@zudojs/crypto 0.0.1

package/dist/cryptoService/cryptoService.derivation.js

@@ -0,0 +1,12 @@
+import { deriveKey } from "../cryptoKeyDerivation/cryptoKeyDerivation.core.js";
+import { cryptoKeyDerivationError } from "@zudojs/errors";
+import { CryptoAlgorithm } from "../cryptoConstants/cryptoConstants.type.js";
+export async function serviceDeriveKey(password, algorithm, options) {
+    try {
+        return await deriveKey(password, algorithm, options);
+    }
+    catch {
+        throw cryptoKeyDerivationError("Key derivation failed.", algorithm);
+    }
+}
+//# sourceMappingURL=cryptoService.derivation.js.map

package/dist/cryptoService/cryptoService.derivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.derivation.js","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.derivation.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAE/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAI7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA6B,EAC7B,SAA0B,EAC1B,OAAuC;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,wBAAwB,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/cryptoService/cryptoService.encoding.d.ts

@@ -0,0 +1,5 @@
+import type { CryptoEncoding } from "../cryptoEncoding/cryptoEncoding.core.js";
+export type { CryptoEncoding };
+export declare function serviceEncode(value: Uint8Array, encoding?: CryptoEncoding): string;
+export declare function serviceDecode(value: string, encoding?: CryptoEncoding): Uint8Array;
+//# sourceMappingURL=cryptoService.encoding.d.ts.map

package/dist/cryptoService/cryptoService.encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.encoding.d.ts","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.encoding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAM/E,YAAY,EAAE,cAAc,EAAE,CAAC;AAE/B,wBAAgB,aAAa,CAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,GAAE,cAA4B,GACrC,MAAM,CAMR;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,cAA4B,GACrC,UAAU,CAMZ"}

package/dist/cryptoService/cryptoService.encoding.js

@@ -0,0 +1,19 @@
+import { encode, decode } from "../cryptoEncoding/cryptoEncoding.core.js";
+import { createCryptoError } from "@zudojs/errors";
+export function serviceEncode(value, encoding = "base64url") {
+    try {
+        return encode(value, encoding);
+    }
+    catch {
+        throw createCryptoError("Crypto encoding failed.", {});
+    }
+}
+export function serviceDecode(value, encoding = "base64url") {
+    try {
+        return decode(value, encoding);
+    }
+    catch {
+        throw createCryptoError("Crypto decoding failed.", {});
+    }
+}
+//# sourceMappingURL=cryptoService.encoding.js.map

package/dist/cryptoService/cryptoService.encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.encoding.js","sourceRoot":"","sources":["../../src/cryptoService/cryptoService.encoding.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,0CAA0C,CAAC;AAE1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAInD,MAAM,UAAU,aAAa,CAC3B,KAAiB,EACjB,QAAQ,GAAmB,WAAW;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAa,EACb,QAAQ,GAAmB,WAAW;IAEtC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/cryptoService/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @zudojs/crypto/cryptoService
+ *
+ * High-level cryptographic service interface.
+ */
+export * from "./cryptoService.core.js";
+export { serviceEncrypt, serviceDecrypt, } from "./operations/cryptoService.cipher.js";
+export { serviceHash, serviceHashHex, } from "./operations/cryptoService.hash.js";
+export { serviceHashPassword, serviceVerifyPassword, } from "./operations/cryptoService.password.js";
+export { serviceGenerateToken, serviceGenerateOtp, serviceHashToken, serviceVerifyToken, } from "./operations/cryptoService.token.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoService/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoService/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,yBAAyB,CAAC;AAExC,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC"}

package/dist/cryptoService/index.js

@@ -0,0 +1,11 @@
+/**
+ * @zudojs/crypto/cryptoService
+ *
+ * High-level cryptographic service interface.
+ */
+export * from "./cryptoService.core.js";
+export { serviceEncrypt, serviceDecrypt, } from "./operations/cryptoService.cipher.js";
+export { serviceHash, serviceHashHex, } from "./operations/cryptoService.hash.js";
+export { serviceHashPassword, serviceVerifyPassword, } from "./operations/cryptoService.password.js";
+export { serviceGenerateToken, serviceGenerateOtp, serviceHashToken, serviceVerifyToken, } from "./operations/cryptoService.token.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoService/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoService/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,yBAAyB,CAAC;AAExC,OAAO,EACL,cAAc,EACd,cAAc,GACf,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EACL,WAAW,EACX,cAAc,GACf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,qCAAqC,CAAC"}

package/dist/cryptoService/operations/cryptoService.cipher.d.ts

@@ -0,0 +1,5 @@
+import type { CipherOptions, CipherResult } from "../../cryptoCipher/cryptoCipher.core.js";
+export type { CipherOptions, CipherResult };
+export declare function serviceEncrypt(plaintext: Uint8Array, key: Uint8Array, options?: CipherOptions): Promise<CipherResult>;
+export declare function serviceDecrypt(ciphertext: Uint8Array, key: Uint8Array, iv: Uint8Array, authTag: Uint8Array, aad?: Uint8Array): Promise<Uint8Array>;
+//# sourceMappingURL=cryptoService.cipher.d.ts.map

package/dist/cryptoService/operations/cryptoService.cipher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.cipher.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.cipher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACb,MAAM,yCAAyC,CAAC;AAMjD,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AAE5C,wBAAsB,cAAc,CAClC,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,EACf,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,wBAAsB,cAAc,CAClC,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,EACf,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,UAAU,EACnB,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,UAAU,CAAC,CAMrB"}

package/dist/cryptoService/operations/cryptoService.cipher.js

@@ -0,0 +1,19 @@
+import { encrypt, decrypt } from "../../cryptoCipher/cryptoCipher.core.js";
+import { cryptoCipherError, CryptoOperation } from "@zudojs/errors";
+export async function serviceEncrypt(plaintext, key, options) {
+    try {
+        return await encrypt(plaintext, key, options);
+    }
+    catch {
+        throw cryptoCipherError("Encryption failed.", CryptoOperation.ENCRYPT);
+    }
+}
+export async function serviceDecrypt(ciphertext, key, iv, authTag, aad) {
+    try {
+        return await decrypt(ciphertext, key, iv, authTag, aad);
+    }
+    catch {
+        throw cryptoCipherError("Decryption failed.", CryptoOperation.DECRYPT);
+    }
+}
+//# sourceMappingURL=cryptoService.cipher.js.map

package/dist/cryptoService/operations/cryptoService.cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.cipher.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.cipher.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAIpE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAqB,EACrB,GAAe,EACf,OAAuB;IAEvB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAsB,EACtB,GAAe,EACf,EAAc,EACd,OAAmB,EACnB,GAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,oBAAoB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/cryptoService/operations/cryptoService.hash.d.ts

@@ -0,0 +1,3 @@
+export declare function serviceHash(value: string | Uint8Array): Promise<Uint8Array>;
+export declare function serviceHashHex(value: string | Uint8Array): Promise<string>;
+//# sourceMappingURL=cryptoService.hash.d.ts.map

package/dist/cryptoService/operations/cryptoService.hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.hash.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.hash.ts"],"names":[],"mappings":"AAQA,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,GAAG,UAAU,GACzB,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,GAAG,UAAU,GACzB,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/cryptoService/operations/cryptoService.hash.js

@@ -0,0 +1,16 @@
+import { createNodeCryptoProvider } from "../../node/index.js";
+import { encode } from "../../cryptoEncoding/cryptoEncoding.core.js";
+import { cryptoHashError } from "@zudojs/errors";
+const provider = createNodeCryptoProvider();
+export async function serviceHash(value) {
+    try {
+        return await provider.hash("sha256", value);
+    }
+    catch {
+        throw cryptoHashError("Hashing failed.", "sha256");
+    }
+}
+export async function serviceHashHex(value) {
+    return encode(await serviceHash(value), "hex");
+}
+//# sourceMappingURL=cryptoService.hash.js.map

package/dist/cryptoService/operations/cryptoService.hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.hash.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,MAAM,EAAE,MAAM,6CAA6C,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAA0B;IAE1B,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,OAAO,MAAM,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC"}

package/dist/cryptoService/operations/cryptoService.password.d.ts

@@ -0,0 +1,5 @@
+import type { PasswordHashOptions, PasswordHashResult } from "../../cryptoPassword/cryptoPassword.type.js";
+export type { PasswordHashOptions, PasswordHashResult };
+export declare function serviceHashPassword(password: string, options?: PasswordHashOptions): Promise<PasswordHashResult>;
+export declare function serviceVerifyPassword(password: string, encodedHash: string): Promise<boolean>;
+//# sourceMappingURL=cryptoService.password.d.ts.map

package/dist/cryptoService/operations/cryptoService.password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.password.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.password.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,6CAA6C,CAAC;AASrD,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;AAExD,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAM7B;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/dist/cryptoService/operations/cryptoService.password.js

@@ -0,0 +1,19 @@
+import { hashPassword, verifyPassword, } from "../../cryptoPassword/cryptoPassword.core.js";
+import { createCryptoError } from "@zudojs/errors";
+export async function serviceHashPassword(password, options) {
+    try {
+        return await hashPassword(password, options);
+    }
+    catch {
+        throw createCryptoError("Password hashing failed.", {});
+    }
+}
+export async function serviceVerifyPassword(password, encodedHash) {
+    try {
+        return await verifyPassword(password, encodedHash);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=cryptoService.password.js.map

package/dist/cryptoService/operations/cryptoService.password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.password.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.password.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,YAAY,EACZ,cAAc,GACf,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAInD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,OAA6B;IAE7B,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAgB,EAChB,WAAmB;IAEnB,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cryptoService/operations/cryptoService.token.d.ts

@@ -0,0 +1,7 @@
+import type { TokenOptions, TokenEncoding } from "../../cryptoToken/cryptoToken.core.js";
+export type { TokenOptions, TokenEncoding };
+export declare function serviceGenerateToken(options?: TokenOptions): Promise<string>;
+export declare function serviceGenerateOtp(digits?: number): Promise<string>;
+export declare function serviceHashToken(token: string): Promise<string>;
+export declare function serviceVerifyToken(token: string, expectedHash: string): Promise<boolean>;
+//# sourceMappingURL=cryptoService.token.d.ts.map

package/dist/cryptoService/operations/cryptoService.token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.token.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACd,MAAM,uCAAuC,CAAC;AAc/C,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAE5C,wBAAsB,oBAAoB,CACxC,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,wBAAsB,kBAAkB,CAAC,MAAM,SAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAMpE;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMrE;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAMlB"}

package/dist/cryptoService/operations/cryptoService.token.js

@@ -0,0 +1,36 @@
+import { generateToken, generateOtp, } from "../../cryptoToken/cryptoToken.core.js";
+import { hashToken, verifyTokenHash, } from "../../cryptoToken/cryptoToken.hash.js";
+import { createCryptoError, cryptoHashError } from "@zudojs/errors";
+export async function serviceGenerateToken(options) {
+    try {
+        return await generateToken(options);
+    }
+    catch {
+        throw createCryptoError("Token generation failed.", {});
+    }
+}
+export async function serviceGenerateOtp(digits = 6) {
+    try {
+        return await generateOtp(digits);
+    }
+    catch {
+        throw createCryptoError("OTP generation failed.", {});
+    }
+}
+export async function serviceHashToken(token) {
+    try {
+        return await hashToken(token);
+    }
+    catch {
+        throw cryptoHashError("Token hashing failed.", "sha256");
+    }
+}
+export async function serviceVerifyToken(token, expectedHash) {
+    try {
+        return await verifyTokenHash(token, expectedHash);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=cryptoService.token.js.map

package/dist/cryptoService/operations/cryptoService.token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoService.token.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/cryptoService.token.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,aAAa,EACb,WAAW,GACZ,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EACL,SAAS,EACT,eAAe,GAChB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAIpE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAM,GAAG,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,iBAAiB,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,eAAe,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAa,EACb,YAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cryptoService/operations/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @zudojs/crypto/cryptoService/operations
+ *
+ * High-level cryptographic service operation wrappers
+ * that add error handling and logging around core primitives.
+ */
+export * from "./cryptoService.cipher.js";
+export * from "./cryptoService.hash.js";
+export * from "./cryptoService.password.js";
+export * from "./cryptoService.token.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoService/operations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cryptoService/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/dist/cryptoService/operations/index.js

@@ -0,0 +1,11 @@
+/**
+ * @zudojs/crypto/cryptoService/operations
+ *
+ * High-level cryptographic service operation wrappers
+ * that add error handling and logging around core primitives.
+ */
+export * from "./cryptoService.cipher.js";
+export * from "./cryptoService.hash.js";
+export * from "./cryptoService.password.js";
+export * from "./cryptoService.token.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoService/operations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cryptoService/operations/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/dist/cryptoSignature/cryptoSignature.core.d.ts

@@ -0,0 +1,25 @@
+import type { CryptoInput } from "../cryptoProvider/index.js";
+import type { SignatureAlgorithm } from "../cryptoProvider/index.js";
+/**
+ * Supported signature algorithms.
+ */
+export type SignatureOptions = {
+    readonly algorithm?: SignatureAlgorithm;
+};
+/**
+ * Signs arbitrary data using a private key.
+ */
+export declare function sign(data: Uint8Array, privateKey: CryptoInput, options?: SignatureOptions): Promise<Uint8Array>;
+/**
+ * Verifies a signature using a public key.
+ */
+export declare function verify(data: Uint8Array, signature: Uint8Array, publicKey: CryptoInput, options?: SignatureOptions): Promise<boolean>;
+/**
+ * Signs UTF-8 text.
+ */
+export declare function signString(data: string, privateKey: CryptoInput, options?: SignatureOptions): Promise<Uint8Array>;
+/**
+ * Verifies a signature against UTF-8 text.
+ */
+export declare function verifyString(data: string, signature: Uint8Array, publicKey: CryptoInput, options?: SignatureOptions): Promise<boolean>;
+//# sourceMappingURL=cryptoSignature.core.d.ts.map

package/dist/cryptoSignature/cryptoSignature.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoSignature.core.d.ts","sourceRoot":"","sources":["../../src/cryptoSignature/cryptoSignature.core.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;CACzC,CAAC;AAIF;;GAEG;AACH,wBAAsB,IAAI,CACxB,IAAI,EAAE,UAAU,EAChB,UAAU,EAAE,WAAW,EACvB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAMrB;AAED;;GAEG;AACH,wBAAsB,MAAM,CAC1B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,WAAW,EACtB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,WAAW,EACvB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAErB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,WAAW,EACtB,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/dist/cryptoSignature/cryptoSignature.core.js

@@ -0,0 +1,36 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+const provider = createNodeCryptoProvider();
+/**
+ * Signs arbitrary data using a private key.
+ */
+export async function sign(data, privateKey, options = {}) {
+    return provider.sign({
+        key: privateKey,
+        data,
+        algorithm: options.algorithm ?? "ed25519",
+    });
+}
+/**
+ * Verifies a signature using a public key.
+ */
+export async function verify(data, signature, publicKey, options = {}) {
+    return provider.verify({
+        key: publicKey,
+        data,
+        signature,
+        algorithm: options.algorithm ?? "ed25519",
+    });
+}
+/**
+ * Signs UTF-8 text.
+ */
+export async function signString(data, privateKey, options = {}) {
+    return sign(Buffer.from(data, "utf8"), privateKey, options);
+}
+/**
+ * Verifies a signature against UTF-8 text.
+ */
+export async function verifyString(data, signature, publicKey, options = {}) {
+    return verify(Buffer.from(data, "utf8"), signature, publicKey, options);
+}
+//# sourceMappingURL=cryptoSignature.core.js.map

package/dist/cryptoSignature/cryptoSignature.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoSignature.core.js","sourceRoot":"","sources":["../../src/cryptoSignature/cryptoSignature.core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAa5D,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAgB,EAChB,UAAuB,EACvB,OAAO,GAAqB,EAAE;IAE9B,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,GAAG,EAAE,UAAU;QACf,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;KAC1C,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAgB,EAChB,SAAqB,EACrB,SAAsB,EACtB,OAAO,GAAqB,EAAE;IAE9B,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,GAAG,EAAE,SAAS;QACd,IAAI;QACJ,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;KAC1C,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,UAAuB,EACvB,OAAO,GAAqB,EAAE;IAE9B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,SAAqB,EACrB,SAAsB,EACtB,OAAO,GAAqB,EAAE;IAE9B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC"}

package/dist/cryptoSignature/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @zudojs/crypto/cryptoSignature
+ *
+ * Digital signature creation and verification.
+ */
+export * from "./cryptoSignature.core.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cryptoSignature/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cryptoSignature/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,2BAA2B,CAAC"}

package/dist/cryptoSignature/index.js

@@ -0,0 +1,7 @@
+/**
+ * @zudojs/crypto/cryptoSignature
+ *
+ * Digital signature creation and verification.
+ */
+export * from "./cryptoSignature.core.js";
+//# sourceMappingURL=index.js.map

package/dist/cryptoSignature/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptoSignature/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,2BAA2B,CAAC"}

package/dist/cryptoToken/cryptoToken.core.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Supported token encodings.
+ */
+export type TokenEncoding = "hex" | "base64" | "base64url";
+/**
+ * Options for generating a secure token.
+ */
+export interface TokenOptions {
+    readonly bytes?: number;
+    readonly encoding?: TokenEncoding;
+    readonly prefix?: string;
+}
+/**
+ * Creates a cryptographically secure opaque token.
+ */
+export declare function generateToken(options?: TokenOptions): Promise<string>;
+/**
+ * Generates a secure API key.
+ */
+export declare function generateApiKey(prefix?: string, bytes?: number): Promise<string>;
+/**
+ * Generates a secure session token.
+ */
+export declare function generateSessionToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure refresh token.
+ */
+export declare function generateRefreshToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure verification token.
+ */
+export declare function generateVerificationToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure password-reset token.
+ */
+export declare function generatePasswordResetToken(bytes?: number): Promise<string>;
+/**
+ * Generates a secure CSRF token.
+ */
+export declare function generateCsrfToken(bytes?: number): Promise<string>;
+/**
+ * Generates a numeric one-time password.
+ *
+ * Leading zeroes are preserved.
+ */
+export declare function generateOtp(digits?: number): Promise<string>;
+/**
+ * Generates a short-lived email verification code.
+ */
+export declare function generateEmailVerificationCode(digits?: number): Promise<string>;
+/**
+ * Generates a short-lived login verification code.
+ */
+export declare function generateLoginCode(digits?: number): Promise<string>;
+//# sourceMappingURL=cryptoToken.core.d.ts.map

package/dist/cryptoToken/cryptoToken.core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoToken.core.d.ts","sourceRoot":"","sources":["../../src/cryptoToken/cryptoToken.core.ts"],"names":[],"mappings":"AAsBA;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,MAAM,CAAC,CAcjB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,SAAS,EACf,KAAK,SAAK,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtE;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtE;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3E;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5E;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,SAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAS7D;AAED;;GAEG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,SAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,SAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAEnE"}

package/dist/cryptoToken/cryptoToken.core.js

@@ -0,0 +1,90 @@
+import { createNodeCryptoProvider } from "../node/index.js";
+import { randomInteger } from "../cryptoRandom/cryptoRandom.core.js";
+let defaultProvider;
+/**
+ * Returns a lazily created default crypto provider.
+ *
+ * The provider abstraction keeps token generation free of direct
+ * `node:crypto` usage while still allowing callers to inject their own.
+ */
+function getDefaultProvider() {
+    if (defaultProvider === undefined) {
+        defaultProvider = createNodeCryptoProvider();
+    }
+    return defaultProvider;
+}
+/**
+ * Creates a cryptographically secure opaque token.
+ */
+export async function generateToken(options = {}) {
+    const bytes = options.bytes ?? 32;
+    const encoding = options.encoding ?? "base64url";
+    if (!Number.isInteger(bytes) || bytes < 16) {
+        throw new RangeError("Token byte length must be an integer of at least 16.");
+    }
+    const raw = await getDefaultProvider().randomBytes(bytes);
+    const token = Buffer.from(raw).toString(encoding);
+    return options.prefix ? `${options.prefix}${token}` : token;
+}
+/**
+ * Generates a secure API key.
+ */
+export async function generateApiKey(prefix = "lat_", bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix });
+}
+/**
+ * Generates a secure session token.
+ */
+export async function generateSessionToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "sess_" });
+}
+/**
+ * Generates a secure refresh token.
+ */
+export async function generateRefreshToken(bytes = 48) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "ref_" });
+}
+/**
+ * Generates a secure verification token.
+ */
+export async function generateVerificationToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "verify_" });
+}
+/**
+ * Generates a secure password-reset token.
+ */
+export async function generatePasswordResetToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "reset_" });
+}
+/**
+ * Generates a secure CSRF token.
+ */
+export async function generateCsrfToken(bytes = 32) {
+    return generateToken({ bytes, encoding: "base64url", prefix: "csrf_" });
+}
+/**
+ * Generates a numeric one-time password.
+ *
+ * Leading zeroes are preserved.
+ */
+export async function generateOtp(digits = 6) {
+    if (!Number.isInteger(digits) || digits < 4 || digits > 12) {
+        throw new RangeError("OTP digits must be an integer between 4 and 12.");
+    }
+    const max = 10 ** digits;
+    const value = await randomInteger(0, max);
+    return String(value).padStart(digits, "0");
+}
+/**
+ * Generates a short-lived email verification code.
+ */
+export async function generateEmailVerificationCode(digits = 6) {
+    return generateOtp(digits);
+}
+/**
+ * Generates a short-lived login verification code.
+ */
+export async function generateLoginCode(digits = 6) {
+    return generateOtp(digits);
+}
+//# sourceMappingURL=cryptoToken.core.js.map

package/dist/cryptoToken/cryptoToken.core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoToken.core.js","sourceRoot":"","sources":["../../src/cryptoToken/cryptoToken.core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAIrE,IAAI,eAA2C,CAAC;AAEhD;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,eAAe,GAAG,wBAAwB,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAgBD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAO,GAAiB,EAAE;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IAEjD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAClB,sDAAsD,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAElD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAM,GAAG,MAAM,EACf,KAAK,GAAG,EAAE;IAEV,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAK,GAAG,EAAE;IACnD,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAK,GAAG,EAAE;IACnD,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAAK,GAAG,EAAE;IACxD,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAAK,GAAG,EAAE;IACzD,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAK,GAAG,EAAE;IAChD,OAAO,aAAa,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAM,GAAG,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAAC,iDAAiD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAM,GAAG,CAAC;IAEV,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAM,GAAG,CAAC;IAChD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC"}

package/dist/cryptoToken/cryptoToken.hash.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Creates a deterministic SHA-256 identifier from a token.
+ *
+ * The returned value does not expose the original token.
+ */
+export declare function hashToken(token: string): Promise<string>;
+/**
+ * Creates a Base64URL SHA-256 digest of a token.
+ */
+export declare function hashTokenBase64Url(token: string): Promise<string>;
+/**
+ * Compares a token with a stored hash.
+ *
+ * Comparison is performed with a constant-time XOR accumulation to
+ * avoid timing side-channels.
+ */
+export declare function verifyTokenHash(token: string, expectedHash: string): Promise<boolean>;
+/**
+ * Hashes a token using SHA-256 before storage.
+ *
+ * This is useful when a raw bearer token must never be persisted.
+ */
+export declare function hashTokenForStorage(token: string): Promise<string>;
+//# sourceMappingURL=cryptoToken.hash.d.ts.map

package/dist/cryptoToken/cryptoToken.hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoToken.hash.d.ts","sourceRoot":"","sources":["../../src/cryptoToken/cryptoToken.hash.ts"],"names":[],"mappings":"AAsBA;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9D;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMvE;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAExE"}