@sebastienrousseau/crypto-sdk 0.0.8 → 0.0.24

package/dist/request.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRetryConfig = resolveRetryConfig;
+exports.buildClientHeaders = buildClientHeaders;
+exports.isTransientStatus = isTransientStatus;
+exports.computeBackoffDelay = computeBackoffDelay;
+exports.buildRequestInit = buildRequestInit;
+exports.executeRequest = executeRequest;
+exports.generateSdkTraceparent = generateSdkTraceparent;
+exports.resolveTraceparentHeader = resolveTraceparentHeader;
+const errors_1 = require("./errors");
+function resolveRetryConfig(retry) {
+    return {
+        maxRetries: Math.max(0, retry?.maxRetries ?? 0),
+        initialDelayMs: Math.max(0, retry?.initialDelayMs ?? 200),
+        maxDelayMs: Math.max(0, retry?.maxDelayMs ?? 2000),
+    };
+}
+function buildClientHeaders(options) {
+    const headers = {
+        "Content-Type": "application/json",
+    };
+    if (options.apiKey)
+        headers["x-api-key"] = options.apiKey;
+    if (options.token)
+        headers["Authorization"] = `Bearer ${options.token}`;
+    if (typeof options.traceparent === "string" &&
+        options.traceparent.trim().length > 0) {
+        headers["traceparent"] = options.traceparent.trim();
+    }
+    return headers;
+}
+function isTransientStatus(status) {
+    return status === 429 || status === 503 || status === 504;
+}
+function computeBackoffDelay(attempt, config, retryAfterHeader) {
+    if (retryAfterHeader) {
+        const parsed = Number(retryAfterHeader);
+        if (!Number.isNaN(parsed) && parsed > 0) {
+            return Math.min(parsed * 1000, config.maxDelayMs);
+        }
+    }
+    return Math.min(config.initialDelayMs * 2 ** (attempt - 1), config.maxDelayMs);
+}
+function buildRequestInit(method, headers, body, timeout) {
+    const init = { method, headers };
+    if (body) {
+        init.body = JSON.stringify(body);
+    }
+    if (timeout !== undefined &&
+        timeout > 0 &&
+        typeof AbortSignal !== "undefined" &&
+        typeof AbortSignal.timeout === "function") {
+        init.signal = AbortSignal.timeout(timeout);
+    }
+    return init;
+}
+async function executeRequest(fetchFn, url, init, retry) {
+    const maxAttempts = 1 + retry.maxRetries;
+    let attempt = 0;
+    while (true) {
+        let res;
+        try {
+            res = await fetchFn(url, init);
+        }
+        catch (err) {
+            attempt++;
+            if (attempt < maxAttempts) {
+                await new Promise((r) => setTimeout(r, computeBackoffDelay(attempt, retry)));
+                continue;
+            }
+            throw err;
+        }
+        if (res.ok) {
+            return (await res.json());
+        }
+        attempt++;
+        if (isTransientStatus(res.status) && attempt < maxAttempts) {
+            const header = res.headers?.get?.("retry-after");
+            await new Promise((r) => setTimeout(r, computeBackoffDelay(attempt, retry, header)));
+            continue;
+        }
+        throw new errors_1.CryptoApiError(res.status, await (0, errors_1.readProblem)(res));
+    }
+}
+function generateSdkTraceparent() {
+    const bytes = new Uint8Array(24);
+    if (typeof globalThis.crypto !== "undefined" &&
+        typeof globalThis.crypto.getRandomValues === "function") {
+        globalThis.crypto.getRandomValues(bytes);
+    }
+    else {
+        for (let i = 0; i < 24; i++) {
+            bytes[i] = Math.floor(Math.random() * 256);
+        }
+    }
+    bytes[0] = (bytes[0] % 255) + 1;
+    bytes[16] = (bytes[16] % 255) + 1;
+    let hex = "";
+    for (let i = 0; i < 24; i++) {
+        hex += bytes[i].toString(16).padStart(2, "0");
+    }
+    return `00-${hex.slice(0, 32)}-${hex.slice(32, 48)}-01`;
+}
+function resolveTraceparentHeader(traceparent) {
+    if (typeof traceparent === "string" && traceparent.trim().length > 0) {
+        return traceparent.trim();
+    }
+    return undefined;
+}
+//# sourceMappingURL=request.js.map

package/dist/types.d.ts

@@ -0,0 +1,183 @@
+export interface RetryOptions {
+    maxRetries?: number;
+    initialDelayMs?: number;
+    maxDelayMs?: number;
+}
+export interface ClientOptions {
+    baseUrl: string;
+    apiKey?: string;
+    token?: string;
+    fetch?: typeof globalThis.fetch;
+    timeout?: number;
+    retry?: RetryOptions;
+    traceparent?: string | boolean;
+}
+export interface ApiResponse<T> {
+    data: T;
+}
+export interface ApiErrorField {
+    field: string;
+    message: string;
+}
+export interface ApiError {
+    type: string;
+    title: string;
+    status: number;
+    detail: string;
+    instance?: string;
+    code?: string;
+    errors?: ApiErrorField[];
+    [extension: string]: unknown;
+}
+export type HashAlgorithm = "sha256" | "sha384" | "sha512" | "sha3-256" | "sha3-512" | "blake2b" | "blake3";
+export type HmacAlgorithm = "sha256" | "sha384" | "sha512" | "sha3-256" | "sha3-512";
+export type KdfAlgorithm = "scrypt" | "hkdf-sha256" | "pbkdf2-sha256";
+export interface HashResult {
+    digest: string;
+    algorithm: string;
+    length: number;
+}
+export interface AeadResult {
+    ciphertext: string;
+    algorithm: string;
+}
+export interface KdfResult {
+    derivedKey: string;
+    salt: string;
+    algorithm: string;
+    keyLength: number;
+}
+export interface SecretboxSealResult {
+    sealed: string;
+    algorithm: string;
+}
+export interface PasswordEncryptResult {
+    encrypted: string;
+    algorithm: string;
+}
+export type KeyWrapAlgorithm = "aes-kw" | "aes-kwp";
+export interface KeyWrapResult {
+    wrapped: string;
+    algorithm: KeyWrapAlgorithm;
+}
+export interface HealthResult {
+    statusCode: number;
+    status?: string;
+    uptime?: number;
+}
+export interface DoraComplianceScorecard {
+    standard: string;
+    article: string;
+    status: string;
+    disclaimer: string;
+    quantumResistanceRatio: number;
+    activePrimitivesCount: number;
+    postQuantumPrimitivesCount: number;
+    algorithmDeprecationSchedule: Array<{
+        algorithm: string;
+        category: string;
+        sunsetDate: string;
+        recommendedMigration: string;
+    }>;
+    cryptographicInventory: Array<{
+        package: string;
+        version: string;
+        status: string;
+        fipsCompliance: string;
+    }>;
+    timestamp: string;
+}
+export interface CbomExportPayload {
+    bomFormat: string;
+    specVersion: string;
+    serialNumber: string;
+    version: number;
+    metadata: Record<string, unknown>;
+    components: Array<Record<string, unknown>>;
+}
+export interface AlgorithmNegotiationOptions {
+    maxPayloadBytes?: number;
+    securityCategoryMin?: 1 | 3 | 5;
+    requireHybrid?: boolean;
+    clientSupportedAlgorithms?: string[];
+}
+export interface AlgorithmNegotiationResult {
+    selectedAlgorithm: string;
+    cipherCategory: "lattice-kem" | "hybrid-kem" | "classical-ecdh";
+    securityCategory: 1 | 3 | 5;
+    isHybrid: boolean;
+    publicKeyBytes: number;
+    ciphertextBytes: number;
+    totalPayloadOverhead: number;
+    fitsWithinMtu: boolean;
+    fallbackChain: string[];
+    compliancePosture: {
+        standard: string;
+        doraArticle13Compliant: boolean;
+        fipsStandard: string;
+    };
+}
+export interface MacResult {
+    mac: string;
+    algorithm: string;
+}
+export interface MacVerifyResult {
+    valid: boolean;
+    algorithm: string;
+}
+export interface Argon2Params {
+    t: number;
+    m: number;
+    p: number;
+}
+export interface PasswordHashResult {
+    hash: string;
+    salt: string;
+    params: Argon2Params;
+    algorithm: string;
+    phc: string;
+}
+export interface StreamPqEncryptParams {
+    x25519PublicKey: string;
+    mlKemPublicKey: string;
+    plaintext: string;
+    chunkSize?: number;
+}
+export interface StreamPqEncryptResult {
+    ciphertext: string;
+    algorithm: "x25519-ml-kem-768-xchacha20-poly1305-stream";
+}
+export interface StreamPqDecryptParams {
+    keyId: string;
+    ciphertext: string;
+    chunkSize?: number;
+}
+export interface StreamPqDecryptResult {
+    plaintext: string;
+}
+export interface StreamMultiPqRecipient {
+    recipientId: string;
+    x25519PublicKey: string;
+    mlKemPublicKey: string;
+}
+export interface StreamMultiPqEncryptParams {
+    recipients: StreamMultiPqRecipient[];
+    plaintext: string;
+    chunkSize?: number;
+}
+export interface StreamMultiPqEncryptResult {
+    ciphertext: string;
+    algorithm: "multi-x25519-ml-kem-768-xchacha20-poly1305-stream";
+    recipientCount: number;
+}
+export interface StreamMultiPqDecryptParams {
+    keyId: string;
+    recipientId?: string;
+    ciphertext: string;
+    chunkSize?: number;
+}
+export interface StreamMultiPqDecryptResult {
+    plaintext: string;
+    recipientId: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,YAAY;IAE3B,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAEhC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,YAAY,CAAC;IAMrB,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAChC;AAWD,MAAM,WAAW,WAAW,CAAC,CAAC;IAE5B,IAAI,EAAE,CAAC,CAAC;CACT;AAGD,MAAM,WAAW,aAAa;IAE5B,KAAK,EAAE,MAAM,CAAC;IAEd,OAAO,EAAE,MAAM,CAAC;CACjB;AAgBD,MAAM,WAAW,QAAQ;IAEvB,IAAI,EAAE,MAAM,CAAC;IAEb,KAAK,EAAE,MAAM,CAAC;IAEd,MAAM,EAAE,MAAM,CAAC;IAEf,MAAM,EAAE,MAAM,CAAC;IAEf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;IAEzB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAKD,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,QAAQ,CAAC;AAGb,MAAM,MAAM,aAAa,GACvB,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;AAG3D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,aAAa,GAAG,eAAe,CAAC;AActE,MAAM,WAAW,UAAU;IAEzB,MAAM,EAAE,MAAM,CAAC;IAEf,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;CAChB;AAYD,MAAM,WAAW,UAAU;IAEzB,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,MAAM,WAAW,SAAS;IAExB,UAAU,EAAE,MAAM,CAAC;IAEnB,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,MAAM,WAAW,mBAAmB;IAElC,MAAM,EAAE,MAAM,CAAC;IAEf,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,MAAM,WAAW,qBAAqB;IAEpC,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAYpD,MAAM,WAAW,aAAa;IAE5B,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAGD,MAAM,WAAW,YAAY;IAE3B,UAAU,EAAE,MAAM,CAAC;IAEnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,EAAE,MAAM,CAAC;IAEjB,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IAEf,UAAU,EAAE,MAAM,CAAC;IAEnB,sBAAsB,EAAE,MAAM,CAAC;IAE/B,qBAAqB,EAAE,MAAM,CAAC;IAE9B,0BAA0B,EAAE,MAAM,CAAC;IAEnC,4BAA4B,EAAE,KAAK,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;IAEH,sBAAsB,EAAE,KAAK,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IAEH,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,iBAAiB;IAEhC,SAAS,EAAE,MAAM,CAAC;IAElB,WAAW,EAAE,MAAM,CAAC;IAEpB,YAAY,EAAE,MAAM,CAAC;IAErB,OAAO,EAAE,MAAM,CAAC;IAEhB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5C;AAGD,MAAM,WAAW,2BAA2B;IAE1C,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,mBAAmB,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAEhC,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC;AAGD,MAAM,WAAW,0BAA0B;IAEzC,iBAAiB,EAAE,MAAM,CAAC;IAE1B,cAAc,EAAE,aAAa,GAAG,YAAY,GAAG,gBAAgB,CAAC;IAEhE,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE5B,QAAQ,EAAE,OAAO,CAAC;IAElB,cAAc,EAAE,MAAM,CAAC;IAEvB,eAAe,EAAE,MAAM,CAAC;IAExB,oBAAoB,EAAE,MAAM,CAAC;IAE7B,aAAa,EAAE,OAAO,CAAC;IAEvB,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,iBAAiB,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,sBAAsB,EAAE,OAAO,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAYD,MAAM,WAAW,SAAS;IAExB,GAAG,EAAE,MAAM,CAAC;IAEZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,eAAe;IAE9B,KAAK,EAAE,OAAO,CAAC;IAEf,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,YAAY;IAE3B,CAAC,EAAE,MAAM,CAAC;IAEV,CAAC,EAAE,MAAM,CAAC;IAEV,CAAC,EAAE,MAAM,CAAC;CACX;AAaD,MAAM,WAAW,kBAAkB;IAEjC,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,YAAY,CAAC;IAErB,SAAS,EAAE,MAAM,CAAC;IAElB,GAAG,EAAE,MAAM,CAAC;CACb;AAGD,MAAM,WAAW,qBAAqB;IAEpC,eAAe,EAAE,MAAM,CAAC;IAExB,cAAc,EAAE,MAAM,CAAC;IAEvB,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,qBAAqB;IAEpC,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,6CAA6C,CAAC;CAC1D;AAGD,MAAM,WAAW,qBAAqB;IAEpC,KAAK,EAAE,MAAM,CAAC;IAEd,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,qBAAqB;IAEpC,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,sBAAsB;IAErC,WAAW,EAAE,MAAM,CAAC;IAEpB,eAAe,EAAE,MAAM,CAAC;IAExB,cAAc,EAAE,MAAM,CAAC;CACxB;AAGD,MAAM,WAAW,0BAA0B;IAEzC,UAAU,EAAE,sBAAsB,EAAE,CAAC;IAErC,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,0BAA0B;IAEzC,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,mDAAmD,CAAC;IAE/D,cAAc,EAAE,MAAM,CAAC;CACxB;AAGD,MAAM,WAAW,0BAA0B;IAEzC,KAAK,EAAE,MAAM,CAAC;IAEd,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,0BAA0B;IAEzC,SAAS,EAAE,MAAM,CAAC;IAElB,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/package.json

@@ -1,41 +1,44 @@
 {
   "name": "@sebastienrousseau/crypto-sdk",
-  "version": "0.0.8",
+  "version": "0.0.24",
   "description": "Type-safe TypeScript client for the Crypto Service Suite v2 API. Zero dependencies, fetch-based.",
   "author": "Sebastien Rousseau <sebastienrousseau@users.noreply.github.com>",
   "license": "MIT OR Apache-2.0",
   "engines": {
     "node": ">=22.0.0"
   },
+  "type": "commonjs",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
-  "sideEffects": false,
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "require": "./dist/index.js",
-      "import": "./dist/index.js"
-    }
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
   },
+  "sideEffects": false,
   "files": [
     "dist/**/*.js",
     "dist/**/*.d.ts",
     "dist/**/*.d.ts.map"
   ],
   "devDependencies": {
-    "@sebastienrousseau/mocha-config": "^0.0.5",
-    "@types/chai": "^4.3.7",
+    "@sebastienrousseau/mocha-config": "^0.0.7",
+    "@types/chai": "^5.2.3",
     "@types/chai-as-promised": "^8.0.2",
-    "@types/mocha": "^10.0.2",
+    "@types/mocha": "^10.0.10",
     "@types/node": "^26.6.3",
     "c8": "^12.0.0",
-    "chai": "^4.5.0",
-    "chai-as-promised": "^7.1.2",
-    "mocha": "^10.8.2",
+    "chai": "^6.3.0",
+    "chai-as-promised": "^8.0.2",
+    "mocha": "^12.0.3",
     "rimraf": "^6.1.3",
     "ts-node": "^10.9.2",
     "typedoc": "^0.28.20",
-    "typescript": "~5.9.3"
+    "typescript": "~5.9.3",
+    "@sebastienrousseau/crypto-server": "0.0.24"
   },
   "homepage": "https://github.com/sebastienrousseau/crypto-service/tree/main/packages/crypto-sdk",
   "repository": {
@@ -52,8 +55,9 @@
     "clean": "rimraf ./coverage ./dist ./docs",
     "test": "c8 --check-coverage --lines 100 --branches 100 --functions 100 --reporter=lcov --reporter=text mocha --config=.mocharc.cjs",
     "docs": "typedoc",
-    "lint": "eslint --ext .ts src __tests__",
-    "lint:fix": "eslint --cache --fix --ext .ts src __tests__",
+    "examples:check": "tsc -p examples/tsconfig.json",
+    "lint": "eslint src __tests__",
+    "lint:fix": "eslint --cache --fix src __tests__",
     "format": "prettier --write src/**/*.ts",
     "format:check": "prettier --check \"src/**/*.ts\""
   }