@lacspace/crypto 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lacspace
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,96 @@
+<div align="center">
+
+# @lacspace/crypto
+
+**Safe, boring cryptography — authenticated AES-256-GCM, key derivation, hashing.**
+
+[![npm version](https://img.shields.io/npm/v/@lacspace/crypto?color=%23a855f7&label=npm)](https://www.npmjs.com/package/@lacspace/crypto)
+[![install size](https://packagephobia.com/badge?p=@lacspace/crypto)](https://packagephobia.com/result?p=@lacspace/crypto)
+[![minzipped](https://img.shields.io/bundlephobia/minzip/@lacspace/crypto?label=minzip)](https://bundlephobia.com/package/@lacspace/crypto)
+[![types](https://img.shields.io/badge/types-included-blue)](https://www.npmjs.com/package/@lacspace/crypto)
+[![license](https://img.shields.io/npm/l/@lacspace/crypto?color=green)](https://github.com/lacspace/npm-packages/blob/main/LICENSE)
+
+</div>
+
+> A thin, correct layer over the **Web Crypto API** — no hand-rolled crypto. Authenticated **AES-256-GCM**, PBKDF2 key derivation, SHA-256/384/512, HMAC, secure random and constant-time compare. Same code on Node 18+, edge, browsers and React Native. Encrypt database fields, S3 payloads, cookies and tokens.
+
+- 🔐 `encrypt` / `decrypt` — AES-256-GCM (authenticated: tampering is rejected)
+- 🔑 `encryptWithPassword` / `decryptWithPassword` — PBKDF2-derived key, self-contained
+- #️⃣ `sha256` / `digest` / `hmac` / `hmacVerify`
+- 🎲 `randomBytes` · `generateKey` · `constantTimeEqual`
+- 🧰 hex / base64url helpers
+- ⚡ Zero dependencies · 🌍 isomorphic · 📦 ESM + CJS · fully typed
+
+## Install
+
+```bash
+npm install @lacspace/crypto      # or pnpm add / yarn add / bun add
+```
+
+## Encrypt with a key
+
+```ts
+import { generateKey, encrypt, decrypt } from "@lacspace/crypto";
+
+const key = generateKey();                 // 256-bit base64url key — store securely
+const blob = await encrypt("card: 4242…", key);
+// "v1:<iv>:<ciphertext+tag>"  — safe to store in Mongo / S3
+const plain = await decrypt(blob, key);    // "card: 4242…"
+```
+
+Encrypt a field before saving to MongoDB, or an object before putting it on S3:
+
+```ts
+await s3.putObject({ Bucket, Key, Body: await encrypt(JSON.stringify(doc), key) });
+```
+
+## Encrypt with a passphrase
+
+```ts
+import { encryptWithPassword, decryptWithPassword } from "@lacspace/crypto";
+
+const sealed = await encryptWithPassword("secret", userPassphrase);
+// "v1p:<iterations>:<salt>:<iv>:<ciphertext>" — fully self-describing
+const opened = await decryptWithPassword(sealed, userPassphrase);
+```
+
+## Hashing, HMAC & helpers
+
+```ts
+import { sha256, hmac, hmacVerify, constantTimeEqual, randomBytes } from "@lacspace/crypto";
+
+await sha256("hello");                       // hex digest
+const sig = await hmac(secret, "payload");   // Uint8Array
+await hmacVerify(secret, "payload", sig);    // true (constant-time)
+constantTimeEqual(a, b);                     // timing-safe compare
+randomBytes(16);                             // CSPRNG bytes
+```
+
+## API
+
+| Export | Description |
+| --- | --- |
+| `encrypt` / `decrypt` | AES-256-GCM with a 32-byte key |
+| `encryptWithPassword` / `decryptWithPassword` | passphrase (PBKDF2 + AES-GCM) |
+| `generateKey` | random 256-bit key (base64url) |
+| `sha256` / `digest` / `hmac` / `hmacVerify` | hashing & MAC |
+| `deriveBits` | PBKDF2 key derivation |
+| `randomBytes` / `constantTimeEqual` | primitives |
+| `toHex` / `fromHex` / `toBase64url` / `fromBase64url` | encoding |
+
+## The Lacspace Security Kit
+
+| Package | For |
+| --- | --- |
+| **`@lacspace/crypto`** | AES encryption & hashing (this package) |
+| [`@lacspace/password`](https://www.npmjs.com/package/@lacspace/password) | Password hashing |
+| [`@lacspace/jwt`](https://www.npmjs.com/package/@lacspace/jwt) | JWTs & tokens |
+| [`@lacspace/apikey`](https://www.npmjs.com/package/@lacspace/apikey) | API keys |
+| [`@lacspace/otp`](https://www.npmjs.com/package/@lacspace/otp) | TOTP/HOTP 2FA |
+| [`@lacspace/webauthn`](https://www.npmjs.com/package/@lacspace/webauthn) | Passkeys / biometric |
+| [`@lacspace/mfa`](https://www.npmjs.com/package/@lacspace/mfa) | 2FA/3FA orchestration |
+| [`@lacspace/lock`](https://www.npmjs.com/package/@lacspace/lock) | Account lockout |
+| [`@lacspace/headers`](https://www.npmjs.com/package/@lacspace/headers) | Secure headers / CSP |
+| [`@lacspace/redact`](https://www.npmjs.com/package/@lacspace/redact) | Log redaction |
+
+<div align="center"><sub>Built with care by <a href="https://lacspace.com">Lacspace</a> · MIT licensed · <a href="https://github.com/lacspace/npm-packages">source</a></sub></div>

package/dist/index.cjs

@@ -0,0 +1,170 @@
+'use strict';
+
+// src/index.ts
+function getCrypto() {
+  const c = globalThis.crypto;
+  if (!c || !c.subtle) {
+    throw new Error("Web Crypto unavailable \u2014 @lacspace/crypto needs Node 18+, an edge runtime or a browser");
+  }
+  return c;
+}
+function randomBytes(length) {
+  const buf = new Uint8Array(length);
+  getCrypto().getRandomValues(buf);
+  return buf;
+}
+function toHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function fromHex(hex) {
+  const clean = hex.length % 2 ? "0" + hex : hex;
+  const out = new Uint8Array(clean.length / 2);
+  for (let i = 0; i < out.length; i++) out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
+function toBase64url(bytes) {
+  let bin = "";
+  for (const b of bytes) bin += String.fromCharCode(b);
+  const b64 = typeof btoa !== "undefined" ? btoa(bin) : Buffer.from(bytes).toString("base64");
+  return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function fromBase64url(s) {
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + "===".slice((s.length + 3) % 4);
+  if (typeof atob !== "undefined") {
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+    return out;
+  }
+  return new Uint8Array(Buffer.from(b64, "base64"));
+}
+var enc = new TextEncoder();
+var dec = new TextDecoder();
+function toBytes(data) {
+  return typeof data === "string" ? enc.encode(data) : data;
+}
+function constantTimeEqual(a, b) {
+  const x = toBytes(a);
+  const y = toBytes(b);
+  if (x.length !== y.length) return false;
+  let diff = 0;
+  for (let i = 0; i < x.length; i++) diff |= x[i] ^ y[i];
+  return diff === 0;
+}
+async function digest(data, algorithm = "SHA-256") {
+  const buf = await getCrypto().subtle.digest(algorithm, toBytes(data));
+  return new Uint8Array(buf);
+}
+async function sha256(data) {
+  return toHex(await digest(data, "SHA-256"));
+}
+async function hmac(key, data, algorithm = "SHA-256") {
+  const c = getCrypto();
+  const cryptoKey = await c.subtle.importKey(
+    "raw",
+    toBytes(key),
+    { name: "HMAC", hash: algorithm },
+    false,
+    ["sign"]
+  );
+  const sig = await c.subtle.sign("HMAC", cryptoKey, toBytes(data));
+  return new Uint8Array(sig);
+}
+async function hmacVerify(key, data, signature, algorithm = "SHA-256") {
+  return constantTimeEqual(await hmac(key, data, algorithm), signature);
+}
+async function deriveBits(password, salt, opts = {}) {
+  const c = getCrypto();
+  const baseKey = await c.subtle.importKey(
+    "raw",
+    toBytes(password),
+    "PBKDF2",
+    false,
+    ["deriveBits"]
+  );
+  const bits = await c.subtle.deriveBits(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations: opts.iterations ?? 21e4,
+      hash: opts.hash ?? "SHA-256"
+    },
+    baseKey,
+    (opts.length ?? 32) * 8
+  );
+  return new Uint8Array(bits);
+}
+var AES_PREFIX = "v1";
+var AES_PW_PREFIX = "v1p";
+var DEFAULT_PW_ITERATIONS = 21e4;
+function generateKey() {
+  return toBase64url(randomBytes(32));
+}
+async function importAesKey(key) {
+  const raw = typeof key === "string" ? fromBase64url(key) : key;
+  if (raw.length !== 32) throw new Error("AES key must be 32 bytes (256-bit)");
+  return getCrypto().subtle.importKey("raw", raw, { name: "AES-GCM" }, false, [
+    "encrypt",
+    "decrypt"
+  ]);
+}
+async function encrypt(plaintext, key) {
+  const cryptoKey = await importAesKey(key);
+  const iv = randomBytes(12);
+  const ct = await getCrypto().subtle.encrypt(
+    { name: "AES-GCM", iv },
+    cryptoKey,
+    toBytes(plaintext)
+  );
+  return `${AES_PREFIX}:${toBase64url(iv)}:${toBase64url(new Uint8Array(ct))}`;
+}
+async function decrypt(payload, key) {
+  const parts = payload.split(":");
+  if (parts.length !== 3 || parts[0] !== AES_PREFIX) throw new Error("invalid ciphertext format");
+  const cryptoKey = await importAesKey(key);
+  const iv = fromBase64url(parts[1]);
+  const ct = fromBase64url(parts[2]);
+  const pt = await getCrypto().subtle.decrypt(
+    { name: "AES-GCM", iv },
+    cryptoKey,
+    ct
+  );
+  return dec.decode(pt);
+}
+async function encryptWithPassword(plaintext, password, opts = {}) {
+  const iterations = opts.iterations ?? DEFAULT_PW_ITERATIONS;
+  const salt = randomBytes(16);
+  const key = await deriveBits(password, salt, { iterations, length: 32 });
+  const inner = await encrypt(plaintext, key);
+  const [, iv, ct] = inner.split(":");
+  return `${AES_PW_PREFIX}:${iterations}:${toBase64url(salt)}:${iv}:${ct}`;
+}
+async function decryptWithPassword(payload, password) {
+  const parts = payload.split(":");
+  if (parts.length !== 5 || parts[0] !== AES_PW_PREFIX) throw new Error("invalid ciphertext format");
+  const iterations = parseInt(parts[1], 10);
+  const salt = fromBase64url(parts[2]);
+  const key = await deriveBits(password, salt, { iterations, length: 32 });
+  return decrypt(`${AES_PREFIX}:${parts[3]}:${parts[4]}`, key);
+}
+
+exports.constantTimeEqual = constantTimeEqual;
+exports.decrypt = decrypt;
+exports.decryptWithPassword = decryptWithPassword;
+exports.deriveBits = deriveBits;
+exports.digest = digest;
+exports.encrypt = encrypt;
+exports.encryptWithPassword = encryptWithPassword;
+exports.fromBase64url = fromBase64url;
+exports.fromHex = fromHex;
+exports.generateKey = generateKey;
+exports.hmac = hmac;
+exports.hmacVerify = hmacVerify;
+exports.randomBytes = randomBytes;
+exports.sha256 = sha256;
+exports.toBase64url = toBase64url;
+exports.toHex = toHex;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AAWA,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,IAAK,UAAA,CAAmC,MAAA;AAC9C,EAAA,IAAI,CAAC,CAAA,IAAK,CAAC,CAAA,CAAE,MAAA,EAAQ;AACnB,IAAA,MAAM,IAAI,MAAM,6FAAwF,CAAA;AAAA,EAC1G;AACA,EAAA,OAAO,CAAA;AACT;AAIO,SAAS,YAAY,MAAA,EAA4B;AACtD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAM,CAAA;AACjC,EAAA,SAAA,EAAU,CAAE,gBAAgB,GAAG,CAAA;AAC/B,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,MAAM,KAAA,EAA2B;AAC/C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,GAAA,IAAO,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AAC5D,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,QAAQ,GAAA,EAAyB;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,MAAM,GAAA,GAAM,GAAA;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAA,CAAM,SAAS,CAAC,CAAA;AAC3C,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,QAAA,CAAS,KAAA,CAAM,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AACxF,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,GAAA,IAAO,MAAA,CAAO,aAAa,CAAC,CAAA;AACnD,EAAA,MAAM,GAAA,GAAM,OAAO,IAAA,KAAS,WAAA,GAAc,IAAA,CAAK,GAAG,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC1F,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtE;AAEO,SAAS,cAAc,CAAA,EAAuB;AACnD,EAAA,MAAM,GAAA,GAAM,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,IAAI,KAAA,CAAM,KAAA,CAAA,CAAO,CAAA,CAAE,MAAA,GAAS,KAAK,CAAC,CAAA;AACpF,EAAA,IAAI,OAAO,SAAS,WAAA,EAAa;AAC/B,IAAA,MAAM,GAAA,GAAM,KAAK,GAAG,CAAA;AACpB,IAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAI,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAC,CAAA;AAClD;AAEA,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAC5B,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAE5B,SAAS,QAAQ,IAAA,EAAuC;AACtD,EAAA,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA,GAAI,IAAA;AACvD;AAGO,SAAS,iBAAA,CAAkB,GAAwB,CAAA,EAAiC;AACzF,EAAA,MAAM,CAAA,GAAI,QAAQ,CAAC,CAAA;AACnB,EAAA,MAAM,CAAA,GAAI,QAAQ,CAAC,CAAA;AACnB,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,CAAC,CAAA,GAAK,CAAA,CAAE,CAAC,CAAA;AACtD,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAMA,eAAsB,MAAA,CACpB,IAAA,EACA,SAAA,GAA2B,SAAA,EACN;AACrB,EAAA,MAAM,GAAA,GAAM,MAAM,SAAA,EAAU,CAAE,OAAO,MAAA,CAAO,SAAA,EAAW,OAAA,CAAQ,IAAI,CAA4B,CAAA;AAC/F,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAGA,eAAsB,OAAO,IAAA,EAA4C;AACvE,EAAA,OAAO,KAAA,CAAM,MAAM,MAAA,CAAO,IAAA,EAAM,SAAS,CAAC,CAAA;AAC5C;AAGA,eAAsB,IAAA,CACpB,GAAA,EACA,IAAA,EACA,SAAA,GAA2B,SAAA,EACN;AACrB,EAAA,MAAM,IAAI,SAAA,EAAU;AACpB,EAAA,MAAM,SAAA,GAAY,MAAM,CAAA,CAAE,MAAA,CAAO,SAAA;AAAA,IAC/B,KAAA;AAAA,IACA,QAAQ,GAAG,CAAA;AAAA,IACX,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,MAAA,CAAO,KAAK,MAAA,EAAQ,SAAA,EAAW,OAAA,CAAQ,IAAI,CAA4B,CAAA;AAC3F,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,SAAA,EACA,YAA2B,SAAA,EACT;AAClB,EAAA,OAAO,kBAAkB,MAAM,IAAA,CAAK,KAAK,IAAA,EAAM,SAAS,GAAG,SAAS,CAAA;AACtE;AAYA,eAAsB,UAAA,CACpB,QAAA,EACA,IAAA,EACA,IAAA,GAAsB,EAAC,EACF;AACrB,EAAA,MAAM,IAAI,SAAA,EAAU;AACpB,EAAA,MAAM,OAAA,GAAU,MAAM,CAAA,CAAE,MAAA,CAAO,SAAA;AAAA,IAC7B,KAAA;AAAA,IACA,QAAQ,QAAQ,CAAA;AAAA,IAChB,QAAA;AAAA,IACA,KAAA;AAAA,IACA,CAAC,YAAY;AAAA,GACf;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,MAAA,CAAO,UAAA;AAAA,IAC1B;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,IAAA;AAAA,MACA,UAAA,EAAY,KAAK,UAAA,IAAc,IAAA;AAAA,MAC/B,IAAA,EAAM,KAAK,IAAA,IAAQ;AAAA,KACrB;AAAA,IACA,OAAA;AAAA,IAAA,CACC,IAAA,CAAK,UAAU,EAAA,IAAM;AAAA,GACxB;AACA,EAAA,OAAO,IAAI,WAAW,IAAI,CAAA;AAC5B;AAIA,IAAM,UAAA,GAAa,IAAA;AACnB,IAAM,aAAA,GAAgB,KAAA;AACtB,IAAM,qBAAA,GAAwB,IAAA;AAGvB,SAAS,WAAA,GAAsB;AACpC,EAAA,OAAO,WAAA,CAAY,WAAA,CAAY,EAAE,CAAC,CAAA;AACpC;AAEA,eAAe,aAAa,GAAA,EAA8C;AACxE,EAAA,MAAM,MAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,aAAA,CAAc,GAAG,CAAA,GAAI,GAAA;AAC3D,EAAA,IAAI,IAAI,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAC3E,EAAA,OAAO,SAAA,EAAU,CAAE,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,KAAgC,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,KAAA,EAAO;AAAA,IACrG,SAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;AAMA,eAAsB,OAAA,CAAQ,WAAgC,GAAA,EAA2C;AACvG,EAAA,MAAM,SAAA,GAAY,MAAM,YAAA,CAAa,GAAG,CAAA;AACxC,EAAA,MAAM,EAAA,GAAK,YAAY,EAAE,CAAA;AACzB,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,OAAA;AAAA,IAClC,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAkC;AAAA,IACrD,SAAA;AAAA,IACA,QAAQ,SAAS;AAAA,GACnB;AACA,EAAA,OAAO,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,WAAA,CAAY,EAAE,CAAC,CAAA,CAAA,EAAI,WAAA,CAAY,IAAI,UAAA,CAAW,EAAE,CAAC,CAAC,CAAA,CAAA;AAC5E;AAGA,eAAsB,OAAA,CAAQ,SAAiB,GAAA,EAA2C;AACxF,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAC/B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,CAAC,MAAM,UAAA,EAAY,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AAC9F,EAAA,MAAM,SAAA,GAAY,MAAM,YAAA,CAAa,GAAG,CAAA;AACxC,EAAA,MAAM,EAAA,GAAK,aAAA,CAAc,KAAA,CAAM,CAAC,CAAE,CAAA;AAClC,EAAA,MAAM,EAAA,GAAK,aAAA,CAAc,KAAA,CAAM,CAAC,CAAE,CAAA;AAClC,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,OAAA;AAAA,IAClC,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAkC;AAAA,IACrD,SAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,OAAO,GAAA,CAAI,OAAO,EAAE,CAAA;AACtB;AAMA,eAAsB,mBAAA,CACpB,SAAA,EACA,QAAA,EACA,IAAA,GAAgC,EAAC,EAChB;AACjB,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,qBAAA;AACtC,EAAA,MAAM,IAAA,GAAO,YAAY,EAAE,CAAA;AAC3B,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,QAAA,EAAU,MAAM,EAAE,UAAA,EAAY,MAAA,EAAQ,EAAA,EAAI,CAAA;AACvE,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAC1C,EAAA,MAAM,GAAG,EAAA,EAAI,EAAE,CAAA,GAAI,KAAA,CAAM,MAAM,GAAG,CAAA;AAClC,EAAA,OAAO,CAAA,EAAG,aAAa,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA,EAAI,WAAA,CAAY,IAAI,CAAC,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACxE;AAGA,eAAsB,mBAAA,CAAoB,SAAiB,QAAA,EAAmC;AAC5F,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAC/B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,CAAC,MAAM,aAAA,EAAe,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AACjG,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,KAAA,CAAM,CAAC,GAAI,EAAE,CAAA;AACzC,EAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,CAAM,CAAC,CAAE,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,QAAA,EAAU,MAAM,EAAE,UAAA,EAAY,MAAA,EAAQ,EAAA,EAAI,CAAA;AACvE,EAAA,OAAO,OAAA,CAAQ,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA;AAC7D","file":"index.cjs","sourcesContent":["/**\n * @lacspace/crypto\n * Safe, boring cryptography — authenticated AES-256-GCM, key derivation, hashing.\n *\n * A thin, correct layer over the Web Crypto API (no hand-rolled crypto), so the\n * same code runs on Node 18+, edge runtimes, browsers and React Native. Encrypt\n * database fields, S3 object payloads, cookies and tokens with confidence.\n *\n * Zero dependencies · isomorphic · fully typed.\n */\n\nfunction getCrypto(): Crypto {\n  const c = (globalThis as { crypto?: Crypto }).crypto;\n  if (!c || !c.subtle) {\n    throw new Error(\"Web Crypto unavailable — @lacspace/crypto needs Node 18+, an edge runtime or a browser\");\n  }\n  return c;\n}\n\n/* ------------------------------ encoding ------------------------------ */\n\nexport function randomBytes(length: number): Uint8Array {\n  const buf = new Uint8Array(length);\n  getCrypto().getRandomValues(buf);\n  return buf;\n}\n\nexport function toHex(bytes: Uint8Array): string {\n  let out = \"\";\n  for (const b of bytes) out += b.toString(16).padStart(2, \"0\");\n  return out;\n}\n\nexport function fromHex(hex: string): Uint8Array {\n  const clean = hex.length % 2 ? \"0\" + hex : hex;\n  const out = new Uint8Array(clean.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\nexport function toBase64url(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (const b of bytes) bin += String.fromCharCode(b);\n  const b64 = typeof btoa !== \"undefined\" ? btoa(bin) : Buffer.from(bytes).toString(\"base64\");\n  return b64.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nexport function fromBase64url(s: string): Uint8Array {\n  const b64 = s.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"===\".slice((s.length + 3) % 4);\n  if (typeof atob !== \"undefined\") {\n    const bin = atob(b64);\n    const out = new Uint8Array(bin.length);\n    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n    return out;\n  }\n  return new Uint8Array(Buffer.from(b64, \"base64\"));\n}\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\nfunction toBytes(data: string | Uint8Array): Uint8Array {\n  return typeof data === \"string\" ? enc.encode(data) : data;\n}\n\n/** Constant-time comparison of two byte arrays or strings. */\nexport function constantTimeEqual(a: Uint8Array | string, b: Uint8Array | string): boolean {\n  const x = toBytes(a);\n  const y = toBytes(b);\n  if (x.length !== y.length) return false;\n  let diff = 0;\n  for (let i = 0; i < x.length; i++) diff |= x[i]! ^ y[i]!;\n  return diff === 0;\n}\n\n/* ------------------------------ hashing ------------------------------ */\n\nexport type HashAlgorithm = \"SHA-256\" | \"SHA-384\" | \"SHA-512\";\n\nexport async function digest(\n  data: string | Uint8Array,\n  algorithm: HashAlgorithm = \"SHA-256\",\n): Promise<Uint8Array> {\n  const buf = await getCrypto().subtle.digest(algorithm, toBytes(data) as unknown as BufferSource);\n  return new Uint8Array(buf);\n}\n\n/** SHA-256 hex digest. */\nexport async function sha256(data: string | Uint8Array): Promise<string> {\n  return toHex(await digest(data, \"SHA-256\"));\n}\n\n/** HMAC signature (bytes). */\nexport async function hmac(\n  key: string | Uint8Array,\n  data: string | Uint8Array,\n  algorithm: HashAlgorithm = \"SHA-256\",\n): Promise<Uint8Array> {\n  const c = getCrypto();\n  const cryptoKey = await c.subtle.importKey(\n    \"raw\",\n    toBytes(key) as unknown as BufferSource,\n    { name: \"HMAC\", hash: algorithm },\n    false,\n    [\"sign\"],\n  );\n  const sig = await c.subtle.sign(\"HMAC\", cryptoKey, toBytes(data) as unknown as BufferSource);\n  return new Uint8Array(sig);\n}\n\n/** Verify an HMAC in constant time. */\nexport async function hmacVerify(\n  key: string | Uint8Array,\n  data: string | Uint8Array,\n  signature: Uint8Array,\n  algorithm: HashAlgorithm = \"SHA-256\",\n): Promise<boolean> {\n  return constantTimeEqual(await hmac(key, data, algorithm), signature);\n}\n\n/* ------------------------------ key derivation ------------------------------ */\n\nexport interface DeriveOptions {\n  iterations?: number;\n  hash?: HashAlgorithm;\n  /** Derived key length in bytes. Default 32. */\n  length?: number;\n}\n\n/** Derive raw key bytes from a password with PBKDF2. */\nexport async function deriveBits(\n  password: string | Uint8Array,\n  salt: Uint8Array,\n  opts: DeriveOptions = {},\n): Promise<Uint8Array> {\n  const c = getCrypto();\n  const baseKey = await c.subtle.importKey(\n    \"raw\",\n    toBytes(password) as unknown as BufferSource,\n    \"PBKDF2\",\n    false,\n    [\"deriveBits\"],\n  );\n  const bits = await c.subtle.deriveBits(\n    {\n      name: \"PBKDF2\",\n      salt: salt as unknown as BufferSource,\n      iterations: opts.iterations ?? 210000,\n      hash: opts.hash ?? \"SHA-256\",\n    },\n    baseKey,\n    (opts.length ?? 32) * 8,\n  );\n  return new Uint8Array(bits);\n}\n\n/* ------------------------------ AES-256-GCM ------------------------------ */\n\nconst AES_PREFIX = \"v1\";\nconst AES_PW_PREFIX = \"v1p\";\nconst DEFAULT_PW_ITERATIONS = 210000;\n\n/** Generate a random 256-bit AES key as a base64url string. */\nexport function generateKey(): string {\n  return toBase64url(randomBytes(32));\n}\n\nasync function importAesKey(key: string | Uint8Array): Promise<CryptoKey> {\n  const raw = typeof key === \"string\" ? fromBase64url(key) : key;\n  if (raw.length !== 32) throw new Error(\"AES key must be 32 bytes (256-bit)\");\n  return getCrypto().subtle.importKey(\"raw\", raw as unknown as BufferSource, { name: \"AES-GCM\" }, false, [\n    \"encrypt\",\n    \"decrypt\",\n  ]);\n}\n\n/**\n * Encrypt with AES-256-GCM using a 32-byte key (base64url or bytes).\n * Returns a compact self-describing string: `v1:<iv>:<ciphertext>`.\n */\nexport async function encrypt(plaintext: string | Uint8Array, key: string | Uint8Array): Promise<string> {\n  const cryptoKey = await importAesKey(key);\n  const iv = randomBytes(12);\n  const ct = await getCrypto().subtle.encrypt(\n    { name: \"AES-GCM\", iv: iv as unknown as BufferSource },\n    cryptoKey,\n    toBytes(plaintext) as unknown as BufferSource,\n  );\n  return `${AES_PREFIX}:${toBase64url(iv)}:${toBase64url(new Uint8Array(ct))}`;\n}\n\n/** Decrypt a string produced by {@link encrypt}. Returns the UTF-8 plaintext. */\nexport async function decrypt(payload: string, key: string | Uint8Array): Promise<string> {\n  const parts = payload.split(\":\");\n  if (parts.length !== 3 || parts[0] !== AES_PREFIX) throw new Error(\"invalid ciphertext format\");\n  const cryptoKey = await importAesKey(key);\n  const iv = fromBase64url(parts[1]!);\n  const ct = fromBase64url(parts[2]!);\n  const pt = await getCrypto().subtle.decrypt(\n    { name: \"AES-GCM\", iv: iv as unknown as BufferSource },\n    cryptoKey,\n    ct as unknown as BufferSource,\n  );\n  return dec.decode(pt);\n}\n\n/**\n * Encrypt with a passphrase (PBKDF2-derived key + AES-256-GCM).\n * Returns `v1p:<iterations>:<salt>:<iv>:<ciphertext>` — self-contained.\n */\nexport async function encryptWithPassword(\n  plaintext: string | Uint8Array,\n  password: string,\n  opts: { iterations?: number } = {},\n): Promise<string> {\n  const iterations = opts.iterations ?? DEFAULT_PW_ITERATIONS;\n  const salt = randomBytes(16);\n  const key = await deriveBits(password, salt, { iterations, length: 32 });\n  const inner = await encrypt(plaintext, key);\n  const [, iv, ct] = inner.split(\":\");\n  return `${AES_PW_PREFIX}:${iterations}:${toBase64url(salt)}:${iv}:${ct}`;\n}\n\n/** Decrypt a string produced by {@link encryptWithPassword}. */\nexport async function decryptWithPassword(payload: string, password: string): Promise<string> {\n  const parts = payload.split(\":\");\n  if (parts.length !== 5 || parts[0] !== AES_PW_PREFIX) throw new Error(\"invalid ciphertext format\");\n  const iterations = parseInt(parts[1]!, 10);\n  const salt = fromBase64url(parts[2]!);\n  const key = await deriveBits(password, salt, { iterations, length: 32 });\n  return decrypt(`${AES_PREFIX}:${parts[3]}:${parts[4]}`, key);\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,53 @@
+/**
+ * @lacspace/crypto
+ * Safe, boring cryptography — authenticated AES-256-GCM, key derivation, hashing.
+ *
+ * A thin, correct layer over the Web Crypto API (no hand-rolled crypto), so the
+ * same code runs on Node 18+, edge runtimes, browsers and React Native. Encrypt
+ * database fields, S3 object payloads, cookies and tokens with confidence.
+ *
+ * Zero dependencies · isomorphic · fully typed.
+ */
+declare function randomBytes(length: number): Uint8Array;
+declare function toHex(bytes: Uint8Array): string;
+declare function fromHex(hex: string): Uint8Array;
+declare function toBase64url(bytes: Uint8Array): string;
+declare function fromBase64url(s: string): Uint8Array;
+/** Constant-time comparison of two byte arrays or strings. */
+declare function constantTimeEqual(a: Uint8Array | string, b: Uint8Array | string): boolean;
+type HashAlgorithm = "SHA-256" | "SHA-384" | "SHA-512";
+declare function digest(data: string | Uint8Array, algorithm?: HashAlgorithm): Promise<Uint8Array>;
+/** SHA-256 hex digest. */
+declare function sha256(data: string | Uint8Array): Promise<string>;
+/** HMAC signature (bytes). */
+declare function hmac(key: string | Uint8Array, data: string | Uint8Array, algorithm?: HashAlgorithm): Promise<Uint8Array>;
+/** Verify an HMAC in constant time. */
+declare function hmacVerify(key: string | Uint8Array, data: string | Uint8Array, signature: Uint8Array, algorithm?: HashAlgorithm): Promise<boolean>;
+interface DeriveOptions {
+    iterations?: number;
+    hash?: HashAlgorithm;
+    /** Derived key length in bytes. Default 32. */
+    length?: number;
+}
+/** Derive raw key bytes from a password with PBKDF2. */
+declare function deriveBits(password: string | Uint8Array, salt: Uint8Array, opts?: DeriveOptions): Promise<Uint8Array>;
+/** Generate a random 256-bit AES key as a base64url string. */
+declare function generateKey(): string;
+/**
+ * Encrypt with AES-256-GCM using a 32-byte key (base64url or bytes).
+ * Returns a compact self-describing string: `v1:<iv>:<ciphertext>`.
+ */
+declare function encrypt(plaintext: string | Uint8Array, key: string | Uint8Array): Promise<string>;
+/** Decrypt a string produced by {@link encrypt}. Returns the UTF-8 plaintext. */
+declare function decrypt(payload: string, key: string | Uint8Array): Promise<string>;
+/**
+ * Encrypt with a passphrase (PBKDF2-derived key + AES-256-GCM).
+ * Returns `v1p:<iterations>:<salt>:<iv>:<ciphertext>` — self-contained.
+ */
+declare function encryptWithPassword(plaintext: string | Uint8Array, password: string, opts?: {
+    iterations?: number;
+}): Promise<string>;
+/** Decrypt a string produced by {@link encryptWithPassword}. */
+declare function decryptWithPassword(payload: string, password: string): Promise<string>;
+
+export { type DeriveOptions, type HashAlgorithm, constantTimeEqual, decrypt, decryptWithPassword, deriveBits, digest, encrypt, encryptWithPassword, fromBase64url, fromHex, generateKey, hmac, hmacVerify, randomBytes, sha256, toBase64url, toHex };

package/dist/index.d.ts

@@ -0,0 +1,53 @@
+/**
+ * @lacspace/crypto
+ * Safe, boring cryptography — authenticated AES-256-GCM, key derivation, hashing.
+ *
+ * A thin, correct layer over the Web Crypto API (no hand-rolled crypto), so the
+ * same code runs on Node 18+, edge runtimes, browsers and React Native. Encrypt
+ * database fields, S3 object payloads, cookies and tokens with confidence.
+ *
+ * Zero dependencies · isomorphic · fully typed.
+ */
+declare function randomBytes(length: number): Uint8Array;
+declare function toHex(bytes: Uint8Array): string;
+declare function fromHex(hex: string): Uint8Array;
+declare function toBase64url(bytes: Uint8Array): string;
+declare function fromBase64url(s: string): Uint8Array;
+/** Constant-time comparison of two byte arrays or strings. */
+declare function constantTimeEqual(a: Uint8Array | string, b: Uint8Array | string): boolean;
+type HashAlgorithm = "SHA-256" | "SHA-384" | "SHA-512";
+declare function digest(data: string | Uint8Array, algorithm?: HashAlgorithm): Promise<Uint8Array>;
+/** SHA-256 hex digest. */
+declare function sha256(data: string | Uint8Array): Promise<string>;
+/** HMAC signature (bytes). */
+declare function hmac(key: string | Uint8Array, data: string | Uint8Array, algorithm?: HashAlgorithm): Promise<Uint8Array>;
+/** Verify an HMAC in constant time. */
+declare function hmacVerify(key: string | Uint8Array, data: string | Uint8Array, signature: Uint8Array, algorithm?: HashAlgorithm): Promise<boolean>;
+interface DeriveOptions {
+    iterations?: number;
+    hash?: HashAlgorithm;
+    /** Derived key length in bytes. Default 32. */
+    length?: number;
+}
+/** Derive raw key bytes from a password with PBKDF2. */
+declare function deriveBits(password: string | Uint8Array, salt: Uint8Array, opts?: DeriveOptions): Promise<Uint8Array>;
+/** Generate a random 256-bit AES key as a base64url string. */
+declare function generateKey(): string;
+/**
+ * Encrypt with AES-256-GCM using a 32-byte key (base64url or bytes).
+ * Returns a compact self-describing string: `v1:<iv>:<ciphertext>`.
+ */
+declare function encrypt(plaintext: string | Uint8Array, key: string | Uint8Array): Promise<string>;
+/** Decrypt a string produced by {@link encrypt}. Returns the UTF-8 plaintext. */
+declare function decrypt(payload: string, key: string | Uint8Array): Promise<string>;
+/**
+ * Encrypt with a passphrase (PBKDF2-derived key + AES-256-GCM).
+ * Returns `v1p:<iterations>:<salt>:<iv>:<ciphertext>` — self-contained.
+ */
+declare function encryptWithPassword(plaintext: string | Uint8Array, password: string, opts?: {
+    iterations?: number;
+}): Promise<string>;
+/** Decrypt a string produced by {@link encryptWithPassword}. */
+declare function decryptWithPassword(payload: string, password: string): Promise<string>;
+
+export { type DeriveOptions, type HashAlgorithm, constantTimeEqual, decrypt, decryptWithPassword, deriveBits, digest, encrypt, encryptWithPassword, fromBase64url, fromHex, generateKey, hmac, hmacVerify, randomBytes, sha256, toBase64url, toHex };

package/dist/index.js

@@ -0,0 +1,153 @@
+// src/index.ts
+function getCrypto() {
+  const c = globalThis.crypto;
+  if (!c || !c.subtle) {
+    throw new Error("Web Crypto unavailable \u2014 @lacspace/crypto needs Node 18+, an edge runtime or a browser");
+  }
+  return c;
+}
+function randomBytes(length) {
+  const buf = new Uint8Array(length);
+  getCrypto().getRandomValues(buf);
+  return buf;
+}
+function toHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function fromHex(hex) {
+  const clean = hex.length % 2 ? "0" + hex : hex;
+  const out = new Uint8Array(clean.length / 2);
+  for (let i = 0; i < out.length; i++) out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
+function toBase64url(bytes) {
+  let bin = "";
+  for (const b of bytes) bin += String.fromCharCode(b);
+  const b64 = typeof btoa !== "undefined" ? btoa(bin) : Buffer.from(bytes).toString("base64");
+  return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function fromBase64url(s) {
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + "===".slice((s.length + 3) % 4);
+  if (typeof atob !== "undefined") {
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+    return out;
+  }
+  return new Uint8Array(Buffer.from(b64, "base64"));
+}
+var enc = new TextEncoder();
+var dec = new TextDecoder();
+function toBytes(data) {
+  return typeof data === "string" ? enc.encode(data) : data;
+}
+function constantTimeEqual(a, b) {
+  const x = toBytes(a);
+  const y = toBytes(b);
+  if (x.length !== y.length) return false;
+  let diff = 0;
+  for (let i = 0; i < x.length; i++) diff |= x[i] ^ y[i];
+  return diff === 0;
+}
+async function digest(data, algorithm = "SHA-256") {
+  const buf = await getCrypto().subtle.digest(algorithm, toBytes(data));
+  return new Uint8Array(buf);
+}
+async function sha256(data) {
+  return toHex(await digest(data, "SHA-256"));
+}
+async function hmac(key, data, algorithm = "SHA-256") {
+  const c = getCrypto();
+  const cryptoKey = await c.subtle.importKey(
+    "raw",
+    toBytes(key),
+    { name: "HMAC", hash: algorithm },
+    false,
+    ["sign"]
+  );
+  const sig = await c.subtle.sign("HMAC", cryptoKey, toBytes(data));
+  return new Uint8Array(sig);
+}
+async function hmacVerify(key, data, signature, algorithm = "SHA-256") {
+  return constantTimeEqual(await hmac(key, data, algorithm), signature);
+}
+async function deriveBits(password, salt, opts = {}) {
+  const c = getCrypto();
+  const baseKey = await c.subtle.importKey(
+    "raw",
+    toBytes(password),
+    "PBKDF2",
+    false,
+    ["deriveBits"]
+  );
+  const bits = await c.subtle.deriveBits(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations: opts.iterations ?? 21e4,
+      hash: opts.hash ?? "SHA-256"
+    },
+    baseKey,
+    (opts.length ?? 32) * 8
+  );
+  return new Uint8Array(bits);
+}
+var AES_PREFIX = "v1";
+var AES_PW_PREFIX = "v1p";
+var DEFAULT_PW_ITERATIONS = 21e4;
+function generateKey() {
+  return toBase64url(randomBytes(32));
+}
+async function importAesKey(key) {
+  const raw = typeof key === "string" ? fromBase64url(key) : key;
+  if (raw.length !== 32) throw new Error("AES key must be 32 bytes (256-bit)");
+  return getCrypto().subtle.importKey("raw", raw, { name: "AES-GCM" }, false, [
+    "encrypt",
+    "decrypt"
+  ]);
+}
+async function encrypt(plaintext, key) {
+  const cryptoKey = await importAesKey(key);
+  const iv = randomBytes(12);
+  const ct = await getCrypto().subtle.encrypt(
+    { name: "AES-GCM", iv },
+    cryptoKey,
+    toBytes(plaintext)
+  );
+  return `${AES_PREFIX}:${toBase64url(iv)}:${toBase64url(new Uint8Array(ct))}`;
+}
+async function decrypt(payload, key) {
+  const parts = payload.split(":");
+  if (parts.length !== 3 || parts[0] !== AES_PREFIX) throw new Error("invalid ciphertext format");
+  const cryptoKey = await importAesKey(key);
+  const iv = fromBase64url(parts[1]);
+  const ct = fromBase64url(parts[2]);
+  const pt = await getCrypto().subtle.decrypt(
+    { name: "AES-GCM", iv },
+    cryptoKey,
+    ct
+  );
+  return dec.decode(pt);
+}
+async function encryptWithPassword(plaintext, password, opts = {}) {
+  const iterations = opts.iterations ?? DEFAULT_PW_ITERATIONS;
+  const salt = randomBytes(16);
+  const key = await deriveBits(password, salt, { iterations, length: 32 });
+  const inner = await encrypt(plaintext, key);
+  const [, iv, ct] = inner.split(":");
+  return `${AES_PW_PREFIX}:${iterations}:${toBase64url(salt)}:${iv}:${ct}`;
+}
+async function decryptWithPassword(payload, password) {
+  const parts = payload.split(":");
+  if (parts.length !== 5 || parts[0] !== AES_PW_PREFIX) throw new Error("invalid ciphertext format");
+  const iterations = parseInt(parts[1], 10);
+  const salt = fromBase64url(parts[2]);
+  const key = await deriveBits(password, salt, { iterations, length: 32 });
+  return decrypt(`${AES_PREFIX}:${parts[3]}:${parts[4]}`, key);
+}
+
+export { constantTimeEqual, decrypt, decryptWithPassword, deriveBits, digest, encrypt, encryptWithPassword, fromBase64url, fromHex, generateKey, hmac, hmacVerify, randomBytes, sha256, toBase64url, toHex };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AAWA,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,IAAK,UAAA,CAAmC,MAAA;AAC9C,EAAA,IAAI,CAAC,CAAA,IAAK,CAAC,CAAA,CAAE,MAAA,EAAQ;AACnB,IAAA,MAAM,IAAI,MAAM,6FAAwF,CAAA;AAAA,EAC1G;AACA,EAAA,OAAO,CAAA;AACT;AAIO,SAAS,YAAY,MAAA,EAA4B;AACtD,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,MAAM,CAAA;AACjC,EAAA,SAAA,EAAU,CAAE,gBAAgB,GAAG,CAAA;AAC/B,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,MAAM,KAAA,EAA2B;AAC/C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,GAAA,IAAO,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAA;AAC5D,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,QAAQ,GAAA,EAAyB;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,MAAM,GAAA,GAAM,GAAA;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAA,CAAM,SAAS,CAAC,CAAA;AAC3C,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,IAAI,MAAA,EAAQ,CAAA,EAAA,MAAS,CAAC,CAAA,GAAI,QAAA,CAAS,KAAA,CAAM,MAAM,CAAA,GAAI,CAAA,EAAG,IAAI,CAAA,GAAI,CAAC,GAAG,EAAE,CAAA;AACxF,EAAA,OAAO,GAAA;AACT;AAEO,SAAS,YAAY,KAAA,EAA2B;AACrD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,GAAA,IAAO,MAAA,CAAO,aAAa,CAAC,CAAA;AACnD,EAAA,MAAM,GAAA,GAAM,OAAO,IAAA,KAAS,WAAA,GAAc,IAAA,CAAK,GAAG,CAAA,GAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC1F,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtE;AAEO,SAAS,cAAc,CAAA,EAAuB;AACnD,EAAA,MAAM,GAAA,GAAM,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,IAAI,KAAA,CAAM,KAAA,CAAA,CAAO,CAAA,CAAE,MAAA,GAAS,KAAK,CAAC,CAAA;AACpF,EAAA,IAAI,OAAO,SAAS,WAAA,EAAa;AAC/B,IAAA,MAAM,GAAA,GAAM,KAAK,GAAG,CAAA;AACpB,IAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAI,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAC,CAAA;AAClD;AAEA,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAC5B,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAE5B,SAAS,QAAQ,IAAA,EAAuC;AACtD,EAAA,OAAO,OAAO,IAAA,KAAS,QAAA,GAAW,GAAA,CAAI,MAAA,CAAO,IAAI,CAAA,GAAI,IAAA;AACvD;AAGO,SAAS,iBAAA,CAAkB,GAAwB,CAAA,EAAiC;AACzF,EAAA,MAAM,CAAA,GAAI,QAAQ,CAAC,CAAA;AACnB,EAAA,MAAM,CAAA,GAAI,QAAQ,CAAC,CAAA;AACnB,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,CAAC,CAAA,GAAK,CAAA,CAAE,CAAC,CAAA;AACtD,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAMA,eAAsB,MAAA,CACpB,IAAA,EACA,SAAA,GAA2B,SAAA,EACN;AACrB,EAAA,MAAM,GAAA,GAAM,MAAM,SAAA,EAAU,CAAE,OAAO,MAAA,CAAO,SAAA,EAAW,OAAA,CAAQ,IAAI,CAA4B,CAAA;AAC/F,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAGA,eAAsB,OAAO,IAAA,EAA4C;AACvE,EAAA,OAAO,KAAA,CAAM,MAAM,MAAA,CAAO,IAAA,EAAM,SAAS,CAAC,CAAA;AAC5C;AAGA,eAAsB,IAAA,CACpB,GAAA,EACA,IAAA,EACA,SAAA,GAA2B,SAAA,EACN;AACrB,EAAA,MAAM,IAAI,SAAA,EAAU;AACpB,EAAA,MAAM,SAAA,GAAY,MAAM,CAAA,CAAE,MAAA,CAAO,SAAA;AAAA,IAC/B,KAAA;AAAA,IACA,QAAQ,GAAG,CAAA;AAAA,IACX,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAU;AAAA,IAChC,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACA,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,CAAE,MAAA,CAAO,KAAK,MAAA,EAAQ,SAAA,EAAW,OAAA,CAAQ,IAAI,CAA4B,CAAA;AAC3F,EAAA,OAAO,IAAI,WAAW,GAAG,CAAA;AAC3B;AAGA,eAAsB,UAAA,CACpB,GAAA,EACA,IAAA,EACA,SAAA,EACA,YAA2B,SAAA,EACT;AAClB,EAAA,OAAO,kBAAkB,MAAM,IAAA,CAAK,KAAK,IAAA,EAAM,SAAS,GAAG,SAAS,CAAA;AACtE;AAYA,eAAsB,UAAA,CACpB,QAAA,EACA,IAAA,EACA,IAAA,GAAsB,EAAC,EACF;AACrB,EAAA,MAAM,IAAI,SAAA,EAAU;AACpB,EAAA,MAAM,OAAA,GAAU,MAAM,CAAA,CAAE,MAAA,CAAO,SAAA;AAAA,IAC7B,KAAA;AAAA,IACA,QAAQ,QAAQ,CAAA;AAAA,IAChB,QAAA;AAAA,IACA,KAAA;AAAA,IACA,CAAC,YAAY;AAAA,GACf;AACA,EAAA,MAAM,IAAA,GAAO,MAAM,CAAA,CAAE,MAAA,CAAO,UAAA;AAAA,IAC1B;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,IAAA;AAAA,MACA,UAAA,EAAY,KAAK,UAAA,IAAc,IAAA;AAAA,MAC/B,IAAA,EAAM,KAAK,IAAA,IAAQ;AAAA,KACrB;AAAA,IACA,OAAA;AAAA,IAAA,CACC,IAAA,CAAK,UAAU,EAAA,IAAM;AAAA,GACxB;AACA,EAAA,OAAO,IAAI,WAAW,IAAI,CAAA;AAC5B;AAIA,IAAM,UAAA,GAAa,IAAA;AACnB,IAAM,aAAA,GAAgB,KAAA;AACtB,IAAM,qBAAA,GAAwB,IAAA;AAGvB,SAAS,WAAA,GAAsB;AACpC,EAAA,OAAO,WAAA,CAAY,WAAA,CAAY,EAAE,CAAC,CAAA;AACpC;AAEA,eAAe,aAAa,GAAA,EAA8C;AACxE,EAAA,MAAM,MAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,aAAA,CAAc,GAAG,CAAA,GAAI,GAAA;AAC3D,EAAA,IAAI,IAAI,MAAA,KAAW,EAAA,EAAI,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAC3E,EAAA,OAAO,SAAA,EAAU,CAAE,MAAA,CAAO,SAAA,CAAU,KAAA,EAAO,KAAgC,EAAE,IAAA,EAAM,SAAA,EAAU,EAAG,KAAA,EAAO;AAAA,IACrG,SAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;AAMA,eAAsB,OAAA,CAAQ,WAAgC,GAAA,EAA2C;AACvG,EAAA,MAAM,SAAA,GAAY,MAAM,YAAA,CAAa,GAAG,CAAA;AACxC,EAAA,MAAM,EAAA,GAAK,YAAY,EAAE,CAAA;AACzB,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,OAAA;AAAA,IAClC,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAkC;AAAA,IACrD,SAAA;AAAA,IACA,QAAQ,SAAS;AAAA,GACnB;AACA,EAAA,OAAO,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,WAAA,CAAY,EAAE,CAAC,CAAA,CAAA,EAAI,WAAA,CAAY,IAAI,UAAA,CAAW,EAAE,CAAC,CAAC,CAAA,CAAA;AAC5E;AAGA,eAAsB,OAAA,CAAQ,SAAiB,GAAA,EAA2C;AACxF,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAC/B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,CAAC,MAAM,UAAA,EAAY,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AAC9F,EAAA,MAAM,SAAA,GAAY,MAAM,YAAA,CAAa,GAAG,CAAA;AACxC,EAAA,MAAM,EAAA,GAAK,aAAA,CAAc,KAAA,CAAM,CAAC,CAAE,CAAA;AAClC,EAAA,MAAM,EAAA,GAAK,aAAA,CAAc,KAAA,CAAM,CAAC,CAAE,CAAA;AAClC,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,EAAU,CAAE,MAAA,CAAO,OAAA;AAAA,IAClC,EAAE,IAAA,EAAM,SAAA,EAAW,EAAA,EAAkC;AAAA,IACrD,SAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,OAAO,GAAA,CAAI,OAAO,EAAE,CAAA;AACtB;AAMA,eAAsB,mBAAA,CACpB,SAAA,EACA,QAAA,EACA,IAAA,GAAgC,EAAC,EAChB;AACjB,EAAA,MAAM,UAAA,GAAa,KAAK,UAAA,IAAc,qBAAA;AACtC,EAAA,MAAM,IAAA,GAAO,YAAY,EAAE,CAAA;AAC3B,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,QAAA,EAAU,MAAM,EAAE,UAAA,EAAY,MAAA,EAAQ,EAAA,EAAI,CAAA;AACvE,EAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA;AAC1C,EAAA,MAAM,GAAG,EAAA,EAAI,EAAE,CAAA,GAAI,KAAA,CAAM,MAAM,GAAG,CAAA;AAClC,EAAA,OAAO,CAAA,EAAG,aAAa,CAAA,CAAA,EAAI,UAAU,CAAA,CAAA,EAAI,WAAA,CAAY,IAAI,CAAC,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA,EAAI,EAAE,CAAA,CAAA;AACxE;AAGA,eAAsB,mBAAA,CAAoB,SAAiB,QAAA,EAAmC;AAC5F,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAC/B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,CAAC,MAAM,aAAA,EAAe,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AACjG,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,KAAA,CAAM,CAAC,GAAI,EAAE,CAAA;AACzC,EAAA,MAAM,IAAA,GAAO,aAAA,CAAc,KAAA,CAAM,CAAC,CAAE,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,UAAA,CAAW,QAAA,EAAU,MAAM,EAAE,UAAA,EAAY,MAAA,EAAQ,EAAA,EAAI,CAAA;AACvE,EAAA,OAAO,OAAA,CAAQ,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA;AAC7D","file":"index.js","sourcesContent":["/**\n * @lacspace/crypto\n * Safe, boring cryptography — authenticated AES-256-GCM, key derivation, hashing.\n *\n * A thin, correct layer over the Web Crypto API (no hand-rolled crypto), so the\n * same code runs on Node 18+, edge runtimes, browsers and React Native. Encrypt\n * database fields, S3 object payloads, cookies and tokens with confidence.\n *\n * Zero dependencies · isomorphic · fully typed.\n */\n\nfunction getCrypto(): Crypto {\n  const c = (globalThis as { crypto?: Crypto }).crypto;\n  if (!c || !c.subtle) {\n    throw new Error(\"Web Crypto unavailable — @lacspace/crypto needs Node 18+, an edge runtime or a browser\");\n  }\n  return c;\n}\n\n/* ------------------------------ encoding ------------------------------ */\n\nexport function randomBytes(length: number): Uint8Array {\n  const buf = new Uint8Array(length);\n  getCrypto().getRandomValues(buf);\n  return buf;\n}\n\nexport function toHex(bytes: Uint8Array): string {\n  let out = \"\";\n  for (const b of bytes) out += b.toString(16).padStart(2, \"0\");\n  return out;\n}\n\nexport function fromHex(hex: string): Uint8Array {\n  const clean = hex.length % 2 ? \"0\" + hex : hex;\n  const out = new Uint8Array(clean.length / 2);\n  for (let i = 0; i < out.length; i++) out[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);\n  return out;\n}\n\nexport function toBase64url(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (const b of bytes) bin += String.fromCharCode(b);\n  const b64 = typeof btoa !== \"undefined\" ? btoa(bin) : Buffer.from(bytes).toString(\"base64\");\n  return b64.replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nexport function fromBase64url(s: string): Uint8Array {\n  const b64 = s.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"===\".slice((s.length + 3) % 4);\n  if (typeof atob !== \"undefined\") {\n    const bin = atob(b64);\n    const out = new Uint8Array(bin.length);\n    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n    return out;\n  }\n  return new Uint8Array(Buffer.from(b64, \"base64\"));\n}\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\nfunction toBytes(data: string | Uint8Array): Uint8Array {\n  return typeof data === \"string\" ? enc.encode(data) : data;\n}\n\n/** Constant-time comparison of two byte arrays or strings. */\nexport function constantTimeEqual(a: Uint8Array | string, b: Uint8Array | string): boolean {\n  const x = toBytes(a);\n  const y = toBytes(b);\n  if (x.length !== y.length) return false;\n  let diff = 0;\n  for (let i = 0; i < x.length; i++) diff |= x[i]! ^ y[i]!;\n  return diff === 0;\n}\n\n/* ------------------------------ hashing ------------------------------ */\n\nexport type HashAlgorithm = \"SHA-256\" | \"SHA-384\" | \"SHA-512\";\n\nexport async function digest(\n  data: string | Uint8Array,\n  algorithm: HashAlgorithm = \"SHA-256\",\n): Promise<Uint8Array> {\n  const buf = await getCrypto().subtle.digest(algorithm, toBytes(data) as unknown as BufferSource);\n  return new Uint8Array(buf);\n}\n\n/** SHA-256 hex digest. */\nexport async function sha256(data: string | Uint8Array): Promise<string> {\n  return toHex(await digest(data, \"SHA-256\"));\n}\n\n/** HMAC signature (bytes). */\nexport async function hmac(\n  key: string | Uint8Array,\n  data: string | Uint8Array,\n  algorithm: HashAlgorithm = \"SHA-256\",\n): Promise<Uint8Array> {\n  const c = getCrypto();\n  const cryptoKey = await c.subtle.importKey(\n    \"raw\",\n    toBytes(key) as unknown as BufferSource,\n    { name: \"HMAC\", hash: algorithm },\n    false,\n    [\"sign\"],\n  );\n  const sig = await c.subtle.sign(\"HMAC\", cryptoKey, toBytes(data) as unknown as BufferSource);\n  return new Uint8Array(sig);\n}\n\n/** Verify an HMAC in constant time. */\nexport async function hmacVerify(\n  key: string | Uint8Array,\n  data: string | Uint8Array,\n  signature: Uint8Array,\n  algorithm: HashAlgorithm = \"SHA-256\",\n): Promise<boolean> {\n  return constantTimeEqual(await hmac(key, data, algorithm), signature);\n}\n\n/* ------------------------------ key derivation ------------------------------ */\n\nexport interface DeriveOptions {\n  iterations?: number;\n  hash?: HashAlgorithm;\n  /** Derived key length in bytes. Default 32. */\n  length?: number;\n}\n\n/** Derive raw key bytes from a password with PBKDF2. */\nexport async function deriveBits(\n  password: string | Uint8Array,\n  salt: Uint8Array,\n  opts: DeriveOptions = {},\n): Promise<Uint8Array> {\n  const c = getCrypto();\n  const baseKey = await c.subtle.importKey(\n    \"raw\",\n    toBytes(password) as unknown as BufferSource,\n    \"PBKDF2\",\n    false,\n    [\"deriveBits\"],\n  );\n  const bits = await c.subtle.deriveBits(\n    {\n      name: \"PBKDF2\",\n      salt: salt as unknown as BufferSource,\n      iterations: opts.iterations ?? 210000,\n      hash: opts.hash ?? \"SHA-256\",\n    },\n    baseKey,\n    (opts.length ?? 32) * 8,\n  );\n  return new Uint8Array(bits);\n}\n\n/* ------------------------------ AES-256-GCM ------------------------------ */\n\nconst AES_PREFIX = \"v1\";\nconst AES_PW_PREFIX = \"v1p\";\nconst DEFAULT_PW_ITERATIONS = 210000;\n\n/** Generate a random 256-bit AES key as a base64url string. */\nexport function generateKey(): string {\n  return toBase64url(randomBytes(32));\n}\n\nasync function importAesKey(key: string | Uint8Array): Promise<CryptoKey> {\n  const raw = typeof key === \"string\" ? fromBase64url(key) : key;\n  if (raw.length !== 32) throw new Error(\"AES key must be 32 bytes (256-bit)\");\n  return getCrypto().subtle.importKey(\"raw\", raw as unknown as BufferSource, { name: \"AES-GCM\" }, false, [\n    \"encrypt\",\n    \"decrypt\",\n  ]);\n}\n\n/**\n * Encrypt with AES-256-GCM using a 32-byte key (base64url or bytes).\n * Returns a compact self-describing string: `v1:<iv>:<ciphertext>`.\n */\nexport async function encrypt(plaintext: string | Uint8Array, key: string | Uint8Array): Promise<string> {\n  const cryptoKey = await importAesKey(key);\n  const iv = randomBytes(12);\n  const ct = await getCrypto().subtle.encrypt(\n    { name: \"AES-GCM\", iv: iv as unknown as BufferSource },\n    cryptoKey,\n    toBytes(plaintext) as unknown as BufferSource,\n  );\n  return `${AES_PREFIX}:${toBase64url(iv)}:${toBase64url(new Uint8Array(ct))}`;\n}\n\n/** Decrypt a string produced by {@link encrypt}. Returns the UTF-8 plaintext. */\nexport async function decrypt(payload: string, key: string | Uint8Array): Promise<string> {\n  const parts = payload.split(\":\");\n  if (parts.length !== 3 || parts[0] !== AES_PREFIX) throw new Error(\"invalid ciphertext format\");\n  const cryptoKey = await importAesKey(key);\n  const iv = fromBase64url(parts[1]!);\n  const ct = fromBase64url(parts[2]!);\n  const pt = await getCrypto().subtle.decrypt(\n    { name: \"AES-GCM\", iv: iv as unknown as BufferSource },\n    cryptoKey,\n    ct as unknown as BufferSource,\n  );\n  return dec.decode(pt);\n}\n\n/**\n * Encrypt with a passphrase (PBKDF2-derived key + AES-256-GCM).\n * Returns `v1p:<iterations>:<salt>:<iv>:<ciphertext>` — self-contained.\n */\nexport async function encryptWithPassword(\n  plaintext: string | Uint8Array,\n  password: string,\n  opts: { iterations?: number } = {},\n): Promise<string> {\n  const iterations = opts.iterations ?? DEFAULT_PW_ITERATIONS;\n  const salt = randomBytes(16);\n  const key = await deriveBits(password, salt, { iterations, length: 32 });\n  const inner = await encrypt(plaintext, key);\n  const [, iv, ct] = inner.split(\":\");\n  return `${AES_PW_PREFIX}:${iterations}:${toBase64url(salt)}:${iv}:${ct}`;\n}\n\n/** Decrypt a string produced by {@link encryptWithPassword}. */\nexport async function decryptWithPassword(payload: string, password: string): Promise<string> {\n  const parts = payload.split(\":\");\n  if (parts.length !== 5 || parts[0] !== AES_PW_PREFIX) throw new Error(\"invalid ciphertext format\");\n  const iterations = parseInt(parts[1]!, 10);\n  const salt = fromBase64url(parts[2]!);\n  const key = await deriveBits(password, salt, { iterations, length: 32 });\n  return decrypt(`${AES_PREFIX}:${parts[3]}:${parts[4]}`, key);\n}\n"]}

package/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "@lacspace/crypto",
+  "version": "1.0.0",
+  "description": "Safe, boring cryptography over Web Crypto — authenticated AES-256-GCM, PBKDF2 key derivation, SHA-256, HMAC, secure random and constant-time compare. Isomorphic (Node, edge, browser, RN).",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": { ".": { "import": { "types": "./dist/index.d.ts", "default": "./dist/index.js" }, "require": { "types": "./dist/index.d.cts", "default": "./dist/index.cjs" } } },
+  "files": ["dist"],
+  "sideEffects": false,
+  "scripts": { "build": "tsup", "prepublishOnly": "npm run build" },
+  "keywords": ["crypto", "aes", "aes-256-gcm", "encryption", "web-crypto", "pbkdf2", "hmac", "constant-time", "isomorphic", "typescript"],
+  "author": "Lacspace <contact@lacspace.com>",
+  "license": "MIT",
+  "homepage": "https://lacspace.com/packages",
+  "repository": { "type": "git", "url": "git+https://github.com/lacspace/npm-packages.git", "directory": "crypto" },
+  "bugs": { "url": "https://github.com/lacspace/npm-packages/issues" },
+  "engines": { "node": ">=18" }
+}