@yielded/crypto 0.1.0-beta.29 → 0.1.0-beta.31

package/dist/internal/kdf.mjs

@@ -1,11 +1,13 @@
 import { InvalidInput, UnsupportedAlgorithm } from "../Errors.mjs";
-import { Argon2idInput, HkdfInput, Kdf, Pbkdf2Input } from "../Kdf.mjs";
+import { Argon2idInput, HkdfInput, Kdf, Pbkdf2Input, ScryptInput } from "../Kdf.mjs";
 import { KdfAdmission } from "../KdfAdmission.mjs";
 import { copy, decode, importError, nativeError, withSecret } from "./common.mjs";
+import { ScryptBackend } from "./scrypt-backend.mjs";
 import { Effect, Redacted, Schema } from "effect";
 //#region src/internal/kdf.ts
 const makeKdf = Effect.fnUntraced(function* (subtle, limits, argon2) {
 	const admission = yield* KdfAdmission;
+	const scrypt = yield* ScryptBackend;
 	const boundedBytes = Schema.Uint8Array.check(Schema.isMaxLength(limits.maximumInputBytes));
 	const output = Schema.Int.check(Schema.isBetween({
 		minimum: 1,
@@ -14,6 +16,24 @@ const makeKdf = Effect.fnUntraced(function* (subtle, limits, argon2) {
 	const inputBytes = (input) => decode(boundedBytes, input, "data");
 	const outputLength = (input) => decode(output, input, "parameters");
 	return Kdf.of({
+		scrypt: (input) => admission.run(Effect.gen(function* () {
+			const value = yield* decode(ScryptInput, input, "parameters");
+			yield* outputLength(value.length);
+			yield* inputBytes(Redacted.value(value.password));
+			yield* inputBytes(value.salt);
+			const memoryBytes = 128 * value.blockSize * (value.cost + value.parallelism + 2);
+			if (!Number.isInteger(Math.log2(value.cost)) || Math.log2(value.cost) >= 16 * value.blockSize || value.blockSize * value.parallelism >= 2 ** 30 || memoryBytes > limits.maximumMemoryKiB * 1024 || value.cost * value.blockSize * value.parallelism / 8 > limits.maximumMemoryPasses) return yield* InvalidInput.make({ reason: "parameters" });
+			const salt = yield* copy(value.salt);
+			return yield* withSecret(value.password, (password) => scrypt.derive({
+				password,
+				salt,
+				cost: value.cost,
+				blockSize: value.blockSize,
+				parallelism: value.parallelism,
+				length: value.length,
+				maximumMemoryBytes: limits.maximumMemoryKiB * 1024
+			}).pipe(Effect.map(Redacted.make)));
+		})),
 		pbkdf2: (input) => admission.run(Effect.gen(function* () {
 			const value = yield* decode(Pbkdf2Input, input, "parameters");
 			yield* decode(Schema.Int.check(Schema.isBetween({

package/dist/internal/kdf.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"kdf.mjs","names":[],"sources":["../../src/internal/kdf.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport { InvalidInput, type OperationError, UnsupportedAlgorithm } from \"../Errors\";\nimport { Argon2idInput, HkdfInput, Kdf, type Limits, Pbkdf2Input } from \"../Kdf\";\nimport { KdfAdmission } from \"../KdfAdmission\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\n\nexport interface Argon2Parameters {\n  readonly password: Uint8Array<ArrayBuffer>;\n  readonly salt: Uint8Array<ArrayBuffer>;\n  readonly memoryKiB: number;\n  readonly passes: number;\n  readonly parallelism: number;\n  readonly length: number;\n  readonly secret?: Uint8Array<ArrayBuffer>;\n  readonly associatedData: Uint8Array<ArrayBuffer>;\n}\n\nexport type Argon2 = (input: Argon2Parameters) => Effect.Effect<Uint8Array, OperationError>;\n\nexport const makeKdf = Effect.fnUntraced(function* (\n  subtle: SubtleCrypto,\n  limits: Limits,\n  argon2?: Argon2,\n) {\n  const admission = yield* KdfAdmission;\n  const boundedBytes = Schema.Uint8Array.check(Schema.isMaxLength(limits.maximumInputBytes));\n\n  const output = Schema.Int.check(\n    Schema.isBetween({ minimum: 1, maximum: limits.maximumOutputBytes }),\n  );\n\n  const inputBytes = (input: Uint8Array) => decode(boundedBytes, input, \"data\");\n  const outputLength = (input: number) => decode(output, input, \"parameters\");\n\n  return Kdf.of({\n    pbkdf2: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(Pbkdf2Input, input, \"parameters\");\n\n          yield* decode(\n            Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: limits.maximumIterations })),\n            value.iterations,\n            \"parameters\",\n          );\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n          const salt = yield* copy(value.salt);\n\n          return yield* withSecret(value.password, (password) =>\n            Effect.gen(function* () {\n              const key = yield* Effect.tryPromise({\n                try: () => subtle.importKey(\"raw\", password, \"PBKDF2\", false, [\"deriveBits\"]),\n                catch: importError,\n              });\n\n              const result = yield* Effect.tryPromise({\n                try: () =>\n                  subtle.deriveBits(\n                    { name: \"PBKDF2\", hash: \"SHA-256\", salt, iterations: value.iterations },\n                    key,\n                    value.length * 8,\n                  ),\n                catch: nativeError,\n              });\n\n              return Redacted.make(new Uint8Array(result));\n            }).pipe(Effect.uninterruptible),\n          );\n        }),\n      ),\n    hkdf: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(HkdfInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.key));\n          yield* inputBytes(value.salt);\n          yield* inputBytes(value.info);\n          const salt = yield* copy(value.salt);\n          const info = yield* copy(value.info);\n\n          return yield* withSecret(value.key, (material) =>\n            Effect.gen(function* () {\n              const key = yield* Effect.tryPromise({\n                try: () => subtle.importKey(\"raw\", material, \"HKDF\", false, [\"deriveBits\"]),\n                catch: importError,\n              });\n\n              const result = yield* Effect.tryPromise({\n                try: () =>\n                  subtle.deriveBits(\n                    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n                    key,\n                    value.length * 8,\n                  ),\n                catch: nativeError,\n              });\n\n              return Redacted.make(new Uint8Array(result));\n            }).pipe(Effect.uninterruptible),\n          );\n        }),\n      ),\n    argon2id: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(Argon2idInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n          if (value.secret !== undefined) yield* inputBytes(Redacted.value(value.secret));\n          if (value.associatedData !== undefined) yield* inputBytes(value.associatedData);\n\n          if (\n            value.memoryKiB < 8 * value.parallelism ||\n            value.memoryKiB > limits.maximumMemoryKiB ||\n            value.passes > limits.maximumPasses ||\n            value.parallelism > limits.maximumParallelism ||\n            value.memoryKiB * value.passes > limits.maximumMemoryPasses\n          )\n            return yield* InvalidInput.make({ reason: \"parameters\" });\n          if (argon2 === undefined) return yield* UnsupportedAlgorithm.make({});\n\n          const salt = yield* copy(value.salt);\n          const associatedData = yield* copy(value.associatedData ?? new Uint8Array());\n\n          return yield* withSecret(value.password, (password) => {\n            const derive = (secret?: Uint8Array<ArrayBuffer>) =>\n              argon2({\n                password,\n                salt,\n                ...(secret === undefined ? {} : { secret }),\n                associatedData,\n                memoryKiB: value.memoryKiB,\n                passes: value.passes,\n                parallelism: value.parallelism,\n                length: value.length,\n              }).pipe(Effect.map((bytes) => Redacted.make(bytes)));\n\n            return value.secret === undefined ? derive() : withSecret(value.secret, derive);\n          });\n        }),\n      ),\n  });\n});\n"],"mappings":";;;;;;AAoBA,MAAa,UAAU,OAAO,WAAW,WACvC,QACA,QACA,QACA;CACA,MAAM,YAAY,OAAO;CACzB,MAAM,eAAe,OAAO,WAAW,MAAM,OAAO,YAAY,OAAO,iBAAiB,CAAC;CAEzF,MAAM,SAAS,OAAO,IAAI,MACxB,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS,OAAO;CAAmB,CAAC,CACrE;CAEA,MAAM,cAAc,UAAsB,OAAO,cAAc,OAAO,MAAM;CAC5E,MAAM,gBAAgB,UAAkB,OAAO,QAAQ,OAAO,YAAY;CAE1E,OAAO,IAAI,GAAG;EACZ,SAAS,UACP,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,YAAY;GAE5D,OAAO,OACL,OAAO,IAAI,MAAM,OAAO,UAAU;IAAE,SAAS;IAAG,SAAS,OAAO;GAAkB,CAAC,CAAC,GACpF,MAAM,YACN,YACF;GACA,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAC5B,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,WAAW,aACxC,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,OAAO,WAAW;KACnC,WAAW,OAAO,UAAU,OAAO,UAAU,UAAU,OAAO,CAAC,YAAY,CAAC;KAC5E,OAAO;IACT,CAAC;IAED,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WACE,OAAO,WACL;MAAE,MAAM;MAAU,MAAM;MAAW;MAAM,YAAY,MAAM;KAAW,GACtE,KACA,MAAM,SAAS,CACjB;KACF,OAAO;IACT,CAAC;IAED,OAAO,SAAS,KAAK,IAAI,WAAW,MAAM,CAAC;GAC7C,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC,CACH;EACF,OAAO,UACL,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,WAAW,OAAO,YAAY;GAE1D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,GAAG,CAAC;GAC3C,OAAO,WAAW,MAAM,IAAI;GAC5B,OAAO,WAAW,MAAM,IAAI;GAC5B,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,MAAM,aACnC,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,OAAO,WAAW;KACnC,WAAW,OAAO,UAAU,OAAO,UAAU,QAAQ,OAAO,CAAC,YAAY,CAAC;KAC1E,OAAO;IACT,CAAC;IAED,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WACE,OAAO,WACL;MAAE,MAAM;MAAQ,MAAM;MAAW;MAAM;KAAK,GAC5C,KACA,MAAM,SAAS,CACjB;KACF,OAAO;IACT,CAAC;IAED,OAAO,SAAS,KAAK,IAAI,WAAW,MAAM,CAAC;GAC7C,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC,CACH;EACF,WAAW,UACT,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,eAAe,OAAO,YAAY;GAE9D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAC5B,IAAI,MAAM,WAAW,KAAA,GAAW,OAAO,WAAW,SAAS,MAAM,MAAM,MAAM,CAAC;GAC9E,IAAI,MAAM,mBAAmB,KAAA,GAAW,OAAO,WAAW,MAAM,cAAc;GAE9E,IACE,MAAM,YAAY,IAAI,MAAM,eAC5B,MAAM,YAAY,OAAO,oBACzB,MAAM,SAAS,OAAO,iBACtB,MAAM,cAAc,OAAO,sBAC3B,MAAM,YAAY,MAAM,SAAS,OAAO,qBAExC,OAAO,OAAO,aAAa,KAAK,EAAE,QAAQ,aAAa,CAAC;GAC1D,IAAI,WAAW,KAAA,GAAW,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;GAEpE,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,iBAAiB,OAAO,KAAK,MAAM,kCAAkB,IAAI,WAAW,CAAC;GAE3E,OAAO,OAAO,WAAW,MAAM,WAAW,aAAa;IACrD,MAAM,UAAU,WACd,OAAO;KACL;KACA;KACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;KACzC;KACA,WAAW,MAAM;KACjB,QAAQ,MAAM;KACd,aAAa,MAAM;KACnB,QAAQ,MAAM;IAChB,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,UAAU,SAAS,KAAK,KAAK,CAAC,CAAC;IAErD,OAAO,MAAM,WAAW,KAAA,IAAY,OAAO,IAAI,WAAW,MAAM,QAAQ,MAAM;GAChF,CAAC;EACH,CAAC,CACH;CACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"kdf.mjs","names":[],"sources":["../../src/internal/kdf.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\n\nimport { InvalidInput, type OperationError, UnsupportedAlgorithm } from \"../Errors\";\nimport { Argon2idInput, HkdfInput, Kdf, type Limits, Pbkdf2Input, ScryptInput } from \"../Kdf\";\nimport { KdfAdmission } from \"../KdfAdmission\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\nimport { ScryptBackend } from \"./scrypt-backend\";\n\nexport interface Argon2Parameters {\n  readonly password: Uint8Array<ArrayBuffer>;\n  readonly salt: Uint8Array<ArrayBuffer>;\n  readonly memoryKiB: number;\n  readonly passes: number;\n  readonly parallelism: number;\n  readonly length: number;\n  readonly secret?: Uint8Array<ArrayBuffer>;\n  readonly associatedData: Uint8Array<ArrayBuffer>;\n}\n\nexport type Argon2 = (input: Argon2Parameters) => Effect.Effect<Uint8Array, OperationError>;\n\nexport const makeKdf = Effect.fnUntraced(function* (\n  subtle: SubtleCrypto,\n  limits: Limits,\n  argon2?: Argon2,\n) {\n  const admission = yield* KdfAdmission;\n  const scrypt = yield* ScryptBackend;\n  const boundedBytes = Schema.Uint8Array.check(Schema.isMaxLength(limits.maximumInputBytes));\n\n  const output = Schema.Int.check(\n    Schema.isBetween({ minimum: 1, maximum: limits.maximumOutputBytes }),\n  );\n\n  const inputBytes = (input: Uint8Array) => decode(boundedBytes, input, \"data\");\n  const outputLength = (input: number) => decode(output, input, \"parameters\");\n\n  return Kdf.of({\n    scrypt: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(ScryptInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n\n          const memoryBytes = 128 * value.blockSize * (value.cost + value.parallelism + 2);\n\n          if (\n            !Number.isInteger(Math.log2(value.cost)) ||\n            Math.log2(value.cost) >= 16 * value.blockSize ||\n            value.blockSize * value.parallelism >= 2 ** 30 ||\n            memoryBytes > limits.maximumMemoryKiB * 1024 ||\n            (value.cost * value.blockSize * value.parallelism) / 8 > limits.maximumMemoryPasses\n          )\n            return yield* InvalidInput.make({ reason: \"parameters\" });\n          const salt = yield* copy(value.salt);\n\n          return yield* withSecret(value.password, (password) =>\n            scrypt\n              .derive({\n                password,\n                salt,\n                cost: value.cost,\n                blockSize: value.blockSize,\n                parallelism: value.parallelism,\n                length: value.length,\n                maximumMemoryBytes: limits.maximumMemoryKiB * 1024,\n              })\n              .pipe(Effect.map(Redacted.make)),\n          );\n        }),\n      ),\n    pbkdf2: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(Pbkdf2Input, input, \"parameters\");\n\n          yield* decode(\n            Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: limits.maximumIterations })),\n            value.iterations,\n            \"parameters\",\n          );\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n          const salt = yield* copy(value.salt);\n\n          return yield* withSecret(value.password, (password) =>\n            Effect.gen(function* () {\n              const key = yield* Effect.tryPromise({\n                try: () => subtle.importKey(\"raw\", password, \"PBKDF2\", false, [\"deriveBits\"]),\n                catch: importError,\n              });\n\n              const result = yield* Effect.tryPromise({\n                try: () =>\n                  subtle.deriveBits(\n                    { name: \"PBKDF2\", hash: \"SHA-256\", salt, iterations: value.iterations },\n                    key,\n                    value.length * 8,\n                  ),\n                catch: nativeError,\n              });\n\n              return Redacted.make(new Uint8Array(result));\n            }).pipe(Effect.uninterruptible),\n          );\n        }),\n      ),\n    hkdf: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(HkdfInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.key));\n          yield* inputBytes(value.salt);\n          yield* inputBytes(value.info);\n          const salt = yield* copy(value.salt);\n          const info = yield* copy(value.info);\n\n          return yield* withSecret(value.key, (material) =>\n            Effect.gen(function* () {\n              const key = yield* Effect.tryPromise({\n                try: () => subtle.importKey(\"raw\", material, \"HKDF\", false, [\"deriveBits\"]),\n                catch: importError,\n              });\n\n              const result = yield* Effect.tryPromise({\n                try: () =>\n                  subtle.deriveBits(\n                    { name: \"HKDF\", hash: \"SHA-256\", salt, info },\n                    key,\n                    value.length * 8,\n                  ),\n                catch: nativeError,\n              });\n\n              return Redacted.make(new Uint8Array(result));\n            }).pipe(Effect.uninterruptible),\n          );\n        }),\n      ),\n    argon2id: (input) =>\n      admission.run(\n        Effect.gen(function* () {\n          const value = yield* decode(Argon2idInput, input, \"parameters\");\n\n          yield* outputLength(value.length);\n          yield* inputBytes(Redacted.value(value.password));\n          yield* inputBytes(value.salt);\n          if (value.secret !== undefined) yield* inputBytes(Redacted.value(value.secret));\n          if (value.associatedData !== undefined) yield* inputBytes(value.associatedData);\n\n          if (\n            value.memoryKiB < 8 * value.parallelism ||\n            value.memoryKiB > limits.maximumMemoryKiB ||\n            value.passes > limits.maximumPasses ||\n            value.parallelism > limits.maximumParallelism ||\n            value.memoryKiB * value.passes > limits.maximumMemoryPasses\n          )\n            return yield* InvalidInput.make({ reason: \"parameters\" });\n          if (argon2 === undefined) return yield* UnsupportedAlgorithm.make({});\n\n          const salt = yield* copy(value.salt);\n          const associatedData = yield* copy(value.associatedData ?? new Uint8Array());\n\n          return yield* withSecret(value.password, (password) => {\n            const derive = (secret?: Uint8Array<ArrayBuffer>) =>\n              argon2({\n                password,\n                salt,\n                ...(secret === undefined ? {} : { secret }),\n                associatedData,\n                memoryKiB: value.memoryKiB,\n                passes: value.passes,\n                parallelism: value.parallelism,\n                length: value.length,\n              }).pipe(Effect.map((bytes) => Redacted.make(bytes)));\n\n            return value.secret === undefined ? derive() : withSecret(value.secret, derive);\n          });\n        }),\n      ),\n  });\n});\n"],"mappings":";;;;;;;AAqBA,MAAa,UAAU,OAAO,WAAW,WACvC,QACA,QACA,QACA;CACA,MAAM,YAAY,OAAO;CACzB,MAAM,SAAS,OAAO;CACtB,MAAM,eAAe,OAAO,WAAW,MAAM,OAAO,YAAY,OAAO,iBAAiB,CAAC;CAEzF,MAAM,SAAS,OAAO,IAAI,MACxB,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS,OAAO;CAAmB,CAAC,CACrE;CAEA,MAAM,cAAc,UAAsB,OAAO,cAAc,OAAO,MAAM;CAC5E,MAAM,gBAAgB,UAAkB,OAAO,QAAQ,OAAO,YAAY;CAE1E,OAAO,IAAI,GAAG;EACZ,SAAS,UACP,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,YAAY;GAE5D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAE5B,MAAM,cAAc,MAAM,MAAM,aAAa,MAAM,OAAO,MAAM,cAAc;GAE9E,IACE,CAAC,OAAO,UAAU,KAAK,KAAK,MAAM,IAAI,CAAC,KACvC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,aACpC,MAAM,YAAY,MAAM,eAAe,KAAK,MAC5C,cAAc,OAAO,mBAAmB,QACvC,MAAM,OAAO,MAAM,YAAY,MAAM,cAAe,IAAI,OAAO,qBAEhE,OAAO,OAAO,aAAa,KAAK,EAAE,QAAQ,aAAa,CAAC;GAC1D,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,WAAW,aACxC,OACG,OAAO;IACN;IACA;IACA,MAAM,MAAM;IACZ,WAAW,MAAM;IACjB,aAAa,MAAM;IACnB,QAAQ,MAAM;IACd,oBAAoB,OAAO,mBAAmB;GAChD,CAAC,CAAC,CACD,KAAK,OAAO,IAAI,SAAS,IAAI,CAAC,CACnC;EACF,CAAC,CACH;EACF,SAAS,UACP,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,YAAY;GAE5D,OAAO,OACL,OAAO,IAAI,MAAM,OAAO,UAAU;IAAE,SAAS;IAAG,SAAS,OAAO;GAAkB,CAAC,CAAC,GACpF,MAAM,YACN,YACF;GACA,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAC5B,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,WAAW,aACxC,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,OAAO,WAAW;KACnC,WAAW,OAAO,UAAU,OAAO,UAAU,UAAU,OAAO,CAAC,YAAY,CAAC;KAC5E,OAAO;IACT,CAAC;IAED,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WACE,OAAO,WACL;MAAE,MAAM;MAAU,MAAM;MAAW;MAAM,YAAY,MAAM;KAAW,GACtE,KACA,MAAM,SAAS,CACjB;KACF,OAAO;IACT,CAAC;IAED,OAAO,SAAS,KAAK,IAAI,WAAW,MAAM,CAAC;GAC7C,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC,CACH;EACF,OAAO,UACL,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,WAAW,OAAO,YAAY;GAE1D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,GAAG,CAAC;GAC3C,OAAO,WAAW,MAAM,IAAI;GAC5B,OAAO,WAAW,MAAM,IAAI;GAC5B,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,MAAM,aACnC,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,OAAO,WAAW;KACnC,WAAW,OAAO,UAAU,OAAO,UAAU,QAAQ,OAAO,CAAC,YAAY,CAAC;KAC1E,OAAO;IACT,CAAC;IAED,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WACE,OAAO,WACL;MAAE,MAAM;MAAQ,MAAM;MAAW;MAAM;KAAK,GAC5C,KACA,MAAM,SAAS,CACjB;KACF,OAAO;IACT,CAAC;IAED,OAAO,SAAS,KAAK,IAAI,WAAW,MAAM,CAAC;GAC7C,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC,CACH;EACF,WAAW,UACT,UAAU,IACR,OAAO,IAAI,aAAa;GACtB,MAAM,QAAQ,OAAO,OAAO,eAAe,OAAO,YAAY;GAE9D,OAAO,aAAa,MAAM,MAAM;GAChC,OAAO,WAAW,SAAS,MAAM,MAAM,QAAQ,CAAC;GAChD,OAAO,WAAW,MAAM,IAAI;GAC5B,IAAI,MAAM,WAAW,KAAA,GAAW,OAAO,WAAW,SAAS,MAAM,MAAM,MAAM,CAAC;GAC9E,IAAI,MAAM,mBAAmB,KAAA,GAAW,OAAO,WAAW,MAAM,cAAc;GAE9E,IACE,MAAM,YAAY,IAAI,MAAM,eAC5B,MAAM,YAAY,OAAO,oBACzB,MAAM,SAAS,OAAO,iBACtB,MAAM,cAAc,OAAO,sBAC3B,MAAM,YAAY,MAAM,SAAS,OAAO,qBAExC,OAAO,OAAO,aAAa,KAAK,EAAE,QAAQ,aAAa,CAAC;GAC1D,IAAI,WAAW,KAAA,GAAW,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;GAEpE,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,iBAAiB,OAAO,KAAK,MAAM,kCAAkB,IAAI,WAAW,CAAC;GAE3E,OAAO,OAAO,WAAW,MAAM,WAAW,aAAa;IACrD,MAAM,UAAU,WACd,OAAO;KACL;KACA;KACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;KACzC;KACA,WAAW,MAAM;KACjB,QAAQ,MAAM;KACd,aAAa,MAAM;KACnB,QAAQ,MAAM;IAChB,CAAC,CAAC,CAAC,KAAK,OAAO,KAAK,UAAU,SAAS,KAAK,KAAK,CAAC,CAAC;IAErD,OAAO,MAAM,WAAW,KAAA,IAAY,OAAO,IAAI,WAAW,MAAM,QAAQ,MAAM;GAChF,CAAC;EACH,CAAC,CACH;CACJ,CAAC;AACH,CAAC"}

package/dist/internal/layer.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"layer.mjs","names":[],"sources":["../../src/internal/layer.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport { Aead } from \"../Aead\";\nimport { Hmac } from \"../Hmac\";\nimport { defaultLimits, Kdf, Limits } from \"../Kdf\";\nimport { Signature } from \"../Signature\";\nimport { makeAead, type XChaCha } from \"./aead\";\nimport { decode } from \"./common\";\nimport { makeHmac } from \"./hmac\";\nimport { type Argon2, makeKdf } from \"./kdf\";\nimport { makeSignature } from \"./signature\";\n\nexport const makeLayer = (\n  subtle: SubtleCrypto,\n  input: Partial<Limits>,\n  extensions: { readonly argon2?: Argon2; readonly xchacha?: XChaCha } = {},\n) => {\n  const snapshot = { ...defaultLimits, ...input };\n\n  return Layer.effectContext(\n    Effect.gen(function* () {\n      const limits = yield* decode(Limits, snapshot, \"parameters\");\n      const kdf = yield* makeKdf(subtle, limits, extensions.argon2);\n\n      return Context.make(Aead, makeAead(subtle, extensions.xchacha)).pipe(\n        Context.add(Hmac, makeHmac(subtle)),\n        Context.add(Kdf, kdf),\n        Context.add(Signature, makeSignature(subtle)),\n      );\n    }),\n  );\n};\n"],"mappings":";;;;;;;;;;;AAYA,MAAa,aACX,QACA,OACA,aAAuE,CAAC,MACrE;CACH,MAAM,WAAW;EAAE,GAAG;EAAe,GAAG;CAAM;CAE9C,OAAO,MAAM,cACX,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,OAAO,QAAQ,UAAU,YAAY;EAC3D,MAAM,MAAM,OAAO,QAAQ,QAAQ,QAAQ,WAAW,MAAM;EAE5D,OAAO,QAAQ,KAAK,MAAM,SAAS,QAAQ,WAAW,OAAO,CAAC,CAAC,CAAC,KAC9D,QAAQ,IAAI,MAAM,SAAS,MAAM,CAAC,GAClC,QAAQ,IAAI,KAAK,GAAG,GACpB,QAAQ,IAAI,WAAW,cAAc,MAAM,CAAC,CAC9C;CACF,CAAC,CACH;AACF"}
+{"version":3,"file":"layer.mjs","names":[],"sources":["../../src/internal/layer.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport { Aead } from \"../Aead\";\nimport { Hmac } from \"../Hmac\";\nimport { defaultLimits, Kdf, Limits } from \"../Kdf\";\nimport { Signature } from \"../Signature\";\nimport { makeAead, type XChaCha } from \"./aead\";\nimport { decode } from \"./common\";\nimport { makeHmac } from \"./hmac\";\nimport { type Argon2, makeKdf } from \"./kdf\";\nimport { makeSignature } from \"./signature\";\n\nexport const makeLayer = (\n  subtle: SubtleCrypto,\n  input: Partial<Limits>,\n  extensions: {\n    readonly argon2?: Argon2;\n    readonly xchacha?: XChaCha;\n  } = {},\n) => {\n  const snapshot = { ...defaultLimits, ...input };\n\n  return Layer.effectContext(\n    Effect.gen(function* () {\n      const limits = yield* decode(Limits, snapshot, \"parameters\");\n      const kdf = yield* makeKdf(subtle, limits, extensions.argon2);\n\n      return Context.make(Aead, makeAead(subtle, extensions.xchacha)).pipe(\n        Context.add(Hmac, makeHmac(subtle)),\n        Context.add(Kdf, kdf),\n        Context.add(Signature, makeSignature(subtle)),\n      );\n    }),\n  );\n};\n"],"mappings":";;;;;;;;;;;AAYA,MAAa,aACX,QACA,OACA,aAGI,CAAC,MACF;CACH,MAAM,WAAW;EAAE,GAAG;EAAe,GAAG;CAAM;CAE9C,OAAO,MAAM,cACX,OAAO,IAAI,aAAa;EACtB,MAAM,SAAS,OAAO,OAAO,QAAQ,UAAU,YAAY;EAC3D,MAAM,MAAM,OAAO,QAAQ,QAAQ,QAAQ,WAAW,MAAM;EAE5D,OAAO,QAAQ,KAAK,MAAM,SAAS,QAAQ,WAAW,OAAO,CAAC,CAAC,CAAC,KAC9D,QAAQ,IAAI,MAAM,SAAS,MAAM,CAAC,GAClC,QAAQ,IAAI,KAAK,GAAG,GACpB,QAAQ,IAAI,WAAW,cAAc,MAAM,CAAC,CAC9C;CACF,CAAC,CACH;AACF"}

package/dist/internal/node.d.mts

@@ -4,8 +4,9 @@ import { Hmac } from "../Hmac.mjs";
 import { Kdf, Limits } from "../Kdf.mjs";
 import { KdfAdmission } from "../KdfAdmission.mjs";
 import { Signature } from "../Signature.mjs";
+import { Layer } from "effect";
 //#region src/internal/node.d.ts
-/** Node-compatible WebCrypto/Argon2id with the portable XChaCha20-Poly1305 extension. */
-export declare const layer: (limits?: Partial<Limits>) => import("effect/Layer").Layer<Aead | Hmac | Kdf | Signature, InvalidInput, KdfAdmission>;
+/** Node-compatible WebCrypto and native password KDFs with portable XChaCha20-Poly1305. */
+export declare const layer: (limits?: Partial<Limits>) => Layer.Layer<Aead | Hmac | Kdf | Signature, InvalidInput, KdfAdmission>;
 //#endregion
 //# sourceMappingURL=node.d.mts.map

package/dist/internal/node.mjs

@@ -1,7 +1,8 @@
 import { CryptoUnavailable, UnsupportedAlgorithm } from "../Errors.mjs";
 import { makeLayer } from "./layer.mjs";
+import { layer as layer$1 } from "./scrypt.mjs";
 import { xchacha } from "./xchacha.mjs";
-import { Effect, Result } from "effect";
+import { Effect, Layer, Result } from "effect";
 import * as crypto from "node:crypto";
 //#region src/internal/node.ts
 const argon2 = Effect.fnUntraced(function* (input) {
@@ -23,11 +24,11 @@ const argon2 = Effect.fnUntraced(function* (input) {
 		if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));
 	}).pipe(Effect.uninterruptible);
 });
-/** Node-compatible WebCrypto/Argon2id with the portable XChaCha20-Poly1305 extension. */
+/** Node-compatible WebCrypto and native password KDFs with portable XChaCha20-Poly1305. */
 const layer = (limits = {}) => makeLayer(crypto.webcrypto.subtle, limits, {
 	argon2,
 	xchacha
-});
+}).pipe(Layer.provide(layer$1));
 //#endregion
 export { layer };
 

package/dist/internal/node.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"node.mjs","names":[],"sources":["../../src/internal/node.ts"],"sourcesContent":["// @effect-diagnostics-next-line nodeBuiltinImport:off -- This platform adapter needs native Argon2 and WebCrypto, which Effect Crypto does not expose.\nimport * as crypto from \"node:crypto\";\n\nimport { Effect, Result } from \"effect\";\n\nimport { CryptoUnavailable, UnsupportedAlgorithm } from \"../Errors\";\nimport type { Limits } from \"../Kdf\";\nimport type { Argon2, Argon2Parameters } from \"./kdf\";\nimport { makeLayer } from \"./layer\";\nimport { xchacha } from \"./xchacha\";\n\nconst argon2: Argon2 = Effect.fnUntraced(function* (input: Argon2Parameters) {\n  // Namespace import keeps this module loadable on Node versions without Argon2.\n  if (typeof crypto.argon2 !== \"function\") return yield* UnsupportedAlgorithm.make({});\n\n  // Node cannot cancel this work. Keep borrowed buffers and admission until the\n  // callback completes, including when its caller has requested interruption.\n  return yield* Effect.callback<Uint8Array, CryptoUnavailable>((resume) => {\n    const registration = Result.try({\n      try: () =>\n        crypto.argon2(\n          \"argon2id\",\n          {\n            message: input.password,\n            nonce: input.salt,\n            parallelism: input.parallelism,\n            memory: input.memoryKiB,\n            passes: input.passes,\n            tagLength: input.length,\n            secret: input.secret,\n            associatedData: input.associatedData,\n          },\n          (error, key) =>\n            resume(error === null ? Effect.succeed(key) : Effect.fail(CryptoUnavailable.make({}))),\n        ),\n      catch: () => CryptoUnavailable.make({}),\n    });\n\n    if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));\n  }).pipe(Effect.uninterruptible);\n});\n\n/** Node-compatible WebCrypto/Argon2id with the portable XChaCha20-Poly1305 extension. */\nexport const layer = (limits: Partial<Limits> = {}) =>\n  // Node's declarations include additional key usages absent from lib.dom. The\n  // standard operations used here share the WebCrypto ABI; no payload is cast.\n  makeLayer(crypto.webcrypto.subtle as SubtleCrypto, limits, { argon2, xchacha });\n"],"mappings":";;;;;;AAWA,MAAM,SAAiB,OAAO,WAAW,WAAW,OAAyB;CAE3E,IAAI,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CAInF,OAAO,OAAO,OAAO,UAAyC,WAAW;EACvE,MAAM,eAAe,OAAO,IAAI;GAC9B,WACE,OAAO,OACL,YACA;IACE,SAAS,MAAM;IACf,OAAO,MAAM;IACb,aAAa,MAAM;IACnB,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,QAAQ,MAAM;IACd,gBAAgB,MAAM;GACxB,IACC,OAAO,QACN,OAAO,UAAU,OAAO,OAAO,QAAQ,GAAG,IAAI,OAAO,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CACzF;GACF,aAAa,kBAAkB,KAAK,CAAC,CAAC;EACxC,CAAC;EAED,IAAI,OAAO,UAAU,YAAY,GAAG,OAAO,OAAO,KAAK,aAAa,OAAO,CAAC;CAC9E,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe;AAChC,CAAC;;AAGD,MAAa,SAAS,SAA0B,CAAC,MAG/C,UAAU,OAAO,UAAU,QAAwB,QAAQ;CAAE;CAAQ;AAAQ,CAAC"}
+{"version":3,"file":"node.mjs","names":["Scrypt.layer"],"sources":["../../src/internal/node.ts"],"sourcesContent":["// @effect-diagnostics-next-line nodeBuiltinImport:off -- This platform adapter needs native Argon2 and WebCrypto, which Effect Crypto does not expose.\nimport * as crypto from \"node:crypto\";\n\nimport { Effect, Layer, Result } from \"effect\";\n\nimport { CryptoUnavailable, UnsupportedAlgorithm } from \"../Errors\";\nimport type { Limits } from \"../Kdf\";\nimport type { Argon2, Argon2Parameters } from \"./kdf\";\nimport { makeLayer } from \"./layer\";\nimport * as Scrypt from \"./scrypt\";\nimport { xchacha } from \"./xchacha\";\n\nconst argon2: Argon2 = Effect.fnUntraced(function* (input: Argon2Parameters) {\n  // Namespace import keeps this module loadable on Node versions without Argon2.\n  if (typeof crypto.argon2 !== \"function\") return yield* UnsupportedAlgorithm.make({});\n\n  // Node cannot cancel this work. Keep borrowed buffers and admission until the\n  // callback completes, including when its caller has requested interruption.\n  return yield* Effect.callback<Uint8Array, CryptoUnavailable>((resume) => {\n    const registration = Result.try({\n      try: () =>\n        crypto.argon2(\n          \"argon2id\",\n          {\n            message: input.password,\n            nonce: input.salt,\n            parallelism: input.parallelism,\n            memory: input.memoryKiB,\n            passes: input.passes,\n            tagLength: input.length,\n            secret: input.secret,\n            associatedData: input.associatedData,\n          },\n          (error, key) =>\n            resume(error === null ? Effect.succeed(key) : Effect.fail(CryptoUnavailable.make({}))),\n        ),\n      catch: () => CryptoUnavailable.make({}),\n    });\n\n    if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));\n  }).pipe(Effect.uninterruptible);\n});\n\n/** Node-compatible WebCrypto and native password KDFs with portable XChaCha20-Poly1305. */\nexport const layer = (limits: Partial<Limits> = {}) =>\n  // Node's declarations include additional key usages absent from lib.dom. The\n  // standard operations used here share the WebCrypto ABI; no payload is cast.\n  makeLayer(crypto.webcrypto.subtle as SubtleCrypto, limits, { argon2, xchacha }).pipe(\n    Layer.provide(Scrypt.layer),\n  );\n"],"mappings":";;;;;;;AAYA,MAAM,SAAiB,OAAO,WAAW,WAAW,OAAyB;CAE3E,IAAI,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CAInF,OAAO,OAAO,OAAO,UAAyC,WAAW;EACvE,MAAM,eAAe,OAAO,IAAI;GAC9B,WACE,OAAO,OACL,YACA;IACE,SAAS,MAAM;IACf,OAAO,MAAM;IACb,aAAa,MAAM;IACnB,QAAQ,MAAM;IACd,QAAQ,MAAM;IACd,WAAW,MAAM;IACjB,QAAQ,MAAM;IACd,gBAAgB,MAAM;GACxB,IACC,OAAO,QACN,OAAO,UAAU,OAAO,OAAO,QAAQ,GAAG,IAAI,OAAO,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CACzF;GACF,aAAa,kBAAkB,KAAK,CAAC,CAAC;EACxC,CAAC;EAED,IAAI,OAAO,UAAU,YAAY,GAAG,OAAO,OAAO,KAAK,aAAa,OAAO,CAAC;CAC9E,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe;AAChC,CAAC;;AAGD,MAAa,SAAS,SAA0B,CAAC,MAG/C,UAAU,OAAO,UAAU,QAAwB,QAAQ;CAAE;CAAQ;AAAQ,CAAC,CAAC,CAAC,KAC9E,MAAM,QAAQA,OAAY,CAC5B"}

package/dist/internal/scrypt-backend.mjs

@@ -0,0 +1,10 @@
+import { UnsupportedAlgorithm } from "../Errors.mjs";
+import { Context, Effect, Layer } from "effect";
+//#region src/internal/scrypt-backend.ts
+/** Raw derivation selected by a platform Layer; Kdf owns validation and admission. */
+var ScryptBackend = class extends Context.Service()("@yielded/crypto/internal/scrypt-backend") {};
+const layerUnsupported = Layer.succeed(ScryptBackend, { derive: () => Effect.fail(UnsupportedAlgorithm.make({})) });
+//#endregion
+export { ScryptBackend, layerUnsupported };
+
+//# sourceMappingURL=scrypt-backend.mjs.map

package/dist/internal/scrypt-backend.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrypt-backend.mjs","names":[],"sources":["../../src/internal/scrypt-backend.ts"],"sourcesContent":["import { Context, Effect, Layer } from \"effect\";\n\nimport { type OperationError, UnsupportedAlgorithm } from \"../Errors\";\n\nexport interface ScryptParameters {\n  readonly password: Uint8Array<ArrayBuffer>;\n  readonly salt: Uint8Array<ArrayBuffer>;\n  readonly cost: number;\n  readonly blockSize: number;\n  readonly parallelism: number;\n  readonly length: number;\n  readonly maximumMemoryBytes: number;\n}\n\n/** Raw derivation selected by a platform Layer; Kdf owns validation and admission. */\nexport class ScryptBackend extends Context.Service<\n  ScryptBackend,\n  {\n    readonly derive: (input: ScryptParameters) => Effect.Effect<Uint8Array, OperationError>;\n  }\n>()(\"@yielded/crypto/internal/scrypt-backend\") {}\n\nexport const layerUnsupported = Layer.succeed(ScryptBackend, {\n  derive: () => Effect.fail(UnsupportedAlgorithm.make({})),\n});\n"],"mappings":";;;;AAeA,IAAa,gBAAb,cAAmC,QAAQ,QAKzC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC;AAEhD,MAAa,mBAAmB,MAAM,QAAQ,eAAe,EAC3D,cAAc,OAAO,KAAK,qBAAqB,KAAK,CAAC,CAAC,CAAC,EACzD,CAAC"}

package/dist/internal/scrypt.mjs

@@ -0,0 +1,25 @@
+import { CryptoUnavailable, UnsupportedAlgorithm } from "../Errors.mjs";
+import { ScryptBackend } from "./scrypt-backend.mjs";
+import { Effect, Layer, Result } from "effect";
+import * as crypto from "node:crypto";
+//#region src/internal/scrypt.ts
+const derive = Effect.fnUntraced(function* (input) {
+	if (typeof crypto.scrypt !== "function") return yield* UnsupportedAlgorithm.make({});
+	return yield* Effect.callback((resume) => {
+		const registration = Result.try({
+			try: () => crypto.scrypt(input.password, input.salt, input.length, {
+				N: input.cost,
+				r: input.blockSize,
+				p: input.parallelism,
+				maxmem: input.maximumMemoryBytes
+			}, (error, key) => resume(error ? Effect.fail(CryptoUnavailable.make({})) : Effect.succeed(key))),
+			catch: () => CryptoUnavailable.make({})
+		});
+		if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));
+	}).pipe(Effect.uninterruptible);
+});
+const layer = Layer.succeed(ScryptBackend, { derive });
+//#endregion
+export { layer };
+
+//# sourceMappingURL=scrypt.mjs.map

package/dist/internal/scrypt.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrypt.mjs","names":[],"sources":["../../src/internal/scrypt.ts"],"sourcesContent":["// @effect-diagnostics-next-line nodeBuiltinImport:off -- Native scrypt is not exposed by Effect Crypto or WebCrypto.\nimport * as crypto from \"node:crypto\";\n\nimport { Effect, Layer, Result } from \"effect\";\n\nimport { CryptoUnavailable, UnsupportedAlgorithm } from \"../Errors\";\nimport { ScryptBackend, type ScryptParameters } from \"./scrypt-backend\";\n\nconst derive = Effect.fnUntraced(function* (input: ScryptParameters) {\n  if (typeof crypto.scrypt !== \"function\") return yield* UnsupportedAlgorithm.make({});\n\n  // Native work cannot be cancelled. Keep admission and borrowed buffers until\n  // its callback finishes, including when the caller requests interruption.\n  return yield* Effect.callback<Uint8Array, CryptoUnavailable>((resume) => {\n    const registration = Result.try({\n      try: () =>\n        crypto.scrypt(\n          input.password,\n          input.salt,\n          input.length,\n          {\n            N: input.cost,\n            r: input.blockSize,\n            p: input.parallelism,\n            maxmem: input.maximumMemoryBytes,\n          },\n          // Bun supplies undefined on success; Node supplies null.\n          (error, key) =>\n            resume(error ? Effect.fail(CryptoUnavailable.make({})) : Effect.succeed(key)),\n        ),\n      catch: () => CryptoUnavailable.make({}),\n    });\n\n    if (Result.isFailure(registration)) resume(Effect.fail(registration.failure));\n  }).pipe(Effect.uninterruptible);\n});\n\nexport const layer = Layer.succeed(ScryptBackend, { derive });\n"],"mappings":";;;;;AAQA,MAAM,SAAS,OAAO,WAAW,WAAW,OAAyB;CACnE,IAAI,OAAO,OAAO,WAAW,YAAY,OAAO,OAAO,qBAAqB,KAAK,CAAC,CAAC;CAInF,OAAO,OAAO,OAAO,UAAyC,WAAW;EACvE,MAAM,eAAe,OAAO,IAAI;GAC9B,WACE,OAAO,OACL,MAAM,UACN,MAAM,MACN,MAAM,QACN;IACE,GAAG,MAAM;IACT,GAAG,MAAM;IACT,GAAG,MAAM;IACT,QAAQ,MAAM;GAChB,IAEC,OAAO,QACN,OAAO,QAAQ,OAAO,KAAK,kBAAkB,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,QAAQ,GAAG,CAAC,CAChF;GACF,aAAa,kBAAkB,KAAK,CAAC,CAAC;EACxC,CAAC;EAED,IAAI,OAAO,UAAU,YAAY,GAAG,OAAO,OAAO,KAAK,aAAa,OAAO,CAAC;CAC9E,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe;AAChC,CAAC;AAED,MAAa,QAAQ,MAAM,QAAQ,eAAe,EAAE,OAAO,CAAC"}

package/dist/internal/signature.mjs

@@ -1,5 +1,5 @@
-import { InvalidInput } from "../Errors.mjs";
-import { PrivateKeyInput, PrivateKeyParameters, PublicKeyInput, PublicKeyParameters, SignInput, Signature, VerifyInput } from "../Signature.mjs";
+import { CryptoUnavailable, InvalidInput } from "../Errors.mjs";
+import { GenerateKeyPairInput, PrivateKeyInput, PrivateKeyParameters, PublicKeyInput, PublicKeyParameters, SignInput, Signature, VerifyInput } from "../Signature.mjs";
 import { copy, decode, importError, nativeError, withSecret } from "./common.mjs";
 import { makeScopedKey } from "./scoped-key.mjs";
 import { Effect, Redacted, Schema } from "effect";
@@ -7,6 +7,26 @@ import { Base64Url } from "effect/encoding";
 //#region src/internal/signature.ts
 const derBytes = Schema.Uint8Array.check(Schema.isMinLength(1), Schema.isMaxLength(16384));
 const RsaAlgorithm = Schema.Struct({ modulusLength: Schema.Int.check(Schema.isGreaterThanOrEqualTo(2048)) });
+const component = Schema.Uint8ArrayFromBase64Url;
+const GeneratedEc = Schema.Struct({
+	x: component,
+	y: component,
+	d: component
+});
+const GeneratedEd = Schema.Struct({
+	x: component,
+	d: component
+});
+const GeneratedRsa = Schema.Struct({
+	n: component,
+	e: component,
+	d: component,
+	p: component,
+	q: component,
+	dp: component,
+	dq: component,
+	qi: component
+});
 const importAlgorithm = (algorithm) => {
 	switch (algorithm) {
 		case "ECDSA-P256-SHA256": return {
@@ -120,6 +140,69 @@ const makeSignature = (subtle) => {
 				});
 			}) };
 		}),
+		generateKeyPair: Effect.fnUntraced(function* (input) {
+			const value = yield* decode(GenerateKeyPairInput, input, "parameters");
+			const pair = yield* Effect.tryPromise({
+				try: () => {
+					switch (value.algorithm) {
+						case "ECDSA-P256-SHA256": return subtle.generateKey({
+							name: "ECDSA",
+							namedCurve: "P-256"
+						}, true, ["sign", "verify"]);
+						case "Ed25519": return subtle.generateKey("Ed25519", true, ["sign", "verify"]);
+						case "RSASSA-PKCS1-v1_5-SHA256":
+						case "RSA-PSS-SHA256": return subtle.generateKey({
+							name: value.algorithm === "RSA-PSS-SHA256" ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
+							hash: "SHA-256",
+							modulusLength: value.modulusLength ?? 2048,
+							publicExponent: new Uint8Array([
+								1,
+								0,
+								1
+							])
+						}, true, ["sign", "verify"]);
+					}
+				},
+				catch: nativeError
+			});
+			const jwk = yield* Effect.tryPromise({
+				try: () => subtle.exportKey("jwk", pair.privateKey),
+				catch: nativeError
+			});
+			const parameters = yield* Effect.gen(function* () {
+				switch (value.algorithm) {
+					case "ECDSA-P256-SHA256": return {
+						algorithm: value.algorithm,
+						...yield* Schema.decodeUnknownEffect(GeneratedEc)(jwk, { reportInput: false })
+					};
+					case "Ed25519": return {
+						algorithm: value.algorithm,
+						...yield* Schema.decodeUnknownEffect(GeneratedEd)(jwk, { reportInput: false })
+					};
+					case "RSASSA-PKCS1-v1_5-SHA256":
+					case "RSA-PSS-SHA256": return {
+						algorithm: value.algorithm,
+						...yield* Schema.decodeUnknownEffect(GeneratedRsa)(jwk, { reportInput: false })
+					};
+				}
+			}).pipe(Effect.mapError(() => CryptoUnavailable.make({})));
+			yield* decode(PrivateKeyParameters, parameters, "key");
+			return {
+				publicKey: "n" in parameters ? {
+					algorithm: parameters.algorithm,
+					n: parameters.n.slice(),
+					e: parameters.e.slice()
+				} : "y" in parameters ? {
+					algorithm: parameters.algorithm,
+					x: parameters.x.slice(),
+					y: parameters.y.slice()
+				} : {
+					algorithm: "Ed25519",
+					x: parameters.x.slice()
+				},
+				privateKey: Redacted.make(parameters)
+			};
+		}, Effect.uninterruptible),
 		encodePublicKey: Effect.fnUntraced(function* (input) {
 			const parameters = yield* decode(PublicKeyParameters, input, "key");
 			const key = yield* importComponents(parameters, "verify");

package/dist/internal/signature.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"signature.mjs","names":[],"sources":["../../src/internal/signature.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\nimport { Base64Url } from \"effect/encoding\";\n\nimport { InvalidInput } from \"../Errors\";\nimport {\n  type Algorithm,\n  type PrivateKey,\n  PrivateKeyInput,\n  PrivateKeyParameters,\n  type PublicKey,\n  PublicKeyInput,\n  PublicKeyParameters,\n  SignInput,\n  Signature,\n  VerifyInput,\n} from \"../Signature\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\nimport { makeScopedKey } from \"./scoped-key\";\n\nconst derBytes = Schema.Uint8Array.check(Schema.isMinLength(1), Schema.isMaxLength(16384));\n\nconst RsaAlgorithm = Schema.Struct({\n  modulusLength: Schema.Int.check(Schema.isGreaterThanOrEqualTo(2048)),\n});\n\nconst importAlgorithm = (algorithm: Algorithm) => {\n  switch (algorithm) {\n    case \"ECDSA-P256-SHA256\":\n      return { name: \"ECDSA\", namedCurve: \"P-256\" };\n    case \"RSA-PSS-SHA256\":\n      return { name: \"RSA-PSS\", hash: \"SHA-256\" };\n    case \"RSASSA-PKCS1-v1_5-SHA256\":\n      return { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" };\n    case \"Ed25519\":\n      return { name: \"Ed25519\" };\n  }\n};\n\nconst operationAlgorithm = (algorithm: Algorithm) => {\n  switch (algorithm) {\n    case \"ECDSA-P256-SHA256\":\n      return { name: \"ECDSA\", hash: \"SHA-256\" };\n    case \"RSA-PSS-SHA256\":\n      return { name: \"RSA-PSS\", saltLength: 32 };\n    case \"RSASSA-PKCS1-v1_5-SHA256\":\n      return { name: \"RSASSA-PKCS1-v1_5\" };\n    case \"Ed25519\":\n      return { name: \"Ed25519\" };\n  }\n};\n\nexport const makeSignature = (subtle: SubtleCrypto): Signature[\"Service\"] => {\n  // JOSE owns JWK metadata and policy. The adapter translates validated raw\n  // components through its platform key parser.\n  const importComponents = Effect.fnUntraced(function* (\n    parameters: PublicKeyParameters | PrivateKeyParameters,\n    usage: \"sign\" | \"verify\",\n  ) {\n    let jwk: JsonWebKey;\n\n    switch (parameters.algorithm) {\n      case \"ECDSA-P256-SHA256\":\n        jwk = {\n          kty: \"EC\",\n          crv: \"P-256\",\n          x: Base64Url.encode(parameters.x),\n          y: Base64Url.encode(parameters.y),\n        };\n        break;\n      case \"Ed25519\":\n        jwk = { kty: \"OKP\", crv: \"Ed25519\", x: Base64Url.encode(parameters.x) };\n        break;\n      case \"RSASSA-PKCS1-v1_5-SHA256\":\n      case \"RSA-PSS-SHA256\":\n        jwk = { kty: \"RSA\", n: Base64Url.encode(parameters.n), e: Base64Url.encode(parameters.e) };\n        if (\"p\" in parameters) {\n          jwk.p = Base64Url.encode(parameters.p);\n          jwk.q = Base64Url.encode(parameters.q);\n          jwk.dp = Base64Url.encode(parameters.dp);\n          jwk.dq = Base64Url.encode(parameters.dq);\n          jwk.qi = Base64Url.encode(parameters.qi);\n        }\n    }\n    if (\"d\" in parameters) jwk.d = Base64Url.encode(parameters.d);\n\n    const key = yield* Effect.tryPromise({\n      try: () => subtle.importKey(\"jwk\", jwk, importAlgorithm(parameters.algorithm), true, [usage]),\n      catch: importError,\n    });\n\n    if (\n      parameters.algorithm === \"RSA-PSS-SHA256\" ||\n      parameters.algorithm === \"RSASSA-PKCS1-v1_5-SHA256\"\n    ) {\n      yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(\n        Effect.mapError(() => InvalidInput.make({ reason: \"key\" })),\n      );\n    }\n\n    return key;\n  });\n\n  const importKey = Effect.fnUntraced(function* (\n    algorithm: Algorithm,\n    format: \"pkcs8\" | \"spki\",\n    material: Uint8Array<ArrayBuffer>,\n  ) {\n    yield* decode(derBytes, material, \"key\");\n\n    const key = yield* Effect.tryPromise({\n      try: () =>\n        subtle.importKey(format, material, importAlgorithm(algorithm), false, [\n          format === \"pkcs8\" ? \"sign\" : \"verify\",\n        ]),\n      catch: importError,\n    });\n\n    if (algorithm === \"RSA-PSS-SHA256\" || algorithm === \"RSASSA-PKCS1-v1_5-SHA256\") {\n      // The platform parsed this DER key. Validate its actual modulus, not caller metadata.\n      yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(\n        Effect.mapError(() => InvalidInput.make({ reason: \"key\" })),\n      );\n    }\n\n    return key;\n  });\n\n  return Signature.of({\n    importPrivateKey: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(PrivateKeyInput, input, \"key\");\n      const algorithm = value.algorithm;\n\n      const use = yield* makeScopedKey(\n        withSecret(value.privateKey, (material) => importKey(algorithm, \"pkcs8\", material)),\n      );\n\n      return {\n        sign: Effect.fnUntraced(function* (input) {\n          const data = yield* decode(Schema.Uint8Array, input, \"data\").pipe(Effect.flatMap(copy));\n\n          const result = yield* use((key) =>\n            Effect.tryPromise({\n              try: () => subtle.sign(operationAlgorithm(algorithm), key, data),\n              catch: nativeError,\n            }),\n          );\n\n          return new Uint8Array(result);\n        }),\n      } satisfies PrivateKey;\n    }),\n    importPublicKey: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(PublicKeyInput, input, \"key\");\n      const algorithm = value.algorithm;\n      const material = yield* copy(value.publicKey);\n      const use = yield* makeScopedKey(importKey(algorithm, \"spki\", material));\n\n      return {\n        verify: Effect.fnUntraced(function* (input, signature) {\n          const data = yield* decode(Schema.Uint8Array, input, \"data\").pipe(Effect.flatMap(copy));\n\n          const tag = yield* decode(Schema.Uint8Array, signature, \"data\").pipe(\n            Effect.flatMap(copy),\n          );\n\n          return yield* use((key) => {\n            if ((algorithm === \"ECDSA-P256-SHA256\" || algorithm === \"Ed25519\") && tag.length !== 64)\n              return Effect.succeed(false);\n\n            return Effect.tryPromise({\n              try: () => subtle.verify(operationAlgorithm(algorithm), key, tag, data),\n              catch: nativeError,\n            });\n          });\n        }),\n      } satisfies PublicKey;\n    }),\n    encodePublicKey: Effect.fnUntraced(function* (input) {\n      const parameters = yield* decode(PublicKeyParameters, input, \"key\");\n      const key = yield* importComponents(parameters, \"verify\");\n\n      const encoded = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"spki\", key),\n        catch: nativeError,\n      });\n\n      return new Uint8Array(encoded);\n    }),\n    encodePrivateKey: Effect.fnUntraced(function* (input) {\n      const wrapped = yield* decode(\n        Schema.Redacted(PrivateKeyParameters, { disallowJsonEncode: true }),\n        input,\n        \"key\",\n      );\n\n      const parameters = Redacted.value(wrapped);\n      const key = yield* importComponents(parameters, \"sign\");\n\n      const encoded = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"pkcs8\", key),\n        catch: nativeError,\n      });\n\n      return Redacted.make(new Uint8Array(encoded));\n    }),\n    sign: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(SignInput, input, \"data\");\n      const data = yield* copy(value.data);\n\n      return yield* withSecret(value.privateKey, (material) =>\n        Effect.gen(function* () {\n          const key = yield* importKey(value.algorithm, \"pkcs8\", material);\n\n          const result = yield* Effect.tryPromise({\n            try: () => subtle.sign(operationAlgorithm(value.algorithm), key, data),\n            catch: nativeError,\n          });\n\n          return new Uint8Array(result);\n        }).pipe(Effect.uninterruptible),\n      );\n    }),\n    verify: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(VerifyInput, input, \"data\");\n      const material = yield* copy(value.publicKey);\n      const data = yield* copy(value.data);\n      const signature = yield* copy(value.signature);\n      const key = yield* importKey(value.algorithm, \"spki\", material);\n\n      if (\n        (value.algorithm === \"ECDSA-P256-SHA256\" || value.algorithm === \"Ed25519\") &&\n        signature.length !== 64\n      )\n        return false;\n\n      return yield* Effect.tryPromise({\n        try: () => subtle.verify(operationAlgorithm(value.algorithm), key, signature, data),\n        catch: nativeError,\n      });\n    }),\n  });\n};\n"],"mappings":";;;;;;;AAmBA,MAAM,WAAW,OAAO,WAAW,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,KAAK,CAAC;AAEzF,MAAM,eAAe,OAAO,OAAO,EACjC,eAAe,OAAO,IAAI,MAAM,OAAO,uBAAuB,IAAI,CAAC,EACrE,CAAC;AAED,MAAM,mBAAmB,cAAyB;CAChD,QAAQ,WAAR;EACE,KAAK,qBACH,OAAO;GAAE,MAAM;GAAS,YAAY;EAAQ;EAC9C,KAAK,kBACH,OAAO;GAAE,MAAM;GAAW,MAAM;EAAU;EAC5C,KAAK,4BACH,OAAO;GAAE,MAAM;GAAqB,MAAM;EAAU;EACtD,KAAK,WACH,OAAO,EAAE,MAAM,UAAU;CAC7B;AACF;AAEA,MAAM,sBAAsB,cAAyB;CACnD,QAAQ,WAAR;EACE,KAAK,qBACH,OAAO;GAAE,MAAM;GAAS,MAAM;EAAU;EAC1C,KAAK,kBACH,OAAO;GAAE,MAAM;GAAW,YAAY;EAAG;EAC3C,KAAK,4BACH,OAAO,EAAE,MAAM,oBAAoB;EACrC,KAAK,WACH,OAAO,EAAE,MAAM,UAAU;CAC7B;AACF;AAEA,MAAa,iBAAiB,WAA+C;CAG3E,MAAM,mBAAmB,OAAO,WAAW,WACzC,YACA,OACA;EACA,IAAI;EAEJ,QAAQ,WAAW,WAAnB;GACE,KAAK;IACH,MAAM;KACJ,KAAK;KACL,KAAK;KACL,GAAG,UAAU,OAAO,WAAW,CAAC;KAChC,GAAG,UAAU,OAAO,WAAW,CAAC;IAClC;IACA;GACF,KAAK;IACH,MAAM;KAAE,KAAK;KAAO,KAAK;KAAW,GAAG,UAAU,OAAO,WAAW,CAAC;IAAE;IACtE;GACF,KAAK;GACL,KAAK;IACH,MAAM;KAAE,KAAK;KAAO,GAAG,UAAU,OAAO,WAAW,CAAC;KAAG,GAAG,UAAU,OAAO,WAAW,CAAC;IAAE;IACzF,IAAI,OAAO,YAAY;KACrB,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;KACrC,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;KACrC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;KACvC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;KACvC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;IACzC;EACJ;EACA,IAAI,OAAO,YAAY,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;EAE5D,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WAAW,OAAO,UAAU,OAAO,KAAK,gBAAgB,WAAW,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;GAC5F,OAAO;EACT,CAAC;EAED,IACE,WAAW,cAAc,oBACzB,WAAW,cAAc,4BAEzB,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAC7D,OAAO,eAAe,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC5D;EAGF,OAAO;CACT,CAAC;CAED,MAAM,YAAY,OAAO,WAAW,WAClC,WACA,QACA,UACA;EACA,OAAO,OAAO,UAAU,UAAU,KAAK;EAEvC,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WACE,OAAO,UAAU,QAAQ,UAAU,gBAAgB,SAAS,GAAG,OAAO,CACpE,WAAW,UAAU,SAAS,QAChC,CAAC;GACH,OAAO;EACT,CAAC;EAED,IAAI,cAAc,oBAAoB,cAAc,4BAElD,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAC7D,OAAO,eAAe,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC5D;EAGF,OAAO;CACT,CAAC;CAED,OAAO,UAAU,GAAG;EAClB,kBAAkB,OAAO,WAAW,WAAW,OAAO;GACpD,MAAM,QAAQ,OAAO,OAAO,iBAAiB,OAAO,KAAK;GACzD,MAAM,YAAY,MAAM;GAExB,MAAM,MAAM,OAAO,cACjB,WAAW,MAAM,aAAa,aAAa,UAAU,WAAW,SAAS,QAAQ,CAAC,CACpF;GAEA,OAAO,EACL,MAAM,OAAO,WAAW,WAAW,OAAO;IACxC,MAAM,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IAEtF,MAAM,SAAS,OAAO,KAAK,QACzB,OAAO,WAAW;KAChB,WAAW,OAAO,KAAK,mBAAmB,SAAS,GAAG,KAAK,IAAI;KAC/D,OAAO;IACT,CAAC,CACH;IAEA,OAAO,IAAI,WAAW,MAAM;GAC9B,CAAC,EACH;EACF,CAAC;EACD,iBAAiB,OAAO,WAAW,WAAW,OAAO;GACnD,MAAM,QAAQ,OAAO,OAAO,gBAAgB,OAAO,KAAK;GACxD,MAAM,YAAY,MAAM;GACxB,MAAM,WAAW,OAAO,KAAK,MAAM,SAAS;GAC5C,MAAM,MAAM,OAAO,cAAc,UAAU,WAAW,QAAQ,QAAQ,CAAC;GAEvE,OAAO,EACL,QAAQ,OAAO,WAAW,WAAW,OAAO,WAAW;IACrD,MAAM,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IAEtF,MAAM,MAAM,OAAO,OAAO,OAAO,YAAY,WAAW,MAAM,CAAC,CAAC,KAC9D,OAAO,QAAQ,IAAI,CACrB;IAEA,OAAO,OAAO,KAAK,QAAQ;KACzB,KAAK,cAAc,uBAAuB,cAAc,cAAc,IAAI,WAAW,IACnF,OAAO,OAAO,QAAQ,KAAK;KAE7B,OAAO,OAAO,WAAW;MACvB,WAAW,OAAO,OAAO,mBAAmB,SAAS,GAAG,KAAK,KAAK,IAAI;MACtE,OAAO;KACT,CAAC;IACH,CAAC;GACH,CAAC,EACH;EACF,CAAC;EACD,iBAAiB,OAAO,WAAW,WAAW,OAAO;GACnD,MAAM,aAAa,OAAO,OAAO,qBAAqB,OAAO,KAAK;GAClE,MAAM,MAAM,OAAO,iBAAiB,YAAY,QAAQ;GAExD,MAAM,UAAU,OAAO,OAAO,WAAW;IACvC,WAAW,OAAO,UAAU,QAAQ,GAAG;IACvC,OAAO;GACT,CAAC;GAED,OAAO,IAAI,WAAW,OAAO;EAC/B,CAAC;EACD,kBAAkB,OAAO,WAAW,WAAW,OAAO;GACpD,MAAM,UAAU,OAAO,OACrB,OAAO,SAAS,sBAAsB,EAAE,oBAAoB,KAAK,CAAC,GAClE,OACA,KACF;GAEA,MAAM,aAAa,SAAS,MAAM,OAAO;GACzC,MAAM,MAAM,OAAO,iBAAiB,YAAY,MAAM;GAEtD,MAAM,UAAU,OAAO,OAAO,WAAW;IACvC,WAAW,OAAO,UAAU,SAAS,GAAG;IACxC,OAAO;GACT,CAAC;GAED,OAAO,SAAS,KAAK,IAAI,WAAW,OAAO,CAAC;EAC9C,CAAC;EACD,MAAM,OAAO,WAAW,WAAW,OAAO;GACxC,MAAM,QAAQ,OAAO,OAAO,WAAW,OAAO,MAAM;GACpD,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,aAAa,aAC1C,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,SAAS,QAAQ;IAE/D,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WAAW,OAAO,KAAK,mBAAmB,MAAM,SAAS,GAAG,KAAK,IAAI;KACrE,OAAO;IACT,CAAC;IAED,OAAO,IAAI,WAAW,MAAM;GAC9B,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC;EACD,QAAQ,OAAO,WAAW,WAAW,OAAO;GAC1C,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,MAAM;GACtD,MAAM,WAAW,OAAO,KAAK,MAAM,SAAS;GAC5C,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,YAAY,OAAO,KAAK,MAAM,SAAS;GAC7C,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,QAAQ,QAAQ;GAE9D,KACG,MAAM,cAAc,uBAAuB,MAAM,cAAc,cAChE,UAAU,WAAW,IAErB,OAAO;GAET,OAAO,OAAO,OAAO,WAAW;IAC9B,WAAW,OAAO,OAAO,mBAAmB,MAAM,SAAS,GAAG,KAAK,WAAW,IAAI;IAClF,OAAO;GACT,CAAC;EACH,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"signature.mjs","names":[],"sources":["../../src/internal/signature.ts"],"sourcesContent":["import { Effect, Redacted, Schema } from \"effect\";\nimport { Base64Url } from \"effect/encoding\";\n\nimport { CryptoUnavailable, InvalidInput } from \"../Errors\";\nimport {\n  type Algorithm,\n  type PrivateKey,\n  PrivateKeyInput,\n  GenerateKeyPairInput,\n  PrivateKeyParameters,\n  type PublicKey,\n  PublicKeyInput,\n  PublicKeyParameters,\n  SignInput,\n  Signature,\n  VerifyInput,\n} from \"../Signature\";\nimport { copy, decode, importError, nativeError, withSecret } from \"./common\";\nimport { makeScopedKey } from \"./scoped-key\";\n\nconst derBytes = Schema.Uint8Array.check(Schema.isMinLength(1), Schema.isMaxLength(16384));\n\nconst RsaAlgorithm = Schema.Struct({\n  modulusLength: Schema.Int.check(Schema.isGreaterThanOrEqualTo(2048)),\n});\n\nconst component = Schema.Uint8ArrayFromBase64Url;\nconst GeneratedEc = Schema.Struct({ x: component, y: component, d: component });\nconst GeneratedEd = Schema.Struct({ x: component, d: component });\n\nconst GeneratedRsa = Schema.Struct({\n  n: component,\n  e: component,\n  d: component,\n  p: component,\n  q: component,\n  dp: component,\n  dq: component,\n  qi: component,\n});\n\nconst importAlgorithm = (algorithm: Algorithm) => {\n  switch (algorithm) {\n    case \"ECDSA-P256-SHA256\":\n      return { name: \"ECDSA\", namedCurve: \"P-256\" };\n    case \"RSA-PSS-SHA256\":\n      return { name: \"RSA-PSS\", hash: \"SHA-256\" };\n    case \"RSASSA-PKCS1-v1_5-SHA256\":\n      return { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" };\n    case \"Ed25519\":\n      return { name: \"Ed25519\" };\n  }\n};\n\nconst operationAlgorithm = (algorithm: Algorithm) => {\n  switch (algorithm) {\n    case \"ECDSA-P256-SHA256\":\n      return { name: \"ECDSA\", hash: \"SHA-256\" };\n    case \"RSA-PSS-SHA256\":\n      return { name: \"RSA-PSS\", saltLength: 32 };\n    case \"RSASSA-PKCS1-v1_5-SHA256\":\n      return { name: \"RSASSA-PKCS1-v1_5\" };\n    case \"Ed25519\":\n      return { name: \"Ed25519\" };\n  }\n};\n\nexport const makeSignature = (subtle: SubtleCrypto): Signature[\"Service\"] => {\n  // JOSE owns JWK metadata and policy. The adapter translates validated raw\n  // components through its platform key parser.\n  const importComponents = Effect.fnUntraced(function* (\n    parameters: PublicKeyParameters | PrivateKeyParameters,\n    usage: \"sign\" | \"verify\",\n  ) {\n    let jwk: JsonWebKey;\n\n    switch (parameters.algorithm) {\n      case \"ECDSA-P256-SHA256\":\n        jwk = {\n          kty: \"EC\",\n          crv: \"P-256\",\n          x: Base64Url.encode(parameters.x),\n          y: Base64Url.encode(parameters.y),\n        };\n        break;\n      case \"Ed25519\":\n        jwk = { kty: \"OKP\", crv: \"Ed25519\", x: Base64Url.encode(parameters.x) };\n        break;\n      case \"RSASSA-PKCS1-v1_5-SHA256\":\n      case \"RSA-PSS-SHA256\":\n        jwk = { kty: \"RSA\", n: Base64Url.encode(parameters.n), e: Base64Url.encode(parameters.e) };\n        if (\"p\" in parameters) {\n          jwk.p = Base64Url.encode(parameters.p);\n          jwk.q = Base64Url.encode(parameters.q);\n          jwk.dp = Base64Url.encode(parameters.dp);\n          jwk.dq = Base64Url.encode(parameters.dq);\n          jwk.qi = Base64Url.encode(parameters.qi);\n        }\n    }\n    if (\"d\" in parameters) jwk.d = Base64Url.encode(parameters.d);\n\n    const key = yield* Effect.tryPromise({\n      try: () => subtle.importKey(\"jwk\", jwk, importAlgorithm(parameters.algorithm), true, [usage]),\n      catch: importError,\n    });\n\n    if (\n      parameters.algorithm === \"RSA-PSS-SHA256\" ||\n      parameters.algorithm === \"RSASSA-PKCS1-v1_5-SHA256\"\n    ) {\n      yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(\n        Effect.mapError(() => InvalidInput.make({ reason: \"key\" })),\n      );\n    }\n\n    return key;\n  });\n\n  const importKey = Effect.fnUntraced(function* (\n    algorithm: Algorithm,\n    format: \"pkcs8\" | \"spki\",\n    material: Uint8Array<ArrayBuffer>,\n  ) {\n    yield* decode(derBytes, material, \"key\");\n\n    const key = yield* Effect.tryPromise({\n      try: () =>\n        subtle.importKey(format, material, importAlgorithm(algorithm), false, [\n          format === \"pkcs8\" ? \"sign\" : \"verify\",\n        ]),\n      catch: importError,\n    });\n\n    if (algorithm === \"RSA-PSS-SHA256\" || algorithm === \"RSASSA-PKCS1-v1_5-SHA256\") {\n      // The platform parsed this DER key. Validate its actual modulus, not caller metadata.\n      yield* Schema.decodeUnknownEffect(RsaAlgorithm)(key.algorithm).pipe(\n        Effect.mapError(() => InvalidInput.make({ reason: \"key\" })),\n      );\n    }\n\n    return key;\n  });\n\n  return Signature.of({\n    importPrivateKey: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(PrivateKeyInput, input, \"key\");\n      const algorithm = value.algorithm;\n\n      const use = yield* makeScopedKey(\n        withSecret(value.privateKey, (material) => importKey(algorithm, \"pkcs8\", material)),\n      );\n\n      return {\n        sign: Effect.fnUntraced(function* (input) {\n          const data = yield* decode(Schema.Uint8Array, input, \"data\").pipe(Effect.flatMap(copy));\n\n          const result = yield* use((key) =>\n            Effect.tryPromise({\n              try: () => subtle.sign(operationAlgorithm(algorithm), key, data),\n              catch: nativeError,\n            }),\n          );\n\n          return new Uint8Array(result);\n        }),\n      } satisfies PrivateKey;\n    }),\n    importPublicKey: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(PublicKeyInput, input, \"key\");\n      const algorithm = value.algorithm;\n      const material = yield* copy(value.publicKey);\n      const use = yield* makeScopedKey(importKey(algorithm, \"spki\", material));\n\n      return {\n        verify: Effect.fnUntraced(function* (input, signature) {\n          const data = yield* decode(Schema.Uint8Array, input, \"data\").pipe(Effect.flatMap(copy));\n\n          const tag = yield* decode(Schema.Uint8Array, signature, \"data\").pipe(\n            Effect.flatMap(copy),\n          );\n\n          return yield* use((key) => {\n            if ((algorithm === \"ECDSA-P256-SHA256\" || algorithm === \"Ed25519\") && tag.length !== 64)\n              return Effect.succeed(false);\n\n            return Effect.tryPromise({\n              try: () => subtle.verify(operationAlgorithm(algorithm), key, tag, data),\n              catch: nativeError,\n            });\n          });\n        }),\n      } satisfies PublicKey;\n    }),\n    generateKeyPair: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(GenerateKeyPairInput, input, \"parameters\");\n\n      const pair = yield* Effect.tryPromise({\n        try: () => {\n          switch (value.algorithm) {\n            case \"ECDSA-P256-SHA256\":\n              return subtle.generateKey({ name: \"ECDSA\", namedCurve: \"P-256\" }, true, [\n                \"sign\",\n                \"verify\",\n              ]);\n            case \"Ed25519\":\n              return subtle.generateKey(\"Ed25519\", true, [\"sign\", \"verify\"]);\n            case \"RSASSA-PKCS1-v1_5-SHA256\":\n            case \"RSA-PSS-SHA256\":\n              return subtle.generateKey(\n                {\n                  name: value.algorithm === \"RSA-PSS-SHA256\" ? \"RSA-PSS\" : \"RSASSA-PKCS1-v1_5\",\n                  hash: \"SHA-256\",\n                  modulusLength: value.modulusLength ?? 2048,\n                  publicExponent: new Uint8Array([1, 0, 1]),\n                },\n                true,\n                [\"sign\", \"verify\"],\n              );\n          }\n        },\n        catch: nativeError,\n      });\n\n      const jwk = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"jwk\", pair.privateKey),\n        catch: nativeError,\n      });\n\n      // JsonWebKey does not guarantee algorithm-specific fields. Decode only at\n      // this native boundary; callers receive typed components, never loose JWKs.\n      const parameters: PrivateKeyParameters = yield* Effect.gen(function* () {\n        switch (value.algorithm) {\n          case \"ECDSA-P256-SHA256\":\n            return {\n              algorithm: value.algorithm,\n              ...(yield* Schema.decodeUnknownEffect(GeneratedEc)(jwk, { reportInput: false })),\n            };\n          case \"Ed25519\":\n            return {\n              algorithm: value.algorithm,\n              ...(yield* Schema.decodeUnknownEffect(GeneratedEd)(jwk, { reportInput: false })),\n            };\n          case \"RSASSA-PKCS1-v1_5-SHA256\":\n          case \"RSA-PSS-SHA256\":\n            return {\n              algorithm: value.algorithm,\n              ...(yield* Schema.decodeUnknownEffect(GeneratedRsa)(jwk, { reportInput: false })),\n            };\n        }\n      }).pipe(Effect.mapError(() => CryptoUnavailable.make({})));\n\n      yield* decode(PrivateKeyParameters, parameters, \"key\");\n\n      const publicKey: PublicKeyParameters =\n        \"n\" in parameters\n          ? { algorithm: parameters.algorithm, n: parameters.n.slice(), e: parameters.e.slice() }\n          : \"y\" in parameters\n            ? { algorithm: parameters.algorithm, x: parameters.x.slice(), y: parameters.y.slice() }\n            : { algorithm: \"Ed25519\", x: parameters.x.slice() };\n\n      return { publicKey, privateKey: Redacted.make(parameters) };\n    }, Effect.uninterruptible),\n    encodePublicKey: Effect.fnUntraced(function* (input) {\n      const parameters = yield* decode(PublicKeyParameters, input, \"key\");\n      const key = yield* importComponents(parameters, \"verify\");\n\n      const encoded = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"spki\", key),\n        catch: nativeError,\n      });\n\n      return new Uint8Array(encoded);\n    }),\n    encodePrivateKey: Effect.fnUntraced(function* (input) {\n      const wrapped = yield* decode(\n        Schema.Redacted(PrivateKeyParameters, { disallowJsonEncode: true }),\n        input,\n        \"key\",\n      );\n\n      const parameters = Redacted.value(wrapped);\n      const key = yield* importComponents(parameters, \"sign\");\n\n      const encoded = yield* Effect.tryPromise({\n        try: () => subtle.exportKey(\"pkcs8\", key),\n        catch: nativeError,\n      });\n\n      return Redacted.make(new Uint8Array(encoded));\n    }),\n    sign: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(SignInput, input, \"data\");\n      const data = yield* copy(value.data);\n\n      return yield* withSecret(value.privateKey, (material) =>\n        Effect.gen(function* () {\n          const key = yield* importKey(value.algorithm, \"pkcs8\", material);\n\n          const result = yield* Effect.tryPromise({\n            try: () => subtle.sign(operationAlgorithm(value.algorithm), key, data),\n            catch: nativeError,\n          });\n\n          return new Uint8Array(result);\n        }).pipe(Effect.uninterruptible),\n      );\n    }),\n    verify: Effect.fnUntraced(function* (input) {\n      const value = yield* decode(VerifyInput, input, \"data\");\n      const material = yield* copy(value.publicKey);\n      const data = yield* copy(value.data);\n      const signature = yield* copy(value.signature);\n      const key = yield* importKey(value.algorithm, \"spki\", material);\n\n      if (\n        (value.algorithm === \"ECDSA-P256-SHA256\" || value.algorithm === \"Ed25519\") &&\n        signature.length !== 64\n      )\n        return false;\n\n      return yield* Effect.tryPromise({\n        try: () => subtle.verify(operationAlgorithm(value.algorithm), key, signature, data),\n        catch: nativeError,\n      });\n    }),\n  });\n};\n"],"mappings":";;;;;;;AAoBA,MAAM,WAAW,OAAO,WAAW,MAAM,OAAO,YAAY,CAAC,GAAG,OAAO,YAAY,KAAK,CAAC;AAEzF,MAAM,eAAe,OAAO,OAAO,EACjC,eAAe,OAAO,IAAI,MAAM,OAAO,uBAAuB,IAAI,CAAC,EACrE,CAAC;AAED,MAAM,YAAY,OAAO;AACzB,MAAM,cAAc,OAAO,OAAO;CAAE,GAAG;CAAW,GAAG;CAAW,GAAG;AAAU,CAAC;AAC9E,MAAM,cAAc,OAAO,OAAO;CAAE,GAAG;CAAW,GAAG;AAAU,CAAC;AAEhE,MAAM,eAAe,OAAO,OAAO;CACjC,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,IAAI;CACJ,IAAI;CACJ,IAAI;AACN,CAAC;AAED,MAAM,mBAAmB,cAAyB;CAChD,QAAQ,WAAR;EACE,KAAK,qBACH,OAAO;GAAE,MAAM;GAAS,YAAY;EAAQ;EAC9C,KAAK,kBACH,OAAO;GAAE,MAAM;GAAW,MAAM;EAAU;EAC5C,KAAK,4BACH,OAAO;GAAE,MAAM;GAAqB,MAAM;EAAU;EACtD,KAAK,WACH,OAAO,EAAE,MAAM,UAAU;CAC7B;AACF;AAEA,MAAM,sBAAsB,cAAyB;CACnD,QAAQ,WAAR;EACE,KAAK,qBACH,OAAO;GAAE,MAAM;GAAS,MAAM;EAAU;EAC1C,KAAK,kBACH,OAAO;GAAE,MAAM;GAAW,YAAY;EAAG;EAC3C,KAAK,4BACH,OAAO,EAAE,MAAM,oBAAoB;EACrC,KAAK,WACH,OAAO,EAAE,MAAM,UAAU;CAC7B;AACF;AAEA,MAAa,iBAAiB,WAA+C;CAG3E,MAAM,mBAAmB,OAAO,WAAW,WACzC,YACA,OACA;EACA,IAAI;EAEJ,QAAQ,WAAW,WAAnB;GACE,KAAK;IACH,MAAM;KACJ,KAAK;KACL,KAAK;KACL,GAAG,UAAU,OAAO,WAAW,CAAC;KAChC,GAAG,UAAU,OAAO,WAAW,CAAC;IAClC;IACA;GACF,KAAK;IACH,MAAM;KAAE,KAAK;KAAO,KAAK;KAAW,GAAG,UAAU,OAAO,WAAW,CAAC;IAAE;IACtE;GACF,KAAK;GACL,KAAK;IACH,MAAM;KAAE,KAAK;KAAO,GAAG,UAAU,OAAO,WAAW,CAAC;KAAG,GAAG,UAAU,OAAO,WAAW,CAAC;IAAE;IACzF,IAAI,OAAO,YAAY;KACrB,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;KACrC,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;KACrC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;KACvC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;KACvC,IAAI,KAAK,UAAU,OAAO,WAAW,EAAE;IACzC;EACJ;EACA,IAAI,OAAO,YAAY,IAAI,IAAI,UAAU,OAAO,WAAW,CAAC;EAE5D,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WAAW,OAAO,UAAU,OAAO,KAAK,gBAAgB,WAAW,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;GAC5F,OAAO;EACT,CAAC;EAED,IACE,WAAW,cAAc,oBACzB,WAAW,cAAc,4BAEzB,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAC7D,OAAO,eAAe,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC5D;EAGF,OAAO;CACT,CAAC;CAED,MAAM,YAAY,OAAO,WAAW,WAClC,WACA,QACA,UACA;EACA,OAAO,OAAO,UAAU,UAAU,KAAK;EAEvC,MAAM,MAAM,OAAO,OAAO,WAAW;GACnC,WACE,OAAO,UAAU,QAAQ,UAAU,gBAAgB,SAAS,GAAG,OAAO,CACpE,WAAW,UAAU,SAAS,QAChC,CAAC;GACH,OAAO;EACT,CAAC;EAED,IAAI,cAAc,oBAAoB,cAAc,4BAElD,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAC7D,OAAO,eAAe,aAAa,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,CAC5D;EAGF,OAAO;CACT,CAAC;CAED,OAAO,UAAU,GAAG;EAClB,kBAAkB,OAAO,WAAW,WAAW,OAAO;GACpD,MAAM,QAAQ,OAAO,OAAO,iBAAiB,OAAO,KAAK;GACzD,MAAM,YAAY,MAAM;GAExB,MAAM,MAAM,OAAO,cACjB,WAAW,MAAM,aAAa,aAAa,UAAU,WAAW,SAAS,QAAQ,CAAC,CACpF;GAEA,OAAO,EACL,MAAM,OAAO,WAAW,WAAW,OAAO;IACxC,MAAM,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IAEtF,MAAM,SAAS,OAAO,KAAK,QACzB,OAAO,WAAW;KAChB,WAAW,OAAO,KAAK,mBAAmB,SAAS,GAAG,KAAK,IAAI;KAC/D,OAAO;IACT,CAAC,CACH;IAEA,OAAO,IAAI,WAAW,MAAM;GAC9B,CAAC,EACH;EACF,CAAC;EACD,iBAAiB,OAAO,WAAW,WAAW,OAAO;GACnD,MAAM,QAAQ,OAAO,OAAO,gBAAgB,OAAO,KAAK;GACxD,MAAM,YAAY,MAAM;GACxB,MAAM,WAAW,OAAO,KAAK,MAAM,SAAS;GAC5C,MAAM,MAAM,OAAO,cAAc,UAAU,WAAW,QAAQ,QAAQ,CAAC;GAEvE,OAAO,EACL,QAAQ,OAAO,WAAW,WAAW,OAAO,WAAW;IACrD,MAAM,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,IAAI,CAAC;IAEtF,MAAM,MAAM,OAAO,OAAO,OAAO,YAAY,WAAW,MAAM,CAAC,CAAC,KAC9D,OAAO,QAAQ,IAAI,CACrB;IAEA,OAAO,OAAO,KAAK,QAAQ;KACzB,KAAK,cAAc,uBAAuB,cAAc,cAAc,IAAI,WAAW,IACnF,OAAO,OAAO,QAAQ,KAAK;KAE7B,OAAO,OAAO,WAAW;MACvB,WAAW,OAAO,OAAO,mBAAmB,SAAS,GAAG,KAAK,KAAK,IAAI;MACtE,OAAO;KACT,CAAC;IACH,CAAC;GACH,CAAC,EACH;EACF,CAAC;EACD,iBAAiB,OAAO,WAAW,WAAW,OAAO;GACnD,MAAM,QAAQ,OAAO,OAAO,sBAAsB,OAAO,YAAY;GAErE,MAAM,OAAO,OAAO,OAAO,WAAW;IACpC,WAAW;KACT,QAAQ,MAAM,WAAd;MACE,KAAK,qBACH,OAAO,OAAO,YAAY;OAAE,MAAM;OAAS,YAAY;MAAQ,GAAG,MAAM,CACtE,QACA,QACF,CAAC;MACH,KAAK,WACH,OAAO,OAAO,YAAY,WAAW,MAAM,CAAC,QAAQ,QAAQ,CAAC;MAC/D,KAAK;MACL,KAAK,kBACH,OAAO,OAAO,YACZ;OACE,MAAM,MAAM,cAAc,mBAAmB,YAAY;OACzD,MAAM;OACN,eAAe,MAAM,iBAAiB;OACtC,gBAAgB,IAAI,WAAW;QAAC;QAAG;QAAG;OAAC,CAAC;MAC1C,GACA,MACA,CAAC,QAAQ,QAAQ,CACnB;KACJ;IACF;IACA,OAAO;GACT,CAAC;GAED,MAAM,MAAM,OAAO,OAAO,WAAW;IACnC,WAAW,OAAO,UAAU,OAAO,KAAK,UAAU;IAClD,OAAO;GACT,CAAC;GAID,MAAM,aAAmC,OAAO,OAAO,IAAI,aAAa;IACtE,QAAQ,MAAM,WAAd;KACE,KAAK,qBACH,OAAO;MACL,WAAW,MAAM;MACjB,GAAI,OAAO,OAAO,oBAAoB,WAAW,CAAC,CAAC,KAAK,EAAE,aAAa,MAAM,CAAC;KAChF;KACF,KAAK,WACH,OAAO;MACL,WAAW,MAAM;MACjB,GAAI,OAAO,OAAO,oBAAoB,WAAW,CAAC,CAAC,KAAK,EAAE,aAAa,MAAM,CAAC;KAChF;KACF,KAAK;KACL,KAAK,kBACH,OAAO;MACL,WAAW,MAAM;MACjB,GAAI,OAAO,OAAO,oBAAoB,YAAY,CAAC,CAAC,KAAK,EAAE,aAAa,MAAM,CAAC;KACjF;IACJ;GACF,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC;GAEzD,OAAO,OAAO,sBAAsB,YAAY,KAAK;GASrD,OAAO;IAAE,WANP,OAAO,aACH;KAAE,WAAW,WAAW;KAAW,GAAG,WAAW,EAAE,MAAM;KAAG,GAAG,WAAW,EAAE,MAAM;IAAE,IACpF,OAAO,aACL;KAAE,WAAW,WAAW;KAAW,GAAG,WAAW,EAAE,MAAM;KAAG,GAAG,WAAW,EAAE,MAAM;IAAE,IACpF;KAAE,WAAW;KAAW,GAAG,WAAW,EAAE,MAAM;IAAE;IAEpC,YAAY,SAAS,KAAK,UAAU;GAAE;EAC5D,GAAG,OAAO,eAAe;EACzB,iBAAiB,OAAO,WAAW,WAAW,OAAO;GACnD,MAAM,aAAa,OAAO,OAAO,qBAAqB,OAAO,KAAK;GAClE,MAAM,MAAM,OAAO,iBAAiB,YAAY,QAAQ;GAExD,MAAM,UAAU,OAAO,OAAO,WAAW;IACvC,WAAW,OAAO,UAAU,QAAQ,GAAG;IACvC,OAAO;GACT,CAAC;GAED,OAAO,IAAI,WAAW,OAAO;EAC/B,CAAC;EACD,kBAAkB,OAAO,WAAW,WAAW,OAAO;GACpD,MAAM,UAAU,OAAO,OACrB,OAAO,SAAS,sBAAsB,EAAE,oBAAoB,KAAK,CAAC,GAClE,OACA,KACF;GAEA,MAAM,aAAa,SAAS,MAAM,OAAO;GACzC,MAAM,MAAM,OAAO,iBAAiB,YAAY,MAAM;GAEtD,MAAM,UAAU,OAAO,OAAO,WAAW;IACvC,WAAW,OAAO,UAAU,SAAS,GAAG;IACxC,OAAO;GACT,CAAC;GAED,OAAO,SAAS,KAAK,IAAI,WAAW,OAAO,CAAC;EAC9C,CAAC;EACD,MAAM,OAAO,WAAW,WAAW,OAAO;GACxC,MAAM,QAAQ,OAAO,OAAO,WAAW,OAAO,MAAM;GACpD,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GAEnC,OAAO,OAAO,WAAW,MAAM,aAAa,aAC1C,OAAO,IAAI,aAAa;IACtB,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,SAAS,QAAQ;IAE/D,MAAM,SAAS,OAAO,OAAO,WAAW;KACtC,WAAW,OAAO,KAAK,mBAAmB,MAAM,SAAS,GAAG,KAAK,IAAI;KACrE,OAAO;IACT,CAAC;IAED,OAAO,IAAI,WAAW,MAAM;GAC9B,CAAC,CAAC,CAAC,KAAK,OAAO,eAAe,CAChC;EACF,CAAC;EACD,QAAQ,OAAO,WAAW,WAAW,OAAO;GAC1C,MAAM,QAAQ,OAAO,OAAO,aAAa,OAAO,MAAM;GACtD,MAAM,WAAW,OAAO,KAAK,MAAM,SAAS;GAC5C,MAAM,OAAO,OAAO,KAAK,MAAM,IAAI;GACnC,MAAM,YAAY,OAAO,KAAK,MAAM,SAAS;GAC7C,MAAM,MAAM,OAAO,UAAU,MAAM,WAAW,QAAQ,QAAQ;GAE9D,KACG,MAAM,cAAc,uBAAuB,MAAM,cAAc,cAChE,UAAU,WAAW,IAErB,OAAO;GAET,OAAO,OAAO,OAAO,WAAW;IAC9B,WAAW,OAAO,OAAO,mBAAmB,MAAM,SAAS,GAAG,KAAK,WAAW,IAAI;IAClF,OAAO;GACT,CAAC;EACH,CAAC;CACH,CAAC;AACH"}

package/dist/platform-workerd.d.mts

@@ -0,0 +1,14 @@
+import { InvalidInput } from "./Errors.mjs";
+import { Aead } from "./Aead.mjs";
+import { Hmac } from "./Hmac.mjs";
+import { Kdf, Limits } from "./Kdf.mjs";
+import { KdfAdmission } from "./KdfAdmission.mjs";
+import { Signature } from "./Signature.mjs";
+import { Layer } from "effect";
+//#region src/platform-workerd.d.ts
+/** Workers WebCrypto, Wasm Argon2id and native scrypt.
+ * Bundle with Wrangler and enable Node.js compatibility.
+ */
+export declare const layer: (subtle: SubtleCrypto, limits?: Partial<Limits>) => Layer.Layer<Aead | Hmac | Kdf | Signature, InvalidInput, KdfAdmission>;
+//#endregion
+//# sourceMappingURL=platform-workerd.d.mts.map

package/dist/platform-workerd.mjs

@@ -0,0 +1,18 @@
+import { makeLayer } from "./internal/layer.mjs";
+import { layer as layer$1 } from "./internal/scrypt.mjs";
+import { xchacha } from "./internal/xchacha.mjs";
+import { makeArgon2 } from "./internal/argon2-wasm.mjs";
+import { Layer } from "effect";
+import module from "./internal/argon2.wasm";
+//#region src/platform-workerd.ts
+/** Workers WebCrypto, Wasm Argon2id and native scrypt.
+* Bundle with Wrangler and enable Node.js compatibility.
+*/
+const layer = (subtle, limits = {}) => makeLayer(subtle, limits, {
+	argon2: makeArgon2(module),
+	xchacha
+}).pipe(Layer.provide(layer$1));
+//#endregion
+export { layer };
+
+//# sourceMappingURL=platform-workerd.mjs.map

package/dist/platform-workerd.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-workerd.mjs","names":["Scrypt.layer"],"sources":["../src/platform-workerd.ts"],"sourcesContent":["import { Layer } from \"effect\";\n\nimport { makeArgon2 } from \"./internal/argon2-wasm\";\nimport module from \"./internal/argon2.wasm\";\nimport { makeLayer } from \"./internal/layer\";\nimport * as Scrypt from \"./internal/scrypt\";\nimport { xchacha } from \"./internal/xchacha\";\nimport type { Limits } from \"./Kdf\";\n\n/** Workers WebCrypto, Wasm Argon2id and native scrypt.\n * Bundle with Wrangler and enable Node.js compatibility.\n */\nexport const layer = (subtle: SubtleCrypto, limits: Partial<Limits> = {}) =>\n  makeLayer(subtle, limits, { argon2: makeArgon2(module), xchacha }).pipe(\n    Layer.provide(Scrypt.layer),\n  );\n"],"mappings":";;;;;;;;;;AAYA,MAAa,SAAS,QAAsB,SAA0B,CAAC,MACrE,UAAU,QAAQ,QAAQ;CAAE,QAAQ,WAAW,MAAM;CAAG;AAAQ,CAAC,CAAC,CAAC,KACjE,MAAM,QAAQA,OAAY,CAC5B"}

package/package.json

@@ -1 +1 @@
-{"name":"@yielded/crypto","version":"0.1.0-beta.29","devDependencies":{"@effect/vitest":"4.0.0","@types/node":"26.1.2","effect":"4.0.0","typescript":"7.0.2","vite-plus":"0.3.3"},"peerDependencies":{"effect":"^4.0.0"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./Aead":{"types":"./dist/Aead.d.mts","default":"./dist/Aead.mjs"},"./Errors":{"types":"./dist/Errors.d.mts","default":"./dist/Errors.mjs"},"./Hmac":{"types":"./dist/Hmac.d.mts","default":"./dist/Hmac.mjs"},"./Kdf":{"types":"./dist/Kdf.d.mts","default":"./dist/Kdf.mjs"},"./KdfAdmission":{"types":"./dist/KdfAdmission.d.mts","default":"./dist/KdfAdmission.mjs"},"./Signature":{"types":"./dist/Signature.d.mts","default":"./dist/Signature.mjs"},"./WebCrypto":{"types":"./dist/WebCrypto.d.mts","default":"./dist/WebCrypto.mjs"},"./platform-node":{"types":"./dist/platform-node.d.mts","default":"./dist/platform-node.mjs"},"./platform-bun":{"types":"./dist/platform-bun.d.mts","default":"./dist/platform-bun.mjs"},"./Portable":{"types":"./dist/Portable.d.mts","default":"./dist/Portable.mjs"}},"description":"Effect cryptography services with explicit native and portable backends.","homepage":"https://yielded.dev/auth/","bugs":{"url":"https://github.com/yielded-dev/auth/issues"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/yielded-dev/auth.git","directory":"packages/crypto"},"files":["dist","src","THIRD_PARTY_NOTICES.md"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","check":"tsc --noEmit -p tsconfig.json","test":"vp test"}}
+{"name":"@yielded/crypto","version":"0.1.0-beta.31","devDependencies":{"@effect/vitest":"4.0.0","@types/node":"26.1.2","effect":"4.0.0","typescript":"7.0.2","vite":"npm:@voidzero-dev/vite-plus-core@1.1.0","vite-plus":"1.1.0","vitest":"5.0.3"},"peerDependencies":{"effect":"^4.0.0"},"exports":{".":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"./Aead":{"types":"./dist/Aead.d.mts","default":"./dist/Aead.mjs"},"./Errors":{"types":"./dist/Errors.d.mts","default":"./dist/Errors.mjs"},"./Hmac":{"types":"./dist/Hmac.d.mts","default":"./dist/Hmac.mjs"},"./Kdf":{"types":"./dist/Kdf.d.mts","default":"./dist/Kdf.mjs"},"./KdfAdmission":{"types":"./dist/KdfAdmission.d.mts","default":"./dist/KdfAdmission.mjs"},"./Signature":{"types":"./dist/Signature.d.mts","default":"./dist/Signature.mjs"},"./WebCrypto":{"types":"./dist/WebCrypto.d.mts","default":"./dist/WebCrypto.mjs"},"./platform-node":{"types":"./dist/platform-node.d.mts","default":"./dist/platform-node.mjs"},"./platform-bun":{"types":"./dist/platform-bun.d.mts","default":"./dist/platform-bun.mjs"},"./platform-workerd":{"types":"./dist/platform-workerd.d.mts","default":"./dist/platform-workerd.mjs"},"./Portable":{"types":"./dist/Portable.d.mts","default":"./dist/Portable.mjs"}},"description":"Effect cryptography services with explicit native and portable backends.","homepage":"https://yielded.dev/auth/","bugs":{"url":"https://github.com/yielded-dev/auth/issues"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/yielded-dev/auth.git","directory":"packages/crypto"},"files":["dist","src","THIRD_PARTY_NOTICES.md"],"type":"module","sideEffects":[],"publishConfig":{"access":"public"},"scripts":{"build":"vp pack","build:wasm":"clang --target=wasm32 -O3 -msimd128 -ffreestanding -fno-builtin -nostdlib -Wl,--no-entry -Wl,--import-memory -Wl,--export=argon2_block -Wl,--export=__heap_base -Wl,--strip-all src/internal/argon2-block.c -o src/internal/argon2.wasm","check":"tsc --noEmit -p tsconfig.json","test":"vp test"}}

package/src/Kdf.ts

@@ -22,6 +22,17 @@ export const Argon2idInput = Schema.Struct({
 
 export type Argon2idInput = typeof Argon2idInput.Type;
 
+export const ScryptInput = Schema.Struct({
+  password: secret,
+  salt: bytes,
+  cost: Schema.Int.check(Schema.isBetween({ minimum: 2, maximum: 0x80000000 })),
+  blockSize: uint32,
+  parallelism: uint32,
+  length: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 0x7fffffff })),
+});
+
+export type ScryptInput = typeof ScryptInput.Type;
+
 export const Pbkdf2Input = Schema.Struct({
   password: secret,
   salt: bytes,
@@ -42,7 +53,10 @@ export const HkdfInput = Schema.Struct({
 
 export type HkdfInput = typeof HkdfInput.Type;
 
-/** Resource ceilings, not a password-strength policy. Limits apply per permit. */
+/** Resource ceilings, not a password-strength policy. Limits apply per permit.
+ * Scrypt bounds its allocation by maximumMemoryKiB and N*r*p/8 by
+ * maximumMemoryPasses. maximumPasses/maximumParallelism apply to Argon2id.
+ */
 export const Limits = Schema.Struct({
   maximumMemoryKiB: positive,
   maximumPasses: positive,
@@ -67,7 +81,8 @@ export const defaultLimits: Limits = Object.freeze({
 
 /**
  * Byte-preserving derivation; no text normalization, PHC parsing or password policy.
- * Argon2id uses version 19; PBKDF2 and HKDF use SHA-256. A backend captures shared
+ * Argon2id uses version 19; PBKDF2 and HKDF use SHA-256. Scrypt names N/r/p as
+ * cost/blockSize/parallelism. A backend captures shared
  * KdfAdmission when its Layer is built and retains admission until work and cleanup
  * finish, including when a native operation cannot be cancelled.
  */
@@ -77,6 +92,9 @@ export class Kdf extends Context.Service<
     readonly argon2id: (
       input: Argon2idInput,
     ) => Effect.Effect<Redacted.Redacted<Uint8Array>, OperationError | KdfBusy>;
+    readonly scrypt: (
+      input: ScryptInput,
+    ) => Effect.Effect<Redacted.Redacted<Uint8Array>, OperationError | KdfBusy>;
     readonly pbkdf2: (
       input: Pbkdf2Input,
     ) => Effect.Effect<Redacted.Redacted<Uint8Array>, OperationError | KdfBusy>;

package/src/Portable.ts

@@ -1,8 +1,11 @@
+import { Layer } from "effect";
+
 import { argon2 } from "./internal/argon2";
 import { makeLayer } from "./internal/layer";
+import { layerUnsupported } from "./internal/scrypt-backend";
 import { xchacha } from "./internal/xchacha";
 import type { Limits } from "./Kdf";
 
 /** WebCrypto with owned, portable Argon2id and XChaCha20-Poly1305 implementations. */
 export const layer = (subtle: SubtleCrypto, limits: Partial<Limits> = {}) =>
-  makeLayer(subtle, limits, { argon2, xchacha });
+  makeLayer(subtle, limits, { argon2, xchacha }).pipe(Layer.provide(layerUnsupported));

package/src/Signature.ts

@@ -50,6 +50,26 @@ export const PrivateKeyParameters = Schema.Union([
 
 export type PrivateKeyParameters = typeof PrivateKeyParameters.Type;
 
+export const RsaModulusLength = Schema.Literals([2048, 3072, 4096]);
+
+/** RSA defaults to 2048 bits and exponent 65537; curves are fixed by algorithm. */
+export const GenerateKeyPairInput = Schema.Union([
+  Schema.Struct({ algorithm: Schema.Literals(["ECDSA-P256-SHA256", "Ed25519"]) }),
+  Schema.Struct({
+    algorithm: Schema.Literals(["RSASSA-PKCS1-v1_5-SHA256", "RSA-PSS-SHA256"]),
+    modulusLength: Schema.optionalKey(RsaModulusLength),
+  }),
+]);
+
+export type GenerateKeyPairInput = typeof GenerateKeyPairInput.Type;
+
+export const KeyPairParameters = Schema.Struct({
+  publicKey: PublicKeyParameters,
+  privateKey: Schema.Redacted(PrivateKeyParameters, { disallowJsonEncode: true }),
+});
+
+export type KeyPairParameters = typeof KeyPairParameters.Type;
+
 export const PrivateKeyInput = Schema.Struct({
   algorithm: Algorithm,
   privateKey: Schema.Redacted(Schema.Uint8Array, { disallowJsonEncode: true }),
@@ -108,6 +128,10 @@ export class Signature extends Context.Service<
     readonly importPublicKey: (
       input: PublicKeyInput,
     ) => Effect.Effect<PublicKey, OperationError, Scope.Scope>;
+    /** Generate exportable components. The caller owns the returned secret bytes. */
+    readonly generateKeyPair: (
+      input: GenerateKeyPairInput,
+    ) => Effect.Effect<KeyPairParameters, OperationError>;
     readonly encodePublicKey: (
       input: PublicKeyParameters,
     ) => Effect.Effect<Uint8Array, OperationError>;

package/src/WebCrypto.ts

@@ -3,11 +3,12 @@ import { Crypto, Effect, Layer, PlatformError } from "effect";
 import { Hmac } from "./Hmac";
 import { makeHmac } from "./internal/hmac";
 import { makeLayer } from "./internal/layer";
+import { layerUnsupported } from "./internal/scrypt-backend";
 import type { Limits } from "./Kdf";
 
 /** Supply the host capability explicitly; no implicit global backend selection. */
 export const layer = (subtle: SubtleCrypto, limits: Partial<Limits> = {}) =>
-  makeLayer(subtle, limits);
+  makeLayer(subtle, limits).pipe(Layer.provide(layerUnsupported));
 
 /** HMAC alone has no KDF admission requirement. */
 export const layerHmac = (subtle: SubtleCrypto): Layer.Layer<Hmac> =>