@warlock.js/core 4.0.162 → 4.0.163

package/esm/dev-server/utils.js

@@ -0,0 +1,41 @@
+import {removeDirectoryAsync,createDirectoryAsync}from'@mongez/fs';import glob from'fast-glob';import'@warlock.js/logger';import'../database/models/database-log/database-log.js';import'../http/context/request-context.js';import {warlockPath,srcPath}from'../utils/paths.js';import'@mongez/slug';import'@mongez/supportive-is';import'@mongez/reinforcements';import {Path}from'./path.js';async function createFreshWarlockDirectory() {
+    const cacheDirectory = warlockPath("cache");
+    try {
+        await removeDirectoryAsync(cacheDirectory);
+    }
+    catch {
+        // ignore
+    }
+    await createDirectoryAsync(cacheDirectory, { recursive: true });
+}
+/**
+ * Get files from directory
+ * @param directoryPath
+ * @param pattern
+ * @returns array of files full paths
+ */
+async function getFilesFromDirectory(directoryPath = srcPath(), pattern = "**/*.{ts,tsx}") {
+    const files = await glob(`${Path.normalize(directoryPath)}/${pattern}`, {
+        absolute: true, // Return absolute paths
+    });
+    return files.map((file) => Path.normalize(file));
+}
+async function getCertainFilesFromDirectory(directoryPath, filesNames) {
+    let pattern = filesNames.length === 1 ? filesNames : `(${filesNames.join("|")})`;
+    return getFilesFromDirectory(directoryPath, pattern + ".{ts,tsx}");
+}
+function warlockCachePath(relativePath) {
+    return `${warlockPath("cache")}/${relativePath}`;
+}
+/**
+ * Compare two sets for equality
+ */
+function areSetsEqual(set1, set2) {
+    if (set1.size !== set2.size)
+        return false;
+    for (const item of set1) {
+        if (!set2.has(item))
+            return false;
+    }
+    return true;
+}export{areSetsEqual,createFreshWarlockDirectory,getCertainFilesFromDirectory,getFilesFromDirectory,warlockCachePath};//# sourceMappingURL=utils.js.map

package/esm/dev-server/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sources":["../../src/dev-server/utils.ts"],"sourcesContent":[null],"names":[],"mappings":"gYAKO,eAAe,2BAA2B,GAAA;AAC/C,IAAA,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI;AACF,QAAA,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAC;AAC5C,KAAA;IAAC,MAAM;;AAEP,KAAA;IAED,MAAM,oBAAoB,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;AAKG;AACI,eAAe,qBAAqB,CAAC,aAAa,GAAG,OAAO,EAAE,EAAE,OAAO,GAAG,eAAe,EAAA;AAC9F,IAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAG,EAAA,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAI,CAAA,EAAA,OAAO,EAAE,EAAE;QACtE,QAAQ,EAAE,IAAI;AACf,KAAA,CAAC,CAAC;AAEH,IAAA,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACnD,CAAC;AAEM,eAAe,4BAA4B,CAAC,aAAqB,EAAE,UAAoB,EAAA;IAC5F,IAAI,OAAO,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,GAAG,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAA,CAAG,CAAC;IACjF,OAAO,qBAAqB,CAAC,aAAa,EAAE,OAAO,GAAG,WAAW,CAAC,CAAC;AACrE,CAAC;AAEK,SAAU,gBAAgB,CAAC,YAAoB,EAAA;IACnD,OAAO,CAAA,EAAG,WAAW,CAAC,OAAO,CAAC,CAAI,CAAA,EAAA,YAAY,EAAE,CAAC;AACnD,CAAC;AAED;;AAEG;AACa,SAAA,YAAY,CAAI,IAAY,EAAE,IAAY,EAAA;AACxD,IAAA,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;AAAE,QAAA,OAAO,KAAK,CAAC;AAC1C,IAAA,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE;AACvB,QAAA,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAAE,YAAA,OAAO,KAAK,CAAC;AACnC,KAAA;AACD,IAAA,OAAO,IAAI,CAAC;AACd"}

package/esm/encryption/encrypt.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Encrypts a plaintext string using AES-256-GCM (or the configured algorithm).
+ * Returns a combined string in the format `iv:ciphertext:authTag`.
+ *
+ * @example
+ * import { encrypt } from "@warlock.js/core";
+ *
+ * const encrypted = encrypt("sk-proj-12345");
+ * // => "a1b2c3...:d4e5f6...:g7h8i9..."
+ */
+export declare function encrypt(plainText: string): string;
+/**
+ * Decrypts a string previously encrypted with {@link encrypt}.
+ * Expects the format `iv:ciphertext:authTag`.
+ *
+ * @example
+ * import { decrypt } from "@warlock.js/core";
+ *
+ * const original = decrypt(encryptedString);
+ * // => "sk-proj-12345"
+ */
+export declare function decrypt(cipherText: string): string;
+//# sourceMappingURL=encrypt.d.ts.map

package/esm/encryption/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/encryption/encrypt.ts"],"names":[],"mappings":"AA0CA;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAqBjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA2BlD"}

package/esm/encryption/encrypt.js

@@ -0,0 +1,85 @@
+import crypto from'crypto';import {config}from'../config/config-getter.js';import'../config/config-handlers.js';/**
+ * Default encryption algorithm.
+ */
+const DEFAULT_ALGORITHM = "aes-256-gcm";
+/**
+ * Get the encryption key from config, validated as a 32-byte hex string.
+ */
+function getEncryptionKey() {
+    const key = config.key("encryption.key");
+    if (!key) {
+        throw new Error("Missing encryption key. Set 'encryption.key' in your config (64 hex characters = 32 bytes).");
+    }
+    const buffer = Buffer.from(key, "hex");
+    if (buffer.length !== 32) {
+        throw new Error(`Encryption key must be exactly 32 bytes (64 hex characters). Got ${buffer.length} bytes for key ${key}.`);
+    }
+    return buffer;
+}
+/**
+ * Get the configured encryption algorithm, defaults to aes-256-gcm.
+ */
+function getAlgorithm() {
+    return config.key("encryption.algorithm", DEFAULT_ALGORITHM);
+}
+/**
+ * Encrypts a plaintext string using AES-256-GCM (or the configured algorithm).
+ * Returns a combined string in the format `iv:ciphertext:authTag`.
+ *
+ * @example
+ * import { encrypt } from "@warlock.js/core";
+ *
+ * const encrypted = encrypt("sk-proj-12345");
+ * // => "a1b2c3...:d4e5f6...:g7h8i9..."
+ */
+function encrypt(plainText) {
+    if (!plainText)
+        return plainText;
+    const keyBuffer = getEncryptionKey();
+    const algorithm = getAlgorithm();
+    try {
+        // IV must be unique per encryption. 16 bytes is standard for AES.
+        const iv = crypto.randomBytes(16);
+        const cipher = crypto.createCipheriv(algorithm, keyBuffer, iv);
+        let encrypted = cipher.update(plainText, "utf8", "hex");
+        encrypted += cipher.final("hex");
+        // Auth tag validates ciphertext integrity (tamper detection)
+        const authTag = cipher.getAuthTag().toString("hex");
+        return `${iv.toString("hex")}:${encrypted}:${authTag}`;
+    }
+    catch (error) {
+        throw new Error(`Encryption failed: ${error.message}`);
+    }
+}
+/**
+ * Decrypts a string previously encrypted with {@link encrypt}.
+ * Expects the format `iv:ciphertext:authTag`.
+ *
+ * @example
+ * import { decrypt } from "@warlock.js/core";
+ *
+ * const original = decrypt(encryptedString);
+ * // => "sk-proj-12345"
+ */
+function decrypt(cipherText) {
+    if (!cipherText)
+        return cipherText;
+    const keyBuffer = getEncryptionKey();
+    const algorithm = getAlgorithm();
+    try {
+        const parts = cipherText.split(":");
+        if (parts.length !== 3) {
+            throw new Error("Invalid encrypted format. Expected iv:ciphertext:authTag");
+        }
+        const [ivHex, encryptedHex, authTagHex] = parts;
+        const decipher = crypto.createDecipheriv(algorithm, keyBuffer, Buffer.from(ivHex, "hex"));
+        decipher.setAuthTag(Buffer.from(authTagHex, "hex"));
+        let decrypted = decipher.update(encryptedHex, "hex", "utf8");
+        // .final() throws if auth tag is invalid (data tampered)
+        decrypted += decipher.final("utf8");
+        return decrypted;
+    }
+    catch (error) {
+        throw new Error(`Decryption failed: ${error.message}`);
+    }
+}export{decrypt,encrypt};//# sourceMappingURL=encrypt.js.map

package/esm/encryption/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sources":["../../src/encryption/encrypt.ts"],"sourcesContent":[null],"names":[],"mappings":"gHAIA;;AAEG;AACH,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAExC;;AAEG;AACH,SAAS,gBAAgB,GAAA;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAkC,gBAAgB,CAAC,CAAC;IAE1E,IAAI,CAAC,GAAG,EAAE;AACR,QAAA,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;AACH,KAAA;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAEvC,IAAA,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE;QACxB,MAAM,IAAI,KAAK,CACb,CAAoE,iEAAA,EAAA,MAAM,CAAC,MAAM,CAAkB,eAAA,EAAA,GAAG,CAAG,CAAA,CAAA,CAC1G,CAAC;AACH,KAAA;AAED,IAAA,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;AAEG;AACH,SAAS,YAAY,GAAA;IACnB,OAAO,MAAM,CAAC,GAAG,CACf,sBAAsB,EACtB,iBAAiB,CACjB,CAAC;AACL,CAAC;AAED;;;;;;;;;AASG;AACG,SAAU,OAAO,CAAC,SAAiB,EAAA;AACvC,IAAA,IAAI,CAAC,SAAS;AAAE,QAAA,OAAO,SAAS,CAAC;AAEjC,IAAA,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;AACrC,IAAA,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,IAAI;;QAEF,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAClC,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAE/D,QAAA,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACxD,QAAA,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;QAGjC,MAAM,OAAO,GAAI,MAA2B,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAE1E,QAAA,OAAO,CAAG,EAAA,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,EAAI,OAAO,CAAA,CAAE,CAAC;AACxD,KAAA;AAAC,IAAA,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,CAAA,mBAAA,EAAuB,KAAe,CAAC,OAAO,CAAE,CAAA,CAAC,CAAC;AACnE,KAAA;AACH,CAAC;AAED;;;;;;;;;AASG;AACG,SAAU,OAAO,CAAC,UAAkB,EAAA;AACxC,IAAA,IAAI,CAAC,UAAU;AAAE,QAAA,OAAO,UAAU,CAAC;AAEnC,IAAA,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;AACrC,IAAA,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,IAAI;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAEpC,QAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE;AACtB,YAAA,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;AAC7E,SAAA;QAED,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;AAEhD,QAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEzF,QAAA,QAA+B,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5E,QAAA,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;;AAE7D,QAAA,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAEpC,QAAA,OAAO,SAAS,CAAC;AAClB,KAAA;AAAC,IAAA,OAAO,KAAK,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,CAAA,mBAAA,EAAuB,KAAe,CAAC,OAAO,CAAE,CAAA,CAAC,CAAC;AACnE,KAAA;AACH"}

package/esm/encryption/hash.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Creates a deterministic HMAC-SHA256 hash of the given string.
+ *
+ * Useful for creating searchable, unique fingerprints of sensitive data
+ * (e.g., an API key) without storing the plaintext.
+ *
+ * Uses a dedicated HMAC key from config. Falls back to the encryption key
+ * if no separate HMAC key is configured.
+ *
+ * @example
+ * import { hmacHash } from "@warlock.js/core";
+ *
+ * const fingerprint = hmacHash("sk-proj-12345");
+ * // Store `fingerprint` in DB for lookups, store encrypted value separately
+ */
+export declare function hmacHash(plainText: string): string;
+//# sourceMappingURL=hash.d.ts.map

package/esm/encryption/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/encryption/hash.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAgBlD"}

package/esm/encryption/hash.js

@@ -0,0 +1,26 @@
+import crypto from'crypto';import {config}from'../config/config-getter.js';import'../config/config-handlers.js';/**
+ * Creates a deterministic HMAC-SHA256 hash of the given string.
+ *
+ * Useful for creating searchable, unique fingerprints of sensitive data
+ * (e.g., an API key) without storing the plaintext.
+ *
+ * Uses a dedicated HMAC key from config. Falls back to the encryption key
+ * if no separate HMAC key is configured.
+ *
+ * @example
+ * import { hmacHash } from "@warlock.js/core";
+ *
+ * const fingerprint = hmacHash("sk-proj-12345");
+ * // Store `fingerprint` in DB for lookups, store encrypted value separately
+ */
+function hmacHash(plainText) {
+    if (!plainText)
+        return plainText;
+    const hmacKey = config.key("encryption.hmacKey") ||
+        config.key("encryption.key");
+    if (!hmacKey) {
+        throw new Error("Missing HMAC key. Set 'encryption.hmacKey' (or 'encryption.key') in your config.");
+    }
+    const keyBuffer = Buffer.from(hmacKey, "hex");
+    return crypto.createHmac("sha256", keyBuffer).update(plainText).digest("hex");
+}export{hmacHash};//# sourceMappingURL=hash.js.map

package/esm/encryption/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sources":["../../src/encryption/hash.ts"],"sourcesContent":[null],"names":[],"mappings":"gHAIA;;;;;;;;;;;;;;AAcG;AACG,SAAU,QAAQ,CAAC,SAAiB,EAAA;AACxC,IAAA,IAAI,CAAC,SAAS;AAAE,QAAA,OAAO,SAAS,CAAC;AAEjC,IAAA,MAAM,OAAO,GACX,MAAM,CAAC,GAAG,CAAsC,oBAAoB,CAAC;AACrE,QAAA,MAAM,CAAC,GAAG,CAAkC,gBAAgB,CAAC,CAAC;IAEhE,IAAI,CAAC,OAAO,EAAE;AACZ,QAAA,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;AACH,KAAA;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAE9C,IAAA,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChF"}

package/esm/encryption/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./encrypt";
+export * from "./hash";
+export * from "./password";
+export * from "./types";
+//# sourceMappingURL=index.d.ts.map

package/esm/encryption/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/encryption/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC"}

package/esm/encryption/password.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Hashes a password using bcrypt (async — does not block the event loop).
+ *
+ * Salt rounds are read from \`encryption.password.saltRounds\` config,
+ * defaulting to 12.
+ *
+ * @example
+ * import { hashPassword } from "@warlock.js/core";
+ *
+ * const hashed = await hashPassword("user-password-123");
+ * // Store \`hashed\` in the database
+ */
+export declare function hashPassword(password: string): Promise<string>;
+/**
+ * Verifies a plain password against a bcrypt hash (async — does not block the event loop).
+ *
+ * @example
+ * import { verifyPassword } from "@warlock.js/core";
+ *
+ * const isValid = await verifyPassword("user-password-123", storedHash);
+ */
+export declare function verifyPassword(plainPassword: string, hashedPassword: string): Promise<boolean>;
+//# sourceMappingURL=password.d.ts.map

package/esm/encryption/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/encryption/password.ts"],"names":[],"mappings":"AAgDA;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAWpE;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/esm/encryption/password.js

@@ -0,0 +1,72 @@
+import {config}from'../config/config-getter.js';import'../config/config-handlers.js';/**
+ * Default bcrypt salt rounds.
+ */
+const DEFAULT_SALT_ROUNDS = 12;
+// ============================================================
+// Lazy-loaded bcryptjs SDK Types
+// ============================================================
+/**
+ * Cached bcryptjs module (loaded once, reused)
+ */
+let Bcryptjs;
+let isModuleExists = null;
+/**
+ * Installation instructions for bcryptjs package
+ */
+const BCRYPTJS_INSTALL_INSTRUCTIONS = `
+Password encryption requires the bcryptjs package.
+Install it with:
+
+  npm install bcryptjs
+
+Or with your preferred package manager:
+
+  pnpm add bcryptjs
+  yarn add bcryptjs
+`.trim();
+/**
+ * Load bcryptjs module
+ */
+async function loadBcryptjs() {
+    try {
+        Bcryptjs = await import('bcryptjs');
+        isModuleExists = true;
+    }
+    catch {
+        isModuleExists = false;
+    }
+}
+loadBcryptjs();
+/**
+ * Hashes a password using bcrypt (async — does not block the event loop).
+ *
+ * Salt rounds are read from \`encryption.password.saltRounds\` config,
+ * defaulting to 12.
+ *
+ * @example
+ * import { hashPassword } from "@warlock.js/core";
+ *
+ * const hashed = await hashPassword("user-password-123");
+ * // Store \`hashed\` in the database
+ */
+async function hashPassword(password) {
+    if (!isModuleExists) {
+        throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);
+    }
+    const saltRounds = config.key("encryption.password.salt", DEFAULT_SALT_ROUNDS);
+    return Bcryptjs.hash(String(password), saltRounds);
+}
+/**
+ * Verifies a plain password against a bcrypt hash (async — does not block the event loop).
+ *
+ * @example
+ * import { verifyPassword } from "@warlock.js/core";
+ *
+ * const isValid = await verifyPassword("user-password-123", storedHash);
+ */
+async function verifyPassword(plainPassword, hashedPassword) {
+    if (!isModuleExists) {
+        throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);
+    }
+    return Bcryptjs.compare(String(plainPassword), String(hashedPassword));
+}export{hashPassword,verifyPassword};//# sourceMappingURL=password.js.map

package/esm/encryption/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sources":["../../src/encryption/password.ts"],"sourcesContent":[null],"names":[],"mappings":"qFAGA;;AAEG;AACH,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;AACA;AACA;AAEA;;AAEG;AACH,IAAI,QAAmC,CAAC;AAExC,IAAI,cAAc,GAAmB,IAAI,CAAC;AAE1C;;AAEG;AACH,MAAM,6BAA6B,GAAG,CAAA;;;;;;;;;;CAUrC,CAAC,IAAI,EAAE,CAAC;AAET;;AAEG;AACH,eAAe,YAAY,GAAA;IACzB,IAAI;AACF,QAAA,QAAQ,GAAG,MAAM,OAAO,UAAU,CAAC,CAAC;QACpC,cAAc,GAAG,IAAI,CAAC;AACvB,KAAA;IAAC,MAAM;QACN,cAAc,GAAG,KAAK,CAAC;AACxB,KAAA;AACH,CAAC;AAED,YAAY,EAAE,CAAC;AAEf;;;;;;;;;;;AAWG;AACI,eAAe,YAAY,CAAC,QAAgB,EAAA;IACjD,IAAI,CAAC,cAAc,EAAE;AACnB,QAAA,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAChD,KAAA;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAC3B,0BAA0B,EAC1B,mBAAmB,CACnB,CAAC;IAEH,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;AAOG;AACI,eAAe,cAAc,CAClC,aAAqB,EACrB,cAAsB,EAAA;IAEtB,IAAI,CAAC,cAAc,EAAE;AACnB,QAAA,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAChD,KAAA;AAED,IAAA,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;AACzE"}

package/esm/encryption/types.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Configuration for the encryption module.
+ *
+ * @example
+ * // src/config/encryption.ts
+ * import type { EncryptionConfigurations } from "@warlock.js/core";
+ * import { env } from "@warlock.js/core";
+ *
+ * const encryptionConfig: EncryptionConfigurations = {
+ *   key: env("APP_ENCRYPTION_KEY"),
+ *   algorithm: "aes-256-gcm",
+ *   hmacKey: env("APP_HMAC_KEY"),
+ *   password: {
+ *     saltRounds: 12,
+ *   },
+ * };
+ *
+ * export default encryptionConfig;
+ */
+export type EncryptionConfigurations = {
+    /**
+     * 32-byte hex-encoded encryption key (64 hex characters).
+     * Used by encrypt() and decrypt().
+     * Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+     */
+    key: string;
+    /**
+     * Encryption algorithm to use.
+     * Defaults to "aes-256-gcm" if not set.
+     */
+    algorithm?: string;
+    /**
+     * Separate HMAC key (hex-encoded) for hmacHash().
+     * Falls back to `key` if not provided.
+     * Best practice: keep these separate.
+     * Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
+     */
+    hmacKey?: string;
+    /**
+     * Password hashing configuration (bcrypt).
+     */
+    password?: EncryptionPasswordConfigurations;
+};
+export type EncryptionPasswordConfigurations = {
+    /**
+     * bcrypt salt rounds. Higher = slower and more secure.
+     * 10–12 is the standard range. Defaults to 12.
+     */
+    salt?: number;
+};
+//# sourceMappingURL=types.d.ts.map

package/esm/encryption/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/encryption/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,QAAQ,CAAC,EAAE,gCAAgC,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC"}

package/esm/generations/add-command.action.d.ts

@@ -0,0 +1,3 @@
+import { CommandActionData } from "../cli/types";
+export declare function addCommandAction(options: CommandActionData): Promise<void>;
+//# sourceMappingURL=add-command.action.d.ts.map

package/esm/generations/add-command.action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-command.action.d.ts","sourceRoot":"","sources":["../../src/generations/add-command.action.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAoTjD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,iBA2HhE"}