@oyinlola141/lattice-crypto 0.1.0

package/dist/cryptoService/cryptoService.core.js

@@ -0,0 +1,69 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+import { generateCryptoKey } from "../cryptoKey/cryptoKey.factory.js";
+import { CryptoAlgorithm } from "../cryptoConstants/cryptoConstants.type.js";
+import { createCryptoError } from "@latticejs/errors";
+import { serviceEncrypt, serviceDecrypt } from "./operations/cryptoService.cipher.js";
+import { serviceHash, serviceHashHex } from "./operations/cryptoService.hash.js";
+import { serviceHashPassword, serviceVerifyPassword } from "./operations/cryptoService.password.js";
+import { serviceDeriveKey } from "./cryptoService.derivation.js";
+import { serviceGenerateToken, serviceGenerateOtp, serviceHashToken, serviceVerifyToken } from "./operations/cryptoService.token.js";
+import { serviceEncode, serviceDecode } from "./cryptoService.encoding.js";
+const provider = createNodeCryptoProvider();
+/**
+ * High-level service facade for cryptographic operations.
+ */
+export class CryptoService {
+    /** Generates a cryptographic key. */
+    async generateKey(algorithm = CryptoAlgorithm.AES_256_GCM) {
+        const length = algorithm.includes("256") ? 32 : algorithm.includes("384") ? 48 : algorithm.includes("512") ? 64 : 32;
+        return generateCryptoKey(length, { algorithm, extractable: true });
+    }
+    /** Generates random bytes. */
+    async randomBytes(length = 32) {
+        if (!Number.isInteger(length) || length <= 0)
+            throw new TypeError("Random byte length must be a positive integer.");
+        try {
+            return await provider.randomBytes(length);
+        }
+        catch {
+            throw createCryptoError("Failed to generate random bytes.", {});
+        }
+    }
+    /** Encrypts data using the supplied key. */
+    async encrypt(plaintext, key, options) { return serviceEncrypt(plaintext, key, options); }
+    /** Decrypts data using the supplied key. */
+    async decrypt(ciphertext, key, iv, authTag, aad) { return serviceDecrypt(ciphertext, key, iv, authTag, aad); }
+    /** Hashes arbitrary data with SHA-256. */
+    async hash(value) { return serviceHash(value); }
+    /** Hashes arbitrary data and returns hexadecimal output. */
+    async hashHex(value) { return serviceHashHex(value); }
+    /** Hashes a password using the configured algorithm. */
+    async hashPassword(password, options) { return serviceHashPassword(password, options); }
+    /** Verifies a password against a stored password hash. */
+    async verifyPassword(password, encodedHash) { return serviceVerifyPassword(password, encodedHash); }
+    /** Derives a cryptographic key from password material. */
+    async deriveKey(password, algorithm, options) { return serviceDeriveKey(password, algorithm, options); }
+    /** Generates a cryptographically secure opaque token. */
+    async generateToken(options) { return serviceGenerateToken(options); }
+    /** Generates a secure one-time password. */
+    async generateOtp(digits = 6) { return serviceGenerateOtp(digits); }
+    /** Hashes an opaque token before database storage. */
+    async hashToken(token) { return serviceHashToken(token); }
+    /** Verifies an opaque token against its stored hash. */
+    async verifyToken(token, expectedHash) { return serviceVerifyToken(token, expectedHash); }
+    /** Encodes binary data. */
+    encode(value, encoding = "base64url") { return serviceEncode(value, encoding); }
+    /** Decodes encoded binary data. */
+    decode(value, encoding = "base64url") { return serviceDecode(value, encoding); }
+}
+/**
+ * Creates a new CryptoService instance.
+ */
+export function createCryptoService() {
+    return new CryptoService();
+}
+/**
+ * Default crypto service instance.
+ */
+export const cryptoService = createCryptoService();
+//# sourceMappingURL=cryptoService.core.js.map

package/dist/cryptoService/cryptoService.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.core.js","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACrI,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAG3E,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C;;GAEG;AACH,MAAM,OAAO,aAAa;IACxB,qCAAqC;IACrC,KAAK,CAAC,WAAW,CAAC,SAAS,GAAoB,eAAe,CAAC,WAAW;QACxE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrH,OAAO,iBAAiB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,8BAA8B;IAC9B,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;QAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACpH,IAAI,CAAC;YAAC,OAAO,MAAM,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAClD,MAAM,CAAC;YAAC,MAAM,iBAAiB,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;IAC5E,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,OAAO,CAAC,SAAqB,EAAE,GAAe,EAAE,OAAsE,IAA0E,OAAO,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAEvP,4CAA4C;IAC5C,KAAK,CAAC,OAAO,CAAC,UAAsB,EAAE,GAAe,EAAE,EAAc,EAAE,OAAmB,EAAE,GAAgB,IAAyB,OAAO,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAEhM,0CAA0C;IAC1C,KAAK,CAAC,IAAI,CAAC,KAA0B,IAAyB,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE1F,4DAA4D;IAC5D,KAAK,CAAC,OAAO,CAAC,KAA0B,IAAqB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5F,wDAAwD;IACxD,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,OAA8E,IAAkF,OAAO,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAErP,0DAA0D;IAC1D,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,WAAmB,IAAsB,OAAO,qBAAqB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAEtI,0DAA0D;IAC1D,KAAK,CAAC,SAAS,CAAC,QAA6B,EAAE,SAA0B,EAAE,OAAuH,IAAuE,OAAO,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAEjU,yDAAyD;IACzD,KAAK,CAAC,aAAa,CAAC,OAAoE,IAAqB,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEpJ,4CAA4C;IAC5C,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAqB,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAErF,sDAAsD;IACtD,KAAK,CAAC,SAAS,CAAC,KAAa,IAAqB,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnF,wDAAwD;IACxD,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,YAAoB,IAAsB,OAAO,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAE5H,2BAA2B;IAC3B,MAAM,CAAC,KAAiB,EAAE,QAAQ,GAAyD,WAAW,IAAY,OAAO,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE1J,mCAAmC;IACnC,MAAM,CAAC,KAAa,EAAE,QAAQ,GAAyD,WAAW,IAAgB,OAAO,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;CAC3J;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,aAAa,EAAE,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC"}

package/dist/cryptoService/cryptoService.derivation.d.ts

@@ -0,0 +1,6 @@
+import type { DerivedKeyResult } from "../cryptoProvider/index.js";
+import type { Pbkdf2Options, ScryptOptions } from "../cryptoKeyDerivation/cryptoKeyDerivation.type.js";
+import { CryptoAlgorithm } from "../cryptoConstants/cryptoConstants.type.js";
+export type { DerivedKeyResult, Pbkdf2Options, ScryptOptions };
+export declare function serviceDeriveKey(password: string | Uint8Array, algorithm: CryptoAlgorithm, options?: Pbkdf2Options | ScryptOptions): Promise<DerivedKeyResult>;
+//# sourceMappingURL=cryptoService.derivation.d.ts.map

package/dist/cryptoService/cryptoService.derivation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.derivation.d.ts","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.derivation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACd,MAAM,oDAAoD,CAAC;AAU5D,OAAO,EACL,eAAe,EAChB,MAAM,4CAA4C,CAAC;AAEpD,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC;AAE/D,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAC7B,SAAS,EAAE,eAAe,EAC1B,OAAO,CAAC,EAAE,aAAa,GAAG,aAAa,GACtC,OAAO,CAAC,gBAAgB,CAAC,CAS3B"}

package/dist/cryptoService/cryptoService.derivation.js

@@ -0,0 +1,12 @@
+import { deriveKey, } from "../cryptoKeyDerivation/cryptoKeyDerivation.core.js";
+import { cryptoKeyDerivationError, } from "@latticejs/errors";
+import { CryptoAlgorithm, } from "../cryptoConstants/cryptoConstants.type.js";
+export async function serviceDeriveKey(password, algorithm, options) {
+    try {
+        return await deriveKey(password, algorithm, options);
+    }
+    catch {
+        throw cryptoKeyDerivationError("Key derivation failed.", algorithm);
+    }
+}
+//# sourceMappingURL=cryptoService.derivation.js.map

package/dist/cryptoService/cryptoService.derivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.derivation.js","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.derivation.ts"],"names":[],"mappings":"AASA,OAAO,EACL,SAAS,GACV,MAAM,oDAAoD,CAAC;AAE5D,OAAO,EACL,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,GAChB,MAAM,4CAA4C,CAAC;AAIpD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA6B,EAC7B,SAA0B,EAC1B,OAAuC;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,wBAAwB,CAC5B,wBAAwB,EACxB,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cryptoService/cryptoService.encoding.d.ts

@@ -0,0 +1,5 @@
+import type { CryptoEncoding } from "../cryptoEncoding/cryptoEncoding.core.js";
+export type { CryptoEncoding };
+export declare function serviceEncode(value: Uint8Array, encoding?: CryptoEncoding): string;
+export declare function serviceDecode(value: string, encoding?: CryptoEncoding): Uint8Array;
+//# sourceMappingURL=cryptoService.encoding.d.ts.map

package/dist/cryptoService/cryptoService.encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.encoding.d.ts","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.encoding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACf,MAAM,0CAA0C,CAAC;AAWlD,YAAY,EAAE,cAAc,EAAE,CAAC;AAE/B,wBAAgB,aAAa,CAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,GAAE,cAA4B,GACrC,MAAM,CASR;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,cAA4B,GACrC,UAAU,CASZ"}

package/dist/cryptoService/cryptoService.encoding.js

@@ -0,0 +1,19 @@
+import { encode, decode, } from "../cryptoEncoding/cryptoEncoding.core.js";
+import { createCryptoError, } from "@latticejs/errors";
+export function serviceEncode(value, encoding = "base64url") {
+    try {
+        return encode(value, encoding);
+    }
+    catch {
+        throw createCryptoError("Crypto encoding failed.", {});
+    }
+}
+export function serviceDecode(value, encoding = "base64url") {
+    try {
+        return decode(value, encoding);
+    }
+    catch {
+        throw createCryptoError("Crypto decoding failed.", {});
+    }
+}
+//# sourceMappingURL=cryptoService.encoding.js.map

package/dist/cryptoService/cryptoService.encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.encoding.js","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.encoding.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,MAAM,EACN,MAAM,GACP,MAAM,0CAA0C,CAAC;AAElD,OAAO,EACL,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAI3B,MAAM,UAAU,aAAa,CAC3B,KAAiB,EACjB,QAAQ,GAAmB,WAAW;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,yBAAyB,EACzB,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAa,EACb,QAAQ,GAAmB,WAAW;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,yBAAyB,EACzB,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cryptoService/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @oyinlola141/lattice-crypto/cryptoService
+ *
+ * High-level cryptographic service interface.
+ */
+export * from './cryptoService.core.js';
+export { serviceEncrypt, serviceDecrypt, } from './operations/cryptoService.cipher.js';
+export { serviceHash, serviceHashHex, } from './operations/cryptoService.hash.js';
+export { serviceHashPassword, serviceVerifyPassword, } from './operations/cryptoService.password.js';
+export { serviceGenerateToken, serviceGenerateOtp, serviceHashToken, serviceVerifyToken, } from './operations/cryptoService.token.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoService/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoService/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,yBAAyB,CAAC;AAExC,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC"}

package/dist/cryptoService/index.js

@@ -0,0 +1,11 @@
+/**
+ * @latticejs/crypto/cryptoService
+ *
+ * High-level cryptographic service interface.
+ */
+export * from './cryptoService.core.js';
+export { serviceEncrypt, serviceDecrypt, } from './operations/cryptoService.cipher.js';
+export { serviceHash, serviceHashHex, } from './operations/cryptoService.hash.js';
+export { serviceHashPassword, serviceVerifyPassword, } from './operations/cryptoService.password.js';
+export { serviceGenerateToken, serviceGenerateOtp, serviceHashToken, serviceVerifyToken, } from './operations/cryptoService.token.js';
+//# sourceMappingURL=index.js.map

package/dist/cryptoService/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoService/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,yBAAyB,CAAC;AAExC,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC"}

package/dist/cryptoService/operations/cryptoService.cipher.d.ts

@@ -0,0 +1,5 @@
+import type { CipherOptions, CipherResult } from "../../cryptoCipher/cryptoCipher.core.js";
+export type { CipherOptions, CipherResult };
+export declare function serviceEncrypt(plaintext: Uint8Array, key: Uint8Array, options?: CipherOptions): Promise<CipherResult>;
+export declare function serviceDecrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, authTag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=cryptoService.cipher.d.ts.map

package/dist/cryptoService/operations/cryptoService.cipher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.cipher.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.cipher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACb,MAAM,yCAAyC,CAAC;AAYjD,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AAE5C,wBAAsB,cAAc,CAClC,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,EACf,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC,CASvB;AAED,wBAAsB,cAAc,CAClC,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,UAAU,EACnB,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAerB"}

package/dist/cryptoService/operations/cryptoService.cipher.js

@@ -0,0 +1,19 @@
+import { encrypt, decrypt, } from "../../cryptoCipher/cryptoCipher.core.js";
+import { cryptoCipherError, CryptoOperation, } from "@latticejs/errors";
+export async function serviceEncrypt(plaintext, key, options) {
+    try {
+        return await encrypt(plaintext, key, options);
+    }
+    catch {
+        throw cryptoCipherError("Encryption failed.", CryptoOperation.ENCRYPT);
+    }
+}
+export async function serviceDecrypt(ciphertext, key, iv, authTag, aad) {
+    try {
+        return await decrypt(ciphertext, key, iv, authTag, aad);
+    }
+    catch {
+        throw cryptoCipherError("Decryption failed.", CryptoOperation.DECRYPT);
+    }
+}
+//# sourceMappingURL=cryptoService.cipher.js.map

package/dist/cryptoService/operations/cryptoService.cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.cipher.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.cipher.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,OAAO,EACP,OAAO,GACR,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAI3B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAqB,EACrB,GAAe,EACf,OAAuB;IAEvB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,oBAAoB,EACpB,eAAe,CAAC,OAAO,CACxB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAsB,EACtB,GAAe,EACf,EAAc,EACd,OAAmB,EACnB,GAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAClB,UAAU,EACV,GAAG,EACH,EAAE,EACF,OAAO,EACP,GAAG,CACJ,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,oBAAoB,EACpB,eAAe,CAAC,OAAO,CACxB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cryptoService/operations/cryptoService.hash.d.ts

@@ -0,0 +1,3 @@
+export declare function serviceHash(value: string | Uint8Array): Promise<Uint8Array>;
+export declare function serviceHashHex(value: string | Uint8Array): Promise<string>;
+//# sourceMappingURL=cryptoService.hash.d.ts.map

package/dist/cryptoService/operations/cryptoService.hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.hash.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.hash.ts"],"names":[],"mappings":"AAcA,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,GAAG,UAAU,GACzB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,GAAG,UAAU,GACzB,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/cryptoService/operations/cryptoService.hash.js

@@ -0,0 +1,16 @@
+import { createNodeCryptoProvider, } from "../../node/index.js";
+import { encode, } from "../../cryptoEncoding/cryptoEncoding.core.js";
+import { cryptoHashError, } from "@latticejs/errors";
+const provider = createNodeCryptoProvider();
+export async function serviceHash(value) {
+    try {
+        return await provider.hash("sha256", value);
+    }
+    catch {
+        throw cryptoHashError("Hashing failed.", "sha256");
+    }
+}
+export async function serviceHashHex(value) {
+    return encode(await serviceHash(value), "hex");
+}
+//# sourceMappingURL=cryptoService.hash.js.map

package/dist/cryptoService/operations/cryptoService.hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.hash.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.hash.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,MAAM,GACP,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAA0B;IAE1B,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,OAAO,MAAM,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC"}

package/dist/cryptoService/operations/cryptoService.password.d.ts

@@ -0,0 +1,5 @@
+import type { PasswordHashOptions, PasswordHashResult } from "../../cryptoPassword/cryptoPassword.type.js";
+export type { PasswordHashOptions, PasswordHashResult };
+export declare function serviceHashPassword(password: string, options?: PasswordHashOptions): Promise<PasswordHashResult>;
+export declare function serviceVerifyPassword(password: string, encodedHash: string): Promise<boolean>;
+//# sourceMappingURL=cryptoService.password.d.ts.map

package/dist/cryptoService/operations/cryptoService.password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.password.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.password.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,6CAA6C,CAAC;AAWrD,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;AAExD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAS7B;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/dist/cryptoService/operations/cryptoService.password.js

@@ -0,0 +1,19 @@
+import { hashPassword, verifyPassword, } from "../../cryptoPassword/cryptoPassword.core.js";
+import { createCryptoError, } from "@latticejs/errors";
+export async function serviceHashPassword(password, options) {
+    try {
+        return await hashPassword(password, options);
+    }
+    catch {
+        throw createCryptoError("Password hashing failed.", {});
+    }
+}
+export async function serviceVerifyPassword(password, encodedHash) {
+    try {
+        return await verifyPassword(password, encodedHash);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=cryptoService.password.js.map

package/dist/cryptoService/operations/cryptoService.password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.password.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.password.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,YAAY,EACZ,cAAc,GACf,MAAM,6CAA6C,CAAC;AAErD,OAAO,EACL,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAI3B,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,0BAA0B,EAC1B,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cryptoService/operations/cryptoService.token.d.ts

@@ -0,0 +1,7 @@
+import type { TokenOptions, TokenEncoding } from "../../cryptoToken/cryptoToken.core.js";
+export type { TokenOptions, TokenEncoding };
+export declare function serviceGenerateToken(options?: TokenOptions): Promise<string>;
+export declare function serviceGenerateOtp(digits?: number): Promise<string>;
+export declare function serviceHashToken(token: string): Promise<string>;
+export declare function serviceVerifyToken(token: string, expectedHash: string): Promise<boolean>;
+//# sourceMappingURL=cryptoService.token.d.ts.map

package/dist/cryptoService/operations/cryptoService.token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.token.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACd,MAAM,uCAAuC,CAAC;AAiB/C,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE5C,wBAAsB,oBAAoB,CACxC,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,kBAAkB,CACtC,MAAM,SAAI,GACT,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/dist/cryptoService/operations/cryptoService.token.js

@@ -0,0 +1,36 @@
+import { generateToken, generateOtp, } from "../../cryptoToken/cryptoToken.core.js";
+import { hashToken, verifyTokenHash, } from "../../cryptoToken/cryptoToken.hash.js";
+import { createCryptoError, cryptoHashError, } from "@latticejs/errors";
+export async function serviceGenerateToken(options) {
+    try {
+        return await generateToken(options);
+    }
+    catch {
+        throw createCryptoError("Token generation failed.", {});
+    }
+}
+export async function serviceGenerateOtp(digits = 6) {
+    try {
+        return await generateOtp(digits);
+    }
+    catch {
+        throw createCryptoError("OTP generation failed.", {});
+    }
+}
+export async function serviceHashToken(token) {
+    try {
+        return await hashToken(token);
+    }
+    catch {
+        throw cryptoHashError("Token hashing failed.", "sha256");
+    }
+}
+export async function serviceVerifyToken(token, expectedHash) {
+    try {
+        return await verifyTokenHash(token, expectedHash);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=cryptoService.token.js.map

package/dist/cryptoService/operations/cryptoService.token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.token.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.token.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,aAAa,EACb,WAAW,GACZ,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,SAAS,EACT,eAAe,GAChB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAI3B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,0BAA0B,EAC1B,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAM,GAAG,CAAC;IAEV,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CACrB,wBAAwB,EACxB,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,CACnB,uBAAuB,EACvB,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,YAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cryptoService/operations/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @oyinlola141/lattice-crypto/cryptoService/operations
+ *
+ * High-level cryptographic service operation wrappers
+ * that add error handling and logging around core primitives.
+ */
+export * from "./cryptoService.cipher.js";
+export * from "./cryptoService.hash.js";
+export * from "./cryptoService.password.js";
+export * from "./cryptoService.token.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoService/operations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/dist/cryptoService/operations/index.js

@@ -0,0 +1,11 @@
+/**
+ * @latticejs/crypto/cryptoService/operations
+ *
+ * High-level cryptographic service operation wrappers
+ * that add error handling and logging around core primitives.
+ */
+export * from "./cryptoService.cipher.js";
+export * from "./cryptoService.hash.js";
+export * from "./cryptoService.password.js";
+export * from "./cryptoService.token.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoService/operations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/dist/cryptoSignature/cryptoSignature.core.d.ts

@@ -0,0 +1,25 @@
+import type { CryptoInput } from "../cryptoProvider/index.js";
+import type { SignatureAlgorithm } from "../cryptoProvider/index.js";
+/**
+ * Supported signature algorithms.
+ */
+export type SignatureOptions = {
+    readonly algorithm?: SignatureAlgorithm;
+};
+/**
+ * Signs arbitrary data using a private key.
+ */
+export declare function sign(data: Uint8Array, privateKey: CryptoInput, options?: SignatureOptions): Promise<Uint8Array>;
+/**
+ * Verifies a signature using a public key.
+ */
+export declare function verify(data: Uint8Array, signature: Uint8Array, publicKey: CryptoInput, options?: SignatureOptions): Promise<boolean>;
+/**
+ * Signs UTF-8 text.
+ */
+export declare function signString(data: string, privateKey: CryptoInput, options?: SignatureOptions): Promise<Uint8Array>;
+/**
+ * Verifies a signature against UTF-8 text.
+ */
+export declare function verifyString(data: string, signature: Uint8Array, publicKey: CryptoInput, options?: SignatureOptions): Promise<boolean>;
+//# sourceMappingURL=cryptoSignature.core.d.ts.map

package/dist/cryptoSignature/cryptoSignature.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoSignature.core.d.ts","sourceRoot":"","sources":["../../src/cryptoSignature/cryptoSignature.core.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,WAAW,EACZ,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;CACzC,CAAC;AAIF;;GAEG;AACH,wBAAsB,IAAI,CACxB,IAAI,EAAE,UAAU,EAChB,UAAU,EAAE,WAAW,EACvB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;GAEG;AACH,wBAAsB,MAAM,CAC1B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,WAAW,EACtB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,WAAW,EACvB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,WAAW,EACtB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAOlB"}

package/dist/cryptoSignature/cryptoSignature.core.js

@@ -0,0 +1,36 @@
+import { createNodeCryptoProvider, } from "../node/index.js";
+const provider = createNodeCryptoProvider();
+/**
+ * Signs arbitrary data using a private key.
+ */
+export async function sign(data, privateKey, options = {}) {
+    return provider.sign({
+        key: privateKey,
+        data,
+        algorithm: options.algorithm ?? "ed25519",
+    });
+}
+/**
+ * Verifies a signature using a public key.
+ */
+export async function verify(data, signature, publicKey, options = {}) {
+    return provider.verify({
+        key: publicKey,
+        data,
+        signature,
+        algorithm: options.algorithm ?? "ed25519",
+    });
+}
+/**
+ * Signs UTF-8 text.
+ */
+export async function signString(data, privateKey, options = {}) {
+    return sign(Buffer.from(data, "utf8"), privateKey, options);
+}
+/**
+ * Verifies a signature against UTF-8 text.
+ */
+export async function verifyString(data, signature, publicKey, options = {}) {
+    return verify(Buffer.from(data, "utf8"), signature, publicKey, options);
+}
+//# sourceMappingURL=cryptoSignature.core.js.map

package/dist/cryptoSignature/cryptoSignature.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoSignature.core.js","sourceRoot":"","sources":["../../src/cryptoSignature/cryptoSignature.core.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAe1B,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAgB,EAChB,UAAuB,EACvB,OAAO,GAAqB,EAAE;IAE9B,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,GAAG,EAAE,UAAU;QACf,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;KAC1C,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAgB,EAChB,SAAqB,EACrB,SAAsB,EACtB,OAAO,GAAqB,EAAE;IAE9B,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,GAAG,EAAE,SAAS;QACd,IAAI;QACJ,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;KAC1C,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,UAAuB,EACvB,OAAO,GAAqB,EAAE;IAE9B,OAAO,IAAI,CACT,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACzB,UAAU,EACV,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAqB,EACrB,SAAsB,EACtB,OAAO,GAAqB,EAAE;IAE9B,OAAO,MAAM,CACX,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACzB,SAAS,EACT,SAAS,EACT,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/cryptoSignature/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @oyinlola141/lattice-crypto/cryptoSignature
+ *
+ * Digital signature creation and verification.
+ */
+export * from './cryptoSignature.core.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoSignature/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoSignature/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,2BAA2B,CAAC"}

package/dist/cryptoSignature/index.js

@@ -0,0 +1,7 @@
+/**
+ * @latticejs/crypto/cryptoSignature
+ *
+ * Digital signature creation and verification.
+ */
+export * from './cryptoSignature.core.js';
+//# sourceMappingURL=index.js.map

package/dist/cryptoSignature/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoSignature/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,2BAA2B,CAAC"}

package/dist/cryptoToken/cryptoToken.core.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Supported token encodings.
+ */
+export type TokenEncoding = "hex" | "base64" | "base64url";
+/**
+ * Options for generating a secure token.
+ */
+export interface TokenOptions {
+    readonly bytes?: number;
+    readonly encoding?: TokenEncoding;
+    readonly prefix?: string;
+}
+/**
+ * Creates a cryptographically secure opaque token.
+ */
+export declare function generateToken(options?: TokenOptions): Promise<string>;
+/**
+ * Generates a secure API key.
+ */
+export declare function generateApiKey(prefix?: string, bytes?: number): Promise<string>;
+/**
+ * Generates a secure session token.
+ */
+export declare function generateSessionToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure refresh token.
+ */
+export declare function generateRefreshToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure verification token.
+ */
+export declare function generateVerificationToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure password-reset token.
+ */
+export declare function generatePasswordResetToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure CSRF token.
+ */
+export declare function generateCsrfToken(bytes?: number): Promise<string>;
+/**
+ * Generates a numeric one-time password.
+ *
+ * Leading zeroes are preserved.
+ */
+export declare function generateOtp(digits?: number): Promise<string>;
+/**
+ * Generates a short-lived email verification code.
+ */
+export declare function generateEmailVerificationCode(digits?: number): Promise<string>;
+/**
+ * Generates a short-lived login verification code.
+ */
+export declare function generateLoginCode(digits?: number): Promise<string>;
+//# sourceMappingURL=cryptoToken.core.d.ts.map

package/dist/cryptoToken/cryptoToken.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoToken.core.d.ts","sourceRoot":"","sources":["../../src/cryptoToken/cryptoToken.core.ts"],"names":[],"mappings":"AAsBA;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,KAAK,GACL,QAAQ,GACR,WAAW,CAAC;AAEhB;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,MAAM,SAAS,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,MAAM,SAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED;;GAEG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,SAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,SAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/cryptoToken/cryptoToken.core.js

@@ -0,0 +1,90 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+import { randomInteger } from "../cryptoRandom/cryptoRandom.core.js";
+let defaultProvider;
+/**
+ * Returns a lazily created default crypto provider.
+ *
+ * The provider abstraction keeps token generation free of direct
+ * `node:crypto` usage while still allowing callers to inject their own.
+ */
+function getDefaultProvider() {
+    if (defaultProvider === undefined) {
+        defaultProvider = createNodeCryptoProvider();
+    }
+    return defaultProvider;
+}
+/**
+ * Creates a cryptographically secure opaque token.
+ */
+export async function generateToken(options = {}) {
+    const bytes = options.bytes ?? 32;
+    const encoding = options.encoding ?? "base64url";
+    if (!Number.isInteger(bytes) || bytes < 16) {
+        throw new RangeError("Token byte length must be an integer of at least 16.");
+    }
+    const raw = await getDefaultProvider().randomBytes(bytes);
+    const token = Buffer.from(raw).toString(encoding);
+    return options.prefix ? `${options.prefix}${token}` : token;
+}
+/**
+ * Generates a secure API key.
+ */
+export async function generateApiKey(prefix = "lat_", bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix });
+}
+/**
+ * Generates a secure session token.
+ */
+export async function generateSessionToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "sess_" });
+}
+/**
+ * Generates a secure refresh token.
+ */
+export async function generateRefreshToken(bytes = 48) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "ref_" });
+}
+/**
+ * Generates a secure verification token.
+ */
+export async function generateVerificationToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "verify_" });
+}
+/**
+ * Generates a secure password-reset token.
+ */
+export async function generatePasswordResetToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "reset_" });
+}
+/**
+ * Generates a secure CSRF token.
+ */
+export async function generateCsrfToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "csrf_" });
+}
+/**
+ * Generates a numeric one-time password.
+ *
+ * Leading zeroes are preserved.
+ */
+export async function generateOtp(digits = 6) {
+    if (!Number.isInteger(digits) || digits < 4 || digits > 12) {
+        throw new RangeError("OTP digits must be an integer between 4 and 12.");
+    }
+    const max = 10 ** digits;
+    const value = await randomInteger(0, max);
+    return String(value).padStart(digits, "0");
+}
+/**
+ * Generates a short-lived email verification code.
+ */
+export async function generateEmailVerificationCode(digits = 6) {
+    return generateOtp(digits);
+}
+/**
+ * Generates a short-lived login verification code.
+ */
+export async function generateLoginCode(digits = 6) {
+    return generateOtp(digits);
+}
+//# sourceMappingURL=cryptoToken.core.js.map

package/dist/cryptoToken/cryptoToken.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoToken.core.js","sourceRoot":"","sources":["../../src/cryptoToken/cryptoToken.core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAIrE,IAAI,eAA2C,CAAC;AAEhD;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,eAAe,GAAG,wBAAwB,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAmBD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAO,GAAiB,EAAE;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IAEjD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAClB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAElD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAM,GAAG,MAAM,EAAE,KAAK,GAAG,EAAE;IAC9D,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAK,GAAG,EAAE;IAEV,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAK,GAAG,EAAE;IAEV,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAK,GAAG,EAAE;IAEV,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAK,GAAG,EAAE;IAEV,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAK,GAAG,EAAE;IAEV,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAM,GAAG,CAAC;IAEV,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAClB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAM,GAAG,CAAC;IAEV,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAM,GAAG,CAAC;IAEV,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC"}