cipher-kit 1.0.1 → 2.0.0-beta.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +123 -1
- package/dist/chunk-6HNTSQAP.js +139 -0
- package/dist/chunk-6HNTSQAP.js.map +1 -0
- package/dist/chunk-DZLEO2JD.cjs +511 -0
- package/dist/chunk-DZLEO2JD.cjs.map +1 -0
- package/dist/chunk-I25C3WUZ.js +382 -0
- package/dist/chunk-I25C3WUZ.js.map +1 -0
- package/dist/chunk-SRGSVNQ2.js +486 -0
- package/dist/chunk-SRGSVNQ2.js.map +1 -0
- package/dist/chunk-UR5HPMNF.cjs +411 -0
- package/dist/chunk-UR5HPMNF.cjs.map +1 -0
- package/dist/chunk-ZIVTPFKN.cjs +163 -0
- package/dist/chunk-ZIVTPFKN.cjs.map +1 -0
- package/dist/export-C2vQXrZa.d.cts +263 -0
- package/dist/export-DEWwhS-S.d.ts +264 -0
- package/dist/export-DzNR1ht3.d.ts +263 -0
- package/dist/export-oVEmcDLI.d.cts +264 -0
- package/dist/index.cjs +82 -38
- package/dist/index.d.cts +3 -22
- package/dist/index.d.ts +3 -22
- package/dist/index.js +3 -3
- package/dist/node.cjs +84 -28
- package/dist/node.d.cts +3 -22
- package/dist/node.d.ts +3 -22
- package/dist/node.js +2 -2
- package/dist/validate-TRx4DDtg.d.cts +123 -0
- package/dist/validate-TRx4DDtg.d.ts +123 -0
- package/dist/web-api.cjs +84 -28
- package/dist/web-api.d.cts +2 -21
- package/dist/web-api.d.ts +2 -21
- package/dist/web-api.js +2 -2
- package/package.json +6 -4
- package/dist/chunk-5MYBXP4A.cjs +0 -228
- package/dist/chunk-5MYBXP4A.cjs.map +0 -1
- package/dist/chunk-DC4WFPHL.js +0 -141
- package/dist/chunk-DC4WFPHL.js.map +0 -1
- package/dist/chunk-NGVIYM6K.js +0 -217
- package/dist/chunk-NGVIYM6K.js.map +0 -1
- package/dist/chunk-SBXDW4MY.cjs +0 -99
- package/dist/chunk-SBXDW4MY.cjs.map +0 -1
- package/dist/chunk-THMEBIZB.js +0 -79
- package/dist/chunk-THMEBIZB.js.map +0 -1
- package/dist/chunk-XTA6TKBQ.cjs +0 -156
- package/dist/chunk-XTA6TKBQ.cjs.map +0 -1
- package/dist/utils-Bryp07ny.d.cts +0 -48
- package/dist/utils-Bryp07ny.d.ts +0 -48
|
@@ -0,0 +1,511 @@
|
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
var chunkZIVTPFKN_cjs = require('./chunk-ZIVTPFKN.cjs');
|
|
4
|
+
|
|
5
|
+
// src/web/kit.ts
|
|
6
|
+
var kit_exports = {};
|
|
7
|
+
chunkZIVTPFKN_cjs.__export(kit_exports, {
|
|
8
|
+
convertBytesToStr: () => convertBytesToStr,
|
|
9
|
+
convertFormat: () => convertFormat,
|
|
10
|
+
convertStrToBytes: () => convertStrToBytes,
|
|
11
|
+
createSecretKey: () => createSecretKey,
|
|
12
|
+
decrypt: () => decrypt,
|
|
13
|
+
decryptObj: () => decryptObj,
|
|
14
|
+
encrypt: () => encrypt,
|
|
15
|
+
encryptObj: () => encryptObj,
|
|
16
|
+
generateUuid: () => generateUuid,
|
|
17
|
+
hash: () => hash,
|
|
18
|
+
hashPassword: () => hashPassword,
|
|
19
|
+
tryConvertBytesToStr: () => tryConvertBytesToStr,
|
|
20
|
+
tryConvertFormat: () => tryConvertFormat,
|
|
21
|
+
tryConvertStrToBytes: () => tryConvertStrToBytes,
|
|
22
|
+
tryCreateSecretKey: () => tryCreateSecretKey,
|
|
23
|
+
tryDecrypt: () => tryDecrypt,
|
|
24
|
+
tryDecryptObj: () => tryDecryptObj,
|
|
25
|
+
tryEncrypt: () => tryEncrypt,
|
|
26
|
+
tryEncryptObj: () => tryEncryptObj,
|
|
27
|
+
tryGenerateUuid: () => tryGenerateUuid,
|
|
28
|
+
tryHash: () => tryHash,
|
|
29
|
+
tryHashPassword: () => tryHashPassword,
|
|
30
|
+
verifyPassword: () => verifyPassword
|
|
31
|
+
});
|
|
32
|
+
|
|
33
|
+
// src/web/web-encode.ts
|
|
34
|
+
var textEncoder = new TextEncoder();
|
|
35
|
+
var textDecoder = new TextDecoder();
|
|
36
|
+
function $convertStrToBytes(data, format = "utf8") {
|
|
37
|
+
if (!chunkZIVTPFKN_cjs.$isStr(data)) {
|
|
38
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
39
|
+
msg: "Crypto Web API - String to Bytes: Empty data",
|
|
40
|
+
desc: "Data must be a non-empty string"
|
|
41
|
+
});
|
|
42
|
+
}
|
|
43
|
+
if (!chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(format)) {
|
|
44
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
45
|
+
msg: `Crypto Web API - String to Bytes: Unsupported encode format: ${format}`,
|
|
46
|
+
desc: "Use base64, base64url, hex, utf8, or latin1"
|
|
47
|
+
});
|
|
48
|
+
}
|
|
49
|
+
try {
|
|
50
|
+
const bytes = strToBytes[format](data);
|
|
51
|
+
return chunkZIVTPFKN_cjs.$ok({ result: bytes });
|
|
52
|
+
} catch (error) {
|
|
53
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - String to Bytes: Failed to convert data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
54
|
+
}
|
|
55
|
+
}
|
|
56
|
+
function $convertBytesToStr(data, format = "utf8") {
|
|
57
|
+
if (!(data instanceof ArrayBuffer || data instanceof Uint8Array)) {
|
|
58
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
59
|
+
msg: "Crypto Web API - Bytes to String: Invalid data type",
|
|
60
|
+
desc: "Data must be an ArrayBuffer or Uint8Array"
|
|
61
|
+
});
|
|
62
|
+
}
|
|
63
|
+
if (!chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(format)) {
|
|
64
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
65
|
+
msg: `Crypto Web API - Bytes to String: Unsupported format: ${format}`,
|
|
66
|
+
desc: "Use base64, base64url, hex, utf8, or latin1"
|
|
67
|
+
});
|
|
68
|
+
}
|
|
69
|
+
try {
|
|
70
|
+
const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);
|
|
71
|
+
const str = bytesToStr[format](bytes);
|
|
72
|
+
return chunkZIVTPFKN_cjs.$ok(str);
|
|
73
|
+
} catch (error) {
|
|
74
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Bytes to String: Failed to convert data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
75
|
+
}
|
|
76
|
+
}
|
|
77
|
+
function $convertFormat(data, from, to) {
|
|
78
|
+
if (!chunkZIVTPFKN_cjs.$isStr(data)) {
|
|
79
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
80
|
+
msg: "Crypto Web API - Convert Format: Empty data",
|
|
81
|
+
desc: "Data must be a non-empty string"
|
|
82
|
+
});
|
|
83
|
+
}
|
|
84
|
+
if (!chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(from) || !chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(to)) {
|
|
85
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
86
|
+
msg: `Crypto Web API - Convert Format: Unsupported format: from ${from} to ${to}`,
|
|
87
|
+
desc: "Use base64, base64url, hex, utf8, or latin1"
|
|
88
|
+
});
|
|
89
|
+
}
|
|
90
|
+
const bytes = $convertStrToBytes(data, from);
|
|
91
|
+
if (bytes.error) return chunkZIVTPFKN_cjs.$err({ msg: bytes.error.message, desc: bytes.error.description });
|
|
92
|
+
const str = $convertBytesToStr(bytes.result, to);
|
|
93
|
+
if (str.error) return chunkZIVTPFKN_cjs.$err({ msg: str.error.message, desc: str.error.description });
|
|
94
|
+
return chunkZIVTPFKN_cjs.$ok({ result: str.result });
|
|
95
|
+
}
|
|
96
|
+
var strToBytes = {
|
|
97
|
+
base64: $fromBase64,
|
|
98
|
+
base64url: $fromBase64Url,
|
|
99
|
+
hex: $fromHex,
|
|
100
|
+
latin1: $fromLatin1,
|
|
101
|
+
utf8: (data) => textEncoder.encode(data)
|
|
102
|
+
};
|
|
103
|
+
var bytesToStr = {
|
|
104
|
+
base64: $toBase64,
|
|
105
|
+
base64url: $toBase64Url,
|
|
106
|
+
hex: $toHex,
|
|
107
|
+
latin1: $toLatin1,
|
|
108
|
+
utf8: (data) => textDecoder.decode(data)
|
|
109
|
+
};
|
|
110
|
+
function $toLatin1(bytes) {
|
|
111
|
+
let out = "";
|
|
112
|
+
const chunk = 1 << 15;
|
|
113
|
+
for (let i = 0; i < bytes.length; i += chunk) {
|
|
114
|
+
out += String.fromCharCode(...bytes.subarray(i, i + chunk));
|
|
115
|
+
}
|
|
116
|
+
return out;
|
|
117
|
+
}
|
|
118
|
+
function $fromLatin1(data) {
|
|
119
|
+
const out = new Uint8Array(data.length);
|
|
120
|
+
for (let i = 0; i < data.length; i++) {
|
|
121
|
+
const charCode = data.charCodeAt(i);
|
|
122
|
+
if (charCode > 255) throw new Error("Invalid latin1 string");
|
|
123
|
+
out[i] = charCode;
|
|
124
|
+
}
|
|
125
|
+
return out;
|
|
126
|
+
}
|
|
127
|
+
function $toBase64(bytes) {
|
|
128
|
+
return btoa($toLatin1(bytes));
|
|
129
|
+
}
|
|
130
|
+
function $fromBase64(data) {
|
|
131
|
+
return $fromLatin1(atob(data));
|
|
132
|
+
}
|
|
133
|
+
function $toBase64Url(bytes) {
|
|
134
|
+
return $toBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
|
|
135
|
+
}
|
|
136
|
+
function $fromBase64Url(data) {
|
|
137
|
+
let base64 = data.replace(/-/g, "+").replace(/_/g, "/");
|
|
138
|
+
const padLen = (4 - base64.length % 4) % 4;
|
|
139
|
+
base64 += "=".repeat(padLen);
|
|
140
|
+
return $fromBase64(base64);
|
|
141
|
+
}
|
|
142
|
+
function $toHex(bytes) {
|
|
143
|
+
return Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
|
|
144
|
+
}
|
|
145
|
+
function $fromHex(data) {
|
|
146
|
+
const clean = data.startsWith("0x") ? data.slice(2) : data;
|
|
147
|
+
if (clean.length % 2 !== 0) throw new Error("Invalid hex string");
|
|
148
|
+
const out = new Uint8Array(clean.length / 2);
|
|
149
|
+
for (let i = 0; i < out.length; i++) {
|
|
150
|
+
const byte = Number.parseInt(clean.slice(i * 2, i * 2 + 2), 16);
|
|
151
|
+
if (Number.isNaN(byte)) throw new Error("Invalid hex string");
|
|
152
|
+
out[i] = byte;
|
|
153
|
+
}
|
|
154
|
+
return out;
|
|
155
|
+
}
|
|
156
|
+
|
|
157
|
+
// src/web/web-encrypt.ts
|
|
158
|
+
function $generateUuid() {
|
|
159
|
+
try {
|
|
160
|
+
return chunkZIVTPFKN_cjs.$ok(crypto.randomUUID());
|
|
161
|
+
} catch (error) {
|
|
162
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - UUID Generation: Failed to generate UUID", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
163
|
+
}
|
|
164
|
+
}
|
|
165
|
+
async function $createSecretKey(secret, options = {}) {
|
|
166
|
+
if (!chunkZIVTPFKN_cjs.$isStr(secret)) {
|
|
167
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Key Generation: Empty Secret", desc: "Secret must be a non-empty string" });
|
|
168
|
+
}
|
|
169
|
+
const algorithm = options.algorithm ?? "aes256gcm";
|
|
170
|
+
if (!(algorithm in chunkZIVTPFKN_cjs.ENCRYPTION_ALGORITHMS)) {
|
|
171
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
172
|
+
msg: `Crypto NodeJS API - Key Generation: Unsupported algorithm: ${algorithm}`,
|
|
173
|
+
desc: `Supported algorithms are: ${Object.keys(chunkZIVTPFKN_cjs.ENCRYPTION_ALGORITHMS).join(", ")}`
|
|
174
|
+
});
|
|
175
|
+
}
|
|
176
|
+
const digest = options.digest ?? "sha256";
|
|
177
|
+
if (!(digest in chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS)) {
|
|
178
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
179
|
+
msg: `Crypto NodeJS API - Key Generation: Unsupported digest: ${digest}`,
|
|
180
|
+
desc: `Supported digests are: ${Object.keys(chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS).join(", ")}`
|
|
181
|
+
});
|
|
182
|
+
}
|
|
183
|
+
const salt = options.salt ?? "cipher-kit-salt";
|
|
184
|
+
if (!chunkZIVTPFKN_cjs.$isStr(salt, 8)) {
|
|
185
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
186
|
+
msg: "Crypto NodeJS API - Key Generation: Weak salt",
|
|
187
|
+
desc: "Salt must be a non-empty string with at least 8 characters"
|
|
188
|
+
});
|
|
189
|
+
}
|
|
190
|
+
const info = options.info ?? "cipher-kit";
|
|
191
|
+
if (!chunkZIVTPFKN_cjs.$isStr(info)) {
|
|
192
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
193
|
+
msg: "Crypto NodeJS API - Key Generation: Invalid info",
|
|
194
|
+
desc: "Info must be a non-empty string"
|
|
195
|
+
});
|
|
196
|
+
}
|
|
197
|
+
const encryptAlgo = chunkZIVTPFKN_cjs.ENCRYPTION_ALGORITHMS[algorithm];
|
|
198
|
+
const digestAlgo = chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS[digest];
|
|
199
|
+
try {
|
|
200
|
+
const ikm = await crypto.subtle.importKey("raw", textEncoder.encode(secret.normalize("NFKC")), "HKDF", false, [
|
|
201
|
+
"deriveKey"
|
|
202
|
+
]);
|
|
203
|
+
const key = await crypto.subtle.deriveKey(
|
|
204
|
+
{
|
|
205
|
+
name: "HKDF",
|
|
206
|
+
hash: digestAlgo.web,
|
|
207
|
+
salt: textEncoder.encode(salt.normalize("NFKC")),
|
|
208
|
+
info: textEncoder.encode(info.normalize("NFKC"))
|
|
209
|
+
},
|
|
210
|
+
ikm,
|
|
211
|
+
{ name: encryptAlgo.web, length: encryptAlgo.keyBytes * 8 },
|
|
212
|
+
true,
|
|
213
|
+
["encrypt", "decrypt"]
|
|
214
|
+
);
|
|
215
|
+
const secretKey = Object.freeze({
|
|
216
|
+
platform: "web",
|
|
217
|
+
digest,
|
|
218
|
+
algo: encryptAlgo,
|
|
219
|
+
key
|
|
220
|
+
});
|
|
221
|
+
return chunkZIVTPFKN_cjs.$ok({ result: secretKey });
|
|
222
|
+
} catch (error) {
|
|
223
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
224
|
+
msg: "Crypto Web API - Key Generation: Failed to create secret key",
|
|
225
|
+
desc: chunkZIVTPFKN_cjs.$fmtError(error)
|
|
226
|
+
});
|
|
227
|
+
}
|
|
228
|
+
}
|
|
229
|
+
async function $encrypt(data, secretKey) {
|
|
230
|
+
if (!chunkZIVTPFKN_cjs.$isStr(data)) {
|
|
231
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
232
|
+
msg: "Crypto Web API - Encryption: Empty data for encryption",
|
|
233
|
+
desc: "Data must be a non-empty string"
|
|
234
|
+
});
|
|
235
|
+
}
|
|
236
|
+
if (!chunkZIVTPFKN_cjs.isSecretKey(secretKey, "web")) {
|
|
237
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
238
|
+
msg: "Crypto Web API - Encryption: Invalid Secret Key",
|
|
239
|
+
desc: "Expected a Web SecretKey"
|
|
240
|
+
});
|
|
241
|
+
}
|
|
242
|
+
const bytes = $convertStrToBytes(data, "utf8");
|
|
243
|
+
if (bytes.error) return chunkZIVTPFKN_cjs.$err(bytes.error);
|
|
244
|
+
try {
|
|
245
|
+
const iv = crypto.getRandomValues(new Uint8Array(secretKey.algo.ivLength));
|
|
246
|
+
const cipherWithTag = await crypto.subtle.encrypt(
|
|
247
|
+
{ name: secretKey.algo.web, iv },
|
|
248
|
+
secretKey.key,
|
|
249
|
+
bytes.result
|
|
250
|
+
);
|
|
251
|
+
const ivStr = $convertBytesToStr(iv, "base64url");
|
|
252
|
+
const cipherStr = $convertBytesToStr(cipherWithTag, "base64url");
|
|
253
|
+
if (ivStr.error || cipherStr.error) {
|
|
254
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
255
|
+
msg: "Crypto Web API - Encryption: Failed to convert IV or encrypted data",
|
|
256
|
+
desc: `Conversion error: ${ivStr.error || cipherStr.error}`
|
|
257
|
+
});
|
|
258
|
+
}
|
|
259
|
+
return chunkZIVTPFKN_cjs.$ok(`${ivStr.result}.${cipherStr.result}.`);
|
|
260
|
+
} catch (error) {
|
|
261
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Encryption: Failed to encrypt data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
262
|
+
}
|
|
263
|
+
}
|
|
264
|
+
async function $decrypt(encrypted, secretKey) {
|
|
265
|
+
if (chunkZIVTPFKN_cjs.matchPattern(encrypted, "web") === false) {
|
|
266
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
267
|
+
msg: "Crypto Web API - Decryption: Invalid encrypted data format",
|
|
268
|
+
desc: 'Encrypted data must be in the format "iv.cipherWithTag."'
|
|
269
|
+
});
|
|
270
|
+
}
|
|
271
|
+
const [iv, encryptedWithTag] = encrypted.split(".", 3);
|
|
272
|
+
if (!chunkZIVTPFKN_cjs.$isStr(iv) || !chunkZIVTPFKN_cjs.$isStr(encryptedWithTag)) {
|
|
273
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
274
|
+
msg: "Crypto Web API - Decryption: Invalid encrypted data",
|
|
275
|
+
desc: "Encrypted data must contain valid IV, encrypted and tag components"
|
|
276
|
+
});
|
|
277
|
+
}
|
|
278
|
+
if (!chunkZIVTPFKN_cjs.isSecretKey(secretKey, "web")) {
|
|
279
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
280
|
+
msg: "Crypto Web API - Decryption: Invalid Secret Key",
|
|
281
|
+
desc: "Expected a Web SecretKey"
|
|
282
|
+
});
|
|
283
|
+
}
|
|
284
|
+
const ivBytes = $convertStrToBytes(iv, "base64url");
|
|
285
|
+
const cipherWithTagBytes = $convertStrToBytes(encryptedWithTag, "base64url");
|
|
286
|
+
if (ivBytes.error || cipherWithTagBytes.error) {
|
|
287
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
288
|
+
msg: "Crypto Web API - Decryption: Failed to convert IV or encrypted data",
|
|
289
|
+
desc: `Conversion error: ${ivBytes.error || cipherWithTagBytes.error}`
|
|
290
|
+
});
|
|
291
|
+
}
|
|
292
|
+
try {
|
|
293
|
+
const decrypted = await crypto.subtle.decrypt(
|
|
294
|
+
{ name: secretKey.algo.web, iv: ivBytes.result },
|
|
295
|
+
secretKey.key,
|
|
296
|
+
cipherWithTagBytes.result
|
|
297
|
+
);
|
|
298
|
+
return $convertBytesToStr(decrypted, "utf8");
|
|
299
|
+
} catch (error) {
|
|
300
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Decryption: Failed to decrypt data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
301
|
+
}
|
|
302
|
+
}
|
|
303
|
+
async function $encryptObj(data, secretKey) {
|
|
304
|
+
const { result, error } = chunkZIVTPFKN_cjs.$stringifyObj(data);
|
|
305
|
+
if (error) return chunkZIVTPFKN_cjs.$err(error);
|
|
306
|
+
return await $encrypt(result, secretKey);
|
|
307
|
+
}
|
|
308
|
+
async function $decryptObj(encrypted, secretKey) {
|
|
309
|
+
const { result, error } = await $decrypt(encrypted, secretKey);
|
|
310
|
+
if (error) return chunkZIVTPFKN_cjs.$err(error);
|
|
311
|
+
return chunkZIVTPFKN_cjs.$parseToObj(result);
|
|
312
|
+
}
|
|
313
|
+
async function $hash(data) {
|
|
314
|
+
if (!chunkZIVTPFKN_cjs.$isStr(data, 0)) {
|
|
315
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Hashing: Empty data for hashing", desc: "Data must be a non-empty string" });
|
|
316
|
+
}
|
|
317
|
+
const bytes = $convertStrToBytes(data, "utf8");
|
|
318
|
+
if (bytes.error) return chunkZIVTPFKN_cjs.$err(bytes.error);
|
|
319
|
+
try {
|
|
320
|
+
const hashed = await crypto.subtle.digest(chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS.sha256.web, bytes.result);
|
|
321
|
+
return $convertBytesToStr(hashed, "base64url");
|
|
322
|
+
} catch (error) {
|
|
323
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Hashing: Failed to hash data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
324
|
+
}
|
|
325
|
+
}
|
|
326
|
+
async function $hashPassword(password) {
|
|
327
|
+
if (!chunkZIVTPFKN_cjs.$isStr(password)) {
|
|
328
|
+
return chunkZIVTPFKN_cjs.$err({
|
|
329
|
+
msg: "Crypto Web API - Password Hashing: Empty password",
|
|
330
|
+
desc: "Password must be a non-empty string"
|
|
331
|
+
});
|
|
332
|
+
}
|
|
333
|
+
try {
|
|
334
|
+
const salt = crypto.getRandomValues(new Uint8Array(16));
|
|
335
|
+
const baseKey = await crypto.subtle.importKey(
|
|
336
|
+
"raw",
|
|
337
|
+
textEncoder.encode(password.normalize("NFKC")),
|
|
338
|
+
"PBKDF2",
|
|
339
|
+
false,
|
|
340
|
+
["deriveBits"]
|
|
341
|
+
);
|
|
342
|
+
const bits = await crypto.subtle.deriveBits(
|
|
343
|
+
{ name: "PBKDF2", salt, iterations: chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.iterations, hash: chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS.sha512.web },
|
|
344
|
+
baseKey,
|
|
345
|
+
chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.keyLength * 8
|
|
346
|
+
);
|
|
347
|
+
const saltStr = $convertBytesToStr(salt, "base64url");
|
|
348
|
+
if (saltStr.error) return chunkZIVTPFKN_cjs.$err(saltStr.error);
|
|
349
|
+
const hashedPasswordStr = $convertBytesToStr(bits, "base64url");
|
|
350
|
+
if (hashedPasswordStr.error) return chunkZIVTPFKN_cjs.$err(hashedPasswordStr.error);
|
|
351
|
+
return chunkZIVTPFKN_cjs.$ok({ hash: hashedPasswordStr.result, salt: saltStr.result });
|
|
352
|
+
} catch (error) {
|
|
353
|
+
return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Password Hashing: Failed to hash password", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
|
|
354
|
+
}
|
|
355
|
+
}
|
|
356
|
+
async function $verifyPassword(password, hashedPassword, salt) {
|
|
357
|
+
if (!chunkZIVTPFKN_cjs.$isStr(password) || !chunkZIVTPFKN_cjs.$isStr(hashedPassword) || !chunkZIVTPFKN_cjs.$isStr(salt)) return false;
|
|
358
|
+
const saltBytes = $convertStrToBytes(salt, "base64url");
|
|
359
|
+
if (saltBytes.error) return false;
|
|
360
|
+
const { result: hashedPasswordBytes, error: hashedPasswordError } = $convertStrToBytes(hashedPassword, "base64url");
|
|
361
|
+
if (hashedPasswordError) return false;
|
|
362
|
+
try {
|
|
363
|
+
const baseKey = await crypto.subtle.importKey(
|
|
364
|
+
"raw",
|
|
365
|
+
textEncoder.encode(password.normalize("NFKC")),
|
|
366
|
+
"PBKDF2",
|
|
367
|
+
false,
|
|
368
|
+
["deriveBits"]
|
|
369
|
+
);
|
|
370
|
+
const bits = new Uint8Array(
|
|
371
|
+
await crypto.subtle.deriveBits(
|
|
372
|
+
{
|
|
373
|
+
name: "PBKDF2",
|
|
374
|
+
salt: saltBytes.result,
|
|
375
|
+
iterations: chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.iterations,
|
|
376
|
+
hash: chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS.sha512.web
|
|
377
|
+
},
|
|
378
|
+
baseKey,
|
|
379
|
+
chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.keyLength * 8
|
|
380
|
+
)
|
|
381
|
+
);
|
|
382
|
+
if (bits.length !== hashedPasswordBytes.length) return false;
|
|
383
|
+
let isMatch = true;
|
|
384
|
+
for (let i = 0; i < bits.length; i++) {
|
|
385
|
+
if (bits[i] !== hashedPasswordBytes[i]) isMatch = false;
|
|
386
|
+
}
|
|
387
|
+
return isMatch;
|
|
388
|
+
} catch {
|
|
389
|
+
return false;
|
|
390
|
+
}
|
|
391
|
+
}
|
|
392
|
+
|
|
393
|
+
// src/web/kit.ts
|
|
394
|
+
function tryGenerateUuid() {
|
|
395
|
+
return $generateUuid();
|
|
396
|
+
}
|
|
397
|
+
function generateUuid() {
|
|
398
|
+
const { result, error } = $generateUuid();
|
|
399
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
400
|
+
return result;
|
|
401
|
+
}
|
|
402
|
+
async function tryCreateSecretKey(secret, options = {}) {
|
|
403
|
+
return await $createSecretKey(secret, options);
|
|
404
|
+
}
|
|
405
|
+
async function createSecretKey(secret, options = {}) {
|
|
406
|
+
const { result, error } = await $createSecretKey(secret, options);
|
|
407
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
408
|
+
return result;
|
|
409
|
+
}
|
|
410
|
+
async function tryEncrypt(data, secretKey) {
|
|
411
|
+
return await $encrypt(data, secretKey);
|
|
412
|
+
}
|
|
413
|
+
async function encrypt(data, secretKey) {
|
|
414
|
+
const { result, error } = await $encrypt(data, secretKey);
|
|
415
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
416
|
+
return result;
|
|
417
|
+
}
|
|
418
|
+
async function tryDecrypt(encrypted, secretKey) {
|
|
419
|
+
return await $decrypt(encrypted, secretKey);
|
|
420
|
+
}
|
|
421
|
+
async function decrypt(encrypted, secretKey) {
|
|
422
|
+
const { result, error } = await $decrypt(encrypted, secretKey);
|
|
423
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
424
|
+
return result;
|
|
425
|
+
}
|
|
426
|
+
async function tryEncryptObj(data, secretKey) {
|
|
427
|
+
return await $encryptObj(data, secretKey);
|
|
428
|
+
}
|
|
429
|
+
async function encryptObj(data, secretKey) {
|
|
430
|
+
const { result, error } = await $encryptObj(data, secretKey);
|
|
431
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
432
|
+
return result;
|
|
433
|
+
}
|
|
434
|
+
async function tryDecryptObj(encrypted, secretKey) {
|
|
435
|
+
return await $decryptObj(encrypted, secretKey);
|
|
436
|
+
}
|
|
437
|
+
async function decryptObj(encrypted, secretKey) {
|
|
438
|
+
const { result, error } = await $decryptObj(encrypted, secretKey);
|
|
439
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
440
|
+
return { result };
|
|
441
|
+
}
|
|
442
|
+
async function tryHash(data) {
|
|
443
|
+
return await $hash(data);
|
|
444
|
+
}
|
|
445
|
+
async function hash(data) {
|
|
446
|
+
const { result, error } = await $hash(data);
|
|
447
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
448
|
+
return result;
|
|
449
|
+
}
|
|
450
|
+
async function tryHashPassword(password) {
|
|
451
|
+
return await $hashPassword(password);
|
|
452
|
+
}
|
|
453
|
+
async function hashPassword(password) {
|
|
454
|
+
const { hash: hash2, salt, error } = await $hashPassword(password);
|
|
455
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
456
|
+
return { hash: hash2, salt };
|
|
457
|
+
}
|
|
458
|
+
async function verifyPassword(password, hashedPassword, salt) {
|
|
459
|
+
return await $verifyPassword(password, hashedPassword, salt);
|
|
460
|
+
}
|
|
461
|
+
function tryConvertStrToBytes(data, format = "utf8") {
|
|
462
|
+
return $convertStrToBytes(data, format);
|
|
463
|
+
}
|
|
464
|
+
function convertStrToBytes(data, format = "utf8") {
|
|
465
|
+
const { result, error } = $convertStrToBytes(data, format);
|
|
466
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
467
|
+
return result;
|
|
468
|
+
}
|
|
469
|
+
function tryConvertBytesToStr(data, format = "utf8") {
|
|
470
|
+
return $convertBytesToStr(data, format);
|
|
471
|
+
}
|
|
472
|
+
function convertBytesToStr(data, format = "utf8") {
|
|
473
|
+
const { result, error } = $convertBytesToStr(data, format);
|
|
474
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
475
|
+
return result;
|
|
476
|
+
}
|
|
477
|
+
function tryConvertFormat(data, from, to) {
|
|
478
|
+
return $convertFormat(data, from, to);
|
|
479
|
+
}
|
|
480
|
+
function convertFormat(data, from, to) {
|
|
481
|
+
const { result, error } = $convertFormat(data, from, to);
|
|
482
|
+
if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
|
|
483
|
+
return result;
|
|
484
|
+
}
|
|
485
|
+
|
|
486
|
+
exports.convertBytesToStr = convertBytesToStr;
|
|
487
|
+
exports.convertFormat = convertFormat;
|
|
488
|
+
exports.convertStrToBytes = convertStrToBytes;
|
|
489
|
+
exports.createSecretKey = createSecretKey;
|
|
490
|
+
exports.decrypt = decrypt;
|
|
491
|
+
exports.decryptObj = decryptObj;
|
|
492
|
+
exports.encrypt = encrypt;
|
|
493
|
+
exports.encryptObj = encryptObj;
|
|
494
|
+
exports.generateUuid = generateUuid;
|
|
495
|
+
exports.hash = hash;
|
|
496
|
+
exports.hashPassword = hashPassword;
|
|
497
|
+
exports.kit_exports = kit_exports;
|
|
498
|
+
exports.tryConvertBytesToStr = tryConvertBytesToStr;
|
|
499
|
+
exports.tryConvertFormat = tryConvertFormat;
|
|
500
|
+
exports.tryConvertStrToBytes = tryConvertStrToBytes;
|
|
501
|
+
exports.tryCreateSecretKey = tryCreateSecretKey;
|
|
502
|
+
exports.tryDecrypt = tryDecrypt;
|
|
503
|
+
exports.tryDecryptObj = tryDecryptObj;
|
|
504
|
+
exports.tryEncrypt = tryEncrypt;
|
|
505
|
+
exports.tryEncryptObj = tryEncryptObj;
|
|
506
|
+
exports.tryGenerateUuid = tryGenerateUuid;
|
|
507
|
+
exports.tryHash = tryHash;
|
|
508
|
+
exports.tryHashPassword = tryHashPassword;
|
|
509
|
+
exports.verifyPassword = verifyPassword;
|
|
510
|
+
//# sourceMappingURL=chunk-DZLEO2JD.cjs.map
|
|
511
|
+
//# sourceMappingURL=chunk-DZLEO2JD.cjs.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"sources":["../src/web/kit.ts","../src/web/web-encode.ts","../src/web/web-encrypt.ts"],"names":["__export","$isStr","$err","ENCODING_FORMATS","$ok","$fmtError","ENCRYPTION_ALGORITHMS","DIGEST_ALGORITHMS","isSecretKey","matchPattern","$stringifyObj","$parseToObj","PASSWORD_HASHING","$fmtResultErr","hash"],"mappings":";;;;;AAAA,IAAA,WAAA,GAAA;AAAAA,0BAAA,CAAA,WAAA,EAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,aAAA,EAAA,MAAA,aAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,eAAA,EAAA,MAAA,eAAA;AAAA,EAAA,OAAA,EAAA,MAAA,OAAA;AAAA,EAAA,UAAA,EAAA,MAAA,UAAA;AAAA,EAAA,OAAA,EAAA,MAAA,OAAA;AAAA,EAAA,UAAA,EAAA,MAAA,UAAA;AAAA,EAAA,YAAA,EAAA,MAAA,YAAA;AAAA,EAAA,IAAA,EAAA,MAAA,IAAA;AAAA,EAAA,YAAA,EAAA,MAAA,YAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,gBAAA,EAAA,MAAA,gBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,kBAAA,EAAA,MAAA,kBAAA;AAAA,EAAA,UAAA,EAAA,MAAA,UAAA;AAAA,EAAA,aAAA,EAAA,MAAA,aAAA;AAAA,EAAA,UAAA,EAAA,MAAA,UAAA;AAAA,EAAA,aAAA,EAAA,MAAA,aAAA;AAAA,EAAA,eAAA,EAAA,MAAA,eAAA;AAAA,EAAA,OAAA,EAAA,MAAA,OAAA;AAAA,EAAA,eAAA,EAAA,MAAA,eAAA;AAAA,EAAA,cAAA,EAAA,MAAA;AAAA,CAAA,CAAA;;;ACKO,IAAM,WAAA,GAAc,IAAI,WAAA,EAAY;AACpC,IAAM,WAAA,GAAc,IAAI,WAAA,EAAY;AAEpC,SAAS,kBAAA,CACd,IAAA,EACA,MAAA,GAAyB,MAAA,EACoB;AAC7C,EAAA,IAAI,CAACC,wBAAA,CAAO,IAAI,CAAA,EAAG;AACjB,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,8CAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAACC,kCAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,IAAA,OAAOD,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,gEAAgE,MAAM,CAAA,CAAA;AAAA,MAC3E,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,MAAM,CAAA,CAAE,IAAI,CAAA;AACrC,IAAA,OAAOE,qBAAA,CAAI,EAAE,MAAA,EAAQ,KAAA,EAAO,CAAA;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,OAAOF,sBAAA,CAAK,EAAE,GAAA,EAAK,0DAAA,EAA4D,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EACzG;AACF;AAEO,SAAS,kBAAA,CAAmB,IAAA,EAAgC,MAAA,GAAyB,MAAA,EAAwB;AAClH,EAAA,IAAI,EAAE,IAAA,YAAgB,WAAA,IAAe,IAAA,YAAgB,UAAA,CAAA,EAAa;AAChE,IAAA,OAAOH,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,qDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAACC,kCAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,EAAG;AACtC,IAAA,OAAOD,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,yDAAyD,MAAM,CAAA,CAAA;AAAA,MACpE,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACA,EAAA,IAAI;AACF,IAAA,MAAM,QAAQ,IAAA,YAAgB,UAAA,GAAa,IAAA,GAAO,IAAI,WAAW,IAAI,CAAA;AACrE,IAAA,MAAM,GAAA,GAAM,UAAA,CAAW,MAAM,CAAA,CAAE,KAAK,CAAA;AACpC,IAAA,OAAOE,sBAAI,GAAG,CAAA;AAAA,EAChB,SAAS,KAAA,EAAO;AACd,IAAA,OAAOF,sBAAA,CAAK,EAAE,GAAA,EAAK,0DAAA,EAA4D,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EACzG;AACF;AAEO,SAAS,cAAA,CAAe,IAAA,EAAc,IAAA,EAAsB,EAAA,EAAgD;AACjH,EAAA,IAAI,CAACJ,wBAAA,CAAO,IAAI,CAAA,EAAG;AACjB,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,6CAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AACA,EAAA,IAAI,CAACC,mCAAiB,QAAA,CAAS,IAAI,KAAK,CAACA,kCAAA,CAAiB,QAAA,CAAS,EAAE,CAAA,EAAG;AACtE,IAAA,OAAOD,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,CAAA,0DAAA,EAA6D,IAAI,CAAA,IAAA,EAAO,EAAE,CAAA,CAAA;AAAA,MAC/E,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AAC3C,EAAA,IAAI,KAAA,CAAM,KAAA,EAAO,OAAOA,sBAAA,CAAK,EAAE,GAAA,EAAK,KAAA,CAAM,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,KAAA,CAAM,KAAA,CAAM,aAAa,CAAA;AAExF,EAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,KAAA,CAAM,MAAA,EAAQ,EAAE,CAAA;AAC/C,EAAA,IAAI,GAAA,CAAI,KAAA,EAAO,OAAOA,sBAAA,CAAK,EAAE,GAAA,EAAK,GAAA,CAAI,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,GAAA,CAAI,KAAA,CAAM,aAAa,CAAA;AAElF,EAAA,OAAOE,qBAAA,CAAI,EAAE,MAAA,EAAQ,GAAA,CAAI,QAAQ,CAAA;AACnC;AAEA,IAAM,UAAA,GAAa;AAAA,EACjB,MAAA,EAAQ,WAAA;AAAA,EACR,SAAA,EAAW,cAAA;AAAA,EACX,GAAA,EAAK,QAAA;AAAA,EACL,MAAA,EAAQ,WAAA;AAAA,EACR,IAAA,EAAM,CAAC,IAAA,KAAiB,WAAA,CAAY,OAAO,IAAI;AACjD,CAAA;AAEA,IAAM,UAAA,GAAa;AAAA,EACjB,MAAA,EAAQ,SAAA;AAAA,EACR,SAAA,EAAW,YAAA;AAAA,EACX,GAAA,EAAK,MAAA;AAAA,EACL,MAAA,EAAQ,SAAA;AAAA,EACR,IAAA,EAAM,CAAC,IAAA,KAAqB,WAAA,CAAY,OAAO,IAAI;AACrD,CAAA;AAEA,SAAS,UAAU,KAAA,EAA2B;AAC5C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,MAAM,QAAQ,CAAA,IAAK,EAAA;AACnB,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,KAAK,KAAA,EAAO;AAC5C,IAAA,GAAA,IAAO,MAAA,CAAO,aAAa,GAAG,KAAA,CAAM,SAAS,CAAA,EAAG,CAAA,GAAI,KAAK,CAAC,CAAA;AAAA,EAC5D;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,YAAY,IAAA,EAAuC;AAC1D,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA;AACtC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA;AAClC,IAAA,IAAI,QAAA,GAAW,GAAA,EAAK,MAAM,IAAI,MAAM,uBAAuB,CAAA;AAC3D,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,QAAA;AAAA,EACX;AACA,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,UAAU,KAAA,EAA2B;AAC5C,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAC9B;AAEA,SAAS,YAAY,IAAA,EAAuC;AAC1D,EAAA,OAAO,WAAA,CAAY,IAAA,CAAK,IAAI,CAAC,CAAA;AAC/B;AAEA,SAAS,aAAa,KAAA,EAA2B;AAC/C,EAAA,OAAO,SAAA,CAAU,KAAK,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AACnF;AAEA,SAAS,eAAe,IAAA,EAAuC;AAC7D,EAAA,IAAI,MAAA,GAAS,KAAK,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAM,GAAG,CAAA;AACtD,EAAA,MAAM,MAAA,GAAA,CAAU,CAAA,GAAK,MAAA,CAAO,MAAA,GAAS,CAAA,IAAM,CAAA;AAC3C,EAAA,MAAA,IAAU,GAAA,CAAI,OAAO,MAAM,CAAA;AAC3B,EAAA,OAAO,YAAY,MAAM,CAAA;AAC3B;AAEA,SAAS,OAAO,KAAA,EAA2B;AACzC,EAAA,OAAO,MAAM,IAAA,CAAK,KAAK,CAAA,CACpB,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAC1C,KAAK,EAAE,CAAA;AACZ;AAEA,SAAS,SAAS,IAAA,EAAuC;AACvD,EAAA,MAAM,KAAA,GAAQ,KAAK,UAAA,CAAW,IAAI,IAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA;AACtD,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,KAAM,GAAG,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAChE,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,KAAA,CAAM,SAAS,CAAC,CAAA;AAC3C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,QAAQ,CAAA,EAAA,EAAK;AACnC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,EAAG,EAAE,CAAA;AAC9D,IAAA,IAAI,OAAO,KAAA,CAAM,IAAI,GAAG,MAAM,IAAI,MAAM,oBAAoB,CAAA;AAC5D,IAAA,GAAA,CAAI,CAAC,CAAA,GAAI,IAAA;AAAA,EACX;AACA,EAAA,OAAO,GAAA;AACT;;;AC7IO,SAAS,aAAA,GAAgC;AAC9C,EAAA,IAAI;AACF,IAAA,OAAOA,qBAAA,CAAI,MAAA,CAAO,UAAA,EAAY,CAAA;AAAA,EAChC,SAAS,KAAA,EAAO;AACd,IAAA,OAAOF,sBAAA,CAAK,EAAE,GAAA,EAAK,2DAAA,EAA6D,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EAC1G;AACF;AAEA,eAAsB,gBAAA,CACpB,MAAA,EACA,OAAA,GAKI,EAAC,EAC0C;AAC/C,EAAA,IAAI,CAACJ,wBAAA,CAAO,MAAM,CAAA,EAAG;AACnB,IAAA,OAAOC,uBAAK,EAAE,GAAA,EAAK,+CAAA,EAAiD,IAAA,EAAM,qCAAqC,CAAA;AAAA,EACjH;AAEA,EAAA,MAAM,SAAA,GAAY,QAAQ,SAAA,IAAa,WAAA;AACvC,EAAA,IAAI,EAAE,aAAaI,uCAAA,CAAA,EAAwB;AACzC,IAAA,OAAOJ,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,8DAA8D,SAAS,CAAA,CAAA;AAAA,MAC5E,IAAA,EAAM,6BAA6B,MAAA,CAAO,IAAA,CAAKI,uCAAqB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACjF,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,QAAA;AACjC,EAAA,IAAI,EAAE,UAAUC,mCAAA,CAAA,EAAoB;AAClC,IAAA,OAAOL,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,2DAA2D,MAAM,CAAA,CAAA;AAAA,MACtE,IAAA,EAAM,0BAA0B,MAAA,CAAO,IAAA,CAAKK,mCAAiB,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC1E,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,iBAAA;AAC7B,EAAA,IAAI,CAACN,wBAAA,CAAO,IAAA,EAAM,CAAC,CAAA,EAAG;AACpB,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,+CAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,YAAA;AAC7B,EAAA,IAAI,CAACD,wBAAA,CAAO,IAAI,CAAA,EAAG;AACjB,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,kDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,WAAA,GAAcI,wCAAsB,SAAS,CAAA;AACnD,EAAA,MAAM,UAAA,GAAaC,oCAAkB,MAAM,CAAA;AAE3C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,UAAU,KAAA,EAAO,WAAA,CAAY,MAAA,CAAO,MAAA,CAAO,SAAA,CAAU,MAAM,CAAC,CAAA,EAAG,QAAQ,KAAA,EAAO;AAAA,MAC5G;AAAA,KACD,CAAA;AACD,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MAC9B;AAAA,QACE,IAAA,EAAM,MAAA;AAAA,QACN,MAAM,UAAA,CAAW,GAAA;AAAA,QACjB,MAAM,WAAA,CAAY,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,QAC/C,MAAM,WAAA,CAAY,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU,MAAM,CAAC;AAAA,OACjD;AAAA,MACA,GAAA;AAAA,MACA,EAAE,IAAA,EAAM,WAAA,CAAY,KAAK,MAAA,EAAQ,WAAA,CAAY,WAAW,CAAA,EAAE;AAAA,MAC1D,IAAA;AAAA,MACA,CAAC,WAAW,SAAS;AAAA,KACvB;AACA,IAAA,MAAM,SAAA,GAAY,OAAO,MAAA,CAAO;AAAA,MAC9B,QAAA,EAAU,KAAA;AAAA,MACV,MAAA;AAAA,MACA,IAAA,EAAM,WAAA;AAAA,MACN;AAAA,KACD,CAAA;AAED,IAAA,OAAOH,qBAAA,CAAI,EAAE,MAAA,EAAQ,SAAA,EAAW,CAAA;AAAA,EAClC,SAAS,KAAA,EAAO;AACd,IAAA,OAAOF,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,8DAAA;AAAA,MACL,IAAA,EAAMG,4BAAU,KAAK;AAAA,KACtB,CAAA;AAAA,EACH;AACF;AAEA,eAAsB,QAAA,CAAS,MAAc,SAAA,EAAsD;AACjG,EAAA,IAAI,CAACJ,wBAAA,CAAO,IAAI,CAAA,EAAG;AACjB,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,wDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,CAACM,6BAAA,CAAmB,SAAA,EAAW,KAAK,CAAA,EAAG;AACzC,IAAA,OAAON,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,iDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,MAAM,CAAA;AAC7C,EAAA,IAAI,KAAA,CAAM,KAAA,EAAO,OAAOA,sBAAA,CAAK,MAAM,KAAK,CAAA;AAExC,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,OAAO,eAAA,CAAgB,IAAI,WAAW,SAAA,CAAU,IAAA,CAAK,QAAQ,CAAC,CAAA;AACzE,IAAA,MAAM,aAAA,GAAgB,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACxC,EAAE,IAAA,EAAM,SAAA,CAAU,IAAA,CAAK,KAAK,EAAA,EAAO;AAAA,MACnC,SAAA,CAAU,GAAA;AAAA,MACV,KAAA,CAAM;AAAA,KACR;AAEA,IAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,EAAA,EAAI,WAAW,CAAA;AAChD,IAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,aAAA,EAAe,WAAW,CAAA;AAE/D,IAAA,IAAI,KAAA,CAAM,KAAA,IAAS,SAAA,CAAU,KAAA,EAAO;AAClC,MAAA,OAAOA,sBAAA,CAAK;AAAA,QACV,GAAA,EAAK,qEAAA;AAAA,QACL,IAAA,EAAM,CAAA,kBAAA,EAAqB,KAAA,CAAM,KAAA,IAAS,UAAU,KAAK,CAAA;AAAA,OAC1D,CAAA;AAAA,IACH;AAEA,IAAA,OAAOE,sBAAI,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAA,EAAI,SAAA,CAAU,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACnD,SAAS,KAAA,EAAO;AACd,IAAA,OAAOF,sBAAA,CAAK,EAAE,GAAA,EAAK,qDAAA,EAAuD,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EACpG;AACF;AAEA,eAAsB,QAAA,CAAS,WAAmB,SAAA,EAAsD;AACtG,EAAA,IAAII,8BAAA,CAAa,SAAA,EAAW,KAAK,CAAA,KAAM,KAAA,EAAO;AAC5C,IAAA,OAAOP,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,4DAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,CAAC,EAAA,EAAI,gBAAgB,IAAI,SAAA,CAAU,KAAA,CAAM,KAAK,CAAC,CAAA;AACrD,EAAA,IAAI,CAACD,wBAAA,CAAO,EAAE,KAAK,CAACA,wBAAA,CAAO,gBAAgB,CAAA,EAAG;AAC5C,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,qDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,IAAI,CAACM,6BAAA,CAAmB,SAAA,EAAW,KAAK,CAAA,EAAG;AACzC,IAAA,OAAON,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,iDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,EAAA,EAAI,WAAW,CAAA;AAClD,EAAA,MAAM,kBAAA,GAAqB,kBAAA,CAAmB,gBAAA,EAAkB,WAAW,CAAA;AAE3E,EAAA,IAAI,OAAA,CAAQ,KAAA,IAAS,kBAAA,CAAmB,KAAA,EAAO;AAC7C,IAAA,OAAOA,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,qEAAA;AAAA,MACL,IAAA,EAAM,CAAA,kBAAA,EAAqB,OAAA,CAAQ,KAAA,IAAS,mBAAmB,KAAK,CAAA;AAAA,KACrE,CAAA;AAAA,EACH;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,MAAM,MAAA,CAAO,MAAA,CAAO,OAAA;AAAA,MACpC,EAAE,IAAA,EAAM,SAAA,CAAU,KAAK,GAAA,EAAK,EAAA,EAAI,QAAQ,MAAA,EAAO;AAAA,MAC/C,SAAA,CAAU,GAAA;AAAA,MACV,kBAAA,CAAmB;AAAA,KACrB;AAEA,IAAA,OAAO,kBAAA,CAAmB,WAAW,MAAM,CAAA;AAAA,EAC7C,SAAS,KAAA,EAAO;AACd,IAAA,OAAOA,sBAAA,CAAK,EAAE,GAAA,EAAK,qDAAA,EAAuD,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EACpG;AACF;AAEA,eAAsB,WAAA,CACpB,MACA,SAAA,EACyB;AACzB,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAIK,gCAAc,IAAI,CAAA;AAC5C,EAAA,IAAI,KAAA,EAAO,OAAOR,sBAAA,CAAK,KAAK,CAAA;AAC5B,EAAA,OAAO,MAAM,QAAA,CAAS,MAAA,EAAQ,SAAS,CAAA;AACzC;AAEA,eAAsB,WAAA,CACpB,WACA,SAAA,EACgC;AAChC,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,MAAM,QAAA,CAAS,WAAW,SAAS,CAAA;AAC7D,EAAA,IAAI,KAAA,EAAO,OAAOA,sBAAA,CAAK,KAAK,CAAA;AAC5B,EAAA,OAAOS,8BAAe,MAAM,CAAA;AAC9B;AAEA,eAAsB,MAAM,IAAA,EAAuC;AACjE,EAAA,IAAI,CAACV,wBAAA,CAAO,IAAA,EAAM,CAAC,CAAA,EAAG;AACpB,IAAA,OAAOC,uBAAK,EAAE,GAAA,EAAK,kDAAA,EAAoD,IAAA,EAAM,mCAAmC,CAAA;AAAA,EAClH;AAEA,EAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,EAAM,MAAM,CAAA;AAC7C,EAAA,IAAI,KAAA,CAAM,KAAA,EAAO,OAAOA,sBAAA,CAAK,MAAM,KAAK,CAAA;AAExC,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,CAAO,OAAOK,mCAAA,CAAkB,MAAA,CAAO,GAAA,EAAK,KAAA,CAAM,MAAM,CAAA;AACpF,IAAA,OAAO,kBAAA,CAAmB,QAAQ,WAAW,CAAA;AAAA,EAC/C,SAAS,KAAA,EAAO;AACd,IAAA,OAAOL,sBAAA,CAAK,EAAE,GAAA,EAAK,+CAAA,EAAiD,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EAC9F;AACF;AAEA,eAAsB,cAAc,QAAA,EAAmE;AACrG,EAAA,IAAI,CAACJ,wBAAA,CAAO,QAAQ,CAAA,EAAG;AACrB,IAAA,OAAOC,sBAAA,CAAK;AAAA,MACV,GAAA,EAAK,mDAAA;AAAA,MACL,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,OAAO,MAAA,CAAO,eAAA,CAAgB,IAAI,UAAA,CAAW,EAAE,CAAC,CAAA;AACtD,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MAClC,KAAA;AAAA,MACA,WAAA,CAAY,MAAA,CAAO,QAAA,CAAS,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,MAC7C,QAAA;AAAA,MACA,KAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,CAAO,UAAA;AAAA,MAC/B,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,UAAA,EAAYU,kCAAA,CAAiB,MAAA,CAAO,UAAA,EAAY,IAAA,EAAML,mCAAA,CAAkB,MAAA,CAAO,GAAA,EAAI;AAAA,MAC3G,OAAA;AAAA,MACAK,kCAAA,CAAiB,OAAO,SAAA,GAAY;AAAA,KACtC;AAEA,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,IAAA,EAAM,WAAW,CAAA;AACpD,IAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,OAAOV,sBAAA,CAAK,QAAQ,KAAK,CAAA;AAE5C,IAAA,MAAM,iBAAA,GAAoB,kBAAA,CAAmB,IAAA,EAAM,WAAW,CAAA;AAC9D,IAAA,IAAI,iBAAA,CAAkB,KAAA,EAAO,OAAOA,sBAAA,CAAK,kBAAkB,KAAK,CAAA;AAEhE,IAAA,OAAOE,qBAAA,CAAI,EAAE,IAAA,EAAM,iBAAA,CAAkB,QAAQ,IAAA,EAAM,OAAA,CAAQ,QAAQ,CAAA;AAAA,EACrE,SAAS,KAAA,EAAO;AACd,IAAA,OAAOF,sBAAA,CAAK,EAAE,GAAA,EAAK,4DAAA,EAA8D,MAAMG,2BAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EAC3G;AACF;AAEA,eAAsB,eAAA,CAAgB,QAAA,EAAkB,cAAA,EAAwB,IAAA,EAAgC;AAC9G,EAAA,IAAI,CAACJ,wBAAA,CAAO,QAAQ,CAAA,IAAK,CAACA,wBAAA,CAAO,cAAc,CAAA,IAAK,CAACA,wBAAA,CAAO,IAAI,CAAA,EAAG,OAAO,KAAA;AAE1E,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,IAAA,EAAM,WAAW,CAAA;AACtD,EAAA,IAAI,SAAA,CAAU,OAAO,OAAO,KAAA;AAE5B,EAAA,MAAM,EAAE,QAAQ,mBAAA,EAAqB,KAAA,EAAO,qBAAoB,GAAI,kBAAA,CAAmB,gBAAgB,WAAW,CAAA;AAClH,EAAA,IAAI,qBAAqB,OAAO,KAAA;AAEhC,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA;AAAA,MAClC,KAAA;AAAA,MACA,WAAA,CAAY,MAAA,CAAO,QAAA,CAAS,SAAA,CAAU,MAAM,CAAC,CAAA;AAAA,MAC7C,QAAA;AAAA,MACA,KAAA;AAAA,MACA,CAAC,YAAY;AAAA,KACf;AAEA,IAAA,MAAM,OAAO,IAAI,UAAA;AAAA,MACf,MAAM,OAAO,MAAA,CAAO,UAAA;AAAA,QAClB;AAAA,UACE,IAAA,EAAM,QAAA;AAAA,UACN,MAAM,SAAA,CAAU,MAAA;AAAA,UAChB,UAAA,EAAYW,mCAAiB,MAAA,CAAO,UAAA;AAAA,UACpC,IAAA,EAAML,oCAAkB,MAAA,CAAO;AAAA,SACjC;AAAA,QACA,OAAA;AAAA,QACAK,kCAAA,CAAiB,OAAO,SAAA,GAAY;AAAA;AACtC,KACF;AAEA,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,mBAAA,CAAoB,MAAA,EAAQ,OAAO,KAAA;AAEvD,IAAA,IAAI,OAAA,GAAU,IAAA;AACd,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,MAAA,IAAI,KAAK,CAAC,CAAA,KAAM,mBAAA,CAAoB,CAAC,GAAG,OAAA,GAAU,KAAA;AAAA,IACpD;AAEA,IAAA,OAAO,OAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;;;AFjRO,SAAS,eAAA,GAAkC;AAChD,EAAA,OAAO,aAAA,EAAc;AACvB;AAQO,SAAS,YAAA,GAAuB;AACrC,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAI,aAAA,EAAc;AACxC,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMC,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AASA,eAAsB,kBAAA,CACpB,MAAA,EACA,OAAA,GAKI,EAAC,EAC0C;AAC/C,EAAA,OAAO,MAAM,gBAAA,CAAiB,MAAA,EAAQ,OAAO,CAAA;AAC/C;AAUA,eAAsB,eAAA,CACpB,MAAA,EACA,OAAA,GAKI,EAAC,EACsB;AAC3B,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,MAAM,gBAAA,CAAiB,QAAQ,OAAO,CAAA;AAChE,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAUA,eAAsB,UAAA,CAAW,MAAc,SAAA,EAAsD;AACnG,EAAA,OAAO,MAAM,QAAA,CAAS,IAAA,EAAM,SAAS,CAAA;AACvC;AAWA,eAAsB,OAAA,CAAQ,MAAc,SAAA,EAA8C;AACxF,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,MAAM,QAAA,CAAS,MAAM,SAAS,CAAA;AACxD,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAUA,eAAsB,UAAA,CAAW,WAAmB,SAAA,EAAsD;AACxG,EAAA,OAAO,MAAM,QAAA,CAAS,SAAA,EAAW,SAAS,CAAA;AAC5C;AAWA,eAAsB,OAAA,CAAQ,WAAmB,SAAA,EAA8C;AAC7F,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,MAAM,QAAA,CAAS,WAAW,SAAS,CAAA;AAC7D,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAWA,eAAsB,aAAA,CACpB,MACA,SAAA,EACyB;AACzB,EAAA,OAAO,MAAM,WAAA,CAAY,IAAA,EAAM,SAAS,CAAA;AAC1C;AAYA,eAAsB,UAAA,CACpB,MACA,SAAA,EACiB;AACjB,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,MAAM,WAAA,CAAY,MAAM,SAAS,CAAA;AAC3D,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAWA,eAAsB,aAAA,CACpB,WACA,SAAA,EACgC;AAChC,EAAA,OAAO,MAAM,WAAA,CAAe,SAAA,EAAW,SAAS,CAAA;AAClD;AAYA,eAAsB,UAAA,CACpB,WACA,SAAA,EACwB;AACxB,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,MAAM,WAAA,CAAe,WAAW,SAAS,CAAA;AACnE,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,EAAE,MAAA,EAAO;AAClB;AAQA,eAAsB,QAAQ,IAAA,EAAuC;AACnE,EAAA,OAAO,MAAM,MAAM,IAAI,CAAA;AACzB;AASA,eAAsB,KAAK,IAAA,EAA+B;AACxD,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAI,MAAM,MAAM,IAAI,CAAA;AAC1C,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAQA,eAAsB,gBAAgB,QAAA,EAAmE;AACvG,EAAA,OAAO,MAAM,cAAc,QAAQ,CAAA;AACrC;AASA,eAAsB,aAAa,QAAA,EAA2D;AAC5F,EAAA,MAAM,EAAE,MAAAC,KAAAA,EAAM,IAAA,EAAM,OAAM,GAAI,MAAM,cAAc,QAAQ,CAAA;AAC1D,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMD,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,EAAE,IAAA,EAAAC,KAAAA,EAAM,IAAA,EAAK;AACtB;AAUA,eAAsB,cAAA,CAAe,QAAA,EAAkB,cAAA,EAAwB,IAAA,EAAgC;AAC7G,EAAA,OAAO,MAAM,eAAA,CAAgB,QAAA,EAAU,cAAA,EAAgB,IAAI,CAAA;AAC7D;AAUO,SAAS,oBAAA,CACd,IAAA,EACA,MAAA,GAAyB,MAAA,EACoB;AAC7C,EAAA,OAAO,kBAAA,CAAmB,MAAM,MAAM,CAAA;AACxC;AAWO,SAAS,iBAAA,CAAkB,IAAA,EAAc,MAAA,GAAyB,MAAA,EAAiC;AACxG,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAI,kBAAA,CAAmB,MAAM,MAAM,CAAA;AACzD,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMD,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAUO,SAAS,oBAAA,CAAqB,IAAA,EAAgC,MAAA,GAAyB,MAAA,EAAwB;AACpH,EAAA,OAAO,kBAAA,CAAmB,MAAM,MAAM,CAAA;AACxC;AAWO,SAAS,iBAAA,CAAkB,IAAA,EAAgC,MAAA,GAAyB,MAAA,EAAgB;AACzG,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAI,kBAAA,CAAmB,MAAM,MAAM,CAAA;AACzD,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAUO,SAAS,gBAAA,CAAiB,IAAA,EAAc,IAAA,EAAsB,EAAA,EAAgD;AACnH,EAAA,OAAO,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,EAAE,CAAA;AACtC;AAWO,SAAS,aAAA,CAAc,IAAA,EAAc,IAAA,EAAsB,EAAA,EAA4B;AAC5F,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,KAAU,cAAA,CAAe,IAAA,EAAM,MAAM,EAAE,CAAA;AACvD,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAMA,+BAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT","file":"chunk-DZLEO2JD.cjs","sourcesContent":["import type { DIGEST_ALGORITHMS, ENCRYPTION_ALGORITHMS } from '~/helpers/consts';\r\nimport { $fmtResultErr, type Result } from '~/helpers/error';\r\nimport type { EncodingFormat, SecretKey } from '~/helpers/types';\r\nimport { $convertBytesToStr, $convertFormat, $convertStrToBytes } from './web-encode';\r\nimport {\r\n $createSecretKey,\r\n $decrypt,\r\n $decryptObj,\r\n $encrypt,\r\n $encryptObj,\r\n $generateUuid,\r\n $hash,\r\n $hashPassword,\r\n $verifyPassword,\r\n} from './web-encrypt';\r\n\r\n/**\r\n * Generates a UUID (v4).\r\n *\r\n * @returns A Result containing a string representing the generated UUID or an error.\r\n */\r\nexport function tryGenerateUuid(): Result<string> {\r\n return $generateUuid();\r\n}\r\n\r\n/**\r\n * Generates a UUID (v4).\r\n *\r\n * @returns A string representing the generated UUID.\r\n * @throws {Error} If UUID generation fails.\r\n */\r\nexport function generateUuid(): string {\r\n const { result, error } = $generateUuid();\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Derives a secret key from the provided string for encryption/decryption.\r\n * Internally, the key is hashed using SHA-256 to ensure it meets the required length.\r\n *\r\n * @param secret - The input string to derive the secret key from.\r\n * @returns A Result containing a SecretKey object representing the derived secret key or an error.\r\n */\r\nexport async function tryCreateSecretKey(\r\n secret: string,\r\n options: {\r\n algorithm?: keyof typeof ENCRYPTION_ALGORITHMS;\r\n digest?: keyof typeof DIGEST_ALGORITHMS;\r\n salt?: string;\r\n info?: string;\r\n } = {},\r\n): Promise<Result<{ result: SecretKey<'web'> }>> {\r\n return await $createSecretKey(secret, options);\r\n}\r\n\r\n/**\r\n * Derives a secret key from the provided string for encryption/decryption.\r\n * Internally, the key is hashed using SHA-256 to ensure it meets the required length.\r\n *\r\n * @param secret - The input string to derive the secret key from.\r\n * @returns A SecretKey object representing the derived secret key.\r\n * @throws {Error} If the input key is invalid or key generation fails.\r\n */\r\nexport async function createSecretKey(\r\n secret: string,\r\n options: {\r\n algorithm?: keyof typeof ENCRYPTION_ALGORITHMS;\r\n digest?: keyof typeof DIGEST_ALGORITHMS;\r\n salt?: string;\r\n info?: string;\r\n } = {},\r\n): Promise<SecretKey<'web'>> {\r\n const { result, error } = await $createSecretKey(secret, options);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Encrypts the input string using the provided secret key.\r\n * The output is a string in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n *\r\n * @param data - The input string to encrypt.\r\n * @param secretKey - The SecretKey object used for encryption.\r\n * @returns A Result containing a string representing the encrypted data in the specified format or an error.\r\n */\r\nexport async function tryEncrypt(data: string, secretKey: SecretKey<'web'>): Promise<Result<string>> {\r\n return await $encrypt(data, secretKey);\r\n}\r\n\r\n/**\r\n * Encrypts the input string using the provided secret key.\r\n * The output is a string in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n *\r\n * @param data - The input string to encrypt.\r\n * @param secretKey - The SecretKey object used for encryption.\r\n * @returns A string representing the encrypted data in the specified format.\r\n * @throws {Error} If the input data or key is invalid, or if encryption fails.\r\n */\r\nexport async function encrypt(data: string, secretKey: SecretKey<'web'>): Promise<string> {\r\n const { result, error } = await $encrypt(data, secretKey);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Decrypts the input string using the provided secret key.\r\n * The input must be in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n *\r\n * @param encrypted - The input string to decrypt.\r\n * @param secretKey - The SecretKey object used for decryption.\r\n * @returns A Result containing a string representing the decrypted data or an error.\r\n */\r\nexport async function tryDecrypt(encrypted: string, secretKey: SecretKey<'web'>): Promise<Result<string>> {\r\n return await $decrypt(encrypted, secretKey);\r\n}\r\n\r\n/**\r\n * Decrypts the input string using the provided secret key.\r\n * The input must be in the format \"iv.cipherWithTag\" where each component is base64url encoded.\r\n *\r\n * @param encrypted - The input string to decrypt.\r\n * @param secretKey - The SecretKey object used for decryption.\r\n * @returns A string representing the decrypted data.\r\n * @throws {Error} If the input data or key is invalid, or if decryption fails.\r\n */\r\nexport async function decrypt(encrypted: string, secretKey: SecretKey<'web'>): Promise<string> {\r\n const { result, error } = await $decrypt(encrypted, secretKey);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Encrypts the input object using the provided secret key.\r\n * The object is first serialized to a JSON string before encryption.\r\n * The output is a string in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n *\r\n * @param data - The input object to encrypt.\r\n * @param secretKey - The SecretKey object used for encryption.\r\n * @returns A Result containing a string representing the encrypted object in the specified format or an error.\r\n */\r\nexport async function tryEncryptObj<T extends object = Record<string, unknown>>(\r\n data: T,\r\n secretKey: SecretKey<'web'>,\r\n): Promise<Result<string>> {\r\n return await $encryptObj(data, secretKey);\r\n}\r\n\r\n/**\r\n * Encrypts the input object using the provided secret key.\r\n * The object is first serialized to a JSON string before encryption.\r\n * The output is a string in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n *\r\n * @param data - The input object to encrypt.\r\n * @param secretKey - The SecretKey object used for encryption.\r\n * @returns A string representing the encrypted object in the specified format.\r\n * @throws {Error} If the input data or key is invalid, or if encryption fails.\r\n */\r\nexport async function encryptObj<T extends object = Record<string, unknown>>(\r\n data: T,\r\n secretKey: SecretKey<'web'>,\r\n): Promise<string> {\r\n const { result, error } = await $encryptObj(data, secretKey);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Decrypts the input string to an object using the provided secret key.\r\n * The input must be in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n * The decrypted string is parsed as JSON to reconstruct the original object.\r\n *\r\n * @param encrypted - The input string to decrypt.\r\n * @param secretKey - The SecretKey object used for decryption.\r\n * @returns A Result containing an object representing the decrypted data or an error.\r\n */\r\nexport async function tryDecryptObj<T extends object = Record<string, unknown>>(\r\n encrypted: string,\r\n secretKey: SecretKey<'web'>,\r\n): Promise<Result<{ result: T }>> {\r\n return await $decryptObj<T>(encrypted, secretKey);\r\n}\r\n\r\n/**\r\n * Decrypts the input string to an object using the provided secret key.\r\n * The input must be in the format \"iv.cipherWithTag.\" where each component is base64url encoded.\r\n * The decrypted string is parsed as JSON to reconstruct the original object.\r\n *\r\n * @param encrypted - The input string to decrypt.\r\n * @param secretKey - The SecretKey object used for decryption.\r\n * @returns An object representing the decrypted data.\r\n * @throws {Error} If the input data or key is invalid, or if decryption fails.\r\n */\r\nexport async function decryptObj<T extends object = Record<string, unknown>>(\r\n encrypted: string,\r\n secretKey: SecretKey<'web'>,\r\n): Promise<{ result: T }> {\r\n const { result, error } = await $decryptObj<T>(encrypted, secretKey);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return { result };\r\n}\r\n\r\n/**\r\n * Hashes the input string using SHA-256 and returns the hash in base64url format.\r\n *\r\n * @param data - The input string to hash.\r\n * @returns A Result containing a string representing the SHA-256 hash in base64url format or an error.\r\n */\r\nexport async function tryHash(data: string): Promise<Result<string>> {\r\n return await $hash(data);\r\n}\r\n\r\n/**\r\n * Hashes the input string using SHA-256 and returns the hash in base64url format.\r\n *\r\n * @param data - The input string to hash.\r\n * @returns A string representing the SHA-256 hash in base64url format.\r\n * @throws {Error} If the input data is invalid or hashing fails.\r\n */\r\nexport async function hash(data: string): Promise<string> {\r\n const { result, error } = await $hash(data);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Hashes a password using PBKDF2 with SHA-512.\r\n *\r\n * @param password - The password to hash.\r\n * @returns A Result containing an object with the hash and salt, or an error.\r\n */\r\nexport async function tryHashPassword(password: string): Promise<Result<{ hash: string; salt: string }>> {\r\n return await $hashPassword(password);\r\n}\r\n\r\n/**\r\n * Hashes a password using PBKDF2 with SHA-512.\r\n *\r\n * @param password - The password to hash.\r\n * @returns An object with the hash and salt.\r\n * @throws {Error} If the input password is invalid or hashing fails.\r\n */\r\nexport async function hashPassword(password: string): Promise<{ hash: string; salt: string }> {\r\n const { hash, salt, error } = await $hashPassword(password);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return { hash, salt };\r\n}\r\n\r\n/**\r\n * Verifies a password against a hashed password and salt.\r\n *\r\n * @param password - The password to verify.\r\n * @param hashedPassword - The hashed password to compare against (in base64url format).\r\n * @param salt - The salt used during hashing (in base64url format).\r\n * @returns A boolean indicating whether the password matches the hashed password.\r\n */\r\nexport async function verifyPassword(password: string, hashedPassword: string, salt: string): Promise<boolean> {\r\n return await $verifyPassword(password, hashedPassword, salt);\r\n}\r\n\r\n/**\r\n * Converts a string to a Buffer (byte array) using the specified encoding format.\r\n * Supported formats: 'base64', 'base64url', 'hex', 'utf8', 'latin1'.\r\n *\r\n * @param data - The input string to convert.\r\n * @param format - The encoding format to use (default is 'utf8').\r\n * @returns A Result containing a Uint8Array with the encoded data or an error.\r\n */\r\nexport function tryConvertStrToBytes(\r\n data: string,\r\n format: EncodingFormat = 'utf8',\r\n): Result<{ result: Uint8Array<ArrayBuffer> }> {\r\n return $convertStrToBytes(data, format);\r\n}\r\n\r\n/**\r\n * Converts a string to a Buffer (byte array) using the specified encoding format.\r\n * Supported formats: 'base64', 'base64url', 'hex', 'utf8', 'latin1'.\r\n *\r\n * @param data - The input string to convert.\r\n * @param format - The encoding format to use (default is 'utf8').\r\n * @returns A Uint8Array containing the encoded data.\r\n * @throws {Error} If the input data is invalid or conversion fails.\r\n */\r\nexport function convertStrToBytes(data: string, format: EncodingFormat = 'utf8'): Uint8Array<ArrayBuffer> {\r\n const { result, error } = $convertStrToBytes(data, format);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Converts a Uint8Array or ArrayBuffer (byte array) to a string using the specified encoding format.\r\n * Supported formats: 'base64', 'base64url', 'hex', 'utf8', 'latin1'.\r\n *\r\n * @param data - The input Uint8Array or ArrayBuffer to convert.\r\n * @param format - The encoding format to use (default is 'utf8').\r\n * @returns A Result containing the string representation of the Uint8Array or an error.\r\n */\r\nexport function tryConvertBytesToStr(data: Uint8Array | ArrayBuffer, format: EncodingFormat = 'utf8'): Result<string> {\r\n return $convertBytesToStr(data, format);\r\n}\r\n\r\n/**\r\n * Converts a Uint8Array or ArrayBuffer (byte array) to a string using the specified encoding format.\r\n * Supported formats: 'base64', 'base64url', 'hex', 'utf8', 'latin1'.\r\n *\r\n * @param data - The input Uint8Array or ArrayBuffer to convert.\r\n * @param format - The encoding format to use (default is 'utf8').\r\n * @returns A string representation of the Uint8Array in the specified format.\r\n * @throws {Error} If the input data is invalid or conversion fails.\r\n */\r\nexport function convertBytesToStr(data: Uint8Array | ArrayBuffer, format: EncodingFormat = 'utf8'): string {\r\n const { result, error } = $convertBytesToStr(data, format);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n\r\n/**\r\n * Convert data from one encoding format to another.\r\n *\r\n * @param data - The input data to convert.\r\n * @param from - The encoding format to convert from.\r\n * @param to - The encoding format to convert to.\r\n * @returns A Result containing the converted string or an error.\r\n */\r\nexport function tryConvertFormat(data: string, from: EncodingFormat, to: EncodingFormat): Result<{ result: string }> {\r\n return $convertFormat(data, from, to);\r\n}\r\n\r\n/**\r\n * Convert data from one encoding format to another.\r\n *\r\n * @param data - The input data to convert.\r\n * @param from - The encoding format to convert from.\r\n * @param to - The encoding format to convert to.\r\n * @returns A converted string.\r\n * @throws {Error} If the input data is invalid or conversion fails.\r\n */\r\nexport function convertFormat(data: string, from: EncodingFormat, to: EncodingFormat): string {\r\n const { result, error } = $convertFormat(data, from, to);\r\n if (error) throw new Error($fmtResultErr(error));\r\n return result;\r\n}\r\n","import { ENCODING_FORMATS } from '~/helpers/consts';\r\nimport { $err, $fmtError, $ok, type Result } from '~/helpers/error';\r\nimport type { EncodingFormat } from '~/helpers/types';\r\nimport { $isStr } from '~/helpers/validate';\r\n\r\nexport const textEncoder = new TextEncoder();\r\nexport const textDecoder = new TextDecoder();\r\n\r\nexport function $convertStrToBytes(\r\n data: string,\r\n format: EncodingFormat = 'utf8',\r\n): Result<{ result: Uint8Array<ArrayBuffer> }> {\r\n if (!$isStr(data)) {\r\n return $err({\r\n msg: 'Crypto Web API - String to Bytes: Empty data',\r\n desc: 'Data must be a non-empty string',\r\n });\r\n }\r\n if (!ENCODING_FORMATS.includes(format)) {\r\n return $err({\r\n msg: `Crypto Web API - String to Bytes: Unsupported encode format: ${format}`,\r\n desc: 'Use base64, base64url, hex, utf8, or latin1',\r\n });\r\n }\r\n\r\n try {\r\n const bytes = strToBytes[format](data);\r\n return $ok({ result: bytes });\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - String to Bytes: Failed to convert data', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport function $convertBytesToStr(data: Uint8Array | ArrayBuffer, format: EncodingFormat = 'utf8'): Result<string> {\r\n if (!(data instanceof ArrayBuffer || data instanceof Uint8Array)) {\r\n return $err({\r\n msg: 'Crypto Web API - Bytes to String: Invalid data type',\r\n desc: 'Data must be an ArrayBuffer or Uint8Array',\r\n });\r\n }\r\n if (!ENCODING_FORMATS.includes(format)) {\r\n return $err({\r\n msg: `Crypto Web API - Bytes to String: Unsupported format: ${format}`,\r\n desc: 'Use base64, base64url, hex, utf8, or latin1',\r\n });\r\n }\r\n try {\r\n const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);\r\n const str = bytesToStr[format](bytes);\r\n return $ok(str);\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - Bytes to String: Failed to convert data', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport function $convertFormat(data: string, from: EncodingFormat, to: EncodingFormat): Result<{ result: string }> {\r\n if (!$isStr(data)) {\r\n return $err({\r\n msg: 'Crypto Web API - Convert Format: Empty data',\r\n desc: 'Data must be a non-empty string',\r\n });\r\n }\r\n if (!ENCODING_FORMATS.includes(from) || !ENCODING_FORMATS.includes(to)) {\r\n return $err({\r\n msg: `Crypto Web API - Convert Format: Unsupported format: from ${from} to ${to}`,\r\n desc: 'Use base64, base64url, hex, utf8, or latin1',\r\n });\r\n }\r\n\r\n const bytes = $convertStrToBytes(data, from);\r\n if (bytes.error) return $err({ msg: bytes.error.message, desc: bytes.error.description });\r\n\r\n const str = $convertBytesToStr(bytes.result, to);\r\n if (str.error) return $err({ msg: str.error.message, desc: str.error.description });\r\n\r\n return $ok({ result: str.result });\r\n}\r\n\r\nconst strToBytes = {\r\n base64: $fromBase64,\r\n base64url: $fromBase64Url,\r\n hex: $fromHex,\r\n latin1: $fromLatin1,\r\n utf8: (data: string) => textEncoder.encode(data),\r\n} as const satisfies Record<EncodingFormat, (data: string) => Uint8Array<ArrayBuffer>>;\r\n\r\nconst bytesToStr = {\r\n base64: $toBase64,\r\n base64url: $toBase64Url,\r\n hex: $toHex,\r\n latin1: $toLatin1,\r\n utf8: (data: Uint8Array) => textDecoder.decode(data),\r\n} as const satisfies Record<EncodingFormat, (data: Uint8Array) => string>;\r\n\r\nfunction $toLatin1(bytes: Uint8Array): string {\r\n let out = '';\r\n const chunk = 1 << 15; // 32KiB per chunk\r\n for (let i = 0; i < bytes.length; i += chunk) {\r\n out += String.fromCharCode(...bytes.subarray(i, i + chunk));\r\n }\r\n return out;\r\n}\r\n\r\nfunction $fromLatin1(data: string): Uint8Array<ArrayBuffer> {\r\n const out = new Uint8Array(data.length);\r\n for (let i = 0; i < data.length; i++) {\r\n const charCode = data.charCodeAt(i);\r\n if (charCode > 255) throw new Error('Invalid latin1 string');\r\n out[i] = charCode;\r\n }\r\n return out;\r\n}\r\n\r\nfunction $toBase64(bytes: Uint8Array): string {\r\n return btoa($toLatin1(bytes));\r\n}\r\n\r\nfunction $fromBase64(data: string): Uint8Array<ArrayBuffer> {\r\n return $fromLatin1(atob(data));\r\n}\r\n\r\nfunction $toBase64Url(bytes: Uint8Array): string {\r\n return $toBase64(bytes).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\r\n}\r\n\r\nfunction $fromBase64Url(data: string): Uint8Array<ArrayBuffer> {\r\n let base64 = data.replace(/-/g, '+').replace(/_/g, '/');\r\n const padLen = (4 - (base64.length % 4)) % 4;\r\n base64 += '='.repeat(padLen);\r\n return $fromBase64(base64);\r\n}\r\n\r\nfunction $toHex(bytes: Uint8Array): string {\r\n return Array.from(bytes)\r\n .map((b) => b.toString(16).padStart(2, '0'))\r\n .join('');\r\n}\r\n\r\nfunction $fromHex(data: string): Uint8Array<ArrayBuffer> {\r\n const clean = data.startsWith('0x') ? data.slice(2) : data;\r\n if (clean.length % 2 !== 0) throw new Error('Invalid hex string');\r\n const out = new Uint8Array(clean.length / 2);\r\n for (let i = 0; i < out.length; i++) {\r\n const byte = Number.parseInt(clean.slice(i * 2, i * 2 + 2), 16);\r\n if (Number.isNaN(byte)) throw new Error('Invalid hex string');\r\n out[i] = byte;\r\n }\r\n return out;\r\n}\r\n","import { DIGEST_ALGORITHMS, ENCRYPTION_ALGORITHMS, PASSWORD_HASHING } from '~/helpers/consts';\r\nimport { $err, $fmtError, $ok, type Result } from '~/helpers/error';\r\nimport { $parseToObj, $stringifyObj } from '~/helpers/object';\r\nimport type { SecretKey } from '~/helpers/types';\r\nimport { $isStr, isSecretKey, matchPattern } from '~/helpers/validate';\r\nimport { $convertBytesToStr, $convertStrToBytes, textEncoder } from './web-encode';\r\n\r\nexport function $generateUuid(): Result<string> {\r\n try {\r\n return $ok(crypto.randomUUID());\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - UUID Generation: Failed to generate UUID', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport async function $createSecretKey(\r\n secret: string,\r\n options: {\r\n algorithm?: keyof typeof ENCRYPTION_ALGORITHMS;\r\n digest?: keyof typeof DIGEST_ALGORITHMS;\r\n salt?: string;\r\n info?: string;\r\n } = {},\r\n): Promise<Result<{ result: SecretKey<'web'> }>> {\r\n if (!$isStr(secret)) {\r\n return $err({ msg: 'Crypto Web API - Key Generation: Empty Secret', desc: 'Secret must be a non-empty string' });\r\n }\r\n\r\n const algorithm = options.algorithm ?? 'aes256gcm';\r\n if (!(algorithm in ENCRYPTION_ALGORITHMS)) {\r\n return $err({\r\n msg: `Crypto NodeJS API - Key Generation: Unsupported algorithm: ${algorithm}`,\r\n desc: `Supported algorithms are: ${Object.keys(ENCRYPTION_ALGORITHMS).join(', ')}`,\r\n });\r\n }\r\n\r\n const digest = options.digest ?? 'sha256';\r\n if (!(digest in DIGEST_ALGORITHMS)) {\r\n return $err({\r\n msg: `Crypto NodeJS API - Key Generation: Unsupported digest: ${digest}`,\r\n desc: `Supported digests are: ${Object.keys(DIGEST_ALGORITHMS).join(', ')}`,\r\n });\r\n }\r\n\r\n const salt = options.salt ?? 'cipher-kit-salt';\r\n if (!$isStr(salt, 8)) {\r\n return $err({\r\n msg: 'Crypto NodeJS API - Key Generation: Weak salt',\r\n desc: 'Salt must be a non-empty string with at least 8 characters',\r\n });\r\n }\r\n\r\n const info = options.info ?? 'cipher-kit';\r\n if (!$isStr(info)) {\r\n return $err({\r\n msg: 'Crypto NodeJS API - Key Generation: Invalid info',\r\n desc: 'Info must be a non-empty string',\r\n });\r\n }\r\n\r\n const encryptAlgo = ENCRYPTION_ALGORITHMS[algorithm];\r\n const digestAlgo = DIGEST_ALGORITHMS[digest];\r\n\r\n try {\r\n const ikm = await crypto.subtle.importKey('raw', textEncoder.encode(secret.normalize('NFKC')), 'HKDF', false, [\r\n 'deriveKey',\r\n ]);\r\n const key = await crypto.subtle.deriveKey(\r\n {\r\n name: 'HKDF',\r\n hash: digestAlgo.web,\r\n salt: textEncoder.encode(salt.normalize('NFKC')),\r\n info: textEncoder.encode(info.normalize('NFKC')),\r\n },\r\n ikm,\r\n { name: encryptAlgo.web, length: encryptAlgo.keyBytes * 8 },\r\n true,\r\n ['encrypt', 'decrypt'],\r\n );\r\n const secretKey = Object.freeze({\r\n platform: 'web',\r\n digest: digest,\r\n algo: encryptAlgo,\r\n key: key,\r\n }) as SecretKey<'web'>;\r\n\r\n return $ok({ result: secretKey });\r\n } catch (error) {\r\n return $err({\r\n msg: 'Crypto Web API - Key Generation: Failed to create secret key',\r\n desc: $fmtError(error),\r\n });\r\n }\r\n}\r\n\r\nexport async function $encrypt(data: string, secretKey: SecretKey<'web'>): Promise<Result<string>> {\r\n if (!$isStr(data)) {\r\n return $err({\r\n msg: 'Crypto Web API - Encryption: Empty data for encryption',\r\n desc: 'Data must be a non-empty string',\r\n });\r\n }\r\n\r\n if (!isSecretKey<'web'>(secretKey, 'web')) {\r\n return $err({\r\n msg: 'Crypto Web API - Encryption: Invalid Secret Key',\r\n desc: 'Expected a Web SecretKey',\r\n });\r\n }\r\n\r\n const bytes = $convertStrToBytes(data, 'utf8');\r\n if (bytes.error) return $err(bytes.error);\r\n\r\n try {\r\n const iv = crypto.getRandomValues(new Uint8Array(secretKey.algo.ivLength));\r\n const cipherWithTag = await crypto.subtle.encrypt(\r\n { name: secretKey.algo.web, iv: iv },\r\n secretKey.key,\r\n bytes.result,\r\n );\r\n\r\n const ivStr = $convertBytesToStr(iv, 'base64url');\r\n const cipherStr = $convertBytesToStr(cipherWithTag, 'base64url');\r\n\r\n if (ivStr.error || cipherStr.error) {\r\n return $err({\r\n msg: 'Crypto Web API - Encryption: Failed to convert IV or encrypted data',\r\n desc: `Conversion error: ${ivStr.error || cipherStr.error}`,\r\n });\r\n }\r\n\r\n return $ok(`${ivStr.result}.${cipherStr.result}.`);\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - Encryption: Failed to encrypt data', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport async function $decrypt(encrypted: string, secretKey: SecretKey<'web'>): Promise<Result<string>> {\r\n if (matchPattern(encrypted, 'web') === false) {\r\n return $err({\r\n msg: 'Crypto Web API - Decryption: Invalid encrypted data format',\r\n desc: 'Encrypted data must be in the format \"iv.cipherWithTag.\"',\r\n });\r\n }\r\n\r\n const [iv, encryptedWithTag] = encrypted.split('.', 3);\r\n if (!$isStr(iv) || !$isStr(encryptedWithTag)) {\r\n return $err({\r\n msg: 'Crypto Web API - Decryption: Invalid encrypted data',\r\n desc: 'Encrypted data must contain valid IV, encrypted and tag components',\r\n });\r\n }\r\n\r\n if (!isSecretKey<'web'>(secretKey, 'web')) {\r\n return $err({\r\n msg: 'Crypto Web API - Decryption: Invalid Secret Key',\r\n desc: 'Expected a Web SecretKey',\r\n });\r\n }\r\n\r\n const ivBytes = $convertStrToBytes(iv, 'base64url');\r\n const cipherWithTagBytes = $convertStrToBytes(encryptedWithTag, 'base64url');\r\n\r\n if (ivBytes.error || cipherWithTagBytes.error) {\r\n return $err({\r\n msg: 'Crypto Web API - Decryption: Failed to convert IV or encrypted data',\r\n desc: `Conversion error: ${ivBytes.error || cipherWithTagBytes.error}`,\r\n });\r\n }\r\n\r\n try {\r\n const decrypted = await crypto.subtle.decrypt(\r\n { name: secretKey.algo.web, iv: ivBytes.result },\r\n secretKey.key,\r\n cipherWithTagBytes.result,\r\n );\r\n\r\n return $convertBytesToStr(decrypted, 'utf8');\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - Decryption: Failed to decrypt data', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport async function $encryptObj<T extends object = Record<string, unknown>>(\r\n data: T,\r\n secretKey: SecretKey<'web'>,\r\n): Promise<Result<string>> {\r\n const { result, error } = $stringifyObj(data);\r\n if (error) return $err(error);\r\n return await $encrypt(result, secretKey);\r\n}\r\n\r\nexport async function $decryptObj<T extends object = Record<string, unknown>>(\r\n encrypted: string,\r\n secretKey: SecretKey<'web'>,\r\n): Promise<Result<{ result: T }>> {\r\n const { result, error } = await $decrypt(encrypted, secretKey);\r\n if (error) return $err(error);\r\n return $parseToObj<T>(result);\r\n}\r\n\r\nexport async function $hash(data: string): Promise<Result<string>> {\r\n if (!$isStr(data, 0)) {\r\n return $err({ msg: 'Crypto Web API - Hashing: Empty data for hashing', desc: 'Data must be a non-empty string' });\r\n }\r\n\r\n const bytes = $convertStrToBytes(data, 'utf8');\r\n if (bytes.error) return $err(bytes.error);\r\n\r\n try {\r\n const hashed = await crypto.subtle.digest(DIGEST_ALGORITHMS.sha256.web, bytes.result);\r\n return $convertBytesToStr(hashed, 'base64url');\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - Hashing: Failed to hash data', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport async function $hashPassword(password: string): Promise<Result<{ hash: string; salt: string }>> {\r\n if (!$isStr(password)) {\r\n return $err({\r\n msg: 'Crypto Web API - Password Hashing: Empty password',\r\n desc: 'Password must be a non-empty string',\r\n });\r\n }\r\n\r\n try {\r\n const salt = crypto.getRandomValues(new Uint8Array(16));\r\n const baseKey = await crypto.subtle.importKey(\r\n 'raw',\r\n textEncoder.encode(password.normalize('NFKC')),\r\n 'PBKDF2',\r\n false,\r\n ['deriveBits'],\r\n );\r\n const bits = await crypto.subtle.deriveBits(\r\n { name: 'PBKDF2', salt, iterations: PASSWORD_HASHING.pbkdf2.iterations, hash: DIGEST_ALGORITHMS.sha512.web },\r\n baseKey,\r\n PASSWORD_HASHING.pbkdf2.keyLength * 8,\r\n );\r\n\r\n const saltStr = $convertBytesToStr(salt, 'base64url');\r\n if (saltStr.error) return $err(saltStr.error);\r\n\r\n const hashedPasswordStr = $convertBytesToStr(bits, 'base64url');\r\n if (hashedPasswordStr.error) return $err(hashedPasswordStr.error);\r\n\r\n return $ok({ hash: hashedPasswordStr.result, salt: saltStr.result });\r\n } catch (error) {\r\n return $err({ msg: 'Crypto Web API - Password Hashing: Failed to hash password', desc: $fmtError(error) });\r\n }\r\n}\r\n\r\nexport async function $verifyPassword(password: string, hashedPassword: string, salt: string): Promise<boolean> {\r\n if (!$isStr(password) || !$isStr(hashedPassword) || !$isStr(salt)) return false;\r\n\r\n const saltBytes = $convertStrToBytes(salt, 'base64url');\r\n if (saltBytes.error) return false;\r\n\r\n const { result: hashedPasswordBytes, error: hashedPasswordError } = $convertStrToBytes(hashedPassword, 'base64url');\r\n if (hashedPasswordError) return false;\r\n\r\n try {\r\n const baseKey = await crypto.subtle.importKey(\r\n 'raw',\r\n textEncoder.encode(password.normalize('NFKC')),\r\n 'PBKDF2',\r\n false,\r\n ['deriveBits'],\r\n );\r\n\r\n const bits = new Uint8Array(\r\n await crypto.subtle.deriveBits(\r\n {\r\n name: 'PBKDF2',\r\n salt: saltBytes.result,\r\n iterations: PASSWORD_HASHING.pbkdf2.iterations,\r\n hash: DIGEST_ALGORITHMS.sha512.web,\r\n },\r\n baseKey,\r\n PASSWORD_HASHING.pbkdf2.keyLength * 8,\r\n ),\r\n );\r\n\r\n if (bits.length !== hashedPasswordBytes.length) return false;\r\n\r\n let isMatch = true;\r\n for (let i = 0; i < bits.length; i++) {\r\n if (bits[i] !== hashedPasswordBytes[i]) isMatch = false;\r\n }\r\n\r\n return isMatch;\r\n } catch {\r\n return false;\r\n }\r\n}\r\n"]}
|