ox 1.0.5 → 1.1.0

package/dist/core/internal/codec/base64.js

@@ -0,0 +1,177 @@
+/**
+ * Base64 codec tiers, and the tables they share.
+ *
+ * Split out of the public `Base64` module for the same reason the hex codec is:
+ * a runtime selects one tier at import, so the others are unreachable from a
+ * test unless they can be called directly. Keeping them here lets the
+ * conformance suite compare every tier a runtime can execute, without widening
+ * `Base64`'s public surface.
+ *
+ * @internal
+ */
+import * as Errors from '../../Errors.js';
+import { decoder } from './utf8.js';
+// Standard Base64 alphabet (RFC 4648 section 4) and URL-safe alphabet (section 5).
+const stdAlphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+// Char-code -> 6-bit integer lookup. Sentinel `0xff` = invalid character.
+// Standard alphabet plus URL-safe `-`/`_` (decoders are alphabet-agnostic).
+const characterToInteger = /*#__PURE__*/ (() => {
+    const table = new Uint8Array(256).fill(0xff);
+    for (let i = 0; i < stdAlphabet.length; i++)
+        table[stdAlphabet.charCodeAt(i)] = i;
+    // URL-safe alternates: `-` for `+` (62), `_` for `/` (63).
+    table[45 /* '-' */] = 62;
+    table[95 /* '_' */] = 63;
+    return table;
+})();
+// Integer -> char-code table for the standard alphabet, indexed by 6-bit value.
+const integerToCharacter = /*#__PURE__*/ (() => {
+    const table = new Uint8Array(64);
+    for (let i = 0; i < stdAlphabet.length; i++)
+        table[i] = stdAlphabet.charCodeAt(i);
+    return table;
+})();
+// Native fast-path detection. `Uint8Array.prototype.toBase64` ships in
+// Chromium 145, Safari 18.2+, Firefox 133+ and Bun, but not in Node 24.
+//
+// Only encoding delegates to it; see `toBytes` for why decoding cannot.
+const nativeToBase64 = Uint8Array.prototype.toBase64;
+/**
+ * Encodes via `Uint8Array.prototype.toBase64`, where the runtime has it.
+ * `undefined` otherwise, so the conformance suite can ask whether this tier
+ * exists rather than inferring it from the runtime.
+ *
+ * @internal
+ */
+export const fromBytesNative = nativeToBase64 &&
+    ((value, options = {}) => {
+        const { pad = true, url = false } = options;
+        // `omitPadding` governs both alphabets, so `base64url` is padded here too
+        // when asked. Appending padding on top of that double-pads it.
+        return nativeToBase64.call(value, {
+            alphabet: url ? 'base64url' : 'base64',
+            omitPadding: !pad,
+        });
+    });
+/**
+ * Encodes in plain JavaScript, for runtimes without the native method.
+ *
+ * @internal
+ */
+export function fromBytesLoop(value, options = {}) {
+    const { pad = true, url = false } = options;
+    const encoded = new Uint8Array(Math.ceil(value.length / 3) * 4);
+    for (let i = 0, j = 0; j < value.length; i += 4, j += 3) {
+        const y = (value[j] << 16) + (value[j + 1] << 8) + (value[j + 2] | 0);
+        encoded[i] = integerToCharacter[y >> 18];
+        encoded[i + 1] = integerToCharacter[(y >> 12) & 0x3f];
+        encoded[i + 2] = integerToCharacter[(y >> 6) & 0x3f];
+        encoded[i + 3] = integerToCharacter[y & 0x3f];
+    }
+    const k = value.length % 3;
+    const end = Math.floor(value.length / 3) * 4 + (k && k + 1);
+    let base64 = decoder.decode(new Uint8Array(encoded.buffer, 0, end));
+    if (pad && k === 1)
+        base64 += '==';
+    if (pad && k === 2)
+        base64 += '=';
+    if (url)
+        base64 = base64.replaceAll('+', '-').replaceAll('/', '_');
+    return base64;
+}
+/**
+ * Encodes with whichever tier this runtime provides.
+ *
+ * @internal
+ */
+export function fromBytes(value, options = {}) {
+    if (fromBytesNative)
+        return fromBytesNative(value, options);
+    return fromBytesLoop(value, options);
+}
+/**
+ * `Uint8Array.fromBase64` is deliberately unused.
+ *
+ * Its `alphabet` option is strict and mutually exclusive -- `base64` refuses
+ * `-`/`_`, `base64url` refuses `+`/`/` -- while ox decodes either alphabet
+ * transparently. There is no single native call with that behavior, so matching
+ * it would mean normalizing the string first or trying both alphabets and
+ * throwing on one. Both cost more than they would save, and neither has been
+ * measured; the loop is the only decode tier until one is.
+ */
+/**
+ * Decodes in plain JavaScript, for runtimes without the native method.
+ *
+ * @internal
+ */
+export function toBytesLoop(value, bodyEnd) {
+    const size = bodyEnd;
+    // Validate characters: every char must be in the standard or URL-safe
+    // alphabet, and '=' may not appear in the body (only stripped trailing
+    // padding).
+    const decoded = new Uint8Array((size >> 2) * 3 + (size % 4 ? (size % 4) - 1 : 0));
+    let acc = 0;
+    let bits = 0;
+    let n = 0;
+    for (let i = 0; i < size; i++) {
+        const code = value.charCodeAt(i);
+        if (code === 61 /* '=' */)
+            throw new InvalidCharacterError({ character: '=' });
+        // `characterToInteger` only spans Latin-1, so a code unit above it reads
+        // `undefined` and has to be mapped to the sentinel. Without that, `undefined`
+        // fails the `=== 0xff` test, then coerces to zero in the shift below, and a
+        // non-ASCII character silently decodes as `A`.
+        const v = characterToInteger[code] ?? 0xff;
+        if (v === 0xff)
+            throw new InvalidCharacterError({ character: value[i] });
+        acc = (acc << 6) | v;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            decoded[n++] = (acc >>> bits) & 0xff;
+        }
+    }
+    return decoded;
+}
+/**
+ * Decodes with whichever tier this runtime provides.
+ *
+ * @internal
+ */
+export function toBytes(value) {
+    // Strip trailing '=' padding (only at the very end).
+    let bodyEnd = value.length;
+    let pad = 0;
+    while (bodyEnd > 0 && value.charCodeAt(bodyEnd - 1) === 61 /* '=' */) {
+        bodyEnd--;
+        pad++;
+    }
+    // Reject impossible lengths and excessive padding.
+    if (bodyEnd % 4 === 1)
+        throw new InvalidLengthError({ length: value.length });
+    if (pad > 2)
+        throw new InvalidPaddingError({ padding: pad });
+    return toBytesLoop(value, bodyEnd);
+}
+/** Thrown when a Base64 string contains an invalid character. */
+export class InvalidCharacterError extends Errors.BaseError {
+    name = 'Base64.InvalidCharacterError';
+    constructor({ character }) {
+        super(`Invalid Base64 character: "${character}".`);
+    }
+}
+/** Thrown when a Base64 string has an impossible length. */
+export class InvalidLengthError extends Errors.BaseError {
+    name = 'Base64.InvalidLengthError';
+    constructor({ length }) {
+        super(`Invalid Base64 input length \`${length}\`.`);
+    }
+}
+/** Thrown when a Base64 string contains too many trailing `=` padding characters. */
+export class InvalidPaddingError extends Errors.BaseError {
+    name = 'Base64.InvalidPaddingError';
+    constructor({ padding }) {
+        super(`Invalid Base64 padding length \`${padding}\` (must be 0, 1, or 2).`);
+    }
+}
+//# sourceMappingURL=base64.js.map

package/dist/core/internal/codec/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../../../src/core/internal/codec/base64.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAUnC,mFAAmF;AACnF,MAAM,WAAW,GACf,kEAAkE,CAAA;AAEpE,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,aAAa,CAAC,CAAC,GAAG,EAAE;IAC7C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE;QACzC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACtC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;IACxB,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAA;IACxB,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,EAAE,CAAA;AAEJ,gFAAgF;AAChF,MAAM,kBAAkB,GAAG,aAAa,CAAC,CAAC,GAAG,EAAE;IAC7C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE;QACzC,KAAK,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACtC,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,EAAE,CAAA;AAEJ,uEAAuE;AACvE,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,MAAM,cAAc,GAMlB,UAAU,CAAC,SAMZ,CAAC,QAAQ,CAAA;AAEV;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAG1B,cAAc;IACd,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;QAC3C,0EAA0E;QAC1E,+DAA+D;QAC/D,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE;YAChC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACtC,WAAW,EAAE,CAAC,GAAG;SAClB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAkB,EAClB,UAAmB,EAAE;IAErB,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAE3C,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAE/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,CAAA;QACxE,OAAO,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAE,CAAA;QACzC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAE,CAAA;QACtD,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAE,CAAA;QACrD,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,GAAG,IAAI,CAAE,CAAA;IAChD,CAAC;IAED,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3D,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACnE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,IAAI,CAAA;IAClC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,GAAG,CAAA;IACjC,IAAI,GAAG;QAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAClE,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAkB,EAAE,UAAmB,EAAE;IACjE,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAC3D,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,OAAe;IACxD,MAAM,IAAI,GAAG,OAAO,CAAA;IAEpB,sEAAsE;IACtE,uEAAuE;IACvE,YAAY;IACZ,MAAM,OAAO,GAAG,IAAI,UAAU,CAC5B,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAClD,CAAA;IACD,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,IAAI,KAAK,EAAE,CAAC,SAAS;YACvB,MAAM,IAAI,qBAAqB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;QACrD,yEAAyE;QACzE,8EAA8E;QAC9E,4EAA4E;QAC5E,+CAA+C;QAC/C,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;QAC1C,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,qBAAqB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAA;QACzE,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACpB,IAAI,IAAI,CAAC,CAAA;QACT,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAA;YACT,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAA;QACtC,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,qDAAqD;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,CAAA;IAC1B,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,OAAO,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,CAAC;QACrE,OAAO,EAAE,CAAA;QACT,GAAG,EAAE,CAAA;IACP,CAAC;IAED,mDAAmD;IACnD,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,IAAI,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAA;IAE5D,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACpC,CAAC;AAED,iEAAiE;AACjE,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,SAAS;IACvC,IAAI,GAAG,8BAA8B,CAAA;IAEvD,YAAY,EAAE,SAAS,EAAyB;QAC9C,KAAK,CAAC,8BAA8B,SAAS,IAAI,CAAC,CAAA;IACpD,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,SAAS;IACpC,IAAI,GAAG,2BAA2B,CAAA;IAEpD,YAAY,EAAE,MAAM,EAAsB;QACxC,KAAK,CAAC,iCAAiC,MAAM,KAAK,CAAC,CAAA;IACrD,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,SAAS;IACrC,IAAI,GAAG,4BAA4B,CAAA;IAErD,YAAY,EAAE,OAAO,EAAuB;QAC1C,KAAK,CAAC,mCAAmC,OAAO,0BAA0B,CAAC,CAAA;IAC7E,CAAC;CACF"}

package/dist/core/internal/codec/hex.d.ts

@@ -3,20 +3,65 @@ import * as Errors from '../../Errors.js';
 export type Hex = `0x${string}`;
 /**
  * Encodes a `Uint8Array` into a `0x`-prefixed lowercase hex string. Uses the
- * native `Uint8Array.prototype.toHex` (Node 22+, Safari 18+, Firefox 133+) or
- * Node's `Buffer` when available; otherwise a tight JS loop.
+ * native `Uint8Array.prototype.toHex` or Node's `Buffer` when available;
+ * otherwise a tight JS loop.
  *
  * @internal
  */
 export declare function bytesToHex(value: Uint8Array): Hex;
+/**
+ * Encodes via `Uint8Array.prototype.toHex`, where the runtime has it.
+ * `undefined` otherwise, so callers and the conformance suite can both ask
+ * whether this tier exists rather than inferring it.
+ *
+ * @internal
+ */
+export declare const bytesToHexNative: ((value: Uint8Array) => Hex) | undefined;
+/**
+ * Encodes via Node's `Buffer`, where the runtime has it.
+ *
+ * @internal
+ */
+export declare const bytesToHexBuffer: ((value: Uint8Array) => Hex) | undefined;
+/**
+ * Encodes in plain JavaScript, for runtimes with neither the native method nor
+ * `Buffer`: browsers predating `Uint8Array.prototype.toHex`, which is recent
+ * enough that a meaningful share of installed browsers still land here.
+ *
+ * Appending to a string beats collecting substrings and joining them: V8 builds
+ * a rope and flattens it once, where `join` over an `Array.from({ length })`
+ * pays for a holey array as well as the concatenation. Measured at ~6.5x on a
+ * 32-byte input, counting the flatten.
+ *
+ * @internal
+ */
+export declare function bytesToHexLoop(value: Uint8Array): Hex;
 /**
  * Strictly decodes a `0x`-prefixed even-length hex string into a `Uint8Array`.
- * Uses the native `Uint8Array.fromHex` (Node 22+, Safari 18+, Firefox 133+) or
- * Node's `Buffer` when available; otherwise a tight JS loop.
+ * Uses a JS loop for short inputs and Node's `Buffer` for longer ones.
  *
  * @internal
  */
 export declare function hexToBytes(value: string): Uint8Array;
+/**
+ * Decodes via Node's `Buffer`, where the runtime has it.
+ *
+ * @internal
+ */
+export declare const hexToBytesBuffer: ((value: string, length: number) => Uint8Array) | undefined;
+/**
+ * Decodes in plain JavaScript, reading nibbles straight out of `value` from
+ * index 2 so no substring is materialized.
+ *
+ * Invalidity is accumulated rather than branched on per nibble: a valid nibble
+ * is at most `0x0f`, so only the `0xff` sentinel can set bit 7, and one check
+ * after the loop covers every character. `nibbleTable` only spans Latin-1, so a
+ * code unit above it reads `undefined` and has to be mapped to the sentinel --
+ * without that, a non-ASCII character would OR in as zero and decode silently.
+ *
+ * @internal
+ */
+export declare function hexToBytesLoop(value: string, length: number): Uint8Array;
 /** @internal */
 export declare function charCodeToBase16(char: number): number | undefined;
 /** Thrown when a value is not a valid `0x`-prefixed hex string. */

package/dist/core/internal/codec/hex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hex.d.ts","sourceRoot":"","sources":["../../../../src/core/internal/codec/hex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AAEzC,gBAAgB;AAChB,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAA;AA+B/B;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAQjD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAwCpD;AAED,gBAAgB;AAChB,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,mEAAmE;AACnE,qBAAa,oBAAqB,SAAQ,MAAM,CAAC,SAAS;IACxD,SAAkB,IAAI,8BAA6B;gBAEvC,KAAK,EAAE,OAAO;CAO3B;AAED,wDAAwD;AACxD,qBAAa,kBAAmB,SAAQ,MAAM,CAAC,SAAS;IACtD,SAAkB,IAAI,4BAA2B;gBAErC,KAAK,EAAE,GAAG;CAQvB;AAED,gBAAgB;AAChB,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC;AAED,gBAAgB;AAChB,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,KAAK,SAAS,GACV,oBAAoB,GACpB,kBAAkB,GAClB,MAAM,CAAC,eAAe,CAAA;CAC3B"}
+{"version":3,"file":"hex.d.ts","sourceRoot":"","sources":["../../../../src/core/internal/codec/hex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AAEzC,gBAAgB;AAChB,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAA;AAiD/B;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAIjD;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,GAAG,CAAC,GAAG,SACK,CAAA;AAEnE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,GAAG,CAAC,GAAG,SAGmC,CAAA;AAEjG;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAKrD;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAepD;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,EACzB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC,GAC/C,SAoBA,CAAA;AAEJ;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAWxE;AAED,gBAAgB;AAChB,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,mEAAmE;AACnE,qBAAa,oBAAqB,SAAQ,MAAM,CAAC,SAAS;IACxD,SAAkB,IAAI,8BAA6B;gBAEvC,KAAK,EAAE,OAAO;CAO3B;AAED,wDAAwD;AACxD,qBAAa,kBAAmB,SAAQ,MAAM,CAAC,SAAS;IACtD,SAAkB,IAAI,4BAA2B;gBAErC,KAAK,EAAE,GAAG;CAQvB;AAED,gBAAgB;AAChB,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC;AAED,gBAAgB;AAChB,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,KAAK,SAAS,GACV,oBAAoB,GACpB,kBAAkB,GAClB,MAAM,CAAC,eAAe,CAAA;CAC3B"}

package/dist/core/internal/codec/hex.js

@@ -12,34 +12,82 @@ const nibbleTable = /*#__PURE__*/ (() => {
     }
     return table;
 })();
-// Phase 2 native fast-path detection: `Uint8Array.prototype.toHex` lands in
-// Node 22+, Safari 18+, Firefox 133+. Falls back to `Buffer` on Node, then to
-// the JS loop.
+// Native fast-path detection. `Uint8Array.prototype.toHex` ships in Chromium
+// 145, Safari 18.2+ and Firefox 133+, but not in Node 24, which reaches
+// `Buffer` instead.
+//
+// Only *encoding* delegates to it. Encoding is total, so a native method has
+// nothing to get wrong; decoding has to reject, and the native decoders do not
+// do so reliably -- Chromium 145 reads U+C230 as the digit `0`, masking the
+// code unit to 8 bits exactly as `Buffer` does, and only rejects it from 149
+// on. test262 misses this because none of its illegal characters mask onto the
+// hex alphabet. Guarding `fromHex` costs an ASCII scan that leaves it only
+// 10-25% ahead of the loop, so it is not used at all.
 const _Buffer = globalThis.Buffer;
 const nativeToHex = Uint8Array.prototype.toHex;
-const nativeFromHex = Uint8Array.fromHex;
+/**
+ * Byte count below which {@link hexToBytesLoop} beats `Buffer.from(…, 'hex')`,
+ * whose fixed per-call cost short inputs cannot amortize. Measured on Node 24
+ * (V8 13.6): the crossover sits between 32 and 48 bytes, and 32 covers the
+ * sizes Ethereum work is made of -- 20-byte addresses and 32-byte words.
+ *
+ * `Buffer` is the only tier this applies to; where it is absent the loop
+ * decodes at every size. Re-measure before moving it.
+ *
+ * @internal
+ */
+const loopDecodeMaxBytes = 32;
 /**
  * Encodes a `Uint8Array` into a `0x`-prefixed lowercase hex string. Uses the
- * native `Uint8Array.prototype.toHex` (Node 22+, Safari 18+, Firefox 133+) or
- * Node's `Buffer` when available; otherwise a tight JS loop.
+ * native `Uint8Array.prototype.toHex` or Node's `Buffer` when available;
+ * otherwise a tight JS loop.
  *
  * @internal
  */
 export function bytesToHex(value) {
-    if (nativeToHex)
-        return `0x${nativeToHex.call(value)}`;
-    if (_Buffer)
-        return `0x${_Buffer.from(value.buffer, value.byteOffset, value.byteLength).toString('hex')}`;
+    if (bytesToHexNative)
+        return bytesToHexNative(value);
+    if (bytesToHexBuffer)
+        return bytesToHexBuffer(value);
+    return bytesToHexLoop(value);
+}
+/**
+ * Encodes via `Uint8Array.prototype.toHex`, where the runtime has it.
+ * `undefined` otherwise, so callers and the conformance suite can both ask
+ * whether this tier exists rather than inferring it.
+ *
+ * @internal
+ */
+export const bytesToHexNative = nativeToHex && ((value) => `0x${nativeToHex.call(value)}`);
+/**
+ * Encodes via Node's `Buffer`, where the runtime has it.
+ *
+ * @internal
+ */
+export const bytesToHexBuffer = _Buffer &&
+    ((value) => `0x${_Buffer.from(value.buffer, value.byteOffset, value.byteLength).toString('hex')}`);
+/**
+ * Encodes in plain JavaScript, for runtimes with neither the native method nor
+ * `Buffer`: browsers predating `Uint8Array.prototype.toHex`, which is recent
+ * enough that a meaningful share of installed browsers still land here.
+ *
+ * Appending to a string beats collecting substrings and joining them: V8 builds
+ * a rope and flattens it once, where `join` over an `Array.from({ length })`
+ * pays for a holey array as well as the concatenation. Measured at ~6.5x on a
+ * 32-byte input, counting the flatten.
+ *
+ * @internal
+ */
+export function bytesToHexLoop(value) {
     const length = value.length;
-    const parts = Array.from({ length });
+    let hex = '0x';
     for (let i = 0; i < length; i++)
-        parts[i] = hexes[value[i]];
-    return `0x${parts.join('')}`;
+        hex += hexes[value[i]];
+    return hex;
 }
 /**
  * Strictly decodes a `0x`-prefixed even-length hex string into a `Uint8Array`.
- * Uses the native `Uint8Array.fromHex` (Node 22+, Safari 18+, Firefox 133+) or
- * Node's `Buffer` when available; otherwise a tight JS loop.
+ * Uses a JS loop for short inputs and Node's `Buffer` for longer ones.
  *
  * @internal
  */
@@ -49,44 +97,70 @@ export function hexToBytes(value) {
         value.charCodeAt(0) !== 48 /* '0' */ ||
         value.charCodeAt(1) !== 120 /* 'x' */)
         throw new InvalidHexValueError(value);
-    const body = value.length === 2 ? '' : value.slice(2);
-    if ((body.length & 1) !== 0)
+    const nibbles = value.length - 2;
+    if ((nibbles & 1) !== 0)
         throw new InvalidLengthError(value);
-    if (nativeFromHex) {
-        try {
-            return nativeFromHex(body);
-        }
-        catch {
+    const length = nibbles >> 1;
+    if (length <= loopDecodeMaxBytes)
+        return hexToBytesLoop(value, length);
+    if (hexToBytesBuffer)
+        return hexToBytesBuffer(value, length);
+    return hexToBytesLoop(value, length);
+}
+/**
+ * Decodes via Node's `Buffer`, where the runtime has it.
+ *
+ * @internal
+ */
+export const hexToBytesBuffer = _Buffer &&
+    ((value, length) => {
+        const body = value.slice(2);
+        // `Buffer.from(…, 'hex')` masks each UTF-16 code unit to 8 bits, so a
+        // character above U+00FF can alias a hex digit: U+C230 masks to 0x30, the
+        // digit `0`, and `'0x숰0'` decodes to `0x00` instead of being rejected.
+        // Masking cannot fabricate a digit from pure ASCII, and a string is pure
+        // ASCII exactly when its UTF-8 length matches its code-unit count.
+        if (_Buffer.byteLength(body, 'utf8') !== body.length)
             throw new InvalidHexValueError(value);
-        }
-    }
-    if (_Buffer && body.length > 0) {
         // Buffer.from with 'hex' silently truncates on invalid chars; verify
         // byteLength matches expectations to detect malformed input.
-        const expected = body.length >> 1;
         const buf = _Buffer.from(body, 'hex');
-        if (buf.length !== expected)
+        if (buf.length !== length)
             throw new InvalidHexValueError(value);
         // Copy out of Buffer pool: callers may rely on `.buffer` being a
         // standalone ArrayBuffer (e.g. WebAuthn attestationObject round-trips).
         const out = new Uint8Array(buf.byteLength);
         out.set(buf);
         return out;
-    }
-    const length = body.length >> 1;
+    });
+/**
+ * Decodes in plain JavaScript, reading nibbles straight out of `value` from
+ * index 2 so no substring is materialized.
+ *
+ * Invalidity is accumulated rather than branched on per nibble: a valid nibble
+ * is at most `0x0f`, so only the `0xff` sentinel can set bit 7, and one check
+ * after the loop covers every character. `nibbleTable` only spans Latin-1, so a
+ * code unit above it reads `undefined` and has to be mapped to the sentinel --
+ * without that, a non-ASCII character would OR in as zero and decode silently.
+ *
+ * @internal
+ */
+export function hexToBytesLoop(value, length) {
     const out = new Uint8Array(length);
-    for (let i = 0, j = 0; i < length; i++) {
-        const hi = nibbleTable[body.charCodeAt(j++)];
-        const lo = nibbleTable[body.charCodeAt(j++)];
-        if (hi === 0xff || lo === 0xff)
-            throw new InvalidHexValueError(value);
+    let invalid = 0;
+    for (let i = 0, j = 2; i < length; i++) {
+        const hi = nibbleTable[value.charCodeAt(j++)] ?? 0xff;
+        const lo = nibbleTable[value.charCodeAt(j++)] ?? 0xff;
+        invalid |= hi | lo;
         out[i] = (hi << 4) | lo;
     }
+    if (invalid & 0x80)
+        throw new InvalidHexValueError(value);
     return out;
 }
 /** @internal */
 export function charCodeToBase16(char) {
-    const v = nibbleTable[char];
+    const v = nibbleTable[char] ?? 0xff;
     return v === 0xff ? undefined : v;
 }
 /** Thrown when a value is not a valid `0x`-prefixed hex string. */

package/dist/core/internal/codec/hex.js.map

@@ -1 +1 @@
-{"version":3,"file":"hex.js","sourceRoot":"","sources":["../../../../src/core/internal/codec/hex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AAKzC,gBAAgB;AAChB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAChE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAChC,CAAA;AAED,oEAAoE;AACpE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,GAAG,EAAE;IACtC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA,CAAC,UAAU;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA,CAAC,UAAU;QACjC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA,CAAC,UAAU;IACnC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,EAAE,CAAA;AAEJ,4EAA4E;AAC5E,8EAA8E;AAC9E,eAAe;AACf,MAAM,OAAO,GACX,UACD,CAAC,MAAM,CAAA;AACR,MAAM,WAAW,GACf,UAAU,CAAC,SACZ,CAAC,KAAK,CAAA;AACP,MAAM,aAAa,GACjB,UACD,CAAC,OAAO,CAAA;AAET;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,WAAW;QAAE,OAAO,KAAK,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAS,CAAA;IAC7D,IAAI,OAAO;QACT,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAS,CAAA;IACrG,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAE,CAAA;IAC7D,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAS,CAAA;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QACpC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,SAAS;QAErC,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,KAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,KAAY,CAAC,CAAA;IAEvE,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACvC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAClE,iEAAiE;QACjE,wEAAwE;QACxE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACZ,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAE,CAAA;QAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAE,CAAA;QAC7C,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACrE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAE,CAAA;IAC5B,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AACnC,CAAC;AAED,mEAAmE;AACnE,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,SAAS;IACtC,IAAI,GAAG,0BAA0B,CAAA;IAEnD,YAAY,KAAc;QACxB,KAAK,CAAC,WAAW,KAAK,6BAA6B,EAAE;YACnD,YAAY,EAAE;gBACZ,4FAA4F;aAC7F;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,SAAS;IACpC,IAAI,GAAG,wBAAwB,CAAA;IAEjD,YAAY,KAAU;QACpB,KAAK,CACH,gBAAgB,KAAK,yBAAyB,KAAK,CAAC,MAAM,GAAG,CAAC,YAAY,EAC1E;YACE,YAAY,EAAE,CAAC,4BAA4B,CAAC;SAC7C,CACF,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"hex.js","sourceRoot":"","sources":["../../../../src/core/internal/codec/hex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,iBAAiB,CAAA;AAKzC,gBAAgB;AAChB,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAChE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAChC,CAAA;AAED,oEAAoE;AACpE,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,GAAG,EAAE;IACtC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA,CAAC,UAAU;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA,CAAC,UAAU;QACjC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA,CAAC,UAAU;IACnC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAC,EAAE,CAAA;AAEJ,6EAA6E;AAC7E,wEAAwE;AACxE,oBAAoB;AACpB,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,sDAAsD;AACtD,MAAM,OAAO,GACX,UACD,CAAC,MAAM,CAAA;AACR,MAAM,WAAW,GACf,UAAU,CAAC,SACZ,CAAC,KAAK,CAAA;AAEP;;;;;;;;;;GAUG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAE7B;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpD,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAA;IACpD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAS,CAAC,CAAA;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,OAAO;IACP,CAAC,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAS,CAAC,CAAA;AAEjG;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IACxD,OAAO,GAAU,CAAA;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QACpC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,SAAS;QAErC,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IAChC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,KAAY,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAA;IAE3B,IAAI,MAAM,IAAI,kBAAkB;QAAE,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACtE,IAAI,gBAAgB;QAAE,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC5D,OAAO,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAG3B,OAAO;IACP,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC3B,sEAAsE;QACtE,0EAA0E;QAC1E,uEAAuE;QACvE,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM;YAClD,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACvC,qEAAqE;QACrE,6DAA6D;QAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAChE,iEAAiE;QACjE,wEAAwE;QACxE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACZ,OAAO,GAAG,CAAA;IACZ,CAAC,CAAC,CAAA;AAEJ;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAA;QACrD,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAA;QACrD,OAAO,IAAI,EAAE,GAAG,EAAE,CAAA;QAClB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAA;IACzB,CAAC;IACD,IAAI,OAAO,GAAG,IAAI;QAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAA;IACzD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;IACnC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AACnC,CAAC;AAED,mEAAmE;AACnE,MAAM,OAAO,oBAAqB,SAAQ,MAAM,CAAC,SAAS;IACtC,IAAI,GAAG,0BAA0B,CAAA;IAEnD,YAAY,KAAc;QACxB,KAAK,CAAC,WAAW,KAAK,6BAA6B,EAAE;YACnD,YAAY,EAAE;gBACZ,4FAA4F;aAC7F;SACF,CAAC,CAAA;IACJ,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,SAAS;IACpC,IAAI,GAAG,wBAAwB,CAAA;IAEjD,YAAY,KAAU;QACpB,KAAK,CACH,gBAAgB,KAAK,yBAAyB,KAAK,CAAC,MAAM,GAAG,CAAC,YAAY,EAC1E;YACE,YAAY,EAAE,CAAC,4BAA4B,CAAC;SAC7C,CACF,CAAA;IACH,CAAC;CACF"}

package/dist/core/internal/curves.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Curve constants, inlined so that modules needing nothing but an order do not
+ * pull a curve implementation into the bundle.
+ *
+ * These are fixed by the curve specifications and are asserted against
+ * `@noble/curves` in `src/core/_test/curves.test.ts`.
+ *
+ * @internal
+ */
+/**
+ * Order of the secp256r1 (P-256) curve.
+ *
+ * @see https://www.secg.org/sec2-v2.pdf
+ * @internal
+ */
+export declare const p256N = 115792089210356248762697446949407573529996955224135760342422259061068512044369n;
+//# sourceMappingURL=curves.d.ts.map

package/dist/core/internal/curves.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curves.d.ts","sourceRoot":"","sources":["../../../src/core/internal/curves.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,KAAK,kFACmD,CAAA"}

package/dist/core/internal/curves.js

@@ -0,0 +1,17 @@
+/**
+ * Curve constants, inlined so that modules needing nothing but an order do not
+ * pull a curve implementation into the bundle.
+ *
+ * These are fixed by the curve specifications and are asserted against
+ * `@noble/curves` in `src/core/_test/curves.test.ts`.
+ *
+ * @internal
+ */
+/**
+ * Order of the secp256r1 (P-256) curve.
+ *
+ * @see https://www.secg.org/sec2-v2.pdf
+ * @internal
+ */
+export const p256N = 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n;
+//# sourceMappingURL=curves.js.map

package/dist/core/internal/curves.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curves.js","sourceRoot":"","sources":["../../../src/core/internal/curves.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAChB,mEAAmE,CAAA"}

package/dist/core/internal/ed25519.d.ts

@@ -0,0 +1,14 @@
+import { type Complete, type Eddsa } from './engine.js';
+/** @internal */
+export declare const getPublicKey: Complete<Eddsa>['getPublicKey'];
+/** @internal */
+export declare const randomSecretKey: Complete<Eddsa>['randomSecretKey'];
+/** @internal */
+export declare const sign: Complete<Eddsa>['sign'];
+/** @internal */
+export declare const toMontgomery: Complete<Eddsa>['toMontgomery'];
+/** @internal */
+export declare const toMontgomerySecret: Complete<Eddsa>['toMontgomerySecret'];
+/** @internal */
+export declare const verify: Complete<Eddsa>['verify'];
+//# sourceMappingURL=ed25519.d.ts.map

package/dist/core/internal/ed25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519.d.ts","sourceRoot":"","sources":["../../../src/core/internal/ed25519.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAa,MAAM,aAAa,CAAA;AAiClE,gBAAgB;AAChB,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,cAAc,CACa,CAAA;AAEtE,gBAAgB;AAChB,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,iBAAiB,CACG,CAAA;AAElE,gBAAgB;AAChB,eAAO,MAAM,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CACsB,CAAA;AAE/D,gBAAgB;AAChB,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,cAAc,CACY,CAAA;AAErE,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAKlE,CAAA;AAEH,gBAAgB;AAChB,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAImC,CAAA"}

package/dist/core/internal/ed25519.js

@@ -0,0 +1,29 @@
+import { ed25519 } from '@noble/curves/ed25519.js';
+import { overrides } from './engine.js';
+/**
+ * Resolvers for the `Ed25519` slot, and ox's defaults for it, backed by
+ * `@noble/curves`.
+ *
+ * Declaring the defaults against the slot contract is what keeps them honest: a
+ * default that goes missing, or whose signature drifts, fails to compile rather
+ * than failing at the call site.
+ */
+const getPublicKeyDefault = (privateKey) => ed25519.getPublicKey(privateKey);
+const randomSecretKeyDefault = () => ed25519.utils.randomSecretKey();
+const signDefault = (payload, privateKey) => ed25519.sign(payload, privateKey);
+const toMontgomeryDefault = (publicKey) => ed25519.utils.toMontgomery(publicKey);
+const toMontgomerySecretDefault = (privateKey) => ed25519.utils.toMontgomerySecret(privateKey);
+const verifyDefault = (signature, payload, publicKey) => ed25519.verify(signature, payload, publicKey);
+/** @internal */
+export const getPublicKey = (privateKey) => (overrides.Ed25519?.getPublicKey ?? getPublicKeyDefault)(privateKey);
+/** @internal */
+export const randomSecretKey = () => (overrides.Ed25519?.randomSecretKey ?? randomSecretKeyDefault)();
+/** @internal */
+export const sign = (payload, privateKey) => (overrides.Ed25519?.sign ?? signDefault)(payload, privateKey);
+/** @internal */
+export const toMontgomery = (publicKey) => (overrides.Ed25519?.toMontgomery ?? toMontgomeryDefault)(publicKey);
+/** @internal */
+export const toMontgomerySecret = (privateKey) => (overrides.Ed25519?.toMontgomerySecret ?? toMontgomerySecretDefault)(privateKey);
+/** @internal */
+export const verify = (signature, payload, publicKey) => (overrides.Ed25519?.verify ?? verifyDefault)(signature, payload, publicKey);
+//# sourceMappingURL=ed25519.js.map

package/dist/core/internal/ed25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519.js","sourceRoot":"","sources":["../../../src/core/internal/ed25519.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAClD,OAAO,EAA6B,SAAS,EAAE,MAAM,aAAa,CAAA;AAElE;;;;;;;GAOG;AAEH,MAAM,mBAAmB,GAAoC,CAAC,UAAU,EAAE,EAAE,CAC1E,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;AAElC,MAAM,sBAAsB,GAAuC,GAAG,EAAE,CACtE,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;AAEjC,MAAM,WAAW,GAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CACnE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AAEnC,MAAM,mBAAmB,GAAoC,CAAC,SAAS,EAAE,EAAE,CACzE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;AAEvC,MAAM,yBAAyB,GAA0C,CACvE,UAAU,EACV,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAA;AAEjD,MAAM,aAAa,GAA8B,CAC/C,SAAS,EACT,OAAO,EACP,SAAS,EACT,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;AAElD,gBAAgB;AAChB,MAAM,CAAC,MAAM,YAAY,GAAoC,CAAC,UAAU,EAAE,EAAE,CAC1E,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,IAAI,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAA;AAEtE,gBAAgB;AAChB,MAAM,CAAC,MAAM,eAAe,GAAuC,GAAG,EAAE,CACtE,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,IAAI,sBAAsB,CAAC,EAAE,CAAA;AAElE,gBAAgB;AAChB,MAAM,CAAC,MAAM,IAAI,GAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CACnE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AAE/D,gBAAgB;AAChB,MAAM,CAAC,MAAM,YAAY,GAAoC,CAAC,SAAS,EAAE,EAAE,CACzE,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,IAAI,mBAAmB,CAAC,CAAC,SAAS,CAAC,CAAA;AAErE,gBAAgB;AAChB,MAAM,CAAC,MAAM,kBAAkB,GAA0C,CACvE,UAAU,EACV,EAAE,CACF,CAAC,SAAS,CAAC,OAAO,EAAE,kBAAkB,IAAI,yBAAyB,CAAC,CAClE,UAAU,CACX,CAAA;AAEH,gBAAgB;AAChB,MAAM,CAAC,MAAM,MAAM,GAA8B,CAC/C,SAAS,EACT,OAAO,EACP,SAAS,EACT,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA"}