@tsctupper/otpkit 0.0.0-stage → 1.1.3

package/CHANGELOG.md

@@ -0,0 +1,85 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres
+to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [1.1.3] — 2026-11-03
+
+### Changed
+
+- The release workflow now authenticates to npm with trusted publishing (OIDC)
+  instead of a stored token. No library changes.
+
+## [1.1.2] — 2026-11-03
+
+### Changed
+
+- The package is now published as `@tsctupper/otpkit`. npm rejected the
+  unscoped name `otpkit` as too similar to an existing package. Install with
+  `npm install @tsctupper/otpkit`. No library changes. Versions 1.1.0 and 1.1.1
+  were tagged on GitHub but never published to npm.
+
+## [1.1.1] — 2026-11-03
+
+### Changed
+
+- The release workflow now stages the npm publish (`npm stage publish`) instead
+  of publishing directly, because npm is retiring two-factor-bypass tokens. A
+  maintainer approves the staged release on npmjs.com. No library changes.
+
+## [1.1.0] — 2026-11-03
+
+### Added
+
+- `matchTotp` returns the matched time-step counter (or `null`), making replay
+  protection straightforward (RFC 6238 §5.2). `verifyTotp` is now built on it.
+- `MAX_WINDOW` export. A `window` above 100 now throws `RangeError`, bounding
+  the HMAC work that untrusted input can request.
+
+### Fixed
+
+- `verifyTotp` no longer throws when the drift window reaches past the epoch
+  (e.g. verifying within the first period with `window: 1`); pre-epoch steps
+  are skipped and verification returns `false` as expected.
+- `period` and `now` are validated up front — `period: 0` now throws a clear
+  `RangeError` instead of a confusing BigInt conversion error.
+- `digits` is restricted to 6–8 per RFC 4226 §5.3; dynamic truncation yields at
+  most 31 bits, so 9–10 digit codes could never cover their full range.
+- `otpauthURL` percent-encodes issuer and label separately with a literal `:`
+  separator, matching the Key URI Format's canonical examples.
+- Empty secrets and non-digit tokens are rejected explicitly.
+- `otpauthURL` encodes spaces as `%20` instead of `+` in query values (issuer),
+  and validates `label`, `digits` and `period`.
+- `hotp` rejects counters above 2^64 − 1 instead of silently wrapping.
+- `base32Decode` rejects `=` anywhere but the end, and trims trailing padding in
+  linear time (a regex here was quadratic on long runs of `=`).
+
+### Changed
+
+- CI now tests every supported Node line: 18, 20, 22, and 24.
+- Strict type-checked ESLint, Prettier, `noUncheckedIndexedAccess`, and a
+  type-checked test suite split per module, with 100% line and branch coverage.
+- CI gains a lint/format/coverage job and a packed-install smoke test.
+- Added `SECURITY.md`, `CONTRIBUTING.md`, issue and PR templates, Dependabot,
+  CodeQL, and an npm release workflow with provenance.
+
+## [1.0.0] — 2026-07-16
+
+### Added
+
+- `hotp` — RFC 4226 HMAC-based OTP (SHA-1/256/512, configurable digits).
+- `totp` / `verifyTotp` — RFC 6238 time-based OTP with constant-time,
+  drift-window verification.
+- `generateSecret` and `otpauthURL` for enrollment (QR / manual key).
+- `base32Encode` / `base32Decode` — RFC 4648 Base32, tolerant decoding.
+- Test suite pinned to the RFC 4226, 6238, and 4648 official vectors.
+
+[Unreleased]: https://github.com/tsctupper/otpkit/compare/v1.1.3...HEAD
+[1.1.3]: https://github.com/tsctupper/otpkit/compare/v1.1.2...v1.1.3
+[1.1.2]: https://github.com/tsctupper/otpkit/compare/v1.1.1...v1.1.2
+[1.1.1]: https://github.com/tsctupper/otpkit/compare/v1.1.0...v1.1.1
+[1.1.0]: https://github.com/tsctupper/otpkit/compare/v1.0.0...v1.1.0
+[1.0.0]: https://github.com/tsctupper/otpkit/releases/tag/v1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Tyler Tupper
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,129 @@
-# Temporary Holding Version
+# otpkit
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Zero-dependency, RFC-verified HOTP & TOTP (2FA) for Node.js and TypeScript.**
+
+[![CI](https://github.com/tsctupper/otpkit/actions/workflows/ci.yml/badge.svg)](https://github.com/tsctupper/otpkit/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
+![Dependencies](https://img.shields.io/badge/dependencies-0-brightgreen)
+![Node](https://img.shields.io/badge/node-%3E%3D18-blue)
+![Types](https://img.shields.io/badge/types-included-blue)
+
+The one-time-password codes behind Google Authenticator, Authy, and every "enter your 6-digit code" screen — implemented straight from the RFCs, with **no runtime dependencies** and a test suite that asserts **byte-for-byte compliance with the official specification test vectors**.
+
+- HOTP (RFC 4226) and TOTP (RFC 6238), SHA-1 / SHA-256 / SHA-512
+- Base32 (RFC 4648) secrets — the format authenticator apps use
+- `otpauth://` provisioning URIs for QR-code enrollment
+- Constant-time verification with a bounded clock-drift window, plus `matchTotp` for replay protection
+- Zero dependencies, ESM, first-class TypeScript types
+- Verified against the RFC 4226 / 6238 / 4648 test vectors in CI, with 100% line and branch coverage
+
+## Install
+
+```sh
+npm install @tsctupper/otpkit
+```
+
+Node >= 18. Ships ESM + `.d.ts` types.
+
+## Quick start
+
+### Enroll a user
+
+```ts
+import { generateSecret, otpauthURL, base32Encode } from "@tsctupper/otpkit";
+
+const secret = generateSecret(); // 20 random bytes (160 bits)
+const uri = otpauthURL(secret, {
+  label: "alice@example.com",
+  issuer: "Acme",
+});
+
+// Render `uri` as a QR code for the user to scan, and store `secret` (encrypted).
+// The manual-entry key is the Base32 form:
+const manualKey = base32Encode(secret);
+```
+
+### Verify a code
+
+```ts
+import { verifyTotp, base32Decode } from "@tsctupper/otpkit";
+
+const secret = base32Decode(storedBase32Secret);
+const ok = verifyTotp(userSubmittedCode, secret); // ±1 step of drift by default
+
+if (!ok) throw new Error("Invalid code");
+```
+
+### Reject replayed codes
+
+A valid code stays valid for its whole window, so an attacker who sees one can reuse it. `matchTotp` tells you _which_ time step matched, so you can refuse anything you have already accepted:
+
+```ts
+import { matchTotp } from "@tsctupper/otpkit";
+
+const step = matchTotp(userSubmittedCode, secret);
+if (step === null || step <= user.lastTotpStep) throw new Error("Invalid code");
+
+user.lastTotpStep = step; // persist per user (e.g. in your database)
+```
+
+### Generate a code (client side, tests, or debugging)
+
+```ts
+import { totp, hotp } from "@tsctupper/otpkit";
+
+totp(secret); // current 6-digit TOTP
+totp(secret, { digits: 8, algorithm: "SHA256", period: 60 });
+hotp(secret, 42); // counter-based (RFC 4226)
+```
+
+## API
+
+| Function                           | Purpose                                                                                                   |
+| ---------------------------------- | --------------------------------------------------------------------------------------------------------- |
+| `hotp(secret, counter, opts?)`     | RFC 4226 counter-based OTP.                                                                               |
+| `totp(secret, opts?)`              | RFC 6238 time-based OTP for now (or an injected `now`).                                                   |
+| `verifyTotp(token, secret, opts?)` | Constant-time check across a drift `window` (default ±1, max `MAX_WINDOW` = 100). Returns `boolean`.      |
+| `matchTotp(token, secret, opts?)`  | Like `verifyTotp`, but returns the matched time-step (`bigint`) or `null` — use it for replay protection. |
+| `generateSecret(bytes?)`           | CSPRNG secret, default 20 bytes / 160 bits.                                                               |
+| `otpauthURL(secret, params)`       | `otpauth://totp/...` enrollment URI.                                                                      |
+| `base32Encode` / `base32Decode`    | RFC 4648 Base32, tolerant decode.                                                                         |
+
+`secret` is always **raw bytes** (`Uint8Array`) — decode Base32 text first. Options: `digits` (6–8, default 6), `algorithm` (`"SHA1"` default), `period` (30s), `window`, `now`, `epoch`. Full types are bundled.
+
+Invalid configuration (out-of-range digits, non-positive period, a `window` outside 0–100, an empty secret or label) throws a `RangeError`; a malformed or wrong token never throws — `verifyTotp` just returns `false`.
+
+## Standards & verification
+
+Correctness isn't asserted by hand — the test suite runs the specifications' own vectors:
+
+| Standard                                           | Covers | Vectors checked                      |
+| -------------------------------------------------- | ------ | ------------------------------------ |
+| [RFC 4226](https://www.rfc-editor.org/rfc/rfc4226) | HOTP   | Appendix D (counters 0–9)            |
+| [RFC 6238](https://www.rfc-editor.org/rfc/rfc6238) | TOTP   | Appendix B (SHA-1/256/512, 8 digits) |
+| [RFC 4648](https://www.rfc-editor.org/rfc/rfc4648) | Base32 | §10 canonical vectors                |
+
+Run them yourself: `npm test`.
+
+## Security notes
+
+- **Verification is constant-time.** Every candidate step is compared with `crypto.timingSafeEqual` and the loop never short-circuits, so neither the result nor the matching step leaks through timing.
+- **Secrets are ≥ 160 bits** by default, per RFC 4226 §4. Store them encrypted at rest; never log them.
+- **Keep the drift `window` small** (±1 is usually right). A larger window is more forgiving of clock skew but widens the guess surface. It is capped at 100 steps so untrusted input can't force unbounded HMAC work.
+- This library generates and verifies codes. **Replay protection** and **rate-limiting failed attempts** are the caller's responsibility — see `matchTotp` above. A 6-digit code has only a million possibilities, so always throttle.
+- Found a vulnerability? See [SECURITY.md](./SECURITY.md).
+
+## Development
+
+```sh
+npm ci
+npm run check      # typecheck, lint, format check, tests
+npm run coverage   # line/branch coverage (held at 100%)
+npm run build      # emit dist/ (ESM + .d.ts)
+```
+
+See [CONTRIBUTING.md](./CONTRIBUTING.md) and the [CHANGELOG](./CHANGELOG.md).
+
+## License
+
+[MIT](./LICENSE) © Tyler Tupper

package/dist/base32.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Decode an RFC 4648 Base32 string to raw bytes.
+ *
+ * Lowercase letters, whitespace, and trailing `=` padding are accepted. Anything
+ * else — including `=` anywhere but the end — throws, so a typo in a stored
+ * secret fails loudly instead of silently producing the wrong key.
+ *
+ * @throws {Error} on a character outside the Base32 alphabet or misplaced padding.
+ */
+export declare function base32Decode(input: string): Uint8Array;
+/** Encode raw bytes to a canonical, `=`-padded RFC 4648 Base32 string. */
+export declare function base32Encode(bytes: Uint8Array): string;
+//# sourceMappingURL=base32.d.ts.map

package/dist/base32.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base32.d.ts","sourceRoot":"","sources":["../src/base32.ts"],"names":[],"mappings":"AAeA;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CA2BtD;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAgBtD"}

package/dist/base32.js

@@ -0,0 +1,66 @@
+// RFC 4648 §6 Base32 — the encoding authenticator apps use for shared secrets
+// (e.g. the string you scan or type into Google Authenticator). Decoding is
+// tolerant of lowercase, whitespace, and missing `=` padding, because real-world
+// secrets are copied by hand; encoding emits canonical padded output.
+const ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+// Flat lookup table: 255 marks "not in the alphabet". A typed array (rather than
+// an object map) avoids prototype-key surprises and keeps lookups branch-light.
+const DECODE_TABLE = new Uint8Array(128).fill(255);
+for (let i = 0; i < ALPHABET.length; i++) {
+    DECODE_TABLE[ALPHABET.charCodeAt(i)] = i;
+    DECODE_TABLE[ALPHABET.toLowerCase().charCodeAt(i)] = i;
+}
+/**
+ * Decode an RFC 4648 Base32 string to raw bytes.
+ *
+ * Lowercase letters, whitespace, and trailing `=` padding are accepted. Anything
+ * else — including `=` anywhere but the end — throws, so a typo in a stored
+ * secret fails loudly instead of silently producing the wrong key.
+ *
+ * @throws {Error} on a character outside the Base32 alphabet or misplaced padding.
+ */
+export function base32Decode(input) {
+    const stripped = input.replace(/\s/g, "");
+    // Trim trailing padding with a loop, not /=+$/: that regex is quadratic on
+    // long runs of "=" followed by another character (polynomial ReDoS).
+    let end = stripped.length;
+    while (end > 0 && stripped.charCodeAt(end - 1) === 61 /* "=" */)
+        end--;
+    const clean = stripped.slice(0, end);
+    const out = new Uint8Array(Math.floor((clean.length * 5) / 8));
+    let bits = 0;
+    let value = 0;
+    let written = 0;
+    for (let i = 0; i < clean.length; i++) {
+        const code = clean.charCodeAt(i);
+        const idx = code < 128 ? DECODE_TABLE[code] : 255;
+        if (idx === undefined || idx === 255) {
+            throw new Error(`Invalid Base32 character: ${JSON.stringify(clean[i])}`);
+        }
+        value = ((value << 5) | idx) & 0xffff; // only the low 12 bits are ever needed
+        bits += 5;
+        if (bits >= 8) {
+            bits -= 8;
+            out[written++] = (value >>> bits) & 0xff;
+        }
+    }
+    return out;
+}
+/** Encode raw bytes to a canonical, `=`-padded RFC 4648 Base32 string. */
+export function base32Encode(bytes) {
+    let out = "";
+    let bits = 0;
+    let value = 0;
+    for (const byte of bytes) {
+        value = ((value << 8) | byte) & 0xffff;
+        bits += 8;
+        while (bits >= 5) {
+            bits -= 5;
+            out += ALPHABET.charAt((value >>> bits) & 0x1f);
+        }
+    }
+    if (bits > 0)
+        out += ALPHABET.charAt((value << (5 - bits)) & 0x1f);
+    return out.padEnd(Math.ceil(out.length / 8) * 8, "=");
+}
+//# sourceMappingURL=base32.js.map

package/dist/base32.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base32.js","sourceRoot":"","sources":["../src/base32.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,iFAAiF;AACjF,sEAAsE;AAEtE,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AAEpD,iFAAiF;AACjF,gFAAgF;AAChF,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;IACzC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,2EAA2E;IAC3E,qEAAqE;IACrE,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1B,OAAO,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAE/D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,uCAAuC;QAC9E,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;QACvC,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnE,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC"}

package/dist/hotp.d.ts

@@ -0,0 +1,15 @@
+export type OtpAlgorithm = "SHA1" | "SHA256" | "SHA512";
+export interface HotpOptions {
+    /** Digits in the generated code, 6–8 per RFC 4226 §5.3 (default 6). */
+    digits?: number;
+    /** HMAC hash — default "SHA1", the value authenticator apps assume. */
+    algorithm?: OtpAlgorithm;
+}
+/**
+ * RFC 4226 HMAC-based One-Time Password.
+ *
+ * @param secret Raw shared-secret bytes (Base32-decode first if you hold text).
+ * @param counter Moving factor; `number` or `bigint`, encoded 8-byte big-endian.
+ */
+export declare function hotp(secret: Uint8Array, counter: number | bigint, options?: HotpOptions): string;
+//# sourceMappingURL=hotp.d.ts.map

package/dist/hotp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hotp.d.ts","sourceRoot":"","sources":["../src/hotp.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,MAAM,CA4BpG"}

package/dist/hotp.js

@@ -0,0 +1,34 @@
+import { createHmac } from "node:crypto";
+/**
+ * RFC 4226 HMAC-based One-Time Password.
+ *
+ * @param secret Raw shared-secret bytes (Base32-decode first if you hold text).
+ * @param counter Moving factor; `number` or `bigint`, encoded 8-byte big-endian.
+ */
+export function hotp(secret, counter, options = {}) {
+    const digits = options.digits ?? 6;
+    const algorithm = options.algorithm ?? "SHA1";
+    // Dynamic truncation yields at most 31 bits, so codes longer than 8 digits
+    // could never span their full range — RFC 4226 §5.3 defines 6–8.
+    if (!Number.isInteger(digits) || digits < 6 || digits > 8) {
+        throw new RangeError("digits must be an integer between 6 and 8");
+    }
+    if (secret.length === 0)
+        throw new RangeError("secret must not be empty");
+    // 8-byte big-endian counter — RFC 4226 §5.1.
+    let c = BigInt(counter);
+    if (c < 0n || c > 0xffffffffffffffffn) {
+        throw new RangeError("counter must be between 0 and 2^64 - 1");
+    }
+    const counterBytes = new Uint8Array(8);
+    for (let i = 7; i >= 0; i--) {
+        counterBytes[i] = Number(c & 0xffn);
+        c >>= 8n;
+    }
+    const mac = createHmac(algorithm.toLowerCase(), Buffer.from(secret)).update(counterBytes).digest();
+    // Dynamic truncation — RFC 4226 §5.3.
+    const offset = mac.readUInt8(mac.length - 1) & 0x0f;
+    const binCode = mac.readUInt32BE(offset) & 0x7fffffff;
+    return (binCode % 10 ** digits).toString().padStart(digits, "0");
+}
+//# sourceMappingURL=hotp.js.map

package/dist/hotp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hotp.js","sourceRoot":"","sources":["../src/hotp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAWzC;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAAC,MAAkB,EAAE,OAAwB,EAAE,UAAuB,EAAE;IAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,2EAA2E;IAC3E,iEAAiE;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;IAE1E,6CAA6C;IAC7C,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACpC,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAEnG,sCAAsC;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAEtD,OAAO,CAAC,OAAO,GAAG,EAAE,IAAI,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACnE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { base32Decode, base32Encode } from "./base32.js";
+export { hotp, type HotpOptions, type OtpAlgorithm } from "./hotp.js";
+export { MAX_WINDOW, matchTotp, totp, verifyTotp, type TotpOptions, type VerifyOptions } from "./totp.js";
+export { generateSecret, otpauthURL, type OtpauthParams } from "./uri.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { base32Decode, base32Encode } from "./base32.js";
+export { hotp } from "./hotp.js";
+export { MAX_WINDOW, matchTotp, totp, verifyTotp } from "./totp.js";
+export { generateSecret, otpauthURL } from "./uri.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,IAAI,EAAuC,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAwC,MAAM,WAAW,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,UAAU,EAAsB,MAAM,UAAU,CAAC"}

package/dist/totp.d.ts

@@ -0,0 +1,34 @@
+import { type HotpOptions } from "./hotp.js";
+export interface TotpOptions extends HotpOptions {
+    /** Time step in seconds (default 30). */
+    period?: number;
+    /** Unix epoch offset T0 in seconds (default 0). */
+    epoch?: number;
+    /** Unix time in milliseconds (default `Date.now()`). Inject for deterministic tests. */
+    now?: number;
+}
+/** RFC 6238 time-based OTP for the current (or supplied) moment. */
+export declare function totp(secret: Uint8Array, options?: TotpOptions): string;
+/** Largest accepted drift window. Each step costs one HMAC, so this bounds CPU work. */
+export declare const MAX_WINDOW = 100;
+export interface VerifyOptions extends TotpOptions {
+    /** Clock-drift steps accepted on either side (default 1 = ±one period, max {@link MAX_WINDOW}). */
+    window?: number;
+}
+/**
+ * Check a token against a drift window in constant time and report *which*
+ * time step matched.
+ *
+ * Returns the matching RFC 6238 time-step counter, or `null` if nothing in the
+ * window matched. Persist the counter per user and reject any token whose
+ * counter is `<=` the last accepted one — that is replay protection
+ * (RFC 6238 §5.2).
+ *
+ * Every candidate step is checked (no early return) and each comparison uses
+ * `timingSafeEqual`, so neither *whether* nor *which* step matched leaks
+ * through timing. Malformed tokens return `null`; invalid configuration throws.
+ */
+export declare function matchTotp(token: string, secret: Uint8Array, options?: VerifyOptions): bigint | null;
+/** Verify a token against a drift window in constant time. See {@link matchTotp}. */
+export declare function verifyTotp(token: string, secret: Uint8Array, options?: VerifyOptions): boolean;
+//# sourceMappingURL=totp.d.ts.map

package/dist/totp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.d.ts","sourceRoot":"","sources":["../src/totp.ts"],"names":[],"mappings":"AACA,OAAO,EAAQ,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAEnD,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAgBD,oEAAoE;AACpE,wBAAgB,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,WAAgB,GAAG,MAAM,CAE1E;AAED,wFAAwF;AACxF,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,mGAAmG;IACnG,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,aAAkB,GAAG,MAAM,GAAG,IAAI,CAoBvG;AAED,qFAAqF;AACrF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAElG"}

package/dist/totp.js

@@ -0,0 +1,64 @@
+import { timingSafeEqual } from "node:crypto";
+import { hotp } from "./hotp.js";
+/** Time-step index for a moment — RFC 6238 §4.2. */
+function counterFor(options) {
+    const period = options.period ?? 30;
+    const epoch = options.epoch ?? 0;
+    const nowMs = options.now ?? Date.now();
+    if (!Number.isFinite(period) || period <= 0) {
+        throw new RangeError("period must be a positive number of seconds");
+    }
+    if (!Number.isFinite(nowMs))
+        throw new RangeError("now must be a finite Unix time in milliseconds");
+    const seconds = Math.floor(nowMs / 1000) - epoch;
+    if (seconds < 0)
+        throw new RangeError("now is before the epoch (T0)");
+    return BigInt(Math.floor(seconds / period));
+}
+/** RFC 6238 time-based OTP for the current (or supplied) moment. */
+export function totp(secret, options = {}) {
+    return hotp(secret, counterFor(options), options);
+}
+/** Largest accepted drift window. Each step costs one HMAC, so this bounds CPU work. */
+export const MAX_WINDOW = 100;
+/**
+ * Check a token against a drift window in constant time and report *which*
+ * time step matched.
+ *
+ * Returns the matching RFC 6238 time-step counter, or `null` if nothing in the
+ * window matched. Persist the counter per user and reject any token whose
+ * counter is `<=` the last accepted one — that is replay protection
+ * (RFC 6238 §5.2).
+ *
+ * Every candidate step is checked (no early return) and each comparison uses
+ * `timingSafeEqual`, so neither *whether* nor *which* step matched leaks
+ * through timing. Malformed tokens return `null`; invalid configuration throws.
+ */
+export function matchTotp(token, secret, options = {}) {
+    const window = options.window ?? 1;
+    if (!Number.isInteger(window) || window < 0 || window > MAX_WINDOW) {
+        throw new RangeError(`window must be an integer between 0 and ${MAX_WINDOW}`);
+    }
+    const digits = options.digits ?? 6;
+    if (token.length !== digits || !/^[0-9]+$/.test(token))
+        return null;
+    const expected = Buffer.from(token, "ascii");
+    const center = counterFor(options);
+    let matched = null;
+    for (let e = -window; e <= window; e++) {
+        const step = center + BigInt(e);
+        // Steps before the epoch don't exist — skip rather than throw, so a
+        // drift window that reaches past T0 can never crash verification.
+        if (step < 0n)
+            continue;
+        const candidate = Buffer.from(hotp(secret, step, options), "ascii");
+        if (timingSafeEqual(candidate, expected))
+            matched = step;
+    }
+    return matched;
+}
+/** Verify a token against a drift window in constant time. See {@link matchTotp}. */
+export function verifyTotp(token, secret, options = {}) {
+    return matchTotp(token, secret, options) !== null;
+}
+//# sourceMappingURL=totp.js.map

package/dist/totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp.js","sourceRoot":"","sources":["../src/totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAC;AAWnD,oDAAoD;AACpD,SAAS,UAAU,CAAC,OAAoB;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,IAAI,CAAC,MAAkB,EAAE,UAAuB,EAAE;IAChE,OAAO,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAAC;AAO9B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,MAAkB,EAAE,UAAyB,EAAE;IACtF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,2CAA2C,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAChC,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,IAAI,GAAG,EAAE;YAAE,SAAS;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,MAAkB,EAAE,UAAyB,EAAE;IACvF,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AACpD,CAAC"}

package/dist/uri.d.ts

@@ -0,0 +1,22 @@
+import type { OtpAlgorithm } from "./hotp.js";
+/**
+ * Cryptographically-random secret. Default 20 bytes (160 bits) — the minimum
+ * RFC 4226 §4 R6 recommends.
+ */
+export declare function generateSecret(bytes?: number): Uint8Array;
+export interface OtpauthParams {
+    /** Account label shown in the authenticator, e.g. the user's email. */
+    label: string;
+    /** Issuer / app name. */
+    issuer?: string;
+    digits?: number;
+    period?: number;
+    algorithm?: OtpAlgorithm;
+}
+/**
+ * Build the `otpauth://totp/...` provisioning URI authenticator apps import
+ * (usually as a QR code), per the de-facto Key URI Format. The secret is
+ * Base32-encoded and unpadded, as those apps expect.
+ */
+export declare function otpauthURL(secret: Uint8Array, params: OtpauthParams): string;
+//# sourceMappingURL=uri.d.ts.map

package/dist/uri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uri.d.ts","sourceRoot":"","sources":["../src/uri.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,SAAK,GAAG,UAAU,CAGrD;AAED,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAyB5E"}

package/dist/uri.js

@@ -0,0 +1,51 @@
+import { randomBytes } from "node:crypto";
+import { base32Encode } from "./base32.js";
+/**
+ * Cryptographically-random secret. Default 20 bytes (160 bits) — the minimum
+ * RFC 4226 §4 R6 recommends.
+ */
+export function generateSecret(bytes = 20) {
+    if (!Number.isInteger(bytes) || bytes < 16)
+        throw new RangeError("secret must be at least 16 bytes");
+    return new Uint8Array(randomBytes(bytes));
+}
+/**
+ * Build the `otpauth://totp/...` provisioning URI authenticator apps import
+ * (usually as a QR code), per the de-facto Key URI Format. The secret is
+ * Base32-encoded and unpadded, as those apps expect.
+ */
+export function otpauthURL(secret, params) {
+    const { label, issuer, digits = 6, period = 30, algorithm = "SHA1" } = params;
+    // Key URI Format: path is `issuer:label`, each component percent-encoded
+    // separately with the `:` separator left literal, as in the spec's examples.
+    if (label.length === 0)
+        throw new RangeError("label must not be empty");
+    if (!Number.isInteger(digits) || digits < 6 || digits > 8) {
+        throw new RangeError("digits must be an integer between 6 and 8");
+    }
+    if (!Number.isInteger(period) || period <= 0) {
+        throw new RangeError("period must be a positive integer number of seconds");
+    }
+    const path = issuer
+        ? `${encodeURIComponent(issuer)}:${encodeURIComponent(label)}`
+        : encodeURIComponent(label);
+    // Built by hand rather than URLSearchParams: that encodes spaces as `+`,
+    // which several authenticator apps show literally (e.g. "Acme+Corp").
+    const pairs = [
+        ["secret", unpaddedBase32(secret)],
+        ["algorithm", algorithm],
+        ["digits", String(digits)],
+        ["period", String(period)],
+    ];
+    if (issuer)
+        pairs.push(["issuer", issuer]);
+    const query = pairs.map(([k, v]) => `${k}=${encodeURIComponent(v)}`).join("&");
+    return `otpauth://totp/${path}?${query}`;
+}
+/** Base32 without `=` padding, as authenticator apps expect in the URI. */
+function unpaddedBase32(secret) {
+    const encoded = base32Encode(secret);
+    const pad = encoded.indexOf("=");
+    return pad === -1 ? encoded : encoded.slice(0, pad);
+}
+//# sourceMappingURL=uri.js.map

package/dist/uri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uri.js","sourceRoot":"","sources":["../src/uri.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAK,GAAG,EAAE;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IACrG,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAkB,EAAE,MAAqB;IAClE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,EAAE,SAAS,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IAC9E,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM;QACjB,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE;QAC9D,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9B,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,KAAK,GAAuB;QAChC,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;KAC3B,CAAC;IACF,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,OAAO,kBAAkB,IAAI,IAAI,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,SAAS,cAAc,CAAC,MAAkB;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,69 @@
 {
   "name": "@tsctupper/otpkit",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.1.3",
+  "description": "Zero-dependency, RFC-verified HOTP & TOTP (2FA / authenticator) codes for Node.js and TypeScript.",
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "tsx --test test/*.test.ts",
+    "coverage": "tsx --test --experimental-test-coverage --test-coverage-include='src/**' test/*.test.ts",
+    "check": "npm run typecheck && npm run lint && npm run format:check && npm test",
+    "clean": "rm -rf dist coverage",
+    "prepublishOnly": "npm run clean && npm run check && npm run build"
+  },
+  "keywords": [
+    "totp",
+    "hotp",
+    "otp",
+    "2fa",
+    "mfa",
+    "authenticator",
+    "google-authenticator",
+    "two-factor",
+    "rfc6238",
+    "rfc4226",
+    "rfc4648",
+    "zero-dependency",
+    "typescript"
+  ],
+  "author": "Tyler Tupper (https://github.com/tsctupper)",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tsctupper/otpkit.git"
+  },
+  "bugs": {
+    "url": "https://github.com/tsctupper/otpkit/issues"
+  },
+  "homepage": "https://github.com/tsctupper/otpkit#readme",
+  "devDependencies": {
+    "@eslint/js": "^9.39.5",
+    "@types/node": "^22.10.2",
+    "eslint": "^9.39.5",
+    "prettier": "^3.9.10",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "typescript-eslint": "^8.72.1"
+  }
+}