@fluixi/storage 0.1.0-alpha.0

package/dist/encryption/web-crypto.mjs

@@ -0,0 +1,58 @@
+// src/core/errors.ts
+var StorageError = class extends Error {
+  constructor(code, message, options = {}) {
+    super(message);
+    this.name = new.target.name;
+    this.code = code;
+    this.key = options.key;
+    if (options.cause !== void 0) this.cause = options.cause;
+  }
+};
+var StorageEncryptionError = class extends StorageError {
+};
+var StorageEncryptionUnavailableError = class extends StorageEncryptionError {
+  constructor(message, options = {}) {
+    super("encryption-unavailable", message, options);
+  }
+};
+
+// src/encryption/web-crypto.ts
+var IV_BYTES = 12;
+var TAG_BYTES = 16;
+function webCryptoProvider(crypto) {
+  const resolve = () => {
+    const c = crypto ?? globalThis.crypto;
+    if (!c?.subtle || !c.getRandomValues) {
+      throw new StorageEncryptionUnavailableError("Web Crypto is not available in this runtime; pass a provider in the encryption options.");
+    }
+    return c;
+  };
+  return {
+    algorithm: "AES-256-GCM",
+    async encrypt(data, key, aad) {
+      const c = resolve();
+      const iv = c.getRandomValues(new Uint8Array(IV_BYTES));
+      const params = { name: "AES-GCM", iv, tagLength: TAG_BYTES * 8 };
+      if (aad) params.additionalData = aad;
+      const sealed = new Uint8Array(await c.subtle.encrypt(params, key, data));
+      return {
+        algorithm: "AES-256-GCM",
+        iv,
+        ciphertext: sealed.slice(0, sealed.length - TAG_BYTES),
+        tag: sealed.slice(sealed.length - TAG_BYTES)
+      };
+    },
+    async decrypt(data, key, aad) {
+      const c = resolve();
+      const sealed = new Uint8Array(data.ciphertext.length + data.tag.length);
+      sealed.set(data.ciphertext);
+      sealed.set(data.tag, data.ciphertext.length);
+      const params = { name: "AES-GCM", iv: data.iv, tagLength: TAG_BYTES * 8 };
+      if (aad) params.additionalData = aad;
+      return new Uint8Array(await c.subtle.decrypt(params, key, sealed));
+    }
+  };
+}
+export {
+  webCryptoProvider
+};