@shellicar/core-config 1.0.1 → 2.0.0

package/README.md

@@ -16,11 +16,13 @@ pnpm add @shellicar/core-config
 ```
 
 ```ts
-import { SecureString, SecureConnectionString, SecureURL } from '@shellicar/core-config';
+import { createFactory } from '@shellicar/core-config';
 
-console.log(SecureString.from('myPassword123'));
-console.log(SecureConnectionString.from('Server=myserver.uri;Password=myPassword123'));
-console.log(SecureURL.from(new URL('http://myuser:myPassword123@myserver.uri')));
+const factory = createFactory();
+
+console.log(factory.string('myPassword123'));
+console.log(factory.connectionString('Server=myserver.uri;Password=myPassword123'));
+console.log(factory.url(new URL('http://myuser:myPassword123@myserver.uri')));
 ```
 
 ## Documentation

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";var t=require("util"),e=require("crypto");function r(t){return t&&t.__esModule?t:{default:t}}var s=r(t),a=Object.defineProperty,n=(t,e)=>a(t,"name",{value:e,configurable:!0}),o={sha256:n((()=>({hash:n((t=>e.createHash("sha256").update(t).digest("hex")),"hash"),prefix:"sha256"})),"sha256"),hs256:n((t=>({hash:n((r=>e.createHmac("sha256",t).update(r).digest("hex")),"hash"),prefix:"hs256"})),"hs256")},i=n((t=>void 0===t?o.sha256():o.hs256(t)),"getAlgorithm"),c=n(((t,e)=>{const r=i(e),s=r.hash(t);return`${r.prefix}:${s}`}),"hash"),u=class{static{n(this,"BaseObject")}},h=class t extends u{static{n(this,"SecureString")}#t;#e;get secretValue(){return this.#t}constructor(t,e){super(),this.#t=t,this.#e=c(t,e)}static factory(e){return r=>t.from(r,e)}static from(e,r){return null===e?null:void 0!==e?new t(e,r):void 0}toString(){return this.#e}toJSON(){return this.toString()}[s.default.inspect.custom](t,e,r){if(t<0)return"[SecureString]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},l=["AccessKey","SharedAccessKey","Password","AccountKey","Secret","SecretKey","ApiKey","Token","Key","MasterKey","PrimaryKey","SecondaryKey"],d=class t extends u{static{n(this,"SecureConnectionString")}#t;#r;get secretValue(){return this.#t}constructor(t,e,r){super(),this.#t=t,this.#r=this.parseConnectionString(t,e.map((t=>t.toLocaleLowerCase())),r)}parseConnectionString(t,e,r){return t.split(";").filter(Boolean).map((t=>{const[s,a]=t.split("="),n=a??"",o=e.includes(s.toLocaleLowerCase())?h.from(n,r):n;return[s,o]}))}static factory(e,r){return s=>t.from(s,r,e)}static from(e,r,s){return null===e?null:void 0!==e?new t(e,r??l,s):void 0}toString(){return this.#r.map((([t,e])=>`${t}=${e}`)).join(";")}toJSON(){return Object.fromEntries(this.#r)}[s.default.inspect.custom](t,e,r){if(t<0)return"[SecureConnectionString]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},p=class t extends u{static{n(this,"SecureURL")}#t;#s;get secretValue(){return this.#t}constructor(t,e){super(),this.#t=t,this.#s=h.from(t.password||null,e)}static factory(e){return r=>t.from(r,e)}static from(e,r){return null===e?null:void 0!==e?new t(e,r):void 0}toString(){const t=new URL(this.#t.href);return null!==this.#s&&(t.password=this.#s.toString()),t.href}toJSON(){const t=new URL(this.#t.href);t.password="";const e=new URLSearchParams(t.searchParams);let r;t.search="",null!==this.#s&&(r=this.#s.toString());const s={href:t.href};return void 0!==r&&(s.password=r),e.size>0&&(s.searchParams=Object.fromEntries(e)),s}[s.default.inspect.custom](t,e,r){if(t<0)return"[SecureURL]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},f=n((t=>({string:h.factory(t),connectionString:d.factory(t),url:p.factory(t)})),"createFactory");exports.SecureConnectionString=d,exports.SecureString=h,exports.SecureURL=p,exports.createFactory=f,exports.defaultSecureKeys=l;//# sourceMappingURL=index.cjs.map
+"use strict";var e=require("crypto");function t(e){return e&&e.__esModule?e:{default:e}}var r=t(require("util")),s=Object.defineProperty,n=(e,t)=>s(e,"name",{value:t,configurable:!0}),a=class{static{n(this,"EncryptedValue")}encryptedData;iv;authTag;key;constructor(t){this.key=e.randomBytes(32),this.iv=e.randomBytes(16);const r=e.createCipheriv("aes-256-gcm",this.key,this.iv),s=[];s.push(r.update(t,"utf8")),s.push(r.final()),this.encryptedData=Buffer.concat(s),this.authTag=r.getAuthTag()}getValue(){const t=e.createDecipheriv("aes-256-gcm",this.key,this.iv);t.setAuthTag(this.authTag);try{const e=[];return e.push(t.update(this.encryptedData)),e.push(t.final()),Buffer.concat(e).toString("utf8")}catch(e){throw new Error("Failed to decrypt value: Invalid key or corrupted data")}}toString(){return"[EncryptedValue]"}toJSON(){return{type:"EncryptedValue",encrypted:!0}}},c={sha256:n((()=>({hash:n((t=>e.createHash("sha256").update(t).digest("hex")),"hash"),prefix:"sha256"})),"sha256"),hs256:n((t=>({hash:n((r=>e.createHmac("sha256",t).update(r).digest("hex")),"hash"),prefix:"hs256"})),"hs256")},i=n((e=>null==e?c.sha256():c.hs256(e)),"getAlgorithm"),o=n(((e,t)=>{const r=i(t),s=r.hash(e);return`${r.prefix}:${s}`}),"hash"),u=class{static{n(this,"ISecureString")}},h=class{static{n(this,"ISecureConnectionString")}},l=class{static{n(this,"ISecureURL")}},p=class e extends u{static{n(this,"SecureString")}#e;#t;get secretValue(){return this.#e.getValue()}constructor(e,t){super(),this.#e=t.encryptionProvider.encrypt(e),this.#t=o(e,t.secret)}static factory(t){return r=>e.from(r,t)}static from(t,r){return null===t?null:void 0!==t?new e(t,r):void 0}toString(){return this.#t}toJSON(){return this.toString()}[r.default.inspect.custom](e,t,r){if(e<0)return"[SecureString]";const s=Object.assign({},t,{depth:null==t.depth?null:t.depth-1});return r(this.toJSON(),s)}},d=class e extends h{static{n(this,"SecureConnectionString")}#e;#r;get secretValue(){return this.#e.getValue()}constructor(e,t){super(),this.#e=t.encryptionProvider.encrypt(e),this.#r=this.parseConnectionString(e,t.secretKeys.map((e=>e.toLocaleLowerCase())),t)}parseConnectionString(e,t,r){return e.split(";").filter(Boolean).map((e=>{const[s,n]=e.split("="),a=n??"",c=t.includes(s.toLocaleLowerCase())?p.from(a,r):a;return[s,c]}))}static factory(t){return r=>e.from(r,t)}static from(t,r){return null===t?null:void 0!==t?new e(t,r):void 0}toString(){return this.#r.map((([e,t])=>`${e}=${t}`)).join(";")}toJSON(){return Object.fromEntries(this.#r)}[r.default.inspect.custom](e,t,r){if(e<0)return"[SecureConnectionString]";const s=Object.assign({},t,{depth:null==t.depth?null:t.depth-1});return r(this.toJSON(),s)}},y=class e extends l{static{n(this,"SecureURL")}#e;#s;get secretValue(){return new URL(this.#e.getValue())}constructor(e,t){super(),this.#e=t.encryptionProvider.encrypt(e.href),this.#s=p.from(e.password||null,t)}static factory(t){return r=>e.from(r,t)}static from(t,r){return null===t?null:void 0!==t?new e(t,r):void 0}toString(){const e=this.secretValue,t=new URL(e.href);return null!==this.#s&&(t.password=this.#s.toString()),t.href}toJSON(){const e=this.secretValue,t=new URL(e.href);t.password="";const r=new URLSearchParams(t.searchParams);let s;t.search="",null!==this.#s&&(s=this.#s.toString());const n={href:t.href};return void 0!==s&&(n.password=s),r.size>0&&(n.searchParams=Object.fromEntries(r)),n}[r.default.inspect.custom](e,t,r){if(e<0)return"[SecureURL]";const s=Object.assign({},t,{depth:null==t.depth?null:t.depth-1});return r(this.toJSON(),s)}},f=["AccessKey","SharedAccessKey","Password","AccountKey","Secret","SecretKey","ApiKey","Token","Key","MasterKey","PrimaryKey","SecondaryKey"],S={encrypt:n((e=>new a(e)),"encrypt")},g=n((e=>{const t={secret:e?.secret??null,encryptionProvider:e?.encryptionProvider??S,secretKeys:e?.secretKeys??f};return{string:p.factory(t),connectionString:d.factory(t),url:y.factory(t)}}),"createFactory");exports.EncryptedValue=a,exports.ISecureConnectionString=h,exports.ISecureString=u,exports.ISecureURL=l,exports.createFactory=g,exports.defaultSecureKeys=f;//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hash.ts","../src/types.ts","../src/SecureString.ts","../src/defaults.ts","../src/SecureConnectionString.ts","../src/SecureURL.ts","../src/createFactory.ts"],"names":["createHash","createHmac","hash","util","value"],"mappings":";;AAOA,IAAM,UAAa,GAAA;AAAA,EACjB,wBAAe,MAAA,CAAA,OAAA;AAAA,IACb,IAAA,kBAAO,MAAA,CAAA,CAAA,CAAA,KAAcA,iBAAW,CAAA,QAAQ,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAA1D,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFF,CAAA,EAAA,QAAA,CAAA;AAAA,EAIR,KAAA,0BAAQ,MAAoB,MAAA;AAAA,IAC1B,IAAM,kBAAA,MAAA,CAAA,CAAC,CAAc,KAAAC,iBAAA,CAAW,QAAU,EAAA,MAAM,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAAlE,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFH,CAAA,EAAA,OAAA;AAIT,CAAA;AAEA,IAAM,YAAA,2BAAgB,MAAmC,KAAA;AACvD,EAAA,OAAO,WAAW,SAAY,GAAA,UAAA,CAAW,QAAW,GAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AAC7E,CAFqB,EAAA,cAAA,CAAA;AAId,IAAM,IAAA,mBAAQ,MAAA,CAAA,CAAA,KAAA,EAAe,MAAoB,KAAA;AACtD,EAAM,MAAA,GAAA,GAAM,aAAa,MAAM,CAAA;AAC/B,EAAMC,MAAAA,KAAAA,GAAO,GAAI,CAAA,IAAA,CAAK,KAAK,CAAA;AAC3B,EAAA,OAAO,CAAG,EAAA,GAAA,CAAI,MAAM,CAAA,CAAA,EAAIA,KAAI,CAAA,CAAA;AAC9B,CAJoB,EAAA,MAAA,CAAA;;;ACfb,IAAe,aAAf,MAA0B;AAAA,EAPjC;AAOiC,IAAA,MAAA,CAAA,IAAA,EAAA,YAAA,CAAA;AAAA;AAIjC,CAAA;;;ACPa,IAAA,YAAA,GAAN,MAAM,aAAA,SAAqB,UAAW,CAAA;AAAA,EAJ7C;AAI6C,IAAA,MAAA,CAAA,IAAA,EAAA,cAAA,CAAA;AAAA;AAAA,EAClC,MAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AACd,EAEQ,WAAA,CAAY,OAAe,MAAiB,EAAA;AAClD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,MAAS,GAAA,KAAA;AACd,IAAK,IAAA,CAAA,KAAA,GAAQ,IAAK,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACjC,EAEA,OAAO,QAAQ,MAA6D,EAAA;AAC1E,IAAA,OAAO,CAAC,KAAA,KAAkB,aAAa,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AAC3D,EAEA,OAAc,IAA0C,CAAA,KAAA,EAAU,MAAsD,EAAA;AACtH,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,aAAa,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACvC,EAEgB,QAAW,GAAA;AACzB,IAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AACd,EACgB,MAAS,GAAA;AACvB,IAAA,OAAO,KAAK,QAAS,EAAA;AAAA;AACvB,EACA,CAAUC,qBAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,gBAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C;;;AC7CO,IAAM,iBAAoB,GAAA,CAAC,WAAa,EAAA,iBAAA,EAAmB,UAAY,EAAA,YAAA,EAAc,QAAU,EAAA,WAAA,EAAa,QAAU,EAAA,OAAA,EAAS,KAAO,EAAA,WAAA,EAAa,cAAc,cAAc;;;ACGzK,IAAA,sBAAA,GAAN,MAAM,uBAAA,SAA+B,UAAW,CAAA;AAAA,EALvD;AAKuD,IAAA,MAAA,CAAA,IAAA,EAAA,wBAAA,CAAA;AAAA;AAAA,EAC5C,MAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AACd,EAEQ,WAAA,CAAY,KAAe,EAAA,UAAA,EAAwB,MAA4B,EAAA;AACrF,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,MAAS,GAAA,KAAA;AACd,IAAA,IAAA,CAAK,QAAQ,IAAK,CAAA,qBAAA;AAAA,MAChB,KAAA;AAAA,MACA,WAAW,GAAI,CAAA,CAAC,CAAM,KAAA,CAAA,CAAE,mBAAmB,CAAA;AAAA,MAC3C;AAAA,KACF;AAAA;AACF,EAEQ,qBAAA,CAAsB,KAAe,EAAA,UAAA,EAAwB,MAA+D,EAAA;AAClI,IAAO,OAAA,KAAA,CACJ,MAAM,GAAG,CAAA,CACT,OAAO,OAAO,CAAA,CACd,GAAI,CAAA,CAAC,IAAS,KAAA;AACb,MAAA,MAAM,CAAC,GAAKC,EAAAA,MAAK,CAAI,GAAA,IAAA,CAAK,MAAM,GAAG,CAAA;AACnC,MAAA,MAAM,IAAIA,MAAS,IAAA,EAAA;AACnB,MAAM,MAAA,GAAA,GAAM,UAAW,CAAA,QAAA,CAAS,GAAI,CAAA,iBAAA,EAAmB,CAAA,GAAI,YAAa,CAAA,IAAA,CAAK,CAAG,EAAA,MAAM,CAAI,GAAA,CAAA;AAC1F,MAAO,OAAA,CAAC,KAAK,GAAG,CAAA;AAAA,KACjB,CAAA;AAAA;AACL,EAEA,OAAO,OAAQ,CAAA,MAAA,EAA4B,UAAoE,EAAA;AAC7G,IAAA,OAAO,CAAC,KAAkB,KAAA,uBAAA,CAAuB,IAAK,CAAA,KAAA,EAAO,YAAY,MAAM,CAAA;AAAA;AACjF,EAEA,OAAc,IAAA,CAA0C,KAAU,EAAA,UAAA,EAAyB,MAAgE,EAAA;AACzJ,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAA,OAAO,IAAI,uBAAA,CAAuB,KAAO,EAAA,UAAA,IAAc,mBAAmB,MAAM,CAAA;AAAA;AAClF,EAEgB,QAAmB,GAAA;AACjC,IAAA,OAAO,IAAK,CAAA,KAAA,CAAM,GAAI,CAAA,CAAC,CAAC,GAAK,EAAA,KAAK,CAAM,KAAA,CAAA,EAAG,GAAG,CAAI,CAAA,EAAA,KAAK,CAAE,CAAA,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA;AACrE,EAEgB,MAAiB,GAAA;AAC/B,IAAO,OAAA,MAAA,CAAO,WAAY,CAAA,IAAA,CAAK,KAAK,CAAA;AAAA;AACtC,EAEA,CAAiBD,qBAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AAC9G,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,0BAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C;ACrDa,IAAA,SAAA,GAAN,MAAM,UAAA,SAAkB,UAAW,CAAA;AAAA,EAb1C;AAa0C,IAAA,MAAA,CAAA,IAAA,EAAA,WAAA,CAAA;AAAA;AAAA,EAC/B,MAAA;AAAA,EACA,SAAA;AAAA,EAET,IAAW,WAAmB,GAAA;AAC5B,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AACd,EAEQ,WAAA,CAAY,OAAY,MAA4B,EAAA;AAC1D,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,MAAS,GAAA,KAAA;AACd,IAAA,IAAA,CAAK,YAAY,YAAa,CAAA,IAAA,CAAK,KAAM,CAAA,QAAA,IAAY,MAAM,MAAM,CAAA;AAAA;AACnE,EAEA,OAAO,QAAQ,MAAuD,EAAA;AACpE,IAAA,OAAO,CAAC,KAAA,KAAe,UAAU,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AACrD,EAEA,OAAc,IAAuC,CAAA,KAAA,EAAU,MAAgD,EAAA;AAC7G,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,UAAU,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACpC,EAES,QAAmB,GAAA;AAC1B,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AACvC,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAO,MAAA,CAAA,QAAA,GAAW,IAAK,CAAA,SAAA,CAAU,QAAS,EAAA;AAAA;AAE5C,IAAA,OAAO,MAAO,CAAA,IAAA;AAAA;AAChB,EAES,MAAoB,GAAA;AAC3B,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AACvC,IAAA,MAAA,CAAO,QAAW,GAAA,EAAA;AAElB,IAAA,MAAM,YAAe,GAAA,IAAI,eAAgB,CAAA,MAAA,CAAO,YAAY,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAS,GAAA,EAAA;AAEhB,IAAI,IAAA,QAAA;AACJ,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAW,QAAA,GAAA,IAAA,CAAK,UAAU,QAAS,EAAA;AAAA;AAGrC,IAAA,MAAM,MAAoB,GAAA;AAAA,MACxB,MAAM,MAAO,CAAA;AAAA,KACf;AACA,IAAA,IAAI,aAAa,SAAW,EAAA;AAC1B,MAAA,MAAA,CAAO,QAAW,GAAA,QAAA;AAAA;AAEpB,IAAI,IAAA,YAAA,CAAa,OAAO,CAAG,EAAA;AACzB,MAAO,MAAA,CAAA,YAAA,GAAe,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA;AAAA;AAEvD,IAAO,OAAA,MAAA;AAAA;AACT,EACA,CAAUA,qBAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,aAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C;;;AC5Ea,IAAA,aAAA,2BAAiB,MAAmC,KAAA;AAC/D,EAAO,OAAA;AAAA,IACL,MAAA,EAAQ,YAAa,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACnC,gBAAA,EAAkB,sBAAuB,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACvD,GAAA,EAAK,SAAU,CAAA,OAAA,CAAQ,MAAM;AAAA,GAC/B;AACF,CAN6B,EAAA,eAAA","file":"index.cjs","sourcesContent":["import { createHash, createHmac } from 'node:crypto';\n\ntype HashAlgorithm = {\n  hash: (x: string) => string;\n  prefix: string;\n};\n\nconst algorithms = {\n  sha256: () => ({\n    hash: (x: string) => createHash('sha256').update(x).digest('hex'),\n    prefix: 'sha256',\n  }),\n  hs256: (secret: string) => ({\n    hash: (x: string) => createHmac('sha256', secret).update(x).digest('hex'),\n    prefix: 'hs256',\n  }),\n} as const;\n\nconst getAlgorithm = (secret?: string): HashAlgorithm => {\n  return secret === undefined ? algorithms.sha256() : algorithms.hs256(secret);\n};\n\nexport const hash = (input: string, secret?: string) => {\n  const alg = getAlgorithm(secret);\n  const hash = alg.hash(input);\n  return `${alg.prefix}:${hash}`;\n};\n","import util, { type InspectOptions } from 'node:util';\nimport type { SecureConnectionString } from './SecureConnectionString';\nimport type { SecureString } from './SecureString';\nimport type { SecureURL } from './SecureURL';\n\nexport type InspectFunction = typeof util.inspect;\n\nexport abstract class BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): string | object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n}\n\nexport type SecureFactory = {\n  string: (value: string) => SecureString;\n  connectionString: (value: string, secretKeys?: readonly string[]) => SecureConnectionString;\n  url: (value: URL) => SecureURL;\n};\n\nexport type SecureKeys = readonly string[];\n","import util, { type InspectOptions } from 'node:util';\nimport { hash } from './hash';\nimport { BaseObject, type InspectFunction } from './types';\n\nexport class SecureString extends BaseObject {\n  readonly #value: string;\n  readonly #hash: string;\n\n  public get secretValue(): string {\n    return this.#value;\n  }\n\n  private constructor(value: string, secret?: string) {\n    super();\n    this.#value = value;\n    this.#hash = hash(value, secret);\n  }\n\n  static factory(secret: string | undefined): (value: string) => SecureString {\n    return (value: string) => SecureString.from(value, secret);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, secret?: string): T extends string ? SecureString : T {\n    if (value === null) {\n      return null as T extends string ? SecureString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureString : T;\n    }\n    return new SecureString(value, secret) as T extends string ? SecureString : T;\n  }\n\n  public override toString() {\n    return this.#hash;\n  }\n  public override toJSON() {\n    return this.toString();\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import type { SecureKeys } from './types';\n\nexport const defaultSecureKeys = ['AccessKey', 'SharedAccessKey', 'Password', 'AccountKey', 'Secret', 'SecretKey', 'ApiKey', 'Token', 'Key', 'MasterKey', 'PrimaryKey', 'SecondaryKey'] as const satisfies SecureKeys;\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { defaultSecureKeys } from './defaults';\nimport { BaseObject, type InspectFunction, type SecureKeys } from './types';\n\nexport class SecureConnectionString extends BaseObject {\n  readonly #value: string;\n  readonly #data: [string, string | SecureString][];\n\n  public get secretValue(): string {\n    return this.#value;\n  }\n\n  private constructor(value: string, secretKeys: SecureKeys, secret: string | undefined) {\n    super();\n    this.#value = value;\n    this.#data = this.parseConnectionString(\n      value,\n      secretKeys.map((x) => x.toLocaleLowerCase()),\n      secret,\n    );\n  }\n\n  private parseConnectionString(value: string, secretKeys: SecureKeys, secret: string | undefined): [string, string | SecureString][] {\n    return value\n      .split(';')\n      .filter(Boolean)\n      .map((pair) => {\n        const [key, value] = pair.split('=');\n        const v = value ?? '';\n        const val = secretKeys.includes(key.toLocaleLowerCase()) ? SecureString.from(v, secret) : v;\n        return [key, val];\n      });\n  }\n\n  static factory(secret: string | undefined, secretKeys?: SecureKeys): (value: string) => SecureConnectionString {\n    return (value: string) => SecureConnectionString.from(value, secretKeys, secret);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, secretKeys?: SecureKeys, secret?: string): T extends string ? SecureConnectionString : T {\n    if (value === null) {\n      return null as T extends string ? SecureConnectionString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureConnectionString : T;\n    }\n    return new SecureConnectionString(value, secretKeys ?? defaultSecureKeys, secret) as T extends string ? SecureConnectionString : T;\n  }\n\n  public override toString(): string {\n    return this.#data.map(([key, value]) => `${key}=${value}`).join(';');\n  }\n\n  public override toJSON(): object {\n    return Object.fromEntries(this.#data);\n  }\n\n  public override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureConnectionString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { BaseObject, type InspectFunction } from './types';\n\ntype UrlObject = {\n  href: string;\n  password?: string;\n  searchParams?: Record<string, string>;\n};\n\n/**\n * SecureURL obfuscates the password from the URL.\n */\nexport class SecureURL extends BaseObject {\n  readonly #value: URL;\n  readonly #password: SecureString | null;\n\n  public get secretValue(): URL {\n    return this.#value;\n  }\n\n  private constructor(value: URL, secret: string | undefined) {\n    super();\n    this.#value = value;\n    this.#password = SecureString.from(value.password || null, secret);\n  }\n\n  static factory(secret: string | undefined): (value: URL) => SecureURL {\n    return (value: URL) => SecureURL.from(value, secret);\n  }\n\n  public static from<T extends URL | null | undefined>(value: T, secret?: string): T extends URL ? SecureURL : T {\n    if (value === null) {\n      return null as T extends URL ? SecureURL : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends URL ? SecureURL : T;\n    }\n    return new SecureURL(value, secret) as T extends URL ? SecureURL : T;\n  }\n\n  override toString(): string {\n    const newUrl = new URL(this.#value.href);\n    if (this.#password !== null) {\n      newUrl.password = this.#password.toString();\n    }\n    return newUrl.href;\n  }\n\n  override toJSON(): UrlObject {\n    const newUrl = new URL(this.#value.href);\n    newUrl.password = '';\n\n    const searchParams = new URLSearchParams(newUrl.searchParams);\n    newUrl.search = '';\n\n    let password: string | undefined;\n    if (this.#password !== null) {\n      password = this.#password.toString();\n    }\n\n    const result: UrlObject = {\n      href: newUrl.href,\n    };\n    if (password !== undefined) {\n      result.password = password;\n    }\n    if (searchParams.size > 0) {\n      result.searchParams = Object.fromEntries(searchParams);\n    }\n    return result;\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureURL]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import { SecureConnectionString } from './SecureConnectionString';\nimport { SecureString } from './SecureString';\nimport { SecureURL } from './SecureURL';\nimport type { SecureFactory } from './types';\n\nexport const createFactory = (secret?: string): SecureFactory => {\n  return {\n    string: SecureString.factory(secret),\n    connectionString: SecureConnectionString.factory(secret),\n    url: SecureURL.factory(secret),\n  };\n};\n"]}
+{"version":3,"sources":["../src/EncryptedValue.ts","../src/hash.ts","../src/interfaces.ts","../src/SecureString.ts","../src/SecureConnectionString.ts","../src/SecureURL.ts","../src/defaults.ts","../src/createFactory.ts"],"names":["randomBytes","createCipheriv","createDecipheriv","createHash","createHmac","hash","util","value"],"mappings":";;AAEO,IAAM,iBAAN,MAAqB;AAAA,EAF5B;AAE4B,IAAA,MAAA,CAAA,IAAA,EAAA,gBAAA,CAAA;AAAA;AAAA,EACT,aAAA;AAAA,EACA,EAAA;AAAA,EACA,OAAA;AAAA,EACA,GAAA;AAAA,EAEV,YAAY,KAAe,EAAA;AAChC,IAAK,IAAA,CAAA,GAAA,GAAMA,mBAAY,EAAE,CAAA;AACzB,IAAK,IAAA,CAAA,EAAA,GAAKA,mBAAY,EAAE,CAAA;AAExB,IAAA,MAAM,SAASC,qBAAe,CAAA,aAAA,EAAe,IAAK,CAAA,GAAA,EAAK,KAAK,EAAE,CAAA;AAE9D,IAAA,MAAM,kBAA4B,EAAC;AACnC,IAAA,eAAA,CAAgB,IAAK,CAAA,MAAA,CAAO,MAAO,CAAA,KAAA,EAAO,MAAM,CAAC,CAAA;AACjD,IAAgB,eAAA,CAAA,IAAA,CAAK,MAAO,CAAA,KAAA,EAAO,CAAA;AAEnC,IAAK,IAAA,CAAA,aAAA,GAAgB,MAAO,CAAA,MAAA,CAAO,eAAe,CAAA;AAClD,IAAK,IAAA,CAAA,OAAA,GAAU,OAAO,UAAW,EAAA;AAAA;AACnC,EAEO,QAAmB,GAAA;AACxB,IAAA,MAAM,WAAWC,uBAAiB,CAAA,aAAA,EAAe,IAAK,CAAA,GAAA,EAAK,KAAK,EAAE,CAAA;AAClE,IAAS,QAAA,CAAA,UAAA,CAAW,KAAK,OAAO,CAAA;AAEhC,IAAI,IAAA;AACF,MAAA,MAAM,kBAA4B,EAAC;AACnC,MAAA,eAAA,CAAgB,IAAK,CAAA,QAAA,CAAS,MAAO,CAAA,IAAA,CAAK,aAAa,CAAC,CAAA;AACxD,MAAgB,eAAA,CAAA,IAAA,CAAK,QAAS,CAAA,KAAA,EAAO,CAAA;AAErC,MAAA,OAAO,MAAO,CAAA,MAAA,CAAO,eAAe,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,aAC9C,CAAG,EAAA;AAEV,MAAM,MAAA,IAAI,MAAM,wDAAwD,CAAA;AAAA;AAC1E;AACF,EAEO,QAAmB,GAAA;AACxB,IAAO,OAAA,kBAAA;AAAA;AACT,EAEO,MAAiB,GAAA;AACtB,IAAA,OAAO,EAAE,IAAA,EAAM,gBAAkB,EAAA,SAAA,EAAW,IAAK,EAAA;AAAA;AAErD;ACtCA,IAAM,UAAa,GAAA;AAAA,EACjB,wBAAe,MAAA,CAAA,OAAA;AAAA,IACb,IAAA,kBAAO,MAAA,CAAA,CAAA,CAAA,KAAcC,iBAAW,CAAA,QAAQ,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAA1D,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFF,CAAA,EAAA,QAAA,CAAA;AAAA,EAIR,KAAA,0BAAQ,MAAoB,MAAA;AAAA,IAC1B,IAAM,kBAAA,MAAA,CAAA,CAAC,CAAc,KAAAC,iBAAA,CAAW,QAAU,EAAA,MAAM,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAAlE,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFH,CAAA,EAAA,OAAA;AAIT,CAAA;AAEA,IAAM,YAAA,2BAAgB,MAAyC,KAAA;AAC7D,EAAA,OAAO,UAAU,IAAO,GAAA,UAAA,CAAW,QAAW,GAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AACvE,CAFqB,EAAA,cAAA,CAAA;AAId,IAAM,IAAA,mBAAQ,MAAA,CAAA,CAAA,KAAA,EAAe,MAA0B,KAAA;AAC5D,EAAM,MAAA,GAAA,GAAM,aAAa,MAAM,CAAA;AAC/B,EAAMC,MAAAA,KAAAA,GAAO,GAAI,CAAA,IAAA,CAAK,KAAK,CAAA;AAC3B,EAAA,OAAO,CAAG,EAAA,GAAA,CAAI,MAAM,CAAA,CAAA,EAAIA,KAAI,CAAA,CAAA;AAC9B,CAJoB,EAAA,MAAA,CAAA;;;ACnBb,IAAe,gBAAf,MAAmD;AAAA,EAH1D;AAG0D,IAAA,MAAA,CAAA,IAAA,EAAA,eAAA,CAAA;AAAA;AAK1D;AAEO,IAAe,0BAAf,MAA6D;AAAA,EAVpE;AAUoE,IAAA,MAAA,CAAA,IAAA,EAAA,yBAAA,CAAA;AAAA;AAKpE;AAEO,IAAe,aAAf,MAAgD;AAAA,EAjBvD;AAiBuD,IAAA,MAAA,CAAA,IAAA,EAAA,YAAA,CAAA;AAAA;AAKvD;;;ACjBO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,aAAc,CAAA;AAAA,EALhD;AAKgD,IAAA,MAAA,CAAA,IAAA,EAAA,cAAA,CAAA;AAAA;AAAA,EACrC,eAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAO,OAAA,IAAA,CAAK,gBAAgB,QAAS,EAAA;AAAA;AACvC,EAEQ,WAAA,CAAY,OAAe,MAAsB,EAAA;AACvD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,eAAkB,GAAA,MAAA,CAAO,kBAAmB,CAAA,OAAA,CAAQ,KAAK,CAAA;AAC9D,IAAA,IAAA,CAAK,KAAQ,GAAA,IAAA,CAAK,KAAO,EAAA,MAAA,CAAO,MAAM,CAAA;AAAA;AACxC,EAEA,OAAO,QAAQ,MAAuD,EAAA;AACpE,IAAA,OAAO,CAAC,KAAA,KAAkB,aAAa,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AAC3D,EAEA,OAAc,IAA0C,CAAA,KAAA,EAAU,MAA2D,EAAA;AAC3H,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,aAAa,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACvC,EAEgB,QAAW,GAAA;AACzB,IAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AACd,EACgB,MAAS,GAAA;AACvB,IAAA,OAAO,KAAK,QAAS,EAAA;AAAA;AACvB,EACA,CAAUC,qBAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,gBAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C,CAAA;;;AC3CO,IAAM,sBAAA,GAAN,MAAM,uBAAA,SAA+B,uBAAwB,CAAA;AAAA,EALpE;AAKoE,IAAA,MAAA,CAAA,IAAA,EAAA,wBAAA,CAAA;AAAA;AAAA,EACzD,eAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAO,OAAA,IAAA,CAAK,gBAAgB,QAAS,EAAA;AAAA;AACvC,EAEQ,WAAA,CAAY,OAAe,MAAsB,EAAA;AACvD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,eAAkB,GAAA,MAAA,CAAO,kBAAmB,CAAA,OAAA,CAAQ,KAAK,CAAA;AAC9D,IAAA,IAAA,CAAK,QAAQ,IAAK,CAAA,qBAAA;AAAA,MAChB,KAAA;AAAA,MACA,OAAO,UAAW,CAAA,GAAA,CAAI,CAAC,CAAM,KAAA,CAAA,CAAE,mBAAmB,CAAA;AAAA,MAClD;AAAA,KACF;AAAA;AACF,EAEQ,qBAAA,CAAsB,KAAe,EAAA,UAAA,EAAwB,MAAyD,EAAA;AAC5H,IAAO,OAAA,KAAA,CACJ,MAAM,GAAG,CAAA,CACT,OAAO,OAAO,CAAA,CACd,GAAI,CAAA,CAAC,IAAS,KAAA;AACb,MAAA,MAAM,CAAC,GAAKC,EAAAA,MAAK,CAAI,GAAA,IAAA,CAAK,MAAM,GAAG,CAAA;AACnC,MAAA,MAAM,IAAIA,MAAS,IAAA,EAAA;AACnB,MAAM,MAAA,GAAA,GAAM,UAAW,CAAA,QAAA,CAAS,GAAI,CAAA,iBAAA,EAAmB,CAAA,GAAI,YAAa,CAAA,IAAA,CAAK,CAAG,EAAA,MAAM,CAAI,GAAA,CAAA;AAC1F,MAAO,OAAA,CAAC,KAAK,GAAG,CAAA;AAAA,KACjB,CAAA;AAAA;AACL,EAEA,OAAO,QAAQ,MAAiE,EAAA;AAC9E,IAAA,OAAO,CAAC,KAAA,KAAkB,uBAAuB,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AACrE,EAEA,OAAc,IAA0C,CAAA,KAAA,EAAU,MAAqE,EAAA;AACrI,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,uBAAuB,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACjD,EAEgB,QAAmB,GAAA;AACjC,IAAA,OAAO,IAAK,CAAA,KAAA,CAAM,GAAI,CAAA,CAAC,CAAC,GAAK,EAAA,KAAK,CAAM,KAAA,CAAA,EAAG,GAAG,CAAI,CAAA,EAAA,KAAK,CAAE,CAAA,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA;AACrE,EAEgB,MAAiB,GAAA;AAC/B,IAAO,OAAA,MAAA,CAAO,WAAY,CAAA,IAAA,CAAK,KAAK,CAAA;AAAA;AACtC,EAEA,CAAiBD,qBAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AAC9G,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,0BAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C,CAAA;ACvDO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,UAAW,CAAA;AAAA,EAX1C;AAW0C,IAAA,MAAA,CAAA,IAAA,EAAA,WAAA,CAAA;AAAA;AAAA,EAC/B,eAAA;AAAA,EACA,SAAA;AAAA,EAET,IAAW,WAAmB,GAAA;AAC5B,IAAA,OAAO,IAAI,GAAA,CAAI,IAAK,CAAA,eAAA,CAAgB,UAAU,CAAA;AAAA;AAChD,EAEQ,WAAA,CAAY,OAAY,MAAsB,EAAA;AACpD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,eAAkB,GAAA,MAAA,CAAO,kBAAmB,CAAA,OAAA,CAAQ,MAAM,IAAI,CAAA;AACnE,IAAA,IAAA,CAAK,YAAY,YAAa,CAAA,IAAA,CAAK,KAAM,CAAA,QAAA,IAAY,MAAM,MAAM,CAAA;AAAA;AACnE,EAEA,OAAO,QAAQ,MAAkD,EAAA;AAC/D,IAAA,OAAO,CAAC,KAAA,KAAe,UAAU,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AACrD,EAEA,OAAc,IAAuC,CAAA,KAAA,EAAU,MAAqD,EAAA;AAClH,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,UAAU,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACpC,EAES,QAAmB,GAAA;AAC1B,IAAA,MAAM,cAAc,IAAK,CAAA,WAAA;AACzB,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,WAAA,CAAY,IAAI,CAAA;AACvC,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAO,MAAA,CAAA,QAAA,GAAW,IAAK,CAAA,SAAA,CAAU,QAAS,EAAA;AAAA;AAE5C,IAAA,OAAO,MAAO,CAAA,IAAA;AAAA;AAChB,EAES,MAAoB,GAAA;AAC3B,IAAA,MAAM,cAAc,IAAK,CAAA,WAAA;AACzB,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,WAAA,CAAY,IAAI,CAAA;AACvC,IAAA,MAAA,CAAO,QAAW,GAAA,EAAA;AAElB,IAAA,MAAM,YAAe,GAAA,IAAI,eAAgB,CAAA,MAAA,CAAO,YAAY,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAS,GAAA,EAAA;AAEhB,IAAI,IAAA,QAAA;AACJ,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAW,QAAA,GAAA,IAAA,CAAK,UAAU,QAAS,EAAA;AAAA;AAGrC,IAAA,MAAM,MAAoB,GAAA;AAAA,MACxB,MAAM,MAAO,CAAA;AAAA,KACf;AACA,IAAA,IAAI,aAAa,SAAW,EAAA;AAC1B,MAAA,MAAA,CAAO,QAAW,GAAA,QAAA;AAAA;AAEpB,IAAI,IAAA,YAAA,CAAa,OAAO,CAAG,EAAA;AACzB,MAAO,MAAA,CAAA,YAAA,GAAe,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA;AAAA;AAEvD,IAAO,OAAA,MAAA;AAAA;AACT,EACA,CAAUA,qBAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,aAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C,CAAA;;;AC/EO,IAAM,iBAAoB,GAAA,CAAC,WAAa,EAAA,iBAAA,EAAmB,UAAY,EAAA,YAAA,EAAc,QAAU,EAAA,WAAA,EAAa,QAAU,EAAA,OAAA,EAAS,KAAO,EAAA,WAAA,EAAa,cAAc,cAAc;;;ACM/K,IAAM,yBAAiD,GAAA;AAAA,EAC5D,yBAAU,MAAA,CAAA,CAAA,KAAA,KAAkB,IAAI,cAAA,CAAe,KAAK,CAA3C,EAAA,SAAA;AACX,CAAA;AAEa,IAAA,aAAA,2BAAiB,OAAoD,KAAA;AAChF,EAAA,MAAM,MAAuB,GAAA;AAAA,IAC3B,MAAA,EAAQ,SAAS,MAAU,IAAA,IAAA;AAAA,IAC3B,kBAAA,EAAoB,SAAS,kBAAsB,IAAA,yBAAA;AAAA,IACnD,UAAA,EAAY,SAAS,UAAc,IAAA;AAAA,GACrC;AAEA,EAAO,OAAA;AAAA,IACL,MAAA,EAAQ,YAAa,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACnC,gBAAA,EAAkB,sBAAuB,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACvD,GAAA,EAAK,SAAU,CAAA,OAAA,CAAQ,MAAM;AAAA,GAC/B;AACF,CAZ6B,EAAA,eAAA","file":"index.cjs","sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\n\nexport class EncryptedValue {\n  private readonly encryptedData: Buffer;\n  private readonly iv: Buffer;\n  private readonly authTag: Buffer;\n  private readonly key: Buffer;\n\n  public constructor(value: string) {\n    this.key = randomBytes(32);\n    this.iv = randomBytes(16);\n\n    const cipher = createCipheriv('aes-256-gcm', this.key, this.iv);\n\n    const encryptedChunks: Buffer[] = [];\n    encryptedChunks.push(cipher.update(value, 'utf8'));\n    encryptedChunks.push(cipher.final());\n\n    this.encryptedData = Buffer.concat(encryptedChunks);\n    this.authTag = cipher.getAuthTag();\n  }\n\n  public getValue(): string {\n    const decipher = createDecipheriv('aes-256-gcm', this.key, this.iv);\n    decipher.setAuthTag(this.authTag);\n\n    try {\n      const decryptedChunks: Buffer[] = [];\n      decryptedChunks.push(decipher.update(this.encryptedData));\n      decryptedChunks.push(decipher.final());\n\n      return Buffer.concat(decryptedChunks).toString('utf8');\n    } catch (_) {\n      // Hide internal error details\n      throw new Error('Failed to decrypt value: Invalid key or corrupted data');\n    }\n  }\n\n  public toString(): string {\n    return '[EncryptedValue]';\n  }\n\n  public toJSON(): object {\n    return { type: 'EncryptedValue', encrypted: true };\n  }\n}\n","import { createHash, createHmac } from 'node:crypto';\n\ntype HashAlgorithm = {\n  hash: (x: string) => string;\n  prefix: string;\n};\n\nconst algorithms = {\n  sha256: () => ({\n    hash: (x: string) => createHash('sha256').update(x).digest('hex'),\n    prefix: 'sha256',\n  }),\n  hs256: (secret: string) => ({\n    hash: (x: string) => createHmac('sha256', secret).update(x).digest('hex'),\n    prefix: 'hs256',\n  }),\n} as const;\n\nconst getAlgorithm = (secret: string | null): HashAlgorithm => {\n  return secret == null ? algorithms.sha256() : algorithms.hs256(secret);\n};\n\nexport const hash = (input: string, secret: string | null) => {\n  const alg = getAlgorithm(secret);\n  const hash = alg.hash(input);\n  return `${alg.prefix}:${hash}`;\n};\n","import util, { type InspectOptions } from 'node:util';\nimport type { BaseObject, InspectFunction } from './types';\n\nexport abstract class ISecureString implements BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): string | object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n  public abstract get secretValue(): string;\n}\n\nexport abstract class ISecureConnectionString implements BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): string | object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n  public abstract get secretValue(): string;\n}\n\nexport abstract class ISecureURL implements BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n  public abstract get secretValue(): URL;\n}\n\nexport abstract class ISecureFactory {\n  public abstract string(value: string): ISecureString;\n  public abstract connectionString(value: string, secretKeys?: readonly string[]): ISecureConnectionString;\n  public abstract url(value: URL): ISecureURL;\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { hash } from './hash';\nimport { ISecureString } from './interfaces';\nimport type { IEncryptedValue, InspectFunction, SecureConfig } from './types';\n\nexport class SecureString extends ISecureString {\n  readonly #encryptedValue: IEncryptedValue;\n  readonly #hash: string;\n\n  public get secretValue(): string {\n    return this.#encryptedValue.getValue();\n  }\n\n  private constructor(value: string, config: SecureConfig) {\n    super();\n    this.#encryptedValue = config.encryptionProvider.encrypt(value);\n    this.#hash = hash(value, config.secret);\n  }\n\n  static factory(config: SecureConfig): (value: string) => SecureString {\n    return (value: string) => SecureString.from(value, config);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, config: SecureConfig): T extends string ? SecureString : T {\n    if (value === null) {\n      return null as T extends string ? SecureString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureString : T;\n    }\n    return new SecureString(value, config) as T extends string ? SecureString : T;\n  }\n\n  public override toString() {\n    return this.#hash;\n  }\n  public override toJSON() {\n    return this.toString();\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { ISecureConnectionString } from './interfaces';\nimport type { IEncryptedValue, InspectFunction, SecureConfig, SecureKeys } from './types';\n\nexport class SecureConnectionString extends ISecureConnectionString {\n  readonly #encryptedValue: IEncryptedValue;\n  readonly #data: [string, string | SecureString][];\n\n  public get secretValue(): string {\n    return this.#encryptedValue.getValue();\n  }\n\n  private constructor(value: string, config: SecureConfig) {\n    super();\n    this.#encryptedValue = config.encryptionProvider.encrypt(value);\n    this.#data = this.parseConnectionString(\n      value,\n      config.secretKeys.map((x) => x.toLocaleLowerCase()),\n      config,\n    );\n  }\n\n  private parseConnectionString(value: string, secretKeys: SecureKeys, config: SecureConfig): [string, string | SecureString][] {\n    return value\n      .split(';')\n      .filter(Boolean)\n      .map((pair) => {\n        const [key, value] = pair.split('=');\n        const v = value ?? '';\n        const val = secretKeys.includes(key.toLocaleLowerCase()) ? SecureString.from(v, config) : v;\n        return [key, val];\n      });\n  }\n\n  static factory(config: SecureConfig): (value: string) => SecureConnectionString {\n    return (value: string) => SecureConnectionString.from(value, config);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, config: SecureConfig): T extends string ? SecureConnectionString : T {\n    if (value === null) {\n      return null as T extends string ? SecureConnectionString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureConnectionString : T;\n    }\n    return new SecureConnectionString(value, config) as T extends string ? SecureConnectionString : T;\n  }\n\n  public override toString(): string {\n    return this.#data.map(([key, value]) => `${key}=${value}`).join(';');\n  }\n\n  public override toJSON(): object {\n    return Object.fromEntries(this.#data);\n  }\n\n  public override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureConnectionString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { ISecureURL } from './interfaces';\nimport type { IEncryptedValue, InspectFunction, SecureConfig } from './types';\n\ntype UrlObject = {\n  href: string;\n  password?: string;\n  searchParams?: Record<string, string>;\n};\n\nexport class SecureURL extends ISecureURL {\n  readonly #encryptedValue: IEncryptedValue;\n  readonly #password: SecureString | null;\n\n  public get secretValue(): URL {\n    return new URL(this.#encryptedValue.getValue());\n  }\n\n  private constructor(value: URL, config: SecureConfig) {\n    super();\n    this.#encryptedValue = config.encryptionProvider.encrypt(value.href);\n    this.#password = SecureString.from(value.password || null, config);\n  }\n\n  static factory(config: SecureConfig): (value: URL) => ISecureURL {\n    return (value: URL) => SecureURL.from(value, config);\n  }\n\n  public static from<T extends URL | null | undefined>(value: T, config: SecureConfig): T extends URL ? SecureURL : T {\n    if (value === null) {\n      return null as T extends URL ? SecureURL : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends URL ? SecureURL : T;\n    }\n    return new SecureURL(value, config) as T extends URL ? SecureURL : T;\n  }\n\n  override toString(): string {\n    const originalUrl = this.secretValue;\n    const newUrl = new URL(originalUrl.href);\n    if (this.#password !== null) {\n      newUrl.password = this.#password.toString();\n    }\n    return newUrl.href;\n  }\n\n  override toJSON(): UrlObject {\n    const originalUrl = this.secretValue;\n    const newUrl = new URL(originalUrl.href);\n    newUrl.password = '';\n\n    const searchParams = new URLSearchParams(newUrl.searchParams);\n    newUrl.search = '';\n\n    let password: string | undefined;\n    if (this.#password !== null) {\n      password = this.#password.toString();\n    }\n\n    const result: UrlObject = {\n      href: newUrl.href,\n    };\n    if (password !== undefined) {\n      result.password = password;\n    }\n    if (searchParams.size > 0) {\n      result.searchParams = Object.fromEntries(searchParams);\n    }\n    return result;\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureURL]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import type { SecureKeys } from './types';\n\nexport const defaultSecureKeys = ['AccessKey', 'SharedAccessKey', 'Password', 'AccountKey', 'Secret', 'SecretKey', 'ApiKey', 'Token', 'Key', 'MasterKey', 'PrimaryKey', 'SecondaryKey'] as const satisfies SecureKeys;\n","import { EncryptedValue } from './EncryptedValue';\nimport { SecureConnectionString } from './SecureConnectionString';\nimport { SecureString } from './SecureString';\nimport { SecureURL } from './SecureURL';\nimport { defaultSecureKeys } from './defaults';\nimport type { ISecureFactory } from './interfaces';\nimport type { IEncryptionProvider, SecureConfig } from './types';\n\nexport const defaultEncryptionProvider: IEncryptionProvider = {\n  encrypt: (value: string) => new EncryptedValue(value),\n};\n\nexport const createFactory = (options?: Partial<SecureConfig>): ISecureFactory => {\n  const config: SecureConfig = {\n    secret: options?.secret ?? null,\n    encryptionProvider: options?.encryptionProvider ?? defaultEncryptionProvider,\n    secretKeys: options?.secretKeys ?? defaultSecureKeys,\n  };\n\n  return {\n    string: SecureString.factory(config),\n    connectionString: SecureConnectionString.factory(config),\n    url: SecureURL.factory(config),\n  };\n};\n"]}

package/dist/index.d.cts

@@ -1,33 +1,14 @@
 import util, { InspectOptions } from 'node:util';
 
-declare class SecureString extends BaseObject {
-    #private;
-    get secretValue(): string;
-    private constructor();
-    static factory(secret: string | undefined): (value: string) => SecureString;
-    static from<T extends string | null | undefined>(value: T, secret?: string): T extends string ? SecureString : T;
+declare class EncryptedValue {
+    private readonly encryptedData;
+    private readonly iv;
+    private readonly authTag;
+    private readonly key;
+    constructor(value: string);
+    getValue(): string;
     toString(): string;
-    toJSON(): string;
-    [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
-}
-
-type UrlObject = {
-    href: string;
-    password?: string;
-    searchParams?: Record<string, string>;
-};
-/**
- * SecureURL obfuscates the password from the URL.
- */
-declare class SecureURL extends BaseObject {
-    #private;
-    get secretValue(): URL;
-    private constructor();
-    static factory(secret: string | undefined): (value: URL) => SecureURL;
-    static from<T extends URL | null | undefined>(value: T, secret?: string): T extends URL ? SecureURL : T;
-    toString(): string;
-    toJSON(): UrlObject;
-    [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    toJSON(): object;
 }
 
 type InspectFunction = typeof util.inspect;
@@ -36,27 +17,47 @@ declare abstract class BaseObject {
     abstract toJSON(): string | object;
     abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
 }
-type SecureFactory = {
-    string: (value: string) => SecureString;
-    connectionString: (value: string, secretKeys?: readonly string[]) => SecureConnectionString;
-    url: (value: URL) => SecureURL;
-};
 type SecureKeys = readonly string[];
-
-declare class SecureConnectionString extends BaseObject {
-    #private;
-    get secretValue(): string;
-    private constructor();
-    private parseConnectionString;
-    static factory(secret: string | undefined, secretKeys?: SecureKeys): (value: string) => SecureConnectionString;
-    static from<T extends string | null | undefined>(value: T, secretKeys?: SecureKeys, secret?: string): T extends string ? SecureConnectionString : T;
+interface IEncryptedValue {
+    getValue(): string;
     toString(): string;
     toJSON(): object;
-    [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+}
+interface IEncryptionProvider {
+    encrypt(value: string): IEncryptedValue;
+}
+interface SecureConfig {
+    secret: string | null;
+    encryptionProvider: IEncryptionProvider;
+    secretKeys: SecureKeys;
+}
+
+declare abstract class ISecureString implements BaseObject {
+    abstract toString(): string;
+    abstract toJSON(): string | object;
+    abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    abstract get secretValue(): string;
+}
+declare abstract class ISecureConnectionString implements BaseObject {
+    abstract toString(): string;
+    abstract toJSON(): string | object;
+    abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    abstract get secretValue(): string;
+}
+declare abstract class ISecureURL implements BaseObject {
+    abstract toString(): string;
+    abstract toJSON(): object;
+    abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    abstract get secretValue(): URL;
+}
+declare abstract class ISecureFactory {
+    abstract string(value: string): ISecureString;
+    abstract connectionString(value: string, secretKeys?: readonly string[]): ISecureConnectionString;
+    abstract url(value: URL): ISecureURL;
 }
 
-declare const createFactory: (secret?: string) => SecureFactory;
+declare const createFactory: (options?: Partial<SecureConfig>) => ISecureFactory;
 
 declare const defaultSecureKeys: readonly ["AccessKey", "SharedAccessKey", "Password", "AccountKey", "Secret", "SecretKey", "ApiKey", "Token", "Key", "MasterKey", "PrimaryKey", "SecondaryKey"];
 
-export { SecureConnectionString, SecureString, SecureURL, createFactory, defaultSecureKeys };
+export { EncryptedValue, ISecureConnectionString, ISecureString, ISecureURL, createFactory, defaultSecureKeys };

package/dist/index.d.ts

@@ -1,33 +1,14 @@
 import util, { InspectOptions } from 'node:util';
 
-declare class SecureString extends BaseObject {
-    #private;
-    get secretValue(): string;
-    private constructor();
-    static factory(secret: string | undefined): (value: string) => SecureString;
-    static from<T extends string | null | undefined>(value: T, secret?: string): T extends string ? SecureString : T;
+declare class EncryptedValue {
+    private readonly encryptedData;
+    private readonly iv;
+    private readonly authTag;
+    private readonly key;
+    constructor(value: string);
+    getValue(): string;
     toString(): string;
-    toJSON(): string;
-    [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
-}
-
-type UrlObject = {
-    href: string;
-    password?: string;
-    searchParams?: Record<string, string>;
-};
-/**
- * SecureURL obfuscates the password from the URL.
- */
-declare class SecureURL extends BaseObject {
-    #private;
-    get secretValue(): URL;
-    private constructor();
-    static factory(secret: string | undefined): (value: URL) => SecureURL;
-    static from<T extends URL | null | undefined>(value: T, secret?: string): T extends URL ? SecureURL : T;
-    toString(): string;
-    toJSON(): UrlObject;
-    [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    toJSON(): object;
 }
 
 type InspectFunction = typeof util.inspect;
@@ -36,27 +17,47 @@ declare abstract class BaseObject {
     abstract toJSON(): string | object;
     abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
 }
-type SecureFactory = {
-    string: (value: string) => SecureString;
-    connectionString: (value: string, secretKeys?: readonly string[]) => SecureConnectionString;
-    url: (value: URL) => SecureURL;
-};
 type SecureKeys = readonly string[];
-
-declare class SecureConnectionString extends BaseObject {
-    #private;
-    get secretValue(): string;
-    private constructor();
-    private parseConnectionString;
-    static factory(secret: string | undefined, secretKeys?: SecureKeys): (value: string) => SecureConnectionString;
-    static from<T extends string | null | undefined>(value: T, secretKeys?: SecureKeys, secret?: string): T extends string ? SecureConnectionString : T;
+interface IEncryptedValue {
+    getValue(): string;
     toString(): string;
     toJSON(): object;
-    [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+}
+interface IEncryptionProvider {
+    encrypt(value: string): IEncryptedValue;
+}
+interface SecureConfig {
+    secret: string | null;
+    encryptionProvider: IEncryptionProvider;
+    secretKeys: SecureKeys;
+}
+
+declare abstract class ISecureString implements BaseObject {
+    abstract toString(): string;
+    abstract toJSON(): string | object;
+    abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    abstract get secretValue(): string;
+}
+declare abstract class ISecureConnectionString implements BaseObject {
+    abstract toString(): string;
+    abstract toJSON(): string | object;
+    abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    abstract get secretValue(): string;
+}
+declare abstract class ISecureURL implements BaseObject {
+    abstract toString(): string;
+    abstract toJSON(): object;
+    abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;
+    abstract get secretValue(): URL;
+}
+declare abstract class ISecureFactory {
+    abstract string(value: string): ISecureString;
+    abstract connectionString(value: string, secretKeys?: readonly string[]): ISecureConnectionString;
+    abstract url(value: URL): ISecureURL;
 }
 
-declare const createFactory: (secret?: string) => SecureFactory;
+declare const createFactory: (options?: Partial<SecureConfig>) => ISecureFactory;
 
 declare const defaultSecureKeys: readonly ["AccessKey", "SharedAccessKey", "Password", "AccountKey", "Secret", "SecretKey", "ApiKey", "Token", "Key", "MasterKey", "PrimaryKey", "SecondaryKey"];
 
-export { SecureConnectionString, SecureString, SecureURL, createFactory, defaultSecureKeys };
+export { EncryptedValue, ISecureConnectionString, ISecureString, ISecureURL, createFactory, defaultSecureKeys };

package/dist/index.js

@@ -1 +1 @@
-import t from"node:util";import{createHash as e,createHmac as r}from"node:crypto";var s=Object.defineProperty,n=(t,e)=>s(t,"name",{value:e,configurable:!0}),a={sha256:n((()=>({hash:n((t=>e("sha256").update(t).digest("hex")),"hash"),prefix:"sha256"})),"sha256"),hs256:n((t=>({hash:n((e=>r("sha256",t).update(e).digest("hex")),"hash"),prefix:"hs256"})),"hs256")},o=n((t=>void 0===t?a.sha256():a.hs256(t)),"getAlgorithm"),i=n(((t,e)=>{const r=o(e),s=r.hash(t);return`${r.prefix}:${s}`}),"hash"),c=class{static{n(this,"BaseObject")}},h=class e extends c{static{n(this,"SecureString")}#t;#e;get secretValue(){return this.#t}constructor(t,e){super(),this.#t=t,this.#e=i(t,e)}static factory(t){return r=>e.from(r,t)}static from(t,r){return null===t?null:void 0!==t?new e(t,r):void 0}toString(){return this.#e}toJSON(){return this.toString()}[t.inspect.custom](t,e,r){if(t<0)return"[SecureString]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},u=["AccessKey","SharedAccessKey","Password","AccountKey","Secret","SecretKey","ApiKey","Token","Key","MasterKey","PrimaryKey","SecondaryKey"],l=class e extends c{static{n(this,"SecureConnectionString")}#t;#r;get secretValue(){return this.#t}constructor(t,e,r){super(),this.#t=t,this.#r=this.parseConnectionString(t,e.map((t=>t.toLocaleLowerCase())),r)}parseConnectionString(t,e,r){return t.split(";").filter(Boolean).map((t=>{const[s,n]=t.split("="),a=n??"",o=e.includes(s.toLocaleLowerCase())?h.from(a,r):a;return[s,o]}))}static factory(t,r){return s=>e.from(s,r,t)}static from(t,r,s){return null===t?null:void 0!==t?new e(t,r??u,s):void 0}toString(){return this.#r.map((([t,e])=>`${t}=${e}`)).join(";")}toJSON(){return Object.fromEntries(this.#r)}[t.inspect.custom](t,e,r){if(t<0)return"[SecureConnectionString]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},d=class e extends c{static{n(this,"SecureURL")}#t;#s;get secretValue(){return this.#t}constructor(t,e){super(),this.#t=t,this.#s=h.from(t.password||null,e)}static factory(t){return r=>e.from(r,t)}static from(t,r){return null===t?null:void 0!==t?new e(t,r):void 0}toString(){const t=new URL(this.#t.href);return null!==this.#s&&(t.password=this.#s.toString()),t.href}toJSON(){const t=new URL(this.#t.href);t.password="";const e=new URLSearchParams(t.searchParams);let r;t.search="",null!==this.#s&&(r=this.#s.toString());const s={href:t.href};return void 0!==r&&(s.password=r),e.size>0&&(s.searchParams=Object.fromEntries(e)),s}[t.inspect.custom](t,e,r){if(t<0)return"[SecureURL]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},p=n((t=>({string:h.factory(t),connectionString:l.factory(t),url:d.factory(t)})),"createFactory");export{l as SecureConnectionString,h as SecureString,d as SecureURL,p as createFactory,u as defaultSecureKeys};//# sourceMappingURL=index.js.map
+import{randomBytes as t,createCipheriv as e,createDecipheriv as r,createHash as s,createHmac as n}from"node:crypto";import a from"node:util";var c=Object.defineProperty,i=(t,e)=>c(t,"name",{value:e,configurable:!0}),o=class{static{i(this,"EncryptedValue")}encryptedData;iv;authTag;key;constructor(r){this.key=t(32),this.iv=t(16);const s=e("aes-256-gcm",this.key,this.iv),n=[];n.push(s.update(r,"utf8")),n.push(s.final()),this.encryptedData=Buffer.concat(n),this.authTag=s.getAuthTag()}getValue(){const t=r("aes-256-gcm",this.key,this.iv);t.setAuthTag(this.authTag);try{const e=[];return e.push(t.update(this.encryptedData)),e.push(t.final()),Buffer.concat(e).toString("utf8")}catch(t){throw new Error("Failed to decrypt value: Invalid key or corrupted data")}}toString(){return"[EncryptedValue]"}toJSON(){return{type:"EncryptedValue",encrypted:!0}}},u={sha256:i((()=>({hash:i((t=>s("sha256").update(t).digest("hex")),"hash"),prefix:"sha256"})),"sha256"),hs256:i((t=>({hash:i((e=>n("sha256",t).update(e).digest("hex")),"hash"),prefix:"hs256"})),"hs256")},h=i((t=>null==t?u.sha256():u.hs256(t)),"getAlgorithm"),l=i(((t,e)=>{const r=h(e),s=r.hash(t);return`${r.prefix}:${s}`}),"hash"),p=class{static{i(this,"ISecureString")}},d=class{static{i(this,"ISecureConnectionString")}},y=class{static{i(this,"ISecureURL")}},f=class t extends p{static{i(this,"SecureString")}#t;#e;get secretValue(){return this.#t.getValue()}constructor(t,e){super(),this.#t=e.encryptionProvider.encrypt(t),this.#e=l(t,e.secret)}static factory(e){return r=>t.from(r,e)}static from(e,r){return null===e?null:void 0!==e?new t(e,r):void 0}toString(){return this.#e}toJSON(){return this.toString()}[a.inspect.custom](t,e,r){if(t<0)return"[SecureString]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},g=class t extends d{static{i(this,"SecureConnectionString")}#t;#r;get secretValue(){return this.#t.getValue()}constructor(t,e){super(),this.#t=e.encryptionProvider.encrypt(t),this.#r=this.parseConnectionString(t,e.secretKeys.map((t=>t.toLocaleLowerCase())),e)}parseConnectionString(t,e,r){return t.split(";").filter(Boolean).map((t=>{const[s,n]=t.split("="),a=n??"",c=e.includes(s.toLocaleLowerCase())?f.from(a,r):a;return[s,c]}))}static factory(e){return r=>t.from(r,e)}static from(e,r){return null===e?null:void 0!==e?new t(e,r):void 0}toString(){return this.#r.map((([t,e])=>`${t}=${e}`)).join(";")}toJSON(){return Object.fromEntries(this.#r)}[a.inspect.custom](t,e,r){if(t<0)return"[SecureConnectionString]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},S=class t extends y{static{i(this,"SecureURL")}#t;#s;get secretValue(){return new URL(this.#t.getValue())}constructor(t,e){super(),this.#t=e.encryptionProvider.encrypt(t.href),this.#s=f.from(t.password||null,e)}static factory(e){return r=>t.from(r,e)}static from(e,r){return null===e?null:void 0!==e?new t(e,r):void 0}toString(){const t=this.secretValue,e=new URL(t.href);return null!==this.#s&&(e.password=this.#s.toString()),e.href}toJSON(){const t=this.secretValue,e=new URL(t.href);e.password="";const r=new URLSearchParams(e.searchParams);let s;e.search="",null!==this.#s&&(s=this.#s.toString());const n={href:e.href};return void 0!==s&&(n.password=s),r.size>0&&(n.searchParams=Object.fromEntries(r)),n}[a.inspect.custom](t,e,r){if(t<0)return"[SecureURL]";const s=Object.assign({},e,{depth:null==e.depth?null:e.depth-1});return r(this.toJSON(),s)}},m=["AccessKey","SharedAccessKey","Password","AccountKey","Secret","SecretKey","ApiKey","Token","Key","MasterKey","PrimaryKey","SecondaryKey"],w={encrypt:i((t=>new o(t)),"encrypt")},V=i((t=>{const e={secret:t?.secret??null,encryptionProvider:t?.encryptionProvider??w,secretKeys:t?.secretKeys??m};return{string:f.factory(e),connectionString:g.factory(e),url:S.factory(e)}}),"createFactory");export{o as EncryptedValue,d as ISecureConnectionString,p as ISecureString,y as ISecureURL,V as createFactory,m as defaultSecureKeys};//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hash.ts","../src/types.ts","../src/SecureString.ts","../src/defaults.ts","../src/SecureConnectionString.ts","../src/SecureURL.ts","../src/createFactory.ts"],"names":["hash","value","util"],"mappings":";;AAOA,IAAM,UAAa,GAAA;AAAA,EACjB,wBAAe,MAAA,CAAA,OAAA;AAAA,IACb,IAAA,kBAAO,MAAA,CAAA,CAAA,CAAA,KAAc,UAAW,CAAA,QAAQ,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAA1D,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFF,CAAA,EAAA,QAAA,CAAA;AAAA,EAIR,KAAA,0BAAQ,MAAoB,MAAA;AAAA,IAC1B,IAAM,kBAAA,MAAA,CAAA,CAAC,CAAc,KAAA,UAAA,CAAW,QAAU,EAAA,MAAM,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAAlE,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFH,CAAA,EAAA,OAAA;AAIT,CAAA;AAEA,IAAM,YAAA,2BAAgB,MAAmC,KAAA;AACvD,EAAA,OAAO,WAAW,SAAY,GAAA,UAAA,CAAW,QAAW,GAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AAC7E,CAFqB,EAAA,cAAA,CAAA;AAId,IAAM,IAAA,mBAAQ,MAAA,CAAA,CAAA,KAAA,EAAe,MAAoB,KAAA;AACtD,EAAM,MAAA,GAAA,GAAM,aAAa,MAAM,CAAA;AAC/B,EAAMA,MAAAA,KAAAA,GAAO,GAAI,CAAA,IAAA,CAAK,KAAK,CAAA;AAC3B,EAAA,OAAO,CAAG,EAAA,GAAA,CAAI,MAAM,CAAA,CAAA,EAAIA,KAAI,CAAA,CAAA;AAC9B,CAJoB,EAAA,MAAA,CAAA;;;ACfb,IAAe,aAAf,MAA0B;AAAA,EAPjC;AAOiC,IAAA,MAAA,CAAA,IAAA,EAAA,YAAA,CAAA;AAAA;AAIjC,CAAA;;;ACPa,IAAA,YAAA,GAAN,MAAM,aAAA,SAAqB,UAAW,CAAA;AAAA,EAJ7C;AAI6C,IAAA,MAAA,CAAA,IAAA,EAAA,cAAA,CAAA;AAAA;AAAA,EAClC,MAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AACd,EAEQ,WAAA,CAAY,OAAe,MAAiB,EAAA;AAClD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,MAAS,GAAA,KAAA;AACd,IAAK,IAAA,CAAA,KAAA,GAAQ,IAAK,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACjC,EAEA,OAAO,QAAQ,MAA6D,EAAA;AAC1E,IAAA,OAAO,CAAC,KAAA,KAAkB,aAAa,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AAC3D,EAEA,OAAc,IAA0C,CAAA,KAAA,EAAU,MAAsD,EAAA;AACtH,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,aAAa,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACvC,EAEgB,QAAW,GAAA;AACzB,IAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AACd,EACgB,MAAS,GAAA;AACvB,IAAA,OAAO,KAAK,QAAS,EAAA;AAAA;AACvB,EACA,CAAU,IAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,gBAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C;;;AC7CO,IAAM,iBAAoB,GAAA,CAAC,WAAa,EAAA,iBAAA,EAAmB,UAAY,EAAA,YAAA,EAAc,QAAU,EAAA,WAAA,EAAa,QAAU,EAAA,OAAA,EAAS,KAAO,EAAA,WAAA,EAAa,cAAc,cAAc;;;ACGzK,IAAA,sBAAA,GAAN,MAAM,uBAAA,SAA+B,UAAW,CAAA;AAAA,EALvD;AAKuD,IAAA,MAAA,CAAA,IAAA,EAAA,wBAAA,CAAA;AAAA;AAAA,EAC5C,MAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AACd,EAEQ,WAAA,CAAY,KAAe,EAAA,UAAA,EAAwB,MAA4B,EAAA;AACrF,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,MAAS,GAAA,KAAA;AACd,IAAA,IAAA,CAAK,QAAQ,IAAK,CAAA,qBAAA;AAAA,MAChB,KAAA;AAAA,MACA,WAAW,GAAI,CAAA,CAAC,CAAM,KAAA,CAAA,CAAE,mBAAmB,CAAA;AAAA,MAC3C;AAAA,KACF;AAAA;AACF,EAEQ,qBAAA,CAAsB,KAAe,EAAA,UAAA,EAAwB,MAA+D,EAAA;AAClI,IAAO,OAAA,KAAA,CACJ,MAAM,GAAG,CAAA,CACT,OAAO,OAAO,CAAA,CACd,GAAI,CAAA,CAAC,IAAS,KAAA;AACb,MAAA,MAAM,CAAC,GAAKC,EAAAA,MAAK,CAAI,GAAA,IAAA,CAAK,MAAM,GAAG,CAAA;AACnC,MAAA,MAAM,IAAIA,MAAS,IAAA,EAAA;AACnB,MAAM,MAAA,GAAA,GAAM,UAAW,CAAA,QAAA,CAAS,GAAI,CAAA,iBAAA,EAAmB,CAAA,GAAI,YAAa,CAAA,IAAA,CAAK,CAAG,EAAA,MAAM,CAAI,GAAA,CAAA;AAC1F,MAAO,OAAA,CAAC,KAAK,GAAG,CAAA;AAAA,KACjB,CAAA;AAAA;AACL,EAEA,OAAO,OAAQ,CAAA,MAAA,EAA4B,UAAoE,EAAA;AAC7G,IAAA,OAAO,CAAC,KAAkB,KAAA,uBAAA,CAAuB,IAAK,CAAA,KAAA,EAAO,YAAY,MAAM,CAAA;AAAA;AACjF,EAEA,OAAc,IAAA,CAA0C,KAAU,EAAA,UAAA,EAAyB,MAAgE,EAAA;AACzJ,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAA,OAAO,IAAI,uBAAA,CAAuB,KAAO,EAAA,UAAA,IAAc,mBAAmB,MAAM,CAAA;AAAA;AAClF,EAEgB,QAAmB,GAAA;AACjC,IAAA,OAAO,IAAK,CAAA,KAAA,CAAM,GAAI,CAAA,CAAC,CAAC,GAAK,EAAA,KAAK,CAAM,KAAA,CAAA,EAAG,GAAG,CAAI,CAAA,EAAA,KAAK,CAAE,CAAA,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA;AACrE,EAEgB,MAAiB,GAAA;AAC/B,IAAO,OAAA,MAAA,CAAO,WAAY,CAAA,IAAA,CAAK,KAAK,CAAA;AAAA;AACtC,EAEA,CAAiBC,IAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AAC9G,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,0BAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C;ACrDa,IAAA,SAAA,GAAN,MAAM,UAAA,SAAkB,UAAW,CAAA;AAAA,EAb1C;AAa0C,IAAA,MAAA,CAAA,IAAA,EAAA,WAAA,CAAA;AAAA;AAAA,EAC/B,MAAA;AAAA,EACA,SAAA;AAAA,EAET,IAAW,WAAmB,GAAA;AAC5B,IAAA,OAAO,IAAK,CAAA,MAAA;AAAA;AACd,EAEQ,WAAA,CAAY,OAAY,MAA4B,EAAA;AAC1D,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,MAAS,GAAA,KAAA;AACd,IAAA,IAAA,CAAK,YAAY,YAAa,CAAA,IAAA,CAAK,KAAM,CAAA,QAAA,IAAY,MAAM,MAAM,CAAA;AAAA;AACnE,EAEA,OAAO,QAAQ,MAAuD,EAAA;AACpE,IAAA,OAAO,CAAC,KAAA,KAAe,UAAU,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AACrD,EAEA,OAAc,IAAuC,CAAA,KAAA,EAAU,MAAgD,EAAA;AAC7G,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,UAAU,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACpC,EAES,QAAmB,GAAA;AAC1B,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AACvC,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAO,MAAA,CAAA,QAAA,GAAW,IAAK,CAAA,SAAA,CAAU,QAAS,EAAA;AAAA;AAE5C,IAAA,OAAO,MAAO,CAAA,IAAA;AAAA;AAChB,EAES,MAAoB,GAAA;AAC3B,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,IAAA,CAAK,OAAO,IAAI,CAAA;AACvC,IAAA,MAAA,CAAO,QAAW,GAAA,EAAA;AAElB,IAAA,MAAM,YAAe,GAAA,IAAI,eAAgB,CAAA,MAAA,CAAO,YAAY,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAS,GAAA,EAAA;AAEhB,IAAI,IAAA,QAAA;AACJ,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAW,QAAA,GAAA,IAAA,CAAK,UAAU,QAAS,EAAA;AAAA;AAGrC,IAAA,MAAM,MAAoB,GAAA;AAAA,MACxB,MAAM,MAAO,CAAA;AAAA,KACf;AACA,IAAA,IAAI,aAAa,SAAW,EAAA;AAC1B,MAAA,MAAA,CAAO,QAAW,GAAA,QAAA;AAAA;AAEpB,IAAI,IAAA,YAAA,CAAa,OAAO,CAAG,EAAA;AACzB,MAAO,MAAA,CAAA,YAAA,GAAe,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA;AAAA;AAEvD,IAAO,OAAA,MAAA;AAAA;AACT,EACA,CAAUA,IAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,aAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C;;;AC5Ea,IAAA,aAAA,2BAAiB,MAAmC,KAAA;AAC/D,EAAO,OAAA;AAAA,IACL,MAAA,EAAQ,YAAa,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACnC,gBAAA,EAAkB,sBAAuB,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACvD,GAAA,EAAK,SAAU,CAAA,OAAA,CAAQ,MAAM;AAAA,GAC/B;AACF,CAN6B,EAAA,eAAA","file":"index.js","sourcesContent":["import { createHash, createHmac } from 'node:crypto';\n\ntype HashAlgorithm = {\n  hash: (x: string) => string;\n  prefix: string;\n};\n\nconst algorithms = {\n  sha256: () => ({\n    hash: (x: string) => createHash('sha256').update(x).digest('hex'),\n    prefix: 'sha256',\n  }),\n  hs256: (secret: string) => ({\n    hash: (x: string) => createHmac('sha256', secret).update(x).digest('hex'),\n    prefix: 'hs256',\n  }),\n} as const;\n\nconst getAlgorithm = (secret?: string): HashAlgorithm => {\n  return secret === undefined ? algorithms.sha256() : algorithms.hs256(secret);\n};\n\nexport const hash = (input: string, secret?: string) => {\n  const alg = getAlgorithm(secret);\n  const hash = alg.hash(input);\n  return `${alg.prefix}:${hash}`;\n};\n","import util, { type InspectOptions } from 'node:util';\nimport type { SecureConnectionString } from './SecureConnectionString';\nimport type { SecureString } from './SecureString';\nimport type { SecureURL } from './SecureURL';\n\nexport type InspectFunction = typeof util.inspect;\n\nexport abstract class BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): string | object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n}\n\nexport type SecureFactory = {\n  string: (value: string) => SecureString;\n  connectionString: (value: string, secretKeys?: readonly string[]) => SecureConnectionString;\n  url: (value: URL) => SecureURL;\n};\n\nexport type SecureKeys = readonly string[];\n","import util, { type InspectOptions } from 'node:util';\nimport { hash } from './hash';\nimport { BaseObject, type InspectFunction } from './types';\n\nexport class SecureString extends BaseObject {\n  readonly #value: string;\n  readonly #hash: string;\n\n  public get secretValue(): string {\n    return this.#value;\n  }\n\n  private constructor(value: string, secret?: string) {\n    super();\n    this.#value = value;\n    this.#hash = hash(value, secret);\n  }\n\n  static factory(secret: string | undefined): (value: string) => SecureString {\n    return (value: string) => SecureString.from(value, secret);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, secret?: string): T extends string ? SecureString : T {\n    if (value === null) {\n      return null as T extends string ? SecureString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureString : T;\n    }\n    return new SecureString(value, secret) as T extends string ? SecureString : T;\n  }\n\n  public override toString() {\n    return this.#hash;\n  }\n  public override toJSON() {\n    return this.toString();\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import type { SecureKeys } from './types';\n\nexport const defaultSecureKeys = ['AccessKey', 'SharedAccessKey', 'Password', 'AccountKey', 'Secret', 'SecretKey', 'ApiKey', 'Token', 'Key', 'MasterKey', 'PrimaryKey', 'SecondaryKey'] as const satisfies SecureKeys;\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { defaultSecureKeys } from './defaults';\nimport { BaseObject, type InspectFunction, type SecureKeys } from './types';\n\nexport class SecureConnectionString extends BaseObject {\n  readonly #value: string;\n  readonly #data: [string, string | SecureString][];\n\n  public get secretValue(): string {\n    return this.#value;\n  }\n\n  private constructor(value: string, secretKeys: SecureKeys, secret: string | undefined) {\n    super();\n    this.#value = value;\n    this.#data = this.parseConnectionString(\n      value,\n      secretKeys.map((x) => x.toLocaleLowerCase()),\n      secret,\n    );\n  }\n\n  private parseConnectionString(value: string, secretKeys: SecureKeys, secret: string | undefined): [string, string | SecureString][] {\n    return value\n      .split(';')\n      .filter(Boolean)\n      .map((pair) => {\n        const [key, value] = pair.split('=');\n        const v = value ?? '';\n        const val = secretKeys.includes(key.toLocaleLowerCase()) ? SecureString.from(v, secret) : v;\n        return [key, val];\n      });\n  }\n\n  static factory(secret: string | undefined, secretKeys?: SecureKeys): (value: string) => SecureConnectionString {\n    return (value: string) => SecureConnectionString.from(value, secretKeys, secret);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, secretKeys?: SecureKeys, secret?: string): T extends string ? SecureConnectionString : T {\n    if (value === null) {\n      return null as T extends string ? SecureConnectionString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureConnectionString : T;\n    }\n    return new SecureConnectionString(value, secretKeys ?? defaultSecureKeys, secret) as T extends string ? SecureConnectionString : T;\n  }\n\n  public override toString(): string {\n    return this.#data.map(([key, value]) => `${key}=${value}`).join(';');\n  }\n\n  public override toJSON(): object {\n    return Object.fromEntries(this.#data);\n  }\n\n  public override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureConnectionString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { BaseObject, type InspectFunction } from './types';\n\ntype UrlObject = {\n  href: string;\n  password?: string;\n  searchParams?: Record<string, string>;\n};\n\n/**\n * SecureURL obfuscates the password from the URL.\n */\nexport class SecureURL extends BaseObject {\n  readonly #value: URL;\n  readonly #password: SecureString | null;\n\n  public get secretValue(): URL {\n    return this.#value;\n  }\n\n  private constructor(value: URL, secret: string | undefined) {\n    super();\n    this.#value = value;\n    this.#password = SecureString.from(value.password || null, secret);\n  }\n\n  static factory(secret: string | undefined): (value: URL) => SecureURL {\n    return (value: URL) => SecureURL.from(value, secret);\n  }\n\n  public static from<T extends URL | null | undefined>(value: T, secret?: string): T extends URL ? SecureURL : T {\n    if (value === null) {\n      return null as T extends URL ? SecureURL : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends URL ? SecureURL : T;\n    }\n    return new SecureURL(value, secret) as T extends URL ? SecureURL : T;\n  }\n\n  override toString(): string {\n    const newUrl = new URL(this.#value.href);\n    if (this.#password !== null) {\n      newUrl.password = this.#password.toString();\n    }\n    return newUrl.href;\n  }\n\n  override toJSON(): UrlObject {\n    const newUrl = new URL(this.#value.href);\n    newUrl.password = '';\n\n    const searchParams = new URLSearchParams(newUrl.searchParams);\n    newUrl.search = '';\n\n    let password: string | undefined;\n    if (this.#password !== null) {\n      password = this.#password.toString();\n    }\n\n    const result: UrlObject = {\n      href: newUrl.href,\n    };\n    if (password !== undefined) {\n      result.password = password;\n    }\n    if (searchParams.size > 0) {\n      result.searchParams = Object.fromEntries(searchParams);\n    }\n    return result;\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureURL]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import { SecureConnectionString } from './SecureConnectionString';\nimport { SecureString } from './SecureString';\nimport { SecureURL } from './SecureURL';\nimport type { SecureFactory } from './types';\n\nexport const createFactory = (secret?: string): SecureFactory => {\n  return {\n    string: SecureString.factory(secret),\n    connectionString: SecureConnectionString.factory(secret),\n    url: SecureURL.factory(secret),\n  };\n};\n"]}
+{"version":3,"sources":["../src/EncryptedValue.ts","../src/hash.ts","../src/interfaces.ts","../src/SecureString.ts","../src/SecureConnectionString.ts","../src/SecureURL.ts","../src/defaults.ts","../src/createFactory.ts"],"names":["hash","value","util"],"mappings":";;AAEO,IAAM,iBAAN,MAAqB;AAAA,EAF5B;AAE4B,IAAA,MAAA,CAAA,IAAA,EAAA,gBAAA,CAAA;AAAA;AAAA,EACT,aAAA;AAAA,EACA,EAAA;AAAA,EACA,OAAA;AAAA,EACA,GAAA;AAAA,EAEV,YAAY,KAAe,EAAA;AAChC,IAAK,IAAA,CAAA,GAAA,GAAM,YAAY,EAAE,CAAA;AACzB,IAAK,IAAA,CAAA,EAAA,GAAK,YAAY,EAAE,CAAA;AAExB,IAAA,MAAM,SAAS,cAAe,CAAA,aAAA,EAAe,IAAK,CAAA,GAAA,EAAK,KAAK,EAAE,CAAA;AAE9D,IAAA,MAAM,kBAA4B,EAAC;AACnC,IAAA,eAAA,CAAgB,IAAK,CAAA,MAAA,CAAO,MAAO,CAAA,KAAA,EAAO,MAAM,CAAC,CAAA;AACjD,IAAgB,eAAA,CAAA,IAAA,CAAK,MAAO,CAAA,KAAA,EAAO,CAAA;AAEnC,IAAK,IAAA,CAAA,aAAA,GAAgB,MAAO,CAAA,MAAA,CAAO,eAAe,CAAA;AAClD,IAAK,IAAA,CAAA,OAAA,GAAU,OAAO,UAAW,EAAA;AAAA;AACnC,EAEO,QAAmB,GAAA;AACxB,IAAA,MAAM,WAAW,gBAAiB,CAAA,aAAA,EAAe,IAAK,CAAA,GAAA,EAAK,KAAK,EAAE,CAAA;AAClE,IAAS,QAAA,CAAA,UAAA,CAAW,KAAK,OAAO,CAAA;AAEhC,IAAI,IAAA;AACF,MAAA,MAAM,kBAA4B,EAAC;AACnC,MAAA,eAAA,CAAgB,IAAK,CAAA,QAAA,CAAS,MAAO,CAAA,IAAA,CAAK,aAAa,CAAC,CAAA;AACxD,MAAgB,eAAA,CAAA,IAAA,CAAK,QAAS,CAAA,KAAA,EAAO,CAAA;AAErC,MAAA,OAAO,MAAO,CAAA,MAAA,CAAO,eAAe,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,aAC9C,CAAG,EAAA;AAEV,MAAM,MAAA,IAAI,MAAM,wDAAwD,CAAA;AAAA;AAC1E;AACF,EAEO,QAAmB,GAAA;AACxB,IAAO,OAAA,kBAAA;AAAA;AACT,EAEO,MAAiB,GAAA;AACtB,IAAA,OAAO,EAAE,IAAA,EAAM,gBAAkB,EAAA,SAAA,EAAW,IAAK,EAAA;AAAA;AAErD;ACtCA,IAAM,UAAa,GAAA;AAAA,EACjB,wBAAe,MAAA,CAAA,OAAA;AAAA,IACb,IAAA,kBAAO,MAAA,CAAA,CAAA,CAAA,KAAc,UAAW,CAAA,QAAQ,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAA1D,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFF,CAAA,EAAA,QAAA,CAAA;AAAA,EAIR,KAAA,0BAAQ,MAAoB,MAAA;AAAA,IAC1B,IAAM,kBAAA,MAAA,CAAA,CAAC,CAAc,KAAA,UAAA,CAAW,QAAU,EAAA,MAAM,CAAE,CAAA,MAAA,CAAO,CAAC,CAAA,CAAE,MAAO,CAAA,KAAK,CAAlE,EAAA,MAAA,CAAA;AAAA,IACN,MAAQ,EAAA;AAAA,GAFH,CAAA,EAAA,OAAA;AAIT,CAAA;AAEA,IAAM,YAAA,2BAAgB,MAAyC,KAAA;AAC7D,EAAA,OAAO,UAAU,IAAO,GAAA,UAAA,CAAW,QAAW,GAAA,UAAA,CAAW,MAAM,MAAM,CAAA;AACvE,CAFqB,EAAA,cAAA,CAAA;AAId,IAAM,IAAA,mBAAQ,MAAA,CAAA,CAAA,KAAA,EAAe,MAA0B,KAAA;AAC5D,EAAM,MAAA,GAAA,GAAM,aAAa,MAAM,CAAA;AAC/B,EAAMA,MAAAA,KAAAA,GAAO,GAAI,CAAA,IAAA,CAAK,KAAK,CAAA;AAC3B,EAAA,OAAO,CAAG,EAAA,GAAA,CAAI,MAAM,CAAA,CAAA,EAAIA,KAAI,CAAA,CAAA;AAC9B,CAJoB,EAAA,MAAA,CAAA;;;ACnBb,IAAe,gBAAf,MAAmD;AAAA,EAH1D;AAG0D,IAAA,MAAA,CAAA,IAAA,EAAA,eAAA,CAAA;AAAA;AAK1D;AAEO,IAAe,0BAAf,MAA6D;AAAA,EAVpE;AAUoE,IAAA,MAAA,CAAA,IAAA,EAAA,yBAAA,CAAA;AAAA;AAKpE;AAEO,IAAe,aAAf,MAAgD;AAAA,EAjBvD;AAiBuD,IAAA,MAAA,CAAA,IAAA,EAAA,YAAA,CAAA;AAAA;AAKvD;;;ACjBO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,aAAc,CAAA;AAAA,EALhD;AAKgD,IAAA,MAAA,CAAA,IAAA,EAAA,cAAA,CAAA;AAAA;AAAA,EACrC,eAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAO,OAAA,IAAA,CAAK,gBAAgB,QAAS,EAAA;AAAA;AACvC,EAEQ,WAAA,CAAY,OAAe,MAAsB,EAAA;AACvD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,eAAkB,GAAA,MAAA,CAAO,kBAAmB,CAAA,OAAA,CAAQ,KAAK,CAAA;AAC9D,IAAA,IAAA,CAAK,KAAQ,GAAA,IAAA,CAAK,KAAO,EAAA,MAAA,CAAO,MAAM,CAAA;AAAA;AACxC,EAEA,OAAO,QAAQ,MAAuD,EAAA;AACpE,IAAA,OAAO,CAAC,KAAA,KAAkB,aAAa,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AAC3D,EAEA,OAAc,IAA0C,CAAA,KAAA,EAAU,MAA2D,EAAA;AAC3H,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,aAAa,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACvC,EAEgB,QAAW,GAAA;AACzB,IAAA,OAAO,IAAK,CAAA,KAAA;AAAA;AACd,EACgB,MAAS,GAAA;AACvB,IAAA,OAAO,KAAK,QAAS,EAAA;AAAA;AACvB,EACA,CAAU,IAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,gBAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C,CAAA;;;AC3CO,IAAM,sBAAA,GAAN,MAAM,uBAAA,SAA+B,uBAAwB,CAAA;AAAA,EALpE;AAKoE,IAAA,MAAA,CAAA,IAAA,EAAA,wBAAA,CAAA;AAAA;AAAA,EACzD,eAAA;AAAA,EACA,KAAA;AAAA,EAET,IAAW,WAAsB,GAAA;AAC/B,IAAO,OAAA,IAAA,CAAK,gBAAgB,QAAS,EAAA;AAAA;AACvC,EAEQ,WAAA,CAAY,OAAe,MAAsB,EAAA;AACvD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,eAAkB,GAAA,MAAA,CAAO,kBAAmB,CAAA,OAAA,CAAQ,KAAK,CAAA;AAC9D,IAAA,IAAA,CAAK,QAAQ,IAAK,CAAA,qBAAA;AAAA,MAChB,KAAA;AAAA,MACA,OAAO,UAAW,CAAA,GAAA,CAAI,CAAC,CAAM,KAAA,CAAA,CAAE,mBAAmB,CAAA;AAAA,MAClD;AAAA,KACF;AAAA;AACF,EAEQ,qBAAA,CAAsB,KAAe,EAAA,UAAA,EAAwB,MAAyD,EAAA;AAC5H,IAAO,OAAA,KAAA,CACJ,MAAM,GAAG,CAAA,CACT,OAAO,OAAO,CAAA,CACd,GAAI,CAAA,CAAC,IAAS,KAAA;AACb,MAAA,MAAM,CAAC,GAAKC,EAAAA,MAAK,CAAI,GAAA,IAAA,CAAK,MAAM,GAAG,CAAA;AACnC,MAAA,MAAM,IAAIA,MAAS,IAAA,EAAA;AACnB,MAAM,MAAA,GAAA,GAAM,UAAW,CAAA,QAAA,CAAS,GAAI,CAAA,iBAAA,EAAmB,CAAA,GAAI,YAAa,CAAA,IAAA,CAAK,CAAG,EAAA,MAAM,CAAI,GAAA,CAAA;AAC1F,MAAO,OAAA,CAAC,KAAK,GAAG,CAAA;AAAA,KACjB,CAAA;AAAA;AACL,EAEA,OAAO,QAAQ,MAAiE,EAAA;AAC9E,IAAA,OAAO,CAAC,KAAA,KAAkB,uBAAuB,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AACrE,EAEA,OAAc,IAA0C,CAAA,KAAA,EAAU,MAAqE,EAAA;AACrI,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,uBAAuB,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACjD,EAEgB,QAAmB,GAAA;AACjC,IAAA,OAAO,IAAK,CAAA,KAAA,CAAM,GAAI,CAAA,CAAC,CAAC,GAAK,EAAA,KAAK,CAAM,KAAA,CAAA,EAAG,GAAG,CAAI,CAAA,EAAA,KAAK,CAAE,CAAA,CAAA,CAAE,KAAK,GAAG,CAAA;AAAA;AACrE,EAEgB,MAAiB,GAAA;AAC/B,IAAO,OAAA,MAAA,CAAO,WAAY,CAAA,IAAA,CAAK,KAAK,CAAA;AAAA;AACtC,EAEA,CAAiBC,IAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AAC9G,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,0BAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C,CAAA;ACvDO,IAAM,SAAA,GAAN,MAAM,UAAA,SAAkB,UAAW,CAAA;AAAA,EAX1C;AAW0C,IAAA,MAAA,CAAA,IAAA,EAAA,WAAA,CAAA;AAAA;AAAA,EAC/B,eAAA;AAAA,EACA,SAAA;AAAA,EAET,IAAW,WAAmB,GAAA;AAC5B,IAAA,OAAO,IAAI,GAAA,CAAI,IAAK,CAAA,eAAA,CAAgB,UAAU,CAAA;AAAA;AAChD,EAEQ,WAAA,CAAY,OAAY,MAAsB,EAAA;AACpD,IAAM,KAAA,EAAA;AACN,IAAA,IAAA,CAAK,eAAkB,GAAA,MAAA,CAAO,kBAAmB,CAAA,OAAA,CAAQ,MAAM,IAAI,CAAA;AACnE,IAAA,IAAA,CAAK,YAAY,YAAa,CAAA,IAAA,CAAK,KAAM,CAAA,QAAA,IAAY,MAAM,MAAM,CAAA;AAAA;AACnE,EAEA,OAAO,QAAQ,MAAkD,EAAA;AAC/D,IAAA,OAAO,CAAC,KAAA,KAAe,UAAU,CAAA,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA;AACrD,EAEA,OAAc,IAAuC,CAAA,KAAA,EAAU,MAAqD,EAAA;AAClH,IAAA,IAAI,UAAU,IAAM,EAAA;AAClB,MAAO,OAAA,IAAA;AAAA;AAET,IAAA,IAAI,UAAU,SAAW,EAAA;AACvB,MAAO,OAAA,SAAA;AAAA;AAET,IAAO,OAAA,IAAI,UAAU,CAAA,KAAA,EAAO,MAAM,CAAA;AAAA;AACpC,EAES,QAAmB,GAAA;AAC1B,IAAA,MAAM,cAAc,IAAK,CAAA,WAAA;AACzB,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,WAAA,CAAY,IAAI,CAAA;AACvC,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAO,MAAA,CAAA,QAAA,GAAW,IAAK,CAAA,SAAA,CAAU,QAAS,EAAA;AAAA;AAE5C,IAAA,OAAO,MAAO,CAAA,IAAA;AAAA;AAChB,EAES,MAAoB,GAAA;AAC3B,IAAA,MAAM,cAAc,IAAK,CAAA,WAAA;AACzB,IAAA,MAAM,MAAS,GAAA,IAAI,GAAI,CAAA,WAAA,CAAY,IAAI,CAAA;AACvC,IAAA,MAAA,CAAO,QAAW,GAAA,EAAA;AAElB,IAAA,MAAM,YAAe,GAAA,IAAI,eAAgB,CAAA,MAAA,CAAO,YAAY,CAAA;AAC5D,IAAA,MAAA,CAAO,MAAS,GAAA,EAAA;AAEhB,IAAI,IAAA,QAAA;AACJ,IAAI,IAAA,IAAA,CAAK,cAAc,IAAM,EAAA;AAC3B,MAAW,QAAA,GAAA,IAAA,CAAK,UAAU,QAAS,EAAA;AAAA;AAGrC,IAAA,MAAM,MAAoB,GAAA;AAAA,MACxB,MAAM,MAAO,CAAA;AAAA,KACf;AACA,IAAA,IAAI,aAAa,SAAW,EAAA;AAC1B,MAAA,MAAA,CAAO,QAAW,GAAA,QAAA;AAAA;AAEpB,IAAI,IAAA,YAAA,CAAa,OAAO,CAAG,EAAA;AACzB,MAAO,MAAA,CAAA,YAAA,GAAe,MAAO,CAAA,WAAA,CAAY,YAAY,CAAA;AAAA;AAEvD,IAAO,OAAA,MAAA;AAAA;AACT,EACA,CAAUA,IAAK,CAAA,OAAA,CAAQ,MAAM,CAAE,CAAA,KAAA,EAAe,SAAyB,OAAkC,EAAA;AACvG,IAAA,IAAI,QAAQ,CAAG,EAAA;AACb,MAAO,OAAA,aAAA;AAAA;AAET,IAAA,MAAM,UAAa,GAAA,MAAA,CAAO,MAAO,CAAA,IAAI,OAAS,EAAA;AAAA,MAC5C,OAAO,OAAQ,CAAA,KAAA,IAAS,IAAO,GAAA,IAAA,GAAO,QAAQ,KAAQ,GAAA;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,OAAQ,CAAA,IAAA,CAAK,MAAO,EAAA,EAAG,UAAU,CAAA;AAAA;AAE5C,CAAA;;;AC/EO,IAAM,iBAAoB,GAAA,CAAC,WAAa,EAAA,iBAAA,EAAmB,UAAY,EAAA,YAAA,EAAc,QAAU,EAAA,WAAA,EAAa,QAAU,EAAA,OAAA,EAAS,KAAO,EAAA,WAAA,EAAa,cAAc,cAAc;;;ACM/K,IAAM,yBAAiD,GAAA;AAAA,EAC5D,yBAAU,MAAA,CAAA,CAAA,KAAA,KAAkB,IAAI,cAAA,CAAe,KAAK,CAA3C,EAAA,SAAA;AACX,CAAA;AAEa,IAAA,aAAA,2BAAiB,OAAoD,KAAA;AAChF,EAAA,MAAM,MAAuB,GAAA;AAAA,IAC3B,MAAA,EAAQ,SAAS,MAAU,IAAA,IAAA;AAAA,IAC3B,kBAAA,EAAoB,SAAS,kBAAsB,IAAA,yBAAA;AAAA,IACnD,UAAA,EAAY,SAAS,UAAc,IAAA;AAAA,GACrC;AAEA,EAAO,OAAA;AAAA,IACL,MAAA,EAAQ,YAAa,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACnC,gBAAA,EAAkB,sBAAuB,CAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,IACvD,GAAA,EAAK,SAAU,CAAA,OAAA,CAAQ,MAAM;AAAA,GAC/B;AACF,CAZ6B,EAAA,eAAA","file":"index.js","sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\n\nexport class EncryptedValue {\n  private readonly encryptedData: Buffer;\n  private readonly iv: Buffer;\n  private readonly authTag: Buffer;\n  private readonly key: Buffer;\n\n  public constructor(value: string) {\n    this.key = randomBytes(32);\n    this.iv = randomBytes(16);\n\n    const cipher = createCipheriv('aes-256-gcm', this.key, this.iv);\n\n    const encryptedChunks: Buffer[] = [];\n    encryptedChunks.push(cipher.update(value, 'utf8'));\n    encryptedChunks.push(cipher.final());\n\n    this.encryptedData = Buffer.concat(encryptedChunks);\n    this.authTag = cipher.getAuthTag();\n  }\n\n  public getValue(): string {\n    const decipher = createDecipheriv('aes-256-gcm', this.key, this.iv);\n    decipher.setAuthTag(this.authTag);\n\n    try {\n      const decryptedChunks: Buffer[] = [];\n      decryptedChunks.push(decipher.update(this.encryptedData));\n      decryptedChunks.push(decipher.final());\n\n      return Buffer.concat(decryptedChunks).toString('utf8');\n    } catch (_) {\n      // Hide internal error details\n      throw new Error('Failed to decrypt value: Invalid key or corrupted data');\n    }\n  }\n\n  public toString(): string {\n    return '[EncryptedValue]';\n  }\n\n  public toJSON(): object {\n    return { type: 'EncryptedValue', encrypted: true };\n  }\n}\n","import { createHash, createHmac } from 'node:crypto';\n\ntype HashAlgorithm = {\n  hash: (x: string) => string;\n  prefix: string;\n};\n\nconst algorithms = {\n  sha256: () => ({\n    hash: (x: string) => createHash('sha256').update(x).digest('hex'),\n    prefix: 'sha256',\n  }),\n  hs256: (secret: string) => ({\n    hash: (x: string) => createHmac('sha256', secret).update(x).digest('hex'),\n    prefix: 'hs256',\n  }),\n} as const;\n\nconst getAlgorithm = (secret: string | null): HashAlgorithm => {\n  return secret == null ? algorithms.sha256() : algorithms.hs256(secret);\n};\n\nexport const hash = (input: string, secret: string | null) => {\n  const alg = getAlgorithm(secret);\n  const hash = alg.hash(input);\n  return `${alg.prefix}:${hash}`;\n};\n","import util, { type InspectOptions } from 'node:util';\nimport type { BaseObject, InspectFunction } from './types';\n\nexport abstract class ISecureString implements BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): string | object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n  public abstract get secretValue(): string;\n}\n\nexport abstract class ISecureConnectionString implements BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): string | object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n  public abstract get secretValue(): string;\n}\n\nexport abstract class ISecureURL implements BaseObject {\n  public abstract toString(): string;\n  public abstract toJSON(): object;\n  public abstract [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string;\n  public abstract get secretValue(): URL;\n}\n\nexport abstract class ISecureFactory {\n  public abstract string(value: string): ISecureString;\n  public abstract connectionString(value: string, secretKeys?: readonly string[]): ISecureConnectionString;\n  public abstract url(value: URL): ISecureURL;\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { hash } from './hash';\nimport { ISecureString } from './interfaces';\nimport type { IEncryptedValue, InspectFunction, SecureConfig } from './types';\n\nexport class SecureString extends ISecureString {\n  readonly #encryptedValue: IEncryptedValue;\n  readonly #hash: string;\n\n  public get secretValue(): string {\n    return this.#encryptedValue.getValue();\n  }\n\n  private constructor(value: string, config: SecureConfig) {\n    super();\n    this.#encryptedValue = config.encryptionProvider.encrypt(value);\n    this.#hash = hash(value, config.secret);\n  }\n\n  static factory(config: SecureConfig): (value: string) => SecureString {\n    return (value: string) => SecureString.from(value, config);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, config: SecureConfig): T extends string ? SecureString : T {\n    if (value === null) {\n      return null as T extends string ? SecureString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureString : T;\n    }\n    return new SecureString(value, config) as T extends string ? SecureString : T;\n  }\n\n  public override toString() {\n    return this.#hash;\n  }\n  public override toJSON() {\n    return this.toString();\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { ISecureConnectionString } from './interfaces';\nimport type { IEncryptedValue, InspectFunction, SecureConfig, SecureKeys } from './types';\n\nexport class SecureConnectionString extends ISecureConnectionString {\n  readonly #encryptedValue: IEncryptedValue;\n  readonly #data: [string, string | SecureString][];\n\n  public get secretValue(): string {\n    return this.#encryptedValue.getValue();\n  }\n\n  private constructor(value: string, config: SecureConfig) {\n    super();\n    this.#encryptedValue = config.encryptionProvider.encrypt(value);\n    this.#data = this.parseConnectionString(\n      value,\n      config.secretKeys.map((x) => x.toLocaleLowerCase()),\n      config,\n    );\n  }\n\n  private parseConnectionString(value: string, secretKeys: SecureKeys, config: SecureConfig): [string, string | SecureString][] {\n    return value\n      .split(';')\n      .filter(Boolean)\n      .map((pair) => {\n        const [key, value] = pair.split('=');\n        const v = value ?? '';\n        const val = secretKeys.includes(key.toLocaleLowerCase()) ? SecureString.from(v, config) : v;\n        return [key, val];\n      });\n  }\n\n  static factory(config: SecureConfig): (value: string) => SecureConnectionString {\n    return (value: string) => SecureConnectionString.from(value, config);\n  }\n\n  public static from<T extends string | null | undefined>(value: T, config: SecureConfig): T extends string ? SecureConnectionString : T {\n    if (value === null) {\n      return null as T extends string ? SecureConnectionString : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends string ? SecureConnectionString : T;\n    }\n    return new SecureConnectionString(value, config) as T extends string ? SecureConnectionString : T;\n  }\n\n  public override toString(): string {\n    return this.#data.map(([key, value]) => `${key}=${value}`).join(';');\n  }\n\n  public override toJSON(): object {\n    return Object.fromEntries(this.#data);\n  }\n\n  public override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureConnectionString]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import util, { type InspectOptions } from 'node:util';\nimport { SecureString } from './SecureString';\nimport { ISecureURL } from './interfaces';\nimport type { IEncryptedValue, InspectFunction, SecureConfig } from './types';\n\ntype UrlObject = {\n  href: string;\n  password?: string;\n  searchParams?: Record<string, string>;\n};\n\nexport class SecureURL extends ISecureURL {\n  readonly #encryptedValue: IEncryptedValue;\n  readonly #password: SecureString | null;\n\n  public get secretValue(): URL {\n    return new URL(this.#encryptedValue.getValue());\n  }\n\n  private constructor(value: URL, config: SecureConfig) {\n    super();\n    this.#encryptedValue = config.encryptionProvider.encrypt(value.href);\n    this.#password = SecureString.from(value.password || null, config);\n  }\n\n  static factory(config: SecureConfig): (value: URL) => ISecureURL {\n    return (value: URL) => SecureURL.from(value, config);\n  }\n\n  public static from<T extends URL | null | undefined>(value: T, config: SecureConfig): T extends URL ? SecureURL : T {\n    if (value === null) {\n      return null as T extends URL ? SecureURL : T;\n    }\n    if (value === undefined) {\n      return undefined as T extends URL ? SecureURL : T;\n    }\n    return new SecureURL(value, config) as T extends URL ? SecureURL : T;\n  }\n\n  override toString(): string {\n    const originalUrl = this.secretValue;\n    const newUrl = new URL(originalUrl.href);\n    if (this.#password !== null) {\n      newUrl.password = this.#password.toString();\n    }\n    return newUrl.href;\n  }\n\n  override toJSON(): UrlObject {\n    const originalUrl = this.secretValue;\n    const newUrl = new URL(originalUrl.href);\n    newUrl.password = '';\n\n    const searchParams = new URLSearchParams(newUrl.searchParams);\n    newUrl.search = '';\n\n    let password: string | undefined;\n    if (this.#password !== null) {\n      password = this.#password.toString();\n    }\n\n    const result: UrlObject = {\n      href: newUrl.href,\n    };\n    if (password !== undefined) {\n      result.password = password;\n    }\n    if (searchParams.size > 0) {\n      result.searchParams = Object.fromEntries(searchParams);\n    }\n    return result;\n  }\n  override [util.inspect.custom](depth: number, options: InspectOptions, inspect: InspectFunction): string {\n    if (depth < 0) {\n      return '[SecureURL]';\n    }\n    const newOptions = Object.assign({}, options, {\n      depth: options.depth == null ? null : options.depth - 1,\n    });\n    return inspect(this.toJSON(), newOptions);\n  }\n}\n","import type { SecureKeys } from './types';\n\nexport const defaultSecureKeys = ['AccessKey', 'SharedAccessKey', 'Password', 'AccountKey', 'Secret', 'SecretKey', 'ApiKey', 'Token', 'Key', 'MasterKey', 'PrimaryKey', 'SecondaryKey'] as const satisfies SecureKeys;\n","import { EncryptedValue } from './EncryptedValue';\nimport { SecureConnectionString } from './SecureConnectionString';\nimport { SecureString } from './SecureString';\nimport { SecureURL } from './SecureURL';\nimport { defaultSecureKeys } from './defaults';\nimport type { ISecureFactory } from './interfaces';\nimport type { IEncryptionProvider, SecureConfig } from './types';\n\nexport const defaultEncryptionProvider: IEncryptionProvider = {\n  encrypt: (value: string) => new EncryptedValue(value),\n};\n\nexport const createFactory = (options?: Partial<SecureConfig>): ISecureFactory => {\n  const config: SecureConfig = {\n    secret: options?.secret ?? null,\n    encryptionProvider: options?.encryptionProvider ?? defaultEncryptionProvider,\n    secretKeys: options?.secretKeys ?? defaultSecureKeys,\n  };\n\n  return {\n    string: SecureString.factory(config),\n    connectionString: SecureConnectionString.factory(config),\n    url: SecureURL.factory(config),\n  };\n};\n"]}

package/package.json

@@ -1,17 +1,11 @@
 {
   "name": "@shellicar/core-config",
+  "private": false,
+  "version": "2.0.0",
   "type": "module",
-  "version": "1.0.1",
-  "description": "A library for securely handling sensitive configuration values like connection strings, URLs, and secrets.",
   "license": "MIT",
-  "homepage": "https://github.com/shellicar/core-config#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/shellicar/core-config.git"
-  },
-  "bugs": {
-    "url": "https://github.com/shellicar/core-config/issues"
-  },
+  "author": "Stephen Hellicar",
+  "description": "A library for securely handling sensitive configuration values like connection strings, URLs, and secrets.",
   "keywords": [
     "secure",
     "connection",
@@ -21,6 +15,17 @@
     "secret",
     "URL"
   ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shellicar/core-config.git"
+  },
+  "bugs": {
+    "url": "https://github.com/shellicar/core-config/issues"
+  },
+  "homepage": "https://github.com/shellicar/core-config#readme",
+  "publishConfig": {
+    "access": "public"
+  },
   "exports": {
     ".": {
       "import": "./dist/index.js",
@@ -29,7 +34,7 @@
   },
   "main": "dist/index.cjs",
   "module": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "types": "dist/index.d.cts",
   "typesVersions": {
     "*": {
       "*": [
@@ -42,9 +47,6 @@
     "dist",
     "*.md"
   ],
-  "publishConfig": {
-    "access": "public"
-  },
   "devDependencies": {
     "@tsconfig/node20": "^20.1.4",
     "@types/node": "^22.10.5",