@futdevpro/fsm-dynamo 1.16.39 → 1.16.40

package/build/_modules/crypto/_collections/crypto.util.d.ts

@@ -1,162 +1,162 @@
-/**
- * Configuration options for encryption/decryption
- */
-export interface CryptoConfig {
-    ivLength?: number;
-    saltLength?: number;
-    keyIterations?: number;
-    keySize?: number;
-}
-/**
- * A utility class for stable encryption and decryption of data
- * Uses AES-256-CBC with deterministic IV and salt for consistent results across systems
- * Prioritizes reliability and cross-platform compatibility over security
- *
- * @important DETERMINISTIC ENCRYPTION: This implementation produces identical encrypted
- * output for identical input data and key across different systems and multiple calls.
- * The same input will ALWAYS generate the same encrypted string on any platform.
- *
- * @warning SECURITY NOTICE: This deterministic behavior is intentional for cross-platform
- * compatibility but reduces security. Identical inputs produce identical outputs, which
- * can be exploited for pattern analysis attacks. Use only when consistency across
- * systems is more important than cryptographic security.
- */
-export declare class DyFM_Crypto {
-    private static readonly CRYPTO_VERSION;
-    private static readonly DEFAULT_CONFIG;
-    private static readonly defaultErrorUserMsg;
-    /**
-     * Validates the input data and key with comprehensive error messages
-     * @throws {DyFM_Error} if validation fails
-     */
-    private static validateInput;
-    /**
-     * Validates data for encryption
-     */
-    private static validateEncryptData;
-    /**
-     * Validates data for decryption
-     */
-    private static validateDecryptData;
-    /**
-     * Generates a deterministic IV based on the input data and key
-     * Uses SHA-256 with proper truncation for maximum stability
-     *
-     * @important DETERMINISTIC: Same data + key will ALWAYS produce the same IV
-     * across all systems and CryptoJS versions for consistent encryption results
-     */
-    private static generateIV;
-    /**
-     * Generates a deterministic salt based on the input data and key
-     * Uses SHA-256 with proper truncation for maximum stability
-     *
-     * @important DETERMINISTIC: Same data + key will ALWAYS produce the same salt
-     * across all systems and CryptoJS versions for consistent encryption results
-     */
-    private static generateSalt;
-    /**
-     * Creates a deterministic seed for IV/salt generation
-     * Ensures consistent output across all environments and versions
-     */
-    private static createDeterministicSeed;
-    /**
-     * Derives a key using PBKDF2 with reduced iterations for stability
-     */
-    private static deriveKey;
-    /**
-     * Safely serializes data to JSON with deterministic ordering
-     * Uses regular JSON.stringify but ensures consistency through other means
-     */
-    private static safeSerialize;
-    /**
-     * Deterministic JSON stringify that produces identical output across environments
-     * Uses a hybrid approach: sorts keys for consistency but preserves order for arrays
-     */
-    private static deterministicStringify;
-    /**
-     * Safely deserializes JSON data with enhanced error handling
-     */
-    private static safeDeserialize;
-    /**
-     * Encrypts data using AES-256-CBC with deterministic IV and salt
-     *
-     * @important DETERMINISTIC BEHAVIOR: This method will produce identical encrypted
-     * output for identical input parameters across different systems, Node.js versions,
-     * and multiple function calls. The same data + key combination will ALWAYS generate
-     * the same encrypted string.
-     *
-     * @param data The data to encrypt
-     * @param key The encryption key
-     * @param config Optional configuration
-     * @returns URL-safe encrypted string that is identical across systems for same input
-     * @throws {DyFM_Error} if encryption fails
-     *
-     * @example
-     * // These will produce identical results on any system:
-     * const result1 = DyFM_Crypto.encrypt({id: 1}, "mykey");
-     * const result2 = DyFM_Crypto.encrypt({id: 1}, "mykey");
-     * console.log(result1 === result2); // Always true
-     */
-    static encrypt<T>(data: T, key: string, config?: CryptoConfig): string;
-    /**
-     * Decrypts data that was encrypted using encrypt()
-     * @param encryptedData The encrypted data
-     * @param key The decryption key
-     * @param config Optional configuration
-     * @returns The decrypted data
-     * @throws {DyFM_Error} if decryption fails
-     */
-    static decrypt<T>(encryptedData: string, key: string, config?: CryptoConfig): T;
-    /**
-     * Generates a secure random key with enhanced complexity
-     * @param length Length of the key in characters (default: 32)
-     * @param customChars Optional custom character set to use
-     * @returns A secure random key with mixed case letters, numbers, and special characters
-     */
-    static generateKey(length?: number, customChars?: string): string;
-    /**
-     * Validates if a string is a valid encrypted data
-     * @param encryptedData The data to validate
-     * @returns true if the data appears to be valid encrypted data
-     */
-    static isValidEncryptedData(encryptedData: string): boolean;
-    /** Az AT-REST DB-field-encryption envelope-prefixe. */
-    static readonly DB_ENC_PREFIX: string;
-    /**
-     * DB-mező titkosítása verzió-envelope-pel. Visszaad: `DYENC1:<keyVersion>:<ciphertext>`.
-     * A `DyFM_Crypto.encrypt` determinisztikus (Q3: elfogadott promptra) — üres/undefined/null-ra
-     * dob, ezért a HÍVÓ (nts-transzform) skip-eli az ilyen értékeket.
-     *
-     * @param data A titkosítandó érték
-     * @param key A titkosító kulcs (FDP_CORE_DBCONTENT_CRYPT_KEY)
-     * @param keyVersion A kulcs-verzió (rotációhoz; default 1)
-     */
-    static encryptDbValue<T>(data: T, key: string, keyVersion?: number, config?: CryptoConfig): string;
-    /** True, ha az érték a DB-enc envelope-pel kezdődik (tehát titkosított, nem legacy plaintext). */
-    static isEncryptedDbValue(value: unknown): value is string;
-    /** A DB-enc envelope `keyVersion`-je, vagy `null` ha az érték nem envelope. */
-    static getDbValueKeyVersion(value: unknown): number | null;
-    /**
-     * DB-enc envelope visszafejtése. A hívó a `getDbValueKeyVersion` alapján oldja fel a megfelelő
-     * kulcsot, és azt adja át. Ha az érték NEM envelope (legacy plaintext), a hívó NE ezt hívja
-     * (a read-transzform envelope-detektálással szűr → a plaintext változatlanul jön vissza).
-     */
-    static decryptDbValue<T>(value: string, key: string, config?: CryptoConfig): T;
-    /**
-     * Analyzes encrypted data to help with debugging
-     * @param encryptedData The encrypted data to analyze
-     * @returns Analysis information about the encrypted data
-     */
-    static analyzeEncryptedData(encryptedData: string): {
-        isValid: boolean;
-        version?: string;
-        dataLength: number;
-        hasValidFormat: boolean;
-        error?: string;
-    };
-    /**
-     * Gets default error settings with enhanced debugging information
-     */
-    private static getDefaultErrorSettings;
-}
+/**
+ * Configuration options for encryption/decryption
+ */
+export interface CryptoConfig {
+    ivLength?: number;
+    saltLength?: number;
+    keyIterations?: number;
+    keySize?: number;
+}
+/**
+ * A utility class for stable encryption and decryption of data
+ * Uses AES-256-CBC with deterministic IV and salt for consistent results across systems
+ * Prioritizes reliability and cross-platform compatibility over security
+ *
+ * @important DETERMINISTIC ENCRYPTION: This implementation produces identical encrypted
+ * output for identical input data and key across different systems and multiple calls.
+ * The same input will ALWAYS generate the same encrypted string on any platform.
+ *
+ * @warning SECURITY NOTICE: This deterministic behavior is intentional for cross-platform
+ * compatibility but reduces security. Identical inputs produce identical outputs, which
+ * can be exploited for pattern analysis attacks. Use only when consistency across
+ * systems is more important than cryptographic security.
+ */
+export declare class DyFM_Crypto {
+    private static readonly CRYPTO_VERSION;
+    private static readonly DEFAULT_CONFIG;
+    private static readonly defaultErrorUserMsg;
+    /**
+     * Validates the input data and key with comprehensive error messages
+     * @throws {DyFM_Error} if validation fails
+     */
+    private static validateInput;
+    /**
+     * Validates data for encryption
+     */
+    private static validateEncryptData;
+    /**
+     * Validates data for decryption
+     */
+    private static validateDecryptData;
+    /**
+     * Generates a deterministic IV based on the input data and key
+     * Uses SHA-256 with proper truncation for maximum stability
+     *
+     * @important DETERMINISTIC: Same data + key will ALWAYS produce the same IV
+     * across all systems and CryptoJS versions for consistent encryption results
+     */
+    private static generateIV;
+    /**
+     * Generates a deterministic salt based on the input data and key
+     * Uses SHA-256 with proper truncation for maximum stability
+     *
+     * @important DETERMINISTIC: Same data + key will ALWAYS produce the same salt
+     * across all systems and CryptoJS versions for consistent encryption results
+     */
+    private static generateSalt;
+    /**
+     * Creates a deterministic seed for IV/salt generation
+     * Ensures consistent output across all environments and versions
+     */
+    private static createDeterministicSeed;
+    /**
+     * Derives a key using PBKDF2 with reduced iterations for stability
+     */
+    private static deriveKey;
+    /**
+     * Safely serializes data to JSON with deterministic ordering
+     * Uses regular JSON.stringify but ensures consistency through other means
+     */
+    private static safeSerialize;
+    /**
+     * Deterministic JSON stringify that produces identical output across environments
+     * Uses a hybrid approach: sorts keys for consistency but preserves order for arrays
+     */
+    private static deterministicStringify;
+    /**
+     * Safely deserializes JSON data with enhanced error handling
+     */
+    private static safeDeserialize;
+    /**
+     * Encrypts data using AES-256-CBC with deterministic IV and salt
+     *
+     * @important DETERMINISTIC BEHAVIOR: This method will produce identical encrypted
+     * output for identical input parameters across different systems, Node.js versions,
+     * and multiple function calls. The same data + key combination will ALWAYS generate
+     * the same encrypted string.
+     *
+     * @param data The data to encrypt
+     * @param key The encryption key
+     * @param config Optional configuration
+     * @returns URL-safe encrypted string that is identical across systems for same input
+     * @throws {DyFM_Error} if encryption fails
+     *
+     * @example
+     * // These will produce identical results on any system:
+     * const result1 = DyFM_Crypto.encrypt({id: 1}, "mykey");
+     * const result2 = DyFM_Crypto.encrypt({id: 1}, "mykey");
+     * console.log(result1 === result2); // Always true
+     */
+    static encrypt<T>(data: T, key: string, config?: CryptoConfig): string;
+    /**
+     * Decrypts data that was encrypted using encrypt()
+     * @param encryptedData The encrypted data
+     * @param key The decryption key
+     * @param config Optional configuration
+     * @returns The decrypted data
+     * @throws {DyFM_Error} if decryption fails
+     */
+    static decrypt<T>(encryptedData: string, key: string, config?: CryptoConfig): T;
+    /**
+     * Generates a secure random key with enhanced complexity
+     * @param length Length of the key in characters (default: 32)
+     * @param customChars Optional custom character set to use
+     * @returns A secure random key with mixed case letters, numbers, and special characters
+     */
+    static generateKey(length?: number, customChars?: string): string;
+    /**
+     * Validates if a string is a valid encrypted data
+     * @param encryptedData The data to validate
+     * @returns true if the data appears to be valid encrypted data
+     */
+    static isValidEncryptedData(encryptedData: string): boolean;
+    /** Az AT-REST DB-field-encryption envelope-prefixe. */
+    static readonly DB_ENC_PREFIX: string;
+    /**
+     * DB-mező titkosítása verzió-envelope-pel. Visszaad: `DYENC1:<keyVersion>:<ciphertext>`.
+     * A `DyFM_Crypto.encrypt` determinisztikus (Q3: elfogadott promptra) — üres/undefined/null-ra
+     * dob, ezért a HÍVÓ (nts-transzform) skip-eli az ilyen értékeket.
+     *
+     * @param data A titkosítandó érték
+     * @param key A titkosító kulcs (FDP_CORE_DBCONTENT_CRYPT_KEY)
+     * @param keyVersion A kulcs-verzió (rotációhoz; default 1)
+     */
+    static encryptDbValue<T>(data: T, key: string, keyVersion?: number, config?: CryptoConfig): string;
+    /** True, ha az érték a DB-enc envelope-pel kezdődik (tehát titkosított, nem legacy plaintext). */
+    static isEncryptedDbValue(value: unknown): value is string;
+    /** A DB-enc envelope `keyVersion`-je, vagy `null` ha az érték nem envelope. */
+    static getDbValueKeyVersion(value: unknown): number | null;
+    /**
+     * DB-enc envelope visszafejtése. A hívó a `getDbValueKeyVersion` alapján oldja fel a megfelelő
+     * kulcsot, és azt adja át. Ha az érték NEM envelope (legacy plaintext), a hívó NE ezt hívja
+     * (a read-transzform envelope-detektálással szűr → a plaintext változatlanul jön vissza).
+     */
+    static decryptDbValue<T>(value: string, key: string, config?: CryptoConfig): T;
+    /**
+     * Analyzes encrypted data to help with debugging
+     * @param encryptedData The encrypted data to analyze
+     * @returns Analysis information about the encrypted data
+     */
+    static analyzeEncryptedData(encryptedData: string): {
+        isValid: boolean;
+        version?: string;
+        dataLength: number;
+        hasValidFormat: boolean;
+        error?: string;
+    };
+    /**
+     * Gets default error settings with enhanced debugging information
+     */
+    private static getDefaultErrorSettings;
+}
 //# sourceMappingURL=crypto.util.d.ts.map