@fast-china/utils 2.0.3 → 2.1.1

package/dist/crypto/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/crypto/index.ts"],"sourcesContent":["import AES from \"crypto-js/aes.js\";\nimport CryptoCore from \"crypto-js/core.js\";\nimport Hex from \"crypto-js/enc-hex.js\";\nimport Utf8 from \"crypto-js/enc-utf8.js\";\nimport MD5 from \"crypto-js/md5.js\";\nimport ECB from \"crypto-js/mode-ecb.js\";\nimport \"crypto-js/pad-ansix923.js\";\nimport Iso10126 from \"crypto-js/pad-iso10126.js\";\nimport NoPadding from \"crypto-js/pad-nopadding.js\";\nimport Pkcs7 from \"crypto-js/pad-pkcs7.js\";\nimport ZeroPadding from \"crypto-js/pad-zeropadding.js\";\nimport SHA1 from \"crypto-js/sha1.js\";\nimport { decodeBase64Bytes, decodeBase64UrlBytes, encodeBase64Bytes, encodeBase64UrlBytes } from \"../base64/index\";\nimport { encodeUtf8, getTextDecoder } from \"../internal/text\";\n\n/** PBKDF2 默认迭代次数。 */\nconst defaultPbkdf2Iterations = 600_000;\n\n/** PBKDF2 允许的最小迭代次数。 */\nconst minimumPbkdf2Iterations = 100_000;\n\n/** PBKDF2 允许的最大迭代次数，用于限制异常输入造成的计算资源消耗。 */\nconst maximumPbkdf2Iterations = 5_000_000;\n\n/** 密码允许的最大 UTF-8 字节数。 */\nconst maximumPasswordBytes = 1024;\n\n/** 密码加密接口允许的最大明文字节数。 */\nconst maximumPlaintextBytes = 8 * 1024 * 1024;\n\n/** 密码解密接口允许的最大协议载荷字符数。 */\nconst maximumPayloadLength = 16 * 1024 * 1024;\n\n/** 密码加密载荷的协议与算法版本前缀。 */\nconst encryptedPayloadPrefix = \"FAST-AES-256-GCM-V1\";\n\n/** PBKDF2 密码哈希的协议与算法版本前缀。 */\nconst passwordHashPrefix = \"FAST-PBKDF2-SHA256-V1\";\n\n/** 直接 AES-GCM 密钥加密载荷的协议版本。 */\nconst authenticatedAesPayloadVersion = 1;\n\n/** 用于逐项验证实际依赖能力，而不是只判断 `subtle` 对象是否存在。 */\ntype RuntimeSubtleCrypto = Partial<\n\tPick<SubtleCrypto, \"decrypt\" | \"deriveBits\" | \"deriveKey\" | \"digest\" | \"encrypt\" | \"exportKey\" | \"generateKey\" | \"importKey\" | \"sign\" | \"verify\">\n>;\n/** Web Crypto 的运行时最小结构，避免用不安全的类型断言掩盖能力缺失。 */\ninterface RuntimeCrypto extends Partial<Pick<Crypto, \"getRandomValues\">> {\n\t/** 可选 SubtleCrypto 能力；密码原语入口会继续逐项验证所需方法。 */\n\tsubtle?: RuntimeSubtleCrypto;\n}\n\n/** Crypto 工具延迟读取的平台全局对象最小视图。 */\ninterface RuntimeCryptoGlobals {\n\t/** 可选 Web Crypto 实现；具体方法仍由每个能力入口逐项校验。 */\n\tcrypto?: RuntimeCrypto;\n}\n\n/** 延迟读取的 Web Crypto 全局对象视图，便于在缺少该能力的平台给出明确错误。 */\nconst runtimeCryptoGlobals = globalThis as unknown as RuntimeCryptoGlobals;\n\n/** AES 分组密码模式；与 .NET `CipherMode.CBC` 和 `CipherMode.ECB` 对应。 */\nexport type AesCipherMode = \"CBC\" | \"ECB\";\n\n/** AES 填充模式；与 .NET `PaddingMode` 中可由 CryptoJS 互操作的成员对应。 */\nexport type AesPaddingMode = \"None\" | \"PKCS7\" | \"Zeros\" | \"ANSIX923\" | \"ISO10126\";\n\n/** Web Crypto 导出的 PEM 公私钥对。 */\nexport interface PemKeyPair {\n\t/** 未加密的 PKCS#8 PEM 私钥，包含标准 `PRIVATE KEY` 头尾和 64 字符换行。 */\n\tprivateKey: string;\n\t/** SubjectPublicKeyInfo PEM 公钥，包含标准 `PUBLIC KEY` 头尾和 64 字符换行。 */\n\tpublicKey: string;\n}\n\n/** 本模块支持的 Web Crypto 椭圆曲线。 */\nexport type EcNamedCurve = \"P-256\" | \"P-384\" | \"P-521\";\n\n/**\n * 获取安全随机数能力。\n *\n * @remarks 随机字节和随机字符串不依赖 SubtleCrypto，因此这里与完整密码原语检查分开。\n * @returns 当前平台的 Crypto 对象。\n * @throws `Error` 当平台缺少 `getRandomValues`。\n */\nconst requireRandomCrypto = (): Crypto => {\n\tconst crypto = runtimeCryptoGlobals.crypto;\n\tif (typeof crypto?.getRandomValues !== \"function\") {\n\t\tthrow new Error(\"Web Crypto is unavailable in the current runtime.\");\n\t}\n\treturn crypto as Crypto;\n};\n\n/**\n * 获取本模块非随机 API 所需的完整 Web Crypto 能力。\n *\n * @returns 已确认实现摘要、派生、密钥导入导出、加解密、签名和验证方法的 Crypto 对象。\n * @throws `Error` 当任一必要 SubtleCrypto 方法缺失。\n */\nconst requireWebCrypto = (): Crypto => {\n\tconst crypto = requireRandomCrypto();\n\tconst subtle = (crypto as unknown as RuntimeCrypto).subtle;\n\tif (\n\t\ttypeof subtle?.decrypt !== \"function\" ||\n\t\ttypeof subtle.deriveBits !== \"function\" ||\n\t\ttypeof subtle.deriveKey !== \"function\" ||\n\t\ttypeof subtle.digest !== \"function\" ||\n\t\ttypeof subtle.encrypt !== \"function\" ||\n\t\ttypeof subtle.exportKey !== \"function\" ||\n\t\ttypeof subtle.generateKey !== \"function\" ||\n\t\ttypeof subtle.importKey !== \"function\" ||\n\t\ttypeof subtle.sign !== \"function\" ||\n\t\ttypeof subtle.verify !== \"function\"\n\t) {\n\t\tthrow new Error(\"Web Crypto SubtleCrypto is unavailable in the current runtime.\");\n\t}\n\treturn crypto;\n};\n\n/**\n * 把 Uint8Array 复制为独立的完整 ArrayBuffer。\n *\n * @remarks 不能直接返回 `bytes.buffer`，因为输入可能只是更大 Buffer 的切片。\n * @param bytes - 源字节视图。\n * @returns 长度与视图完全一致、偏移为零的新 ArrayBuffer。\n */\nconst toArrayBuffer = (bytes: Uint8Array): ArrayBuffer => {\n\tconst copy = new Uint8Array(bytes.byteLength);\n\tcopy.set(bytes);\n\treturn copy.buffer;\n};\n\n/** 本模块导出的 PKCS#8 与 SPKI PEM 标签。 */\nconst pemLabels = {\n\tprivate: \"PRIVATE KEY\",\n\tpublic: \"PUBLIC KEY\",\n} as const;\n\n/**\n * 把 DER 内容封装为 PEM。\n *\n * @param label - PEM Begin/End 标签，不包含分隔线。\n * @param value - DER 二进制内容。\n * @returns 每行最多 64 个 Base64 字符的 PEM 文本。\n */\nconst toPem = (label: string, value: ArrayBuffer): string => {\n\tconst encoded = encodeBase64Bytes(new Uint8Array(value));\n\tconst lines = encoded.match(/.{1,64}/gu)?.join(\"\\n\") ?? \"\";\n\treturn `-----BEGIN ${label}-----\\n${lines}\\n-----END ${label}-----`;\n};\n\n/**\n * 校验 PEM 标签并还原 DER。\n *\n * @param value - PEM 文本。\n * @param label - 当前算法预期的标签。\n * @returns 独立的 DER ArrayBuffer。\n * @throws `TypeError` 当 Begin/End 标签不匹配或 Base64 内容非法。\n */\nconst fromPem = (value: string, label: string): ArrayBuffer => {\n\tconst header = `-----BEGIN ${label}-----`;\n\tconst footer = `-----END ${label}-----`;\n\tconst trimmed = value.trim();\n\tif (!trimmed.startsWith(header) || !trimmed.endsWith(footer)) throw new TypeError(`Expected a ${label} PEM value.`);\n\tconst encoded = trimmed.slice(header.length, -footer.length).replace(/\\s+/gu, \"\");\n\treturn toArrayBuffer(decodeBase64Bytes(encoded));\n};\n\n/**\n * 导出 Web Crypto 密钥对。\n *\n * @param keyPair - 可导出的公私钥对。\n * @returns PKCS#8 私钥和 SPKI 公钥组成的 PEM 对象。\n * @throws `Error` 当平台拒绝导出或密钥格式不兼容。\n */\nconst exportKeyPair = async (keyPair: CryptoKeyPair): Promise<PemKeyPair> => {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.exportKey(\"pkcs8\", keyPair.privateKey),\n\t\tcrypto.subtle.exportKey(\"spki\", keyPair.publicKey),\n\t]);\n\treturn {\n\t\tprivateKey: toPem(pemLabels.private, privateKey),\n\t\tpublicKey: toPem(pemLabels.public, publicKey),\n\t};\n};\n\n/**\n * 缩小 Web Crypto `generateKey` 的联合返回值。\n *\n * @param value - 平台返回的单密钥或密钥对。\n * @returns 同时具有公钥和私钥的密钥对。\n * @throws `Error` 当平台没有按请求生成密钥对。\n */\nconst assertKeyPair = (value: CryptoKey | CryptoKeyPair): CryptoKeyPair => {\n\tif (\"privateKey\" in value && \"publicKey\" in value) return value;\n\tthrow new Error(\"The runtime did not generate a key pair.\");\n};\n\n/**\n * 校验并编码密码。\n *\n * @param password - 用户提供的密码文本。\n * @returns UTF-8 密码字节。\n * @throws `TypeError` 当密码为空。\n * @throws `RangeError` 当 UTF-8 长度超过 1,024 字节。\n */\nconst encodeValidatedPassword = (password: string): Uint8Array => {\n\tconst bytes = encodeUtf8(password);\n\tif (bytes.length === 0) throw new TypeError(\"The encryption password cannot be empty.\");\n\tif (bytes.length > maximumPasswordBytes) {\n\t\tthrow new RangeError(`The UTF-8 password cannot exceed ${maximumPasswordBytes} bytes.`);\n\t}\n\treturn bytes;\n};\n\n/**\n * 校验 PBKDF2 迭代次数。\n *\n * @param iterations - 待使用的迭代次数。\n * @returns 校验后的原始整数。\n * @throws `RangeError` 当值不是 100,000 至 5,000,000 的安全整数。\n */\nconst validateIterations = (iterations: number): number => {\n\tif (!Number.isSafeInteger(iterations) || iterations < minimumPbkdf2Iterations || iterations > maximumPbkdf2Iterations) {\n\t\tthrow new RangeError(`iterations must be a safe integer between ${minimumPbkdf2Iterations} and ${maximumPbkdf2Iterations}.`);\n\t}\n\treturn iterations;\n};\n\n/** 把字节格式化为小写十六进制。 */\nconst toLowerHex = (value: Uint8Array): string => Array.from(value, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n/** 把字节格式化为大写十六进制。 */\nconst toUpperHex = (value: Uint8Array): string => toLowerHex(value).toUpperCase();\n\n/**\n * 使用指定的 Web Crypto HMAC 算法计算原始认证标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @param hash - HMAC 使用的 SHA-2 摘要算法。\n * @returns 算法规定长度的原始认证标签。\n * @throws `TypeError` 当密钥为空。\n * @throws `Error` 当运行时缺少所需 Web Crypto 能力。\n */\nconst computeHmacBytes = async (value: string, key: string, hash: \"SHA-256\" | \"SHA-384\" | \"SHA-512\"): Promise<Uint8Array> => {\n\tconst keyBytes = encodeUtf8(key);\n\tif (keyBytes.length === 0) throw new TypeError(\"The HMAC key cannot be empty.\");\n\n\tconst crypto = requireWebCrypto();\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { hash, name: \"HMAC\" }, false, [\"sign\"]);\n\tconst signature = await crypto.subtle.sign(\"HMAC\", cryptoKey, toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(signature);\n};\n\n/**\n * 生成安全随机字节。\n *\n * @param length - 0 至 65,536 的安全整数；上限来自 Web Crypto 单次请求限制。\n * @returns 新建的 `Uint8Array`。\n * @throws 参数非法时抛出 `RangeError`；缺少 Web Crypto 时抛出 `Error`。\n */\nexport function GenerateRandomBytes(length: number): Uint8Array {\n\tif (!Number.isSafeInteger(length) || length < 0 || length > 65_536) {\n\t\tthrow new RangeError(\"length must be a safe integer from 0 through 65,536.\");\n\t}\n\treturn requireRandomCrypto().getRandomValues(new Uint8Array(length));\n}\n\n/**\n * 以不提前退出的方式比较两个字节数组。\n *\n * @remarks JavaScript 引擎不保证严格常量时间；该函数只避免显式短路，不能替代服务端\n * 密码学库提供的 timing-safe primitive。长度是否相同仍属于可观察信息。\n * @param left - 第一字节序列。\n * @param right - 第二字节序列。\n * @returns 长度和每个字节均相同时返回 `true`。\n */\nexport function FixedTimeEquals(left: Uint8Array, right: Uint8Array): boolean {\n\tconst length = Math.max(left.length, right.length);\n\tlet difference = left.length === right.length ? 0 : 1;\n\t// 不按长度或首个差异提前退出；缺失位置按零参与累计差异。\n\tfor (let index = 0; index < length; index += 1) difference |= (left[index] ?? 0) ^ (right[index] ?? 0);\n\treturn difference === 0;\n}\n\n/**\n * 计算 MD5 摘要并返回小写十六进制文本。\n *\n * @remarks MD5 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 32 字符小写十六进制摘要。\n */\nexport function MD5Encrypt(value: string): string {\n\treturn MD5(value).toString(Hex);\n}\n\n/**\n * 计算 SHA-1 摘要并返回大写十六进制文本。\n *\n * @remarks SHA-1 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 40 字符大写十六进制摘要。\n */\nexport function SHA1Encrypt(value: string): string {\n\treturn SHA1(value).toString(Hex).toUpperCase();\n}\n\n/**\n * 计算 SHA-256 摘要。\n *\n * @remarks SHA-256 是快速摘要，不适合直接存储或校验密码。\n * @param value - UTF-8 字符串或原始字节。\n * @returns 32 字节摘要。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-256 并格式化为十六进制。\n *\n * @param value - UTF-8 字符串或原始字节。\n * @returns 64 字符大写十六进制文本。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA256Bytes(value));\n}\n\n/**\n * 计算 SHA-384 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 48 字节摘要。\n */\nexport async function SHA384Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-384\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-384 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 96 个大写十六进制字符组成的摘要。\n */\nexport async function SHA384Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA384Bytes(value));\n}\n\n/**\n * 计算 SHA-512 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 64 字节摘要。\n */\nexport async function SHA512Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-512\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-512 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 128 个大写十六进制字符组成的摘要。\n */\nexport async function SHA512Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA512Bytes(value));\n}\n\n/**\n * 使用 HMAC-SHA-256 认证文本，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 64 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA256Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-256\"));\n}\n\n/**\n * 使用 HMAC-SHA-384 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 96 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA384Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-384\"));\n}\n\n/**\n * 使用 HMAC-SHA-512 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 128 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA512Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-512\"));\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 从密码派生密钥。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param salt - 至少 8 字节的盐。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @param outputLength - 输出长度，范围为 1 至 1,024 字节。\n * @returns 指定长度的派生密钥。\n * @throws 参数超过协议边界时抛出 `TypeError` 或 `RangeError`。\n */\nexport async function PBKDF2SHA256(password: string, salt: Uint8Array, iterations = defaultPbkdf2Iterations, outputLength = 32): Promise<Uint8Array> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (salt.length < 8) throw new RangeError(\"The PBKDF2 salt must contain at least 8 bytes; 16 or more is recommended.\");\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 1024) {\n\t\tthrow new RangeError(\"outputLength must be a safe integer between 1 and 1,024.\");\n\t}\n\n\t// 密码作为不可导出的 PBKDF2 原始材料导入，派生结果只通过 deriveBits 返回。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", iterations: validateIterations(iterations), name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 生成可持久化的随机盐 PBKDF2-HMAC-SHA-256 密码哈希。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @returns 包含版本、迭代次数、16 字节随机盐和 32 字节派生密钥的自描述字符串。\n */\nexport async function HashPasswordPBKDF2SHA256(password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\t// 每个密码独立生成盐，避免相同密码产生相同持久化结果并提高预计算攻击成本。\n\tconst salt = GenerateRandomBytes(16);\n\tconst derivedKey = await PBKDF2SHA256(password, salt, iterations);\n\treturn [passwordHashPrefix, String(iterations), encodeBase64UrlBytes(salt), encodeBase64UrlBytes(derivedKey)].join(\":\");\n}\n\n/**\n * 验证 {@link HashPasswordPBKDF2SHA256} 生成的密码哈希。\n *\n * @param password - 要验证的密码。\n * @param passwordHash - 自描述的 PBKDF2-HMAC-SHA-256 密码哈希。\n * @returns 格式有效且密码匹配时返回 `true`；格式无效或密码错误时返回 `false`。\n */\nexport async function VerifyPasswordPBKDF2SHA256(password: string, passwordHash: string): Promise<boolean> {\n\ttry {\n\t\t// 先验证协议版本和字段边界，再执行高成本 PBKDF2，避免无效输入消耗不受控资源。\n\t\tconst parts = passwordHash.split(\":\");\n\t\tif (parts.length !== 4 || parts[0] !== passwordHashPrefix) return false;\n\t\tconst iterations = validateIterations(Number(parts[1]));\n\t\tconst salt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tconst expected = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tif (salt.length !== 16 || expected.length !== 32) return false;\n\t\tconst actual = await PBKDF2SHA256(password, salt, iterations, expected.length);\n\t\treturn FixedTimeEquals(actual, expected);\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/**\n * 使用 RFC 5869 HKDF-SHA-256 派生上下文隔离的密钥材料。\n *\n * @param inputKeyMaterial - 输入密钥材料，例如 ECDH 原始共享秘密。\n * @param salt - 可选盐；空值按 RFC 5869 的零盐语义处理。\n * @param info - 应用、协议和密钥用途上下文。\n * @param outputLength - 输出长度，范围为 1 至 8,160 字节。\n * @returns 与 `salt` 和 `info` 绑定的派生密钥。\n */\nexport async function HKDFSHA256(\n\tinputKeyMaterial: Uint8Array,\n\tsalt: Uint8Array = new Uint8Array(),\n\tinfo: Uint8Array = new Uint8Array(),\n\toutputLength = 32\n): Promise<Uint8Array> {\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 255 * 32) {\n\t\tthrow new RangeError(\"outputLength must be a safe integer between 1 and 8,160.\");\n\t}\n\n\t// Web Crypto 的 HKDF 实现内部完成 RFC 5869 Extract 和 Expand，并且不会导出中间 PRK。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(inputKeyMaterial), \"HKDF\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", info: toArrayBuffer(info), name: \"HKDF\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 使用 AES-256 对 UTF-8 文本进行分组加密。\n *\n * @remarks 密钥和 IV 分别补字符 `f` 或截断到 32、16 个 UTF-16 Code Unit，与 .NET\n * `AESEncrypt` 保持一致。CBC/ECB 不提供完整性认证，密文可能被篡改。\n * @param dataStr - 要加密的 UTF-8 文本；空白文本返回 `null`。\n * @param key - 非空白的密钥文本。\n * @param vector - 非空白的初始化向量文本；ECB 模式仍要求传入该参数以对齐 .NET 签名。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns Base64 密文；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式或填充不受支持时抛出 `RangeError`。\n */\nexport function AESEncrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError('cipherMode must be \"CBC\" or \"ECB\".');\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\tpadding = ZeroPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"paddingMode is not supported.\");\n\t}\n\tif (paddingMode === \"None\" && encodeUtf8(dataStr).length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES plaintext must contain a whole number of 16-byte blocks when paddingMode is None.\");\n\t}\n\n\t// 按 .NET 入口的字符规则处理密钥和 IV，再由 CryptoJS 统一按 UTF-8 编码。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.encrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString();\n}\n\n/**\n * 使用 AES-256 解密 Base64 分组密文。\n *\n * @remarks 参数归一化规则与 {@link AESEncrypt} 以及 .NET `AESDecrypt` 相同。\n * @param dataStr - Base64 密文；空白文本返回 `null`。\n * @param key - 加密时使用的密钥文本。\n * @param vector - 加密时使用的初始化向量文本。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns 解密后的 UTF-8 文本；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式、填充、Base64、密钥或密文无效时抛出错误。\n */\nexport function AESDecrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError('cipherMode must be \"CBC\" or \"ECB\".');\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\t// .NET 的 Zeros 解密不会移除尾部零字节，因此使用 NoPadding 保留完整明文块。\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"paddingMode is not supported.\");\n\t}\n\tconst ciphertextBytes = decodeBase64Bytes(dataStr);\n\tif (ciphertextBytes.length === 0 || ciphertextBytes.length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES ciphertext must contain one or more complete 16-byte blocks.\");\n\t}\n\n\t// 解密必须重复使用加密端相同的字符补齐和截断规则。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.decrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString(\n\t\tUtf8\n\t);\n}\n\n/**\n * 使用 SHA-256 归一化文本密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 输出与 .NET `AESEncryptAuthenticated` 的 v1 Base64 二进制载荷完全一致。\n * @param plaintext - 要加密的 UTF-8 文本。\n * @param key - 非空的 UTF-8 文本密钥；内部归一化为 32 字节 SHA-256 摘要。\n * @returns Base64 编码的 v1 AES-GCM 认证载荷。\n * @throws 密钥为空或运行时缺少 Web Crypto 时抛出错误。\n */\nexport async function AESEncryptAuthenticated(plaintext: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"The encryption key cannot be empty.\");\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"encrypt\"]);\n\t// 96 位随机 nonce 是 GCM 的标准高效长度；每次加密都生成新值，避免同一密钥下重复。\n\tconst nonce = GenerateRandomBytes(12);\n\tconst encrypted = new Uint8Array(\n\t\tawait crypto.subtle.encrypt({ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 }, cryptoKey, toArrayBuffer(encodeUtf8(plaintext)))\n\t);\n\tconst ciphertextLength = encrypted.length - 16;\n\t// .NET v1 协议字段顺序固定为 version || nonce || tag || ciphertext。\n\tconst payload = new Uint8Array(1 + nonce.length + 16 + ciphertextLength);\n\tpayload[0] = authenticatedAesPayloadVersion;\n\tpayload.set(nonce, 1);\n\tpayload.set(encrypted.subarray(ciphertextLength), 1 + nonce.length);\n\tpayload.set(encrypted.subarray(0, ciphertextLength), 1 + nonce.length + 16);\n\treturn encodeBase64Bytes(payload);\n}\n\n/**\n * 解密并认证 .NET `AESEncryptAuthenticated` 或 {@link AESEncryptAuthenticated} 生成的载荷。\n *\n * @param payload - Base64 编码的 v1 AES-GCM 二进制载荷。\n * @param key - 加密时使用的非空 UTF-8 文本密钥。\n * @returns 通过认证的 UTF-8 明文。\n * @throws 载荷格式无效、密钥错误或认证失败时抛出错误。\n */\nexport async function AESDecryptAuthenticated(payload: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"The encryption key cannot be empty.\");\n\tconst decoded = decodeBase64Bytes(payload);\n\tif (decoded.length < 29 || decoded[0] !== authenticatedAesPayloadVersion) {\n\t\tthrow new TypeError(\"The AES-GCM payload format or version is not supported.\");\n\t}\n\n\tconst nonce = decoded.subarray(1, 13);\n\tconst tag = decoded.subarray(13, 29);\n\tconst ciphertext = decoded.subarray(29);\n\t// Web Crypto 接收 ciphertext || tag，因此把 .NET v1 的独立字段恢复为 Web Crypto 输入顺序。\n\tconst ciphertextAndTag = new Uint8Array(ciphertext.length + tag.length);\n\tciphertextAndTag.set(ciphertext);\n\tciphertextAndTag.set(tag, ciphertext.length);\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"decrypt\"]);\n\tconst plaintext = await crypto.subtle.decrypt(\n\t\t{ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 },\n\t\tcryptoKey,\n\t\ttoArrayBuffer(ciphertextAndTag)\n\t);\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 派生密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 每次调用生成独立 16 字节盐与 12 字节 IV。输出是与 .NET `AESEncryptWithPassword`\n * 一致的 v1 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。\n * @param plaintext - 原始文本，不进行 JSON 推断；UTF-8 编码后最大 8 MiB。\n * @param password - 1 至 1024 UTF-8 字节的秘密口令。\n * @param iterations - PBKDF2 工作因子，默认 600,000。\n * @returns 认证密文字符串；相同输入每次产生不同结果。\n * @throws 口令非法时抛出 `TypeError` 或 `RangeError`；明文过大时抛出 `RangeError`；\n * 运行时缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function AESEncryptWithPassword(plaintext: string, password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tconst plaintextBytes = encodeUtf8(plaintext);\n\tif (plaintextBytes.length > maximumPlaintextBytes) {\n\t\tthrow new RangeError(`The UTF-8 plaintext cannot exceed ${maximumPlaintextBytes} bytes.`);\n\t}\n\tconst validatedIterations = validateIterations(iterations);\n\tconst crypto = requireWebCrypto();\n\tconst salt = GenerateRandomBytes(16);\n\tconst iv = GenerateRandomBytes(12);\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t// AES-GCM 密钥只允许加密，且不允许从 Web Crypto 导出。\n\tconst key = await crypto.subtle.deriveKey(\n\t\t{ hash: \"SHA-256\", iterations: validatedIterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\t{ length: 256, name: \"AES-GCM\" },\n\t\tfalse,\n\t\t[\"encrypt\"]\n\t);\n\t// Prefix 同时作为明文版本字段和 AAD，攻击者无法在不破坏认证标签的情况下替换协议版本。\n\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\tkey,\n\t\tplaintextBytes\n\t);\n\t// 字段顺序属于持久化协议：版本、KDF 成本、盐、IV、带 GCM Tag 的密文。\n\treturn [\n\t\tencryptedPayloadPrefix,\n\t\tString(validatedIterations),\n\t\tencodeBase64UrlBytes(salt),\n\t\tencodeBase64UrlBytes(iv),\n\t\tencodeBase64UrlBytes(new Uint8Array(ciphertext)),\n\t].join(\":\");\n}\n\n/**\n * 解密 {@link AESEncryptWithPassword} 生成的 v1 认证载荷。\n *\n * @param payload - 未修改的 v1 载荷，最大约 16 MiB 文本。\n * @param password - 加密时使用的口令。\n * @returns 原始 UTF-8 文本。\n * @throws 格式或字段非法时抛出 `TypeError`，载荷过大时抛出 `RangeError`，认证或密码\n * 失败及缺少平台能力时抛出 `Error`。\n */\nexport async function AESDecryptWithPassword(payload: string, password: string): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (payload.length > maximumPayloadLength) {\n\t\tthrow new RangeError(\"The encrypted payload exceeds the supported size.\");\n\t}\n\t// 先验证固定字段数和版本，再对高成本 KDF 与解密进行任何工作。\n\tconst parts = payload.split(\":\");\n\tif (parts.length !== 5 || parts[0] !== encryptedPayloadPrefix) {\n\t\tthrow new TypeError(\"The encrypted payload format is not supported.\");\n\t}\n\n\tlet iterations: number;\n\tlet salt: Uint8Array;\n\tlet iv: Uint8Array;\n\tlet ciphertext: Uint8Array;\n\ttry {\n\t\titerations = validateIterations(Number(parts[1]));\n\t\tsalt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tiv = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tciphertext = decodeBase64UrlBytes(parts[4] ?? \"\");\n\t\tif (salt.length !== 16 || iv.length !== 12 || ciphertext.length < 16) {\n\t\t\tthrow new TypeError(\"The encrypted payload has invalid field lengths.\");\n\t\t}\n\t} catch (cause) {\n\t\tthrow new TypeError(\"The encrypted payload contains invalid fields.\", { cause });\n\t}\n\n\tconst crypto = requireWebCrypto();\n\tconst textDecoder = getTextDecoder();\n\ttry {\n\t\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t\t// 解密密钥不允许导出，也不能被误用于加密。\n\t\tconst key = await crypto.subtle.deriveKey(\n\t\t\t{ hash: \"SHA-256\", iterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\t\tmaterial,\n\t\t\t{ length: 256, name: \"AES-GCM\" },\n\t\t\tfalse,\n\t\t\t[\"decrypt\"]\n\t\t);\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\t\tkey,\n\t\t\ttoArrayBuffer(ciphertext)\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch (cause) {\n\t\tthrow new Error(\"The payload could not be authenticated or decrypted.\", { cause });\n\t}\n}\n\n/**\n * 生成可供 RSA-OAEP/SHA-256 与 RSA-PSS/SHA-256 共用的 PEM 密钥对。\n *\n * @param modulusLength - RSA 模数位数，默认 2,048；必须是不小于 2,048 的 256 倍数。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n * @throws 模数小于 2,048 或不是 256 的倍数时抛出 `RangeError`。\n */\nexport async function GenerateRSAKeyPair(modulusLength = 2048): Promise<PemKeyPair> {\n\tif (!Number.isSafeInteger(modulusLength) || modulusLength < 2048 || modulusLength % 256 !== 0) {\n\t\tthrow new RangeError(\"modulusLength must be a safe integer of at least 2048 and divisible by 256.\");\n\t}\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(\n\t\tawait crypto.subtle.generateKey(\n\t\t\t{\n\t\t\t\thash: \"SHA-256\",\n\t\t\t\tmodulusLength,\n\t\t\t\tname: \"RSA-OAEP\",\n\t\t\t\tpublicExponent: Uint8Array.of(1, 0, 1),\n\t\t\t},\n\t\t\ttrue,\n\t\t\t[\"decrypt\", \"encrypt\"]\n\t\t)\n\t);\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 公钥加密 UTF-8 文本。\n *\n * @param plaintext - 要加密的 UTF-8 文本；长度必须满足 RSA-OAEP 模数限制。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns Base64 编码的 RSA 密文。\n * @throws 公钥格式无效或明文超过 RSA-OAEP 容量时抛出错误。\n */\nexport async function RSAEncryptOAEP(plaintext: string, publicKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"encrypt\",\n\t]);\n\tconst ciphertext = await crypto.subtle.encrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(encodeUtf8(plaintext)));\n\treturn encodeBase64Bytes(new Uint8Array(ciphertext));\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 私钥解密 Base64 密文。\n *\n * @param ciphertext - Base64 编码的 RSA 密文。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns 解密后的 UTF-8 文本。\n * @throws 私钥、Base64 或密文无效时抛出错误。\n */\nexport async function RSADecryptOAEP(ciphertext: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"decrypt\",\n\t]);\n\tconst plaintext = await crypto.subtle.decrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(decodeBase64Bytes(ciphertext)));\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 私钥签名文本或字节。\n *\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns Base64 编码的 RSA-PSS 签名；盐长度固定为 32 字节。\n * @throws 私钥格式无效或签名失败时抛出错误。\n */\nexport async function RSASignPSS(value: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"sign\",\n\t]);\n\t// PSS 盐长度固定为 SHA-256 摘要长度，与 .NET RSASignaturePadding.Pss 的默认行为一致。\n\tconst signature = await crypto.subtle.sign({ name: \"RSA-PSS\", saltLength: 32 }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 RSA-PSS 签名。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns 签名与内容、公钥匹配时返回 `true`。\n * @throws 公钥或 Base64 格式无效时抛出错误。\n */\nexport async function RSAVerifyPSS(value: string, signature: string, publicKeyPem: string): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"verify\",\n\t]);\n\t// 验证端必须使用与签名端相同的 32 字节 PSS 盐长度。\n\treturn crypto.subtle.verify(\n\t\t{ name: \"RSA-PSS\", saltLength: 32 },\n\t\tkey,\n\t\ttoArrayBuffer(decodeBase64Bytes(signature)),\n\t\ttoArrayBuffer(encodeUtf8(value))\n\t);\n}\n\n/**\n * 生成 ECDSA PEM 签名密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDSAKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve }, true, [\"sign\", \"verify\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 ECDSA 私钥签名文本或字节。\n *\n * @remarks Web Crypto 返回 IEEE P1363 固定字段拼接格式，与 .NET 实现一致。\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 EC PKCS#8 PEM 私钥。\n * @param namedCurve - 私钥使用的 NIST 曲线。\n * @returns Base64 编码的 IEEE P1363 ECDSA 签名。\n */\nexport async function ECDSASign(value: string, privateKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDSA\", namedCurve }, false, [\"sign\"]);\n\t// NIST 曲线强度分别对应 SHA-256、SHA-384 和 SHA-512；映射只在签名入口使用，因此直接保留在调用点。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\tconst signature = await crypto.subtle.sign({ hash, name: \"ECDSA\" }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 ECDSA 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 IEEE P1363 ECDSA 签名。\n * @param publicKeyPem - EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 公钥使用的 NIST 曲线。\n * @returns 签名与内容、公钥和曲线匹配时返回 `true`。\n */\nexport async function ECDSAVerify(value: string, signature: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDSA\", namedCurve }, false, [\"verify\"]);\n\t// 与签名入口保持相同的曲线/摘要映射，避免允许调用方组合不匹配的安全强度。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\treturn crypto.subtle.verify({ hash, name: \"ECDSA\" }, key, toArrayBuffer(decodeBase64Bytes(signature)), toArrayBuffer(encodeUtf8(value)));\n}\n\n/**\n * 生成 ECDH PEM 密钥协商密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDHKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve }, true, [\"deriveBits\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用本方 ECDH 私钥与对方 ECDH 公钥派生共享秘密。\n *\n * @remarks 返回值仍需经过合适的 KDF 后才能作为对称密钥，不应直接长期存储。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 曲线字段长度的原始 ECDH 共享秘密。\n */\nexport async function DeriveECDHSecret(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDH\", namedCurve }, false, [\"deriveBits\"]),\n\t\tcrypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDH\", namedCurve }, false, []),\n\t]);\n\t// P-521 字段需要按完整字节对齐，因此导出 66 字节（528 位），其余曲线直接使用字段位数。\n\tconst bitLength = namedCurve === \"P-256\" ? 256 : namedCurve === \"P-384\" ? 384 : 528;\n\tconst secret = await crypto.subtle.deriveBits({ name: \"ECDH\", public: publicKey }, privateKey, bitLength);\n\treturn new Uint8Array(secret);\n}\n\n/**\n * 使用 ECDH 后以 SHA-256 派生共享密钥。\n *\n * @remarks 相比直接使用原始共享秘密，此入口与 .NET `DeriveECDHKeySHA256` 一致并固定输出 32 字节。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 32 字节共享密钥。\n */\nexport async function DeriveECDHKeySHA256(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst secret = await DeriveECDHSecret(privateKeyPem, publicKeyPem, namedCurve);\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(secret));\n\treturn new Uint8Array(digest);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,uBAAuB;;AAG7B,MAAM,wBAAwB;;AAG9B,MAAM,uBAAuB;;AAG7B,MAAM,yBAAyB;;AAG/B,MAAM,qBAAqB;;AAG3B,MAAM,iCAAiC;;AAmBvC,MAAM,uBAAuB;;;;;;;;AA0B7B,MAAM,4BAAoC;CACzC,MAAM,SAAS,qBAAqB;CACpC,IAAI,OAAO,QAAQ,oBAAoB,YACtC,MAAM,IAAI,MAAM,mDAAmD;CAEpE,OAAO;AACR;;;;;;;AAQA,MAAM,yBAAiC;CACtC,MAAM,SAAS,oBAAoB;CACnC,MAAM,SAAU,OAAoC;CACpD,IACC,OAAO,QAAQ,YAAY,cAC3B,OAAO,OAAO,eAAe,cAC7B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,WAAW,cACzB,OAAO,OAAO,YAAY,cAC1B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,gBAAgB,cAC9B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,SAAS,cACvB,OAAO,OAAO,WAAW,YAEzB,MAAM,IAAI,MAAM,gEAAgE;CAEjF,OAAO;AACR;;;;;;;;AASA,MAAM,iBAAiB,UAAmC;CACzD,MAAM,OAAO,IAAI,WAAW,MAAM,UAAU;CAC5C,KAAK,IAAI,KAAK;CACd,OAAO,KAAK;AACb;;AAGA,MAAM,YAAY;CACjB,SAAS;CACT,QAAQ;AACT;;;;;;;;AASA,MAAM,SAAS,OAAe,UAA+B;CAG5D,OAAO,cAAc,MAAM,SAFX,kBAAkB,IAAI,WAAW,KAAK,CAClC,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,KAAK,IAAI,KAAK,GACd,aAAa,MAAM;AAC9D;;;;;;;;;AAUA,MAAM,WAAW,OAAe,UAA+B;CAC9D,MAAM,SAAS,cAAc,MAAM;CACnC,MAAM,SAAS,YAAY,MAAM;CACjC,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,QAAQ,WAAW,MAAM,KAAK,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,UAAU,cAAc,MAAM,YAAY;CAClH,MAAM,UAAU,QAAQ,MAAM,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC,QAAQ,SAAS,EAAE;CAChF,OAAO,cAAc,kBAAkB,OAAO,CAAC;AAChD;;;;;;;;AASA,MAAM,gBAAgB,OAAO,YAAgD;CAC5E,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,UAAU,GACnD,OAAO,OAAO,UAAU,QAAQ,QAAQ,SAAS,CAClD,CAAC;CACD,OAAO;EACN,YAAY,MAAM,UAAU,SAAS,UAAU;EAC/C,WAAW,MAAM,UAAU,QAAQ,SAAS;CAC7C;AACD;;;;;;;;AASA,MAAM,iBAAiB,UAAoD;CAC1E,IAAI,gBAAgB,SAAS,eAAe,OAAO,OAAO;CAC1D,MAAM,IAAI,MAAM,0CAA0C;AAC3D;;;;;;;;;AAUA,MAAM,2BAA2B,aAAiC;CACjE,MAAM,QAAQ,WAAW,QAAQ;CACjC,IAAI,MAAM,WAAW,GAAG,MAAM,IAAI,UAAU,0CAA0C;CACtF,IAAI,MAAM,SAAS,sBAClB,MAAM,IAAI,WAAW,oCAAoC,qBAAqB,QAAQ;CAEvF,OAAO;AACR;;;;;;;;AASA,MAAM,sBAAsB,eAA+B;CAC1D,IAAI,CAAC,OAAO,cAAc,UAAU,KAAK,aAAa,2BAA2B,aAAa,yBAC7F,MAAM,IAAI,WAAW,6CAA6C,wBAAwB,OAAO,wBAAwB,EAAE;CAE5H,OAAO;AACR;;AAGA,MAAM,cAAc,UAA8B,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;;AAGzH,MAAM,cAAc,UAA8B,WAAW,KAAK,CAAC,CAAC,YAAY;;;;;;;;;;;AAYhF,MAAM,mBAAmB,OAAO,OAAe,KAAa,SAAiE;CAC5H,MAAM,WAAW,WAAW,GAAG;CAC/B,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,UAAU,+BAA+B;CAE9E,MAAM,SAAS,iBAAiB;CAChC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG;EAAE;EAAM,MAAM;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CAC9F,OAAO,IAAI,WAAW,SAAS;AAChC;;;;;;;;AASA,SAAgB,oBAAoB,QAA4B;CAC/D,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,KAAK,SAAS,OAC3D,MAAM,IAAI,WAAW,sDAAsD;CAE5E,OAAO,oBAAoB,CAAC,CAAC,gBAAgB,IAAI,WAAW,MAAM,CAAC;AACpE;;;;;;;;;;AAWA,SAAgB,gBAAgB,MAAkB,OAA4B;CAC7E,MAAM,SAAS,KAAK,IAAI,KAAK,QAAQ,MAAM,MAAM;CACjD,IAAI,aAAa,KAAK,WAAW,MAAM,SAAS,IAAI;CAEpD,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG,eAAe,KAAK,UAAU,MAAM,MAAM,UAAU;CACpG,OAAO,eAAe;AACvB;;;;;;;;AASA,SAAgB,WAAW,OAAuB;CACjD,OAAO,IAAI,KAAK,CAAC,CAAC,SAAS,GAAG;AAC/B;;;;;;;;AASA,SAAgB,YAAY,OAAuB;CAClD,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY;AAC9C;;;;;;;;;AAUA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;AASA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;;;;AAYA,eAAsB,aAAa,UAAkB,MAAkB,aAAa,yBAAyB,eAAe,IAAyB;CACpJ,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,KAAK,SAAS,GAAG,MAAM,IAAI,WAAW,2EAA2E;CACrH,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,0DAA0D;CAIhF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,YAAY,CAAC;CACnH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,YAAY,mBAAmB,UAAU;EAAG,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GACzG,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;AASA,eAAsB,yBAAyB,UAAkB,aAAa,yBAA0C;CAEvH,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,aAAa,MAAM,aAAa,UAAU,MAAM,UAAU;CAChE,OAAO;EAAC;EAAoB,OAAO,UAAU;EAAG,qBAAqB,IAAI;EAAG,qBAAqB,UAAU;CAAC,CAAC,CAAC,KAAK,GAAG;AACvH;;;;;;;;AASA,eAAsB,2BAA2B,UAAkB,cAAwC;CAC1G,IAAI;EAEH,MAAM,QAAQ,aAAa,MAAM,GAAG;EACpC,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,oBAAoB,OAAO;EAClE,MAAM,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EACtD,MAAM,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAChD,MAAM,WAAW,qBAAqB,MAAM,MAAM,EAAE;EACpD,IAAI,KAAK,WAAW,MAAM,SAAS,WAAW,IAAI,OAAO;EAEzD,OAAO,gBAAgB,MADF,aAAa,UAAU,MAAM,YAAY,SAAS,MAAM,GAC9C,QAAQ;CACxC,QAAQ;EACP,OAAO;CACR;AACD;;;;;;;;;;AAWA,eAAsB,WACrB,kBACA,uBAAmB,IAAI,WAAW,GAClC,uBAAmB,IAAI,WAAW,GAClC,eAAe,IACO;CACtB,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,0DAA0D;CAIhF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,gBAAgB,GAAG,QAAQ,OAAO,CAAC,YAAY,CAAC;CACpH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,MAAM,cAAc,IAAI;EAAG,MAAM;EAAQ,MAAM,cAAc,IAAI;CAAE,GACtF,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;;;;;;;AAeA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,wCAAoC;CAE3G,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GACJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,+BAA+B;CACtD;CACA,IAAI,gBAAgB,UAAU,WAAW,OAAO,CAAC,CAAC,SAAS,OAAO,GACjE,MAAM,IAAI,WAAW,uFAAuF;CAI7G,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SAAS;AAC/I;;;;;;;;;;;;;AAcA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,wCAAoC;CAE3G,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GAEJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,+BAA+B;CACtD;CACA,MAAM,kBAAkB,kBAAkB,OAAO;CACjD,IAAI,gBAAgB,WAAW,KAAK,gBAAgB,SAAS,OAAO,GACnE,MAAM,IAAI,WAAW,kEAAkE;CAIxF,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SACpI,IACD;AACD;;;;;;;;;;AAWA,eAAsB,wBAAwB,WAAmB,KAA8B;CAC9F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,qCAAqC;CACtF,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAEvH,MAAM,QAAQ,oBAAoB,EAAE;CACpC,MAAM,YAAY,IAAI,WACrB,MAAM,OAAO,OAAO,QAAQ;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAAG,WAAW,cAAc,WAAW,SAAS,CAAC,CAAC,CAC3I;CACA,MAAM,mBAAmB,UAAU,SAAS;CAE5C,MAAM,UAAU,IAAI,WAAW,IAAI,MAAM,SAAS,KAAK,gBAAgB;CACvE,QAAQ,KAAK;CACb,QAAQ,IAAI,OAAO,CAAC;CACpB,QAAQ,IAAI,UAAU,SAAS,gBAAgB,GAAG,IAAI,MAAM,MAAM;CAClE,QAAQ,IAAI,UAAU,SAAS,GAAG,gBAAgB,GAAG,IAAI,MAAM,SAAS,EAAE;CAC1E,OAAO,kBAAkB,OAAO;AACjC;;;;;;;;;AAUA,eAAsB,wBAAwB,SAAiB,KAA8B;CAC5F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,qCAAqC;CACtF,MAAM,UAAU,kBAAkB,OAAO;CACzC,IAAI,QAAQ,SAAS,MAAM,QAAQ,OAAO,gCACzC,MAAM,IAAI,UAAU,yDAAyD;CAG9E,MAAM,QAAQ,QAAQ,SAAS,GAAG,EAAE;CACpC,MAAM,MAAM,QAAQ,SAAS,IAAI,EAAE;CACnC,MAAM,aAAa,QAAQ,SAAS,EAAE;CAEtC,MAAM,mBAAmB,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;CACtE,iBAAiB,IAAI,UAAU;CAC/B,iBAAiB,IAAI,KAAK,WAAW,MAAM;CAC3C,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5D,WACA,cAAc,gBAAgB,CAC/B;CACA,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;;;;;AAcA,eAAsB,uBAAuB,WAAmB,UAAkB,aAAa,yBAA0C;CACxI,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,MAAM,iBAAiB,WAAW,SAAS;CAC3C,IAAI,eAAe,SAAS,uBAC3B,MAAM,IAAI,WAAW,qCAAqC,sBAAsB,QAAQ;CAEzF,MAAM,sBAAsB,mBAAmB,UAAU;CACzD,MAAM,SAAS,iBAAiB;CAChC,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,KAAK,oBAAoB,EAAE;CACjC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;EAAE,MAAM;EAAW,YAAY;EAAqB,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GAC9F,UACA;EAAE,QAAQ;EAAK,MAAM;CAAU,GAC/B,OACA,CAAC,SAAS,CACX;CAEA,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;EAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;EAAG,IAAI,cAAc,EAAE;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5H,KACA,cACD;CAEA,OAAO;EACN;EACA,OAAO,mBAAmB;EAC1B,qBAAqB,IAAI;EACzB,qBAAqB,EAAE;EACvB,qBAAqB,IAAI,WAAW,UAAU,CAAC;CAChD,CAAC,CAAC,KAAK,GAAG;AACX;;;;;;;;;;AAWA,eAAsB,uBAAuB,SAAiB,UAAmC;CAChG,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,QAAQ,SAAS,sBACpB,MAAM,IAAI,WAAW,mDAAmD;CAGzE,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,wBACtC,MAAM,IAAI,UAAU,gDAAgD;CAGrE,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACH,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EAChD,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAC1C,KAAK,qBAAqB,MAAM,MAAM,EAAE;EACxC,aAAa,qBAAqB,MAAM,MAAM,EAAE;EAChD,IAAI,KAAK,WAAW,MAAM,GAAG,WAAW,MAAM,WAAW,SAAS,IACjE,MAAM,IAAI,UAAU,kDAAkD;CAExE,SAAS,OAAO;EACf,MAAM,IAAI,UAAU,kDAAkD,EAAE,MAAM,CAAC;CAChF;CAEA,MAAM,SAAS,iBAAiB;CAChC,MAAM,cAAc,eAAe;CACnC,IAAI;EACH,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;EAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;GAAE,MAAM;GAAW;GAAY,MAAM;GAAU,MAAM,cAAc,IAAI;EAAE,GACzE,UACA;GAAE,QAAQ;GAAK,MAAM;EAAU,GAC/B,OACA,CAAC,SAAS,CACX;EACA,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;GAAG,IAAI,cAAc,EAAE;GAAG,MAAM;GAAW,WAAW;EAAI,GAC5H,KACA,cAAc,UAAU,CACzB;EACA,OAAO,YAAY,OAAO,SAAS;CACpC,SAAS,OAAO;EACf,MAAM,IAAI,MAAM,wDAAwD,EAAE,MAAM,CAAC;CAClF;AACD;;;;;;;;AASA,eAAsB,mBAAmB,gBAAgB,MAA2B;CACnF,IAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,QAAQ,gBAAgB,QAAQ,GAC3F,MAAM,IAAI,WAAW,6EAA6E;CAEnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cACf,MAAM,OAAO,OAAO,YACnB;EACC,MAAM;EACN;EACA,MAAM;EACN,gBAAgB,WAAW,GAAG,GAAG,GAAG,CAAC;CACtC,GACA,MACA,CAAC,WAAW,SAAS,CACtB,CACD;CACA,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;AAUA,eAAsB,eAAe,WAAmB,cAAuC;CAC9F,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CACxI,SACD,CAAC;CACD,MAAM,aAAa,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,WAAW,SAAS,CAAC,CAAC;CAC9G,OAAO,kBAAkB,IAAI,WAAW,UAAU,CAAC;AACpD;;;;;;;;;AAUA,eAAsB,eAAe,YAAoB,eAAwC;CAChG,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CAC3I,SACD,CAAC;CACD,MAAM,YAAY,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,kBAAkB,UAAU,CAAC,CAAC;CACrH,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;AAUA,eAAsB,WAAW,OAAe,eAAwC;CACvF,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CAC1I,MACD,CAAC;CAED,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE,MAAM;EAAW,YAAY;CAAG,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACrH,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,aAAa,OAAe,WAAmB,cAAwC;CAC5G,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CACvI,QACD,CAAC;CAED,OAAO,OAAO,OAAO,OACpB;EAAE,MAAM;EAAW,YAAY;CAAG,GAClC,KACA,cAAc,kBAAkB,SAAS,CAAC,GAC1C,cAAc,WAAW,KAAK,CAAC,CAChC;AACD;;;;;;;AAQA,eAAsB,qBAAqB,aAA2B,SAA8B;CACnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAS;CAAW,GAAG,MAAM,CAAC,QAAQ,QAAQ,CAAC,CAAC;CACtH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,UAAU,OAAe,eAAuB,aAA2B,SAA0B;CAC1H,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAE5I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACzG,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,YAAY,OAAe,WAAmB,cAAsB,aAA2B,SAA2B;CAC/I,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CAE3I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,OAAO,OAAO,OAAO,OAAO;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,kBAAkB,SAAS,CAAC,GAAG,cAAc,WAAW,KAAK,CAAC,CAAC;AACxI;;;;;;;AAQA,eAAsB,oBAAoB,aAA2B,SAA8B;CAClG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAQ;CAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;CACjH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,iBAAiB,eAAuB,cAAsB,aAA2B,SAA8B;CAC5I,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,YAAY,CAAC,GAC/H,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,CAAC,CACjH,CAAC;CAED,MAAM,YAAY,eAAe,UAAU,MAAM,eAAe,UAAU,MAAM;CAChF,MAAM,SAAS,MAAM,OAAO,OAAO,WAAW;EAAE,MAAM;EAAQ,QAAQ;CAAU,GAAG,YAAY,SAAS;CACxG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;;;AAWA,eAAsB,oBAAoB,eAAuB,cAAsB,aAA2B,SAA8B;CAC/I,MAAM,SAAS,MAAM,iBAAiB,eAAe,cAAc,UAAU;CAC7E,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,MAAM,CAAC;CACtF,OAAO,IAAI,WAAW,MAAM;AAC7B"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/crypto/index.ts"],"sourcesContent":["import AES from \"crypto-js/aes.js\";\nimport CryptoCore from \"crypto-js/core.js\";\nimport Hex from \"crypto-js/enc-hex.js\";\nimport Utf8 from \"crypto-js/enc-utf8.js\";\nimport MD5 from \"crypto-js/md5.js\";\nimport ECB from \"crypto-js/mode-ecb.js\";\nimport \"crypto-js/pad-ansix923.js\";\nimport Iso10126 from \"crypto-js/pad-iso10126.js\";\nimport NoPadding from \"crypto-js/pad-nopadding.js\";\nimport Pkcs7 from \"crypto-js/pad-pkcs7.js\";\nimport ZeroPadding from \"crypto-js/pad-zeropadding.js\";\nimport SHA1 from \"crypto-js/sha1.js\";\nimport { decodeBase64Bytes, decodeBase64UrlBytes, encodeBase64Bytes, encodeBase64UrlBytes } from \"../base64/index\";\nimport { encodeUtf8, getTextDecoder } from \"../internal/text\";\n\n/** PBKDF2 默认迭代次数。 */\nconst defaultPbkdf2Iterations = 600_000;\n\n/** PBKDF2 允许的最小迭代次数。 */\nconst minimumPbkdf2Iterations = 100_000;\n\n/** PBKDF2 允许的最大迭代次数，用于限制异常输入造成的计算资源消耗。 */\nconst maximumPbkdf2Iterations = 5_000_000;\n\n/** 密码允许的最大 UTF-8 字节数。 */\nconst maximumPasswordBytes = 1024;\n\n/** 密码加密接口允许的最大明文字节数。 */\nconst maximumPlaintextBytes = 8 * 1024 * 1024;\n\n/** 密码解密接口允许的最大协议载荷字符数。 */\nconst maximumPayloadLength = 16 * 1024 * 1024;\n\n/** 密码加密载荷的协议与算法版本前缀。 */\nconst encryptedPayloadPrefix = \"FAST-AES-256-GCM-V1\";\n\n/** PBKDF2 密码哈希的协议与算法版本前缀。 */\nconst passwordHashPrefix = \"FAST-PBKDF2-SHA256-V1\";\n\n/** 直接 AES-GCM 密钥加密载荷的协议版本。 */\nconst authenticatedAesPayloadVersion = 1;\n\n/** AES 分组密码模式；与 .NET `CipherMode.CBC` 和 `CipherMode.ECB` 对应。 */\nexport type AesCipherMode = \"CBC\" | \"ECB\";\n\n/** AES 填充模式；与 .NET `PaddingMode` 中可由 CryptoJS 互操作的成员对应。 */\nexport type AesPaddingMode = \"None\" | \"PKCS7\" | \"Zeros\" | \"ANSIX923\" | \"ISO10126\";\n\n/** Web Crypto 导出的 PEM 公私钥对。 */\nexport interface PemKeyPair {\n\t/** 未加密的 PKCS#8 PEM 私钥，包含标准 `PRIVATE KEY` 头尾和 64 字符换行。 */\n\tprivateKey: string;\n\t/** SubjectPublicKeyInfo PEM 公钥，包含标准 `PUBLIC KEY` 头尾和 64 字符换行。 */\n\tpublicKey: string;\n}\n\n/** 本模块支持的 Web Crypto 椭圆曲线。 */\nexport type EcNamedCurve = \"P-256\" | \"P-384\" | \"P-521\";\n\n/**\n * 获取本模块非随机 API 所需的完整 Web Crypto 能力。\n *\n * @returns 已确认实现摘要、派生、密钥导入导出、加解密、签名和验证方法的 Crypto 对象。\n * @throws `Error` 当任一必要 SubtleCrypto 方法缺失。\n */\nconst requireWebCrypto = (): Crypto => {\n\tconst crypto = globalThis.crypto;\n\tconst subtle = crypto?.subtle;\n\tif (\n\t\ttypeof subtle?.decrypt !== \"function\" ||\n\t\ttypeof subtle.deriveBits !== \"function\" ||\n\t\ttypeof subtle.deriveKey !== \"function\" ||\n\t\ttypeof subtle.digest !== \"function\" ||\n\t\ttypeof subtle.encrypt !== \"function\" ||\n\t\ttypeof subtle.exportKey !== \"function\" ||\n\t\ttypeof subtle.generateKey !== \"function\" ||\n\t\ttypeof subtle.importKey !== \"function\" ||\n\t\ttypeof subtle.sign !== \"function\" ||\n\t\ttypeof subtle.verify !== \"function\"\n\t) {\n\t\tthrow new Error(\"当前运行环境不支持 Web Crypto SubtleCrypto。\");\n\t}\n\treturn crypto;\n};\n\n/**\n * 把 Uint8Array 复制为独立的完整 ArrayBuffer。\n *\n * @remarks 不能直接返回 `bytes.buffer`，因为输入可能只是更大 Buffer 的切片。\n * @param bytes - 源字节视图。\n * @returns 长度与视图完全一致、偏移为零的新 ArrayBuffer。\n */\nconst toArrayBuffer = (bytes: Uint8Array): ArrayBuffer => {\n\tconst copy = new Uint8Array(bytes.byteLength);\n\tcopy.set(bytes);\n\treturn copy.buffer;\n};\n\n/** 本模块导出的 PKCS#8 与 SPKI PEM 标签。 */\nconst pemLabels = {\n\tprivate: \"PRIVATE KEY\",\n\tpublic: \"PUBLIC KEY\",\n} as const;\n\n/**\n * 把 DER 内容封装为 PEM。\n *\n * @param label - PEM Begin/End 标签，不包含分隔线。\n * @param value - DER 二进制内容。\n * @returns 每行最多 64 个 Base64 字符的 PEM 文本。\n */\nconst toPem = (label: string, value: ArrayBuffer): string => {\n\tconst encoded = encodeBase64Bytes(new Uint8Array(value));\n\tconst lines = encoded.match(/.{1,64}/gu)?.join(\"\\n\") ?? \"\";\n\treturn `-----BEGIN ${label}-----\\n${lines}\\n-----END ${label}-----`;\n};\n\n/**\n * 校验 PEM 标签并还原 DER。\n *\n * @param value - PEM 文本。\n * @param label - 当前算法预期的标签。\n * @returns 独立的 DER ArrayBuffer。\n * @throws `TypeError` 当 Begin/End 标签不匹配或 Base64 内容非法。\n */\nconst fromPem = (value: string, label: string): ArrayBuffer => {\n\tconst header = `-----BEGIN ${label}-----`;\n\tconst footer = `-----END ${label}-----`;\n\tconst trimmed = value.trim();\n\tif (!trimmed.startsWith(header) || !trimmed.endsWith(footer)) throw new TypeError(`应提供 ${label} 格式的 PEM 值。`);\n\tconst encoded = trimmed.slice(header.length, -footer.length).replace(/\\s+/gu, \"\");\n\treturn toArrayBuffer(decodeBase64Bytes(encoded));\n};\n\n/**\n * 导出 Web Crypto 密钥对。\n *\n * @param keyPair - 可导出的公私钥对。\n * @returns PKCS#8 私钥和 SPKI 公钥组成的 PEM 对象。\n * @throws `Error` 当平台拒绝导出或密钥格式不兼容。\n */\nconst exportKeyPair = async (keyPair: CryptoKeyPair): Promise<PemKeyPair> => {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.exportKey(\"pkcs8\", keyPair.privateKey),\n\t\tcrypto.subtle.exportKey(\"spki\", keyPair.publicKey),\n\t]);\n\treturn {\n\t\tprivateKey: toPem(pemLabels.private, privateKey),\n\t\tpublicKey: toPem(pemLabels.public, publicKey),\n\t};\n};\n\n/**\n * 缩小 Web Crypto `generateKey` 的联合返回值。\n *\n * @param value - 平台返回的单密钥或密钥对。\n * @returns 同时具有公钥和私钥的密钥对。\n * @throws `Error` 当平台没有按请求生成密钥对。\n */\nconst assertKeyPair = (value: CryptoKey | CryptoKeyPair): CryptoKeyPair => {\n\tif (\"privateKey\" in value && \"publicKey\" in value) return value;\n\tthrow new Error(\"当前运行环境未生成密钥对。\");\n};\n\n/**\n * 校验并编码密码。\n *\n * @param password - 用户提供的密码文本。\n * @returns UTF-8 密码字节。\n * @throws `TypeError` 当密码为空。\n * @throws `RangeError` 当 UTF-8 长度超过 1,024 字节。\n */\nconst encodeValidatedPassword = (password: string): Uint8Array => {\n\tconst bytes = encodeUtf8(password);\n\tif (bytes.length === 0) throw new TypeError(\"加密密码不能为空。\");\n\tif (bytes.length > maximumPasswordBytes) {\n\t\tthrow new RangeError(`UTF-8 密码不能超过 ${maximumPasswordBytes} 字节。`);\n\t}\n\treturn bytes;\n};\n\n/**\n * 校验 PBKDF2 迭代次数。\n *\n * @param iterations - 待使用的迭代次数。\n * @returns 校验后的原始整数。\n * @throws `RangeError` 当值不是 100,000 至 5,000,000 的安全整数。\n */\nconst validateIterations = (iterations: number): number => {\n\tif (!Number.isSafeInteger(iterations) || iterations < minimumPbkdf2Iterations || iterations > maximumPbkdf2Iterations) {\n\t\tthrow new RangeError(`\\`iterations\\` 必须是 ${minimumPbkdf2Iterations} 到 ${maximumPbkdf2Iterations} 之间的安全整数。`);\n\t}\n\treturn iterations;\n};\n\n/** 把字节格式化为小写十六进制。 */\nconst toLowerHex = (value: Uint8Array): string => Array.from(value, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n/** 把字节格式化为大写十六进制。 */\nconst toUpperHex = (value: Uint8Array): string => toLowerHex(value).toUpperCase();\n\n/**\n * 使用指定的 Web Crypto HMAC 算法计算原始认证标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @param hash - HMAC 使用的 SHA-2 摘要算法。\n * @returns 算法规定长度的原始认证标签。\n * @throws `TypeError` 当密钥为空。\n * @throws `Error` 当运行时缺少所需 Web Crypto 能力。\n */\nconst computeHmacBytes = async (value: string, key: string, hash: \"SHA-256\" | \"SHA-384\" | \"SHA-512\"): Promise<Uint8Array> => {\n\tconst keyBytes = encodeUtf8(key);\n\tif (keyBytes.length === 0) throw new TypeError(\"HMAC 密钥不能为空。\");\n\n\tconst crypto = requireWebCrypto();\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { hash, name: \"HMAC\" }, false, [\"sign\"]);\n\tconst signature = await crypto.subtle.sign(\"HMAC\", cryptoKey, toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(signature);\n};\n\n/**\n * 生成随机字节。\n *\n * @remarks 优先使用 Web Crypto；平台缺少安全随机能力时回退到 `Math.random()`。\n * @param length - 0 至 65,536 的安全整数。\n * @returns 新建的 `Uint8Array`。\n * @throws 参数非法时抛出 `RangeError`。\n */\nexport function GenerateRandomBytes(length: number): Uint8Array {\n\tif (!Number.isSafeInteger(length) || length < 0 || length > 65_536) {\n\t\tthrow new RangeError(\"`length` 必须是 0 到 65,536 之间的安全整数。\");\n\t}\n\tconst bytes = new Uint8Array(length);\n\tconst crypto = globalThis.crypto;\n\tif (typeof crypto?.getRandomValues === \"function\") return crypto.getRandomValues(bytes);\n\tfor (let index = 0; index < bytes.length; index += 1) bytes[index] = Math.floor(Math.random() * 0x100);\n\treturn bytes;\n}\n\n/**\n * 以不提前退出的方式比较两个字节数组。\n *\n * @remarks JavaScript 引擎不保证严格常量时间；该函数只避免显式短路，不能替代服务端\n * 密码学库提供的 timing-safe primitive。长度是否相同仍属于可观察信息。\n * @param left - 第一字节序列。\n * @param right - 第二字节序列。\n * @returns 长度和每个字节均相同时返回 `true`。\n */\nexport function FixedTimeEquals(left: Uint8Array, right: Uint8Array): boolean {\n\tconst length = Math.max(left.length, right.length);\n\tlet difference = left.length === right.length ? 0 : 1;\n\t// 不按长度或首个差异提前退出；缺失位置按零参与累计差异。\n\tfor (let index = 0; index < length; index += 1) difference |= (left[index] ?? 0) ^ (right[index] ?? 0);\n\treturn difference === 0;\n}\n\n/**\n * 计算 MD5 摘要并返回小写十六进制文本。\n *\n * @remarks MD5 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 32 字符小写十六进制摘要。\n */\nexport function MD5Encrypt(value: string): string {\n\treturn MD5(value).toString(Hex);\n}\n\n/**\n * 计算 SHA-1 摘要并返回大写十六进制文本。\n *\n * @remarks SHA-1 仅用于非安全的普通校验，不得用于密码、签名或抗碰撞场景。\n * @param value - UTF-8 文本。\n * @returns 40 字符大写十六进制摘要。\n */\nexport function SHA1Encrypt(value: string): string {\n\treturn SHA1(value).toString(Hex).toUpperCase();\n}\n\n/**\n * 计算 SHA-256 摘要。\n *\n * @remarks SHA-256 是快速摘要，不适合直接存储或校验密码。\n * @param value - UTF-8 字符串或原始字节。\n * @returns 32 字节摘要。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-256 并格式化为十六进制。\n *\n * @param value - UTF-8 字符串或原始字节。\n * @returns 64 字符大写十六进制文本。\n * @throws 缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function SHA256Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA256Bytes(value));\n}\n\n/**\n * 计算 SHA-384 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 48 字节摘要。\n */\nexport async function SHA384Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-384\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-384 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 96 个大写十六进制字符组成的摘要。\n */\nexport async function SHA384Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA384Bytes(value));\n}\n\n/**\n * 计算 SHA-512 摘要。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 64 字节摘要。\n */\nexport async function SHA512Bytes(value: string): Promise<Uint8Array> {\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-512\", toArrayBuffer(encodeUtf8(value)));\n\treturn new Uint8Array(digest);\n}\n\n/**\n * 计算 SHA-512 并格式化为十六进制文本。\n *\n * @param value - UTF-8 文本或原始字节。\n * @returns 128 个大写十六进制字符组成的摘要。\n */\nexport async function SHA512Encrypt(value: string): Promise<string> {\n\treturn toUpperHex(await SHA512Bytes(value));\n}\n\n/**\n * 使用 HMAC-SHA-256 认证文本，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 64 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA256Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-256\"));\n}\n\n/**\n * 使用 HMAC-SHA-384 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 96 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA384Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-384\"));\n}\n\n/**\n * 使用 HMAC-SHA-512 认证文本或字节，并返回十六进制标签。\n *\n * @param value - 要认证的 UTF-8 文本或原始字节。\n * @param key - 非空的 UTF-8 文本密钥或原始密钥字节。\n * @returns 128 个小写十六进制字符组成的认证标签。\n */\nexport async function HMACSHA512Encrypt(value: string, key: string): Promise<string> {\n\treturn toLowerHex(await computeHmacBytes(value, key, \"SHA-512\"));\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 从密码派生密钥。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param salt - 至少 8 字节的盐。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @param outputLength - 输出长度，范围为 1 至 1,024 字节。\n * @returns 指定长度的派生密钥。\n * @throws 参数超过协议边界时抛出 `TypeError` 或 `RangeError`。\n */\nexport async function PBKDF2SHA256(password: string, salt: Uint8Array, iterations = defaultPbkdf2Iterations, outputLength = 32): Promise<Uint8Array> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (salt.length < 8) throw new RangeError(\"PBKDF2 盐值必须至少包含 8 字节，建议不少于 16 字节。\");\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 1024) {\n\t\tthrow new RangeError(\"`outputLength` 必须是 1 到 1,024 之间的安全整数。\");\n\t}\n\n\t// 密码作为不可导出的 PBKDF2 原始材料导入，派生结果只通过 deriveBits 返回。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", iterations: validateIterations(iterations), name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 生成可持久化的随机盐 PBKDF2-HMAC-SHA-256 密码哈希。\n *\n * @param password - 1 至 1,024 UTF-8 字节的密码。\n * @param iterations - 迭代次数，范围为 100,000 至 5,000,000。\n * @returns 包含版本、迭代次数、16 字节随机盐和 32 字节派生密钥的自描述字符串。\n */\nexport async function HashPasswordPBKDF2SHA256(password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\t// 每个密码独立生成盐，避免相同密码产生相同持久化结果并提高预计算攻击成本。\n\tconst salt = GenerateRandomBytes(16);\n\tconst derivedKey = await PBKDF2SHA256(password, salt, iterations);\n\treturn [passwordHashPrefix, String(iterations), encodeBase64UrlBytes(salt), encodeBase64UrlBytes(derivedKey)].join(\":\");\n}\n\n/**\n * 验证 {@link HashPasswordPBKDF2SHA256} 生成的密码哈希。\n *\n * @param password - 要验证的密码。\n * @param passwordHash - 自描述的 PBKDF2-HMAC-SHA-256 密码哈希。\n * @returns 格式有效且密码匹配时返回 `true`；格式无效或密码错误时返回 `false`。\n */\nexport async function VerifyPasswordPBKDF2SHA256(password: string, passwordHash: string): Promise<boolean> {\n\ttry {\n\t\t// 先验证协议版本和字段边界，再执行高成本 PBKDF2，避免无效输入消耗不受控资源。\n\t\tconst parts = passwordHash.split(\":\");\n\t\tif (parts.length !== 4 || parts[0] !== passwordHashPrefix) return false;\n\t\tconst iterations = validateIterations(Number(parts[1]));\n\t\tconst salt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tconst expected = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tif (salt.length !== 16 || expected.length !== 32) return false;\n\t\tconst actual = await PBKDF2SHA256(password, salt, iterations, expected.length);\n\t\treturn FixedTimeEquals(actual, expected);\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n/**\n * 使用 RFC 5869 HKDF-SHA-256 派生上下文隔离的密钥材料。\n *\n * @param inputKeyMaterial - 输入密钥材料，例如 ECDH 原始共享秘密。\n * @param salt - 可选盐；空值按 RFC 5869 的零盐语义处理。\n * @param info - 应用、协议和密钥用途上下文。\n * @param outputLength - 输出长度，范围为 1 至 8,160 字节。\n * @returns 与 `salt` 和 `info` 绑定的派生密钥。\n */\nexport async function HKDFSHA256(\n\tinputKeyMaterial: Uint8Array,\n\tsalt: Uint8Array = new Uint8Array(),\n\tinfo: Uint8Array = new Uint8Array(),\n\toutputLength = 32\n): Promise<Uint8Array> {\n\tif (!Number.isSafeInteger(outputLength) || outputLength < 1 || outputLength > 255 * 32) {\n\t\tthrow new RangeError(\"`outputLength` 必须是 1 到 8,160 之间的安全整数。\");\n\t}\n\n\t// Web Crypto 的 HKDF 实现内部完成 RFC 5869 Extract 和 Expand，并且不会导出中间 PRK。\n\tconst crypto = requireWebCrypto();\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(inputKeyMaterial), \"HKDF\", false, [\"deriveBits\"]);\n\tconst derived = await crypto.subtle.deriveBits(\n\t\t{ hash: \"SHA-256\", info: toArrayBuffer(info), name: \"HKDF\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\toutputLength * 8\n\t);\n\treturn new Uint8Array(derived);\n}\n\n/**\n * 使用 AES-256 对 UTF-8 文本进行分组加密。\n *\n * @remarks 密钥和 IV 分别补字符 `f` 或截断到 32、16 个 UTF-16 Code Unit，与 .NET\n * `AESEncrypt` 保持一致。CBC/ECB 不提供完整性认证，密文可能被篡改。\n * @param dataStr - 要加密的 UTF-8 文本；空白文本返回 `null`。\n * @param key - 非空白的密钥文本。\n * @param vector - 非空白的初始化向量文本；ECB 模式仍要求传入该参数以对齐 .NET 签名。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns Base64 密文；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式或填充不受支持时抛出 `RangeError`。\n */\nexport function AESEncrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError(\"`cipherMode` 必须是 `CBC` 或 `ECB`。\");\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\tpadding = ZeroPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"不支持当前 `paddingMode`。\");\n\t}\n\tif (paddingMode === \"None\" && encodeUtf8(dataStr).length % 16 !== 0) {\n\t\tthrow new RangeError(\"当 `paddingMode` 为 `None` 时，AES 明文长度必须是 16 字节的整数倍。\");\n\t}\n\n\t// 按 .NET 入口的字符规则处理密钥和 IV，再由 CryptoJS 统一按 UTF-8 编码。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.encrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString();\n}\n\n/**\n * 使用 AES-256 解密 Base64 分组密文。\n *\n * @remarks 参数归一化规则与 {@link AESEncrypt} 以及 .NET `AESDecrypt` 相同。\n * @param dataStr - Base64 密文；空白文本返回 `null`。\n * @param key - 加密时使用的密钥文本。\n * @param vector - 加密时使用的初始化向量文本。\n * @param cipherMode - AES 分组模式，默认 `CBC`。\n * @param paddingMode - AES 填充模式，默认 `PKCS7`。\n * @returns 解密后的 UTF-8 文本；输入、密钥或 IV 为空白时返回 `null`。\n * @throws 模式、填充、Base64、密钥或密文无效时抛出错误。\n */\nexport function AESDecrypt(\n\tdataStr: string,\n\tkey: string,\n\tvector: string,\n\tcipherMode: AesCipherMode = \"CBC\",\n\tpaddingMode: AesPaddingMode = \"PKCS7\"\n): string | null {\n\tif (dataStr.trim().length === 0 || key.trim().length === 0 || vector.trim().length === 0) return null;\n\tif (cipherMode !== \"CBC\" && cipherMode !== \"ECB\") throw new RangeError(\"`cipherMode` 必须是 `CBC` 或 `ECB`。\");\n\n\tlet padding = Pkcs7;\n\tswitch (paddingMode) {\n\t\tcase \"None\":\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"PKCS7\":\n\t\t\tbreak;\n\t\tcase \"Zeros\":\n\t\t\t// .NET 的 Zeros 解密不会移除尾部零字节，因此使用 NoPadding 保留完整明文块。\n\t\t\tpadding = NoPadding;\n\t\t\tbreak;\n\t\tcase \"ANSIX923\":\n\t\t\t// crypto-js 4.2.0 的 pad-ansix923 默认导出名称拼写错误，使用其注册到核心对象的实现。\n\t\t\tpadding = CryptoCore.pad.AnsiX923;\n\t\t\tbreak;\n\t\tcase \"ISO10126\":\n\t\t\tpadding = Iso10126;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new RangeError(\"不支持当前 `paddingMode`。\");\n\t}\n\tconst ciphertextBytes = decodeBase64Bytes(dataStr);\n\tif (ciphertextBytes.length === 0 || ciphertextBytes.length % 16 !== 0) {\n\t\tthrow new RangeError(\"AES 密文必须至少包含一个完整的 16 字节块。\");\n\t}\n\n\t// 解密必须重复使用加密端相同的字符补齐和截断规则。\n\tconst keyBytes = Utf8.parse(key.padEnd(32, \"f\").slice(0, 32));\n\tconst vectorBytes = Utf8.parse(vector.padEnd(16, \"f\").slice(0, 16));\n\treturn AES.decrypt(dataStr, keyBytes, cipherMode === \"CBC\" ? { iv: vectorBytes, padding } : { iv: vectorBytes, mode: ECB, padding }).toString(\n\t\tUtf8\n\t);\n}\n\n/**\n * 使用 SHA-256 归一化文本密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 输出与 .NET `AESEncryptAuthenticated` 的 v1 Base64 二进制载荷完全一致。\n * @param plaintext - 要加密的 UTF-8 文本。\n * @param key - 非空的 UTF-8 文本密钥；内部归一化为 32 字节 SHA-256 摘要。\n * @returns Base64 编码的 v1 AES-GCM 认证载荷。\n * @throws 密钥为空或运行时缺少 Web Crypto 时抛出错误。\n */\nexport async function AESEncryptAuthenticated(plaintext: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"加密密钥不能为空。\");\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"encrypt\"]);\n\t// 96 位随机 nonce 是 GCM 的标准高效长度；每次加密都生成新值，避免同一密钥下重复。\n\tconst nonce = GenerateRandomBytes(12);\n\tconst encrypted = new Uint8Array(\n\t\tawait crypto.subtle.encrypt({ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 }, cryptoKey, toArrayBuffer(encodeUtf8(plaintext)))\n\t);\n\tconst ciphertextLength = encrypted.length - 16;\n\t// .NET v1 协议字段顺序固定为 version || nonce || tag || ciphertext。\n\tconst payload = new Uint8Array(1 + nonce.length + 16 + ciphertextLength);\n\tpayload[0] = authenticatedAesPayloadVersion;\n\tpayload.set(nonce, 1);\n\tpayload.set(encrypted.subarray(ciphertextLength), 1 + nonce.length);\n\tpayload.set(encrypted.subarray(0, ciphertextLength), 1 + nonce.length + 16);\n\treturn encodeBase64Bytes(payload);\n}\n\n/**\n * 解密并认证 .NET `AESEncryptAuthenticated` 或 {@link AESEncryptAuthenticated} 生成的载荷。\n *\n * @param payload - Base64 编码的 v1 AES-GCM 二进制载荷。\n * @param key - 加密时使用的非空 UTF-8 文本密钥。\n * @returns 通过认证的 UTF-8 明文。\n * @throws 载荷格式无效、密钥错误或认证失败时抛出错误。\n */\nexport async function AESDecryptAuthenticated(payload: string, key: string): Promise<string> {\n\tif (key.trim().length === 0) throw new TypeError(\"加密密钥不能为空。\");\n\tconst decoded = decodeBase64Bytes(payload);\n\tif (decoded.length < 29 || decoded[0] !== authenticatedAesPayloadVersion) {\n\t\tthrow new TypeError(\"不支持该 AES-GCM 载荷格式或版本。\");\n\t}\n\n\tconst nonce = decoded.subarray(1, 13);\n\tconst tag = decoded.subarray(13, 29);\n\tconst ciphertext = decoded.subarray(29);\n\t// Web Crypto 接收 ciphertext || tag，因此把 .NET v1 的独立字段恢复为 Web Crypto 输入顺序。\n\tconst ciphertextAndTag = new Uint8Array(ciphertext.length + tag.length);\n\tciphertextAndTag.set(ciphertext);\n\tciphertextAndTag.set(tag, ciphertext.length);\n\tconst crypto = requireWebCrypto();\n\tconst keyBytes = await SHA256Bytes(key);\n\tconst cryptoKey = await crypto.subtle.importKey(\"raw\", toArrayBuffer(keyBytes), { name: \"AES-GCM\" }, false, [\"decrypt\"]);\n\tconst plaintext = await crypto.subtle.decrypt(\n\t\t{ iv: toArrayBuffer(nonce), name: \"AES-GCM\", tagLength: 128 },\n\t\tcryptoKey,\n\t\ttoArrayBuffer(ciphertextAndTag)\n\t);\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 PBKDF2-HMAC-SHA-256 派生密钥，再以 AES-256-GCM 认证加密 UTF-8 文本。\n *\n * @remarks 每次调用生成独立 16 字节盐与 12 字节 IV。输出是与 .NET `AESEncryptWithPassword`\n * 一致的 v1 自描述载荷，不应由业务代码手动拆分或修改。密码加密不替代密钥管理。\n * @param plaintext - 原始文本，不进行 JSON 推断；UTF-8 编码后最大 8 MiB。\n * @param password - 1 至 1024 UTF-8 字节的秘密口令。\n * @param iterations - PBKDF2 工作因子，默认 600,000。\n * @returns 认证密文字符串；相同输入每次产生不同结果。\n * @throws 口令非法时抛出 `TypeError` 或 `RangeError`；明文过大时抛出 `RangeError`；\n * 运行时缺少 Web Crypto 或 Encoding API 时抛出 `Error`。\n */\nexport async function AESEncryptWithPassword(plaintext: string, password: string, iterations = defaultPbkdf2Iterations): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tconst plaintextBytes = encodeUtf8(plaintext);\n\tif (plaintextBytes.length > maximumPlaintextBytes) {\n\t\tthrow new RangeError(`UTF-8 明文不能超过 ${maximumPlaintextBytes} 字节。`);\n\t}\n\tconst validatedIterations = validateIterations(iterations);\n\tconst crypto = requireWebCrypto();\n\tconst salt = GenerateRandomBytes(16);\n\tconst iv = GenerateRandomBytes(12);\n\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t// AES-GCM 密钥只允许加密，且不允许从 Web Crypto 导出。\n\tconst key = await crypto.subtle.deriveKey(\n\t\t{ hash: \"SHA-256\", iterations: validatedIterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\tmaterial,\n\t\t{ length: 256, name: \"AES-GCM\" },\n\t\tfalse,\n\t\t[\"encrypt\"]\n\t);\n\t// Prefix 同时作为明文版本字段和 AAD，攻击者无法在不破坏认证标签的情况下替换协议版本。\n\tconst ciphertext = await crypto.subtle.encrypt(\n\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\tkey,\n\t\tplaintextBytes\n\t);\n\t// 字段顺序属于持久化协议：版本、KDF 成本、盐、IV、带 GCM Tag 的密文。\n\treturn [\n\t\tencryptedPayloadPrefix,\n\t\tString(validatedIterations),\n\t\tencodeBase64UrlBytes(salt),\n\t\tencodeBase64UrlBytes(iv),\n\t\tencodeBase64UrlBytes(new Uint8Array(ciphertext)),\n\t].join(\":\");\n}\n\n/**\n * 解密 {@link AESEncryptWithPassword} 生成的 v1 认证载荷。\n *\n * @param payload - 未修改的 v1 载荷，最大约 16 MiB 文本。\n * @param password - 加密时使用的口令。\n * @returns 原始 UTF-8 文本。\n * @throws 格式或字段非法时抛出 `TypeError`，载荷过大时抛出 `RangeError`，认证或密码\n * 失败及缺少平台能力时抛出 `Error`。\n */\nexport async function AESDecryptWithPassword(payload: string, password: string): Promise<string> {\n\tconst passwordBytes = encodeValidatedPassword(password);\n\tif (payload.length > maximumPayloadLength) {\n\t\tthrow new RangeError(\"加密载荷超出支持的大小。\");\n\t}\n\t// 先验证固定字段数和版本，再对高成本 KDF 与解密进行任何工作。\n\tconst parts = payload.split(\":\");\n\tif (parts.length !== 5 || parts[0] !== encryptedPayloadPrefix) {\n\t\tthrow new TypeError(\"不支持该加密载荷格式。\");\n\t}\n\n\tlet iterations: number;\n\tlet salt: Uint8Array;\n\tlet iv: Uint8Array;\n\tlet ciphertext: Uint8Array;\n\ttry {\n\t\titerations = validateIterations(Number(parts[1]));\n\t\tsalt = decodeBase64UrlBytes(parts[2] ?? \"\");\n\t\tiv = decodeBase64UrlBytes(parts[3] ?? \"\");\n\t\tciphertext = decodeBase64UrlBytes(parts[4] ?? \"\");\n\t\tif (salt.length !== 16 || iv.length !== 12 || ciphertext.length < 16) {\n\t\t\tthrow new TypeError(\"加密载荷的字段长度无效。\");\n\t\t}\n\t} catch (cause) {\n\t\tthrow new TypeError(\"加密载荷包含无效字段。\", { cause });\n\t}\n\n\tconst crypto = requireWebCrypto();\n\tconst textDecoder = getTextDecoder();\n\ttry {\n\t\tconst material = await crypto.subtle.importKey(\"raw\", toArrayBuffer(passwordBytes), \"PBKDF2\", false, [\"deriveKey\"]);\n\t\t// 解密密钥不允许导出，也不能被误用于加密。\n\t\tconst key = await crypto.subtle.deriveKey(\n\t\t\t{ hash: \"SHA-256\", iterations, name: \"PBKDF2\", salt: toArrayBuffer(salt) },\n\t\t\tmaterial,\n\t\t\t{ length: 256, name: \"AES-GCM\" },\n\t\t\tfalse,\n\t\t\t[\"decrypt\"]\n\t\t);\n\t\tconst plaintext = await crypto.subtle.decrypt(\n\t\t\t{ additionalData: toArrayBuffer(encodeUtf8(encryptedPayloadPrefix)), iv: toArrayBuffer(iv), name: \"AES-GCM\", tagLength: 128 },\n\t\t\tkey,\n\t\t\ttoArrayBuffer(ciphertext)\n\t\t);\n\t\treturn textDecoder.decode(plaintext);\n\t} catch (cause) {\n\t\tthrow new Error(\"无法认证或解密载荷。\", { cause });\n\t}\n}\n\n/**\n * 生成可供 RSA-OAEP/SHA-256 与 RSA-PSS/SHA-256 共用的 PEM 密钥对。\n *\n * @param modulusLength - RSA 模数位数，默认 2,048；必须是不小于 2,048 的 256 倍数。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n * @throws 模数小于 2,048 或不是 256 的倍数时抛出 `RangeError`。\n */\nexport async function GenerateRSAKeyPair(modulusLength = 2048): Promise<PemKeyPair> {\n\tif (!Number.isSafeInteger(modulusLength) || modulusLength < 2048 || modulusLength % 256 !== 0) {\n\t\tthrow new RangeError(\"`modulusLength` 必须是大于或等于 2048 且能被 256 整除的安全整数。\");\n\t}\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(\n\t\tawait crypto.subtle.generateKey(\n\t\t\t{\n\t\t\t\thash: \"SHA-256\",\n\t\t\t\tmodulusLength,\n\t\t\t\tname: \"RSA-OAEP\",\n\t\t\t\tpublicExponent: Uint8Array.of(1, 0, 1),\n\t\t\t},\n\t\t\ttrue,\n\t\t\t[\"decrypt\", \"encrypt\"]\n\t\t)\n\t);\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 公钥加密 UTF-8 文本。\n *\n * @param plaintext - 要加密的 UTF-8 文本；长度必须满足 RSA-OAEP 模数限制。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns Base64 编码的 RSA 密文。\n * @throws 公钥格式无效或明文超过 RSA-OAEP 容量时抛出错误。\n */\nexport async function RSAEncryptOAEP(plaintext: string, publicKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"encrypt\",\n\t]);\n\tconst ciphertext = await crypto.subtle.encrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(encodeUtf8(plaintext)));\n\treturn encodeBase64Bytes(new Uint8Array(ciphertext));\n}\n\n/**\n * 使用 RSA-OAEP/SHA-256 私钥解密 Base64 密文。\n *\n * @param ciphertext - Base64 编码的 RSA 密文。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns 解密后的 UTF-8 文本。\n * @throws 私钥、Base64 或密文无效时抛出错误。\n */\nexport async function RSADecryptOAEP(ciphertext: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-OAEP\" }, false, [\n\t\t\"decrypt\",\n\t]);\n\tconst plaintext = await crypto.subtle.decrypt({ name: \"RSA-OAEP\" }, key, toArrayBuffer(decodeBase64Bytes(ciphertext)));\n\treturn getTextDecoder().decode(plaintext);\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 私钥签名文本或字节。\n *\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 PKCS#8 PEM 私钥。\n * @returns Base64 编码的 RSA-PSS 签名；盐长度固定为 32 字节。\n * @throws 私钥格式无效或签名失败时抛出错误。\n */\nexport async function RSASignPSS(value: string, privateKeyPem: string): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"sign\",\n\t]);\n\t// PSS 盐长度固定为 SHA-256 摘要长度，与 .NET RSASignaturePadding.Pss 的默认行为一致。\n\tconst signature = await crypto.subtle.sign({ name: \"RSA-PSS\", saltLength: 32 }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 RSA-PSS/SHA-256 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 RSA-PSS 签名。\n * @param publicKeyPem - SubjectPublicKeyInfo PEM 公钥。\n * @returns 签名与内容、公钥匹配时返回 `true`。\n * @throws 公钥或 Base64 格式无效时抛出错误。\n */\nexport async function RSAVerifyPSS(value: string, signature: string, publicKeyPem: string): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { hash: \"SHA-256\", name: \"RSA-PSS\" }, false, [\n\t\t\"verify\",\n\t]);\n\t// 验证端必须使用与签名端相同的 32 字节 PSS 盐长度。\n\treturn crypto.subtle.verify(\n\t\t{ name: \"RSA-PSS\", saltLength: 32 },\n\t\tkey,\n\t\ttoArrayBuffer(decodeBase64Bytes(signature)),\n\t\ttoArrayBuffer(encodeUtf8(value))\n\t);\n}\n\n/**\n * 生成 ECDSA PEM 签名密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDSAKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDSA\", namedCurve }, true, [\"sign\", \"verify\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用 ECDSA 私钥签名文本或字节。\n *\n * @remarks Web Crypto 返回 IEEE P1363 固定字段拼接格式，与 .NET 实现一致。\n * @param value - 要签名的 UTF-8 文本或原始字节。\n * @param privateKeyPem - 未加密的 EC PKCS#8 PEM 私钥。\n * @param namedCurve - 私钥使用的 NIST 曲线。\n * @returns Base64 编码的 IEEE P1363 ECDSA 签名。\n */\nexport async function ECDSASign(value: string, privateKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<string> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDSA\", namedCurve }, false, [\"sign\"]);\n\t// NIST 曲线强度分别对应 SHA-256、SHA-384 和 SHA-512；映射只在签名入口使用，因此直接保留在调用点。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\tconst signature = await crypto.subtle.sign({ hash, name: \"ECDSA\" }, key, toArrayBuffer(encodeUtf8(value)));\n\treturn encodeBase64Bytes(new Uint8Array(signature));\n}\n\n/**\n * 使用 ECDSA 公钥验证 Base64 签名。\n *\n * @param value - 签名时使用的 UTF-8 文本或原始字节。\n * @param signature - Base64 编码的 IEEE P1363 ECDSA 签名。\n * @param publicKeyPem - EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 公钥使用的 NIST 曲线。\n * @returns 签名与内容、公钥和曲线匹配时返回 `true`。\n */\nexport async function ECDSAVerify(value: string, signature: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<boolean> {\n\tconst crypto = requireWebCrypto();\n\tconst key = await crypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDSA\", namedCurve }, false, [\"verify\"]);\n\t// 与签名入口保持相同的曲线/摘要映射，避免允许调用方组合不匹配的安全强度。\n\tconst hash = namedCurve === \"P-256\" ? \"SHA-256\" : namedCurve === \"P-384\" ? \"SHA-384\" : \"SHA-512\";\n\treturn crypto.subtle.verify({ hash, name: \"ECDSA\" }, key, toArrayBuffer(decodeBase64Bytes(signature)), toArrayBuffer(encodeUtf8(value)));\n}\n\n/**\n * 生成 ECDH PEM 密钥协商密钥对。\n *\n * @param namedCurve - NIST 曲线：P-256、P-384 或 P-521。\n * @returns 未加密 PKCS#8 私钥和 SubjectPublicKeyInfo 公钥组成的 PEM 密钥对。\n */\nexport async function GenerateECDHKeyPair(namedCurve: EcNamedCurve = \"P-256\"): Promise<PemKeyPair> {\n\tconst crypto = requireWebCrypto();\n\tconst keyPair = assertKeyPair(await crypto.subtle.generateKey({ name: \"ECDH\", namedCurve }, true, [\"deriveBits\"]));\n\treturn exportKeyPair(keyPair);\n}\n\n/**\n * 使用本方 ECDH 私钥与对方 ECDH 公钥派生共享秘密。\n *\n * @remarks 返回值仍需经过合适的 KDF 后才能作为对称密钥，不应直接长期存储。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 曲线字段长度的原始 ECDH 共享秘密。\n */\nexport async function DeriveECDHSecret(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst crypto = requireWebCrypto();\n\tconst [privateKey, publicKey] = await Promise.all([\n\t\tcrypto.subtle.importKey(\"pkcs8\", fromPem(privateKeyPem, pemLabels.private), { name: \"ECDH\", namedCurve }, false, [\"deriveBits\"]),\n\t\tcrypto.subtle.importKey(\"spki\", fromPem(publicKeyPem, pemLabels.public), { name: \"ECDH\", namedCurve }, false, []),\n\t]);\n\t// P-521 字段需要按完整字节对齐，因此导出 66 字节（528 位），其余曲线直接使用字段位数。\n\tconst bitLength = namedCurve === \"P-256\" ? 256 : namedCurve === \"P-384\" ? 384 : 528;\n\tconst secret = await crypto.subtle.deriveBits({ name: \"ECDH\", public: publicKey }, privateKey, bitLength);\n\treturn new Uint8Array(secret);\n}\n\n/**\n * 使用 ECDH 后以 SHA-256 派生共享密钥。\n *\n * @remarks 相比直接使用原始共享秘密，此入口与 .NET `DeriveECDHKeySHA256` 一致并固定输出 32 字节。\n * @param privateKeyPem - 本方未加密的 EC PKCS#8 PEM 私钥。\n * @param publicKeyPem - 对方的 EC SubjectPublicKeyInfo PEM 公钥。\n * @param namedCurve - 双方密钥使用的 NIST 曲线。\n * @returns 32 字节共享密钥。\n */\nexport async function DeriveECDHKeySHA256(privateKeyPem: string, publicKeyPem: string, namedCurve: EcNamedCurve = \"P-256\"): Promise<Uint8Array> {\n\tconst secret = await DeriveECDHSecret(privateKeyPem, publicKeyPem, namedCurve);\n\tconst digest = await requireWebCrypto().subtle.digest(\"SHA-256\", toArrayBuffer(secret));\n\treturn new Uint8Array(digest);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,0BAA0B;;AAGhC,MAAM,uBAAuB;;AAG7B,MAAM,wBAAwB;;AAG9B,MAAM,uBAAuB;;AAG7B,MAAM,yBAAyB;;AAG/B,MAAM,qBAAqB;;AAG3B,MAAM,iCAAiC;;;;;;;AAyBvC,MAAM,yBAAiC;CACtC,MAAM,SAAS,WAAW;CAC1B,MAAM,SAAS,QAAQ;CACvB,IACC,OAAO,QAAQ,YAAY,cAC3B,OAAO,OAAO,eAAe,cAC7B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,WAAW,cACzB,OAAO,OAAO,YAAY,cAC1B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,gBAAgB,cAC9B,OAAO,OAAO,cAAc,cAC5B,OAAO,OAAO,SAAS,cACvB,OAAO,OAAO,WAAW,YAEzB,MAAM,IAAI,MAAM,oCAAoC;CAErD,OAAO;AACR;;;;;;;;AASA,MAAM,iBAAiB,UAAmC;CACzD,MAAM,OAAO,IAAI,WAAW,MAAM,UAAU;CAC5C,KAAK,IAAI,KAAK;CACd,OAAO,KAAK;AACb;;AAGA,MAAM,YAAY;CACjB,SAAS;CACT,QAAQ;AACT;;;;;;;;AASA,MAAM,SAAS,OAAe,UAA+B;CAG5D,OAAO,cAAc,MAAM,SAFX,kBAAkB,IAAI,WAAW,KAAK,CAClC,CAAC,CAAC,MAAM,WAAW,CAAC,EAAE,KAAK,IAAI,KAAK,GACd,aAAa,MAAM;AAC9D;;;;;;;;;AAUA,MAAM,WAAW,OAAe,UAA+B;CAC9D,MAAM,SAAS,cAAc,MAAM;CACnC,MAAM,SAAS,YAAY,MAAM;CACjC,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,QAAQ,WAAW,MAAM,KAAK,CAAC,QAAQ,SAAS,MAAM,GAAG,MAAM,IAAI,UAAU,OAAO,MAAM,YAAY;CAC3G,MAAM,UAAU,QAAQ,MAAM,OAAO,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC,QAAQ,SAAS,EAAE;CAChF,OAAO,cAAc,kBAAkB,OAAO,CAAC;AAChD;;;;;;;;AASA,MAAM,gBAAgB,OAAO,YAAgD;CAC5E,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,UAAU,GACnD,OAAO,OAAO,UAAU,QAAQ,QAAQ,SAAS,CAClD,CAAC;CACD,OAAO;EACN,YAAY,MAAM,UAAU,SAAS,UAAU;EAC/C,WAAW,MAAM,UAAU,QAAQ,SAAS;CAC7C;AACD;;;;;;;;AASA,MAAM,iBAAiB,UAAoD;CAC1E,IAAI,gBAAgB,SAAS,eAAe,OAAO,OAAO;CAC1D,MAAM,IAAI,MAAM,eAAe;AAChC;;;;;;;;;AAUA,MAAM,2BAA2B,aAAiC;CACjE,MAAM,QAAQ,WAAW,QAAQ;CACjC,IAAI,MAAM,WAAW,GAAG,MAAM,IAAI,UAAU,WAAW;CACvD,IAAI,MAAM,SAAS,sBAClB,MAAM,IAAI,WAAW,gBAAgB,qBAAqB,KAAK;CAEhE,OAAO;AACR;;;;;;;;AASA,MAAM,sBAAsB,eAA+B;CAC1D,IAAI,CAAC,OAAO,cAAc,UAAU,KAAK,aAAa,2BAA2B,aAAa,yBAC7F,MAAM,IAAI,WAAW,sBAAsB,wBAAwB,KAAK,wBAAwB,UAAU;CAE3G,OAAO;AACR;;AAGA,MAAM,cAAc,UAA8B,MAAM,KAAK,QAAQ,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;;AAGzH,MAAM,cAAc,UAA8B,WAAW,KAAK,CAAC,CAAC,YAAY;;;;;;;;;;;AAYhF,MAAM,mBAAmB,OAAO,OAAe,KAAa,SAAiE;CAC5H,MAAM,WAAW,WAAW,GAAG;CAC/B,IAAI,SAAS,WAAW,GAAG,MAAM,IAAI,UAAU,cAAc;CAE7D,MAAM,SAAS,iBAAiB;CAChC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG;EAAE;EAAM,MAAM;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CAC9F,OAAO,IAAI,WAAW,SAAS;AAChC;;;;;;;;;AAUA,SAAgB,oBAAoB,QAA4B;CAC/D,IAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,KAAK,SAAS,OAC3D,MAAM,IAAI,WAAW,kCAAkC;CAExD,MAAM,QAAQ,IAAI,WAAW,MAAM;CACnC,MAAM,SAAS,WAAW;CAC1B,IAAI,OAAO,QAAQ,oBAAoB,YAAY,OAAO,OAAO,gBAAgB,KAAK;CACtF,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG,MAAM,SAAS,KAAK,MAAM,KAAK,OAAO,IAAI,GAAK;CACrG,OAAO;AACR;;;;;;;;;;AAWA,SAAgB,gBAAgB,MAAkB,OAA4B;CAC7E,MAAM,SAAS,KAAK,IAAI,KAAK,QAAQ,MAAM,MAAM;CACjD,IAAI,aAAa,KAAK,WAAW,MAAM,SAAS,IAAI;CAEpD,KAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,SAAS,GAAG,eAAe,KAAK,UAAU,MAAM,MAAM,UAAU;CACpG,OAAO,eAAe;AACvB;;;;;;;;AASA,SAAgB,WAAW,OAAuB;CACjD,OAAO,IAAI,KAAK,CAAC,CAAC,SAAS,GAAG;AAC/B;;;;;;;;AASA,SAAgB,YAAY,OAAuB;CAClD,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY;AAC9C;;;;;;;;;AAUA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;AASA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;AAQA,eAAsB,YAAY,OAAoC;CACrE,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,WAAW,KAAK,CAAC,CAAC;CACjG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;AAQA,eAAsB,cAAc,OAAgC;CACnE,OAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC3C;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;AASA,eAAsB,kBAAkB,OAAe,KAA8B;CACpF,OAAO,WAAW,MAAM,iBAAiB,OAAO,KAAK,SAAS,CAAC;AAChE;;;;;;;;;;;AAYA,eAAsB,aAAa,UAAkB,MAAkB,aAAa,yBAAyB,eAAe,IAAyB;CACpJ,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,KAAK,SAAS,GAAG,MAAM,IAAI,WAAW,mCAAmC;CAC7E,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,uCAAuC;CAI7D,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,YAAY,CAAC;CACnH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,YAAY,mBAAmB,UAAU;EAAG,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GACzG,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;AASA,eAAsB,yBAAyB,UAAkB,aAAa,yBAA0C;CAEvH,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,aAAa,MAAM,aAAa,UAAU,MAAM,UAAU;CAChE,OAAO;EAAC;EAAoB,OAAO,UAAU;EAAG,qBAAqB,IAAI;EAAG,qBAAqB,UAAU;CAAC,CAAC,CAAC,KAAK,GAAG;AACvH;;;;;;;;AASA,eAAsB,2BAA2B,UAAkB,cAAwC;CAC1G,IAAI;EAEH,MAAM,QAAQ,aAAa,MAAM,GAAG;EACpC,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,oBAAoB,OAAO;EAClE,MAAM,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EACtD,MAAM,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAChD,MAAM,WAAW,qBAAqB,MAAM,MAAM,EAAE;EACpD,IAAI,KAAK,WAAW,MAAM,SAAS,WAAW,IAAI,OAAO;EAEzD,OAAO,gBAAgB,MADF,aAAa,UAAU,MAAM,YAAY,SAAS,MAAM,GAC9C,QAAQ;CACxC,QAAQ;EACP,OAAO;CACR;AACD;;;;;;;;;;AAWA,eAAsB,WACrB,kBACA,uBAAmB,IAAI,WAAW,GAClC,uBAAmB,IAAI,WAAW,GAClC,eAAe,IACO;CACtB,IAAI,CAAC,OAAO,cAAc,YAAY,KAAK,eAAe,KAAK,eAAe,MAC7E,MAAM,IAAI,WAAW,uCAAuC;CAI7D,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,gBAAgB,GAAG,QAAQ,OAAO,CAAC,YAAY,CAAC;CACpH,MAAM,UAAU,MAAM,OAAO,OAAO,WACnC;EAAE,MAAM;EAAW,MAAM,cAAc,IAAI;EAAG,MAAM;EAAQ,MAAM,cAAc,IAAI;CAAE,GACtF,UACA,eAAe,CAChB;CACA,OAAO,IAAI,WAAW,OAAO;AAC9B;;;;;;;;;;;;;;AAeA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,iCAAiC;CAExG,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GACJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,sBAAsB;CAC7C;CACA,IAAI,gBAAgB,UAAU,WAAW,OAAO,CAAC,CAAC,SAAS,OAAO,GACjE,MAAM,IAAI,WAAW,mDAAmD;CAIzE,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SAAS;AAC/I;;;;;;;;;;;;;AAcA,SAAgB,WACf,SACA,KACA,QACA,aAA4B,OAC5B,cAA8B,SACd;CAChB,IAAI,QAAQ,KAAK,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,KAAK,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,OAAO;CACjG,IAAI,eAAe,SAAS,eAAe,OAAO,MAAM,IAAI,WAAW,iCAAiC;CAExG,IAAI,UAAU;CACd,QAAQ,aAAR;EACC,KAAK;GACJ,UAAU;GACV;EACD,KAAK,SACJ;EACD,KAAK;GAEJ,UAAU;GACV;EACD,KAAK;GAEJ,UAAU,WAAW,IAAI;GACzB;EACD,KAAK;GACJ,UAAU;GACV;EACD,SACC,MAAM,IAAI,WAAW,sBAAsB;CAC7C;CACA,MAAM,kBAAkB,kBAAkB,OAAO;CACjD,IAAI,gBAAgB,WAAW,KAAK,gBAAgB,SAAS,OAAO,GACnE,MAAM,IAAI,WAAW,2BAA2B;CAIjD,MAAM,WAAW,KAAK,MAAM,IAAI,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAC5D,MAAM,cAAc,KAAK,MAAM,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC;CAClE,OAAO,IAAI,QAAQ,SAAS,UAAU,eAAe,QAAQ;EAAE,IAAI;EAAa;CAAQ,IAAI;EAAE,IAAI;EAAa,MAAM;EAAK;CAAQ,CAAC,CAAC,CAAC,SACpI,IACD;AACD;;;;;;;;;;AAWA,eAAsB,wBAAwB,WAAmB,KAA8B;CAC9F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,WAAW;CAC5D,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CAEvH,MAAM,QAAQ,oBAAoB,EAAE;CACpC,MAAM,YAAY,IAAI,WACrB,MAAM,OAAO,OAAO,QAAQ;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAAG,WAAW,cAAc,WAAW,SAAS,CAAC,CAAC,CAC3I;CACA,MAAM,mBAAmB,UAAU,SAAS;CAE5C,MAAM,UAAU,IAAI,WAAW,IAAI,MAAM,SAAS,KAAK,gBAAgB;CACvE,QAAQ,KAAK;CACb,QAAQ,IAAI,OAAO,CAAC;CACpB,QAAQ,IAAI,UAAU,SAAS,gBAAgB,GAAG,IAAI,MAAM,MAAM;CAClE,QAAQ,IAAI,UAAU,SAAS,GAAG,gBAAgB,GAAG,IAAI,MAAM,SAAS,EAAE;CAC1E,OAAO,kBAAkB,OAAO;AACjC;;;;;;;;;AAUA,eAAsB,wBAAwB,SAAiB,KAA8B;CAC5F,IAAI,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,UAAU,WAAW;CAC5D,MAAM,UAAU,kBAAkB,OAAO;CACzC,IAAI,QAAQ,SAAS,MAAM,QAAQ,OAAO,gCACzC,MAAM,IAAI,UAAU,uBAAuB;CAG5C,MAAM,QAAQ,QAAQ,SAAS,GAAG,EAAE;CACpC,MAAM,MAAM,QAAQ,SAAS,IAAI,EAAE;CACnC,MAAM,aAAa,QAAQ,SAAS,EAAE;CAEtC,MAAM,mBAAmB,IAAI,WAAW,WAAW,SAAS,IAAI,MAAM;CACtE,iBAAiB,IAAI,UAAU;CAC/B,iBAAiB,IAAI,KAAK,WAAW,MAAM;CAC3C,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,MAAM,YAAY,GAAG;CACtC,MAAM,YAAY,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,QAAQ,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;CACvH,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;EAAE,IAAI,cAAc,KAAK;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5D,WACA,cAAc,gBAAgB,CAC/B;CACA,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;;;;;AAcA,eAAsB,uBAAuB,WAAmB,UAAkB,aAAa,yBAA0C;CACxI,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,MAAM,iBAAiB,WAAW,SAAS;CAC3C,IAAI,eAAe,SAAS,uBAC3B,MAAM,IAAI,WAAW,gBAAgB,sBAAsB,KAAK;CAEjE,MAAM,sBAAsB,mBAAmB,UAAU;CACzD,MAAM,SAAS,iBAAiB;CAChC,MAAM,OAAO,oBAAoB,EAAE;CACnC,MAAM,KAAK,oBAAoB,EAAE;CACjC,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;CAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;EAAE,MAAM;EAAW,YAAY;EAAqB,MAAM;EAAU,MAAM,cAAc,IAAI;CAAE,GAC9F,UACA;EAAE,QAAQ;EAAK,MAAM;CAAU,GAC/B,OACA,CAAC,SAAS,CACX;CAEA,MAAM,aAAa,MAAM,OAAO,OAAO,QACtC;EAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;EAAG,IAAI,cAAc,EAAE;EAAG,MAAM;EAAW,WAAW;CAAI,GAC5H,KACA,cACD;CAEA,OAAO;EACN;EACA,OAAO,mBAAmB;EAC1B,qBAAqB,IAAI;EACzB,qBAAqB,EAAE;EACvB,qBAAqB,IAAI,WAAW,UAAU,CAAC;CAChD,CAAC,CAAC,KAAK,GAAG;AACX;;;;;;;;;;AAWA,eAAsB,uBAAuB,SAAiB,UAAmC;CAChG,MAAM,gBAAgB,wBAAwB,QAAQ;CACtD,IAAI,QAAQ,SAAS,sBACpB,MAAM,IAAI,WAAW,cAAc;CAGpC,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,KAAK,MAAM,OAAO,wBACtC,MAAM,IAAI,UAAU,aAAa;CAGlC,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;EACH,aAAa,mBAAmB,OAAO,MAAM,EAAE,CAAC;EAChD,OAAO,qBAAqB,MAAM,MAAM,EAAE;EAC1C,KAAK,qBAAqB,MAAM,MAAM,EAAE;EACxC,aAAa,qBAAqB,MAAM,MAAM,EAAE;EAChD,IAAI,KAAK,WAAW,MAAM,GAAG,WAAW,MAAM,WAAW,SAAS,IACjE,MAAM,IAAI,UAAU,cAAc;CAEpC,SAAS,OAAO;EACf,MAAM,IAAI,UAAU,eAAe,EAAE,MAAM,CAAC;CAC7C;CAEA,MAAM,SAAS,iBAAiB;CAChC,MAAM,cAAc,eAAe;CACnC,IAAI;EACH,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,cAAc,aAAa,GAAG,UAAU,OAAO,CAAC,WAAW,CAAC;EAElH,MAAM,MAAM,MAAM,OAAO,OAAO,UAC/B;GAAE,MAAM;GAAW;GAAY,MAAM;GAAU,MAAM,cAAc,IAAI;EAAE,GACzE,UACA;GAAE,QAAQ;GAAK,MAAM;EAAU,GAC/B,OACA,CAAC,SAAS,CACX;EACA,MAAM,YAAY,MAAM,OAAO,OAAO,QACrC;GAAE,gBAAgB,cAAc,WAAW,sBAAsB,CAAC;GAAG,IAAI,cAAc,EAAE;GAAG,MAAM;GAAW,WAAW;EAAI,GAC5H,KACA,cAAc,UAAU,CACzB;EACA,OAAO,YAAY,OAAO,SAAS;CACpC,SAAS,OAAO;EACf,MAAM,IAAI,MAAM,cAAc,EAAE,MAAM,CAAC;CACxC;AACD;;;;;;;;AASA,eAAsB,mBAAmB,gBAAgB,MAA2B;CACnF,IAAI,CAAC,OAAO,cAAc,aAAa,KAAK,gBAAgB,QAAQ,gBAAgB,QAAQ,GAC3F,MAAM,IAAI,WAAW,gDAAgD;CAEtE,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cACf,MAAM,OAAO,OAAO,YACnB;EACC,MAAM;EACN;EACA,MAAM;EACN,gBAAgB,WAAW,GAAG,GAAG,GAAG,CAAC;CACtC,GACA,MACA,CAAC,WAAW,SAAS,CACtB,CACD;CACA,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;AAUA,eAAsB,eAAe,WAAmB,cAAuC;CAC9F,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CACxI,SACD,CAAC;CACD,MAAM,aAAa,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,WAAW,SAAS,CAAC,CAAC;CAC9G,OAAO,kBAAkB,IAAI,WAAW,UAAU,CAAC;AACpD;;;;;;;;;AAUA,eAAsB,eAAe,YAAoB,eAAwC;CAChG,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAW,GAAG,OAAO,CAC3I,SACD,CAAC;CACD,MAAM,YAAY,MAAM,OAAO,OAAO,QAAQ,EAAE,MAAM,WAAW,GAAG,KAAK,cAAc,kBAAkB,UAAU,CAAC,CAAC;CACrH,OAAO,eAAe,CAAC,CAAC,OAAO,SAAS;AACzC;;;;;;;;;AAUA,eAAsB,WAAW,OAAe,eAAwC;CACvF,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CAC1I,MACD,CAAC;CAED,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE,MAAM;EAAW,YAAY;CAAG,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACrH,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,aAAa,OAAe,WAAmB,cAAwC;CAC5G,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAW,MAAM;CAAU,GAAG,OAAO,CACvI,QACD,CAAC;CAED,OAAO,OAAO,OAAO,OACpB;EAAE,MAAM;EAAW,YAAY;CAAG,GAClC,KACA,cAAc,kBAAkB,SAAS,CAAC,GAC1C,cAAc,WAAW,KAAK,CAAC,CAChC;AACD;;;;;;;AAQA,eAAsB,qBAAqB,aAA2B,SAA8B;CACnG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAS;CAAW,GAAG,MAAM,CAAC,QAAQ,QAAQ,CAAC,CAAC;CACtH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,UAAU,OAAe,eAAuB,aAA2B,SAA0B;CAC1H,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAE5I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,WAAW,KAAK,CAAC,CAAC;CACzG,OAAO,kBAAkB,IAAI,WAAW,SAAS,CAAC;AACnD;;;;;;;;;;AAWA,eAAsB,YAAY,OAAe,WAAmB,cAAsB,aAA2B,SAA2B;CAC/I,MAAM,SAAS,iBAAiB;CAChC,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAS;CAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CAE3I,MAAM,OAAO,eAAe,UAAU,YAAY,eAAe,UAAU,YAAY;CACvF,OAAO,OAAO,OAAO,OAAO;EAAE;EAAM,MAAM;CAAQ,GAAG,KAAK,cAAc,kBAAkB,SAAS,CAAC,GAAG,cAAc,WAAW,KAAK,CAAC,CAAC;AACxI;;;;;;;AAQA,eAAsB,oBAAoB,aAA2B,SAA8B;CAClG,MAAM,SAAS,iBAAiB;CAChC,MAAM,UAAU,cAAc,MAAM,OAAO,OAAO,YAAY;EAAE,MAAM;EAAQ;CAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;CACjH,OAAO,cAAc,OAAO;AAC7B;;;;;;;;;;AAWA,eAAsB,iBAAiB,eAAuB,cAAsB,aAA2B,SAA8B;CAC5I,MAAM,SAAS,iBAAiB;CAChC,MAAM,CAAC,YAAY,aAAa,MAAM,QAAQ,IAAI,CACjD,OAAO,OAAO,UAAU,SAAS,QAAQ,eAAe,UAAU,OAAO,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,YAAY,CAAC,GAC/H,OAAO,OAAO,UAAU,QAAQ,QAAQ,cAAc,UAAU,MAAM,GAAG;EAAE,MAAM;EAAQ;CAAW,GAAG,OAAO,CAAC,CAAC,CACjH,CAAC;CAED,MAAM,YAAY,eAAe,UAAU,MAAM,eAAe,UAAU,MAAM;CAChF,MAAM,SAAS,MAAM,OAAO,OAAO,WAAW;EAAE,MAAM;EAAQ,QAAQ;CAAU,GAAG,YAAY,SAAS;CACxG,OAAO,IAAI,WAAW,MAAM;AAC7B;;;;;;;;;;AAWA,eAAsB,oBAAoB,eAAuB,cAAsB,aAA2B,SAA8B;CAC/I,MAAM,SAAS,MAAM,iBAAiB,eAAe,cAAc,UAAU;CAC7E,MAAM,SAAS,MAAM,iBAAiB,CAAC,CAAC,OAAO,OAAO,WAAW,cAAc,MAAM,CAAC;CACtF,OAAO,IAAI,WAAW,MAAM;AAC7B"}

package/dist/date/index.mjs

@@ -6,7 +6,7 @@
 * @throws `RangeError` 当值不是安全整数。
 */
 const assertIntegerAmount = (amount) => {
-	if (!Number.isSafeInteger(amount)) throw new RangeError("amount must be a safe integer.");
+	if (!Number.isSafeInteger(amount)) throw new RangeError("`amount` 必须是安全整数。");
 };
 /**
 * 转换并克隆有效日期。
@@ -18,7 +18,7 @@ const assertIntegerAmount = (amount) => {
 */
 function toDate(value) {
 	const date = value instanceof Date ? new Date(value.getTime()) : new Date(value);
-	if (!Number.isFinite(date.getTime())) throw new TypeError("The value is not a valid date.");
+	if (!Number.isFinite(date.getTime())) throw new TypeError("该值不是有效日期。");
 	return date;
 }
 /**
@@ -149,7 +149,7 @@ function isWithinInterval(value, start, end) {
 	const timestamp = toDate(value).getTime();
 	const startTimestamp = toDate(start).getTime();
 	const endTimestamp = toDate(end).getTime();
-	if (startTimestamp > endTimestamp) throw new RangeError("start cannot be later than end.");
+	if (startTimestamp > endTimestamp) throw new RangeError("`start` 不能晚于 `end`。");
 	return timestamp >= startTimestamp && timestamp <= endTimestamp;
 }
 /**

package/dist/date/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../src/date/index.ts"],"sourcesContent":["/** 可转换为日期的输入；数字始终按 Unix 毫秒时间戳处理。 */\nexport type DateInput = Date | number | string;\n\n/** {@link formatRelativeTime} 的语言与基准时间选项。 */\nexport interface RelativeTimeOptions {\n\t/** `Intl.RelativeTimeFormat` 使用的语言；默认固定为 `zh-CN`。 */\n\tlocale?: string | readonly string[];\n\t/** 比较基准，默认当前时间。 */\n\tnow?: DateInput;\n\t/** 是否允许“昨天”“明天”等文本；默认 `auto`。 */\n\tnumeric?: Intl.RelativeTimeFormatNumeric;\n\t/** 输出长度；默认 `long`。 */\n\tstyle?: Intl.RelativeTimeFormatStyle;\n}\n\n/**\n * 校验日期算术移动量。\n *\n * @param amount - 待校验的日、月或年移动量。\n * @throws `RangeError` 当值不是安全整数。\n */\nconst assertIntegerAmount = (amount: number): void => {\n\tif (!Number.isSafeInteger(amount)) throw new RangeError(\"amount must be a safe integer.\");\n};\n\n/**\n * 转换并克隆有效日期。\n *\n * @remarks 数字不进行秒/毫秒猜测；字符串遵循运行时 `Date` 解析规则，跨平台代码应传带显式时区的完整 ISO 8601。\n * @param value - Date、Unix 毫秒时间戳或运行时可解析字符串。\n * @returns 与输入不共享可变状态的新 Date。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function toDate(value: DateInput): Date {\n\tconst date = value instanceof Date ? new Date(value.getTime()) : new Date(value);\n\tif (!Number.isFinite(date.getTime())) {\n\t\tthrow new TypeError(\"The value is not a valid date.\");\n\t}\n\treturn date;\n}\n\n/**\n * 判断输入能否转换为有效日期。\n *\n * @param value - 任意待检查值。\n * @returns 仅 Date、数字或字符串且时间戳有限时返回 `true`。\n */\nexport function isValidDate(value: unknown): value is DateInput {\n\tif (!(value instanceof Date || typeof value === \"number\" || typeof value === \"string\")) return false;\n\treturn Number.isFinite(new Date(value).getTime());\n}\n\n/**\n * 返回输入日期所在本地时区日期的 `00:00:00.000`，不修改输入。\n *\n * @param value - 有效日期输入。\n * @returns 新建的本地日开始时间。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function startOfDay(value: DateInput): Date {\n\tconst date = toDate(value);\n\tdate.setHours(0, 0, 0, 0);\n\treturn toDate(date);\n}\n\n/**\n * 返回输入日期所在本地时区日期的 `23:59:59.999`，不修改输入。\n *\n * @param value - 有效日期输入。\n * @returns 新建的本地日结束时间。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function endOfDay(value: DateInput): Date {\n\tconst date = toDate(value);\n\tdate.setHours(23, 59, 59, 999);\n\treturn toDate(date);\n}\n\n/**\n * 按本地日历增加整数天，不修改输入。\n *\n * @param value - 基准日期。\n * @param amount - 可为负数的安全整数日数。\n * @returns 本地日历运算后的新 Date；夏令时变化可能使实际毫秒差不等于 24 小时。\n * @throws 日期无效时抛出 `TypeError`；数量或结果非法时抛出 `RangeError`。\n */\nexport function addDays(value: DateInput, amount: number): Date {\n\tassertIntegerAmount(amount);\n\tconst date = toDate(value);\n\tdate.setDate(date.getDate() + amount);\n\treturn toDate(date);\n}\n\n/**\n * 按本地日历增加整数月，并把不存在的日期夹到目标月末。\n *\n * @example 1 月 31 日增加一个月会落在 2 月最后一天。\n * @param value - 基准日期。\n * @param amount - 可为负数的安全整数月数。\n * @returns 月份运算后的新 Date。\n * @throws 日期无效时抛出 `TypeError`；数量或结果非法时抛出 `RangeError`。\n */\nexport function addMonths(value: DateInput, amount: number): Date {\n\tassertIntegerAmount(amount);\n\tconst date = toDate(value);\n\tconst originalDay = date.getDate();\n\tdate.setDate(1);\n\tdate.setMonth(date.getMonth() + amount);\n\tconst targetMonthEnd = new Date(date.getTime());\n\t// 避免 `new Date(year, ...)` 把 0 至 99 年解释为 1900 至 1999 年。\n\ttargetMonthEnd.setMonth(targetMonthEnd.getMonth() + 1, 0);\n\tconst lastDay = targetMonthEnd.getDate();\n\tdate.setDate(Math.min(originalDay, lastDay));\n\treturn toDate(date);\n}\n\n/**\n * 按本地日历增加整数年，并沿用 {@link addMonths} 的月末夹取规则。\n *\n * @param value - 基准日期。\n * @param amount - 可为负数的安全整数年数。\n * @returns 年份运算后的新 Date。\n * @throws 日期无效时抛出 `TypeError`；数量或结果非法时抛出 `RangeError`。\n */\nexport function addYears(value: DateInput, amount: number): Date {\n\tassertIntegerAmount(amount);\n\treturn addMonths(value, amount * 12);\n}\n\n/**\n * 判断两个输入是否属于同一本地日历日。\n *\n * @param left - 第一日期。\n * @param right - 第二日期。\n * @returns 本地年、月、日均相同时返回 `true`。\n * @throws 任一输入无效时抛出 `TypeError`。\n */\nexport function isSameDay(left: DateInput, right: DateInput): boolean {\n\tconst first = toDate(left);\n\tconst second = toDate(right);\n\treturn first.getFullYear() === second.getFullYear() && first.getMonth() === second.getMonth() && first.getDate() === second.getDate();\n}\n\n/**\n * 判断时间是否晚于基准时间。\n *\n * @param value - 待比较时间。\n * @param now - 比较基准，默认调用时的当前时刻。\n * @returns `value` 严格晚于基准时返回 `true`。\n * @throws 任一输入无效时抛出 `TypeError`。\n */\nexport function isFuture(value: DateInput, now: DateInput = Date.now()): boolean {\n\treturn toDate(value).getTime() > toDate(now).getTime();\n}\n\n/**\n * 返回指定基准所在本地日历日的完整闭区间。\n *\n * @param value - 日期基准，默认调用时当前日期。\n * @returns 新建的本地日开始和结束时间二元组。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function getLocalDayBounds(value: DateInput = Date.now()): [start: Date, end: Date] {\n\treturn [startOfDay(value), endOfDay(value)];\n}\n\n/**\n * 判断日期是否位于包含首尾的时间区间。\n *\n * @param value - 待检查日期。\n * @param start - 包含的起点。\n * @param end - 包含的终点。\n * @returns 时间戳位于闭区间内时返回 `true`。\n * @throws 无效日期抛出 `TypeError`；首尾反向时抛出 `RangeError`。\n */\nexport function isWithinInterval(value: DateInput, start: DateInput, end: DateInput): boolean {\n\tconst timestamp = toDate(value).getTime();\n\tconst startTimestamp = toDate(start).getTime();\n\tconst endTimestamp = toDate(end).getTime();\n\tif (startTimestamp > endTimestamp) throw new RangeError(\"start cannot be later than end.\");\n\treturn timestamp >= startTimestamp && timestamp <= endTimestamp;\n}\n\n/**\n * 使用 `Intl.RelativeTimeFormat` 生成人类可读相对时间。\n *\n * @remarks 秒、分钟、小时、天、周、月和年按固定时长阈值选择；这适合展示，不适合计费或日历运算。\n * @param value - 目标时间。\n * @param options - 语言、样式与比较基准。\n * @returns 由 `Intl.RelativeTimeFormat` 生成的本地化文本。\n * @throws 日期无效时抛出 `TypeError`；Locale 或 Intl 选项非法时抛出 `RangeError`。\n */\nexport function formatRelativeTime(value: DateInput, options: RelativeTimeOptions = {}): string {\n\tconst differenceSeconds = (toDate(value).getTime() - toDate(options.now ?? Date.now()).getTime()) / 1000;\n\tconst absolute = Math.abs(differenceSeconds);\n\tlet divisor: number;\n\tlet unit: Intl.RelativeTimeFormatUnit;\n\tif (absolute < 60) {\n\t\tdivisor = 1;\n\t\tunit = \"second\";\n\t} else if (absolute < 3_600) {\n\t\tdivisor = 60;\n\t\tunit = \"minute\";\n\t} else if (absolute < 86_400) {\n\t\tdivisor = 3_600;\n\t\tunit = \"hour\";\n\t} else if (absolute < 604_800) {\n\t\tdivisor = 86_400;\n\t\tunit = \"day\";\n\t} else if (absolute < 2_629_800) {\n\t\tdivisor = 604_800;\n\t\tunit = \"week\";\n\t} else if (absolute < 31_557_600) {\n\t\tdivisor = 2_629_800;\n\t\tunit = \"month\";\n\t} else {\n\t\tdivisor = 31_557_600;\n\t\tunit = \"year\";\n\t}\n\tconst formatter = new Intl.RelativeTimeFormat(options.locale ?? \"zh-CN\", {\n\t\tnumeric: options.numeric ?? \"auto\",\n\t\tstyle: options.style ?? \"long\",\n\t});\n\treturn formatter.format(Math.round(differenceSeconds / divisor), unit);\n}\n\n/** 日期选择器单日期快捷项。 */\nexport interface DateShortcut {\n\t/** 面向中文日期选择器的显示文本；调用方可直接用于菜单标签。 */\n\ttext: string;\n\t/**\n\t * 计算快捷项对应日期。\n\t * @returns 每次调用时基于当前本地时间创建的新 `Date`，调用方可安全修改。\n\t */\n\tvalue: () => Date;\n}\n\n/** 日期选择器范围快捷项。 */\nexport interface DateRangeShortcut {\n\t/** 面向中文日期范围选择器的显示文本；调用方可直接用于菜单标签。 */\n\ttext: string;\n\t/**\n\t * 计算快捷项对应的本地日期范围。\n\t * @returns 每次调用时创建的新元组；起点为 `00:00:00.000`，终点为 `23:59:59.999`。\n\t */\n\tvalue: () => [start: Date, end: Date];\n}\n\n/** 历史快捷项允许移动的本地日历单位。 */\ntype CalendarUnit = \"day\" | \"month\" | \"year\";\n\n/**\n * 移动本地日历字段。\n *\n * @remarks 直接使用 Date Setter，以保留历史快捷项在月底和闰年的溢出语义。\n * @param date - 会被原地修改的日期。\n * @param amount - 对目标字段增加的整数。\n * @param unit - 要移动的日历字段。\n */\nconst shiftCalendarFieldInPlace = (date: Date, amount: number, unit: CalendarUnit): void => {\n\tswitch (unit) {\n\t\tcase \"day\":\n\t\t\tdate.setDate(date.getDate() + amount);\n\t\t\tbreak;\n\t\tcase \"month\":\n\t\t\tdate.setMonth(date.getMonth() + amount);\n\t\t\tbreak;\n\t\tcase \"year\":\n\t\t\tdate.setFullYear(date.getFullYear() + amount);\n\t\t\tbreak;\n\t}\n};\n\n/**\n * 创建动态单日期快捷项。\n *\n * @param text - 日期选择器显示文本。\n * @param amount - 相对当前时间的移动量。\n * @param unit - 移动使用的日历单位。\n * @returns 每次执行 `value` 都重新读取当前时间的快捷项。\n */\nconst createDateShortcut = (text: string, amount: number, unit: CalendarUnit): DateShortcut => ({\n\ttext,\n\tvalue: (): Date => {\n\t\tconst date = new Date();\n\t\tshiftCalendarFieldInPlace(date, amount, unit);\n\t\tdate.setHours(0, 0, 0, 0);\n\t\treturn date;\n\t},\n});\n\n/**\n * 创建动态日期范围快捷项。\n *\n * @param text - 日期选择器显示文本。\n * @param amount - 范围边界相对当前时间的移动量。\n * @param unit - 移动使用的日历单位。\n * @param towardFuture - `true` 移动结束边界，`false` 移动开始边界。\n * @returns 每次求值都覆盖完整本地日边界的范围快捷项。\n */\nconst createRangeShortcut = (text: string, amount: number, unit: CalendarUnit, towardFuture: boolean): DateRangeShortcut => ({\n\ttext,\n\tvalue: (): [Date, Date] => {\n\t\tconst start = new Date();\n\t\tconst end = new Date();\n\t\tshiftCalendarFieldInPlace(towardFuture ? end : start, towardFuture ? amount : -amount, unit);\n\t\tstart.setHours(0, 0, 0, 0);\n\t\tend.setHours(23, 59, 59, 999);\n\t\treturn [start, end];\n\t},\n});\n\n/**\n * 把日期转换为固定中文相对时间文本。\n *\n * @remarks 10 位以内数字按 Unix 秒处理，其余数字按毫秒处理；月份与年份按本地日历月差计算。\n * @param value - Date、时间戳、可解析字符串或空值。\n * @returns 例如“3分钟前”“半年后”；非法或空输入返回空字符串。\n */\nexport function formatChineseRelativeTime(value: Date | number | string | null | undefined): string {\n\tif (value === null || value === undefined) return \"\";\n\tlet timestamp: number;\n\tif (typeof value === \"string\") timestamp = new Date(value).getTime();\n\telse if (typeof value === \"number\") timestamp = value.toString().length <= 10 ? value * 1000 : value;\n\telse timestamp = value.getTime();\n\tif (!Number.isFinite(timestamp)) return \"\";\n\n\tconst minute = 60_000;\n\tconst hour = minute * 60;\n\tconst day = hour * 24;\n\tconst currentTimestamp = Date.now();\n\tconst difference = currentTimestamp - timestamp;\n\tconst minuteDifference = Math.abs(difference) / minute;\n\tconst hourDifference = Math.abs(difference) / hour;\n\tconst dayDifference = Math.abs(difference) / day;\n\tconst currentDate = new Date(currentTimestamp);\n\tconst targetDate = new Date(timestamp);\n\tconst monthDifference = (currentDate.getFullYear() - targetDate.getFullYear()) * 12 + currentDate.getMonth() - targetDate.getMonth();\n\tconst suffix = difference < 0 ? \"后\" : \"前\";\n\tif (Math.abs(monthDifference) >= 12) return `${Math.floor(Math.abs(monthDifference) / 12)}年${suffix}`;\n\tif (Math.abs(monthDifference) >= 6) return `半年${suffix}`;\n\tif (Math.abs(monthDifference) >= 1) return `${Math.abs(monthDifference)}月${suffix}`;\n\tif (dayDifference >= 15) return `半月${suffix}`;\n\tif (dayDifference >= 7) return `${Math.floor(dayDifference / 7)}周${suffix}`;\n\tif (dayDifference >= 1) return `${Math.floor(dayDifference)}天${suffix}`;\n\tif (hourDifference >= 1) return `${Math.floor(hourDifference)}小时${suffix}`;\n\tif (minuteDifference >= 1) return `${Math.floor(minuteDifference)}分钟${suffix}`;\n\treturn \"刚刚\";\n}\n\n/**\n * 创建从今天到前后一个月日期的完整本地日范围。\n *\n * @param towardFuture - `true` 返回今天至一个月后，默认返回一个月前至今天。\n * @returns 每次调用新建的本地日首尾边界。\n */\nexport function createOneMonthRangeFromToday(towardFuture = false): [start: Date, end: Date] {\n\tconst start = new Date();\n\tconst end = new Date();\n\tshiftCalendarFieldInPlace(towardFuture ? end : start, towardFuture ? 1 : -1, \"month\");\n\tstart.setHours(0, 0, 0, 0);\n\tend.setHours(23, 59, 59, 999);\n\treturn [start, end];\n}\n\n/**\n * 判断日期是否晚于调用时的当前时刻。\n *\n * @param time - 待比较日期。\n * @returns 时间戳严格晚于 `Date.now()` 时返回 `true`。\n */\nexport function isDateAfterNow(time: Date): boolean {\n\treturn time.getTime() > Date.now();\n}\n\n/**\n * 根据浏览器本地小时返回固定中文问候语。\n *\n * @returns 与当前时段对应的中文欢迎文本。\n */\nexport function getLocalTimeGreeting(): string {\n\tconst hour = new Date().getHours();\n\tif (hour < 5) return \"夜深了，注意身体哦！\";\n\tif (hour < 9) return \"早上好！欢迎回来！\";\n\tif (hour < 12) return \"上午好！欢迎回来！\";\n\tif (hour < 14) return \"中午好！欢迎回来！\";\n\tif (hour < 18) return \"下午好！欢迎回来！\";\n\tif (hour < 24) return \"晚上好！欢迎回来！\";\n\treturn \"您好！欢迎回来！\";\n}\n\n/**\n * 创建面向过去或未来的常用完整日期范围快捷项。\n *\n * @param towardFuture - `true` 创建未来范围，默认创建历史范围。\n * @returns 每次求值都会重新读取当前时间的范围快捷项。\n */\nexport function createDateRangeShortcuts(towardFuture = false): DateRangeShortcut[] {\n\treturn towardFuture\n\t\t? [\n\t\t\t\tcreateRangeShortcut(\"后1天\", 1, \"day\", true),\n\t\t\t\tcreateRangeShortcut(\"后3天\", 3, \"day\", true),\n\t\t\t\tcreateRangeShortcut(\"后1周\", 7, \"day\", true),\n\t\t\t\tcreateRangeShortcut(\"后1月\", 1, \"month\", true),\n\t\t\t\tcreateRangeShortcut(\"后3月\", 3, \"month\", true),\n\t\t\t\tcreateRangeShortcut(\"后6月\", 6, \"month\", true),\n\t\t\t\tcreateRangeShortcut(\"后1年\", 1, \"year\", true),\n\t\t\t]\n\t\t: [\n\t\t\t\tcreateRangeShortcut(\"近1天\", 1, \"day\", false),\n\t\t\t\tcreateRangeShortcut(\"近3天\", 3, \"day\", false),\n\t\t\t\tcreateRangeShortcut(\"近1周\", 7, \"day\", false),\n\t\t\t\tcreateRangeShortcut(\"近1月\", 1, \"month\", false),\n\t\t\t\tcreateRangeShortcut(\"近3月\", 3, \"month\", false),\n\t\t\t\tcreateRangeShortcut(\"近6月\", 6, \"month\", false),\n\t\t\t\tcreateRangeShortcut(\"近1年\", 1, \"year\", false),\n\t\t\t];\n}\n\n/**\n * 创建面向过去或未来的常用单日期快捷项。\n *\n * @param towardFuture - `true` 创建未来日期，默认创建历史日期。\n * @returns 每次求值都会重新读取当前时间的单日期快捷项。\n */\nexport function createDateShortcuts(towardFuture = false): DateShortcut[] {\n\treturn towardFuture\n\t\t? [\n\t\t\t\tcreateDateShortcut(\"今天\", 0, \"day\"),\n\t\t\t\tcreateDateShortcut(\"明天\", 1, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一周后\", 7, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一月后\", 1, \"month\"),\n\t\t\t\tcreateDateShortcut(\"一年后\", 1, \"year\"),\n\t\t\t]\n\t\t: [\n\t\t\t\tcreateDateShortcut(\"今天\", 0, \"day\"),\n\t\t\t\tcreateDateShortcut(\"昨天\", -1, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一周前\", -7, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一月前\", -1, \"month\"),\n\t\t\t\tcreateDateShortcut(\"一年前\", -1, \"year\"),\n\t\t\t];\n}\n\n/**\n * 返回今天的本地零点。\n *\n * @returns 新建的 `00:00:00.000` Date。\n */\nexport function getStartOfToday(): Date {\n\treturn startOfDay(new Date());\n}\n"],"mappings":";;;;;;;AAqBA,MAAM,uBAAuB,WAAyB;CACrD,IAAI,CAAC,OAAO,cAAc,MAAM,GAAG,MAAM,IAAI,WAAW,gCAAgC;AACzF;;;;;;;;;AAUA,SAAgB,OAAO,OAAwB;CAC9C,MAAM,OAAO,iBAAiB,OAAO,IAAI,KAAK,MAAM,QAAQ,CAAC,IAAI,IAAI,KAAK,KAAK;CAC/E,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,GAClC,MAAM,IAAI,UAAU,gCAAgC;CAErD,OAAO;AACR;;;;;;;AAQA,SAAgB,YAAY,OAAoC;CAC/D,IAAI,EAAE,iBAAiB,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CAC/F,OAAO,OAAO,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC;AACjD;;;;;;;;AASA,SAAgB,WAAW,OAAwB;CAClD,MAAM,OAAO,OAAO,KAAK;CACzB,KAAK,SAAS,GAAG,GAAG,GAAG,CAAC;CACxB,OAAO,OAAO,IAAI;AACnB;;;;;;;;AASA,SAAgB,SAAS,OAAwB;CAChD,MAAM,OAAO,OAAO,KAAK;CACzB,KAAK,SAAS,IAAI,IAAI,IAAI,GAAG;CAC7B,OAAO,OAAO,IAAI;AACnB;;;;;;;;;AAUA,SAAgB,QAAQ,OAAkB,QAAsB;CAC/D,oBAAoB,MAAM;CAC1B,MAAM,OAAO,OAAO,KAAK;CACzB,KAAK,QAAQ,KAAK,QAAQ,IAAI,MAAM;CACpC,OAAO,OAAO,IAAI;AACnB;;;;;;;;;;AAWA,SAAgB,UAAU,OAAkB,QAAsB;CACjE,oBAAoB,MAAM;CAC1B,MAAM,OAAO,OAAO,KAAK;CACzB,MAAM,cAAc,KAAK,QAAQ;CACjC,KAAK,QAAQ,CAAC;CACd,KAAK,SAAS,KAAK,SAAS,IAAI,MAAM;CACtC,MAAM,iBAAiB,IAAI,KAAK,KAAK,QAAQ,CAAC;CAE9C,eAAe,SAAS,eAAe,SAAS,IAAI,GAAG,CAAC;CACxD,MAAM,UAAU,eAAe,QAAQ;CACvC,KAAK,QAAQ,KAAK,IAAI,aAAa,OAAO,CAAC;CAC3C,OAAO,OAAO,IAAI;AACnB;;;;;;;;;AAUA,SAAgB,SAAS,OAAkB,QAAsB;CAChE,oBAAoB,MAAM;CAC1B,OAAO,UAAU,OAAO,SAAS,EAAE;AACpC;;;;;;;;;AAUA,SAAgB,UAAU,MAAiB,OAA2B;CACrE,MAAM,QAAQ,OAAO,IAAI;CACzB,MAAM,SAAS,OAAO,KAAK;CAC3B,OAAO,MAAM,YAAY,MAAM,OAAO,YAAY,KAAK,MAAM,SAAS,MAAM,OAAO,SAAS,KAAK,MAAM,QAAQ,MAAM,OAAO,QAAQ;AACrI;;;;;;;;;AAUA,SAAgB,SAAS,OAAkB,MAAiB,KAAK,IAAI,GAAY;CAChF,OAAO,OAAO,KAAK,CAAC,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,CAAC,QAAQ;AACtD;;;;;;;;AASA,SAAgB,kBAAkB,QAAmB,KAAK,IAAI,GAA6B;CAC1F,OAAO,CAAC,WAAW,KAAK,GAAG,SAAS,KAAK,CAAC;AAC3C;;;;;;;;;;AAWA,SAAgB,iBAAiB,OAAkB,OAAkB,KAAyB;CAC7F,MAAM,YAAY,OAAO,KAAK,CAAC,CAAC,QAAQ;CACxC,MAAM,iBAAiB,OAAO,KAAK,CAAC,CAAC,QAAQ;CAC7C,MAAM,eAAe,OAAO,GAAG,CAAC,CAAC,QAAQ;CACzC,IAAI,iBAAiB,cAAc,MAAM,IAAI,WAAW,iCAAiC;CACzF,OAAO,aAAa,kBAAkB,aAAa;AACpD;;;;;;;;;;AAWA,SAAgB,mBAAmB,OAAkB,UAA+B,CAAC,GAAW;CAC/F,MAAM,qBAAqB,OAAO,KAAK,CAAC,CAAC,QAAQ,IAAI,OAAO,QAAQ,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK;CACpG,MAAM,WAAW,KAAK,IAAI,iBAAiB;CAC3C,IAAI;CACJ,IAAI;CACJ,IAAI,WAAW,IAAI;EAClB,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,MAAO;EAC5B,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,OAAQ;EAC7B,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,QAAS;EAC9B,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,SAAW;EAChC,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,UAAY;EACjC,UAAU;EACV,OAAO;CACR,OAAO;EACN,UAAU;EACV,OAAO;CACR;CAKA,OAAO,IAJe,KAAK,mBAAmB,QAAQ,UAAU,SAAS;EACxE,SAAS,QAAQ,WAAW;EAC5B,OAAO,QAAQ,SAAS;CACzB,CACe,CAAC,CAAC,OAAO,KAAK,MAAM,oBAAoB,OAAO,GAAG,IAAI;AACtE;;;;;;;;;AAmCA,MAAM,6BAA6B,MAAY,QAAgB,SAA6B;CAC3F,QAAQ,MAAR;EACC,KAAK;GACJ,KAAK,QAAQ,KAAK,QAAQ,IAAI,MAAM;GACpC;EACD,KAAK;GACJ,KAAK,SAAS,KAAK,SAAS,IAAI,MAAM;GACtC;EACD,KAAK,QACJ,KAAK,YAAY,KAAK,YAAY,IAAI,MAAM;CAE9C;AACD;;;;;;;;;AAUA,MAAM,sBAAsB,MAAc,QAAgB,UAAsC;CAC/F;CACA,aAAmB;EAClB,MAAM,uBAAO,IAAI,KAAK;EACtB,0BAA0B,MAAM,QAAQ,IAAI;EAC5C,KAAK,SAAS,GAAG,GAAG,GAAG,CAAC;EACxB,OAAO;CACR;AACD;;;;;;;;;;AAWA,MAAM,uBAAuB,MAAc,QAAgB,MAAoB,kBAA8C;CAC5H;CACA,aAA2B;EAC1B,MAAM,wBAAQ,IAAI,KAAK;EACvB,MAAM,sBAAM,IAAI,KAAK;EACrB,0BAA0B,eAAe,MAAM,OAAO,eAAe,SAAS,CAAC,QAAQ,IAAI;EAC3F,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC;EACzB,IAAI,SAAS,IAAI,IAAI,IAAI,GAAG;EAC5B,OAAO,CAAC,OAAO,GAAG;CACnB;AACD;;;;;;;;AASA,SAAgB,0BAA0B,OAA0D;CACnG,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI;CACJ,IAAI,OAAO,UAAU,UAAU,YAAY,IAAI,KAAK,KAAK,CAAC,CAAC,QAAQ;MAC9D,IAAI,OAAO,UAAU,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,UAAU,KAAK,QAAQ,MAAO;MAC1F,YAAY,MAAM,QAAQ;CAC/B,IAAI,CAAC,OAAO,SAAS,SAAS,GAAG,OAAO;CAExC,MAAM,SAAS;CACf,MAAM,OAAO,SAAS;CACtB,MAAM,MAAM,OAAO;CACnB,MAAM,mBAAmB,KAAK,IAAI;CAClC,MAAM,aAAa,mBAAmB;CACtC,MAAM,mBAAmB,KAAK,IAAI,UAAU,IAAI;CAChD,MAAM,iBAAiB,KAAK,IAAI,UAAU,IAAI;CAC9C,MAAM,gBAAgB,KAAK,IAAI,UAAU,IAAI;CAC7C,MAAM,cAAc,IAAI,KAAK,gBAAgB;CAC7C,MAAM,aAAa,IAAI,KAAK,SAAS;CACrC,MAAM,mBAAmB,YAAY,YAAY,IAAI,WAAW,YAAY,KAAK,KAAK,YAAY,SAAS,IAAI,WAAW,SAAS;CACnI,MAAM,SAAS,aAAa,IAAI,MAAM;CACtC,IAAI,KAAK,IAAI,eAAe,KAAK,IAAI,OAAO,GAAG,KAAK,MAAM,KAAK,IAAI,eAAe,IAAI,EAAE,EAAE,GAAG;CAC7F,IAAI,KAAK,IAAI,eAAe,KAAK,GAAG,OAAO,KAAK;CAChD,IAAI,KAAK,IAAI,eAAe,KAAK,GAAG,OAAO,GAAG,KAAK,IAAI,eAAe,EAAE,GAAG;CAC3E,IAAI,iBAAiB,IAAI,OAAO,KAAK;CACrC,IAAI,iBAAiB,GAAG,OAAO,GAAG,KAAK,MAAM,gBAAgB,CAAC,EAAE,GAAG;CACnE,IAAI,iBAAiB,GAAG,OAAO,GAAG,KAAK,MAAM,aAAa,EAAE,GAAG;CAC/D,IAAI,kBAAkB,GAAG,OAAO,GAAG,KAAK,MAAM,cAAc,EAAE,IAAI;CAClE,IAAI,oBAAoB,GAAG,OAAO,GAAG,KAAK,MAAM,gBAAgB,EAAE,IAAI;CACtE,OAAO;AACR;;;;;;;AAQA,SAAgB,6BAA6B,eAAe,OAAiC;CAC5F,MAAM,wBAAQ,IAAI,KAAK;CACvB,MAAM,sBAAM,IAAI,KAAK;CACrB,0BAA0B,eAAe,MAAM,OAAO,eAAe,IAAI,IAAI,OAAO;CACpF,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC;CACzB,IAAI,SAAS,IAAI,IAAI,IAAI,GAAG;CAC5B,OAAO,CAAC,OAAO,GAAG;AACnB;;;;;;;AAQA,SAAgB,eAAe,MAAqB;CACnD,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAI;AAClC;;;;;;AAOA,SAAgB,uBAA+B;CAC9C,MAAM,wBAAO,IAAI,KAAK,EAAA,CAAE,SAAS;CACjC,IAAI,OAAO,GAAG,OAAO;CACrB,IAAI,OAAO,GAAG,OAAO;CACrB,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,OAAO,IAAI,OAAO;CACtB,OAAO;AACR;;;;;;;AAQA,SAAgB,yBAAyB,eAAe,OAA4B;CACnF,OAAO,eACJ;EACA,oBAAoB,OAAO,GAAG,OAAO,IAAI;EACzC,oBAAoB,OAAO,GAAG,OAAO,IAAI;EACzC,oBAAoB,OAAO,GAAG,OAAO,IAAI;EACzC,oBAAoB,OAAO,GAAG,SAAS,IAAI;EAC3C,oBAAoB,OAAO,GAAG,SAAS,IAAI;EAC3C,oBAAoB,OAAO,GAAG,SAAS,IAAI;EAC3C,oBAAoB,OAAO,GAAG,QAAQ,IAAI;CAC3C,IACC;EACA,oBAAoB,OAAO,GAAG,OAAO,KAAK;EAC1C,oBAAoB,OAAO,GAAG,OAAO,KAAK;EAC1C,oBAAoB,OAAO,GAAG,OAAO,KAAK;EAC1C,oBAAoB,OAAO,GAAG,SAAS,KAAK;EAC5C,oBAAoB,OAAO,GAAG,SAAS,KAAK;EAC5C,oBAAoB,OAAO,GAAG,SAAS,KAAK;EAC5C,oBAAoB,OAAO,GAAG,QAAQ,KAAK;CAC5C;AACH;;;;;;;AAQA,SAAgB,oBAAoB,eAAe,OAAuB;CACzE,OAAO,eACJ;EACA,mBAAmB,MAAM,GAAG,KAAK;EACjC,mBAAmB,MAAM,GAAG,KAAK;EACjC,mBAAmB,OAAO,GAAG,KAAK;EAClC,mBAAmB,OAAO,GAAG,OAAO;EACpC,mBAAmB,OAAO,GAAG,MAAM;CACpC,IACC;EACA,mBAAmB,MAAM,GAAG,KAAK;EACjC,mBAAmB,MAAM,IAAI,KAAK;EAClC,mBAAmB,OAAO,IAAI,KAAK;EACnC,mBAAmB,OAAO,IAAI,OAAO;EACrC,mBAAmB,OAAO,IAAI,MAAM;CACrC;AACH;;;;;;AAOA,SAAgB,kBAAwB;CACvC,OAAO,2BAAW,IAAI,KAAK,CAAC;AAC7B"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/date/index.ts"],"sourcesContent":["/** 可转换为日期的输入；数字始终按 Unix 毫秒时间戳处理。 */\nexport type DateInput = Date | number | string;\n\n/** {@link formatRelativeTime} 的语言与基准时间选项。 */\nexport interface RelativeTimeOptions {\n\t/** `Intl.RelativeTimeFormat` 使用的语言；默认固定为 `zh-CN`。 */\n\tlocale?: string | readonly string[];\n\t/** 比较基准，默认当前时间。 */\n\tnow?: DateInput;\n\t/** 是否允许“昨天”“明天”等文本；默认 `auto`。 */\n\tnumeric?: Intl.RelativeTimeFormatNumeric;\n\t/** 输出长度；默认 `long`。 */\n\tstyle?: Intl.RelativeTimeFormatStyle;\n}\n\n/**\n * 校验日期算术移动量。\n *\n * @param amount - 待校验的日、月或年移动量。\n * @throws `RangeError` 当值不是安全整数。\n */\nconst assertIntegerAmount = (amount: number): void => {\n\tif (!Number.isSafeInteger(amount)) throw new RangeError(\"`amount` 必须是安全整数。\");\n};\n\n/**\n * 转换并克隆有效日期。\n *\n * @remarks 数字不进行秒/毫秒猜测；字符串遵循运行时 `Date` 解析规则，跨平台代码应传带显式时区的完整 ISO 8601。\n * @param value - Date、Unix 毫秒时间戳或运行时可解析字符串。\n * @returns 与输入不共享可变状态的新 Date。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function toDate(value: DateInput): Date {\n\tconst date = value instanceof Date ? new Date(value.getTime()) : new Date(value);\n\tif (!Number.isFinite(date.getTime())) {\n\t\tthrow new TypeError(\"该值不是有效日期。\");\n\t}\n\treturn date;\n}\n\n/**\n * 判断输入能否转换为有效日期。\n *\n * @param value - 任意待检查值。\n * @returns 仅 Date、数字或字符串且时间戳有限时返回 `true`。\n */\nexport function isValidDate(value: unknown): value is DateInput {\n\tif (!(value instanceof Date || typeof value === \"number\" || typeof value === \"string\")) return false;\n\treturn Number.isFinite(new Date(value).getTime());\n}\n\n/**\n * 返回输入日期所在本地时区日期的 `00:00:00.000`，不修改输入。\n *\n * @param value - 有效日期输入。\n * @returns 新建的本地日开始时间。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function startOfDay(value: DateInput): Date {\n\tconst date = toDate(value);\n\tdate.setHours(0, 0, 0, 0);\n\treturn toDate(date);\n}\n\n/**\n * 返回输入日期所在本地时区日期的 `23:59:59.999`，不修改输入。\n *\n * @param value - 有效日期输入。\n * @returns 新建的本地日结束时间。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function endOfDay(value: DateInput): Date {\n\tconst date = toDate(value);\n\tdate.setHours(23, 59, 59, 999);\n\treturn toDate(date);\n}\n\n/**\n * 按本地日历增加整数天，不修改输入。\n *\n * @param value - 基准日期。\n * @param amount - 可为负数的安全整数日数。\n * @returns 本地日历运算后的新 Date；夏令时变化可能使实际毫秒差不等于 24 小时。\n * @throws 日期无效时抛出 `TypeError`；数量或结果非法时抛出 `RangeError`。\n */\nexport function addDays(value: DateInput, amount: number): Date {\n\tassertIntegerAmount(amount);\n\tconst date = toDate(value);\n\tdate.setDate(date.getDate() + amount);\n\treturn toDate(date);\n}\n\n/**\n * 按本地日历增加整数月，并把不存在的日期夹到目标月末。\n *\n * @example 1 月 31 日增加一个月会落在 2 月最后一天。\n * @param value - 基准日期。\n * @param amount - 可为负数的安全整数月数。\n * @returns 月份运算后的新 Date。\n * @throws 日期无效时抛出 `TypeError`；数量或结果非法时抛出 `RangeError`。\n */\nexport function addMonths(value: DateInput, amount: number): Date {\n\tassertIntegerAmount(amount);\n\tconst date = toDate(value);\n\tconst originalDay = date.getDate();\n\tdate.setDate(1);\n\tdate.setMonth(date.getMonth() + amount);\n\tconst targetMonthEnd = new Date(date.getTime());\n\t// 避免 `new Date(year, ...)` 把 0 至 99 年解释为 1900 至 1999 年。\n\ttargetMonthEnd.setMonth(targetMonthEnd.getMonth() + 1, 0);\n\tconst lastDay = targetMonthEnd.getDate();\n\tdate.setDate(Math.min(originalDay, lastDay));\n\treturn toDate(date);\n}\n\n/**\n * 按本地日历增加整数年，并沿用 {@link addMonths} 的月末夹取规则。\n *\n * @param value - 基准日期。\n * @param amount - 可为负数的安全整数年数。\n * @returns 年份运算后的新 Date。\n * @throws 日期无效时抛出 `TypeError`；数量或结果非法时抛出 `RangeError`。\n */\nexport function addYears(value: DateInput, amount: number): Date {\n\tassertIntegerAmount(amount);\n\treturn addMonths(value, amount * 12);\n}\n\n/**\n * 判断两个输入是否属于同一本地日历日。\n *\n * @param left - 第一日期。\n * @param right - 第二日期。\n * @returns 本地年、月、日均相同时返回 `true`。\n * @throws 任一输入无效时抛出 `TypeError`。\n */\nexport function isSameDay(left: DateInput, right: DateInput): boolean {\n\tconst first = toDate(left);\n\tconst second = toDate(right);\n\treturn first.getFullYear() === second.getFullYear() && first.getMonth() === second.getMonth() && first.getDate() === second.getDate();\n}\n\n/**\n * 判断时间是否晚于基准时间。\n *\n * @param value - 待比较时间。\n * @param now - 比较基准，默认调用时的当前时刻。\n * @returns `value` 严格晚于基准时返回 `true`。\n * @throws 任一输入无效时抛出 `TypeError`。\n */\nexport function isFuture(value: DateInput, now: DateInput = Date.now()): boolean {\n\treturn toDate(value).getTime() > toDate(now).getTime();\n}\n\n/**\n * 返回指定基准所在本地日历日的完整闭区间。\n *\n * @param value - 日期基准，默认调用时当前日期。\n * @returns 新建的本地日开始和结束时间二元组。\n * @throws 输入无效时抛出 `TypeError`。\n */\nexport function getLocalDayBounds(value: DateInput = Date.now()): [start: Date, end: Date] {\n\treturn [startOfDay(value), endOfDay(value)];\n}\n\n/**\n * 判断日期是否位于包含首尾的时间区间。\n *\n * @param value - 待检查日期。\n * @param start - 包含的起点。\n * @param end - 包含的终点。\n * @returns 时间戳位于闭区间内时返回 `true`。\n * @throws 无效日期抛出 `TypeError`；首尾反向时抛出 `RangeError`。\n */\nexport function isWithinInterval(value: DateInput, start: DateInput, end: DateInput): boolean {\n\tconst timestamp = toDate(value).getTime();\n\tconst startTimestamp = toDate(start).getTime();\n\tconst endTimestamp = toDate(end).getTime();\n\tif (startTimestamp > endTimestamp) throw new RangeError(\"`start` 不能晚于 `end`。\");\n\treturn timestamp >= startTimestamp && timestamp <= endTimestamp;\n}\n\n/**\n * 使用 `Intl.RelativeTimeFormat` 生成人类可读相对时间。\n *\n * @remarks 秒、分钟、小时、天、周、月和年按固定时长阈值选择；这适合展示，不适合计费或日历运算。\n * @param value - 目标时间。\n * @param options - 语言、样式与比较基准。\n * @returns 由 `Intl.RelativeTimeFormat` 生成的本地化文本。\n * @throws 日期无效时抛出 `TypeError`；Locale 或 Intl 选项非法时抛出 `RangeError`。\n */\nexport function formatRelativeTime(value: DateInput, options: RelativeTimeOptions = {}): string {\n\tconst differenceSeconds = (toDate(value).getTime() - toDate(options.now ?? Date.now()).getTime()) / 1000;\n\tconst absolute = Math.abs(differenceSeconds);\n\tlet divisor: number;\n\tlet unit: Intl.RelativeTimeFormatUnit;\n\tif (absolute < 60) {\n\t\tdivisor = 1;\n\t\tunit = \"second\";\n\t} else if (absolute < 3_600) {\n\t\tdivisor = 60;\n\t\tunit = \"minute\";\n\t} else if (absolute < 86_400) {\n\t\tdivisor = 3_600;\n\t\tunit = \"hour\";\n\t} else if (absolute < 604_800) {\n\t\tdivisor = 86_400;\n\t\tunit = \"day\";\n\t} else if (absolute < 2_629_800) {\n\t\tdivisor = 604_800;\n\t\tunit = \"week\";\n\t} else if (absolute < 31_557_600) {\n\t\tdivisor = 2_629_800;\n\t\tunit = \"month\";\n\t} else {\n\t\tdivisor = 31_557_600;\n\t\tunit = \"year\";\n\t}\n\tconst formatter = new Intl.RelativeTimeFormat(options.locale ?? \"zh-CN\", {\n\t\tnumeric: options.numeric ?? \"auto\",\n\t\tstyle: options.style ?? \"long\",\n\t});\n\treturn formatter.format(Math.round(differenceSeconds / divisor), unit);\n}\n\n/** 日期选择器单日期快捷项。 */\nexport interface DateShortcut {\n\t/** 面向中文日期选择器的显示文本；调用方可直接用于菜单标签。 */\n\ttext: string;\n\t/**\n\t * 计算快捷项对应日期。\n\t * @returns 每次调用时基于当前本地时间创建的新 `Date`，调用方可安全修改。\n\t */\n\tvalue: () => Date;\n}\n\n/** 日期选择器范围快捷项。 */\nexport interface DateRangeShortcut {\n\t/** 面向中文日期范围选择器的显示文本；调用方可直接用于菜单标签。 */\n\ttext: string;\n\t/**\n\t * 计算快捷项对应的本地日期范围。\n\t * @returns 每次调用时创建的新元组；起点为 `00:00:00.000`，终点为 `23:59:59.999`。\n\t */\n\tvalue: () => [start: Date, end: Date];\n}\n\n/** 历史快捷项允许移动的本地日历单位。 */\ntype CalendarUnit = \"day\" | \"month\" | \"year\";\n\n/**\n * 移动本地日历字段。\n *\n * @remarks 直接使用 Date Setter，以保留历史快捷项在月底和闰年的溢出语义。\n * @param date - 会被原地修改的日期。\n * @param amount - 对目标字段增加的整数。\n * @param unit - 要移动的日历字段。\n */\nconst shiftCalendarFieldInPlace = (date: Date, amount: number, unit: CalendarUnit): void => {\n\tswitch (unit) {\n\t\tcase \"day\":\n\t\t\tdate.setDate(date.getDate() + amount);\n\t\t\tbreak;\n\t\tcase \"month\":\n\t\t\tdate.setMonth(date.getMonth() + amount);\n\t\t\tbreak;\n\t\tcase \"year\":\n\t\t\tdate.setFullYear(date.getFullYear() + amount);\n\t\t\tbreak;\n\t}\n};\n\n/**\n * 创建动态单日期快捷项。\n *\n * @param text - 日期选择器显示文本。\n * @param amount - 相对当前时间的移动量。\n * @param unit - 移动使用的日历单位。\n * @returns 每次执行 `value` 都重新读取当前时间的快捷项。\n */\nconst createDateShortcut = (text: string, amount: number, unit: CalendarUnit): DateShortcut => ({\n\ttext,\n\tvalue: (): Date => {\n\t\tconst date = new Date();\n\t\tshiftCalendarFieldInPlace(date, amount, unit);\n\t\tdate.setHours(0, 0, 0, 0);\n\t\treturn date;\n\t},\n});\n\n/**\n * 创建动态日期范围快捷项。\n *\n * @param text - 日期选择器显示文本。\n * @param amount - 范围边界相对当前时间的移动量。\n * @param unit - 移动使用的日历单位。\n * @param towardFuture - `true` 移动结束边界，`false` 移动开始边界。\n * @returns 每次求值都覆盖完整本地日边界的范围快捷项。\n */\nconst createRangeShortcut = (text: string, amount: number, unit: CalendarUnit, towardFuture: boolean): DateRangeShortcut => ({\n\ttext,\n\tvalue: (): [Date, Date] => {\n\t\tconst start = new Date();\n\t\tconst end = new Date();\n\t\tshiftCalendarFieldInPlace(towardFuture ? end : start, towardFuture ? amount : -amount, unit);\n\t\tstart.setHours(0, 0, 0, 0);\n\t\tend.setHours(23, 59, 59, 999);\n\t\treturn [start, end];\n\t},\n});\n\n/**\n * 把日期转换为固定中文相对时间文本。\n *\n * @remarks 10 位以内数字按 Unix 秒处理，其余数字按毫秒处理；月份与年份按本地日历月差计算。\n * @param value - Date、时间戳、可解析字符串或空值。\n * @returns 例如“3分钟前”“半年后”；非法或空输入返回空字符串。\n */\nexport function formatChineseRelativeTime(value: Date | number | string | null | undefined): string {\n\tif (value === null || value === undefined) return \"\";\n\tlet timestamp: number;\n\tif (typeof value === \"string\") timestamp = new Date(value).getTime();\n\telse if (typeof value === \"number\") timestamp = value.toString().length <= 10 ? value * 1000 : value;\n\telse timestamp = value.getTime();\n\tif (!Number.isFinite(timestamp)) return \"\";\n\n\tconst minute = 60_000;\n\tconst hour = minute * 60;\n\tconst day = hour * 24;\n\tconst currentTimestamp = Date.now();\n\tconst difference = currentTimestamp - timestamp;\n\tconst minuteDifference = Math.abs(difference) / minute;\n\tconst hourDifference = Math.abs(difference) / hour;\n\tconst dayDifference = Math.abs(difference) / day;\n\tconst currentDate = new Date(currentTimestamp);\n\tconst targetDate = new Date(timestamp);\n\tconst monthDifference = (currentDate.getFullYear() - targetDate.getFullYear()) * 12 + currentDate.getMonth() - targetDate.getMonth();\n\tconst suffix = difference < 0 ? \"后\" : \"前\";\n\tif (Math.abs(monthDifference) >= 12) return `${Math.floor(Math.abs(monthDifference) / 12)}年${suffix}`;\n\tif (Math.abs(monthDifference) >= 6) return `半年${suffix}`;\n\tif (Math.abs(monthDifference) >= 1) return `${Math.abs(monthDifference)}月${suffix}`;\n\tif (dayDifference >= 15) return `半月${suffix}`;\n\tif (dayDifference >= 7) return `${Math.floor(dayDifference / 7)}周${suffix}`;\n\tif (dayDifference >= 1) return `${Math.floor(dayDifference)}天${suffix}`;\n\tif (hourDifference >= 1) return `${Math.floor(hourDifference)}小时${suffix}`;\n\tif (minuteDifference >= 1) return `${Math.floor(minuteDifference)}分钟${suffix}`;\n\treturn \"刚刚\";\n}\n\n/**\n * 创建从今天到前后一个月日期的完整本地日范围。\n *\n * @param towardFuture - `true` 返回今天至一个月后，默认返回一个月前至今天。\n * @returns 每次调用新建的本地日首尾边界。\n */\nexport function createOneMonthRangeFromToday(towardFuture = false): [start: Date, end: Date] {\n\tconst start = new Date();\n\tconst end = new Date();\n\tshiftCalendarFieldInPlace(towardFuture ? end : start, towardFuture ? 1 : -1, \"month\");\n\tstart.setHours(0, 0, 0, 0);\n\tend.setHours(23, 59, 59, 999);\n\treturn [start, end];\n}\n\n/**\n * 判断日期是否晚于调用时的当前时刻。\n *\n * @param time - 待比较日期。\n * @returns 时间戳严格晚于 `Date.now()` 时返回 `true`。\n */\nexport function isDateAfterNow(time: Date): boolean {\n\treturn time.getTime() > Date.now();\n}\n\n/**\n * 根据浏览器本地小时返回固定中文问候语。\n *\n * @returns 与当前时段对应的中文欢迎文本。\n */\nexport function getLocalTimeGreeting(): string {\n\tconst hour = new Date().getHours();\n\tif (hour < 5) return \"夜深了，注意身体哦！\";\n\tif (hour < 9) return \"早上好！欢迎回来！\";\n\tif (hour < 12) return \"上午好！欢迎回来！\";\n\tif (hour < 14) return \"中午好！欢迎回来！\";\n\tif (hour < 18) return \"下午好！欢迎回来！\";\n\tif (hour < 24) return \"晚上好！欢迎回来！\";\n\treturn \"您好！欢迎回来！\";\n}\n\n/**\n * 创建面向过去或未来的常用完整日期范围快捷项。\n *\n * @param towardFuture - `true` 创建未来范围，默认创建历史范围。\n * @returns 每次求值都会重新读取当前时间的范围快捷项。\n */\nexport function createDateRangeShortcuts(towardFuture = false): DateRangeShortcut[] {\n\treturn towardFuture\n\t\t? [\n\t\t\t\tcreateRangeShortcut(\"后1天\", 1, \"day\", true),\n\t\t\t\tcreateRangeShortcut(\"后3天\", 3, \"day\", true),\n\t\t\t\tcreateRangeShortcut(\"后1周\", 7, \"day\", true),\n\t\t\t\tcreateRangeShortcut(\"后1月\", 1, \"month\", true),\n\t\t\t\tcreateRangeShortcut(\"后3月\", 3, \"month\", true),\n\t\t\t\tcreateRangeShortcut(\"后6月\", 6, \"month\", true),\n\t\t\t\tcreateRangeShortcut(\"后1年\", 1, \"year\", true),\n\t\t\t]\n\t\t: [\n\t\t\t\tcreateRangeShortcut(\"近1天\", 1, \"day\", false),\n\t\t\t\tcreateRangeShortcut(\"近3天\", 3, \"day\", false),\n\t\t\t\tcreateRangeShortcut(\"近1周\", 7, \"day\", false),\n\t\t\t\tcreateRangeShortcut(\"近1月\", 1, \"month\", false),\n\t\t\t\tcreateRangeShortcut(\"近3月\", 3, \"month\", false),\n\t\t\t\tcreateRangeShortcut(\"近6月\", 6, \"month\", false),\n\t\t\t\tcreateRangeShortcut(\"近1年\", 1, \"year\", false),\n\t\t\t];\n}\n\n/**\n * 创建面向过去或未来的常用单日期快捷项。\n *\n * @param towardFuture - `true` 创建未来日期，默认创建历史日期。\n * @returns 每次求值都会重新读取当前时间的单日期快捷项。\n */\nexport function createDateShortcuts(towardFuture = false): DateShortcut[] {\n\treturn towardFuture\n\t\t? [\n\t\t\t\tcreateDateShortcut(\"今天\", 0, \"day\"),\n\t\t\t\tcreateDateShortcut(\"明天\", 1, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一周后\", 7, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一月后\", 1, \"month\"),\n\t\t\t\tcreateDateShortcut(\"一年后\", 1, \"year\"),\n\t\t\t]\n\t\t: [\n\t\t\t\tcreateDateShortcut(\"今天\", 0, \"day\"),\n\t\t\t\tcreateDateShortcut(\"昨天\", -1, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一周前\", -7, \"day\"),\n\t\t\t\tcreateDateShortcut(\"一月前\", -1, \"month\"),\n\t\t\t\tcreateDateShortcut(\"一年前\", -1, \"year\"),\n\t\t\t];\n}\n\n/**\n * 返回今天的本地零点。\n *\n * @returns 新建的 `00:00:00.000` Date。\n */\nexport function getStartOfToday(): Date {\n\treturn startOfDay(new Date());\n}\n"],"mappings":";;;;;;;AAqBA,MAAM,uBAAuB,WAAyB;CACrD,IAAI,CAAC,OAAO,cAAc,MAAM,GAAG,MAAM,IAAI,WAAW,mBAAmB;AAC5E;;;;;;;;;AAUA,SAAgB,OAAO,OAAwB;CAC9C,MAAM,OAAO,iBAAiB,OAAO,IAAI,KAAK,MAAM,QAAQ,CAAC,IAAI,IAAI,KAAK,KAAK;CAC/E,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,GAClC,MAAM,IAAI,UAAU,WAAW;CAEhC,OAAO;AACR;;;;;;;AAQA,SAAgB,YAAY,OAAoC;CAC/D,IAAI,EAAE,iBAAiB,QAAQ,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,OAAO;CAC/F,OAAO,OAAO,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC;AACjD;;;;;;;;AASA,SAAgB,WAAW,OAAwB;CAClD,MAAM,OAAO,OAAO,KAAK;CACzB,KAAK,SAAS,GAAG,GAAG,GAAG,CAAC;CACxB,OAAO,OAAO,IAAI;AACnB;;;;;;;;AASA,SAAgB,SAAS,OAAwB;CAChD,MAAM,OAAO,OAAO,KAAK;CACzB,KAAK,SAAS,IAAI,IAAI,IAAI,GAAG;CAC7B,OAAO,OAAO,IAAI;AACnB;;;;;;;;;AAUA,SAAgB,QAAQ,OAAkB,QAAsB;CAC/D,oBAAoB,MAAM;CAC1B,MAAM,OAAO,OAAO,KAAK;CACzB,KAAK,QAAQ,KAAK,QAAQ,IAAI,MAAM;CACpC,OAAO,OAAO,IAAI;AACnB;;;;;;;;;;AAWA,SAAgB,UAAU,OAAkB,QAAsB;CACjE,oBAAoB,MAAM;CAC1B,MAAM,OAAO,OAAO,KAAK;CACzB,MAAM,cAAc,KAAK,QAAQ;CACjC,KAAK,QAAQ,CAAC;CACd,KAAK,SAAS,KAAK,SAAS,IAAI,MAAM;CACtC,MAAM,iBAAiB,IAAI,KAAK,KAAK,QAAQ,CAAC;CAE9C,eAAe,SAAS,eAAe,SAAS,IAAI,GAAG,CAAC;CACxD,MAAM,UAAU,eAAe,QAAQ;CACvC,KAAK,QAAQ,KAAK,IAAI,aAAa,OAAO,CAAC;CAC3C,OAAO,OAAO,IAAI;AACnB;;;;;;;;;AAUA,SAAgB,SAAS,OAAkB,QAAsB;CAChE,oBAAoB,MAAM;CAC1B,OAAO,UAAU,OAAO,SAAS,EAAE;AACpC;;;;;;;;;AAUA,SAAgB,UAAU,MAAiB,OAA2B;CACrE,MAAM,QAAQ,OAAO,IAAI;CACzB,MAAM,SAAS,OAAO,KAAK;CAC3B,OAAO,MAAM,YAAY,MAAM,OAAO,YAAY,KAAK,MAAM,SAAS,MAAM,OAAO,SAAS,KAAK,MAAM,QAAQ,MAAM,OAAO,QAAQ;AACrI;;;;;;;;;AAUA,SAAgB,SAAS,OAAkB,MAAiB,KAAK,IAAI,GAAY;CAChF,OAAO,OAAO,KAAK,CAAC,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,CAAC,QAAQ;AACtD;;;;;;;;AASA,SAAgB,kBAAkB,QAAmB,KAAK,IAAI,GAA6B;CAC1F,OAAO,CAAC,WAAW,KAAK,GAAG,SAAS,KAAK,CAAC;AAC3C;;;;;;;;;;AAWA,SAAgB,iBAAiB,OAAkB,OAAkB,KAAyB;CAC7F,MAAM,YAAY,OAAO,KAAK,CAAC,CAAC,QAAQ;CACxC,MAAM,iBAAiB,OAAO,KAAK,CAAC,CAAC,QAAQ;CAC7C,MAAM,eAAe,OAAO,GAAG,CAAC,CAAC,QAAQ;CACzC,IAAI,iBAAiB,cAAc,MAAM,IAAI,WAAW,qBAAqB;CAC7E,OAAO,aAAa,kBAAkB,aAAa;AACpD;;;;;;;;;;AAWA,SAAgB,mBAAmB,OAAkB,UAA+B,CAAC,GAAW;CAC/F,MAAM,qBAAqB,OAAO,KAAK,CAAC,CAAC,QAAQ,IAAI,OAAO,QAAQ,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK;CACpG,MAAM,WAAW,KAAK,IAAI,iBAAiB;CAC3C,IAAI;CACJ,IAAI;CACJ,IAAI,WAAW,IAAI;EAClB,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,MAAO;EAC5B,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,OAAQ;EAC7B,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,QAAS;EAC9B,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,SAAW;EAChC,UAAU;EACV,OAAO;CACR,OAAO,IAAI,WAAW,UAAY;EACjC,UAAU;EACV,OAAO;CACR,OAAO;EACN,UAAU;EACV,OAAO;CACR;CAKA,OAAO,IAJe,KAAK,mBAAmB,QAAQ,UAAU,SAAS;EACxE,SAAS,QAAQ,WAAW;EAC5B,OAAO,QAAQ,SAAS;CACzB,CACe,CAAC,CAAC,OAAO,KAAK,MAAM,oBAAoB,OAAO,GAAG,IAAI;AACtE;;;;;;;;;AAmCA,MAAM,6BAA6B,MAAY,QAAgB,SAA6B;CAC3F,QAAQ,MAAR;EACC,KAAK;GACJ,KAAK,QAAQ,KAAK,QAAQ,IAAI,MAAM;GACpC;EACD,KAAK;GACJ,KAAK,SAAS,KAAK,SAAS,IAAI,MAAM;GACtC;EACD,KAAK,QACJ,KAAK,YAAY,KAAK,YAAY,IAAI,MAAM;CAE9C;AACD;;;;;;;;;AAUA,MAAM,sBAAsB,MAAc,QAAgB,UAAsC;CAC/F;CACA,aAAmB;EAClB,MAAM,uBAAO,IAAI,KAAK;EACtB,0BAA0B,MAAM,QAAQ,IAAI;EAC5C,KAAK,SAAS,GAAG,GAAG,GAAG,CAAC;EACxB,OAAO;CACR;AACD;;;;;;;;;;AAWA,MAAM,uBAAuB,MAAc,QAAgB,MAAoB,kBAA8C;CAC5H;CACA,aAA2B;EAC1B,MAAM,wBAAQ,IAAI,KAAK;EACvB,MAAM,sBAAM,IAAI,KAAK;EACrB,0BAA0B,eAAe,MAAM,OAAO,eAAe,SAAS,CAAC,QAAQ,IAAI;EAC3F,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC;EACzB,IAAI,SAAS,IAAI,IAAI,IAAI,GAAG;EAC5B,OAAO,CAAC,OAAO,GAAG;CACnB;AACD;;;;;;;;AASA,SAAgB,0BAA0B,OAA0D;CACnG,IAAI,UAAU,QAAQ,UAAU,KAAA,GAAW,OAAO;CAClD,IAAI;CACJ,IAAI,OAAO,UAAU,UAAU,YAAY,IAAI,KAAK,KAAK,CAAC,CAAC,QAAQ;MAC9D,IAAI,OAAO,UAAU,UAAU,YAAY,MAAM,SAAS,CAAC,CAAC,UAAU,KAAK,QAAQ,MAAO;MAC1F,YAAY,MAAM,QAAQ;CAC/B,IAAI,CAAC,OAAO,SAAS,SAAS,GAAG,OAAO;CAExC,MAAM,SAAS;CACf,MAAM,OAAO,SAAS;CACtB,MAAM,MAAM,OAAO;CACnB,MAAM,mBAAmB,KAAK,IAAI;CAClC,MAAM,aAAa,mBAAmB;CACtC,MAAM,mBAAmB,KAAK,IAAI,UAAU,IAAI;CAChD,MAAM,iBAAiB,KAAK,IAAI,UAAU,IAAI;CAC9C,MAAM,gBAAgB,KAAK,IAAI,UAAU,IAAI;CAC7C,MAAM,cAAc,IAAI,KAAK,gBAAgB;CAC7C,MAAM,aAAa,IAAI,KAAK,SAAS;CACrC,MAAM,mBAAmB,YAAY,YAAY,IAAI,WAAW,YAAY,KAAK,KAAK,YAAY,SAAS,IAAI,WAAW,SAAS;CACnI,MAAM,SAAS,aAAa,IAAI,MAAM;CACtC,IAAI,KAAK,IAAI,eAAe,KAAK,IAAI,OAAO,GAAG,KAAK,MAAM,KAAK,IAAI,eAAe,IAAI,EAAE,EAAE,GAAG;CAC7F,IAAI,KAAK,IAAI,eAAe,KAAK,GAAG,OAAO,KAAK;CAChD,IAAI,KAAK,IAAI,eAAe,KAAK,GAAG,OAAO,GAAG,KAAK,IAAI,eAAe,EAAE,GAAG;CAC3E,IAAI,iBAAiB,IAAI,OAAO,KAAK;CACrC,IAAI,iBAAiB,GAAG,OAAO,GAAG,KAAK,MAAM,gBAAgB,CAAC,EAAE,GAAG;CACnE,IAAI,iBAAiB,GAAG,OAAO,GAAG,KAAK,MAAM,aAAa,EAAE,GAAG;CAC/D,IAAI,kBAAkB,GAAG,OAAO,GAAG,KAAK,MAAM,cAAc,EAAE,IAAI;CAClE,IAAI,oBAAoB,GAAG,OAAO,GAAG,KAAK,MAAM,gBAAgB,EAAE,IAAI;CACtE,OAAO;AACR;;;;;;;AAQA,SAAgB,6BAA6B,eAAe,OAAiC;CAC5F,MAAM,wBAAQ,IAAI,KAAK;CACvB,MAAM,sBAAM,IAAI,KAAK;CACrB,0BAA0B,eAAe,MAAM,OAAO,eAAe,IAAI,IAAI,OAAO;CACpF,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC;CACzB,IAAI,SAAS,IAAI,IAAI,IAAI,GAAG;CAC5B,OAAO,CAAC,OAAO,GAAG;AACnB;;;;;;;AAQA,SAAgB,eAAe,MAAqB;CACnD,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAI;AAClC;;;;;;AAOA,SAAgB,uBAA+B;CAC9C,MAAM,wBAAO,IAAI,KAAK,EAAA,CAAE,SAAS;CACjC,IAAI,OAAO,GAAG,OAAO;CACrB,IAAI,OAAO,GAAG,OAAO;CACrB,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,OAAO,IAAI,OAAO;CACtB,IAAI,OAAO,IAAI,OAAO;CACtB,OAAO;AACR;;;;;;;AAQA,SAAgB,yBAAyB,eAAe,OAA4B;CACnF,OAAO,eACJ;EACA,oBAAoB,OAAO,GAAG,OAAO,IAAI;EACzC,oBAAoB,OAAO,GAAG,OAAO,IAAI;EACzC,oBAAoB,OAAO,GAAG,OAAO,IAAI;EACzC,oBAAoB,OAAO,GAAG,SAAS,IAAI;EAC3C,oBAAoB,OAAO,GAAG,SAAS,IAAI;EAC3C,oBAAoB,OAAO,GAAG,SAAS,IAAI;EAC3C,oBAAoB,OAAO,GAAG,QAAQ,IAAI;CAC3C,IACC;EACA,oBAAoB,OAAO,GAAG,OAAO,KAAK;EAC1C,oBAAoB,OAAO,GAAG,OAAO,KAAK;EAC1C,oBAAoB,OAAO,GAAG,OAAO,KAAK;EAC1C,oBAAoB,OAAO,GAAG,SAAS,KAAK;EAC5C,oBAAoB,OAAO,GAAG,SAAS,KAAK;EAC5C,oBAAoB,OAAO,GAAG,SAAS,KAAK;EAC5C,oBAAoB,OAAO,GAAG,QAAQ,KAAK;CAC5C;AACH;;;;;;;AAQA,SAAgB,oBAAoB,eAAe,OAAuB;CACzE,OAAO,eACJ;EACA,mBAAmB,MAAM,GAAG,KAAK;EACjC,mBAAmB,MAAM,GAAG,KAAK;EACjC,mBAAmB,OAAO,GAAG,KAAK;EAClC,mBAAmB,OAAO,GAAG,OAAO;EACpC,mBAAmB,OAAO,GAAG,MAAM;CACpC,IACC;EACA,mBAAmB,MAAM,GAAG,KAAK;EACjC,mBAAmB,MAAM,IAAI,KAAK;EAClC,mBAAmB,OAAO,IAAI,KAAK;EACnC,mBAAmB,OAAO,IAAI,OAAO;EACrC,mBAAmB,OAAO,IAAI,MAAM;CACrC;AACH;;;;;;AAOA,SAAgB,kBAAwB;CACvC,OAAO,2BAAW,IAAI,KAAK,CAAC;AAC7B"}

package/dist/dom/style.mjs

@@ -37,9 +37,9 @@ const toCssPropertyName = (key) => {
 */
 function addCssUnit(value, unit = "px") {
 	if (value === null || value === void 0 || value === "") return "";
-	if (unit.length === 0) throw new RangeError("unit cannot be empty.");
+	if (unit.length === 0) throw new RangeError("`unit` 不能为空。");
 	if (typeof value === "number") {
-		if (!Number.isFinite(value)) throw new RangeError("value must be finite.");
+		if (!Number.isFinite(value)) throw new RangeError("`value` 必须是有限数。");
 		return value === 0 ? "0" : `${value}${unit}`;
 	}
 	const trimmed = value.trim();
@@ -64,7 +64,7 @@ function serializeStyle(styles) {
 		return value.length === 0 ? "" : value.endsWith(";") ? value : `${value};`;
 	}
 	return Object.entries(styles).filter(([, value]) => value !== null && value !== void 0 && value !== "").map(([key, value]) => {
-		if (typeof value === "number" && !Number.isFinite(value)) throw new RangeError(`Style property "${key}" must be finite.`);
+		if (typeof value === "number" && !Number.isFinite(value)) throw new RangeError(`样式属性“${key}”必须是有限数。`);
 		return `${toCssPropertyName(key)}:${String(value)};`;
 	}).join(" ");
 }

package/dist/dom/style.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"style.mjs","names":[],"sources":["../../src/dom/style.ts"],"sourcesContent":["/** 可序列化为内联 CSS 的单个值。 */\nexport type StyleValue = number | string | null | undefined;\n\n/** camelCase、kebab-case 或 CSS 自定义属性组成的只读样式对象。 */\nexport type StyleObject = Readonly<Record<string, StyleValue>>;\n\n/** 字符串、样式对象、嵌套数组或空值。 */\nexport type StyleInput = string | StyleObject | readonly StyleInput[] | null | undefined;\n\n/**\n * 判断 StyleInput 是否为递归样式数组。\n *\n * @param value - 待缩小的样式输入。\n * @returns 是只读样式数组时返回 `true`。\n */\nconst isStyleArray = (value: StyleInput): value is readonly StyleInput[] => Array.isArray(value);\n\n/**\n * 判断文本是否可按十进制数值追加 CSS 单位。\n *\n * @param value - 已去除外围空白的文本。\n * @returns 有限十进制数值返回 `true`；二、八、十六进制前缀返回 `false`。\n */\nconst isNumericString = (value: string): boolean => {\n\tif (value.length === 0 || !Number.isFinite(Number(value))) return false;\n\tconst unsigned = value.startsWith(\"+\") || value.startsWith(\"-\") ? value.slice(1) : value;\n\treturn !/^0[box]/iu.test(unsigned);\n};\n\n/**\n * 把 JavaScript 样式属性名转换为 CSS 属性名。\n *\n * @param key - camelCase、kebab-case 或 CSS 自定义属性名。\n * @returns kebab-case 属性名；`--` 自定义属性保持原样。\n */\nconst toCssPropertyName = (key: string): string => {\n\tif (key.startsWith(\"--\")) return key;\n\tconst normalized = key.startsWith(\"ms\") ? `-${key}` : key;\n\treturn normalized.replace(/([A-Z])/gu, \"-$1\").toLowerCase();\n};\n\n/**\n * 为数值或纯数字字符串添加 CSS 单位。\n *\n * @param value - 数字、数字字符串或已有单位的 CSS 值；空值返回空字符串。\n * @param unit - 非零数字使用的单位，默认 `px`。\n * @returns 零统一返回 `\"0\"`；非数字字符串保持原样。\n * @throws `RangeError` 当数字非有限或单位为空。\n */\nexport function addCssUnit(value?: string | number | null, unit = \"px\"): string {\n\tif (value === null || value === undefined || value === \"\") return \"\";\n\tif (unit.length === 0) throw new RangeError(\"unit cannot be empty.\");\n\tif (typeof value === \"number\") {\n\t\tif (!Number.isFinite(value)) throw new RangeError(\"value must be finite.\");\n\t\treturn value === 0 ? \"0\" : `${value}${unit}`;\n\t}\n\tconst trimmed = value.trim();\n\tif (!isNumericString(trimmed)) return value;\n\treturn Number(trimmed) === 0 ? \"0\" : `${trimmed}${unit}`;\n}\n\n/**\n * 将样式字符串、对象或嵌套数组序列化为内联 CSS。\n *\n * @remarks 本函数只负责结构转换，不是 CSS 安全清洗器。不可信值必须由调用方按照\n * 实际渲染上下文验证，尤其不能允许用户控制属性名、`url()` 或自定义属性内容。\n * 数字不会自动附加单位；需要长度单位时应先调用 {@link addCssUnit}。\n * @param styles - 可嵌套样式输入；后出现的声明由 CSS 层叠规则覆盖先前声明。\n * @returns 以分号结束、以空格分隔的 CSS 声明字符串。\n * @throws `RangeError` 当对象中包含 `NaN` 或无穷数字。\n */\nexport function serializeStyle(styles: StyleInput): string {\n\tif (styles === null || styles === undefined || styles === \"\") return \"\";\n\tif (isStyleArray(styles)) {\n\t\treturn styles\n\t\t\t.map((item) => serializeStyle(item))\n\t\t\t.filter((item) => item.length > 0)\n\t\t\t.join(\" \");\n\t}\n\tif (typeof styles === \"string\") {\n\t\tconst value = styles.trim();\n\t\treturn value.length === 0 ? \"\" : value.endsWith(\";\") ? value : `${value};`;\n\t}\n\n\treturn Object.entries(styles)\n\t\t.filter(([, value]) => value !== null && value !== undefined && value !== \"\")\n\t\t.map(([key, value]) => {\n\t\t\tif (typeof value === \"number\" && !Number.isFinite(value)) throw new RangeError(`Style property \"${key}\" must be finite.`);\n\t\t\treturn `${toCssPropertyName(key)}:${String(value)};`;\n\t\t})\n\t\t.join(\" \");\n}\n"],"mappings":";;;;;;;AAeA,MAAM,gBAAgB,UAAsD,MAAM,QAAQ,KAAK;;;;;;;AAQ/F,MAAM,mBAAmB,UAA2B;CACnD,IAAI,MAAM,WAAW,KAAK,CAAC,OAAO,SAAS,OAAO,KAAK,CAAC,GAAG,OAAO;CAClE,MAAM,WAAW,MAAM,WAAW,GAAG,KAAK,MAAM,WAAW,GAAG,IAAI,MAAM,MAAM,CAAC,IAAI;CACnF,OAAO,CAAC,YAAY,KAAK,QAAQ;AAClC;;;;;;;AAQA,MAAM,qBAAqB,QAAwB;CAClD,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;CAEjC,QADmB,IAAI,WAAW,IAAI,IAAI,IAAI,QAAQ,IAAA,CACpC,QAAQ,aAAa,KAAK,CAAC,CAAC,YAAY;AAC3D;;;;;;;;;AAUA,SAAgB,WAAW,OAAgC,OAAO,MAAc;CAC/E,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,IAAI,OAAO;CAClE,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,WAAW,uBAAuB;CACnE,IAAI,OAAO,UAAU,UAAU;EAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,MAAM,IAAI,WAAW,uBAAuB;EACzE,OAAO,UAAU,IAAI,MAAM,GAAG,QAAQ;CACvC;CACA,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,gBAAgB,OAAO,GAAG,OAAO;CACtC,OAAO,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,UAAU;AACnD;;;;;;;;;;;AAYA,SAAgB,eAAe,QAA4B;CAC1D,IAAI,WAAW,QAAQ,WAAW,KAAA,KAAa,WAAW,IAAI,OAAO;CACrE,IAAI,aAAa,MAAM,GACtB,OAAO,OACL,KAAK,SAAS,eAAe,IAAI,CAAC,CAAC,CACnC,QAAQ,SAAS,KAAK,SAAS,CAAC,CAAC,CACjC,KAAK,GAAG;CAEX,IAAI,OAAO,WAAW,UAAU;EAC/B,MAAM,QAAQ,OAAO,KAAK;EAC1B,OAAO,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,GAAG,IAAI,QAAQ,GAAG,MAAM;CACzE;CAEA,OAAO,OAAO,QAAQ,MAAM,CAAC,CAC3B,QAAQ,GAAG,WAAW,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,EAAE,CAAC,CAC5E,KAAK,CAAC,KAAK,WAAW;EACtB,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG,MAAM,IAAI,WAAW,mBAAmB,IAAI,kBAAkB;EACxH,OAAO,GAAG,kBAAkB,GAAG,EAAE,GAAG,OAAO,KAAK,EAAE;CACnD,CAAC,CAAC,CACD,KAAK,GAAG;AACX"}
+{"version":3,"file":"style.mjs","names":[],"sources":["../../src/dom/style.ts"],"sourcesContent":["/** 可序列化为内联 CSS 的单个值。 */\nexport type StyleValue = number | string | null | undefined;\n\n/** camelCase、kebab-case 或 CSS 自定义属性组成的只读样式对象。 */\nexport type StyleObject = Readonly<Record<string, StyleValue>>;\n\n/** 字符串、样式对象、嵌套数组或空值。 */\nexport type StyleInput = string | StyleObject | readonly StyleInput[] | null | undefined;\n\n/**\n * 判断 StyleInput 是否为递归样式数组。\n *\n * @param value - 待缩小的样式输入。\n * @returns 是只读样式数组时返回 `true`。\n */\nconst isStyleArray = (value: StyleInput): value is readonly StyleInput[] => Array.isArray(value);\n\n/**\n * 判断文本是否可按十进制数值追加 CSS 单位。\n *\n * @param value - 已去除外围空白的文本。\n * @returns 有限十进制数值返回 `true`；二、八、十六进制前缀返回 `false`。\n */\nconst isNumericString = (value: string): boolean => {\n\tif (value.length === 0 || !Number.isFinite(Number(value))) return false;\n\tconst unsigned = value.startsWith(\"+\") || value.startsWith(\"-\") ? value.slice(1) : value;\n\treturn !/^0[box]/iu.test(unsigned);\n};\n\n/**\n * 把 JavaScript 样式属性名转换为 CSS 属性名。\n *\n * @param key - camelCase、kebab-case 或 CSS 自定义属性名。\n * @returns kebab-case 属性名；`--` 自定义属性保持原样。\n */\nconst toCssPropertyName = (key: string): string => {\n\tif (key.startsWith(\"--\")) return key;\n\tconst normalized = key.startsWith(\"ms\") ? `-${key}` : key;\n\treturn normalized.replace(/([A-Z])/gu, \"-$1\").toLowerCase();\n};\n\n/**\n * 为数值或纯数字字符串添加 CSS 单位。\n *\n * @param value - 数字、数字字符串或已有单位的 CSS 值；空值返回空字符串。\n * @param unit - 非零数字使用的单位，默认 `px`。\n * @returns 零统一返回 `\"0\"`；非数字字符串保持原样。\n * @throws `RangeError` 当数字非有限或单位为空。\n */\nexport function addCssUnit(value?: string | number | null, unit = \"px\"): string {\n\tif (value === null || value === undefined || value === \"\") return \"\";\n\tif (unit.length === 0) throw new RangeError(\"`unit` 不能为空。\");\n\tif (typeof value === \"number\") {\n\t\tif (!Number.isFinite(value)) throw new RangeError(\"`value` 必须是有限数。\");\n\t\treturn value === 0 ? \"0\" : `${value}${unit}`;\n\t}\n\tconst trimmed = value.trim();\n\tif (!isNumericString(trimmed)) return value;\n\treturn Number(trimmed) === 0 ? \"0\" : `${trimmed}${unit}`;\n}\n\n/**\n * 将样式字符串、对象或嵌套数组序列化为内联 CSS。\n *\n * @remarks 本函数只负责结构转换，不是 CSS 安全清洗器。不可信值必须由调用方按照\n * 实际渲染上下文验证，尤其不能允许用户控制属性名、`url()` 或自定义属性内容。\n * 数字不会自动附加单位；需要长度单位时应先调用 {@link addCssUnit}。\n * @param styles - 可嵌套样式输入；后出现的声明由 CSS 层叠规则覆盖先前声明。\n * @returns 以分号结束、以空格分隔的 CSS 声明字符串。\n * @throws `RangeError` 当对象中包含 `NaN` 或无穷数字。\n */\nexport function serializeStyle(styles: StyleInput): string {\n\tif (styles === null || styles === undefined || styles === \"\") return \"\";\n\tif (isStyleArray(styles)) {\n\t\treturn styles\n\t\t\t.map((item) => serializeStyle(item))\n\t\t\t.filter((item) => item.length > 0)\n\t\t\t.join(\" \");\n\t}\n\tif (typeof styles === \"string\") {\n\t\tconst value = styles.trim();\n\t\treturn value.length === 0 ? \"\" : value.endsWith(\";\") ? value : `${value};`;\n\t}\n\n\treturn Object.entries(styles)\n\t\t.filter(([, value]) => value !== null && value !== undefined && value !== \"\")\n\t\t.map(([key, value]) => {\n\t\t\tif (typeof value === \"number\" && !Number.isFinite(value)) throw new RangeError(`样式属性“${key}”必须是有限数。`);\n\t\t\treturn `${toCssPropertyName(key)}:${String(value)};`;\n\t\t})\n\t\t.join(\" \");\n}\n"],"mappings":";;;;;;;AAeA,MAAM,gBAAgB,UAAsD,MAAM,QAAQ,KAAK;;;;;;;AAQ/F,MAAM,mBAAmB,UAA2B;CACnD,IAAI,MAAM,WAAW,KAAK,CAAC,OAAO,SAAS,OAAO,KAAK,CAAC,GAAG,OAAO;CAClE,MAAM,WAAW,MAAM,WAAW,GAAG,KAAK,MAAM,WAAW,GAAG,IAAI,MAAM,MAAM,CAAC,IAAI;CACnF,OAAO,CAAC,YAAY,KAAK,QAAQ;AAClC;;;;;;;AAQA,MAAM,qBAAqB,QAAwB;CAClD,IAAI,IAAI,WAAW,IAAI,GAAG,OAAO;CAEjC,QADmB,IAAI,WAAW,IAAI,IAAI,IAAI,QAAQ,IAAA,CACpC,QAAQ,aAAa,KAAK,CAAC,CAAC,YAAY;AAC3D;;;;;;;;;AAUA,SAAgB,WAAW,OAAgC,OAAO,MAAc;CAC/E,IAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,IAAI,OAAO;CAClE,IAAI,KAAK,WAAW,GAAG,MAAM,IAAI,WAAW,cAAc;CAC1D,IAAI,OAAO,UAAU,UAAU;EAC9B,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,MAAM,IAAI,WAAW,iBAAiB;EACnE,OAAO,UAAU,IAAI,MAAM,GAAG,QAAQ;CACvC;CACA,MAAM,UAAU,MAAM,KAAK;CAC3B,IAAI,CAAC,gBAAgB,OAAO,GAAG,OAAO;CACtC,OAAO,OAAO,OAAO,MAAM,IAAI,MAAM,GAAG,UAAU;AACnD;;;;;;;;;;;AAYA,SAAgB,eAAe,QAA4B;CAC1D,IAAI,WAAW,QAAQ,WAAW,KAAA,KAAa,WAAW,IAAI,OAAO;CACrE,IAAI,aAAa,MAAM,GACtB,OAAO,OACL,KAAK,SAAS,eAAe,IAAI,CAAC,CAAC,CACnC,QAAQ,SAAS,KAAK,SAAS,CAAC,CAAC,CACjC,KAAK,GAAG;CAEX,IAAI,OAAO,WAAW,UAAU;EAC/B,MAAM,QAAQ,OAAO,KAAK;EAC1B,OAAO,MAAM,WAAW,IAAI,KAAK,MAAM,SAAS,GAAG,IAAI,QAAQ,GAAG,MAAM;CACzE;CAEA,OAAO,OAAO,QAAQ,MAAM,CAAC,CAC3B,QAAQ,GAAG,WAAW,UAAU,QAAQ,UAAU,KAAA,KAAa,UAAU,EAAE,CAAC,CAC5E,KAAK,CAAC,KAAK,WAAW;EACtB,IAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG,MAAM,IAAI,WAAW,QAAQ,IAAI,SAAS;EACpG,OAAO,GAAG,kBAAkB,GAAG,EAAE,GAAG,OAAO,KAAK,EAAE;CACnD,CAAC,CAAC,CACD,KAAK,GAAG;AACX"}

package/dist/env/index.d.mts

@@ -30,8 +30,8 @@ declare function isUniApp(): boolean;
 /**
  * 判断当前运行时是否具备本库完整加密 API 所需的 Web Crypto 能力。
  *
- * @remarks 只具有 `getRandomValues` 的平台仍可调用随机数与随机字符串 API，但本函数
- * 会返回 `false`，因为摘要、PBKDF2、AES-GCM、RSA 与 ECC 还需要完整的 `SubtleCrypto` 方法集。
+ * @remarks 普通随机数、随机字符串和 UUID 在缺少 Web Crypto 时可以回退到 `Math.random()`，但本函数
+ * 仍会返回 `false`，因为摘要、PBKDF2、AES-GCM、RSA 与 ECC 需要完整的 Web Crypto 能力。
  * @returns 同时提供本库 Web Crypto 功能所需方法时返回 `true`。
  */
 declare function hasWebCrypto(): boolean;

package/dist/env/index.mjs

@@ -1,24 +1,23 @@
 //#region src/env/index.ts
-const runtimeGlobals = globalThis;
 /**
 * 延迟读取当前 User-Agent。
 *
 * @returns Navigator 不存在或字段类型异常时返回空字符串。
 */
-const currentUserAgent = () => typeof runtimeGlobals.navigator?.userAgent === "string" ? runtimeGlobals.navigator.userAgent : "";
+const currentUserAgent = () => typeof globalThis.navigator?.userAgent === "string" ? globalThis.navigator.userAgent : "";
 /**
 * 延迟读取当前设备报告的最大触点数。
 *
 * @returns Navigator 不存在或字段类型异常时返回 `0`。
 */
-const currentTouchPoints = () => typeof runtimeGlobals.navigator?.maxTouchPoints === "number" ? runtimeGlobals.navigator.maxTouchPoints : 0;
+const currentTouchPoints = () => typeof globalThis.navigator?.maxTouchPoints === "number" ? globalThis.navigator.maxTouchPoints : 0;
 /**
 * 判断当前运行时是否具有浏览器 `window` 与 `document`。
 *
 * @returns 两项能力均存在时返回 `true`；不读取 DOM 内容。
 */
 function isBrowser() {
-	const window = runtimeGlobals.window;
+	const window = globalThis.window;
 	return window !== void 0 && window !== null && window.document !== null && typeof window.document === "object";
 }
 /**
@@ -29,7 +28,7 @@ function isBrowser() {
 * @returns 具有 `importScripts` 且不是浏览器 Window 时返回 `true`。
 */
 function isWebWorker() {
-	return !isBrowser() && typeof runtimeGlobals.importScripts === "function";
+	return !isBrowser() && typeof Reflect.get(globalThis, "importScripts") === "function";
 }
 /**
 * 判断当前运行时是否暴露 Node.js 版本标记。
@@ -37,7 +36,10 @@ function isWebWorker() {
 * @returns `process.versions.node` 为字符串时返回 `true`。
 */
 function isNode() {
-	return typeof runtimeGlobals.process?.versions?.node === "string";
+	const process = Reflect.get(globalThis, "process");
+	if (typeof process !== "object" && typeof process !== "function" || process === null) return false;
+	const versions = Reflect.get(process, "versions");
+	return (typeof versions === "object" || typeof versions === "function") && versions !== null && typeof Reflect.get(versions, "node") === "string";
 }
 /**
 * 判断当前运行时是否暴露 uni-app 的 `uni` 全局对象。
@@ -45,17 +47,17 @@ function isNode() {
 * @returns 全局属性存在且不为 `undefined` 时返回 `true`；不调用任何平台 API。
 */
 function isUniApp() {
-	return runtimeGlobals.uni !== void 0;
+	return Reflect.get(globalThis, "uni") !== void 0;
 }
 /**
 * 判断当前运行时是否具备本库完整加密 API 所需的 Web Crypto 能力。
 *
-* @remarks 只具有 `getRandomValues` 的平台仍可调用随机数与随机字符串 API，但本函数
-* 会返回 `false`，因为摘要、PBKDF2、AES-GCM、RSA 与 ECC 还需要完整的 `SubtleCrypto` 方法集。
+* @remarks 普通随机数、随机字符串和 UUID 在缺少 Web Crypto 时可以回退到 `Math.random()`，但本函数
+* 仍会返回 `false`，因为摘要、PBKDF2、AES-GCM、RSA 与 ECC 需要完整的 Web Crypto 能力。
 * @returns 同时提供本库 Web Crypto 功能所需方法时返回 `true`。
 */
 function hasWebCrypto() {
-	const crypto = runtimeGlobals.crypto;
+	const crypto = globalThis.crypto;
 	const subtle = crypto?.subtle;
 	return typeof crypto?.getRandomValues === "function" && typeof subtle?.decrypt === "function" && typeof subtle.deriveBits === "function" && typeof subtle.deriveKey === "function" && typeof subtle.digest === "function" && typeof subtle.encrypt === "function" && typeof subtle.exportKey === "function" && typeof subtle.generateKey === "function" && typeof subtle.importKey === "function" && typeof subtle.sign === "function" && typeof subtle.verify === "function";
 }