@sundaeswap/sprinkles 0.4.0 → 0.6.0

package/dist/esm/Sprinkle/encryption.js

@@ -0,0 +1,117 @@
+/**
+ * Encryption utilities for sensitive field handling.
+ * Functions for encrypting, decrypting, and masking sensitive data in settings.
+ */
+
+import { isObject, isUnion, isSensitive } from "./type-guards.js";
+/**
+ * Recursively collect paths to all sensitive fields in a schema.
+ */
+export function collectSensitivePaths(type, prefix = "") {
+  const paths = [];
+  if (isObject(type)) {
+    const fields = type["properties"];
+    for (const [field, fieldType] of Object.entries(fields)) {
+      const fieldPath = prefix ? `${prefix}.${field}` : field;
+      if (isSensitive(fieldType)) {
+        paths.push(fieldPath);
+      }
+      paths.push(...collectSensitivePaths(fieldType, fieldPath));
+    }
+  }
+  if (isUnion(type)) {
+    for (const variant of type.anyOf) {
+      paths.push(...collectSensitivePaths(variant, prefix));
+    }
+  }
+  return paths;
+}
+
+/**
+ * Get a nested value from an object by dot-separated path.
+ */
+export function getNestedValue(obj, path) {
+  return path.split(".").reduce((o, k) => o?.[k], obj);
+}
+
+/**
+ * Set a nested value in an object by dot-separated path.
+ */
+export function setNestedValue(obj, path, value) {
+  const keys = path.split(".");
+  const last = keys.pop();
+  const parent = keys.reduce((o, k) => o?.[k], obj);
+  if (parent && typeof parent === "object") {
+    parent[last] = value;
+  }
+}
+
+/**
+ * JSON replacer that converts BigInt to string with 'n' suffix.
+ */
+export function bigIntReplacer(_key, value) {
+  return typeof value === "bigint" ? `${value.toString()}n` : value;
+}
+
+/**
+ * JSON reviver that converts strings with 'n' suffix back to BigInt.
+ */
+export function bigIntReviver(_key, value) {
+  if (typeof value === "string" && /^\d+n$/.test(value)) {
+    return BigInt(value.slice(0, -1));
+  }
+  return value;
+}
+
+/**
+ * Deep clone an object, preserving BigInt values.
+ */
+export function cloneWithBigInt(obj) {
+  return JSON.parse(JSON.stringify(obj, bigIntReplacer), bigIntReviver);
+}
+
+/**
+ * Encrypt all sensitive fields in a settings object.
+ */
+export function encryptSensitiveFields(settings, type, encryption) {
+  const clone = cloneWithBigInt(settings);
+  const sensitivePaths = collectSensitivePaths(type);
+  for (const p of sensitivePaths) {
+    const value = getNestedValue(clone, p);
+    if (typeof value === "string" && value.length > 0) {
+      setNestedValue(clone, p, encryption.encrypt(value));
+    }
+  }
+  return clone;
+}
+
+/**
+ * Decrypt all sensitive fields in a settings object.
+ */
+export async function decryptSensitiveFields(settings, type, encryption) {
+  const clone = cloneWithBigInt(settings);
+  const sensitivePaths = collectSensitivePaths(type);
+  for (const p of sensitivePaths) {
+    const value = getNestedValue(clone, p);
+    if (typeof value === "string" && value.length > 0) {
+      setNestedValue(clone, p, await encryption.decrypt(value));
+    }
+  }
+  return clone;
+}
+
+/**
+ * Mask all sensitive fields in a settings object for display.
+ */
+export function maskSensitiveFields(settings, type) {
+  const clone = cloneWithBigInt(settings);
+  const sensitivePaths = collectSensitivePaths(type);
+  for (const p of sensitivePaths) {
+    const value = getNestedValue(clone, p);
+    if (typeof value === "string" && value.length > 0) {
+      setNestedValue(clone, p, "********");
+    }
+  }
+  return clone;
+}
+//# sourceMappingURL=encryption.js.map

package/dist/esm/Sprinkle/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","names":["isObject","isUnion","isSensitive","collectSensitivePaths","type","prefix","paths","fields","field","fieldType","Object","entries","fieldPath","push","variant","anyOf","getNestedValue","obj","path","split","reduce","o","k","setNestedValue","value","keys","last","pop","parent","bigIntReplacer","_key","toString","bigIntReviver","test","BigInt","slice","cloneWithBigInt","JSON","parse","stringify","encryptSensitiveFields","settings","encryption","clone","sensitivePaths","p","length","encrypt","decryptSensitiveFields","decrypt","maskSensitiveFields"],"sources":["../../../src/Sprinkle/encryption.ts"],"sourcesContent":["/**\n * Encryption utilities for sensitive field handling.\n * Functions for encrypting, decrypting, and masking sensitive data in settings.\n */\n\nimport type { TSchema } from \"@sinclair/typebox\";\nimport { isObject, isUnion, isSensitive } from \"./type-guards.js\";\nimport type { IEncryptionOptions } from \"./types.js\";\n\n/**\n * Recursively collect paths to all sensitive fields in a schema.\n */\nexport function collectSensitivePaths(\n  type: TSchema,\n  prefix: string = \"\",\n): string[] {\n  const paths: string[] = [];\n  if (isObject(type)) {\n    const fields = type[\"properties\"] as Record<string, TSchema>;\n    for (const [field, fieldType] of Object.entries(fields)) {\n      const fieldPath = prefix ? `${prefix}.${field}` : field;\n      if (isSensitive(fieldType)) {\n        paths.push(fieldPath);\n      }\n      paths.push(...collectSensitivePaths(fieldType, fieldPath));\n    }\n  }\n  if (isUnion(type)) {\n    for (const variant of type.anyOf) {\n      paths.push(...collectSensitivePaths(variant, prefix));\n    }\n  }\n  return paths;\n}\n\n/**\n * Get a nested value from an object by dot-separated path.\n */\nexport function getNestedValue(obj: any, path: string): unknown {\n  return path.split(\".\").reduce((o, k) => o?.[k], obj);\n}\n\n/**\n * Set a nested value in an object by dot-separated path.\n */\nexport function setNestedValue(obj: any, path: string, value: unknown): void {\n  const keys = path.split(\".\");\n  const last = keys.pop()!;\n  const parent = keys.reduce((o, k) => o?.[k], obj);\n  if (parent && typeof parent === \"object\") {\n    parent[last] = value;\n  }\n}\n\n/**\n * JSON replacer that converts BigInt to string with 'n' suffix.\n */\nexport function bigIntReplacer(_key: string, value: unknown): unknown {\n  return typeof value === \"bigint\" ? `${value.toString()}n` : value;\n}\n\n/**\n * JSON reviver that converts strings with 'n' suffix back to BigInt.\n */\nexport function bigIntReviver(_key: string, value: unknown): unknown {\n  if (typeof value === \"string\" && /^\\d+n$/.test(value)) {\n    return BigInt(value.slice(0, -1));\n  }\n  return value;\n}\n\n/**\n * Deep clone an object, preserving BigInt values.\n */\nexport function cloneWithBigInt<T>(obj: T): T {\n  return JSON.parse(JSON.stringify(obj, bigIntReplacer), bigIntReviver);\n}\n\n/**\n * Encrypt all sensitive fields in a settings object.\n */\nexport function encryptSensitiveFields<T>(\n  settings: T,\n  type: TSchema,\n  encryption: IEncryptionOptions,\n): T {\n  const clone = cloneWithBigInt(settings);\n  const sensitivePaths = collectSensitivePaths(type);\n  for (const p of sensitivePaths) {\n    const value = getNestedValue(clone, p);\n    if (typeof value === \"string\" && value.length > 0) {\n      setNestedValue(clone, p, encryption.encrypt(value));\n    }\n  }\n  return clone;\n}\n\n/**\n * Decrypt all sensitive fields in a settings object.\n */\nexport async function decryptSensitiveFields<T>(\n  settings: T,\n  type: TSchema,\n  encryption: IEncryptionOptions,\n): Promise<T> {\n  const clone = cloneWithBigInt(settings);\n  const sensitivePaths = collectSensitivePaths(type);\n  for (const p of sensitivePaths) {\n    const value = getNestedValue(clone, p);\n    if (typeof value === \"string\" && value.length > 0) {\n      setNestedValue(clone, p, await encryption.decrypt(value));\n    }\n  }\n  return clone;\n}\n\n/**\n * Mask all sensitive fields in a settings object for display.\n */\nexport function maskSensitiveFields<T>(settings: T, type: TSchema): T {\n  const clone = cloneWithBigInt(settings);\n  const sensitivePaths = collectSensitivePaths(type);\n  for (const p of sensitivePaths) {\n    const value = getNestedValue(clone, p);\n    if (typeof value === \"string\" && value.length > 0) {\n      setNestedValue(clone, p, \"********\");\n    }\n  }\n  return clone;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;;AAGA,SAASA,QAAQ,EAAEC,OAAO,EAAEC,WAAW,QAAQ,kBAAkB;AAGjE;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,IAAa,EACbC,MAAc,GAAG,EAAE,EACT;EACV,MAAMC,KAAe,GAAG,EAAE;EAC1B,IAAIN,QAAQ,CAACI,IAAI,CAAC,EAAE;IAClB,MAAMG,MAAM,GAAGH,IAAI,CAAC,YAAY,CAA4B;IAC5D,KAAK,MAAM,CAACI,KAAK,EAAEC,SAAS,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACJ,MAAM,CAAC,EAAE;MACvD,MAAMK,SAAS,GAAGP,MAAM,GAAG,GAAGA,MAAM,IAAIG,KAAK,EAAE,GAAGA,KAAK;MACvD,IAAIN,WAAW,CAACO,SAAS,CAAC,EAAE;QAC1BH,KAAK,CAACO,IAAI,CAACD,SAAS,CAAC;MACvB;MACAN,KAAK,CAACO,IAAI,CAAC,GAAGV,qBAAqB,CAACM,SAAS,EAAEG,SAAS,CAAC,CAAC;IAC5D;EACF;EACA,IAAIX,OAAO,CAACG,IAAI,CAAC,EAAE;IACjB,KAAK,MAAMU,OAAO,IAAIV,IAAI,CAACW,KAAK,EAAE;MAChCT,KAAK,CAACO,IAAI,CAAC,GAAGV,qBAAqB,CAACW,OAAO,EAAET,MAAM,CAAC,CAAC;IACvD;EACF;EACA,OAAOC,KAAK;AACd;;AAEA;AACA;AACA;AACA,OAAO,SAASU,cAAcA,CAACC,GAAQ,EAAEC,IAAY,EAAW;EAC9D,OAAOA,IAAI,CAACC,KAAK,CAAC,GAAG,CAAC,CAACC,MAAM,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,GAAGC,CAAC,CAAC,EAAEL,GAAG,CAAC;AACtD;;AAEA;AACA;AACA;AACA,OAAO,SAASM,cAAcA,CAACN,GAAQ,EAAEC,IAAY,EAAEM,KAAc,EAAQ;EAC3E,MAAMC,IAAI,GAAGP,IAAI,CAACC,KAAK,CAAC,GAAG,CAAC;EAC5B,MAAMO,IAAI,GAAGD,IAAI,CAACE,GAAG,CAAC,CAAE;EACxB,MAAMC,MAAM,GAAGH,IAAI,CAACL,MAAM,CAAC,CAACC,CAAC,EAAEC,CAAC,KAAKD,CAAC,GAAGC,CAAC,CAAC,EAAEL,GAAG,CAAC;EACjD,IAAIW,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IACxCA,MAAM,CAACF,IAAI,CAAC,GAAGF,KAAK;EACtB;AACF;;AAEA;AACA;AACA;AACA,OAAO,SAASK,cAAcA,CAACC,IAAY,EAAEN,KAAc,EAAW;EACpE,OAAO,OAAOA,KAAK,KAAK,QAAQ,GAAG,GAAGA,KAAK,CAACO,QAAQ,CAAC,CAAC,GAAG,GAAGP,KAAK;AACnE;;AAEA;AACA;AACA;AACA,OAAO,SAASQ,aAAaA,CAACF,IAAY,EAAEN,KAAc,EAAW;EACnE,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAACS,IAAI,CAACT,KAAK,CAAC,EAAE;IACrD,OAAOU,MAAM,CAACV,KAAK,CAACW,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;EACnC;EACA,OAAOX,KAAK;AACd;;AAEA;AACA;AACA;AACA,OAAO,SAASY,eAAeA,CAAInB,GAAM,EAAK;EAC5C,OAAOoB,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,SAAS,CAACtB,GAAG,EAAEY,cAAc,CAAC,EAAEG,aAAa,CAAC;AACvE;;AAEA;AACA;AACA;AACA,OAAO,SAASQ,sBAAsBA,CACpCC,QAAW,EACXrC,IAAa,EACbsC,UAA8B,EAC3B;EACH,MAAMC,KAAK,GAAGP,eAAe,CAACK,QAAQ,CAAC;EACvC,MAAMG,cAAc,GAAGzC,qBAAqB,CAACC,IAAI,CAAC;EAClD,KAAK,MAAMyC,CAAC,IAAID,cAAc,EAAE;IAC9B,MAAMpB,KAAK,GAAGR,cAAc,CAAC2B,KAAK,EAAEE,CAAC,CAAC;IACtC,IAAI,OAAOrB,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACsB,MAAM,GAAG,CAAC,EAAE;MACjDvB,cAAc,CAACoB,KAAK,EAAEE,CAAC,EAAEH,UAAU,CAACK,OAAO,CAACvB,KAAK,CAAC,CAAC;IACrD;EACF;EACA,OAAOmB,KAAK;AACd;;AAEA;AACA;AACA;AACA,OAAO,eAAeK,sBAAsBA,CAC1CP,QAAW,EACXrC,IAAa,EACbsC,UAA8B,EAClB;EACZ,MAAMC,KAAK,GAAGP,eAAe,CAACK,QAAQ,CAAC;EACvC,MAAMG,cAAc,GAAGzC,qBAAqB,CAACC,IAAI,CAAC;EAClD,KAAK,MAAMyC,CAAC,IAAID,cAAc,EAAE;IAC9B,MAAMpB,KAAK,GAAGR,cAAc,CAAC2B,KAAK,EAAEE,CAAC,CAAC;IACtC,IAAI,OAAOrB,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACsB,MAAM,GAAG,CAAC,EAAE;MACjDvB,cAAc,CAACoB,KAAK,EAAEE,CAAC,EAAE,MAAMH,UAAU,CAACO,OAAO,CAACzB,KAAK,CAAC,CAAC;IAC3D;EACF;EACA,OAAOmB,KAAK;AACd;;AAEA;AACA;AACA;AACA,OAAO,SAASO,mBAAmBA,CAAIT,QAAW,EAAErC,IAAa,EAAK;EACpE,MAAMuC,KAAK,GAAGP,eAAe,CAACK,QAAQ,CAAC;EACvC,MAAMG,cAAc,GAAGzC,qBAAqB,CAACC,IAAI,CAAC;EAClD,KAAK,MAAMyC,CAAC,IAAID,cAAc,EAAE;IAC9B,MAAMpB,KAAK,GAAGR,cAAc,CAAC2B,KAAK,EAAEE,CAAC,CAAC;IACtC,IAAI,OAAOrB,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACsB,MAAM,GAAG,CAAC,EAAE;MACjDvB,cAAc,CAACoB,KAAK,EAAEE,CAAC,EAAE,UAAU,CAAC;IACtC;EACF;EACA,OAAOF,KAAK;AACd","ignoreList":[]}