@sockethub/crypto 1.0.0-alpha.10

package/LICENSE

@@ -0,0 +1,165 @@
+                   GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions.
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version.
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.

package/dist/index.js

@@ -0,0 +1,466 @@
+import { createRequire } from "node:module";
+var __create = Object.create;
+var __getProtoOf = Object.getPrototypeOf;
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __toESM = (mod, isNodeMode, target) => {
+  target = mod != null ? __create(__getProtoOf(mod)) : {};
+  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  for (let key of __getOwnPropNames(mod))
+    if (!__hasOwnProp.call(to, key))
+      __defProp(to, key, {
+        get: () => mod[key],
+        enumerable: true
+      });
+  return to;
+};
+var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// ../../node_modules/object-hash/index.js
+var require_object_hash = __commonJS((exports, module) => {
+  var crypto = __require("crypto");
+  exports = module.exports = objectHash;
+  function objectHash(object, options) {
+    options = applyDefaults(object, options);
+    return hash(object, options);
+  }
+  exports.sha1 = function(object) {
+    return objectHash(object);
+  };
+  exports.keys = function(object) {
+    return objectHash(object, { excludeValues: true, algorithm: "sha1", encoding: "hex" });
+  };
+  exports.MD5 = function(object) {
+    return objectHash(object, { algorithm: "md5", encoding: "hex" });
+  };
+  exports.keysMD5 = function(object) {
+    return objectHash(object, { algorithm: "md5", encoding: "hex", excludeValues: true });
+  };
+  var hashes = crypto.getHashes ? crypto.getHashes().slice() : ["sha1", "md5"];
+  hashes.push("passthrough");
+  var encodings = ["buffer", "hex", "binary", "base64"];
+  function applyDefaults(object, sourceOptions) {
+    sourceOptions = sourceOptions || {};
+    var options = {};
+    options.algorithm = sourceOptions.algorithm || "sha1";
+    options.encoding = sourceOptions.encoding || "hex";
+    options.excludeValues = sourceOptions.excludeValues ? true : false;
+    options.algorithm = options.algorithm.toLowerCase();
+    options.encoding = options.encoding.toLowerCase();
+    options.ignoreUnknown = sourceOptions.ignoreUnknown !== true ? false : true;
+    options.respectType = sourceOptions.respectType === false ? false : true;
+    options.respectFunctionNames = sourceOptions.respectFunctionNames === false ? false : true;
+    options.respectFunctionProperties = sourceOptions.respectFunctionProperties === false ? false : true;
+    options.unorderedArrays = sourceOptions.unorderedArrays !== true ? false : true;
+    options.unorderedSets = sourceOptions.unorderedSets === false ? false : true;
+    options.unorderedObjects = sourceOptions.unorderedObjects === false ? false : true;
+    options.replacer = sourceOptions.replacer || undefined;
+    options.excludeKeys = sourceOptions.excludeKeys || undefined;
+    if (typeof object === "undefined") {
+      throw new Error("Object argument required.");
+    }
+    for (var i = 0;i < hashes.length; ++i) {
+      if (hashes[i].toLowerCase() === options.algorithm.toLowerCase()) {
+        options.algorithm = hashes[i];
+      }
+    }
+    if (hashes.indexOf(options.algorithm) === -1) {
+      throw new Error('Algorithm "' + options.algorithm + '"  not supported. ' + "supported values: " + hashes.join(", "));
+    }
+    if (encodings.indexOf(options.encoding) === -1 && options.algorithm !== "passthrough") {
+      throw new Error('Encoding "' + options.encoding + '"  not supported. ' + "supported values: " + encodings.join(", "));
+    }
+    return options;
+  }
+  function isNativeFunction(f) {
+    if (typeof f !== "function") {
+      return false;
+    }
+    var exp = /^function\s+\w*\s*\(\s*\)\s*{\s+\[native code\]\s+}$/i;
+    return exp.exec(Function.prototype.toString.call(f)) != null;
+  }
+  function hash(object, options) {
+    var hashingStream;
+    if (options.algorithm !== "passthrough") {
+      hashingStream = crypto.createHash(options.algorithm);
+    } else {
+      hashingStream = new PassThrough;
+    }
+    if (typeof hashingStream.write === "undefined") {
+      hashingStream.write = hashingStream.update;
+      hashingStream.end = hashingStream.update;
+    }
+    var hasher = typeHasher(options, hashingStream);
+    hasher.dispatch(object);
+    if (!hashingStream.update) {
+      hashingStream.end("");
+    }
+    if (hashingStream.digest) {
+      return hashingStream.digest(options.encoding === "buffer" ? undefined : options.encoding);
+    }
+    var buf = hashingStream.read();
+    if (options.encoding === "buffer") {
+      return buf;
+    }
+    return buf.toString(options.encoding);
+  }
+  exports.writeToStream = function(object, options, stream) {
+    if (typeof stream === "undefined") {
+      stream = options;
+      options = {};
+    }
+    options = applyDefaults(object, options);
+    return typeHasher(options, stream).dispatch(object);
+  };
+  function typeHasher(options, writeTo, context) {
+    context = context || [];
+    var write = function(str) {
+      if (writeTo.update) {
+        return writeTo.update(str, "utf8");
+      } else {
+        return writeTo.write(str, "utf8");
+      }
+    };
+    return {
+      dispatch: function(value) {
+        if (options.replacer) {
+          value = options.replacer(value);
+        }
+        var type = typeof value;
+        if (value === null) {
+          type = "null";
+        }
+        return this["_" + type](value);
+      },
+      _object: function(object) {
+        var pattern = /\[object (.*)\]/i;
+        var objString = Object.prototype.toString.call(object);
+        var objType = pattern.exec(objString);
+        if (!objType) {
+          objType = "unknown:[" + objString + "]";
+        } else {
+          objType = objType[1];
+        }
+        objType = objType.toLowerCase();
+        var objectNumber = null;
+        if ((objectNumber = context.indexOf(object)) >= 0) {
+          return this.dispatch("[CIRCULAR:" + objectNumber + "]");
+        } else {
+          context.push(object);
+        }
+        if (typeof Buffer !== "undefined" && Buffer.isBuffer && Buffer.isBuffer(object)) {
+          write("buffer:");
+          return write(object);
+        }
+        if (objType !== "object" && objType !== "function" && objType !== "asyncfunction") {
+          if (this["_" + objType]) {
+            this["_" + objType](object);
+          } else if (options.ignoreUnknown) {
+            return write("[" + objType + "]");
+          } else {
+            throw new Error('Unknown object type "' + objType + '"');
+          }
+        } else {
+          var keys = Object.keys(object);
+          if (options.unorderedObjects) {
+            keys = keys.sort();
+          }
+          if (options.respectType !== false && !isNativeFunction(object)) {
+            keys.splice(0, 0, "prototype", "__proto__", "constructor");
+          }
+          if (options.excludeKeys) {
+            keys = keys.filter(function(key) {
+              return !options.excludeKeys(key);
+            });
+          }
+          write("object:" + keys.length + ":");
+          var self = this;
+          return keys.forEach(function(key) {
+            self.dispatch(key);
+            write(":");
+            if (!options.excludeValues) {
+              self.dispatch(object[key]);
+            }
+            write(",");
+          });
+        }
+      },
+      _array: function(arr, unordered) {
+        unordered = typeof unordered !== "undefined" ? unordered : options.unorderedArrays !== false;
+        var self = this;
+        write("array:" + arr.length + ":");
+        if (!unordered || arr.length <= 1) {
+          return arr.forEach(function(entry) {
+            return self.dispatch(entry);
+          });
+        }
+        var contextAdditions = [];
+        var entries = arr.map(function(entry) {
+          var strm = new PassThrough;
+          var localContext = context.slice();
+          var hasher = typeHasher(options, strm, localContext);
+          hasher.dispatch(entry);
+          contextAdditions = contextAdditions.concat(localContext.slice(context.length));
+          return strm.read().toString();
+        });
+        context = context.concat(contextAdditions);
+        entries.sort();
+        return this._array(entries, false);
+      },
+      _date: function(date) {
+        return write("date:" + date.toJSON());
+      },
+      _symbol: function(sym) {
+        return write("symbol:" + sym.toString());
+      },
+      _error: function(err) {
+        return write("error:" + err.toString());
+      },
+      _boolean: function(bool) {
+        return write("bool:" + bool.toString());
+      },
+      _string: function(string) {
+        write("string:" + string.length + ":");
+        write(string.toString());
+      },
+      _function: function(fn) {
+        write("fn:");
+        if (isNativeFunction(fn)) {
+          this.dispatch("[native]");
+        } else {
+          this.dispatch(fn.toString());
+        }
+        if (options.respectFunctionNames !== false) {
+          this.dispatch("function-name:" + String(fn.name));
+        }
+        if (options.respectFunctionProperties) {
+          this._object(fn);
+        }
+      },
+      _number: function(number) {
+        return write("number:" + number.toString());
+      },
+      _xml: function(xml) {
+        return write("xml:" + xml.toString());
+      },
+      _null: function() {
+        return write("Null");
+      },
+      _undefined: function() {
+        return write("Undefined");
+      },
+      _regexp: function(regex) {
+        return write("regex:" + regex.toString());
+      },
+      _uint8array: function(arr) {
+        write("uint8array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _uint8clampedarray: function(arr) {
+        write("uint8clampedarray:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _int8array: function(arr) {
+        write("int8array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _uint16array: function(arr) {
+        write("uint16array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _int16array: function(arr) {
+        write("int16array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _uint32array: function(arr) {
+        write("uint32array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _int32array: function(arr) {
+        write("int32array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _float32array: function(arr) {
+        write("float32array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _float64array: function(arr) {
+        write("float64array:");
+        return this.dispatch(Array.prototype.slice.call(arr));
+      },
+      _arraybuffer: function(arr) {
+        write("arraybuffer:");
+        return this.dispatch(new Uint8Array(arr));
+      },
+      _url: function(url) {
+        return write("url:" + url.toString(), "utf8");
+      },
+      _map: function(map) {
+        write("map:");
+        var arr = Array.from(map);
+        return this._array(arr, options.unorderedSets !== false);
+      },
+      _set: function(set) {
+        write("set:");
+        var arr = Array.from(set);
+        return this._array(arr, options.unorderedSets !== false);
+      },
+      _file: function(file) {
+        write("file:");
+        return this.dispatch([file.name, file.size, file.type, file.lastModfied]);
+      },
+      _blob: function() {
+        if (options.ignoreUnknown) {
+          return write("[blob]");
+        }
+        throw Error(`Hashing Blob objects is currently not supported
+` + `(see https://github.com/puleos/object-hash/issues/26)
+` + `Use "options.replacer" or "options.ignoreUnknown"
+`);
+      },
+      _domwindow: function() {
+        return write("domwindow");
+      },
+      _bigint: function(number) {
+        return write("bigint:" + number.toString());
+      },
+      _process: function() {
+        return write("process");
+      },
+      _timer: function() {
+        return write("timer");
+      },
+      _pipe: function() {
+        return write("pipe");
+      },
+      _tcp: function() {
+        return write("tcp");
+      },
+      _udp: function() {
+        return write("udp");
+      },
+      _tty: function() {
+        return write("tty");
+      },
+      _statwatcher: function() {
+        return write("statwatcher");
+      },
+      _securecontext: function() {
+        return write("securecontext");
+      },
+      _connection: function() {
+        return write("connection");
+      },
+      _zlib: function() {
+        return write("zlib");
+      },
+      _context: function() {
+        return write("context");
+      },
+      _nodescript: function() {
+        return write("nodescript");
+      },
+      _httpparser: function() {
+        return write("httpparser");
+      },
+      _dataview: function() {
+        return write("dataview");
+      },
+      _signal: function() {
+        return write("signal");
+      },
+      _fsevent: function() {
+        return write("fsevent");
+      },
+      _tlswrap: function() {
+        return write("tlswrap");
+      }
+    };
+  }
+  function PassThrough() {
+    return {
+      buf: "",
+      write: function(b) {
+        this.buf += b;
+      },
+      end: function(b) {
+        this.buf += b;
+      },
+      read: function() {
+        return this.buf;
+      }
+    };
+  }
+});
+
+// src/index.ts
+var import_object_hash = __toESM(require_object_hash(), 1);
+import {
+  createCipheriv,
+  createDecipheriv,
+  createHash,
+  randomBytes
+} from "node:crypto";
+var ALGORITHM = "aes-256-cbc";
+var IV_LENGTH = 16;
+function getPlatformId(platform, actor, _crypto = crypto) {
+  return actor ? _crypto.hash(platform + actor) : _crypto.hash(platform);
+}
+
+class Crypto {
+  randomBytes;
+  constructor() {
+    this.createRandomBytes();
+  }
+  createRandomBytes() {
+    this.randomBytes = randomBytes;
+  }
+  encrypt(json, secret) {
+    Crypto.ensureSecret(secret);
+    const iv = this.randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, Buffer.from(secret), iv);
+    let encrypted = cipher.update(JSON.stringify(json));
+    encrypted = Buffer.concat([encrypted, cipher.final()]);
+    return `${iv.toString("hex")}:${encrypted.toString("hex")}`;
+  }
+  decrypt(text, secret) {
+    Crypto.ensureSecret(secret);
+    const parts = text.split(":");
+    const iv = Buffer.from(parts.shift(), "hex");
+    const encryptedText = Buffer.from(parts.join(":"), "hex");
+    const decipher = createDecipheriv(ALGORITHM, Buffer.from(secret), iv);
+    let decrypted = decipher.update(encryptedText);
+    decrypted = Buffer.concat([decrypted, decipher.final()]);
+    return JSON.parse(decrypted.toString());
+  }
+  hash(text) {
+    const SHASum = createHash("sha1");
+    SHASum.update(text);
+    return SHASum.digest("hex").substring(0, 7);
+  }
+  objectHash(object) {
+    return import_object_hash.default(object);
+  }
+  randToken(len) {
+    if (len > 32) {
+      throw new Error(`crypto.randToken supports a length param of up to 32, ${len} given`);
+    }
+    const buf = this.randomBytes(len);
+    return buf.toString("hex").substring(0, len);
+  }
+  static ensureSecret(secret) {
+    if (secret.length !== 32) {
+      throw new Error(`secret must be a 32 char string, length: ${secret.length}`);
+    }
+  }
+}
+var crypto = new Crypto;
+export {
+  getPlatformId,
+  crypto,
+  Crypto
+};
+
+//# debugId=2BD4490536E49C1E64756E2164756E21

package/dist/index.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../../../node_modules/object-hash/index.js", "../src/index.ts"],
+  "sourcesContent": [
+    "'use strict';\n\nvar crypto = require('crypto');\n\n/**\n * Exported function\n *\n * Options:\n *\n *  - `algorithm` hash algo to be used by this instance: *'sha1', 'md5'\n *  - `excludeValues` {true|*false} hash object keys, values ignored\n *  - `encoding` hash encoding, supports 'buffer', '*hex', 'binary', 'base64'\n *  - `ignoreUnknown` {true|*false} ignore unknown object types\n *  - `replacer` optional function that replaces values before hashing\n *  - `respectFunctionProperties` {*true|false} consider function properties when hashing\n *  - `respectFunctionNames` {*true|false} consider 'name' property of functions for hashing\n *  - `respectType` {*true|false} Respect special properties (prototype, constructor)\n *    when hashing to distinguish between types\n *  - `unorderedArrays` {true|*false} Sort all arrays before hashing\n *  - `unorderedSets` {*true|false} Sort `Set` and `Map` instances before hashing\n *  * = default\n *\n * @param {object} object value to hash\n * @param {object} options hashing options\n * @return {string} hash value\n * @api public\n */\nexports = module.exports = objectHash;\n\nfunction objectHash(object, options){\n  options = applyDefaults(object, options);\n\n  return hash(object, options);\n}\n\n/**\n * Exported sugar methods\n *\n * @param {object} object value to hash\n * @return {string} hash value\n * @api public\n */\nexports.sha1 = function(object){\n  return objectHash(object);\n};\nexports.keys = function(object){\n  return objectHash(object, {excludeValues: true, algorithm: 'sha1', encoding: 'hex'});\n};\nexports.MD5 = function(object){\n  return objectHash(object, {algorithm: 'md5', encoding: 'hex'});\n};\nexports.keysMD5 = function(object){\n  return objectHash(object, {algorithm: 'md5', encoding: 'hex', excludeValues: true});\n};\n\n// Internals\nvar hashes = crypto.getHashes ? crypto.getHashes().slice() : ['sha1', 'md5'];\nhashes.push('passthrough');\nvar encodings = ['buffer', 'hex', 'binary', 'base64'];\n\nfunction applyDefaults(object, sourceOptions){\n  sourceOptions = sourceOptions || {};\n\n  // create a copy rather than mutating\n  var options = {};\n  options.algorithm = sourceOptions.algorithm || 'sha1';\n  options.encoding = sourceOptions.encoding || 'hex';\n  options.excludeValues = sourceOptions.excludeValues ? true : false;\n  options.algorithm = options.algorithm.toLowerCase();\n  options.encoding = options.encoding.toLowerCase();\n  options.ignoreUnknown = sourceOptions.ignoreUnknown !== true ? false : true; // default to false\n  options.respectType = sourceOptions.respectType === false ? false : true; // default to true\n  options.respectFunctionNames = sourceOptions.respectFunctionNames === false ? false : true;\n  options.respectFunctionProperties = sourceOptions.respectFunctionProperties === false ? false : true;\n  options.unorderedArrays = sourceOptions.unorderedArrays !== true ? false : true; // default to false\n  options.unorderedSets = sourceOptions.unorderedSets === false ? false : true; // default to false\n  options.unorderedObjects = sourceOptions.unorderedObjects === false ? false : true; // default to true\n  options.replacer = sourceOptions.replacer || undefined;\n  options.excludeKeys = sourceOptions.excludeKeys || undefined;\n\n  if(typeof object === 'undefined') {\n    throw new Error('Object argument required.');\n  }\n\n  // if there is a case-insensitive match in the hashes list, accept it\n  // (i.e. SHA256 for sha256)\n  for (var i = 0; i < hashes.length; ++i) {\n    if (hashes[i].toLowerCase() === options.algorithm.toLowerCase()) {\n      options.algorithm = hashes[i];\n    }\n  }\n\n  if(hashes.indexOf(options.algorithm) === -1){\n    throw new Error('Algorithm \"' + options.algorithm + '\"  not supported. ' +\n      'supported values: ' + hashes.join(', '));\n  }\n\n  if(encodings.indexOf(options.encoding) === -1 &&\n     options.algorithm !== 'passthrough'){\n    throw new Error('Encoding \"' + options.encoding + '\"  not supported. ' +\n      'supported values: ' + encodings.join(', '));\n  }\n\n  return options;\n}\n\n/** Check if the given function is a native function */\nfunction isNativeFunction(f) {\n  if ((typeof f) !== 'function') {\n    return false;\n  }\n  var exp = /^function\\s+\\w*\\s*\\(\\s*\\)\\s*{\\s+\\[native code\\]\\s+}$/i;\n  return exp.exec(Function.prototype.toString.call(f)) != null;\n}\n\nfunction hash(object, options) {\n  var hashingStream;\n\n  if (options.algorithm !== 'passthrough') {\n    hashingStream = crypto.createHash(options.algorithm);\n  } else {\n    hashingStream = new PassThrough();\n  }\n\n  if (typeof hashingStream.write === 'undefined') {\n    hashingStream.write = hashingStream.update;\n    hashingStream.end   = hashingStream.update;\n  }\n\n  var hasher = typeHasher(options, hashingStream);\n  hasher.dispatch(object);\n  if (!hashingStream.update) {\n    hashingStream.end('');\n  }\n\n  if (hashingStream.digest) {\n    return hashingStream.digest(options.encoding === 'buffer' ? undefined : options.encoding);\n  }\n\n  var buf = hashingStream.read();\n  if (options.encoding === 'buffer') {\n    return buf;\n  }\n\n  return buf.toString(options.encoding);\n}\n\n/**\n * Expose streaming API\n *\n * @param {object} object  Value to serialize\n * @param {object} options  Options, as for hash()\n * @param {object} stream  A stream to write the serializiation to\n * @api public\n */\nexports.writeToStream = function(object, options, stream) {\n  if (typeof stream === 'undefined') {\n    stream = options;\n    options = {};\n  }\n\n  options = applyDefaults(object, options);\n\n  return typeHasher(options, stream).dispatch(object);\n};\n\nfunction typeHasher(options, writeTo, context){\n  context = context || [];\n  var write = function(str) {\n    if (writeTo.update) {\n      return writeTo.update(str, 'utf8');\n    } else {\n      return writeTo.write(str, 'utf8');\n    }\n  };\n\n  return {\n    dispatch: function(value){\n      if (options.replacer) {\n        value = options.replacer(value);\n      }\n\n      var type = typeof value;\n      if (value === null) {\n        type = 'null';\n      }\n\n      //console.log(\"[DEBUG] Dispatch: \", value, \"->\", type, \" -> \", \"_\" + type);\n\n      return this['_' + type](value);\n    },\n    _object: function(object) {\n      var pattern = (/\\[object (.*)\\]/i);\n      var objString = Object.prototype.toString.call(object);\n      var objType = pattern.exec(objString);\n      if (!objType) { // object type did not match [object ...]\n        objType = 'unknown:[' + objString + ']';\n      } else {\n        objType = objType[1]; // take only the class name\n      }\n\n      objType = objType.toLowerCase();\n\n      var objectNumber = null;\n\n      if ((objectNumber = context.indexOf(object)) >= 0) {\n        return this.dispatch('[CIRCULAR:' + objectNumber + ']');\n      } else {\n        context.push(object);\n      }\n\n      if (typeof Buffer !== 'undefined' && Buffer.isBuffer && Buffer.isBuffer(object)) {\n        write('buffer:');\n        return write(object);\n      }\n\n      if(objType !== 'object' && objType !== 'function' && objType !== 'asyncfunction') {\n        if(this['_' + objType]) {\n          this['_' + objType](object);\n        } else if (options.ignoreUnknown) {\n          return write('[' + objType + ']');\n        } else {\n          throw new Error('Unknown object type \"' + objType + '\"');\n        }\n      }else{\n        var keys = Object.keys(object);\n        if (options.unorderedObjects) {\n          keys = keys.sort();\n        }\n        // Make sure to incorporate special properties, so\n        // Types with different prototypes will produce\n        // a different hash and objects derived from\n        // different functions (`new Foo`, `new Bar`) will\n        // produce different hashes.\n        // We never do this for native functions since some\n        // seem to break because of that.\n        if (options.respectType !== false && !isNativeFunction(object)) {\n          keys.splice(0, 0, 'prototype', '__proto__', 'constructor');\n        }\n\n        if (options.excludeKeys) {\n          keys = keys.filter(function(key) { return !options.excludeKeys(key); });\n        }\n\n        write('object:' + keys.length + ':');\n        var self = this;\n        return keys.forEach(function(key){\n          self.dispatch(key);\n          write(':');\n          if(!options.excludeValues) {\n            self.dispatch(object[key]);\n          }\n          write(',');\n        });\n      }\n    },\n    _array: function(arr, unordered){\n      unordered = typeof unordered !== 'undefined' ? unordered :\n        options.unorderedArrays !== false; // default to options.unorderedArrays\n\n      var self = this;\n      write('array:' + arr.length + ':');\n      if (!unordered || arr.length <= 1) {\n        return arr.forEach(function(entry) {\n          return self.dispatch(entry);\n        });\n      }\n\n      // the unordered case is a little more complicated:\n      // since there is no canonical ordering on objects,\n      // i.e. {a:1} < {a:2} and {a:1} > {a:2} are both false,\n      // we first serialize each entry using a PassThrough stream\n      // before sorting.\n      // also: we can’t use the same context array for all entries\n      // since the order of hashing should *not* matter. instead,\n      // we keep track of the additions to a copy of the context array\n      // and add all of them to the global context array when we’re done\n      var contextAdditions = [];\n      var entries = arr.map(function(entry) {\n        var strm = new PassThrough();\n        var localContext = context.slice(); // make copy\n        var hasher = typeHasher(options, strm, localContext);\n        hasher.dispatch(entry);\n        // take only what was added to localContext and append it to contextAdditions\n        contextAdditions = contextAdditions.concat(localContext.slice(context.length));\n        return strm.read().toString();\n      });\n      context = context.concat(contextAdditions);\n      entries.sort();\n      return this._array(entries, false);\n    },\n    _date: function(date){\n      return write('date:' + date.toJSON());\n    },\n    _symbol: function(sym){\n      return write('symbol:' + sym.toString());\n    },\n    _error: function(err){\n      return write('error:' + err.toString());\n    },\n    _boolean: function(bool){\n      return write('bool:' + bool.toString());\n    },\n    _string: function(string){\n      write('string:' + string.length + ':');\n      write(string.toString());\n    },\n    _function: function(fn){\n      write('fn:');\n      if (isNativeFunction(fn)) {\n        this.dispatch('[native]');\n      } else {\n        this.dispatch(fn.toString());\n      }\n\n      if (options.respectFunctionNames !== false) {\n        // Make sure we can still distinguish native functions\n        // by their name, otherwise String and Function will\n        // have the same hash\n        this.dispatch(\"function-name:\" + String(fn.name));\n      }\n\n      if (options.respectFunctionProperties) {\n        this._object(fn);\n      }\n    },\n    _number: function(number){\n      return write('number:' + number.toString());\n    },\n    _xml: function(xml){\n      return write('xml:' + xml.toString());\n    },\n    _null: function() {\n      return write('Null');\n    },\n    _undefined: function() {\n      return write('Undefined');\n    },\n    _regexp: function(regex){\n      return write('regex:' + regex.toString());\n    },\n    _uint8array: function(arr){\n      write('uint8array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _uint8clampedarray: function(arr){\n      write('uint8clampedarray:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _int8array: function(arr){\n      write('int8array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _uint16array: function(arr){\n      write('uint16array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _int16array: function(arr){\n      write('int16array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _uint32array: function(arr){\n      write('uint32array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _int32array: function(arr){\n      write('int32array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _float32array: function(arr){\n      write('float32array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _float64array: function(arr){\n      write('float64array:');\n      return this.dispatch(Array.prototype.slice.call(arr));\n    },\n    _arraybuffer: function(arr){\n      write('arraybuffer:');\n      return this.dispatch(new Uint8Array(arr));\n    },\n    _url: function(url) {\n      return write('url:' + url.toString(), 'utf8');\n    },\n    _map: function(map) {\n      write('map:');\n      var arr = Array.from(map);\n      return this._array(arr, options.unorderedSets !== false);\n    },\n    _set: function(set) {\n      write('set:');\n      var arr = Array.from(set);\n      return this._array(arr, options.unorderedSets !== false);\n    },\n    _file: function(file) {\n      write('file:');\n      return this.dispatch([file.name, file.size, file.type, file.lastModfied]);\n    },\n    _blob: function() {\n      if (options.ignoreUnknown) {\n        return write('[blob]');\n      }\n\n      throw Error('Hashing Blob objects is currently not supported\\n' +\n        '(see https://github.com/puleos/object-hash/issues/26)\\n' +\n        'Use \"options.replacer\" or \"options.ignoreUnknown\"\\n');\n    },\n    _domwindow: function() { return write('domwindow'); },\n    _bigint: function(number){\n      return write('bigint:' + number.toString());\n    },\n    /* Node.js standard native objects */\n    _process: function() { return write('process'); },\n    _timer: function() { return write('timer'); },\n    _pipe: function() { return write('pipe'); },\n    _tcp: function() { return write('tcp'); },\n    _udp: function() { return write('udp'); },\n    _tty: function() { return write('tty'); },\n    _statwatcher: function() { return write('statwatcher'); },\n    _securecontext: function() { return write('securecontext'); },\n    _connection: function() { return write('connection'); },\n    _zlib: function() { return write('zlib'); },\n    _context: function() { return write('context'); },\n    _nodescript: function() { return write('nodescript'); },\n    _httpparser: function() { return write('httpparser'); },\n    _dataview: function() { return write('dataview'); },\n    _signal: function() { return write('signal'); },\n    _fsevent: function() { return write('fsevent'); },\n    _tlswrap: function() { return write('tlswrap'); },\n  };\n}\n\n// Mini-implementation of stream.PassThrough\n// We are far from having need for the full implementation, and we can\n// make assumptions like \"many writes, then only one final read\"\n// and we can ignore encoding specifics\nfunction PassThrough() {\n  return {\n    buf: '',\n\n    write: function(b) {\n      this.buf += b;\n    },\n\n    end: function(b) {\n      this.buf += b;\n    },\n\n    read: function() {\n      return this.buf;\n    }\n  };\n}\n",
+    "import {\n    createCipheriv,\n    createDecipheriv,\n    createHash,\n    randomBytes,\n} from \"node:crypto\";\nimport type { ActivityStream } from \"@sockethub/schemas\";\nimport hash from \"object-hash\";\n\nconst ALGORITHM = \"aes-256-cbc\";\nconst IV_LENGTH = 16; // For AES, this is always 16\n\nexport function getPlatformId(\n    platform: string,\n    actor?: string,\n    _crypto = crypto,\n): string {\n    return actor ? _crypto.hash(platform + actor) : _crypto.hash(platform);\n}\n\nexport class Crypto {\n    randomBytes: typeof randomBytes;\n\n    constructor() {\n        this.createRandomBytes();\n    }\n\n    createRandomBytes() {\n        this.randomBytes = randomBytes;\n    }\n\n    encrypt(json: ActivityStream, secret: string): string {\n        Crypto.ensureSecret(secret);\n        const iv = this.randomBytes(IV_LENGTH);\n        const cipher = createCipheriv(ALGORITHM, Buffer.from(secret), iv);\n        let encrypted = cipher.update(JSON.stringify(json));\n\n        encrypted = Buffer.concat([encrypted, cipher.final()]);\n        return `${iv.toString(\"hex\")}:${encrypted.toString(\"hex\")}`;\n    }\n\n    decrypt(text: string, secret: string): ActivityStream {\n        Crypto.ensureSecret(secret);\n        const parts = text.split(\":\");\n        const iv = Buffer.from(parts.shift(), \"hex\");\n        const encryptedText = Buffer.from(parts.join(\":\"), \"hex\");\n        const decipher = createDecipheriv(ALGORITHM, Buffer.from(secret), iv);\n        let decrypted = decipher.update(encryptedText);\n        decrypted = Buffer.concat([decrypted, decipher.final()]);\n        return JSON.parse(decrypted.toString());\n    }\n\n    hash(text: string): string {\n        const SHASum = createHash(\"sha1\");\n        SHASum.update(text);\n        return SHASum.digest(\"hex\").substring(0, 7);\n    }\n\n    objectHash(object: object): string {\n        return hash(object);\n    }\n\n    randToken(len: number): string {\n        if (len > 32) {\n            throw new Error(\n                `crypto.randToken supports a length param of up to 32, ${len} given`,\n            );\n        }\n        const buf = this.randomBytes(len);\n        return buf.toString(\"hex\").substring(0, len);\n    }\n\n    private static ensureSecret(secret: string) {\n        if (secret.length !== 32) {\n            throw new Error(\n                `secret must be a 32 char string, length: ${secret.length}`,\n            );\n        }\n    }\n}\n\nexport const crypto = new Crypto();\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;EAEA,IAAI;AAAA,EAyBJ,UAAU,OAAO,UAAU;AAAA,EAE3B,SAAS,UAAU,CAAC,QAAQ,SAAQ;AAAA,IAClC,UAAU,cAAc,QAAQ,OAAO;AAAA,IAEvC,OAAO,KAAK,QAAQ,OAAO;AAAA;AAAA,EAU7B,QAAQ,OAAO,QAAQ,CAAC,QAAO;AAAA,IAC7B,OAAO,WAAW,MAAM;AAAA;AAAA,EAE1B,QAAQ,OAAO,QAAQ,CAAC,QAAO;AAAA,IAC7B,OAAO,WAAW,QAAQ,EAAC,eAAe,MAAM,WAAW,QAAQ,UAAU,MAAK,CAAC;AAAA;AAAA,EAErF,QAAQ,MAAM,QAAQ,CAAC,QAAO;AAAA,IAC5B,OAAO,WAAW,QAAQ,EAAC,WAAW,OAAO,UAAU,MAAK,CAAC;AAAA;AAAA,EAE/D,QAAQ,UAAU,QAAQ,CAAC,QAAO;AAAA,IAChC,OAAO,WAAW,QAAQ,EAAC,WAAW,OAAO,UAAU,OAAO,eAAe,KAAI,CAAC;AAAA;AAAA,EAIpF,IAAI,SAAS,OAAO,YAAY,OAAO,UAAU,EAAE,MAAM,IAAI,CAAC,QAAQ,KAAK;AAAA,EAC3E,OAAO,KAAK,aAAa;AAAA,EACzB,IAAI,YAAY,CAAC,UAAU,OAAO,UAAU,QAAQ;AAAA,EAEpD,SAAS,aAAa,CAAC,QAAQ,eAAc;AAAA,IAC3C,gBAAgB,iBAAiB,CAAC;AAAA,IAGlC,IAAI,UAAU,CAAC;AAAA,IACf,QAAQ,YAAY,cAAc,aAAa;AAAA,IAC/C,QAAQ,WAAW,cAAc,YAAY;AAAA,IAC7C,QAAQ,gBAAgB,cAAc,gBAAgB,OAAO;AAAA,IAC7D,QAAQ,YAAY,QAAQ,UAAU,YAAY;AAAA,IAClD,QAAQ,WAAW,QAAQ,SAAS,YAAY;AAAA,IAChD,QAAQ,gBAAgB,cAAc,kBAAkB,OAAO,QAAQ;AAAA,IACvE,QAAQ,cAAc,cAAc,gBAAgB,QAAQ,QAAQ;AAAA,IACpE,QAAQ,uBAAuB,cAAc,yBAAyB,QAAQ,QAAQ;AAAA,IACtF,QAAQ,4BAA4B,cAAc,8BAA8B,QAAQ,QAAQ;AAAA,IAChG,QAAQ,kBAAkB,cAAc,oBAAoB,OAAO,QAAQ;AAAA,IAC3E,QAAQ,gBAAgB,cAAc,kBAAkB,QAAQ,QAAQ;AAAA,IACxE,QAAQ,mBAAmB,cAAc,qBAAqB,QAAQ,QAAQ;AAAA,IAC9E,QAAQ,WAAW,cAAc,YAAY;AAAA,IAC7C,QAAQ,cAAc,cAAc,eAAe;AAAA,IAEnD,IAAG,OAAO,WAAW,aAAa;AAAA,MAChC,MAAM,IAAI,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IAIA,SAAS,IAAI,EAAG,IAAI,OAAO,QAAQ,EAAE,GAAG;AAAA,MACtC,IAAI,OAAO,GAAG,YAAY,MAAM,QAAQ,UAAU,YAAY,GAAG;AAAA,QAC/D,QAAQ,YAAY,OAAO;AAAA,MAC7B;AAAA,IACF;AAAA,IAEA,IAAG,OAAO,QAAQ,QAAQ,SAAS,MAAM,IAAG;AAAA,MAC1C,MAAM,IAAI,MAAM,gBAAgB,QAAQ,YAAY,uBAClD,uBAAuB,OAAO,KAAK,IAAI,CAAC;AAAA,IAC5C;AAAA,IAEA,IAAG,UAAU,QAAQ,QAAQ,QAAQ,MAAM,MACxC,QAAQ,cAAc,eAAc;AAAA,MACrC,MAAM,IAAI,MAAM,eAAe,QAAQ,WAAW,uBAChD,uBAAuB,UAAU,KAAK,IAAI,CAAC;AAAA,IAC/C;AAAA,IAEA,OAAO;AAAA;AAAA,EAIT,SAAS,gBAAgB,CAAC,GAAG;AAAA,IAC3B,IAAK,OAAO,MAAO,YAAY;AAAA,MAC7B,OAAO;AAAA,IACT;AAAA,IACA,IAAI,MAAM;AAAA,IACV,OAAO,IAAI,KAAK,SAAS,UAAU,SAAS,KAAK,CAAC,CAAC,KAAK;AAAA;AAAA,EAG1D,SAAS,IAAI,CAAC,QAAQ,SAAS;AAAA,IAC7B,IAAI;AAAA,IAEJ,IAAI,QAAQ,cAAc,eAAe;AAAA,MACvC,gBAAgB,OAAO,WAAW,QAAQ,SAAS;AAAA,IACrD,EAAO;AAAA,MACL,gBAAgB,IAAI;AAAA;AAAA,IAGtB,IAAI,OAAO,cAAc,UAAU,aAAa;AAAA,MAC9C,cAAc,QAAQ,cAAc;AAAA,MACpC,cAAc,MAAQ,cAAc;AAAA,IACtC;AAAA,IAEA,IAAI,SAAS,WAAW,SAAS,aAAa;AAAA,IAC9C,OAAO,SAAS,MAAM;AAAA,IACtB,IAAI,CAAC,cAAc,QAAQ;AAAA,MACzB,cAAc,IAAI,EAAE;AAAA,IACtB;AAAA,IAEA,IAAI,cAAc,QAAQ;AAAA,MACxB,OAAO,cAAc,OAAO,QAAQ,aAAa,WAAW,YAAY,QAAQ,QAAQ;AAAA,IAC1F;AAAA,IAEA,IAAI,MAAM,cAAc,KAAK;AAAA,IAC7B,IAAI,QAAQ,aAAa,UAAU;AAAA,MACjC,OAAO;AAAA,IACT;AAAA,IAEA,OAAO,IAAI,SAAS,QAAQ,QAAQ;AAAA;AAAA,EAWtC,QAAQ,gBAAgB,QAAQ,CAAC,QAAQ,SAAS,QAAQ;AAAA,IACxD,IAAI,OAAO,WAAW,aAAa;AAAA,MACjC,SAAS;AAAA,MACT,UAAU,CAAC;AAAA,IACb;AAAA,IAEA,UAAU,cAAc,QAAQ,OAAO;AAAA,IAEvC,OAAO,WAAW,SAAS,MAAM,EAAE,SAAS,MAAM;AAAA;AAAA,EAGpD,SAAS,UAAU,CAAC,SAAS,SAAS,SAAQ;AAAA,IAC5C,UAAU,WAAW,CAAC;AAAA,IACtB,IAAI,QAAQ,QAAQ,CAAC,KAAK;AAAA,MACxB,IAAI,QAAQ,QAAQ;AAAA,QAClB,OAAO,QAAQ,OAAO,KAAK,MAAM;AAAA,MACnC,EAAO;AAAA,QACL,OAAO,QAAQ,MAAM,KAAK,MAAM;AAAA;AAAA;AAAA,IAIpC,OAAO;AAAA,MACL,UAAU,QAAQ,CAAC,OAAM;AAAA,QACvB,IAAI,QAAQ,UAAU;AAAA,UACpB,QAAQ,QAAQ,SAAS,KAAK;AAAA,QAChC;AAAA,QAEA,IAAI,OAAO,OAAO;AAAA,QAClB,IAAI,UAAU,MAAM;AAAA,UAClB,OAAO;AAAA,QACT;AAAA,QAIA,OAAO,KAAK,MAAM,MAAM,KAAK;AAAA;AAAA,MAE/B,SAAS,QAAQ,CAAC,QAAQ;AAAA,QACxB,IAAI,UAAW;AAAA,QACf,IAAI,YAAY,OAAO,UAAU,SAAS,KAAK,MAAM;AAAA,QACrD,IAAI,UAAU,QAAQ,KAAK,SAAS;AAAA,QACpC,IAAI,CAAC,SAAS;AAAA,UACZ,UAAU,cAAc,YAAY;AAAA,QACtC,EAAO;AAAA,UACL,UAAU,QAAQ;AAAA;AAAA,QAGpB,UAAU,QAAQ,YAAY;AAAA,QAE9B,IAAI,eAAe;AAAA,QAEnB,KAAK,eAAe,QAAQ,QAAQ,MAAM,MAAM,GAAG;AAAA,UACjD,OAAO,KAAK,SAAS,eAAe,eAAe,GAAG;AAAA,QACxD,EAAO;AAAA,UACL,QAAQ,KAAK,MAAM;AAAA;AAAA,QAGrB,IAAI,OAAO,WAAW,eAAe,OAAO,YAAY,OAAO,SAAS,MAAM,GAAG;AAAA,UAC/E,MAAM,SAAS;AAAA,UACf,OAAO,MAAM,MAAM;AAAA,QACrB;AAAA,QAEA,IAAG,YAAY,YAAY,YAAY,cAAc,YAAY,iBAAiB;AAAA,UAChF,IAAG,KAAK,MAAM,UAAU;AAAA,YACtB,KAAK,MAAM,SAAS,MAAM;AAAA,UAC5B,EAAO,SAAI,QAAQ,eAAe;AAAA,YAChC,OAAO,MAAM,MAAM,UAAU,GAAG;AAAA,UAClC,EAAO;AAAA,YACL,MAAM,IAAI,MAAM,0BAA0B,UAAU,GAAG;AAAA;AAAA,QAE3D,EAAK;AAAA,UACH,IAAI,OAAO,OAAO,KAAK,MAAM;AAAA,UAC7B,IAAI,QAAQ,kBAAkB;AAAA,YAC5B,OAAO,KAAK,KAAK;AAAA,UACnB;AAAA,UAQA,IAAI,QAAQ,gBAAgB,SAAS,CAAC,iBAAiB,MAAM,GAAG;AAAA,YAC9D,KAAK,OAAO,GAAG,GAAG,aAAa,aAAa,aAAa;AAAA,UAC3D;AAAA,UAEA,IAAI,QAAQ,aAAa;AAAA,YACvB,OAAO,KAAK,OAAO,QAAQ,CAAC,KAAK;AAAA,cAAE,OAAO,CAAC,QAAQ,YAAY,GAAG;AAAA,aAAI;AAAA,UACxE;AAAA,UAEA,MAAM,YAAY,KAAK,SAAS,GAAG;AAAA,UACnC,IAAI,OAAO;AAAA,UACX,OAAO,KAAK,QAAQ,QAAQ,CAAC,KAAI;AAAA,YAC/B,KAAK,SAAS,GAAG;AAAA,YACjB,MAAM,GAAG;AAAA,YACT,IAAG,CAAC,QAAQ,eAAe;AAAA,cACzB,KAAK,SAAS,OAAO,IAAI;AAAA,YAC3B;AAAA,YACA,MAAM,GAAG;AAAA,WACV;AAAA;AAAA;AAAA,MAGL,QAAQ,QAAQ,CAAC,KAAK,WAAU;AAAA,QAC9B,YAAY,OAAO,cAAc,cAAc,YAC7C,QAAQ,oBAAoB;AAAA,QAE9B,IAAI,OAAO;AAAA,QACX,MAAM,WAAW,IAAI,SAAS,GAAG;AAAA,QACjC,IAAI,CAAC,aAAa,IAAI,UAAU,GAAG;AAAA,UACjC,OAAO,IAAI,QAAQ,QAAQ,CAAC,OAAO;AAAA,YACjC,OAAO,KAAK,SAAS,KAAK;AAAA,WAC3B;AAAA,QACH;AAAA,QAWA,IAAI,mBAAmB,CAAC;AAAA,QACxB,IAAI,UAAU,IAAI,IAAI,QAAQ,CAAC,OAAO;AAAA,UACpC,IAAI,OAAO,IAAI;AAAA,UACf,IAAI,eAAe,QAAQ,MAAM;AAAA,UACjC,IAAI,SAAS,WAAW,SAAS,MAAM,YAAY;AAAA,UACnD,OAAO,SAAS,KAAK;AAAA,UAErB,mBAAmB,iBAAiB,OAAO,aAAa,MAAM,QAAQ,MAAM,CAAC;AAAA,UAC7E,OAAO,KAAK,KAAK,EAAE,SAAS;AAAA,SAC7B;AAAA,QACD,UAAU,QAAQ,OAAO,gBAAgB;AAAA,QACzC,QAAQ,KAAK;AAAA,QACb,OAAO,KAAK,OAAO,SAAS,KAAK;AAAA;AAAA,MAEnC,OAAO,QAAQ,CAAC,MAAK;AAAA,QACnB,OAAO,MAAM,UAAU,KAAK,OAAO,CAAC;AAAA;AAAA,MAEtC,SAAS,QAAQ,CAAC,KAAI;AAAA,QACpB,OAAO,MAAM,YAAY,IAAI,SAAS,CAAC;AAAA;AAAA,MAEzC,QAAQ,QAAQ,CAAC,KAAI;AAAA,QACnB,OAAO,MAAM,WAAW,IAAI,SAAS,CAAC;AAAA;AAAA,MAExC,UAAU,QAAQ,CAAC,MAAK;AAAA,QACtB,OAAO,MAAM,UAAU,KAAK,SAAS,CAAC;AAAA;AAAA,MAExC,SAAS,QAAQ,CAAC,QAAO;AAAA,QACvB,MAAM,YAAY,OAAO,SAAS,GAAG;AAAA,QACrC,MAAM,OAAO,SAAS,CAAC;AAAA;AAAA,MAEzB,WAAW,QAAQ,CAAC,IAAG;AAAA,QACrB,MAAM,KAAK;AAAA,QACX,IAAI,iBAAiB,EAAE,GAAG;AAAA,UACxB,KAAK,SAAS,UAAU;AAAA,QAC1B,EAAO;AAAA,UACL,KAAK,SAAS,GAAG,SAAS,CAAC;AAAA;AAAA,QAG7B,IAAI,QAAQ,yBAAyB,OAAO;AAAA,UAI1C,KAAK,SAAS,mBAAmB,OAAO,GAAG,IAAI,CAAC;AAAA,QAClD;AAAA,QAEA,IAAI,QAAQ,2BAA2B;AAAA,UACrC,KAAK,QAAQ,EAAE;AAAA,QACjB;AAAA;AAAA,MAEF,SAAS,QAAQ,CAAC,QAAO;AAAA,QACvB,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC;AAAA;AAAA,MAE5C,MAAM,QAAQ,CAAC,KAAI;AAAA,QACjB,OAAO,MAAM,SAAS,IAAI,SAAS,CAAC;AAAA;AAAA,MAEtC,OAAO,QAAQ,GAAG;AAAA,QAChB,OAAO,MAAM,MAAM;AAAA;AAAA,MAErB,YAAY,QAAQ,GAAG;AAAA,QACrB,OAAO,MAAM,WAAW;AAAA;AAAA,MAE1B,SAAS,QAAQ,CAAC,OAAM;AAAA,QACtB,OAAO,MAAM,WAAW,MAAM,SAAS,CAAC;AAAA;AAAA,MAE1C,aAAa,QAAQ,CAAC,KAAI;AAAA,QACxB,MAAM,aAAa;AAAA,QACnB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,oBAAoB,QAAQ,CAAC,KAAI;AAAA,QAC/B,MAAM,oBAAoB;AAAA,QAC1B,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,YAAY,QAAQ,CAAC,KAAI;AAAA,QACvB,MAAM,YAAY;AAAA,QAClB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,cAAc,QAAQ,CAAC,KAAI;AAAA,QACzB,MAAM,cAAc;AAAA,QACpB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,aAAa,QAAQ,CAAC,KAAI;AAAA,QACxB,MAAM,aAAa;AAAA,QACnB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,cAAc,QAAQ,CAAC,KAAI;AAAA,QACzB,MAAM,cAAc;AAAA,QACpB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,aAAa,QAAQ,CAAC,KAAI;AAAA,QACxB,MAAM,aAAa;AAAA,QACnB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,eAAe,QAAQ,CAAC,KAAI;AAAA,QAC1B,MAAM,eAAe;AAAA,QACrB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,eAAe,QAAQ,CAAC,KAAI;AAAA,QAC1B,MAAM,eAAe;AAAA,QACrB,OAAO,KAAK,SAAS,MAAM,UAAU,MAAM,KAAK,GAAG,CAAC;AAAA;AAAA,MAEtD,cAAc,QAAQ,CAAC,KAAI;AAAA,QACzB,MAAM,cAAc;AAAA,QACpB,OAAO,KAAK,SAAS,IAAI,WAAW,GAAG,CAAC;AAAA;AAAA,MAE1C,MAAM,QAAQ,CAAC,KAAK;AAAA,QAClB,OAAO,MAAM,SAAS,IAAI,SAAS,GAAG,MAAM;AAAA;AAAA,MAE9C,MAAM,QAAQ,CAAC,KAAK;AAAA,QAClB,MAAM,MAAM;AAAA,QACZ,IAAI,MAAM,MAAM,KAAK,GAAG;AAAA,QACxB,OAAO,KAAK,OAAO,KAAK,QAAQ,kBAAkB,KAAK;AAAA;AAAA,MAEzD,MAAM,QAAQ,CAAC,KAAK;AAAA,QAClB,MAAM,MAAM;AAAA,QACZ,IAAI,MAAM,MAAM,KAAK,GAAG;AAAA,QACxB,OAAO,KAAK,OAAO,KAAK,QAAQ,kBAAkB,KAAK;AAAA;AAAA,MAEzD,OAAO,QAAQ,CAAC,MAAM;AAAA,QACpB,MAAM,OAAO;AAAA,QACb,OAAO,KAAK,SAAS,CAAC,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,KAAK,WAAW,CAAC;AAAA;AAAA,MAE1E,OAAO,QAAQ,GAAG;AAAA,QAChB,IAAI,QAAQ,eAAe;AAAA,UACzB,OAAO,MAAM,QAAQ;AAAA,QACvB;AAAA,QAEA,MAAM,MAAM;AAAA,IACV;AAAA,IACA;AAAA,CAAqD;AAAA;AAAA,MAEzD,YAAY,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,WAAW;AAAA;AAAA,MACjD,SAAS,QAAQ,CAAC,QAAO;AAAA,QACvB,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC;AAAA;AAAA,MAG5C,UAAU,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,SAAS;AAAA;AAAA,MAC7C,QAAQ,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,OAAO;AAAA;AAAA,MACzC,OAAO,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,MAAM;AAAA;AAAA,MACvC,MAAM,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,KAAK;AAAA;AAAA,MACrC,MAAM,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,KAAK;AAAA;AAAA,MACrC,MAAM,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,KAAK;AAAA;AAAA,MACrC,cAAc,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,aAAa;AAAA;AAAA,MACrD,gBAAgB,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,eAAe;AAAA;AAAA,MACzD,aAAa,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,YAAY;AAAA;AAAA,MACnD,OAAO,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,MAAM;AAAA;AAAA,MACvC,UAAU,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,SAAS;AAAA;AAAA,MAC7C,aAAa,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,YAAY;AAAA;AAAA,MACnD,aAAa,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,YAAY;AAAA;AAAA,MACnD,WAAW,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,UAAU;AAAA;AAAA,MAC/C,SAAS,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,QAAQ;AAAA;AAAA,MAC3C,UAAU,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,SAAS;AAAA;AAAA,MAC7C,UAAU,QAAQ,GAAG;AAAA,QAAE,OAAO,MAAM,SAAS;AAAA;AAAA,IAC/C;AAAA;AAAA,EAOF,SAAS,WAAW,GAAG;AAAA,IACrB,OAAO;AAAA,MACL,KAAK;AAAA,MAEL,OAAO,QAAQ,CAAC,GAAG;AAAA,QACjB,KAAK,OAAO;AAAA;AAAA,MAGd,KAAK,QAAQ,CAAC,GAAG;AAAA,QACf,KAAK,OAAO;AAAA;AAAA,MAGd,MAAM,QAAQ,GAAG;AAAA,QACf,OAAO,KAAK;AAAA;AAAA,IAEhB;AAAA;AAAA;;;AC5bF;AAPA;AAAA;AAAA;AAAA;AAAA;AAAA;AASA,IAAM,YAAY;AAClB,IAAM,YAAY;AAEX,SAAS,aAAa,CACzB,UACA,OACA,UAAU,QACJ;AAAA,EACN,OAAO,QAAQ,QAAQ,KAAK,WAAW,KAAK,IAAI,QAAQ,KAAK,QAAQ;AAAA;AAAA;AAGlE,MAAM,OAAO;AAAA,EAChB;AAAA,EAEA,WAAW,GAAG;AAAA,IACV,KAAK,kBAAkB;AAAA;AAAA,EAG3B,iBAAiB,GAAG;AAAA,IAChB,KAAK,cAAc;AAAA;AAAA,EAGvB,OAAO,CAAC,MAAsB,QAAwB;AAAA,IAClD,OAAO,aAAa,MAAM;AAAA,IAC1B,MAAM,KAAK,KAAK,YAAY,SAAS;AAAA,IACrC,MAAM,SAAS,eAAe,WAAW,OAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IAChE,IAAI,YAAY,OAAO,OAAO,KAAK,UAAU,IAAI,CAAC;AAAA,IAElD,YAAY,OAAO,OAAO,CAAC,WAAW,OAAO,MAAM,CAAC,CAAC;AAAA,IACrD,OAAO,GAAG,GAAG,SAAS,KAAK,KAAK,UAAU,SAAS,KAAK;AAAA;AAAA,EAG5D,OAAO,CAAC,MAAc,QAAgC;AAAA,IAClD,OAAO,aAAa,MAAM;AAAA,IAC1B,MAAM,QAAQ,KAAK,MAAM,GAAG;AAAA,IAC5B,MAAM,KAAK,OAAO,KAAK,MAAM,MAAM,GAAG,KAAK;AAAA,IAC3C,MAAM,gBAAgB,OAAO,KAAK,MAAM,KAAK,GAAG,GAAG,KAAK;AAAA,IACxD,MAAM,WAAW,iBAAiB,WAAW,OAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IACpE,IAAI,YAAY,SAAS,OAAO,aAAa;AAAA,IAC7C,YAAY,OAAO,OAAO,CAAC,WAAW,SAAS,MAAM,CAAC,CAAC;AAAA,IACvD,OAAO,KAAK,MAAM,UAAU,SAAS,CAAC;AAAA;AAAA,EAG1C,IAAI,CAAC,MAAsB;AAAA,IACvB,MAAM,SAAS,WAAW,MAAM;AAAA,IAChC,OAAO,OAAO,IAAI;AAAA,IAClB,OAAO,OAAO,OAAO,KAAK,EAAE,UAAU,GAAG,CAAC;AAAA;AAAA,EAG9C,UAAU,CAAC,QAAwB;AAAA,IAC/B,OAAO,2BAAK,MAAM;AAAA;AAAA,EAGtB,SAAS,CAAC,KAAqB;AAAA,IAC3B,IAAI,MAAM,IAAI;AAAA,MACV,MAAM,IAAI,MACN,yDAAyD,WAC7D;AAAA,IACJ;AAAA,IACA,MAAM,MAAM,KAAK,YAAY,GAAG;AAAA,IAChC,OAAO,IAAI,SAAS,KAAK,EAAE,UAAU,GAAG,GAAG;AAAA;AAAA,SAGhC,YAAY,CAAC,QAAgB;AAAA,IACxC,IAAI,OAAO,WAAW,IAAI;AAAA,MACtB,MAAM,IAAI,MACN,4CAA4C,OAAO,QACvD;AAAA,IACJ;AAAA;AAER;AAEO,IAAM,SAAS,IAAI;",
+  "debugId": "2BD4490536E49C1E64756E2164756E21",
+  "names": []
+}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@sockethub/crypto",
+  "description": "Crypto functions and helpers for Sockethub",
+  "version": "1.0.0-alpha.10",
+  "type": "module",
+  "private": false,
+  "author": "Nick Jennings <nick@silverbucket.net>",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "dist/index.js",
+  "exports": {
+    ".": {
+      "bun": "./src/index.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "src/",
+    "dist/"
+  ],
+  "engines": {
+    "bun": ">=1.2"
+  },
+  "keywords": [
+    "sockethub",
+    "messaging",
+    "redis",
+    "data lyer",
+    "rpc",
+    "data store"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sockethub/sockethub.git",
+    "directory": "packages/data-layer"
+  },
+  "homepage": "https://github.com/sockethub/sockethub/tree/master/packages/data-layer",
+  "scripts": {
+    "build": "bun build src/index.ts --outdir dist --target node --format esm --sourcemap=external",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@sockethub/schemas": "^3.0.0-alpha.10",
+    "object-hash": "^3.0.0"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "@types/debug": "^4.1.12",
+    "@types/object-hash": "^3.0.6",
+    "@types/sinon": "^17.0.4",
+    "sinon": "^17.0.2"
+  },
+  "gitHead": "8e1abf116b2a6b57d33c6e1a4af9143870517bae"
+}

package/src/index.test.ts

@@ -0,0 +1,86 @@
+import { afterEach, beforeEach, describe, expect, it } from "bun:test";
+import * as sinon from "sinon";
+
+import { Crypto, getPlatformId } from "./index";
+
+const secret = "a test secret.. that is 16 x 2..";
+const data = { foo: "bar" };
+const encryptedData =
+    "00000000000000000000000000000000:0543ec94d863fbf4b7a19b48e69d9317";
+
+describe("crypto", () => {
+    let crypto;
+    beforeEach(() => {
+        class TestCrypto extends Crypto {
+            createRandomBytes() {
+                this.randomBytes = () => Buffer.alloc(16);
+            }
+        }
+        crypto = new TestCrypto();
+    });
+
+    it("encrypts", () => {
+        expect(crypto.encrypt(data, secret)).toEqual(encryptedData);
+    });
+
+    it("decrypts", () => {
+        expect(crypto.decrypt(encryptedData, secret)).toEqual(data);
+    });
+
+    it("hashes", () => {
+        expect(crypto.hash("foobar")).toEqual("8843d7f");
+    });
+
+    it("randTokens 8", () => {
+        const token = crypto.randToken(8);
+        expect(token.length).toEqual(8);
+    });
+
+    it("randTokens 16", () => {
+        const token = crypto.randToken(16);
+        expect(token.length).toEqual(16);
+    });
+
+    it("randTokens 32", () => {
+        const token = crypto.randToken(32);
+        expect(token.length).toEqual(32);
+    });
+
+    it("randTokens 33+ will fail", () => {
+        expect(() => {
+            crypto.randToken(33);
+        }).toThrow();
+    });
+});
+
+describe("getPlatformId", () => {
+    let cryptoHashStub: any;
+    let crypto;
+
+    beforeEach(() => {
+        cryptoHashStub = sinon.mock();
+        class TestCrypto extends Crypto {
+            createRandomBytes() {
+                this.randomBytes = () => Buffer.alloc(16);
+            }
+        }
+        crypto = new TestCrypto();
+        cryptoHashStub = sinon.stub(crypto, "hash");
+        cryptoHashStub.returnsArg(0);
+    });
+
+    afterEach(() => {
+        cryptoHashStub.restore();
+    });
+
+    it("generates platform hash", () => {
+        expect(getPlatformId("foo", undefined, crypto)).toEqual("foo");
+        sinon.assert.calledOnce(cryptoHashStub);
+        sinon.assert.calledWith(cryptoHashStub, "foo");
+    });
+    it("generates platform + actor hash", () => {
+        expect(getPlatformId("foo", "bar", crypto)).toEqual("foobar");
+        sinon.assert.calledOnce(cryptoHashStub);
+        sinon.assert.calledWith(cryptoHashStub, "foobar");
+    });
+});

package/src/index.ts

@@ -0,0 +1,82 @@
+import {
+    createCipheriv,
+    createDecipheriv,
+    createHash,
+    randomBytes,
+} from "node:crypto";
+import type { ActivityStream } from "@sockethub/schemas";
+import hash from "object-hash";
+
+const ALGORITHM = "aes-256-cbc";
+const IV_LENGTH = 16; // For AES, this is always 16
+
+export function getPlatformId(
+    platform: string,
+    actor?: string,
+    _crypto = crypto,
+): string {
+    return actor ? _crypto.hash(platform + actor) : _crypto.hash(platform);
+}
+
+export class Crypto {
+    randomBytes: typeof randomBytes;
+
+    constructor() {
+        this.createRandomBytes();
+    }
+
+    createRandomBytes() {
+        this.randomBytes = randomBytes;
+    }
+
+    encrypt(json: ActivityStream, secret: string): string {
+        Crypto.ensureSecret(secret);
+        const iv = this.randomBytes(IV_LENGTH);
+        const cipher = createCipheriv(ALGORITHM, Buffer.from(secret), iv);
+        let encrypted = cipher.update(JSON.stringify(json));
+
+        encrypted = Buffer.concat([encrypted, cipher.final()]);
+        return `${iv.toString("hex")}:${encrypted.toString("hex")}`;
+    }
+
+    decrypt(text: string, secret: string): ActivityStream {
+        Crypto.ensureSecret(secret);
+        const parts = text.split(":");
+        const iv = Buffer.from(parts.shift(), "hex");
+        const encryptedText = Buffer.from(parts.join(":"), "hex");
+        const decipher = createDecipheriv(ALGORITHM, Buffer.from(secret), iv);
+        let decrypted = decipher.update(encryptedText);
+        decrypted = Buffer.concat([decrypted, decipher.final()]);
+        return JSON.parse(decrypted.toString());
+    }
+
+    hash(text: string): string {
+        const SHASum = createHash("sha1");
+        SHASum.update(text);
+        return SHASum.digest("hex").substring(0, 7);
+    }
+
+    objectHash(object: object): string {
+        return hash(object);
+    }
+
+    randToken(len: number): string {
+        if (len > 32) {
+            throw new Error(
+                `crypto.randToken supports a length param of up to 32, ${len} given`,
+            );
+        }
+        const buf = this.randomBytes(len);
+        return buf.toString("hex").substring(0, len);
+    }
+
+    private static ensureSecret(secret: string) {
+        if (secret.length !== 32) {
+            throw new Error(
+                `secret must be a 32 char string, length: ${secret.length}`,
+            );
+        }
+    }
+}
+
+export const crypto = new Crypto();