@voiceflow/encryption 0.2.0 → 0.3.1

package/build/cjs/encryption.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=encryption.service.test.d.ts.map

package/build/cjs/encryption.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.test.d.ts","sourceRoot":"","sources":["../../src/encryption.service.test.ts"],"names":[],"mappings":""}

package/build/cjs/encryption.service.test.js

@@ -0,0 +1,77 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const aes_256_gcm_1 = require("./aes-256-gcm");
+const encryption_service_1 = __importDefault(require("./encryption.service"));
+(0, vitest_1.describe)('EncryptionService', () => {
+    // 32-byte key (256 bits) required for AES-256
+    const MOCK_KEY = Buffer.from('0123456789abcdef0123456789abcdef').toString('base64');
+    (0, vitest_1.describe)('constructor', () => {
+        (0, vitest_1.it)('creates instance with valid encryption key', () => {
+            (0, vitest_1.expect)(() => new encryption_service_1.default(MOCK_KEY)).not.toThrow();
+        });
+    });
+    (0, vitest_1.describe)('encrypt', () => {
+        let service;
+        (0, vitest_1.beforeEach)(() => {
+            service = new encryption_service_1.default(MOCK_KEY);
+        });
+        (0, vitest_1.it)('encrypts plaintext string', () => {
+            const plaintext = 'test-data';
+            const encrypted = service.encrypt(plaintext);
+            (0, vitest_1.expect)(encrypted).toBeDefined();
+            (0, vitest_1.expect)(encrypted.iv).toBeDefined();
+            (0, vitest_1.expect)(encrypted.mac).toBeDefined();
+            (0, vitest_1.expect)(encrypted.value).toBeDefined();
+            (0, vitest_1.expect)(encrypted.value).not.toBe(plaintext);
+            // Verify we can decrypt it back
+            const decrypted = service.decrypt(encrypted);
+            (0, vitest_1.expect)(decrypted).toBe(plaintext);
+        });
+        (0, vitest_1.it)('produces different ciphertext for same plaintext', () => {
+            const plaintext = 'test-data';
+            const encrypted1 = service.encrypt(plaintext);
+            const encrypted2 = service.encrypt(plaintext);
+            // Should have different IVs
+            (0, vitest_1.expect)(encrypted1.iv).not.toBe(encrypted2.iv);
+            // Should have different ciphertext
+            (0, vitest_1.expect)(encrypted1.value).not.toBe(encrypted2.value);
+            // But both should decrypt to the same plaintext
+            (0, vitest_1.expect)(service.decrypt(encrypted1)).toBe(service.decrypt(encrypted2));
+        });
+    });
+    (0, vitest_1.describe)('decrypt', () => {
+        let service;
+        (0, vitest_1.beforeEach)(() => {
+            service = new encryption_service_1.default(MOCK_KEY);
+        });
+        (0, vitest_1.it)('decrypts valid encrypted data', () => {
+            const plaintext = 'test-data';
+            const encrypted = (0, aes_256_gcm_1.encryptAes256Gcm)(plaintext, MOCK_KEY);
+            const decrypted = service.decrypt(encrypted);
+            (0, vitest_1.expect)(decrypted).toBe(plaintext);
+        });
+        (0, vitest_1.it)('throws error for invalid encrypted data', () => {
+            const invalidData = {
+                iv: 'invalid',
+                mac: 'invalid',
+                value: 'invalid',
+            };
+            (0, vitest_1.expect)(() => service.decrypt(invalidData)).toThrow();
+        });
+        (0, vitest_1.it)('throws error for tampered encrypted data', () => {
+            const plaintext = 'test-data';
+            const encrypted = service.encrypt(plaintext);
+            // Tamper with the encrypted data
+            const tampered = {
+                ...encrypted,
+                value: `${encrypted.value}tampered`,
+            };
+            (0, vitest_1.expect)(() => service.decrypt(tampered)).toThrow();
+        });
+    });
+});
+//# sourceMappingURL=encryption.service.test.js.map

package/build/cjs/encryption.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.test.js","sourceRoot":"","sources":["../../src/encryption.service.test.ts"],"names":[],"mappings":";;;;;AAAA,mCAA0D;AAG1D,+CAAiD;AACjD,8EAAqD;AAErD,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,8CAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpF,IAAA,iBAAQ,EAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAI,4BAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAI,OAA0B,CAAC;QAE/B,IAAA,mBAAU,EAAC,GAAG,EAAE;YACd,OAAO,GAAG,IAAI,4BAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,2BAA2B,EAAE,GAAG,EAAE;YACnC,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE7C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YAChC,IAAA,eAAM,EAAC,SAAS,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,IAAA,eAAM,EAAC,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,IAAA,eAAM,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,IAAA,eAAM,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5C,gCAAgC;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE9C,4BAA4B;YAC5B,IAAA,eAAM,EAAC,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC9C,mCAAmC;YACnC,IAAA,eAAM,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,gDAAgD;YAChD,IAAA,eAAM,EAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAI,OAA0B,CAAC;QAE/B,IAAA,mBAAU,EAAC,GAAG,EAAE;YACd,OAAO,GAAG,IAAI,4BAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAA,8BAAgB,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAExD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,WAAW,GAAqB;gBACpC,EAAE,EAAE,SAAS;gBACb,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,SAAS;aACjB,CAAC;YAEF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE7C,iCAAiC;YACjC,MAAM,QAAQ,GAAqB;gBACjC,GAAG,SAAS;gBACZ,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,UAAU;aACpC,CAAC;YAEF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/esm/encryption.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=encryption.service.test.d.ts.map

package/build/esm/encryption.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.test.d.ts","sourceRoot":"","sources":["../../src/encryption.service.test.ts"],"names":[],"mappings":""}

package/build/esm/encryption.service.test.js

@@ -0,0 +1,72 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { encryptAes256Gcm } from './aes-256-gcm.js';
+import EncryptionService from './encryption.service.js';
+describe('EncryptionService', () => {
+    // 32-byte key (256 bits) required for AES-256
+    const MOCK_KEY = Buffer.from('0123456789abcdef0123456789abcdef').toString('base64');
+    describe('constructor', () => {
+        it('creates instance with valid encryption key', () => {
+            expect(() => new EncryptionService(MOCK_KEY)).not.toThrow();
+        });
+    });
+    describe('encrypt', () => {
+        let service;
+        beforeEach(() => {
+            service = new EncryptionService(MOCK_KEY);
+        });
+        it('encrypts plaintext string', () => {
+            const plaintext = 'test-data';
+            const encrypted = service.encrypt(plaintext);
+            expect(encrypted).toBeDefined();
+            expect(encrypted.iv).toBeDefined();
+            expect(encrypted.mac).toBeDefined();
+            expect(encrypted.value).toBeDefined();
+            expect(encrypted.value).not.toBe(plaintext);
+            // Verify we can decrypt it back
+            const decrypted = service.decrypt(encrypted);
+            expect(decrypted).toBe(plaintext);
+        });
+        it('produces different ciphertext for same plaintext', () => {
+            const plaintext = 'test-data';
+            const encrypted1 = service.encrypt(plaintext);
+            const encrypted2 = service.encrypt(plaintext);
+            // Should have different IVs
+            expect(encrypted1.iv).not.toBe(encrypted2.iv);
+            // Should have different ciphertext
+            expect(encrypted1.value).not.toBe(encrypted2.value);
+            // But both should decrypt to the same plaintext
+            expect(service.decrypt(encrypted1)).toBe(service.decrypt(encrypted2));
+        });
+    });
+    describe('decrypt', () => {
+        let service;
+        beforeEach(() => {
+            service = new EncryptionService(MOCK_KEY);
+        });
+        it('decrypts valid encrypted data', () => {
+            const plaintext = 'test-data';
+            const encrypted = encryptAes256Gcm(plaintext, MOCK_KEY);
+            const decrypted = service.decrypt(encrypted);
+            expect(decrypted).toBe(plaintext);
+        });
+        it('throws error for invalid encrypted data', () => {
+            const invalidData = {
+                iv: 'invalid',
+                mac: 'invalid',
+                value: 'invalid',
+            };
+            expect(() => service.decrypt(invalidData)).toThrow();
+        });
+        it('throws error for tampered encrypted data', () => {
+            const plaintext = 'test-data';
+            const encrypted = service.encrypt(plaintext);
+            // Tamper with the encrypted data
+            const tampered = {
+                ...encrypted,
+                value: `${encrypted.value}tampered`,
+            };
+            expect(() => service.decrypt(tampered)).toThrow();
+        });
+    });
+});
+//# sourceMappingURL=encryption.service.test.js.map

package/build/esm/encryption.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.service.test.js","sourceRoot":"","sources":["../../src/encryption.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,iBAAiB,MAAM,sBAAsB,CAAC;AAErD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,8CAA8C;IAE9C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAI,OAA0B,CAAC;QAE/B,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,GAAG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;YACnC,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE7C,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE5C,gCAAgC;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE9C,4BAA4B;YAC5B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC9C,mCAAmC;YACnC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,gDAAgD;YAChD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAI,OAA0B,CAAC;QAE/B,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,GAAG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAExD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,WAAW,GAAqB;gBACpC,EAAE,EAAE,SAAS;gBACb,GAAG,EAAE,SAAS;gBACd,KAAK,EAAE,SAAS;aACjB,CAAC;YAEF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,SAAS,GAAG,WAAW,CAAC;YAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE7C,iCAAiC;YACjC,MAAM,QAAQ,GAAqB;gBACjC,GAAG,SAAS;gBACZ,KAAK,EAAE,GAAG,SAAS,CAAC,KAAK,UAAU;aACpC,CAAC;YAEF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voiceflow/encryption",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Voiceflow encryption library",
   "license": "ISC",
   "main": "build/cjs/main.js",
@@ -24,11 +24,14 @@
     "test:types": "yarn g:tsc --noEmit",
     "test:unit": "yarn g:vitest run --coverage"
   },
+  "engines": {
+    "node": "20"
+  },
   "volta": {
     "extends": "../../package.json"
   },
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "c71920a42998c80a09029b70724a39fb84f8df74"
+  "gitHead": "db852b0cbef17d080c71361782acf6cb9d16a84c"
 }