quidproquo-core 0.1.28 → 0.1.29

package/lib/commonjs/utils/uuid/generateUuid.d.ts

@@ -1,12 +1,16 @@
 /**
  * Generates a new random (version 4) UUID.
  *
- * This is the single place in quidproquo to mint a v4 UUID. It uses the native
- * `crypto.randomUUID()` which is available in Node 20+ and all modern browsers
- * (secure contexts), so it works across both backend and frontend packages with
- * no external dependency. Centralising it here means the underlying source can be
- * swapped in one spot if that ever changes.
+ * This is the single place in quidproquo to mint a v4 UUID, so it works across
+ * both backend and frontend packages with no external dependency.
+ *
+ * It prefers the native `crypto.randomUUID()` (Node 20+, and browsers in a
+ * SECURE context: https or localhost). Browsers deliberately hide that method on
+ * plain-http origins, which is exactly where a self-hosted app on a LAN ip lives
+ * (e.g. http://192.168.x.x), so it falls back to assembling the same v4 layout
+ * from `crypto.getRandomValues()`, which is available everywhere.
  *
  * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.
  */
 export declare function generateUuid(): string;
+export declare function generateUuidFromRandomValues(cryptoApi: Pick<Crypto, 'getRandomValues'>): string;

package/lib/commonjs/utils/uuid/generateUuid.js

@@ -1,18 +1,40 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateUuid = generateUuid;
+exports.generateUuidFromRandomValues = generateUuidFromRandomValues;
 /**
  * Generates a new random (version 4) UUID.
  *
- * This is the single place in quidproquo to mint a v4 UUID. It uses the native
- * `crypto.randomUUID()` which is available in Node 20+ and all modern browsers
- * (secure contexts), so it works across both backend and frontend packages with
- * no external dependency. Centralising it here means the underlying source can be
- * swapped in one spot if that ever changes.
+ * This is the single place in quidproquo to mint a v4 UUID, so it works across
+ * both backend and frontend packages with no external dependency.
+ *
+ * It prefers the native `crypto.randomUUID()` (Node 20+, and browsers in a
+ * SECURE context: https or localhost). Browsers deliberately hide that method on
+ * plain-http origins, which is exactly where a self-hosted app on a LAN ip lives
+ * (e.g. http://192.168.x.x), so it falls back to assembling the same v4 layout
+ * from `crypto.getRandomValues()`, which is available everywhere.
  *
  * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.
  */
 function generateUuid() {
-    return globalThis.crypto.randomUUID();
+    // lib.dom types the global as always present; older runtimes (Node before 19,
+    // some workers) don't expose it, so treat it as optional and fail loudly. No
+    // Math.random() last resort: a guessable id is worse than no id.
+    const cryptoApi = globalThis.crypto;
+    if (typeof (cryptoApi === null || cryptoApi === void 0 ? void 0 : cryptoApi.randomUUID) === 'function') {
+        return cryptoApi.randomUUID();
+    }
+    if (typeof (cryptoApi === null || cryptoApi === void 0 ? void 0 : cryptoApi.getRandomValues) !== 'function') {
+        throw new Error('generateUuid: no Web Crypto API available in this environment');
+    }
+    return generateUuidFromRandomValues(cryptoApi);
+}
+// RFC 4122 v4 from 16 random bytes: version nibble 4 in byte 6, variant 10xx in byte 8.
+function generateUuidFromRandomValues(cryptoApi) {
+    const bytes = cryptoApi.getRandomValues(new Uint8Array(16));
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
 //# sourceMappingURL=generateUuid.js.map

package/lib/commonjs/utils/uuid/generateUuid.js.map

@@ -1 +1 @@
-{"version":3,"file":"generateUuid.js","sourceRoot":"","sources":["../../../../src/utils/uuid/generateUuid.ts"],"names":[],"mappings":";;AAWA,oCAEC;AAbD;;;;;;;;;;GAUG;AACH,SAAgB,YAAY;IAC1B,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC","sourcesContent":["/**\n * Generates a new random (version 4) UUID.\n *\n * This is the single place in quidproquo to mint a v4 UUID. It uses the native\n * `crypto.randomUUID()` which is available in Node 20+ and all modern browsers\n * (secure contexts), so it works across both backend and frontend packages with\n * no external dependency. Centralising it here means the underlying source can be\n * swapped in one spot if that ever changes.\n *\n * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.\n */\nexport function generateUuid(): string {\n  return globalThis.crypto.randomUUID();\n}\n"]}
+{"version":3,"file":"generateUuid.js","sourceRoot":"","sources":["../../../../src/utils/uuid/generateUuid.ts"],"names":[],"mappings":";;AAcA,oCAeC;AAGD,oEASC;AAzCD;;;;;;;;;;;;;GAaG;AACH,SAAgB,YAAY;IAC1B,8EAA8E;IAC9E,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,SAAS,GAAG,UAAU,CAAC,MAA4B,CAAC;IAE1D,IAAI,OAAO,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,UAAU,CAAA,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,eAAe,CAAA,KAAK,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,4BAA4B,CAAC,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,wFAAwF;AACxF,SAAgB,4BAA4B,CAAC,SAA0C;IACrF,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5D,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErF,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC","sourcesContent":["/**\n * Generates a new random (version 4) UUID.\n *\n * This is the single place in quidproquo to mint a v4 UUID, so it works across\n * both backend and frontend packages with no external dependency.\n *\n * It prefers the native `crypto.randomUUID()` (Node 20+, and browsers in a\n * SECURE context: https or localhost). Browsers deliberately hide that method on\n * plain-http origins, which is exactly where a self-hosted app on a LAN ip lives\n * (e.g. http://192.168.x.x), so it falls back to assembling the same v4 layout\n * from `crypto.getRandomValues()`, which is available everywhere.\n *\n * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.\n */\nexport function generateUuid(): string {\n  // lib.dom types the global as always present; older runtimes (Node before 19,\n  // some workers) don't expose it, so treat it as optional and fail loudly. No\n  // Math.random() last resort: a guessable id is worse than no id.\n  const cryptoApi = globalThis.crypto as Crypto | undefined;\n\n  if (typeof cryptoApi?.randomUUID === 'function') {\n    return cryptoApi.randomUUID();\n  }\n\n  if (typeof cryptoApi?.getRandomValues !== 'function') {\n    throw new Error('generateUuid: no Web Crypto API available in this environment');\n  }\n\n  return generateUuidFromRandomValues(cryptoApi);\n}\n\n// RFC 4122 v4 from 16 random bytes: version nibble 4 in byte 6, variant 10xx in byte 8.\nexport function generateUuidFromRandomValues(cryptoApi: Pick<Crypto, 'getRandomValues'>): string {\n  const bytes = cryptoApi.getRandomValues(new Uint8Array(16));\n\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n\n  const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');\n\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n"]}

package/lib/esm/utils/uuid/generateUuid.d.ts

@@ -1,12 +1,16 @@
 /**
  * Generates a new random (version 4) UUID.
  *
- * This is the single place in quidproquo to mint a v4 UUID. It uses the native
- * `crypto.randomUUID()` which is available in Node 20+ and all modern browsers
- * (secure contexts), so it works across both backend and frontend packages with
- * no external dependency. Centralising it here means the underlying source can be
- * swapped in one spot if that ever changes.
+ * This is the single place in quidproquo to mint a v4 UUID, so it works across
+ * both backend and frontend packages with no external dependency.
+ *
+ * It prefers the native `crypto.randomUUID()` (Node 20+, and browsers in a
+ * SECURE context: https or localhost). Browsers deliberately hide that method on
+ * plain-http origins, which is exactly where a self-hosted app on a LAN ip lives
+ * (e.g. http://192.168.x.x), so it falls back to assembling the same v4 layout
+ * from `crypto.getRandomValues()`, which is available everywhere.
  *
  * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.
  */
 export declare function generateUuid(): string;
+export declare function generateUuidFromRandomValues(cryptoApi: Pick<Crypto, 'getRandomValues'>): string;

package/lib/esm/utils/uuid/generateUuid.js

@@ -1,15 +1,36 @@
 /**
  * Generates a new random (version 4) UUID.
  *
- * This is the single place in quidproquo to mint a v4 UUID. It uses the native
- * `crypto.randomUUID()` which is available in Node 20+ and all modern browsers
- * (secure contexts), so it works across both backend and frontend packages with
- * no external dependency. Centralising it here means the underlying source can be
- * swapped in one spot if that ever changes.
+ * This is the single place in quidproquo to mint a v4 UUID, so it works across
+ * both backend and frontend packages with no external dependency.
+ *
+ * It prefers the native `crypto.randomUUID()` (Node 20+, and browsers in a
+ * SECURE context: https or localhost). Browsers deliberately hide that method on
+ * plain-http origins, which is exactly where a self-hosted app on a LAN ip lives
+ * (e.g. http://192.168.x.x), so it falls back to assembling the same v4 layout
+ * from `crypto.getRandomValues()`, which is available everywhere.
  *
  * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.
  */
 export function generateUuid() {
-    return globalThis.crypto.randomUUID();
+    // lib.dom types the global as always present; older runtimes (Node before 19,
+    // some workers) don't expose it, so treat it as optional and fail loudly. No
+    // Math.random() last resort: a guessable id is worse than no id.
+    const cryptoApi = globalThis.crypto;
+    if (typeof cryptoApi?.randomUUID === 'function') {
+        return cryptoApi.randomUUID();
+    }
+    if (typeof cryptoApi?.getRandomValues !== 'function') {
+        throw new Error('generateUuid: no Web Crypto API available in this environment');
+    }
+    return generateUuidFromRandomValues(cryptoApi);
+}
+// RFC 4122 v4 from 16 random bytes: version nibble 4 in byte 6, variant 10xx in byte 8.
+export function generateUuidFromRandomValues(cryptoApi) {
+    const bytes = cryptoApi.getRandomValues(new Uint8Array(16));
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
 //# sourceMappingURL=generateUuid.js.map

package/lib/esm/utils/uuid/generateUuid.js.map

@@ -1 +1 @@
-{"version":3,"file":"generateUuid.js","sourceRoot":"","sources":["../../../../src/utils/uuid/generateUuid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC","sourcesContent":["/**\n * Generates a new random (version 4) UUID.\n *\n * This is the single place in quidproquo to mint a v4 UUID. It uses the native\n * `crypto.randomUUID()` which is available in Node 20+ and all modern browsers\n * (secure contexts), so it works across both backend and frontend packages with\n * no external dependency. Centralising it here means the underlying source can be\n * swapped in one spot if that ever changes.\n *\n * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.\n */\nexport function generateUuid(): string {\n  return globalThis.crypto.randomUUID();\n}\n"]}
+{"version":3,"file":"generateUuid.js","sourceRoot":"","sources":["../../../../src/utils/uuid/generateUuid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY;IAC1B,8EAA8E;IAC9E,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,SAAS,GAAG,UAAU,CAAC,MAA4B,CAAC;IAE1D,IAAI,OAAO,SAAS,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,OAAO,SAAS,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,4BAA4B,CAAC,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,4BAA4B,CAAC,SAA0C;IACrF,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5D,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErF,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC","sourcesContent":["/**\n * Generates a new random (version 4) UUID.\n *\n * This is the single place in quidproquo to mint a v4 UUID, so it works across\n * both backend and frontend packages with no external dependency.\n *\n * It prefers the native `crypto.randomUUID()` (Node 20+, and browsers in a\n * SECURE context: https or localhost). Browsers deliberately hide that method on\n * plain-http origins, which is exactly where a self-hosted app on a LAN ip lives\n * (e.g. http://192.168.x.x), so it falls back to assembling the same v4 layout\n * from `crypto.getRandomValues()`, which is available everywhere.\n *\n * @returns {string} A randomly generated v4 UUID, e.g. `109156be-c4fb-41ea-b1b4-efe1671c5836`.\n */\nexport function generateUuid(): string {\n  // lib.dom types the global as always present; older runtimes (Node before 19,\n  // some workers) don't expose it, so treat it as optional and fail loudly. No\n  // Math.random() last resort: a guessable id is worse than no id.\n  const cryptoApi = globalThis.crypto as Crypto | undefined;\n\n  if (typeof cryptoApi?.randomUUID === 'function') {\n    return cryptoApi.randomUUID();\n  }\n\n  if (typeof cryptoApi?.getRandomValues !== 'function') {\n    throw new Error('generateUuid: no Web Crypto API available in this environment');\n  }\n\n  return generateUuidFromRandomValues(cryptoApi);\n}\n\n// RFC 4122 v4 from 16 random bytes: version nibble 4 in byte 6, variant 10xx in byte 8.\nexport function generateUuidFromRandomValues(cryptoApi: Pick<Crypto, 'getRandomValues'>): string {\n  const bytes = cryptoApi.getRandomValues(new Uint8Array(16));\n\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n\n  const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');\n\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quidproquo-core",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "description": "",
   "main": "./lib/commonjs/index.js",
   "module": "./lib/esm/index.js",
@@ -36,7 +36,7 @@
   "homepage": "https://github.com/qpqjs/quidproquo#readme",
   "devDependencies": {
     "@types/node": "^24.2.1",
-    "quidproquo-tsconfig": "0.1.28",
+    "quidproquo-tsconfig": "0.1.29",
     "typescript": "^5.8.2"
   },
   "dependencies": {