core-mb 1.0.3 → 1.0.5

package/LICENSE

@@ -0,0 +1,3 @@
+Copyright (c) 2025 Marco Bytes Tech and ERP Hub Inc.
+
+All rights reserved. This software is proprietary and intended for internal use only within Marco Bytes Tech and ERP Hub Inc.

package/dist/security.helper.js

@@ -39,13 +39,12 @@ exports.phoneDecrypt = phoneDecrypt;
 const crypto = __importStar(require("crypto"));
 const config_1 = require("./config");
 const phone_number_helper_1 = require("./phone.number.helper");
-const config = config_1.CoreMBConfig.getInstance();
 /** Create an HMAC index for lookups without revealing the number.
  * Store this alongside the encrypted data and index it in the DB.
  */
 function hmacIndex(phoneRaw) {
     const normalized = (0, phone_number_helper_1.normalize)(phoneRaw);
-    const h = crypto.createHmac("sha256", config.hmacKey);
+    const h = crypto.createHmac("sha256", config_1.CoreMBConfig.getInstance().hmacKey);
     h.update(normalized, "utf8");
     return h.digest("base64");
 }
@@ -56,7 +55,7 @@ function phoneEncrypt(phoneRaw) {
     const normalized = (0, phone_number_helper_1.normalize)(phoneRaw);
     // 12-byte IV is recommended for GCM
     const iv = crypto.randomBytes(12);
-    const cipher = crypto.createCipheriv("aes-256-gcm", config.aesKey, iv);
+    const cipher = crypto.createCipheriv("aes-256-gcm", config_1.CoreMBConfig.getInstance().aesKey, iv);
     // Optional: bind additional data (AAD), e.g., tenant ID to prevent cross-tenant swaps
     // cipher.setAAD(Buffer.from(tenantId, 'utf8'));
     const ciphertextBuf = Buffer.concat([
@@ -78,7 +77,7 @@ function phoneDecrypt(record) {
     const iv = Buffer.from(record.iv, "base64");
     const authTag = Buffer.from(record.authTag, "base64");
     const ciphertext = Buffer.from(record.ciphertext, "base64");
-    const decipher = crypto.createDecipheriv("aes-256-gcm", config.aesKey, iv);
+    const decipher = crypto.createDecipheriv("aes-256-gcm", config_1.CoreMBConfig.getInstance().aesKey, iv);
     // If you used setAAD on encrypt, you MUST set the same AAD here
     // decipher.setAAD(Buffer.from(tenantId, 'utf8'));
     decipher.setAuthTag(authTag);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "core-mb",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Core utility functions for the MB ecosystem in TypeScript",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -19,7 +19,11 @@
     "typescript"
   ],
   "author": "Marco Bytes",
-  "license": "MIT",
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/marcojourney/core-mb.git"
+  },
   "devDependencies": {
     "@types/jest": "^30.0.0",
     "@types/node": "^20.19.11",

package/src/security.helper.ts

@@ -2,8 +2,6 @@ import * as crypto from "crypto";
 import { CoreMBConfig } from "./config";
 import { normalize } from "./phone.number.helper";
 
-const config = CoreMBConfig.getInstance();
-
 export type PhoneCipherRecord = {
   // Base64 strings suitable for storage in text columns
   ciphertext: string; // Encrypted phone number
@@ -17,7 +15,7 @@ export type PhoneCipherRecord = {
  */
 export function hmacIndex(phoneRaw: string): string {
   const normalized = normalize(phoneRaw);
-  const h = crypto.createHmac("sha256", config.hmacKey);
+  const h = crypto.createHmac("sha256", CoreMBConfig.getInstance().hmacKey);
   h.update(normalized, "utf8");
   return h.digest("base64");
 }
@@ -33,7 +31,7 @@ export function phoneEncrypt(
   // 12-byte IV is recommended for GCM
   const iv = crypto.randomBytes(12);
 
-  const cipher = crypto.createCipheriv("aes-256-gcm", config.aesKey, iv);
+  const cipher = crypto.createCipheriv("aes-256-gcm", CoreMBConfig.getInstance().aesKey, iv);
 
   // Optional: bind additional data (AAD), e.g., tenant ID to prevent cross-tenant swaps
   // cipher.setAAD(Buffer.from(tenantId, 'utf8'));
@@ -63,7 +61,7 @@ export function phoneDecrypt(
   const authTag = Buffer.from(record.authTag, "base64");
   const ciphertext = Buffer.from(record.ciphertext, "base64");
 
-  const decipher = crypto.createDecipheriv("aes-256-gcm", config.aesKey, iv);
+  const decipher = crypto.createDecipheriv("aes-256-gcm", CoreMBConfig.getInstance().aesKey, iv);
 
   // If you used setAAD on encrypt, you MUST set the same AAD here
   // decipher.setAAD(Buffer.from(tenantId, 'utf8'));