtE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAc;IACrD,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CACjC,IAAI,UAAU,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAC9C,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAClD,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EACzC,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC5C,CAAC;IACF,OAAO;QACL,UAAU,EAAE,aAAa,CAAC,gBAAgB,CAAC;QAC3C,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;QACrB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAc,EACd,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CACrC,CAAC;QACF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,iBAAiB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAc,EACd,gBAAwB,EACxB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,iBAAiB,CAAC,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC7D,GAAG,EACH,mBAAmB,CAAC,gBAAgB,CAAC,CACtC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -1,13 +1,19 @@
 {
   "name": "@batalabs/virlow-crypto",
-  "version": "3.11.4",
+  "version": "3.11.6",
   "type": "module",
   "description": "Virlow client-side encryption primitives (PBKDF2 + AES-256-GCM). Framework-free; browser and Node 20+.",
   "license": "MIT",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/index.d.ts",
+        "default": "./dist/cjs/index.js"
+      }
     }
   },
   "devDependencies": {
@@ -15,7 +21,7 @@
     "typescript": "^5.8.0",
     "vitest": "^3.0.0"
   },
-  "main": "./dist/index.js",
+  "main": "./dist/cjs/index.js",
   "types": "./dist/index.d.ts",
   "files": [
     "LICENSE",
@@ -33,6 +39,6 @@
   "scripts": {
     "test": "vitest run",
     "type-check": "tsc --noEmit",
-    "build": "tsc -p tsconfig.build.json"
+    "build": "tsc -p tsconfig.build.json && tsc -p tsconfig.cjs.json && node -e \"require('fs').writeFileSync('dist/cjs/package.json','{\\\"type\\\":\\\"commonjs\\\"}')\""
   }
 }