ox 1.1.0 → 1.1.2

package/dist/node/Engine.js

@@ -1,29 +1,38 @@
 import * as CoreEngine from '../core/Engine.js';
+import * as Ed25519 from './Ed25519.js';
 import * as Hash from './Hash.js';
+import * as Keystore from './Keystore.js';
+import * as Mnemonic from './Mnemonic.js';
+import * as P256 from './P256.js';
+import * as X25519 from './X25519.js';
+export { AsyncScopeError, get, InvalidSlotValueError, reset, set, UnknownPrimitiveError, UnknownSlotError, with, } from '../core/Engine.js';
 /**
- * Creates and installs every Node.js implementation this entrypoint provides.
+ * Installs every Node.js implementation this entrypoint provides.
  *
- * The function is asynchronous to match the `ox/wasm` entrypoint, even though
- * Node's built-in cryptography needs no compilation. Call it once during
- * startup, before any cryptographic operation.
+ * Slots initialize in parallel and are installed atomically. Call this once
+ * during startup, before any cryptographic operation.
  *
  * @example
  * ```ts twoslash
  * // @noErrors
- * import { Hash } from 'ox'
- * import { Engine } from 'ox/node'
+ * import { Engine, Hash } from 'ox/node'
  *
- * await Engine.load()
+ * await Engine.install()
  *
  * Hash.sha256('0xdeadbeef')
  * ```
  *
  * @returns The engine that was installed.
  */
-export async function load() {
-    const engine = await create();
-    CoreEngine.set(engine);
-    return engine;
+export function install() {
+    return CoreEngine.install({
+        Ed25519: Ed25519.engine(),
+        Hash: Hash.engine(),
+        Keystore: Keystore.engine(),
+        Mnemonic: Mnemonic.engine(),
+        P256: P256.engine(),
+        X25519: X25519.engine(),
+    });
 }
 /**
  * Creates every Node.js implementation this entrypoint provides, without
@@ -38,14 +47,29 @@ export async function load() {
  * import { Engine, Hash } from 'ox'
  * import { Engine as NodeEngine } from 'ox/node'
  *
- * const node = await NodeEngine.create()
+ * const node = await NodeEngine.engine()
  *
  * Engine.with(node, () => Hash.sha256('0xdeadbeef'))
  * ```
  *
  * @returns An engine, ready to install.
  */
-export async function create() {
-    return { ...(await Hash.create()) };
+export async function engine() {
+    const [ed25519, hash, keystore, mnemonic, p256, x25519] = await Promise.all([
+        Ed25519.engine(),
+        Hash.engine(),
+        Keystore.engine(),
+        Mnemonic.engine(),
+        P256.engine(),
+        X25519.engine(),
+    ]);
+    return {
+        Ed25519: ed25519,
+        Hash: hash,
+        Keystore: keystore,
+        Mnemonic: mnemonic,
+        P256: p256,
+        X25519: x25519,
+    };
 }
 //# sourceMappingURL=Engine.js.map

package/dist/node/Engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"Engine.js","sourceRoot":"","sources":["../../src/node/Engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAE/C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAA;IAC7B,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtB,OAAO,MAAM,CAAA;AACf,CAAC;AAWD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;AACrC,CAAC"}
+{"version":3,"file":"Engine.js","sourceRoot":"","sources":["../../src/node/Engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAE/C,OAAO,KAAK,OAAO,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAErC,OAAO,EACL,eAAe,EACf,GAAG,EACH,qBAAqB,EACrB,KAAK,EACL,GAAG,EACH,qBAAqB,EACrB,gBAAgB,EAChB,IAAI,GACL,MAAM,mBAAmB,CAAA;AAY1B;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,UAAU,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE;QAC3B,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE;QAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACxB,CAAC,CAAA;AACJ,CAAC;AASD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,OAAO,CAAC,MAAM,EAAE;QAChB,IAAI,CAAC,MAAM,EAAE;QACb,QAAQ,CAAC,MAAM,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE;QACjB,IAAI,CAAC,MAAM,EAAE;QACb,MAAM,CAAC,MAAM,EAAE;KAChB,CAAC,CAAA;IACF,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,MAAM;KACf,CAAA;AACH,CAAC"}

package/dist/node/Hash.d.ts

@@ -1,13 +1,13 @@
 import type * as Engine from '../core/Engine.js';
 import type * as Errors from '../core/Errors.js';
+export * from '../core/Hash.js';
 /**
- * Creates Node.js implementations of the [`Hash`](/api/Hash) primitives, without
- * installing them.
+ * Creates a Node.js implementation of the [`Hash`](/api/Hash) engine slot,
+ * without installing it.
  *
- * Most callers want {@link ox#Engine.load} instead, which installs every
- * implementation this entrypoint provides. Reach for this to take the `Hash`
- * slot on its own, or to hold the implementation without touching the
- * installed engine.
+ * Most callers want [`Engine.install`](/node/crypto/Engine/install) instead,
+ * which installs every implementation this entrypoint provides. Reach for this
+ * to install or hold the `Hash` slot on its own.
  *
  * Node's `sha3-256` is not Ethereum Keccak256, so this engine deliberately
  * omits `keccak256`. Any earlier override remains installed; otherwise Ox uses
@@ -16,23 +16,21 @@ import type * as Errors from '../core/Errors.js';
  * @example
  * ```ts twoslash
  * // @noErrors
- * import { Engine, Hash } from 'ox'
- * import * as NodeHash from 'ox/node/Hash'
+ * import { Engine } from 'ox'
+ * import { Hash } from 'ox/node'
  *
- * Engine.set(await NodeHash.create())
+ * await Engine.install({ Hash: Hash.engine() })
  *
  * Hash.sha256('0xdeadbeef')
  * ```
  *
- * @returns An engine supplying the `Hash` slot.
+ * @returns The raw `Hash` engine slot.
  */
-export declare function create(): Promise<create.ReturnType>;
-export declare namespace create {
-    /** The `Hash` slot, carrying every primitive this module implements. */
+export declare function engine(): Promise<engine.ReturnType>;
+export declare namespace engine {
+    /** Every `Hash` primitive this module implements. */
     type ReturnType = {
-        Hash: {
-            [key in 'hmacSha256' | 'ripemd160' | 'sha256']-?: NonNullable<Engine.Hash[key]>;
-        };
+        [key in 'hmacSha256' | 'ripemd160' | 'sha256']-?: NonNullable<Engine.Hash[key]>;
     };
     type ErrorType = Errors.GlobalErrorType;
 }

package/dist/node/Hash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Hash.d.ts","sourceRoot":"","sources":["../../src/node/Hash.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAYnD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,wEAAwE;IACxE,KAAK,UAAU,GAAG;QAChB,IAAI,EAAE;aACH,GAAG,IAAI,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC,GAAG,WAAW,CAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACjB;SACF,CAAA;KACF,CAAA;IAED,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC"}
+{"version":3,"file":"Hash.d.ts","sourceRoot":"","sources":["../../src/node/Hash.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAEhD,cAAc,iBAAiB,CAAA;AAE/B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAQnD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,qDAAqD;IACrD,KAAK,UAAU,GAAG;SACf,GAAG,IAAI,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC,GAAG,WAAW,CAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACjB;KACF,CAAA;IAED,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC"}

package/dist/node/Hash.js

@@ -1,12 +1,12 @@
 import * as crypto from 'node:crypto';
+export * from '../core/Hash.js';
 /**
- * Creates Node.js implementations of the [`Hash`](/api/Hash) primitives, without
- * installing them.
+ * Creates a Node.js implementation of the [`Hash`](/api/Hash) engine slot,
+ * without installing it.
  *
- * Most callers want {@link ox#Engine.load} instead, which installs every
- * implementation this entrypoint provides. Reach for this to take the `Hash`
- * slot on its own, or to hold the implementation without touching the
- * installed engine.
+ * Most callers want [`Engine.install`](/node/crypto/Engine/install) instead,
+ * which installs every implementation this entrypoint provides. Reach for this
+ * to install or hold the `Hash` slot on its own.
  *
  * Node's `sha3-256` is not Ethereum Keccak256, so this engine deliberately
  * omits `keccak256`. Any earlier override remains installed; otherwise Ox uses
@@ -15,23 +15,21 @@ import * as crypto from 'node:crypto';
  * @example
  * ```ts twoslash
  * // @noErrors
- * import { Engine, Hash } from 'ox'
- * import * as NodeHash from 'ox/node/Hash'
+ * import { Engine } from 'ox'
+ * import { Hash } from 'ox/node'
  *
- * Engine.set(await NodeHash.create())
+ * await Engine.install({ Hash: Hash.engine() })
  *
  * Hash.sha256('0xdeadbeef')
  * ```
  *
- * @returns An engine supplying the `Hash` slot.
+ * @returns The raw `Hash` engine slot.
  */
-export function create() {
+export function engine() {
     return Promise.resolve({
-        Hash: {
-            hmacSha256: (key, message) => new Uint8Array(crypto.createHmac('sha256', key).update(message).digest()),
-            ripemd160: (input) => new Uint8Array(crypto.hash('ripemd160', input, 'buffer')),
-            sha256: (input) => new Uint8Array(crypto.hash('sha256', input, 'buffer')),
-        },
+        hmacSha256: (key, message) => new Uint8Array(crypto.createHmac('sha256', key).update(message).digest()),
+        ripemd160: (input) => new Uint8Array(crypto.hash('ripemd160', input, 'buffer')),
+        sha256: (input) => new Uint8Array(crypto.hash('sha256', input, 'buffer')),
     });
 }
 //# sourceMappingURL=Hash.js.map

package/dist/node/Hash.js.map

@@ -1 +1 @@
-{"version":3,"file":"Hash.js","sourceRoot":"","sources":["../../src/node/Hash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,IAAI,EAAE;YACJ,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAC3B,IAAI,UAAU,CACZ,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAC1D;YACH,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;SAC1E;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"Hash.js","sourceRoot":"","sources":["../../src/node/Hash.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC,cAAc,iBAAiB,CAAA;AAE/B;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAC3B,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3E,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;KAC1E,CAAC,CAAA;AACJ,CAAC"}

package/dist/node/Keystore.d.ts

@@ -0,0 +1,36 @@
+import type * as Engine from '../core/Engine.js';
+import type * as Errors from '../core/Errors.js';
+export * from '../core/Keystore.js';
+/**
+ * Creates a Node.js implementation of the [`Keystore`](/api/Keystore) engine
+ * slot, without installing it.
+ *
+ * Most callers want [`Engine.install`](/node/crypto/Engine/install) instead,
+ * which installs every implementation this entrypoint provides. Reach for this
+ * to install or hold the `Keystore` slot on its own.
+ *
+ * This engine deliberately omits scrypt. OpenSSL rejects Ox's default scrypt
+ * parameter shape, so installing it would make valid existing calls fail.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Keystore } from 'ox/node'
+ *
+ * await Engine.install({ Keystore: Keystore.engine() })
+ *
+ * Keystore.pbkdf2({ password: 'testpassword' })
+ * ```
+ *
+ * @returns The raw `Keystore` engine slot.
+ */
+export declare function engine(): Promise<engine.ReturnType>;
+export declare namespace engine {
+    /** Every `Keystore` primitive this module implements. */
+    type ReturnType = {
+        [key in 'aesCtrDecrypt' | 'aesCtrEncrypt' | 'pbkdf2Sha256' | 'pbkdf2Sha256Async']-?: NonNullable<Engine.Keystore[key]>;
+    };
+    type ErrorType = Errors.GlobalErrorType;
+}
+//# sourceMappingURL=Keystore.d.ts.map

package/dist/node/Keystore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Keystore.d.ts","sourceRoot":"","sources":["../../src/node/Keystore.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAEhD,cAAc,qBAAqB,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAqCnD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,yDAAyD;IACzD,KAAK,UAAU,GAAG;SACf,GAAG,IACA,eAAe,GACf,eAAe,GACf,cAAc,GACd,mBAAmB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KAC9D,CAAA;IAED,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC"}

package/dist/node/Keystore.js

@@ -0,0 +1,72 @@
+import * as crypto from 'node:crypto';
+export * from '../core/Keystore.js';
+/**
+ * Creates a Node.js implementation of the [`Keystore`](/api/Keystore) engine
+ * slot, without installing it.
+ *
+ * Most callers want [`Engine.install`](/node/crypto/Engine/install) instead,
+ * which installs every implementation this entrypoint provides. Reach for this
+ * to install or hold the `Keystore` slot on its own.
+ *
+ * This engine deliberately omits scrypt. OpenSSL rejects Ox's default scrypt
+ * parameter shape, so installing it would make valid existing calls fail.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Keystore } from 'ox/node'
+ *
+ * await Engine.install({ Keystore: Keystore.engine() })
+ *
+ * Keystore.pbkdf2({ password: 'testpassword' })
+ * ```
+ *
+ * @returns The raw `Keystore` engine slot.
+ */
+export function engine() {
+    return Promise.resolve({
+        aesCtrDecrypt: (key, iv, data) => {
+            const cipher = crypto.createDecipheriv(`aes-${key.length * 8}-ctr`, key, iv);
+            return cipherData(cipher, data);
+        },
+        aesCtrEncrypt: (key, iv, data) => {
+            const cipher = crypto.createCipheriv(`aes-${key.length * 8}-ctr`, key, iv);
+            return cipherData(cipher, data);
+        },
+        pbkdf2Sha256: (password, salt, options) => copyAndClear(crypto.pbkdf2Sync(password, salt, options.c, options.dkLen, 'sha256')),
+        pbkdf2Sha256Async: (password, salt, options) => new Promise((resolve, reject) => {
+            crypto.pbkdf2(password, salt, options.c, options.dkLen, 'sha256', (error, key) => {
+                if (error)
+                    return reject(error);
+                try {
+                    resolve(copyAndClear(key));
+                }
+                catch (error) {
+                    reject(error);
+                }
+            });
+        }),
+    });
+}
+function cipherData(cipher, data) {
+    const chunks = [];
+    try {
+        chunks.push(cipher.update(data));
+        chunks.push(cipher.final());
+        return copyAndClear(Buffer.concat(chunks));
+    }
+    finally {
+        for (const chunk of chunks)
+            chunk.fill(0);
+    }
+}
+function copyAndClear(value) {
+    try {
+        return Uint8Array.from(value);
+    }
+    finally {
+        value.fill(0);
+    }
+}
+//# sourceMappingURL=Keystore.js.map

package/dist/node/Keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Keystore.js","sourceRoot":"","sources":["../../src/node/Keystore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC,cAAc,qBAAqB,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,CACpC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAC3B,GAAG,EACH,EAAE,CACH,CAAA;YACD,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;QACD,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;YAC1E,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;QACD,YAAY,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CACxC,YAAY,CACV,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CACtE;QACH,iBAAiB,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC7C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,CAAC,MAAM,CACX,QAAQ,EACR,IAAI,EACJ,OAAO,CAAC,CAAC,EACT,OAAO,CAAC,KAAK,EACb,QAAQ,EACR,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACb,IAAI,KAAK;oBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC/B,IAAI,CAAC;oBACH,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,KAAK,CAAC,CAAA;gBACf,CAAC;YACH,CAAC,CACF,CAAA;QACH,CAAC,CAAC;KACL,CAAC,CAAA;AACJ,CAAC;AAeD,SAAS,UAAU,CACjB,MAA2C,EAC3C,IAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QAC3B,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC5C,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/node/Mnemonic.d.ts

@@ -0,0 +1,35 @@
+import type * as Engine from '../core/Engine.js';
+import type * as Errors from '../core/Errors.js';
+export * from '../core/Mnemonic.js';
+/**
+ * Creates a Node.js implementation of the [`Mnemonic`](/api/Mnemonic) engine
+ * slot, without installing it.
+ *
+ * Most callers want [`Engine.install`](/node/crypto/Engine/install) instead,
+ * which installs every implementation this entrypoint provides. Reach for this
+ * to install or hold the `Mnemonic` slot on its own.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Mnemonic } from 'ox/node'
+ *
+ * await Engine.install({ Mnemonic: Mnemonic.engine() })
+ *
+ * Mnemonic.toSeed(
+ *   'test test test test test test test test test test test junk'
+ * )
+ * ```
+ *
+ * @returns The raw `Mnemonic` engine slot.
+ */
+export declare function engine(): Promise<engine.ReturnType>;
+export declare namespace engine {
+    /** Every `Mnemonic` primitive this module implements. */
+    type ReturnType = {
+        [key in 'toSeed']-?: NonNullable<Engine.Mnemonic[key]>;
+    };
+    type ErrorType = Errors.GlobalErrorType;
+}
+//# sourceMappingURL=Mnemonic.d.ts.map

package/dist/node/Mnemonic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Mnemonic.d.ts","sourceRoot":"","sources":["../../src/node/Mnemonic.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAEhD,cAAc,qBAAqB,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAqBnD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,yDAAyD;IACzD,KAAK,UAAU,GAAG;SACf,GAAG,IAAI,QAAQ,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACvD,CAAA;IAED,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC"}

package/dist/node/Mnemonic.js

@@ -0,0 +1,46 @@
+import * as crypto from 'node:crypto';
+export * from '../core/Mnemonic.js';
+/**
+ * Creates a Node.js implementation of the [`Mnemonic`](/api/Mnemonic) engine
+ * slot, without installing it.
+ *
+ * Most callers want [`Engine.install`](/node/crypto/Engine/install) instead,
+ * which installs every implementation this entrypoint provides. Reach for this
+ * to install or hold the `Mnemonic` slot on its own.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { Mnemonic } from 'ox/node'
+ *
+ * await Engine.install({ Mnemonic: Mnemonic.engine() })
+ *
+ * Mnemonic.toSeed(
+ *   'test test test test test test test test test test test junk'
+ * )
+ * ```
+ *
+ * @returns The raw `Mnemonic` engine slot.
+ */
+export function engine() {
+    return Promise.resolve({
+        toSeed: (mnemonic, passphrase = '') => {
+            if (typeof mnemonic !== 'string')
+                throw new TypeError(`invalid mnemonic type: ${typeof mnemonic}`);
+            const normalized = mnemonic.normalize('NFKD');
+            if (![12, 15, 18, 21, 24].includes(normalized.split(' ').length))
+                throw new Error('Invalid mnemonic');
+            return copyAndClear(crypto.pbkdf2Sync(normalized, `mnemonic${passphrase}`.normalize('NFKD'), 2048, 64, 'sha512'));
+        },
+    });
+}
+function copyAndClear(value) {
+    try {
+        return Uint8Array.from(value);
+    }
+    finally {
+        value.fill(0);
+    }
+}
+//# sourceMappingURL=Mnemonic.js.map

package/dist/node/Mnemonic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Mnemonic.js","sourceRoot":"","sources":["../../src/node/Mnemonic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC,cAAc,qBAAqB,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,UAAU,GAAG,EAAE,EAAE,EAAE;YACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAC9B,MAAM,IAAI,SAAS,CAAC,0BAA0B,OAAO,QAAQ,EAAE,CAAC,CAAA;YAElE,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;YAErC,OAAO,YAAY,CACjB,MAAM,CAAC,UAAU,CACf,UAAU,EACV,WAAW,UAAU,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EACzC,IAAI,EACJ,EAAE,EACF,QAAQ,CACT,CACF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAWD,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/node/P256.d.ts

@@ -0,0 +1,32 @@
+import type * as Engine from '../core/Engine.js';
+import type * as Errors from '../core/Errors.js';
+export * from '../core/P256.js';
+/**
+ * Creates a Node.js implementation of the [`P256`](/api/P256) engine slot,
+ * without installing it.
+ *
+ * Node's other P256 operations do not reproduce Ox's recovered-signature and
+ * compressed-shared-point contracts, so they remain on Ox's defaults.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { P256 } from 'ox/node'
+ *
+ * await Engine.install({ P256: P256.engine() })
+ *
+ * P256.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @returns The raw `P256` engine slot.
+ */
+export declare function engine(): Promise<engine.ReturnType>;
+export declare namespace engine {
+    /** Every `P256` primitive this module implements. */
+    type ReturnType = {
+        getPublicKey: NonNullable<Engine.Ecdsa['getPublicKey']>;
+    };
+    type ErrorType = Errors.GlobalErrorType;
+}
+//# sourceMappingURL=P256.d.ts.map

package/dist/node/P256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"P256.d.ts","sourceRoot":"","sources":["../../src/node/P256.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAEhD,cAAc,iBAAiB,CAAA;AAE/B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAYnD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,qDAAqD;IACrD,KAAK,UAAU,GAAG;QAChB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAA;KACxD,CAAA;IAED,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC"}

package/dist/node/P256.js

@@ -0,0 +1,34 @@
+import * as crypto from 'node:crypto';
+export * from '../core/P256.js';
+/**
+ * Creates a Node.js implementation of the [`P256`](/api/P256) engine slot,
+ * without installing it.
+ *
+ * Node's other P256 operations do not reproduce Ox's recovered-signature and
+ * compressed-shared-point contracts, so they remain on Ox's defaults.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { P256 } from 'ox/node'
+ *
+ * await Engine.install({ P256: P256.engine() })
+ *
+ * P256.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @returns The raw `P256` engine slot.
+ */
+export function engine() {
+    return Promise.resolve({
+        getPublicKey: (privateKey) => {
+            if (privateKey.length !== 32)
+                throw new RangeError(`P256 private key must be 32 bytes, got ${privateKey.length}`);
+            const ecdh = crypto.createECDH('prime256v1');
+            ecdh.setPrivateKey(privateKey);
+            return new Uint8Array(ecdh.getPublicKey(undefined, 'uncompressed'));
+        },
+    });
+}
+//# sourceMappingURL=P256.js.map

package/dist/node/P256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"P256.js","sourceRoot":"","sources":["../../src/node/P256.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC,cAAc,iBAAiB,CAAA;AAE/B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;YAC3B,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE;gBAC1B,MAAM,IAAI,UAAU,CAClB,0CAA0C,UAAU,CAAC,MAAM,EAAE,CAC9D,CAAA;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;YAC5C,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;YAC9B,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAA;QACrE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/node/X25519.d.ts

@@ -0,0 +1,31 @@
+import type * as Engine from '../core/Engine.js';
+import type * as Errors from '../core/Errors.js';
+export * from '../core/X25519.js';
+/**
+ * Creates a Node.js implementation of the [`X25519`](/api/X25519) engine slot,
+ * without installing it.
+ *
+ * Random key generation remains on Ox's default implementation.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { X25519 } from 'ox/node'
+ *
+ * await Engine.install({ X25519: X25519.engine() })
+ *
+ * X25519.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @returns The raw `X25519` engine slot.
+ */
+export declare function engine(): Promise<engine.ReturnType>;
+export declare namespace engine {
+    /** Every `X25519` primitive this module implements. */
+    type ReturnType = {
+        [key in 'getPublicKey' | 'getSharedSecret']-?: NonNullable<Engine.Ecdh[key]>;
+    };
+    type ErrorType = Errors.GlobalErrorType;
+}
+//# sourceMappingURL=X25519.d.ts.map

package/dist/node/X25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"X25519.d.ts","sourceRoot":"","sources":["../../src/node/X25519.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAA;AAEhD,cAAc,mBAAmB,CAAA;AAKjC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAYnD;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,uDAAuD;IACvD,KAAK,UAAU,GAAG;SACf,GAAG,IAAI,cAAc,GAAG,iBAAiB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;KAC7E,CAAA;IAED,KAAK,SAAS,GAAG,MAAM,CAAC,eAAe,CAAA;CACxC"}

package/dist/node/X25519.js

@@ -0,0 +1,71 @@
+import * as crypto from 'node:crypto';
+export * from '../core/X25519.js';
+const privateKeyPrefix = Buffer.from('302e020100300506032b656e04220420', 'hex');
+const publicKeyPrefix = Buffer.from('302a300506032b656e032100', 'hex');
+/**
+ * Creates a Node.js implementation of the [`X25519`](/api/X25519) engine slot,
+ * without installing it.
+ *
+ * Random key generation remains on Ox's default implementation.
+ *
+ * @example
+ * ```ts twoslash
+ * // @noErrors
+ * import { Engine } from 'ox'
+ * import { X25519 } from 'ox/node'
+ *
+ * await Engine.install({ X25519: X25519.engine() })
+ *
+ * X25519.getPublicKey({ privateKey: '0x...' })
+ * ```
+ *
+ * @returns The raw `X25519` engine slot.
+ */
+export function engine() {
+    return Promise.resolve({
+        getPublicKey: (privateKey) => rawPublicKey(crypto.createPublicKey(toPrivateKey(privateKey))),
+        getSharedSecret: (privateKey, publicKey) => copyAndClear(crypto.diffieHellman({
+            privateKey: toPrivateKey(privateKey),
+            publicKey: toPublicKey(publicKey),
+        })),
+    });
+}
+function copyAndClear(value) {
+    try {
+        return Uint8Array.from(value);
+    }
+    finally {
+        value.fill(0);
+    }
+}
+function assertLength(key, type) {
+    if (key.length !== 32)
+        throw new RangeError(`X25519 ${type} key must be 32 bytes, got ${key.length}`);
+}
+function rawPublicKey(publicKey) {
+    const der = publicKey.export({ format: 'der', type: 'spki' });
+    return Uint8Array.from(der.subarray(-32));
+}
+function toPrivateKey(privateKey) {
+    assertLength(privateKey, 'private');
+    const der = Buffer.concat([privateKeyPrefix, privateKey]);
+    try {
+        return crypto.createPrivateKey({
+            format: 'der',
+            key: der,
+            type: 'pkcs8',
+        });
+    }
+    finally {
+        der.fill(0);
+    }
+}
+function toPublicKey(publicKey) {
+    assertLength(publicKey, 'public');
+    return crypto.createPublicKey({
+        format: 'der',
+        key: Buffer.concat([publicKeyPrefix, publicKey]),
+        type: 'spki',
+    });
+}
+//# sourceMappingURL=X25519.js.map

package/dist/node/X25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"X25519.js","sourceRoot":"","sources":["../../src/node/X25519.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC,cAAc,mBAAmB,CAAA;AAEjC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAA;AAC/E,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;AAEtE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE,CAC3B,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,eAAe,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CACzC,YAAY,CACV,MAAM,CAAC,aAAa,CAAC;YACnB,UAAU,EAAE,YAAY,CAAC,UAAU,CAAC;YACpC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC;SAClC,CAAC,CACH;KACJ,CAAC,CAAA;AACJ,CAAC;AAWD,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAe,EAAE,IAA0B;IAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QACnB,MAAM,IAAI,UAAU,CAClB,UAAU,IAAI,8BAA8B,GAAG,CAAC,MAAM,EAAE,CACzD,CAAA;AACL,CAAC;AAED,SAAS,YAAY,CAAC,SAA2B;IAC/C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7D,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,UAAsB;IAC1C,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAA;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,gBAAgB,CAAC;YAC7B,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,OAAO;SACd,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,SAAqB;IACxC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IACjC,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,EAAE,MAAM;KACb,CAAC,CAAA;AACJ,CAAC"}