@symbiote-native/standard-web-crypto 3.0.0 → 3.0.1

package/README.md

@@ -15,13 +15,29 @@ plain re-exports of the same `core`.
 
 ## Install
 
+**New app:**
+
 ```bash
-npm install @symbiote-native/standard-web-crypto @symbiote-native/crypto
+npx @symbiote-native/cli new my-app --standard-web-crypto
+```
+
+**Existing SymbioteNative app:**
+
+```bash
+npx @symbiote-native/cli add --standard-web-crypto
 ```
 
-Scaffolding or extending a SymbioteNative app? `npx @symbiote-native/cli new --standard-web-crypto`
-(or `add --standard-web-crypto` in an existing app) installs and wires this for you — see
-[`@symbiote-native/cli`](../cli).
+Either way: installs `@symbiote-native/standard-web-crypto` + `@symbiote-native/crypto` and wires
+the latter's native autolinking automatically — see [`@symbiote-native/cli`](../cli). This package
+has no native module of its own; `@symbiote-native/crypto` does the actual native random-byte
+generation.
+
+<details>
+<summary>Manual install (no CLI — installing and wiring native autolinking by hand)</summary>
+
+```bash
+npm install @symbiote-native/standard-web-crypto @symbiote-native/crypto
+```
 
 `@symbiote-native/crypto` comes along as a regular dependency and does the actual native random-byte
 generation — see [its README](../crypto/README.md) for `expo-crypto`'s own native autolinking
@@ -30,6 +46,8 @@ requirements (already satisfied in any app that already wires up `@symbiote-nati
 
 No further native wiring is needed for this package itself — it has no native module of its own.
 
+</details>
+
 ## Shape
 
 ```
@@ -41,7 +59,7 @@ src/angular/  @symbiote-native/standard-web-crypto/angular — export * from '..
 
 `./react`, `./vue`, `./svelte`, and `./solid` are `exports`-map aliases straight onto `src/core/` —
 no physical per-framework file, since there's nothing to subscribe to or clean up. (The `webCrypto`
-named re-export used to live only in those three per-framework barrels; it now lives once in
+named re-export used to be duplicated across those per-framework barrels; it now lives once in
 `src/core/index.ts` instead.) `./angular` stays a physical file/subpath since Angular ships
 through a separate `ngc`/AOT build (`build-ngc/`).
 

package/build/core/web-crypto.js

@@ -18,11 +18,24 @@ function isSupportedTypedArray(value) {
         value instanceof Int32Array ||
         value instanceof Uint32Array);
 }
+// Upstream's own getRandomValues.ts enforces this per the W3C spec
+// (https://www.w3.org/TR/WebCryptoAPI/#Crypto-method-getRandomValues) regardless of what the
+// underlying native call can actually handle — @symbiote-native/crypto's getRandomValues has no
+// length limit of its own, so without this check an oversized view would sail straight through to
+// the native module instead of failing the same way a real Web Crypto implementation does.
+const MAX_RANDOM_BYTES = 65_536;
+class QuotaExceededError extends Error {
+    name = 'QuotaExceededError';
+    code = 22; // QUOTA_EXCEEDED_ERR
+}
 class Crypto {
     getRandomValues(values) {
         if (!isSupportedTypedArray(values)) {
             throw new TypeError('The provided ArrayBuffer view is not a supported integer-typed array');
         }
+        if (values.byteLength > MAX_RANDOM_BYTES) {
+            throw new QuotaExceededError(`The ArrayBuffer view's byte length (${values.byteLength}) exceeds the number of bytes of entropy available via this API (${MAX_RANDOM_BYTES})`);
+        }
         return getNativeRandomValues(values);
     }
 }

package/build-ngc/core/web-crypto.js

@@ -18,11 +18,24 @@ function isSupportedTypedArray(value) {
         value instanceof Int32Array ||
         value instanceof Uint32Array);
 }
+// Upstream's own getRandomValues.ts enforces this per the W3C spec
+// (https://www.w3.org/TR/WebCryptoAPI/#Crypto-method-getRandomValues) regardless of what the
+// underlying native call can actually handle — @symbiote-native/crypto's getRandomValues has no
+// length limit of its own, so without this check an oversized view would sail straight through to
+// the native module instead of failing the same way a real Web Crypto implementation does.
+const MAX_RANDOM_BYTES = 65_536;
+class QuotaExceededError extends Error {
+    name = 'QuotaExceededError';
+    code = 22; // QUOTA_EXCEEDED_ERR
+}
 class Crypto {
     getRandomValues(values) {
         if (!isSupportedTypedArray(values)) {
             throw new TypeError('The provided ArrayBuffer view is not a supported integer-typed array');
         }
+        if (values.byteLength > MAX_RANDOM_BYTES) {
+            throw new QuotaExceededError(`The ArrayBuffer view's byte length (${values.byteLength}) exceeds the number of bytes of entropy available via this API (${MAX_RANDOM_BYTES})`);
+        }
         return getNativeRandomValues(values);
     }
 }

package/build-ngc/core/web-crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-crypto.js","sourceRoot":"","sources":["../../src/core/web-crypto.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,+FAA+F;AAC/F,mGAAmG;AACnG,+FAA+F;AAC/F,kGAAkG;AAClG,4FAA4F;AAC5F,iBAAiB;AACjB,OAAO,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAOnF,gGAAgG;AAChG,6FAA6F;AAC7F,6FAA6F;AAC7F,+EAA+E;AAC/E,SAAS,qBAAqB,CAAC,KAAsB;IACnD,OAAO,CACL,KAAK,YAAY,SAAS;QAC1B,KAAK,YAAY,UAAU;QAC3B,KAAK,YAAY,UAAU;QAC3B,KAAK,YAAY,WAAW;QAC5B,KAAK,YAAY,UAAU;QAC3B,KAAK,YAAY,WAAW,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,MAAM;IACV,eAAe,CAAiC,MAAc;QAC5D,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,iBAAiB,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,UAAU,CAC1E,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,4EAA4E;AAC5E,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,SAAS,GAAe,gBAAgB,EAAE,IAAI,IAAI,MAAM,EAAE,CAAC;AAEjE,eAAe,SAAS,CAAC;AAEzB,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,EAAE,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE;YAC1C,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}
+{"version":3,"file":"web-crypto.js","sourceRoot":"","sources":["../../src/core/web-crypto.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,+FAA+F;AAC/F,mGAAmG;AACnG,+FAA+F;AAC/F,kGAAkG;AAClG,4FAA4F;AAC5F,iBAAiB;AACjB,OAAO,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAOnF,gGAAgG;AAChG,6FAA6F;AAC7F,6FAA6F;AAC7F,+EAA+E;AAC/E,SAAS,qBAAqB,CAAC,KAAsB;IACnD,OAAO,CACL,KAAK,YAAY,SAAS;QAC1B,KAAK,YAAY,UAAU;QAC3B,KAAK,YAAY,UAAU;QAC3B,KAAK,YAAY,WAAW;QAC5B,KAAK,YAAY,UAAU;QAC3B,KAAK,YAAY,WAAW,CAC7B,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,kBAAmB,SAAQ,KAAK;IAC3B,IAAI,GAAG,oBAAoB,CAAC;IACrC,IAAI,GAAG,EAAE,CAAC,CAAC,qBAAqB;CACjC;AAED,MAAM,MAAM;IACV,eAAe,CAAiC,MAAc;QAC5D,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CACjB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YACzC,MAAM,IAAI,kBAAkB,CAC1B,uCAAuC,MAAM,CAAC,UAAU,oEAAoE,gBAAgB,GAAG,CAChJ,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,iBAAiB,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,UAAU,CAC1E,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,4EAA4E;AAC5E,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,SAAS,GAAe,gBAAgB,EAAE,IAAI,IAAI,MAAM,EAAE,CAAC;AAEjE,eAAe,SAAS,CAAC;AAEzB,MAAM,UAAU,iBAAiB;IAC/B,IAAI,gBAAgB,EAAE,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE;YAC1C,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,IAAI;YAChB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symbiote-native/standard-web-crypto",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "expo-standard-web-crypto ported for SymbioteNative — a Web Crypto API getRandomValues polyfill built on @symbiote-native/crypto's native random source.",
   "license": "MIT",
   "keywords": [
@@ -68,7 +68,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@symbiote-native/crypto": "3.0.0"
+    "@symbiote-native/crypto": "3.0.1"
   },
   "peerDependencies": {
     "@angular/core": ">=20",
@@ -78,12 +78,12 @@
     "solid-js": ">=1.9.0",
     "svelte": ">=5.56.0",
     "vue": ">=3.5.0",
-    "@symbiote-native/angular": "^3.0.0",
-    "@symbiote-native/engine": "^1.0.0",
-    "@symbiote-native/react": "^3.0.0",
-    "@symbiote-native/solid": "^3.0.0",
-    "@symbiote-native/svelte": "^3.0.0",
-    "@symbiote-native/vue": "^3.0.0"
+    "@symbiote-native/angular": "^3.1.1",
+    "@symbiote-native/engine": "^1.3.0",
+    "@symbiote-native/react": "^3.0.3",
+    "@symbiote-native/solid": "^3.0.3",
+    "@symbiote-native/svelte": "^3.0.3",
+    "@symbiote-native/vue": "^3.0.3"
   },
   "peerDependenciesMeta": {
     "@symbiote-native/angular": {
@@ -131,13 +131,13 @@
     "solid-js": "^1.9.14",
     "svelte": "^5.56.0",
     "typescript": "~6.0.0",
-    "@symbiote-native/angular": "3.0.0",
-    "@symbiote-native/engine": "1.0.0",
-    "@symbiote-native/react": "3.0.0",
-    "@symbiote-native/solid": "3.0.0",
-    "@symbiote-native/svelte": "3.0.0",
-    "@symbiote-native/test-utils": "0.3.1",
-    "@symbiote-native/vue": "3.0.0"
+    "@symbiote-native/angular": "3.1.1",
+    "@symbiote-native/engine": "1.3.0",
+    "@symbiote-native/react": "3.0.3",
+    "@symbiote-native/solid": "3.0.3",
+    "@symbiote-native/svelte": "3.0.3",
+    "@symbiote-native/test-utils": "0.4.3",
+    "@symbiote-native/vue": "3.0.3"
   },
   "scripts": {
     "typecheck": "tsc --build",

package/src/core/web-crypto.ts

@@ -27,6 +27,18 @@ function isSupportedTypedArray(value: ArrayBufferView): value is ITypedArray {
   );
 }
 
+// Upstream's own getRandomValues.ts enforces this per the W3C spec
+// (https://www.w3.org/TR/WebCryptoAPI/#Crypto-method-getRandomValues) regardless of what the
+// underlying native call can actually handle — @symbiote-native/crypto's getRandomValues has no
+// length limit of its own, so without this check an oversized view would sail straight through to
+// the native module instead of failing the same way a real Web Crypto implementation does.
+const MAX_RANDOM_BYTES = 65_536;
+
+class QuotaExceededError extends Error {
+  override name = 'QuotaExceededError';
+  code = 22; // QUOTA_EXCEEDED_ERR
+}
+
 class Crypto implements IWebCrypto {
   getRandomValues<TArray extends ArrayBufferView>(values: TArray): TArray {
     if (!isSupportedTypedArray(values)) {
@@ -34,6 +46,11 @@ class Crypto implements IWebCrypto {
         'The provided ArrayBuffer view is not a supported integer-typed array',
       );
     }
+    if (values.byteLength > MAX_RANDOM_BYTES) {
+      throw new QuotaExceededError(
+        `The ArrayBuffer view's byte length (${values.byteLength}) exceeds the number of bytes of entropy available via this API (${MAX_RANDOM_BYTES})`,
+      );
+    }
     return getNativeRandomValues(values);
   }
 }