@venizia/ignis-helpers 0.2.0-2 → 0.2.0-20

package/dist/cjs/modules/crypto/algorithms/rsa.algorithm.d.ts

@@ -1,11 +1,10 @@
-import C from 'node:crypto';
 import { BaseCryptoAlgorithm } from './base.algorithm';
 interface IRSAExtraOptions {
     inputEncoding?: {
-        key: C.Encoding;
-        message: C.Encoding;
+        key: BufferEncoding;
+        message: BufferEncoding;
     };
-    outputEncoding?: C.Encoding;
+    outputEncoding?: BufferEncoding;
     doThrow?: boolean;
 }
 export type RSAAlgorithmType = 'rsa';
@@ -14,6 +13,10 @@ export declare class RSA extends BaseCryptoAlgorithm<RSAAlgorithmType, string, s
         algorithm: RSAAlgorithmType;
     });
     static withAlgorithm(): RSA;
+    /**
+     * Rejects a modulus below `MINIMUM_RSA_MODULUS_BITS` rather than generating it - a weak key still
+     * works, signs, and verifies, so this is the only point where the size is ever checked.
+     */
     generateDERKeyPair(opts?: {
         modulus: number;
     }): {

package/dist/cjs/modules/crypto/algorithms/rsa.algorithm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rsa.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/rsa.algorithm.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,aAAa,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,UAAU,gBAAgB;IACxB,aAAa,CAAC,EAAE;QAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC;QAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAA;KAAE,CAAC;IACzD,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAErC,qBAAa,GAAI,SAAQ,mBAAmB,CAC1C,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,gBAAgB,CACjB;gBACa,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE;IAIjD,MAAM,CAAC,aAAa;IAIpB,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE;;;;IAW7C,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IAyB1E,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;CAwB3E"}
+{"version":3,"file":"rsa.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/rsa.algorithm.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,UAAU,gBAAgB;IACxB,aAAa,CAAC,EAAE;QAAE,GAAG,EAAE,cAAc,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE,CAAC;IACjE,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAErC,qBAAa,GAAI,SAAQ,mBAAmB,CAC1C,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,gBAAgB,CACjB;gBACa,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE;IAIjD,MAAM,CAAC,aAAa;IAIpB;;;OAGG;IACH,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE;;;;IAmB7C,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IAyB1E,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;CAwB3E"}

package/dist/cjs/modules/crypto/algorithms/rsa.algorithm.js

@@ -5,6 +5,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RSA = void 0;
 const node_crypto_1 = __importDefault(require("node:crypto"));
+const error_1 = require("../../error");
+const constants_1 = require("../common/constants");
 const base_algorithm_1 = require("./base.algorithm");
 class RSA extends base_algorithm_1.BaseCryptoAlgorithm {
     constructor(opts) {
@@ -13,9 +15,19 @@ class RSA extends base_algorithm_1.BaseCryptoAlgorithm {
     static withAlgorithm() {
         return new RSA({ algorithm: 'rsa' });
     }
+    /**
+     * Rejects a modulus below `MINIMUM_RSA_MODULUS_BITS` rather than generating it - a weak key still
+     * works, signs, and verifies, so this is the only point where the size is ever checked.
+     */
     generateDERKeyPair(opts) {
+        const modulus = opts?.modulus ?? constants_1.MINIMUM_RSA_MODULUS_BITS;
+        if (modulus < constants_1.MINIMUM_RSA_MODULUS_BITS) {
+            throw (0, error_1.getError)({
+                message: `[RSA][generateDERKeyPair] Modulus ${modulus} is below the ${constants_1.MINIMUM_RSA_MODULUS_BITS}-bit minimum`,
+            });
+        }
         const keys = node_crypto_1.default.generateKeyPairSync('rsa', {
-            modulusLength: opts?.modulus ?? 2048,
+            modulusLength: modulus,
         });
         return {
             publicKey: keys.publicKey.export({ type: 'spki', format: 'der' }),

package/dist/cjs/modules/crypto/algorithms/rsa.algorithm.js.map

@@ -1 +1 @@
-{"version":3,"file":"rsa.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/rsa.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA4B;AAC5B,qDAAuD;AAUvD,MAAa,GAAI,SAAQ,oCAQxB;IACC,YAAY,IAAqC;QAC/C,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,kBAAkB,CAAC,IAA0B;QAC3C,MAAM,IAAI,GAAG,qBAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE;YACxC,aAAa,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;SACrC,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACjE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACzC,MAAM,EACJ,aAAa,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACnD,cAAc,GAAG,QAAQ,EACzB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAC,CAAC,eAAe,CAAC;gBAC1B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;gBAC3C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,qBAAC,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAC1C,MAAM,EACJ,aAAa,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EACpD,cAAc,GAAG,OAAO,EACxB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAC,CAAC,gBAAgB,CAAC;gBAC3B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC;gBAC5C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,qBAAC,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AA7ED,kBA6EC"}
+{"version":3,"file":"rsa.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/rsa.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA4B;AAC5B,2CAA2C;AAC3C,mDAA+D;AAC/D,qDAAuD;AAUvD,MAAa,GAAI,SAAQ,oCAQxB;IACC,YAAY,IAAqC;QAC/C,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,aAAa;QAClB,OAAO,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,IAA0B;QAC3C,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,oCAAwB,CAAC;QAE1D,IAAI,OAAO,GAAG,oCAAwB,EAAE,CAAC;YACvC,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,qCAAqC,OAAO,iBAAiB,oCAAwB,cAAc;aAC7G,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,qBAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE;YACxC,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YACjE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACzC,MAAM,EACJ,aAAa,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACnD,cAAc,GAAG,QAAQ,EACzB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAC,CAAC,eAAe,CAAC;gBAC1B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC;gBAC3C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,qBAAC,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAC1C,MAAM,EACJ,aAAa,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EACpD,cAAc,GAAG,OAAO,EACxB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAC,CAAC,gBAAgB,CAAC;gBAC3B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC;gBAC5C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,qBAAC,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAzFD,kBAyFC"}

package/dist/cjs/modules/crypto/common/constants.d.ts

@@ -1,11 +1,38 @@
+import type { TConstValue } from '../../../common';
 export declare const DEFAULT_CIPHER_BITS = 256;
+/** Legacy padEnd key-stretching char, no longer used - keys now derive via PBKDF2 (`DEFAULT_KDF_*`). Kept only so existing imports do not break. */
+export declare const DEFAULT_PAD_END: string;
 /**
- * @deprecated Legacy padEnd key-stretching char. No longer used for key derivation —
- * keys are now derived via PBKDF2 (see `DEFAULT_KDF_*`). Kept only so existing imports
- * do not break.
+ * Public and identical across every deployment, so it stops a bare dictionary attack but not a
+ * table precomputed against this value - pass `kdfSalt` for per-deployment isolation. Never
+ * change this: every ciphertext already encrypted under it becomes undecryptable.
  */
-export declare const DEFAULT_PAD_END: string;
 export declare const DEFAULT_KDF_SALT = "ignis-kdf-salt-v1";
 export declare const DEFAULT_KDF_ITERATIONS = 100000;
 export declare const DEFAULT_KDF_DIGEST = "sha256";
+/** NIST SP 800-132 minimum recommended salt size (128 bits) for a caller-supplied `kdfSalt`. */
+export declare const MINIMUM_KDF_SALT_BYTES = 16;
+/** NIST SP 800-57 Part 1 floor for RSA past 2030. */
+export declare const MINIMUM_RSA_MODULUS_BITS = 2048;
+export declare class HashAlgorithms {
+    /** Cryptographically broken - kept only for wire-protocol compatibility (VNPay checksums); never use for security decisions. */
+    static readonly MD5 = "md5";
+    /** Cryptographically weak - kept for wire-protocol compatibility with legacy integrations; never use for security decisions. */
+    static readonly SHA1 = "sha1";
+    static readonly SHA256 = "sha256";
+    static readonly SHA384 = "sha384";
+    static readonly SHA512 = "sha512";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(value: string): value is THashAlgorithm;
+}
+export type THashAlgorithm = TConstValue<typeof HashAlgorithms>;
+export declare class HashOutputEncodings {
+    static readonly HEX = "hex";
+    static readonly BASE64 = "base64";
+    static readonly BASE64URL = "base64url";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(value: string): value is THashOutputEncoding;
+}
+export type THashOutputEncoding = TConstValue<typeof HashOutputEncodings>;
+export declare const DEFAULT_HASH_OUTPUT_ENCODING: THashOutputEncoding;
 //# sourceMappingURL=constants.d.ts.map

package/dist/cjs/modules/crypto/common/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/common/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAAoB,CAAC;AAEjD,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AACpD,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAC9C,eAAO,MAAM,kBAAkB,WAAW,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,oJAAoJ;AACpJ,eAAO,MAAM,eAAe,QAAoB,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AACpD,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAC9C,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C,gGAAgG;AAChG,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,qDAAqD;AACrD,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,qBAAa,cAAc;IACzB,gIAAgI;IAChI,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,gIAAgI;IAChI,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAElC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAMvB;IAEH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,cAAc;CAGvD;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,SAAS,eAAe;IAExC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAA4D;IAEtF,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,mBAAmB;CAG5D;AAED,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE1E,eAAO,MAAM,4BAA4B,EAAE,mBAA6C,CAAC"}

package/dist/cjs/modules/crypto/common/constants.js

@@ -1,14 +1,50 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_KDF_DIGEST = exports.DEFAULT_KDF_ITERATIONS = exports.DEFAULT_KDF_SALT = exports.DEFAULT_PAD_END = exports.DEFAULT_CIPHER_BITS = void 0;
+exports.DEFAULT_HASH_OUTPUT_ENCODING = exports.HashOutputEncodings = exports.HashAlgorithms = exports.MINIMUM_RSA_MODULUS_BITS = exports.MINIMUM_KDF_SALT_BYTES = exports.DEFAULT_KDF_DIGEST = exports.DEFAULT_KDF_ITERATIONS = exports.DEFAULT_KDF_SALT = exports.DEFAULT_PAD_END = exports.DEFAULT_CIPHER_BITS = void 0;
 exports.DEFAULT_CIPHER_BITS = 256;
+/** Legacy padEnd key-stretching char, no longer used - keys now derive via PBKDF2 (`DEFAULT_KDF_*`). Kept only so existing imports do not break. */
+exports.DEFAULT_PAD_END = (0x00).toString();
 /**
- * @deprecated Legacy padEnd key-stretching char. No longer used for key derivation —
- * keys are now derived via PBKDF2 (see `DEFAULT_KDF_*`). Kept only so existing imports
- * do not break.
+ * Public and identical across every deployment, so it stops a bare dictionary attack but not a
+ * table precomputed against this value - pass `kdfSalt` for per-deployment isolation. Never
+ * change this: every ciphertext already encrypted under it becomes undecryptable.
  */
-exports.DEFAULT_PAD_END = (0x00).toString();
 exports.DEFAULT_KDF_SALT = 'ignis-kdf-salt-v1';
 exports.DEFAULT_KDF_ITERATIONS = 100_000;
 exports.DEFAULT_KDF_DIGEST = 'sha256';
+/** NIST SP 800-132 minimum recommended salt size (128 bits) for a caller-supplied `kdfSalt`. */
+exports.MINIMUM_KDF_SALT_BYTES = 16;
+/** NIST SP 800-57 Part 1 floor for RSA past 2030. */
+exports.MINIMUM_RSA_MODULUS_BITS = 2048;
+class HashAlgorithms {
+    /** Cryptographically broken - kept only for wire-protocol compatibility (VNPay checksums); never use for security decisions. */
+    static { this.MD5 = 'md5'; }
+    /** Cryptographically weak - kept for wire-protocol compatibility with legacy integrations; never use for security decisions. */
+    static { this.SHA1 = 'sha1'; }
+    static { this.SHA256 = 'sha256'; }
+    static { this.SHA384 = 'sha384'; }
+    static { this.SHA512 = 'sha512'; }
+    static { this.SCHEME_SET = new Set([
+        this.MD5,
+        this.SHA1,
+        this.SHA256,
+        this.SHA384,
+        this.SHA512,
+    ]); }
+    static isValid(value) {
+        return this.SCHEME_SET.has(value);
+    }
+}
+exports.HashAlgorithms = HashAlgorithms;
+class HashOutputEncodings {
+    static { this.HEX = 'hex'; }
+    static { this.BASE64 = 'base64'; }
+    static { this.BASE64URL = 'base64url'; }
+    static { this.SCHEME_SET = new Set([this.HEX, this.BASE64, this.BASE64URL]); }
+    static isValid(value) {
+        return this.SCHEME_SET.has(value);
+    }
+}
+exports.HashOutputEncodings = HashOutputEncodings;
+exports.DEFAULT_HASH_OUTPUT_ENCODING = HashOutputEncodings.HEX;
 //# sourceMappingURL=constants.js.map

package/dist/cjs/modules/crypto/common/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/common/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,mBAAmB,GAAG,GAAG,CAAC;AAEvC;;;;GAIG;AACU,QAAA,eAAe,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEpC,QAAA,gBAAgB,GAAG,mBAAmB,CAAC;AACvC,QAAA,sBAAsB,GAAG,OAAO,CAAC;AACjC,QAAA,kBAAkB,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/common/constants.ts"],"names":[],"mappings":";;;AAEa,QAAA,mBAAmB,GAAG,GAAG,CAAC;AAEvC,oJAAoJ;AACvI,QAAA,eAAe,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEjD;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,mBAAmB,CAAC;AACvC,QAAA,sBAAsB,GAAG,OAAO,CAAC;AACjC,QAAA,kBAAkB,GAAG,QAAQ,CAAC;AAE3C,gGAAgG;AACnF,QAAA,sBAAsB,GAAG,EAAE,CAAC;AAEzC,qDAAqD;AACxC,QAAA,wBAAwB,GAAG,IAAI,CAAC;AAE7C,MAAa,cAAc;IACzB,gIAAgI;aAChH,QAAG,GAAG,KAAK,CAAC;IAE5B,gIAAgI;aAChH,SAAI,GAAG,MAAM,CAAC;aAEd,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAS;QAC3C,IAAI,CAAC,GAAG;QACR,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;KACZ,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AArBH,wCAsBC;AAID,MAAa,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,WAAM,GAAG,QAAQ,CAAC;aAClB,cAAS,GAAG,WAAW,CAAC;aAExB,eAAU,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtF,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AATH,kDAUC;AAIY,QAAA,4BAA4B,GAAwB,mBAAmB,CAAC,GAAG,CAAC"}

package/dist/cjs/modules/env/app-env.d.ts

@@ -1,13 +1,16 @@
+import { BaseHelper } from '../base';
 import { EnvironmentNames } from './names';
-import { IApplicationEnvironment } from './types';
+import { IApplicationEnvironment } from './common';
 /** Adds the `NODE_ENV` reads to {@link EnvironmentNames}. Every name and set is inherited, so `Environment.PRODUCTION`, `Environment.COMMON_ENVS` and `Environment.DEVELOPMENT_ENVS` keep resolving here; only these two members need a `process`. */
 export declare class Environment extends EnvironmentNames {
+    /** `NODE_ENV` exactly as the host has it, `undefined` when unset. Destructured on purpose: `bun build` rewrites `process.env.NODE_ENV` to a literal at build time, a destructured read stays a runtime read. */
+    static get ambient(): string | undefined;
     static get current(): string;
     static is(opts: {
         name: string;
     }): boolean;
 }
-export declare class ApplicationEnvironment implements IApplicationEnvironment {
+export declare class ApplicationEnvironment extends BaseHelper implements IApplicationEnvironment {
     private prefix;
     private arguments;
     constructor(opts: {

package/dist/cjs/modules/env/app-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-env.d.ts","sourceRoot":"","sources":["../../../../src/modules/env/app-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAElD,sPAAsP;AACtP,qBAAa,WAAY,SAAQ,gBAAgB;IAC/C,MAAM,KAAK,OAAO,IAAI,MAAM,CAO3B;IAED,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;CAGjC;AAED,qBAAa,sBAAuB,YAAW,uBAAuB;IACpE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAYvF,GAAG,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,EAC3C,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,UAAU,CAAC;QAC1B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,UAAU,CAAC;KACxD,GACA,UAAU;IAWb,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS;IAI5C,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;IAM5C,aAAa;IAKb,IAAI;CAGL;AAED,eAAO,MAAM,sBAAsB,wBAGjC,CAAC;AAEH,eAAO,MAAM,OAAO,wBAAyB,CAAC;AAC9C,eAAO,MAAM,IAAI,wBAAyB,CAAC"}
+{"version":3,"file":"app-env.d.ts","sourceRoot":"","sources":["../../../../src/modules/env/app-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAEnD,sPAAsP;AACtP,qBAAa,WAAY,SAAQ,gBAAgB;IAC/C,gNAAgN;IAChN,MAAM,KAAK,OAAO,IAAI,MAAM,GAAG,SAAS,CAGvC;IAED,MAAM,KAAK,OAAO,IAAI,MAAM,CAE3B;IAED,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;CAGjC;AAED,qBAAa,sBAAuB,SAAQ,UAAW,YAAW,uBAAuB;IACvF,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAA2B;gBAEhC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAcvF,GAAG,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,EAC3C,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,UAAU,CAAC;QAC1B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,UAAU,CAAC;KACxD,GACA,UAAU;IAWb,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS;IAI5C,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;IAM5C,aAAa;IAIb,IAAI;CAGL;AAoBD,eAAO,MAAM,sBAAsB,wBAAkC,CAAC;AAEtE,eAAO,MAAM,OAAO,wBAAyB,CAAC;AAC9C,eAAO,MAAM,IAAI,wBAAyB,CAAC"}

package/dist/cjs/modules/env/app-env.js

@@ -1,23 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Envs = exports.AppEnvs = exports.applicationEnvironment = exports.ApplicationEnvironment = exports.Environment = void 0;
+const base_1 = require("../base");
 const names_1 = require("./names");
 /** Adds the `NODE_ENV` reads to {@link EnvironmentNames}. Every name and set is inherited, so `Environment.PRODUCTION`, `Environment.COMMON_ENVS` and `Environment.DEVELOPMENT_ENVS` keep resolving here; only these two members need a `process`. */
 class Environment extends names_1.EnvironmentNames {
-    static get current() {
+    /** `NODE_ENV` exactly as the host has it, `undefined` when unset. Destructured on purpose: `bun build` rewrites `process.env.NODE_ENV` to a literal at build time, a destructured read stays a runtime read. */
+    static get ambient() {
         const { NODE_ENV } = process.env;
-        if (!NODE_ENV) {
-            return Environment.DEVELOPMENT;
-        }
         return NODE_ENV;
     }
+    static get current() {
+        return Environment.ambient ?? Environment.DEVELOPMENT;
+    }
     static is(opts) {
         return this.current === opts.name;
     }
 }
 exports.Environment = Environment;
-class ApplicationEnvironment {
+class ApplicationEnvironment extends base_1.BaseHelper {
     constructor(opts) {
+        super({ scope: ApplicationEnvironment.name });
         this.arguments = {};
         this.prefix = opts.prefix;
         for (const key in opts.envs) {
@@ -44,18 +47,28 @@ class ApplicationEnvironment {
         }
     }
     isDevelopment() {
-        const { NODE_ENV } = process.env;
-        return NODE_ENV === 'development';
+        return Environment.ambient === 'development';
     }
     keys() {
         return Object.keys(this.arguments);
     }
 }
 exports.ApplicationEnvironment = ApplicationEnvironment;
-exports.applicationEnvironment = new ApplicationEnvironment({
-    prefix: process.env.APPLICATION_ENV_PREFIX ?? 'APP_ENV',
-    envs: process.env,
-});
+/** A process can carry two copies of this module - an application's ESM import beside a CommonJS require. The instance lives in this globalThis slot so a `set()` through one copy is read through the other. */
+const INSTANCE_SLOT = Symbol.for('ignis:application-environment');
+const resolveApplicationEnvironment = () => {
+    const shared = Reflect.get(globalThis, INSTANCE_SLOT);
+    if (shared) {
+        return shared;
+    }
+    const created = new ApplicationEnvironment({
+        prefix: process.env.APPLICATION_ENV_PREFIX ?? 'APP_ENV',
+        envs: process.env,
+    });
+    Reflect.set(globalThis, INSTANCE_SLOT, created);
+    return created;
+};
+exports.applicationEnvironment = resolveApplicationEnvironment();
 exports.AppEnvs = exports.applicationEnvironment;
 exports.Envs = exports.applicationEnvironment;
 //# sourceMappingURL=app-env.js.map

package/dist/cjs/modules/env/app-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-env.js","sourceRoot":"","sources":["../../../../src/modules/env/app-env.ts"],"names":[],"mappings":";;;AAAA,mCAA2C;AAG3C,sPAAsP;AACtP,MAAa,WAAY,SAAQ,wBAAgB;IAC/C,MAAM,KAAK,OAAO;QAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,WAAW,CAAC,WAAW,CAAC;QACjC,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,IAAsB;QAC9B,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAbD,kCAaC;AAED,MAAa,sBAAsB;IAIjC,YAAY,IAA2E;QAF/E,cAAS,GAAwB,EAAE,CAAC;QAG1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,GAAG,CACD,GAAW,EACX,IAGC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE,YAAY,CAAe,CAAC;QAClD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,YAAY,CAAe,CAAC;IAC3D,CAAC;IAED,GAAG,CAAY,GAAW,EAAE,KAAgB;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAsC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,aAAa;QACX,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QACjC,OAAO,QAAQ,KAAK,aAAa,CAAC;IACpC,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;CACF;AAnDD,wDAmDC;AAEY,QAAA,sBAAsB,GAAG,IAAI,sBAAsB,CAAC;IAC/D,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS;IACvD,IAAI,EAAE,OAAO,CAAC,GAAG;CAClB,CAAC,CAAC;AAEU,QAAA,OAAO,GAAG,8BAAsB,CAAC;AACjC,QAAA,IAAI,GAAG,8BAAsB,CAAC"}
+{"version":3,"file":"app-env.js","sourceRoot":"","sources":["../../../../src/modules/env/app-env.ts"],"names":[],"mappings":";;;AAAA,yCAA4C;AAC5C,mCAA2C;AAG3C,sPAAsP;AACtP,MAAa,WAAY,SAAQ,wBAAgB;IAC/C,gNAAgN;IAChN,MAAM,KAAK,OAAO;QAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,OAAO;QAChB,OAAO,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,WAAW,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,IAAsB;QAC9B,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAdD,kCAcC;AAED,MAAa,sBAAuB,SAAQ,iBAAU;IAIpD,YAAY,IAA2E;QACrF,KAAK,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC;QAHxC,cAAS,GAAwB,EAAE,CAAC;QAK1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,GAAG,CACD,GAAW,EACX,IAGC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAE/B,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE,YAAY,CAAe,CAAC;QAClD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,YAAY,CAAe,CAAC;IAC3D,CAAC;IAED,GAAG,CAAY,GAAW,EAAE,KAAgB;QAC1C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAsC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,aAAa;QACX,OAAO,WAAW,CAAC,OAAO,KAAK,aAAa,CAAC;IAC/C,CAAC;IAED,IAAI;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;CACF;AApDD,wDAoDC;AAED,iNAAiN;AACjN,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AAElE,MAAM,6BAA6B,GAAG,GAA2B,EAAE;IACjE,MAAM,MAAM,GAAuC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1F,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC;QACzC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS;QACvD,IAAI,EAAE,OAAO,CAAC,GAAG;KAClB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAEhD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEW,QAAA,sBAAsB,GAAG,6BAA6B,EAAE,CAAC;AAEzD,QAAA,OAAO,GAAG,8BAAsB,CAAC;AACjC,QAAA,IAAI,GAAG,8BAAsB,CAAC"}

package/dist/cjs/modules/env/common/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/env/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/env/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}

package/dist/cjs/modules/env/common/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/modules/env/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/modules/env/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB"}

package/dist/cjs/modules/env/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/modules/env/common/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,GAAG,CAAC,UAAU,EAAE,mBAAmB,GAAG,OAAO,EAC3C,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QACL,YAAY,CAAC,EAAE,UAAU,CAAC;QAC1B,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,UAAU,CAAC;KACxD,GACA,UAAU,CAAC;IACd,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,GAAG,CAAC;CACpD"}

package/dist/cjs/modules/env/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/modules/env/common/types.ts"],"names":[],"mappings":""}

package/dist/cjs/modules/env/index.d.ts

@@ -1,4 +1,4 @@
 export * from './app-env';
+export * from './common';
 export * from './names';
-export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/env/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/env/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/env/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/cjs/modules/env/index.js

@@ -15,6 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./app-env"), exports);
+__exportStar(require("./common"), exports);
 __exportStar(require("./names"), exports);
-__exportStar(require("./types"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/env/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/env/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,0CAAwB;AACxB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/env/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,2CAAyB;AACzB,0CAAwB"}

package/dist/cjs/modules/index.d.ts

@@ -8,9 +8,12 @@ export * from './network';
 export * from './pool';
 export * from './queue';
 export * from './redis';
+export * from './retry';
 export * from './secrets';
+export * from './slug';
 export * from './socket';
 export * from './storage';
+export * from './tree';
 export * from './uid';
 export * from './worker-thread';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AAEvB,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,OAAO,CAAC;AACtB,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/modules/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AAEvB,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,OAAO,CAAC;AACtB,cAAc,iBAAiB,CAAC"}

package/dist/cjs/modules/index.js

@@ -24,9 +24,12 @@ __exportStar(require("./network"), exports);
 __exportStar(require("./pool"), exports);
 __exportStar(require("./queue"), exports);
 __exportStar(require("./redis"), exports);
+__exportStar(require("./retry"), exports);
 __exportStar(require("./secrets"), exports);
+__exportStar(require("./slug"), exports);
 __exportStar(require("./socket"), exports);
 __exportStar(require("./storage"), exports);
+__exportStar(require("./tree"), exports);
 __exportStar(require("./uid"), exports);
 __exportStar(require("./worker-thread"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AAEvB,2CAAyB;AACzB,wCAAsB;AACtB,0CAAwB;AACxB,kDAAgC;AAChC,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,0CAAwB;AACxB,0CAAwB;AACxB,4CAA0B;AAC1B,2CAAyB;AACzB,4CAA0B;AAC1B,wCAAsB;AACtB,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AAEvB,2CAAyB;AACzB,wCAAsB;AACtB,0CAAwB;AACxB,kDAAgC;AAChC,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,0CAAwB;AACxB,0CAAwB;AACxB,0CAAwB;AACxB,4CAA0B;AAC1B,yCAAuB;AACvB,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,wCAAsB;AACtB,kDAAgC"}

package/dist/cjs/modules/logger/common/constants.d.ts

@@ -7,10 +7,26 @@ export declare class LoggerFormats {
     static isValid(input: string): input is TLoggerFormat;
 }
 export type TLoggerFormat = TConstValue<typeof LoggerFormats>;
-/** debug() gate, computed ONCE at module load: DEBUG truthy and NODE_ENV unset or allowlisted. Shared across every logger implementation - runtime env changes need a restart. */
 export declare const SHOULD_LOG_DEBUG: boolean;
 /** The logger's own level, below which a line never reaches ANY transport. Defaults to `debug` - level gating belongs to the wrapper and each transport, and a stricter default here would silently drop lines the wrapper already let through. */
 export declare const resolveLoggerLevel: (opts: {
     configured?: string;
 }) => TLogLevel;
+/**
+ * Whether log lines may carry ANSI color, resolved at CALL time. First match wins:
+ *
+ * 1. `APP_ENV_LOGGER_COLOR` - an explicit yes or no from the operator.
+ * 2. `NO_COLOR`, set to anything non-empty - the no-color.org convention.
+ * 3. `NODE_ENV` outside {@link Environment.DEVELOPMENT_ENVS} - production, staging, uat and any
+ *    unrecognized name. Fail-closed, the same boundary the error sanitizer draws: colors are a
+ *    terminal affordance, and in a deployed environment the same bytes land in a file or an
+ *    aggregator as escape noise every grep then has to strip.
+ *
+ * `undefined` means the framework has no opinion, so a provider that detects a terminal itself
+ * keeps deciding - which is why the pino path forwards nothing in that case.
+ */
+export declare const resolveLoggerColorize: (opts?: {
+    configured?: string;
+    environment?: string;
+}) => boolean | undefined;
 //# sourceMappingURL=constants.d.ts.map

package/dist/cjs/modules/logger/common/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/modules/logger/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa;CAGtD;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAM9D,kLAAkL;AAClL,eAAO,MAAM,gBAAgB,SAE0C,CAAC;AAExE,mPAAmP;AACnP,eAAO,MAAM,kBAAkB,GAAI,MAAM;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,SAoBlE,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/modules/logger/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG7C,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa;CAGtD;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAQ9D,eAAO,MAAM,gBAAgB,SAC4D,CAAC;AAE1F,mPAAmP;AACnP,eAAO,MAAM,kBAAkB,GAAI,MAAM;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,KAAG,SAoBlE,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,KAAG,OAAO,GAAG,SAiBb,CAAC"}

package/dist/cjs/modules/logger/common/constants.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveLoggerLevel = exports.SHOULD_LOG_DEBUG = exports.LoggerFormats = void 0;
-const env_1 = require("../../../modules/env");
+exports.resolveLoggerColorize = exports.resolveLoggerLevel = exports.SHOULD_LOG_DEBUG = exports.LoggerFormats = void 0;
+const env_1 = require("../../env");
 const parse_utility_1 = require("../../../utilities/parse.utility");
 const types_1 = require("./types");
 // -------------------------------------------------------------
@@ -18,8 +18,8 @@ exports.LoggerFormats = LoggerFormats;
 const extraLogEnvs = (process.env.APP_ENV_EXTRA_LOG_ENVS ?? '').split(',').map(el => el.trim());
 const LOG_ENVIRONMENTS = new Set([...Array.from(env_1.Environment.COMMON_ENVS), ...extraLogEnvs]);
 /** debug() gate, computed ONCE at module load: DEBUG truthy and NODE_ENV unset or allowlisted. Shared across every logger implementation - runtime env changes need a restart. */
-exports.SHOULD_LOG_DEBUG = (0, parse_utility_1.toBoolean)(process.env.DEBUG) &&
-    (!process.env.NODE_ENV || LOG_ENVIRONMENTS.has(process.env.NODE_ENV));
+const { DEBUG } = process.env;
+exports.SHOULD_LOG_DEBUG = (0, parse_utility_1.toBoolean)(DEBUG) && (!env_1.Environment.ambient || LOG_ENVIRONMENTS.has(env_1.Environment.ambient));
 /** The logger's own level, below which a line never reaches ANY transport. Defaults to `debug` - level gating belongs to the wrapper and each transport, and a stricter default here would silently drop lines the wrapper already let through. */
 const resolveLoggerLevel = (opts) => {
     const { configured } = opts;
@@ -35,4 +35,33 @@ const resolveLoggerLevel = (opts) => {
     return normalized;
 };
 exports.resolveLoggerLevel = resolveLoggerLevel;
+/**
+ * Whether log lines may carry ANSI color, resolved at CALL time. First match wins:
+ *
+ * 1. `APP_ENV_LOGGER_COLOR` - an explicit yes or no from the operator.
+ * 2. `NO_COLOR`, set to anything non-empty - the no-color.org convention.
+ * 3. `NODE_ENV` outside {@link Environment.DEVELOPMENT_ENVS} - production, staging, uat and any
+ *    unrecognized name. Fail-closed, the same boundary the error sanitizer draws: colors are a
+ *    terminal affordance, and in a deployed environment the same bytes land in a file or an
+ *    aggregator as escape noise every grep then has to strip.
+ *
+ * `undefined` means the framework has no opinion, so a provider that detects a terminal itself
+ * keeps deciding - which is why the pino path forwards nothing in that case.
+ */
+const resolveLoggerColorize = (opts) => {
+    const configured = opts?.configured ?? process.env.APP_ENV_LOGGER_COLOR;
+    if (configured !== undefined && configured.trim() !== '') {
+        return (0, parse_utility_1.toBoolean)(configured.trim().toLowerCase());
+    }
+    const noColor = process.env.NO_COLOR;
+    if (noColor !== undefined && noColor !== '') {
+        return false;
+    }
+    const environment = opts?.environment ?? env_1.Environment.current;
+    if (!env_1.Environment.DEVELOPMENT_ENVS.has(environment)) {
+        return false;
+    }
+    return undefined;
+};
+exports.resolveLoggerColorize = resolveLoggerColorize;
 //# sourceMappingURL=constants.js.map

package/dist/cjs/modules/logger/common/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/modules/logger/common/constants.ts"],"names":[],"mappings":";;;AACA,uCAA4C;AAC5C,6DAAsD;AACtD,mCAAoD;AAEpD,gEAAgE;AAChE,MAAa,aAAa;aACR,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,sCASC;AAID,gEAAgE;AAChE,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAChG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAW,CAAC,WAAW,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;AAE5F,kLAAkL;AACrK,QAAA,gBAAgB,GAC3B,IAAA,yBAAS,EAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;IAC5B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AAExE,mPAAmP;AAC5O,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAa,EAAE;IAC7E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,iBAAS,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,iBAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,gJAAgJ;QAChJ,OAAO,CAAC,IAAI,CACV,mFAAmF,EACnF,UAAU,EACV,CAAC,GAAG,iBAAS,CAAC,UAAU,CAAC,EACzB,iBAAS,CAAC,KAAK,CAChB,CAAC;QACF,OAAO,iBAAS,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,UAAuB,CAAC;AACjC,CAAC,CAAC;AApBW,QAAA,kBAAkB,sBAoB7B"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/modules/logger/common/constants.ts"],"names":[],"mappings":";;;AACA,uCAA4C;AAC5C,6DAAsD;AACtD,mCAAoD;AAEpD,gEAAgE;AAChE,MAAa,aAAa;aACR,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,sCASC;AAID,gEAAgE;AAChE,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAChG,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAW,CAAC,WAAW,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;AAE5F,kLAAkL;AAClL,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;AACjB,QAAA,gBAAgB,GAC3B,IAAA,yBAAS,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,iBAAW,CAAC,OAAO,IAAI,gBAAgB,CAAC,GAAG,CAAC,iBAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AAE1F,mPAAmP;AAC5O,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAa,EAAE;IAC7E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,iBAAS,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,iBAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,gJAAgJ;QAChJ,OAAO,CAAC,IAAI,CACV,mFAAmF,EACnF,UAAU,EACV,CAAC,GAAG,iBAAS,CAAC,UAAU,CAAC,EACzB,iBAAS,CAAC,KAAK,CAChB,CAAC;QACF,OAAO,iBAAS,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,UAAuB,CAAC;AACjC,CAAC,CAAC;AApBW,QAAA,kBAAkB,sBAoB7B;AAEF;;;;;;;;;;;;GAYG;AACI,MAAM,qBAAqB,GAAG,CAAC,IAGrC,EAAuB,EAAE;IACxB,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACxE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,OAAO,IAAA,yBAAS,EAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,iBAAW,CAAC,OAAO,CAAC;IAC7D,IAAI,CAAC,iBAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AApBW,QAAA,qBAAqB,yBAoBhC"}

package/dist/cjs/modules/logger/factory.d.ts

@@ -8,6 +8,8 @@ export declare class LoggerFactory {
         provider: ILoggerProvider;
     }): void;
     static currentProvider(): ILoggerProvider;
+    /** The provider another copy of this module registered, if any. */
+    private static sharedProvider;
     private static loadDefaultProvider;
     static getLogger(scopes: string[]): ILogger;
 }

package/dist/cjs/modules/logger/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../src/modules/logger/factory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAa,MAAM,gBAAgB,CAAC;AAmDrE,uKAAuK;AACvK,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAkB;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAsC;IAE1D,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,eAAe,CAAA;KAAE,GAAG,IAAI;IAOrD,MAAM,CAAC,eAAe,IAAI,eAAe;IAKzC,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAiBlC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO;CAW5C;AAED,kFAAkF;AAClF,eAAO,MAAM,iBAAiB;iBACf,MAAM,KAAG,OAAO;CAC9B,CAAC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../../src/modules/logger/factory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,eAAe,EAAa,MAAM,gBAAgB,CAAC;AAsDrE,uKAAuK;AACvK,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAkB;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAsC;IAE1D,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,eAAe,CAAA;KAAE,GAAG,IAAI;IAQrD,MAAM,CAAC,eAAe,IAAI,eAAe;IASzC,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAC,cAAc;IAM7B,OAAO,CAAC,MAAM,CAAC,mBAAmB;IAiBlC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO;CAW5C;AAED,kFAAkF;AAClF,eAAO,MAAM,iBAAiB;iBACf,MAAM,KAAG,OAAO;CAC9B,CAAC"}

package/dist/cjs/modules/logger/factory.js

@@ -42,18 +42,30 @@ class LoggerDelegator extends abstract_1.AbstractLogger {
         return LoggerFactory.getLogger([childScope]);
     }
 }
+/** A bundle can carry two copies of this module - the application's ESM import and core's CJS require. The provider lives in this globalThis slot so `use()` in one copy is seen by the other. */
+const PROVIDER_SLOT = Symbol.for('ignis:logger-provider');
 /** Provider-agnostic acquisition path. Exactly ONE provider is ever loaded - the one registered via `use()`, or the winston default at first unregistered log call. */
 class LoggerFactory {
     static { this.cache = new Map(); }
     /** Register the application's provider. Re-points every wrapper issued so far. */
     static use(opts) {
         this.provider = opts.provider;
+        Reflect.set(globalThis, PROVIDER_SLOT, opts.provider);
         for (const wrapper of this.cache.values()) {
             wrapper.repoint(opts.provider);
         }
     }
     static currentProvider() {
-        return (this.provider ??= this.loadDefaultProvider());
+        if (!this.provider) {
+            this.provider = this.sharedProvider() ?? this.loadDefaultProvider();
+            Reflect.set(globalThis, PROVIDER_SLOT, this.provider);
+        }
+        return this.provider;
+    }
+    /** The provider another copy of this module registered, if any. */
+    static sharedProvider() {
+        const shared = Reflect.get(globalThis, PROVIDER_SLOT);
+        return shared;
     }
     // winston is an optional peer; compiled binaries must register a provider explicitly because only a class reference carries a provider into a bundle.
     static loadDefaultProvider() {
@@ -88,6 +100,6 @@ exports.LoggerFactory = LoggerFactory;
 exports.ApplicationLogger = {
     get: (scope) => LoggerFactory.getLogger([scope]),
 };
-// Runs whenever LoggerFactory is imported as a value - which core's Container and every BANA entrypoint already do. This is what makes BaseHelper resolve real loggers on the server while its own import graph stays browser-pure.
+// Runs whenever LoggerFactory is imported as a value - which core's Container and every application entrypoint already do. This is what makes BaseHelper resolve real loggers on the server while its own import graph stays browser-pure.
 resolver_1.LoggerResolver.use({ resolver: opts => LoggerFactory.getLogger(opts.scopes) });
 //# sourceMappingURL=factory.js.map

package/dist/cjs/modules/logger/factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../src/modules/logger/factory.ts"],"names":[],"mappings":";;;AACA,8DAAoD;AACpD,6CAA4C;AAC5C,8CAAiD;AAEjD,yCAA4C;AAE5C,8PAA8P;AAC9P,MAAM,eAAgB,SAAQ,yBAAc;IAG1C,YAA6B,KAAa;QACxC,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAQ;IAE1C,CAAC;IAED,OAAO,CAAC,QAAyB;QAC/B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAEO,QAAQ;QACd,mEAAmE;QACnE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,aAAa,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,GAAG,CAAC,KAAgB,EAAE,OAAe,EAAE,GAAG,IAAe;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAClF,mEAAmE;QACnE,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,uKAAuK;AACvK,MAAa,aAAa;aAET,UAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE1D,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,IAAmC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,eAAe;QACpB,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,sJAAsJ;IAC9I,MAAM,CAAC,mBAAmB;QAChC,IAAI,CAAC;YACH,OAAO,IAAA,2BAAa,EAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,0BAAQ,EAAC;gBACb,OAAO,EAAE;oBACP,iGAAiG;oBACjG,mFAAmF;oBACnF,2FAA2F;oBAC3F,yEAAyE;oBACzE,mEAAmE;oBACnE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACnE,CAAC,IAAI,CAAC,GAAG,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAgB;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;;AA5CH,sCA6CC;AAED,kFAAkF;AACrE,QAAA,iBAAiB,GAAG;IAC/B,GAAG,EAAE,CAAC,KAAa,EAAW,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC;CAClE,CAAC;AAEF,oOAAoO;AACpO,yBAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../../../src/modules/logger/factory.ts"],"names":[],"mappings":";;;AACA,8DAAoD;AACpD,6CAA4C;AAC5C,8CAAiD;AAEjD,yCAA4C;AAE5C,8PAA8P;AAC9P,MAAM,eAAgB,SAAQ,yBAAc;IAG1C,YAA6B,KAAa;QACxC,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAQ;IAE1C,CAAC;IAED,OAAO,CAAC,QAAyB;QAC/B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAEO,QAAQ;QACd,mEAAmE;QACnE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,aAAa,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,GAAG,CAAC,KAAgB,EAAE,OAAe,EAAE,GAAG,IAAe;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAClF,mEAAmE;QACnE,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,kMAAkM;AAClM,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAE1D,uKAAuK;AACvK,MAAa,aAAa;aAET,UAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE1D,kFAAkF;IAClF,MAAM,CAAC,GAAG,CAAC,IAAmC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,eAAe;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,mEAAmE;IAC3D,MAAM,CAAC,cAAc;QAC3B,MAAM,MAAM,GAAgC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sJAAsJ;IAC9I,MAAM,CAAC,mBAAmB;QAChC,IAAI,CAAC;YACH,OAAO,IAAA,2BAAa,EAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,0BAAQ,EAAC;gBACb,OAAO,EAAE;oBACP,iGAAiG;oBACjG,mFAAmF;oBACnF,2FAA2F;oBAC3F,yEAAyE;oBACzE,mEAAmE;oBACnE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACnE,CAAC,IAAI,CAAC,GAAG,CAAC;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,MAAgB;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;;AAxDH,sCAyDC;AAED,kFAAkF;AACrE,QAAA,iBAAiB,GAAG;IAC/B,GAAG,EAAE,CAAC,KAAa,EAAW,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC;CAClE,CAAC;AAEF,2OAA2O;AAC3O,yBAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC"}