offdex 3.0.0 → 4.0.0

package/README.md

@@ -1,25 +1,26 @@
 # Offdex
 
-IndexedDB-backed object storage for browsers and workers. Store
-structured-clone JS values (objects, arrays, and primitives limited to
-msgpack-compatible types) by key, read them back directly, and share data across
-tabs and workers without schema migrations.
+IndexedDB-backed envelope storage for browsers and workers. Store AES-GCM
+envelopes (12-byte IV + ciphertext ArrayBuffer) by base64url identifier and
+read them back directly. The store is shared per origin across tabs and workers.
 
 ## Why use Offdex
 
-- Simple `put/get/head/delete/list` API in browser contexts.
-- Object storage for msgpack-safe structured-clone JS values: primitives,
-  arrays, plain objects, Date, and typed arrays.
-- Single object store keyed by string; no migrations to manage.
-- Data shared per origin across tabs and workers (instance per JavaScript realm).
+- Minimal `put/get/has/delete` API for encrypted payload envelopes.
+- Fixed-width base64url identifiers (43 chars, 32 random bytes).
+- Single object store keyed by identifier; no migrations to manage.
+- Data shared per origin across tabs and workers (instance per realm).
 - Offline persistence via IndexedDB.
 - TypeScript-first.
-- Singleton-only API: one shared `storage` instance per JavaScript realm (per thread).
 
 ## Install
 
 ```bash
 npm install offdex
+# or
+pnpm add offdex
+# or
+yarn add offdex
 ```
 
 ## Quick start
@@ -27,16 +28,33 @@ npm install offdex
 ```js
 import storage from "offdex";
 
-await storage.put("profile:ada", { greeting: "hello from IndexedDB" });
-
-const object = await storage.get("profile:ada");
-if (object) {
-  console.log(object);
+const makeId = () => {
+  const bytes = crypto.getRandomValues(new Uint8Array(32));
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += 1) {
+    binary += String.fromCharCode(bytes[i]);
+  }
+  return btoa(binary)
+    .replace(/\+/g, "-")
+    .replace(/\//g, "_")
+    .replace(/=+$/, "");
+};
+
+const envelope = {
+  iv: crypto.getRandomValues(new Uint8Array(12)),
+  ciphertext: new Uint8Array([1, 2, 3]).buffer,
+};
+
+const key = makeId();
+
+await storage.put(key, envelope);
+
+const stored = await storage.get(key);
+if (stored) {
+  console.log(stored.iv, stored.ciphertext);
 }
 
-await storage.put("bytes", new Uint8Array([1, 2, 3]));
-const bytes = await storage.get("bytes");
-console.log(bytes instanceof Uint8Array, bytes);
+await storage.delete(key);
 ```
 
 ## API
@@ -44,36 +62,29 @@ console.log(bytes instanceof Uint8Array, bytes);
 ### `storage` (default export)
 
 Singleton storage instance per JavaScript realm backed by the `offdex` database
-and `blobs` object store. The underlying store is shared per origin across tabs
-and workers.
+and `envelopes` object store. The underlying store is shared per origin across
+tabs and workers.
 
 ### Methods
 
-- `put(key, value, options?)` -> `Promise<void>`
-- `get(key, options?)` -> `Promise<unknown | null>`
-- `head(key)` -> `Promise<boolean>`
+- `put(key, envelope)` -> `Promise<void>`
+- `get(key)` -> `Promise<OffdexEnvelope | null>`
+- `has(key)` -> `Promise<boolean>`
 - `delete(key)` -> `Promise<void>`
-- `list(options?)` -> `Promise<{ objects: { key: string }[] }>`
+- `destroy()` -> `Promise<void>`
 
-### Value requirements (msgpack-compatible)
+### Identifier requirements
 
-- `value` must be a structured-clone JS value encodable by `@msgpack/msgpack`
-  with default options.
-- Allowed: `null`/`undefined`, booleans, numbers, strings, arrays, plain
-  objects, `Date`, and `ArrayBufferView` (typed arrays/DataView).
-- Not allowed: `BigInt`, `Map`, `Set`, `RegExp`, `Error`, `Blob`/`File`,
-  `ArrayBuffer`, functions, symbols, or circular references.
-- `put` throws a `TypeError` if a value is not msgpack-compatible.
-- MessagePack note: `undefined` decodes as `null`, and binary decodes as
-  `Uint8Array`.
+- `key` must be a base64url string, exactly 43 chars (32 random bytes, no
+  padding).
+- `put/get/has/delete` throw a `TypeError` if the identifier is invalid.
 
-## Compatibility notes
+### Envelope requirements
 
-- Method names mirror Cloudflare R2 (`put/get/head/delete/list`), but return
-  values are simplified for direct value access.
-- Offdex does not use MessagePack internally; it just validates compatibility.
-- `options` arguments are accepted for signature compatibility but not used.
-- `list` currently returns all keys; prefix/limit/cursor options are ignored.
+- `envelope` must be an object with:
+  - `iv`: `Uint8Array` exactly 12 bytes (AES-GCM nonce).
+  - `ciphertext`: non-empty `ArrayBuffer`.
+- `put` throws a `TypeError` if the envelope is invalid.
 
 ## Build
 
@@ -88,7 +99,16 @@ npx playwright install
 npm test
 ```
 
-Playwright runs Chromium, Firefox, WebKit, plus mobile emulation projects.
+Unit, integration, and end-to-end runs are available as well:
+
+```bash
+npm run test:unit
+npm run test:integration
+npm run test:e2e
+```
+
+Playwright runs Chromium, Firefox, WebKit, plus mobile emulation projects for
+integration and end-to-end coverage.
 
 ## Benchmarks
 
@@ -97,24 +117,23 @@ npx playwright install
 npm run bench
 ```
 
-The benchmark runs in Chromium via Playwright and times a batch of msgpack-safe
-`put/head/get/list/delete` operations.
+The benchmark runs in Chromium via Playwright and times a batch of envelope
+`put/has/get/delete` operations.
 
 ```text
-[bench] put 200 items: 148.6ms
-[bench] head 200 items: 101.6ms
-[bench] get 200 items: 100.3ms
-[bench] list 200 items: 2.7ms
-[bench] delete 200 items: 123.8ms
+[bench] put 200 envelopes: 148.6ms
+[bench] has 200 envelopes: 101.6ms
+[bench] get 200 envelopes: 100.3ms
+[bench] delete 200 envelopes: 123.8ms
 ```
 
 ## Manual browser check
 
 - Run `npm run build`, open `in-browser-testing.html`, then use `storage` from
-  the console with msgpack-compatible structured-clone values.
+  the console with envelope values.
 
 ## Notes
 
 - Requires `indexedDB` (modern browsers / worker runtimes).
 - Data is scoped per origin; all tabs/workers on the same origin share the same
-  store.
+  store.

package/dist/OffdexEnvelopeStorage/class.d.ts

@@ -0,0 +1,12 @@
+import type { OffdexEnvelope, OffdexIdentifier } from "./types.js";
+export type { OffdexEnvelope, OffdexIdentifier };
+export declare class OffdexEnvelopeStorage {
+    #private;
+    static open(): Promise<OffdexEnvelopeStorage>;
+    static destroy(): Promise<void>;
+    static put(key: OffdexIdentifier, value: OffdexEnvelope): Promise<void>;
+    static has(key: OffdexIdentifier): Promise<boolean>;
+    static get(key: OffdexIdentifier): Promise<OffdexEnvelope | null>;
+    static delete(key: OffdexIdentifier): Promise<void>;
+}
+//# sourceMappingURL=class.d.ts.map

package/dist/OffdexEnvelopeStorage/class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"class.d.ts","sourceRoot":"","sources":["../../src/OffdexEnvelopeStorage/class.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AAOjD,qBAAa,qBAAqB;;WAKnB,IAAI,IAAI,OAAO,CAAC,qBAAqB,CAAC;WAmBtC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;WAsBxB,GAAG,CACd,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,IAAI,CAAC;WAeH,GAAG,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;WAiB5C,GAAG,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;WAgB1D,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAa1D"}

package/dist/OffdexEnvelopeStorage/class.js

@@ -0,0 +1,88 @@
+import { assertEnvelope, assertIdentifier } from "./validation.js";
+export class OffdexEnvelopeStorage {
+    static #dbName = "offdex";
+    static #storeName = "envelopes";
+    static #db = null;
+    static async open() {
+        if (this.#db)
+            return OffdexEnvelopeStorage;
+        this.#db = await new Promise((resolve, reject) => {
+            const request = indexedDB.open(this.#dbName, 1);
+            request.onupgradeneeded = () => {
+                const db = request.result;
+                if (!db.objectStoreNames.contains(this.#storeName)) {
+                    db.createObjectStore(this.#storeName, { keyPath: "key" });
+                }
+            };
+            request.onsuccess = () => resolve(request.result);
+            request.onerror = () => reject(request.error);
+        });
+        return OffdexEnvelopeStorage;
+    }
+    static async destroy() {
+        if (this.#db) {
+            this.#db.close();
+            this.#db = null;
+        }
+        await new Promise((resolve, reject) => {
+            const req = indexedDB.deleteDatabase(this.#dbName);
+            req.onsuccess = () => resolve();
+            req.onerror = () => reject(req.error);
+            req.onblocked = () => reject(new Error("{offdex} database deletion blocked"));
+        });
+    }
+    static #requireDb() {
+        if (!this.#db) {
+            throw new Error("{offdex} storage not opened; call open() first");
+        }
+        return this.#db;
+    }
+    static async put(key, value) {
+        assertIdentifier(key);
+        assertEnvelope(value);
+        const db = this.#requireDb();
+        await new Promise((resolve, reject) => {
+            const tx = db.transaction(this.#storeName, "readwrite");
+            tx.objectStore(this.#storeName).put({ key, value });
+            tx.oncomplete = () => resolve();
+            tx.onerror = () => reject(tx.error);
+            tx.onabort = () => reject(tx.error);
+        });
+    }
+    static async has(key) {
+        assertIdentifier(key);
+        const db = this.#requireDb();
+        return new Promise((resolve, reject) => {
+            const tx = db.transaction(this.#storeName, "readonly");
+            const store = tx.objectStore(this.#storeName);
+            const req = typeof store.getKey === "function" ? store.getKey(key) : store.get(key);
+            tx.oncomplete = () => resolve(req.result !== undefined);
+            tx.onerror = () => reject(tx.error);
+            tx.onabort = () => reject(tx.error);
+        });
+    }
+    static async get(key) {
+        assertIdentifier(key);
+        const db = this.#requireDb();
+        const row = await new Promise((resolve, reject) => {
+            const tx = db.transaction(this.#storeName, "readonly");
+            const req = tx.objectStore(this.#storeName).get(key);
+            tx.oncomplete = () => resolve(req.result);
+            tx.onerror = () => reject(tx.error);
+            tx.onabort = () => reject(tx.error);
+        });
+        return row ? row.value : null;
+    }
+    static async delete(key) {
+        assertIdentifier(key);
+        const db = this.#requireDb();
+        await new Promise((resolve, reject) => {
+            const tx = db.transaction(this.#storeName, "readwrite");
+            tx.objectStore(this.#storeName).delete(key);
+            tx.oncomplete = () => resolve();
+            tx.onerror = () => reject(tx.error);
+            tx.onabort = () => reject(tx.error);
+        });
+    }
+}
+//# sourceMappingURL=class.js.map

package/dist/OffdexEnvelopeStorage/class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"class.js","sourceRoot":"","sources":["../../src/OffdexEnvelopeStorage/class.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AASnE,MAAM,OAAO,qBAAqB;IAChC,MAAM,CAAU,OAAO,GAAG,QAAQ,CAAC;IACnC,MAAM,CAAU,UAAU,GAAG,WAAW,CAAC;IACzC,MAAM,CAAC,GAAG,GAAuB,IAAI,CAAC;IAEtC,MAAM,CAAC,KAAK,CAAC,IAAI;QACf,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,qBAAqB,CAAC;QAE3C,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAEhD,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;gBAC7B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC1B,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnD,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,OAAO;QAClB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,UAAU;QACf,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,CACd,GAAqB,EACrB,KAAqB;QAErB,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,cAAc,CAAC,KAAK,CAAC,CAAC;QAEtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACxD,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAgB,CAAC,CAAC;YAClE,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAqB;QACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE7B,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAE1E,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;YACxD,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAqB;QACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjE,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrD,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAyB,CAAC,CAAC;YAC7D,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAqB;QACvC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACxD,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/OffdexEnvelopeStorage/types.d.ts

@@ -0,0 +1,6 @@
+export type OffdexIdentifier = Base64URLString; /** 43 chars, no padding */
+export type OffdexEnvelope = {
+    iv: Uint8Array;
+    ciphertext: ArrayBuffer;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/OffdexEnvelopeStorage/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/OffdexEnvelopeStorage/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC,CAAC,2BAA2B;AAE3E,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,UAAU,CAAC;IACf,UAAU,EAAE,WAAW,CAAC;CACzB,CAAC"}

package/dist/OffdexEnvelopeStorage/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/OffdexEnvelopeStorage/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/OffdexEnvelopeStorage/types.ts"],"names":[],"mappings":""}

package/dist/OffdexEnvelopeStorage/validation.d.ts

@@ -0,0 +1,4 @@
+import type { OffdexEnvelope, OffdexIdentifier } from "./types.js";
+export declare const assertIdentifier: (key: string) => asserts key is OffdexIdentifier;
+export declare const assertEnvelope: (value: unknown) => asserts value is OffdexEnvelope;
+//# sourceMappingURL=validation.d.ts.map

package/dist/OffdexEnvelopeStorage/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/OffdexEnvelopeStorage/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnE,eAAO,MAAM,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,gBAQ9D,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,CAC3B,KAAK,EAAE,OAAO,KACX,OAAO,CAAC,KAAK,IAAI,cAmBrB,CAAC"}

package/dist/OffdexEnvelopeStorage/validation.js

@@ -0,0 +1,22 @@
+export const assertIdentifier = (key) => {
+    if (key.length !== 43) {
+        throw new TypeError("{offdex} identifier must be exactly 43 chars");
+    }
+    if (!/^[A-Za-z0-9_-]+$/.test(key)) {
+        throw new TypeError("{offdex} identifier must be base64url (no padding)");
+    }
+};
+export const assertEnvelope = (value) => {
+    if (typeof value !== "object" || value === null) {
+        throw new TypeError("{offdex} envelope must be an object");
+    }
+    const env = value;
+    if (!(env.iv instanceof Uint8Array) || env.iv.byteLength !== 12) {
+        throw new TypeError("{offdex} iv must be 12-byte Uint8Array (AES-GCM)");
+    }
+    if (!(env.ciphertext instanceof ArrayBuffer) ||
+        env.ciphertext.byteLength === 0) {
+        throw new TypeError("{offdex} ciphertext must be non-empty ArrayBuffer");
+    }
+};
+//# sourceMappingURL=validation.js.map

package/dist/OffdexEnvelopeStorage/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/OffdexEnvelopeStorage/validation.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAC3B,CAAC,GAAW,EAAmC,EAAE;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAEY,CACrC,KAAc,EACmB,EAAE;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAC;IAE7C,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,YAAY,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IAED,IACE,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,WAAW,CAAC;QACxC,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { ObjectStorage } from "./ObjectStorage/class.js";
-declare const _default: ObjectStorage;
-export default _default;
+import { OffdexEnvelopeStorage } from "./OffdexEnvelopeStorage/class.js";
+declare const offdex: OffdexEnvelopeStorage;
+export default offdex;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;;AAEzD,wBAAmC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,QAAA,MAAM,MAAM,uBAAqC,CAAC;AAClD,eAAe,MAAM,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
-import { ObjectStorage } from "./ObjectStorage/class.js";
-export default new ObjectStorage();
+import { OffdexEnvelopeStorage } from "./OffdexEnvelopeStorage/class.js";
+const offdex = await OffdexEnvelopeStorage.open();
+export default offdex;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,eAAe,IAAI,aAAa,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,CAAC;AAClD,eAAe,MAAM,CAAC"}

package/package.json

@@ -1,19 +1,17 @@
 {
   "name": "offdex",
-  "version": "3.0.0",
-  "description": "IndexedDB-backed object storage for structured-clone JS values (msgpack-compatible) in browsers and workers.",
+  "version": "4.0.0",
+  "description": "IndexedDB-backed envelope storage for AES-GCM payloads in browsers and workers.",
   "keywords": [
     "indexeddb",
-    "structured-clone",
-    "msgpack",
-    "binary",
-    "object",
+    "envelope",
+    "ciphertext",
+    "crypto",
+    "aes-gcm",
+    "base64url",
     "storage",
     "browser-storage",
     "web-storage",
-    "r2",
-    "cloudflare",
-    "bucket",
     "offline",
     "worker",
     "persist"
@@ -24,12 +22,12 @@
   "types": "dist/index.d.ts",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/jortsupetterson/offdex.git"
+    "url": "git+https://github.com/z-base/offdex.git"
   },
   "bugs": {
-    "url": "https://github.com/jortsupetterson/offdex/issues"
+    "url": "https://github.com/z-base/offdex/issues"
   },
-  "homepage": "https://github.com/jortsupetterson/offdex#readme",
+  "homepage": "https://github.com/z-base/offdex#readme",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -46,14 +44,15 @@
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "test": "npm run build && playwright test",
+    "test:unit": "playwright test --project=unit",
+    "test:integration": "npm run build && playwright test --project=chromium --project=firefox --project=webkit --project=chromium-mobile --project=webkit-mobile tests/integration",
+    "test:e2e": "npm run build && playwright test --project=chromium --project=firefox --project=webkit --project=chromium-mobile --project=webkit-mobile tests/e2e",
     "bench": "npm run build && playwright test -c playwright.bench.config.ts",
     "prepublishOnly": "npm run build"
   },
-  "dependencies": {
-    "@cloudflare/workers-types": "^4.20260101.0"
-  },
   "devDependencies": {
     "@playwright/test": "^1.57.0",
+    "@types/node": "^25.0.9",
     "typescript": "^5.9.3"
   }
 }