@econ-v1/app-sdk 7.6.38 → 7.6.40

package/dist/burger-build/aliases.d.ts

@@ -35,7 +35,9 @@ export declare const NODE_BUILTINS: ReadonlySet<string>;
  * for by the node-app-memory flip, econ-v1/node-app-memory#40). `statfsSync`,
  * `deflateRawSync`, `inflateRawSync` and `setSystemTime` arrive with the
  * third (node-app-memory's switch to Burger), likewise listed ahead of the
- * release that ships them.
+ * release that ships them. `createCipheriv`, `createDecipheriv` (aes-256-gcm)
+ * and `scryptSync` arrive with the crypto pack (node-app-burger ADR 006, for
+ * node-app-pii and node-app-distributed-backup), also ahead of its release.
  */
 export declare const BURGER_EXPORTS: Readonly<Record<BurgerModule, readonly string[]>>;
 /**

package/dist/burger-build/cli.js

@@ -189,7 +189,16 @@ var BURGER_EXPORTS = {
   ],
   "burger:os": ["platform", "arch", "cpus", "totalmem", "freemem", "hostname", "tmpdir", "homedir", "EOL"],
   "burger:worker_threads": ["isMainThread", "workerData", "parentPort", "threadId"],
-  "burger:crypto": ["randomUUID", "randomBytes", "createHash", "createHmac", "timingSafeEqual"],
+  "burger:crypto": [
+    "randomUUID",
+    "randomBytes",
+    "createHash",
+    "createHmac",
+    "timingSafeEqual",
+    "createCipheriv",
+    "createDecipheriv",
+    "scryptSync"
+  ],
   "burger:buffer": ["Buffer"],
   "burger:sqlite": ["Database"],
   "burger:zlib": [

package/dist/burger-build/index.js

@@ -184,7 +184,16 @@ var BURGER_EXPORTS = {
   ],
   "burger:os": ["platform", "arch", "cpus", "totalmem", "freemem", "hostname", "tmpdir", "homedir", "EOL"],
   "burger:worker_threads": ["isMainThread", "workerData", "parentPort", "threadId"],
-  "burger:crypto": ["randomUUID", "randomBytes", "createHash", "createHmac", "timingSafeEqual"],
+  "burger:crypto": [
+    "randomUUID",
+    "randomBytes",
+    "createHash",
+    "createHmac",
+    "timingSafeEqual",
+    "createCipheriv",
+    "createDecipheriv",
+    "scryptSync"
+  ],
   "burger:buffer": ["Buffer"],
   "burger:sqlite": ["Database"],
   "burger:zlib": [

package/dist/burger-types/modules.d.ts

@@ -300,6 +300,8 @@ declare module "burger:worker_threads" {
 }
 
 declare module "burger:crypto" {
+  import type { Buffer } from "burger:buffer";
+
   export type HashAlgorithm = "sha256" | "sha512" | "sha1";
   export type DigestEncoding = "hex" | "base64";
   export interface Hash {
@@ -313,12 +315,60 @@ declare module "burger:crypto" {
   export function createHash(algorithm: HashAlgorithm): Hash;
   export function createHmac(algorithm: HashAlgorithm, key: string | Uint8Array): Hmac;
   export function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean;
+
+  // Crypto pack (node-app-burger ADR 006): AES-256-GCM and scrypt, with Node's semantics.
+  /** A string (UTF-8 unless an encoding is given), `ArrayBuffer` or view. */
+  export type BinaryLike = string | ArrayBuffer | ArrayBufferView;
+  /** The one cipher Burger provides (the name is case-insensitive at runtime). */
+  export type CipherGCMTypes = "aes-256-gcm";
+  export type CipherEncoding = "utf8" | "utf-8" | "hex" | "base64" | "base64url" | "latin1" | "binary";
+  export interface CipherGCMOptions {
+    /** 16 only (Node's other GCM tag lengths are refused). */
+    authTagLength?: 16;
+    /** Encoding of a string `key`. */
+    encoding?: CipherEncoding;
+  }
+  interface GCMBase<Self> {
+    /** The output for `data` at once: ciphertext, or plaintext not yet authenticated. */
+    update(data: string | ArrayBufferView, inputEncoding?: CipherEncoding): Buffer;
+    update(data: string | ArrayBufferView, inputEncoding: CipherEncoding | undefined, outputEncoding: CipherEncoding): string;
+    final(): Buffer;
+    final(outputEncoding: CipherEncoding): string;
+    /** Additional authenticated data, before the first `update()`. */
+    setAAD(buffer: BinaryLike, options?: { encoding?: CipherEncoding; plaintextLength?: number }): Self;
+  }
+  export interface CipherGCM extends GCMBase<CipherGCM> {
+    /** The 16-byte tag, after `final()`. */
+    getAuthTag(): Buffer;
+  }
+  export interface DecipherGCM extends GCMBase<DecipherGCM> {
+    /** The 16-byte tag to check; `final()` throws if it does not authenticate. */
+    setAuthTag(buffer: BinaryLike, encoding?: CipherEncoding): DecipherGCM;
+  }
+  /** A 32-byte key and a 12-byte IV. */
+  export function createCipheriv(algorithm: CipherGCMTypes, key: BinaryLike, iv: BinaryLike, options?: CipherGCMOptions): CipherGCM;
+  export function createDecipheriv(algorithm: CipherGCMTypes, key: BinaryLike, iv: BinaryLike, options?: CipherGCMOptions): DecipherGCM;
+  /** Node's names and defaults (N 16384, r 8, p 1, maxmem 32 MiB); Burger also caps memory and work per app. */
+  export interface ScryptOptions {
+    N?: number;
+    cost?: number;
+    r?: number;
+    blockSize?: number;
+    p?: number;
+    parallelization?: number;
+    maxmem?: number;
+  }
+  export function scryptSync(password: BinaryLike, salt: BinaryLike, keylen: number, options?: ScryptOptions): Buffer;
+
   const crypto: {
     randomUUID: typeof randomUUID;
     randomBytes: typeof randomBytes;
     createHash: typeof createHash;
     createHmac: typeof createHmac;
     timingSafeEqual: typeof timingSafeEqual;
+    createCipheriv: typeof createCipheriv;
+    createDecipheriv: typeof createDecipheriv;
+    scryptSync: typeof scryptSync;
   };
   export default crypto;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@econ-v1/app-sdk",
-  "version": "7.6.38",
+  "version": "7.6.40",
   "description": "TypeScript SDK for building Node mini-app plugins (Bun runtime) on the Lightning-powered marketplace daemon",
   "license": "MIT OR Apache-2.0",
   "author": "Node contributors",