@resq-systems/security 1.0.4 → 1.0.5

package/lib/hash.d.mts

@@ -0,0 +1,38 @@
+//#region src/hash.d.ts
+/**
+ * Copyright 2026 ResQ Systems, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Hash a string using the FNV-1a algorithm.
+ *
+ * Generates a deterministic hash value for a given string using a variant of the FNV-1a
+ * (Fowler-Noll-Vo) algorithm. The hash is returned as a string representation of a 32-bit integer.
+ */
+declare function getHashForString(string: string): string;
+/**
+ * Hash an object by converting it to JSON and then hashing the resulting string.
+ */
+declare function getHashForObject(obj: unknown): string;
+/**
+ * Hash an ArrayBuffer using the FNV-1a algorithm.
+ */
+declare function getHashForBuffer(buffer: ArrayBuffer): string;
+/**
+ * Applies a string transformation algorithm that rearranges and modifies characters.
+ */
+declare function lns(str: string): string;
+//#endregion
+export { getHashForBuffer, getHashForObject, getHashForString, lns };
+//# sourceMappingURL=hash.d.mts.map

package/lib/hash.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.mts","names":[],"sources":["../src/hash.ts"],"mappings":";;AAsBA;;;;;AAYA;;;;;AAOA;;;;;AAaA;;;;;iBAhCgB,gBAAA,CAAiB,MAAA;;;;iBAYjB,gBAAA,CAAiB,GAAA;;;;iBAOjB,gBAAA,CAAiB,MAAA,EAAQ,WAAA;;;;iBAazB,GAAA,CAAI,GAAA"}

package/lib/hash.mjs

@@ -0,0 +1,66 @@
+//#region src/hash.ts
+/**
+* Copyright 2026 ResQ Systems, Inc.
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+/**
+* Hash a string using the FNV-1a algorithm.
+*
+* Generates a deterministic hash value for a given string using a variant of the FNV-1a
+* (Fowler-Noll-Vo) algorithm. The hash is returned as a string representation of a 32-bit integer.
+*/
+function getHashForString(string) {
+	let hash = 0;
+	for (let i = 0; i < string.length; i++) {
+		hash = (hash << 5) - hash + string.charCodeAt(i);
+		hash |= 0;
+	}
+	return `${hash}`;
+}
+/**
+* Hash an object by converting it to JSON and then hashing the resulting string.
+*/
+function getHashForObject(obj) {
+	return getHashForString(JSON.stringify(obj));
+}
+/**
+* Hash an ArrayBuffer using the FNV-1a algorithm.
+*/
+function getHashForBuffer(buffer) {
+	const view = new DataView(buffer);
+	let hash = 0;
+	for (let i = 0; i < view.byteLength; i++) {
+		hash = (hash << 5) - hash + view.getUint8(i);
+		hash |= 0;
+	}
+	return `${hash}`;
+}
+/**
+* Applies a string transformation algorithm that rearranges and modifies characters.
+*/
+function lns(str) {
+	const result = str.split("");
+	result.push(...result.splice(0, Math.round(result.length / 5)));
+	result.push(...result.splice(0, Math.round(result.length / 4)));
+	result.push(...result.splice(0, Math.round(result.length / 3)));
+	result.push(...result.splice(0, Math.round(result.length / 2)));
+	return result.reverse().map((n) => {
+		const num = Number(n);
+		return Number.isNaN(num) || n.trim() === "" ? n : num < 5 ? String(5 + num) : num > 5 ? String(num - 5) : n;
+	}).join("");
+}
+//#endregion
+export { getHashForBuffer, getHashForObject, getHashForString, lns };
+
+//# sourceMappingURL=hash.mjs.map

package/lib/hash.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.mjs","names":[],"sources":["../src/hash.ts"],"sourcesContent":["/**\n * Copyright 2026 ResQ Systems, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * Hash a string using the FNV-1a algorithm.\n *\n * Generates a deterministic hash value for a given string using a variant of the FNV-1a\n * (Fowler-Noll-Vo) algorithm. The hash is returned as a string representation of a 32-bit integer.\n */\nexport function getHashForString(string: string): string {\n\tlet hash = 0;\n\tfor (let i = 0; i < string.length; i++) {\n\t\thash = (hash << 5) - hash + string.charCodeAt(i);\n\t\thash |= 0; // Convert to 32bit integer\n\t}\n\treturn `${hash}`;\n}\n\n/**\n * Hash an object by converting it to JSON and then hashing the resulting string.\n */\nexport function getHashForObject(obj: unknown): string {\n\treturn getHashForString(JSON.stringify(obj));\n}\n\n/**\n * Hash an ArrayBuffer using the FNV-1a algorithm.\n */\nexport function getHashForBuffer(buffer: ArrayBuffer): string {\n\tconst view = new DataView(buffer);\n\tlet hash = 0;\n\tfor (let i = 0; i < view.byteLength; i++) {\n\t\thash = (hash << 5) - hash + view.getUint8(i);\n\t\thash |= 0; // Convert to 32bit integer\n\t}\n\treturn `${hash}`;\n}\n\n/**\n * Applies a string transformation algorithm that rearranges and modifies characters.\n */\nexport function lns(str: string): string {\n\tconst result = str.split(\"\");\n\tresult.push(...result.splice(0, Math.round(result.length / 5)));\n\tresult.push(...result.splice(0, Math.round(result.length / 4)));\n\tresult.push(...result.splice(0, Math.round(result.length / 3)));\n\tresult.push(...result.splice(0, Math.round(result.length / 2)));\n\treturn result\n\t\t.reverse()\n\t\t.map((n) => {\n\t\t\tconst num = Number(n);\n\t\t\treturn Number.isNaN(num) || n.trim() === \"\"\n\t\t\t\t? n\n\t\t\t\t: num < 5\n\t\t\t\t\t? String(5 + num)\n\t\t\t\t\t: num > 5\n\t\t\t\t\t\t? String(num - 5)\n\t\t\t\t\t\t: n;\n\t\t})\n\t\t.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAgB,iBAAiB,QAAwB;CACxD,IAAI,OAAO;AACX,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACvC,UAAQ,QAAQ,KAAK,OAAO,OAAO,WAAW,EAAE;AAChD,UAAQ;;AAET,QAAO,GAAG;;;;;AAMX,SAAgB,iBAAiB,KAAsB;AACtD,QAAO,iBAAiB,KAAK,UAAU,IAAI,CAAC;;;;;AAM7C,SAAgB,iBAAiB,QAA6B;CAC7D,MAAM,OAAO,IAAI,SAAS,OAAO;CACjC,IAAI,OAAO;AACX,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,YAAY,KAAK;AACzC,UAAQ,QAAQ,KAAK,OAAO,KAAK,SAAS,EAAE;AAC5C,UAAQ;;AAET,QAAO,GAAG;;;;;AAMX,SAAgB,IAAI,KAAqB;CACxC,MAAM,SAAS,IAAI,MAAM,GAAG;AAC5B,QAAO,KAAK,GAAG,OAAO,OAAO,GAAG,KAAK,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;AAC/D,QAAO,KAAK,GAAG,OAAO,OAAO,GAAG,KAAK,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;AAC/D,QAAO,KAAK,GAAG,OAAO,OAAO,GAAG,KAAK,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;AAC/D,QAAO,KAAK,GAAG,OAAO,OAAO,GAAG,KAAK,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;AAC/D,QAAO,OACL,SAAS,CACT,KAAK,MAAM;EACX,MAAM,MAAM,OAAO,EAAE;AACrB,SAAO,OAAO,MAAM,IAAI,IAAI,EAAE,MAAM,KAAK,KACtC,IACA,MAAM,IACL,OAAO,IAAI,IAAI,GACf,MAAM,IACL,OAAO,MAAM,EAAE,GACf;GACJ,CACD,KAAK,GAAG"}

package/lib/index.d.mts

@@ -1,4 +1,5 @@
 import { Ciphertext, EncryptionKey, Masked, SecureToken, Sha256Hex, coerceCiphertext, coerceEncryptionKey, decryptData, encryptData, generateSecureToken, hashData, isCiphertext, isEncryptionKey, maskEmail, maskPII, sanitizeForLogging, toCiphertext, toEncryptionKey, unsafeCiphertext, unsafeEncryptionKey } from "./crypto.mjs";
+import { getHashForBuffer, getHashForObject, getHashForString, lns } from "./hash.mjs";
 import { THREAT_DETECTED_MESSAGE, ThreatDetectionConfig, ThreatDetectionResult, ThreatFinding, ThreatType, containsCommandInjection, containsHomoglyphs, containsNoSQLInjection, containsPathTraversal, containsSQLInjection, containsXSSPatterns, detectThreatPatterns, getThreatErrorMessage, isSafeInput, normalizeUnicode, sanitizeForDisplay, validateSafeEmail, validateSafeName, validateSafeText } from "./validators.mjs";
 import { CreditCard, CreditCardSchema, Email, EmailSchema, IPv4, IPv4Schema, PIIRedactionOptions, PIIRedactionOptionsSchema, PhoneNumber, PhoneNumberSchema, SSN, SSNSchema, SafeUrl, SafeUrlSchema, SanitizedString, SanitizedStringSchema, UrlProtocol, UrlProtocolSchema, UserInputOptions, UserInputOptionsSchema, escapeHtml, isValidEmail, isValidPhone, isValidSSN, isValidUrl, parseJsonWithSchema, redactPII, redactPIIEffect, safeStringify, sanitizeHtml, sanitizeJson, sanitizeUrl, sanitizeUrlEffect, stripAnsi, validateUserInput, validateUserInputEffect } from "./sanitize.mjs";
-export { Ciphertext, CreditCard, CreditCardSchema, Email, EmailSchema, EncryptionKey, IPv4, IPv4Schema, Masked, PIIRedactionOptions, PIIRedactionOptionsSchema, PhoneNumber, PhoneNumberSchema, SSN, SSNSchema, SafeUrl, SafeUrlSchema, SanitizedString, SanitizedStringSchema, SecureToken, Sha256Hex, THREAT_DETECTED_MESSAGE, ThreatDetectionConfig, ThreatDetectionResult, ThreatFinding, ThreatType, UrlProtocol, UrlProtocolSchema, UserInputOptions, UserInputOptionsSchema, coerceCiphertext, coerceEncryptionKey, containsCommandInjection, containsHomoglyphs, containsNoSQLInjection, containsPathTraversal, containsSQLInjection, containsXSSPatterns, decryptData, detectThreatPatterns, encryptData, escapeHtml, generateSecureToken, getThreatErrorMessage, hashData, isCiphertext, isEncryptionKey, isSafeInput, isValidEmail, isValidPhone, isValidSSN, isValidUrl, maskEmail, maskPII, normalizeUnicode, parseJsonWithSchema, redactPII, redactPIIEffect, safeStringify, sanitizeForDisplay, sanitizeForLogging, sanitizeHtml, sanitizeJson, sanitizeUrl, sanitizeUrlEffect, stripAnsi, toCiphertext, toEncryptionKey, unsafeCiphertext, unsafeEncryptionKey, validateSafeEmail, validateSafeName, validateSafeText, validateUserInput, validateUserInputEffect };
+export { Ciphertext, CreditCard, CreditCardSchema, Email, EmailSchema, EncryptionKey, IPv4, IPv4Schema, Masked, PIIRedactionOptions, PIIRedactionOptionsSchema, PhoneNumber, PhoneNumberSchema, SSN, SSNSchema, SafeUrl, SafeUrlSchema, SanitizedString, SanitizedStringSchema, SecureToken, Sha256Hex, THREAT_DETECTED_MESSAGE, ThreatDetectionConfig, ThreatDetectionResult, ThreatFinding, ThreatType, UrlProtocol, UrlProtocolSchema, UserInputOptions, UserInputOptionsSchema, coerceCiphertext, coerceEncryptionKey, containsCommandInjection, containsHomoglyphs, containsNoSQLInjection, containsPathTraversal, containsSQLInjection, containsXSSPatterns, decryptData, detectThreatPatterns, encryptData, escapeHtml, generateSecureToken, getHashForBuffer, getHashForObject, getHashForString, getThreatErrorMessage, hashData, isCiphertext, isEncryptionKey, isSafeInput, isValidEmail, isValidPhone, isValidSSN, isValidUrl, lns, maskEmail, maskPII, normalizeUnicode, parseJsonWithSchema, redactPII, redactPIIEffect, safeStringify, sanitizeForDisplay, sanitizeForLogging, sanitizeHtml, sanitizeJson, sanitizeUrl, sanitizeUrlEffect, stripAnsi, toCiphertext, toEncryptionKey, unsafeCiphertext, unsafeEncryptionKey, validateSafeEmail, validateSafeName, validateSafeText, validateUserInput, validateUserInputEffect };

package/lib/index.mjs

@@ -1,4 +1,5 @@
 import { coerceCiphertext, coerceEncryptionKey, decryptData, encryptData, generateSecureToken, hashData, isCiphertext, isEncryptionKey, maskEmail, maskPII, sanitizeForLogging, toCiphertext, toEncryptionKey, unsafeCiphertext, unsafeEncryptionKey } from "./crypto.mjs";
+import { getHashForBuffer, getHashForObject, getHashForString, lns } from "./hash.mjs";
 import { THREAT_DETECTED_MESSAGE, containsCommandInjection, containsHomoglyphs, containsNoSQLInjection, containsPathTraversal, containsSQLInjection, containsXSSPatterns, detectThreatPatterns, getThreatErrorMessage, isSafeInput, normalizeUnicode, sanitizeForDisplay, validateSafeEmail, validateSafeName, validateSafeText } from "./validators.mjs";
 import { CreditCardSchema, EmailSchema, IPv4Schema, PIIRedactionOptionsSchema, PhoneNumberSchema, SSNSchema, SafeUrlSchema, SanitizedStringSchema, UrlProtocolSchema, UserInputOptionsSchema, escapeHtml, isValidEmail, isValidPhone, isValidSSN, isValidUrl, parseJsonWithSchema, redactPII, redactPIIEffect, safeStringify, sanitizeHtml, sanitizeJson, sanitizeUrl, sanitizeUrlEffect, stripAnsi, validateUserInput, validateUserInputEffect } from "./sanitize.mjs";
-export { CreditCardSchema, EmailSchema, IPv4Schema, PIIRedactionOptionsSchema, PhoneNumberSchema, SSNSchema, SafeUrlSchema, SanitizedStringSchema, THREAT_DETECTED_MESSAGE, UrlProtocolSchema, UserInputOptionsSchema, coerceCiphertext, coerceEncryptionKey, containsCommandInjection, containsHomoglyphs, containsNoSQLInjection, containsPathTraversal, containsSQLInjection, containsXSSPatterns, decryptData, detectThreatPatterns, encryptData, escapeHtml, generateSecureToken, getThreatErrorMessage, hashData, isCiphertext, isEncryptionKey, isSafeInput, isValidEmail, isValidPhone, isValidSSN, isValidUrl, maskEmail, maskPII, normalizeUnicode, parseJsonWithSchema, redactPII, redactPIIEffect, safeStringify, sanitizeForDisplay, sanitizeForLogging, sanitizeHtml, sanitizeJson, sanitizeUrl, sanitizeUrlEffect, stripAnsi, toCiphertext, toEncryptionKey, unsafeCiphertext, unsafeEncryptionKey, validateSafeEmail, validateSafeName, validateSafeText, validateUserInput, validateUserInputEffect };
+export { CreditCardSchema, EmailSchema, IPv4Schema, PIIRedactionOptionsSchema, PhoneNumberSchema, SSNSchema, SafeUrlSchema, SanitizedStringSchema, THREAT_DETECTED_MESSAGE, UrlProtocolSchema, UserInputOptionsSchema, coerceCiphertext, coerceEncryptionKey, containsCommandInjection, containsHomoglyphs, containsNoSQLInjection, containsPathTraversal, containsSQLInjection, containsXSSPatterns, decryptData, detectThreatPatterns, encryptData, escapeHtml, generateSecureToken, getHashForBuffer, getHashForObject, getHashForString, getThreatErrorMessage, hashData, isCiphertext, isEncryptionKey, isSafeInput, isValidEmail, isValidPhone, isValidSSN, isValidUrl, lns, maskEmail, maskPII, normalizeUnicode, parseJsonWithSchema, redactPII, redactPIIEffect, safeStringify, sanitizeForDisplay, sanitizeForLogging, sanitizeHtml, sanitizeJson, sanitizeUrl, sanitizeUrlEffect, stripAnsi, toCiphertext, toEncryptionKey, unsafeCiphertext, unsafeEncryptionKey, validateSafeEmail, validateSafeName, validateSafeText, validateUserInput, validateUserInputEffect };

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@resq-systems/security",
-	"version": "1.0.4",
+	"version": "1.0.5",
 	"description": "Security utilities: encryption, input validation, schemas, and PII sanitization",
 	"license": "Apache-2.0",
 	"type": "module",
@@ -52,7 +52,7 @@
 	"devDependencies": {
 		"@total-typescript/ts-reset": "^0.6.1",
 		"@types/node": "^26.1.1",
-		"effect": "4.0.0-beta.97",
+		"effect": "4.0.0-beta.98",
 		"jsdom": "^29.1.1",
 		"tsdown": "^0.22.4",
 		"typescript": "7.0.2",