ox 1.0.5 → 1.1.2

package/dist/wasm/internal/pbkdf2.d.ts

@@ -0,0 +1,12 @@
+import { type Module } from './instantiate.js';
+/** WASM exports used by the PBKDF2-HMAC-SHA256 loader. @internal */
+export type Exports = {
+    pbkdf2_sha256(password: number, passwordLength: number, salt: number, saltLength: number, iterations: number, out: number, outLength: number, scratch: number): void;
+    zero(ptr: number, length: number): void;
+};
+/** Calls PBKDF2-HMAC-SHA256 and clears its complete linear-memory region. */
+export declare function pbkdf2Sha256(module: Module<Exports>, password: Uint8Array, salt: Uint8Array, options: {
+    c: number;
+    dkLen: number;
+}): Uint8Array;
+//# sourceMappingURL=pbkdf2.d.ts.map

package/dist/wasm/internal/pbkdf2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2.d.ts","sourceRoot":"","sources":["../../../src/wasm/internal/pbkdf2.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAE3D,oEAAoE;AACpE,MAAM,MAAM,OAAO,GAAG;IACpB,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,IAAI,CAAA;IACP,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACxC,CAAA;AAKD,6EAA6E;AAC7E,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EACvB,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC,UAAU,CA4CZ"}

package/dist/wasm/internal/pbkdf2.js

@@ -0,0 +1,51 @@
+import { pbkdf2Sha256ScratchSize } from './hashes.wasm.js';
+import { MemoryError } from './instantiate.js';
+const maximumUint32 = 0xffff_ffff;
+const wasm32Size = 0x1_0000_0000;
+/** Calls PBKDF2-HMAC-SHA256 and clears its complete linear-memory region. */
+export function pbkdf2Sha256(module, password, salt, options) {
+    const { c, dkLen } = options;
+    assertPositiveUint32(c, 'c');
+    assertPositiveUint32(dkLen, 'dkLen');
+    const passwordLength = password.length;
+    const saltLength = salt.length;
+    if (saltLength > maximumUint32 - 4)
+        throw new RangeError(`"salt" length must be <= ${maximumUint32 - 4}, got ${saltLength}`);
+    const passwordPtr = module.heapBase;
+    const saltPtr = passwordPtr + passwordLength;
+    const outPtr = saltPtr + saltLength + 4;
+    const scratchPtr = align4(outPtr + dkLen);
+    const end = scratchPtr + pbkdf2Sha256ScratchSize;
+    if (!Number.isSafeInteger(end) || end > wasm32Size)
+        throw new MemoryError({
+            bytes: end,
+            cause: new RangeError('PBKDF2 workspace exceeds wasm32 memory.'),
+        });
+    module.reserve(end - passwordPtr);
+    const view = module.view();
+    try {
+        view.set(password, passwordPtr);
+        view.set(salt, saltPtr);
+        module.exports.pbkdf2_sha256(passwordPtr, passwordLength, saltPtr, saltLength, c, outPtr, dkLen, scratchPtr);
+        return module.view().slice(outPtr, outPtr + dkLen);
+    }
+    finally {
+        // This includes the password, salt and counter, staged output, alignment
+        // padding, and every byte of PBKDF2/HMAC working state.
+        module.exports.zero(passwordPtr, end - passwordPtr);
+    }
+}
+function align4(value) {
+    return Math.ceil(value / 4) * 4;
+}
+function assertPositiveUint32(value, name) {
+    if (typeof value !== 'number')
+        throw new TypeError(`"${name}" expected number, got ${typeof value}`);
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new RangeError(`"${name}" expected integer >= 0, got ${value}`);
+    if (value < 1)
+        throw new Error(`"${name}" must be >= 1`);
+    if (value > maximumUint32)
+        throw new RangeError(`"${name}" must be <= ${maximumUint32}, got ${value}`);
+}
+//# sourceMappingURL=pbkdf2.js.map

package/dist/wasm/internal/pbkdf2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pbkdf2.js","sourceRoot":"","sources":["../../../src/wasm/internal/pbkdf2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAA;AAiB3D,MAAM,aAAa,GAAG,WAAW,CAAA;AACjC,MAAM,UAAU,GAAG,aAAa,CAAA;AAEhC,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAC1B,MAAuB,EACvB,QAAoB,EACpB,IAAgB,EAChB,OAAqC;IAErC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAC5B,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC5B,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAEpC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAA;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAA;IAC9B,IAAI,UAAU,GAAG,aAAa,GAAG,CAAC;QAChC,MAAM,IAAI,UAAU,CAClB,4BAA4B,aAAa,GAAG,CAAC,SAAS,UAAU,EAAE,CACnE,CAAA;IAEH,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAA;IACnC,MAAM,OAAO,GAAG,WAAW,GAAG,cAAc,CAAA;IAC5C,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,UAAU,GAAG,uBAAuB,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,UAAU;QAChD,MAAM,IAAI,WAAW,CAAC;YACpB,KAAK,EAAE,GAAG;YACV,KAAK,EAAE,IAAI,UAAU,CAAC,yCAAyC,CAAC;SACjE,CAAC,CAAA;IAEJ,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACvB,MAAM,CAAC,OAAO,CAAC,aAAa,CAC1B,WAAW,EACX,cAAc,EACd,OAAO,EACP,UAAU,EACV,CAAC,EACD,MAAM,EACN,KAAK,EACL,UAAU,CACX,CAAA;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAA;IACpD,CAAC;YAAS,CAAC;QACT,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,WAAW,CAAC,CAAA;IACrD,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,IAAY;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAC3B,MAAM,IAAI,SAAS,CAAC,IAAI,IAAI,0BAA0B,OAAO,KAAK,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,IAAI,IAAI,gCAAgC,KAAK,EAAE,CAAC,CAAA;IACvE,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAA;IACxD,IAAI,KAAK,GAAG,aAAa;QACvB,MAAM,IAAI,UAAU,CAAC,IAAI,IAAI,gBAAgB,aAAa,SAAS,KAAK,EAAE,CAAC,CAAA;AAC/E,CAAC"}

package/dist/wasm/internal/x25519.d.ts

@@ -0,0 +1,4 @@
+import type { Module } from './crypto25519.js';
+/** Derives a shared secret and clears both keys and the staged result. */
+export declare function getSharedSecret(module: Module, privateKey: Uint8Array, publicKey: Uint8Array): Uint8Array;
+//# sourceMappingURL=x25519.d.ts.map

package/dist/wasm/internal/x25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.d.ts","sourceRoot":"","sources":["../../../src/wasm/internal/x25519.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAI9C,0EAA0E;AAC1E,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,UAAU,GACpB,UAAU,CAmBZ"}

package/dist/wasm/internal/x25519.js

@@ -0,0 +1,21 @@
+const keySize = 32;
+/** Derives a shared secret and clears both keys and the staged result. */
+export function getSharedSecret(module, privateKey, publicKey) {
+    module.reserve(keySize * 3);
+    const privateKeyPtr = module.heapBase;
+    const publicKeyPtr = privateKeyPtr + keySize;
+    const sharedSecretPtr = publicKeyPtr + keySize;
+    try {
+        const memory = module.view();
+        memory.set(privateKey, privateKeyPtr);
+        memory.set(publicKey, publicKeyPtr);
+        const valid = module.exports.x25519_get_shared_secret(privateKeyPtr, publicKeyPtr, sharedSecretPtr);
+        if (valid !== 1)
+            throw new Error('invalid private or public key received');
+        return module.view().slice(sharedSecretPtr, sharedSecretPtr + keySize);
+    }
+    finally {
+        module.exports.zero(privateKeyPtr, keySize * 3);
+    }
+}
+//# sourceMappingURL=x25519.js.map

package/dist/wasm/internal/x25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x25519.js","sourceRoot":"","sources":["../../../src/wasm/internal/x25519.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,GAAG,EAAE,CAAA;AAElB,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,UAAsB,EACtB,SAAqB;IAErB,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;IAC3B,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAA;IACrC,MAAM,YAAY,GAAG,aAAa,GAAG,OAAO,CAAA;IAC5C,MAAM,eAAe,GAAG,YAAY,GAAG,OAAO,CAAA;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QAC5B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QACrC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,wBAAwB,CACnD,aAAa,EACb,YAAY,EACZ,eAAe,CAChB,CAAA;QACD,IAAI,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;QAC1E,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,CAAA;IACxE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,CAAC,CAAC,CAAA;IACjD,CAAC;AACH,CAAC"}

package/dist/zod/TypedData.d.ts

@@ -26,14 +26,14 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     [x: `bytes2[${string}]`]: undefined;
     [x: `bytes1[${string}]`]: undefined;
     [x: `bytes16[${string}]`]: undefined;
+    [x: `bytes32[${string}]`]: undefined;
     [x: `bytes4[${string}]`]: undefined;
     [x: `bytes10[${string}]`]: undefined;
     [x: `bytes6[${string}]`]: undefined;
     [x: `bytes8[${string}]`]: undefined;
     [x: `bytes7[${string}]`]: undefined;
-    [x: `bytes32[${string}]`]: undefined;
-    [x: `bytes3[${string}]`]: undefined;
     [x: `bytes5[${string}]`]: undefined;
+    [x: `bytes3[${string}]`]: undefined;
     [x: `bytes9[${string}]`]: undefined;
     [x: `bytes11[${string}]`]: undefined;
     [x: `bytes12[${string}]`]: undefined;
@@ -57,10 +57,11 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     [x: `bytes31[${string}]`]: undefined;
     [x: `int256[${string}]`]: undefined;
     [x: `int16[${string}]`]: undefined;
+    [x: `int32[${string}]`]: undefined;
     [x: `int48[${string}]`]: undefined;
     [x: `int120[${string}]`]: undefined;
+    [x: `int128[${string}]`]: undefined;
     [x: `int8[${string}]`]: undefined;
-    [x: `int32[${string}]`]: undefined;
     [x: `int24[${string}]`]: undefined;
     [x: `int40[${string}]`]: undefined;
     [x: `int56[${string}]`]: undefined;
@@ -71,7 +72,6 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     [x: `int96[${string}]`]: undefined;
     [x: `int104[${string}]`]: undefined;
     [x: `int112[${string}]`]: undefined;
-    [x: `int128[${string}]`]: undefined;
     [x: `int136[${string}]`]: undefined;
     [x: `int144[${string}]`]: undefined;
     [x: `int152[${string}]`]: undefined;
@@ -89,10 +89,11 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     [x: `int248[${string}]`]: undefined;
     [x: `uint256[${string}]`]: undefined;
     [x: `uint16[${string}]`]: undefined;
+    [x: `uint32[${string}]`]: undefined;
     [x: `uint48[${string}]`]: undefined;
     [x: `uint120[${string}]`]: undefined;
+    [x: `uint128[${string}]`]: undefined;
     [x: `uint8[${string}]`]: undefined;
-    [x: `uint32[${string}]`]: undefined;
     [x: `uint24[${string}]`]: undefined;
     [x: `uint40[${string}]`]: undefined;
     [x: `uint56[${string}]`]: undefined;
@@ -103,7 +104,6 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     [x: `uint96[${string}]`]: undefined;
     [x: `uint104[${string}]`]: undefined;
     [x: `uint112[${string}]`]: undefined;
-    [x: `uint128[${string}]`]: undefined;
     [x: `uint136[${string}]`]: undefined;
     [x: `uint144[${string}]`]: undefined;
     [x: `uint152[${string}]`]: undefined;
@@ -126,14 +126,14 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     bytes2?: undefined;
     bytes1?: undefined;
     bytes16?: undefined;
+    bytes32?: undefined;
     bytes4?: undefined;
     bytes10?: undefined;
     bytes6?: undefined;
     bytes8?: undefined;
     bytes7?: undefined;
-    bytes32?: undefined;
-    bytes3?: undefined;
     bytes5?: undefined;
+    bytes3?: undefined;
     bytes9?: undefined;
     bytes11?: undefined;
     bytes12?: undefined;
@@ -157,10 +157,11 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     bytes31?: undefined;
     int256?: undefined;
     int16?: undefined;
+    int32?: undefined;
     int48?: undefined;
     int120?: undefined;
+    int128?: undefined;
     int8?: undefined;
-    int32?: undefined;
     int24?: undefined;
     int40?: undefined;
     int56?: undefined;
@@ -171,7 +172,6 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     int96?: undefined;
     int104?: undefined;
     int112?: undefined;
-    int128?: undefined;
     int136?: undefined;
     int144?: undefined;
     int152?: undefined;
@@ -189,10 +189,11 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     int248?: undefined;
     uint256?: undefined;
     uint16?: undefined;
+    uint32?: undefined;
     uint48?: undefined;
     uint120?: undefined;
+    uint128?: undefined;
     uint8?: undefined;
-    uint32?: undefined;
     uint24?: undefined;
     uint40?: undefined;
     uint56?: undefined;
@@ -203,7 +204,6 @@ export declare const TypedData: z.ZodMiniPipe<z.ZodMiniRecord<z.ZodMiniString<st
     uint96?: undefined;
     uint104?: undefined;
     uint112?: undefined;
-    uint128?: undefined;
     uint136?: undefined;
     uint144?: undefined;
     uint152?: undefined;

package/package.json

@@ -2,7 +2,7 @@
   "name": "ox",
   "description": "Ethereum Standard Library",
   "type": "module",
-  "version": "1.0.5",
+  "version": "1.1.2",
   "main": "./dist/index.js",
   "sideEffects": false,
   "license": "MIT",
@@ -220,6 +220,11 @@
       "types": "./dist/core/Ed25519.d.ts",
       "default": "./dist/core/Ed25519.js"
     },
+    "./Engine": {
+      "src": "./src/core/Engine.ts",
+      "types": "./dist/core/Engine.d.ts",
+      "default": "./dist/core/Engine.js"
+    },
     "./Ens": {
       "src": "./src/core/Ens.ts",
       "types": "./dist/core/Ens.d.ts",
@@ -505,6 +510,46 @@
       "types": "./dist/erc8021/Attribution.d.ts",
       "default": "./dist/erc8021/Attribution.js"
     },
+    "./node": {
+      "src": "./src/node/index.ts",
+      "types": "./dist/node/index.d.ts",
+      "default": "./dist/node/index.js"
+    },
+    "./node/Ed25519": {
+      "src": "./src/node/Ed25519.ts",
+      "types": "./dist/node/Ed25519.d.ts",
+      "default": "./dist/node/Ed25519.js"
+    },
+    "./node/Engine": {
+      "src": "./src/node/Engine.ts",
+      "types": "./dist/node/Engine.d.ts",
+      "default": "./dist/node/Engine.js"
+    },
+    "./node/Hash": {
+      "src": "./src/node/Hash.ts",
+      "types": "./dist/node/Hash.d.ts",
+      "default": "./dist/node/Hash.js"
+    },
+    "./node/Keystore": {
+      "src": "./src/node/Keystore.ts",
+      "types": "./dist/node/Keystore.d.ts",
+      "default": "./dist/node/Keystore.js"
+    },
+    "./node/Mnemonic": {
+      "src": "./src/node/Mnemonic.ts",
+      "types": "./dist/node/Mnemonic.d.ts",
+      "default": "./dist/node/Mnemonic.js"
+    },
+    "./node/P256": {
+      "src": "./src/node/P256.ts",
+      "types": "./dist/node/P256.d.ts",
+      "default": "./dist/node/P256.js"
+    },
+    "./node/X25519": {
+      "src": "./src/node/X25519.ts",
+      "types": "./dist/node/X25519.d.ts",
+      "default": "./dist/node/X25519.js"
+    },
     "./tempo": {
       "src": "./src/tempo/index.ts",
       "types": "./dist/tempo/index.d.ts",
@@ -620,6 +665,41 @@
       "types": "./dist/trusted-setups/Paths.d.ts",
       "default": "./dist/trusted-setups/Paths.js"
     },
+    "./wasm": {
+      "src": "./src/wasm/index.ts",
+      "types": "./dist/wasm/index.d.ts",
+      "default": "./dist/wasm/index.js"
+    },
+    "./wasm/Ed25519": {
+      "src": "./src/wasm/Ed25519.ts",
+      "types": "./dist/wasm/Ed25519.d.ts",
+      "default": "./dist/wasm/Ed25519.js"
+    },
+    "./wasm/Engine": {
+      "src": "./src/wasm/Engine.ts",
+      "types": "./dist/wasm/Engine.d.ts",
+      "default": "./dist/wasm/Engine.js"
+    },
+    "./wasm/Hash": {
+      "src": "./src/wasm/Hash.ts",
+      "types": "./dist/wasm/Hash.d.ts",
+      "default": "./dist/wasm/Hash.js"
+    },
+    "./wasm/Keystore": {
+      "src": "./src/wasm/Keystore.ts",
+      "types": "./dist/wasm/Keystore.d.ts",
+      "default": "./dist/wasm/Keystore.js"
+    },
+    "./wasm/Mnemonic": {
+      "src": "./src/wasm/Mnemonic.ts",
+      "types": "./dist/wasm/Mnemonic.d.ts",
+      "default": "./dist/wasm/Mnemonic.js"
+    },
+    "./wasm/X25519": {
+      "src": "./src/wasm/X25519.ts",
+      "types": "./dist/wasm/X25519.d.ts",
+      "default": "./dist/wasm/X25519.js"
+    },
     "./webauthn": {
       "src": "./src/webauthn/index.ts",
       "types": "./dist/webauthn/index.d.ts",

package/src/core/Base64.ts

@@ -1,66 +1,7 @@
 import * as Bytes from './Bytes.js'
-import * as Errors from './Errors.js'
+import type * as Errors from './Errors.js'
 import * as Hex from './Hex.js'
-import { decoder } from './internal/codec/utf8.js'
-
-// Standard Base64 alphabet (RFC 4648 section 4) and URL-safe alphabet (section 5).
-const stdAlphabet =
-  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
-
-// Char-code -> 6-bit integer lookup. Sentinel `0xff` = invalid character.
-// Standard alphabet plus URL-safe `-`/`_` (decoders are alphabet-agnostic).
-const characterToInteger = /*#__PURE__*/ (() => {
-  const table = new Uint8Array(256).fill(0xff)
-  for (let i = 0; i < stdAlphabet.length; i++)
-    table[stdAlphabet.charCodeAt(i)] = i
-  // URL-safe alternates: `-` for `+` (62), `_` for `/` (63).
-  table[45 /* '-' */] = 62
-  table[95 /* '_' */] = 63
-  return table
-})()
-
-// Integer -> char-code table for the standard alphabet, indexed by 6-bit value.
-const integerToCharacter = /*#__PURE__*/ (() => {
-  const table = new Uint8Array(64)
-  for (let i = 0; i < stdAlphabet.length; i++)
-    table[i] = stdAlphabet.charCodeAt(i)
-  return table
-})()
-
-// Phase 2 native fast-path detection: `Uint8Array.prototype.toBase64` /
-// `Uint8Array.fromBase64` ship in Node 22+, Safari 18+, Firefox 133+.
-const nativeToBase64:
-  | ((
-      this: Uint8Array,
-      options?: { alphabet?: 'base64' | 'base64url'; omitPadding?: boolean },
-    ) => string)
-  | undefined = (
-  Uint8Array.prototype as Uint8Array & {
-    toBase64?: (options?: {
-      alphabet?: 'base64' | 'base64url'
-      omitPadding?: boolean
-    }) => string
-  }
-).toBase64
-const nativeFromBase64:
-  | ((
-      value: string,
-      options?: {
-        alphabet?: 'base64' | 'base64url-or-base64'
-        lastChunkHandling?: 'loose' | 'strict' | 'stop-before-partial'
-      },
-    ) => Uint8Array)
-  | undefined = (
-  Uint8Array as typeof Uint8Array & {
-    fromBase64?: (
-      value: string,
-      options?: {
-        alphabet?: 'base64' | 'base64url-or-base64'
-        lastChunkHandling?: 'loose' | 'strict' | 'stop-before-partial'
-      },
-    ) => Uint8Array
-  }
-).fromBase64
+import * as internal from './internal/codec/base64.js'
 
 /**
  * Encodes a {@link ox#Bytes.Bytes} to a Base64-encoded string (with optional padding and/or URL-safe characters).
@@ -109,39 +50,7 @@ const nativeFromBase64:
  * @returns The Base64 encoded string.
  */
 export function fromBytes(value: Bytes.Bytes, options: fromBytes.Options = {}) {
-  const { pad = true, url = false } = options
-
-  if (nativeToBase64) {
-    const out = nativeToBase64.call(value, {
-      alphabet: url ? 'base64url' : 'base64',
-      omitPadding: !pad,
-    })
-    // Native `base64url` already omits padding; if pad was requested, restore it.
-    if (url && pad) {
-      const k = value.length % 3
-      if (k === 1) return `${out}==`
-      if (k === 2) return `${out}=`
-    }
-    return out
-  }
-
-  const encoded = new Uint8Array(Math.ceil(value.length / 3) * 4)
-
-  for (let i = 0, j = 0; j < value.length; i += 4, j += 3) {
-    const y = (value[j]! << 16) + (value[j + 1]! << 8) + (value[j + 2]! | 0)
-    encoded[i] = integerToCharacter[y >> 18]!
-    encoded[i + 1] = integerToCharacter[(y >> 12) & 0x3f]!
-    encoded[i + 2] = integerToCharacter[(y >> 6) & 0x3f]!
-    encoded[i + 3] = integerToCharacter[y & 0x3f]!
-  }
-
-  const k = value.length % 3
-  const end = Math.floor(value.length / 3) * 4 + (k && k + 1)
-  let base64 = decoder.decode(new Uint8Array(encoded.buffer, 0, end))
-  if (pad && k === 1) base64 += '=='
-  if (pad && k === 2) base64 += '='
-  if (url) base64 = base64.replaceAll('+', '-').replaceAll('/', '_')
-  return base64
+  return internal.fromBytes(value, options)
 }
 
 export declare namespace fromBytes {
@@ -307,54 +216,7 @@ export declare namespace fromString {
  * @returns The Base64 decoded {@link ox#Bytes.Bytes}.
  */
 export function toBytes(value: string): Bytes.Bytes {
-  // Strip trailing '=' padding (only at the very end).
-  let bodyEnd = value.length
-  let pad = 0
-  while (bodyEnd > 0 && value.charCodeAt(bodyEnd - 1) === 61 /* '=' */) {
-    bodyEnd--
-    pad++
-  }
-
-  const size = bodyEnd
-  // Reject impossible lengths and excessive padding.
-  if (size % 4 === 1) throw new InvalidLengthError({ length: value.length })
-  if (pad > 2) throw new InvalidPaddingError({ padding: pad })
-
-  if (nativeFromBase64) {
-    try {
-      // `base64url-or-base64` accepts both alphabets transparently.
-      return nativeFromBase64(value.slice(0, bodyEnd), {
-        alphabet: 'base64url-or-base64',
-        lastChunkHandling: 'loose',
-      })
-    } catch {
-      // Fall through to the JS path so we throw the typed error class.
-    }
-  }
-
-  // Validate characters: every char must be in the standard or URL-safe
-  // alphabet, and '=' may not appear in the body (only stripped trailing
-  // padding).
-  const decoded = new Uint8Array(
-    (size >> 2) * 3 + (size % 4 ? (size % 4) - 1 : 0),
-  )
-  let acc = 0
-  let bits = 0
-  let n = 0
-  for (let i = 0; i < size; i++) {
-    const code = value.charCodeAt(i)
-    if (code === 61 /* '=' */)
-      throw new InvalidCharacterError({ character: '=' })
-    const v = characterToInteger[code]!
-    if (v === 0xff) throw new InvalidCharacterError({ character: value[i]! })
-    acc = (acc << 6) | v
-    bits += 6
-    if (bits >= 8) {
-      bits -= 8
-      decoded[n++] = (acc >>> bits) & 0xff
-    }
-  }
-  return decoded
+  return internal.toBytes(value)
 }
 
 export declare namespace toBytes {
@@ -409,29 +271,20 @@ export declare namespace toString {
   type ErrorType = toBytes.ErrorType | Errors.GlobalErrorType
 }
 
-/** Thrown when a Base64 string contains an invalid character. */
-export class InvalidCharacterError extends Errors.BaseError {
-  override readonly name = 'Base64.InvalidCharacterError'
-
-  constructor({ character }: { character: string }) {
-    super(`Invalid Base64 character: "${character}".`)
-  }
-}
+/** Thrown when a Base64 string contains a character outside its alphabet. */
+export const InvalidCharacterError = internal.InvalidCharacterError
+export type InvalidCharacterError = InstanceType<
+  typeof internal.InvalidCharacterError
+>
 
 /** Thrown when a Base64 string has an impossible length. */
-export class InvalidLengthError extends Errors.BaseError {
-  override readonly name = 'Base64.InvalidLengthError'
-
-  constructor({ length }: { length: number }) {
-    super(`Invalid Base64 input length \`${length}\`.`)
-  }
-}
-
-/** Thrown when a Base64 string contains too many trailing `=` padding characters. */
-export class InvalidPaddingError extends Errors.BaseError {
-  override readonly name = 'Base64.InvalidPaddingError'
-
-  constructor({ padding }: { padding: number }) {
-    super(`Invalid Base64 padding length \`${padding}\` (must be 0, 1, or 2).`)
-  }
-}
+export const InvalidLengthError = internal.InvalidLengthError
+export type InvalidLengthError = InstanceType<
+  typeof internal.InvalidLengthError
+>
+
+/** Thrown when a Base64 string carries more than two padding characters. */
+export const InvalidPaddingError = internal.InvalidPaddingError
+export type InvalidPaddingError = InstanceType<
+  typeof internal.InvalidPaddingError
+>

package/src/core/BinaryStateTree.ts

@@ -1,6 +1,5 @@
-import { blake3 } from '@noble/hashes/blake3.js'
-
 import * as Bytes from './Bytes.js'
+import * as engine from './internal/hash.js'
 import type { OneOf } from './internal/types.js'
 
 /** Type that defines a Binary State Tree instance. */
@@ -276,5 +275,5 @@ function bitsToBytes(bits: number[]): Bytes.Bytes {
 function hash(bytes: Bytes.Bytes | undefined): Bytes.Bytes {
   if (!bytes) return new Uint8Array(32).fill(0)
   if (!bytes.some((byte) => byte !== 0)) return new Uint8Array(32).fill(0)
-  return blake3(bytes)
+  return engine.blake3(bytes)
 }