securequ 1.1.19 → 1.1.21

package/include/compress.js.map

@@ -1 +1 @@
-{"version":3,"file":"compress.js","sources":["../../src/include/compress.ts"],"sourcesContent":["import sodium from \"libsodium-wrappers\";\r\nimport { compressSync, decompressSync } from \"fflate\";\r\nimport { unpack, pack } from \"msgpackr\";\r\nimport crypto from \"./crypto\";\r\n\r\n/* ================================\r\n   Buffer-level\r\n================================ */\r\nasync function compressBuffer(input: any): Promise<Uint8Array> {\r\n   await crypto.init();\r\n   const encoded = pack(input);\r\n   return compressSync(encoded);\r\n}\r\n\r\nasync function decompressBuffer(input: Uint8Array): Promise<any> {\r\n   await crypto.init();\r\n   const decompressed = decompressSync(input);\r\n   return unpack(decompressed);\r\n}\r\n\r\n/* ================================\r\n   String-level\r\n================================ */\r\nasync function compress(input: any): Promise<string> {\r\n   await crypto.init();\r\n   const compressed = await compressBuffer(input);\r\n   return sodium.to_base64(\r\n      compressed,\r\n      sodium.base64_variants.ORIGINAL\r\n   );\r\n}\r\n\r\nasync function decompress(base64Str: string): Promise<any> {\r\n   await crypto.init();\r\n   const compressed = sodium.from_base64(\r\n      base64Str,\r\n      sodium.base64_variants.ORIGINAL\r\n   );\r\n   return decompressBuffer(compressed);\r\n}\r\n\r\nconst compresor = {\r\n   compressBuffer,\r\n   decompressBuffer,\r\n   compress,\r\n   decompress\r\n}\r\n\r\nexport default compresor"],"names":[],"mappings":";;;;;AAKA;;AAEmC;AACnC,eAAe,cAAc,CAAC,KAAU,EAAA;AACrC,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACpB,IAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,IAAA,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,eAAe,gBAAgB,CAAC,KAAiB,EAAA;AAC9C,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACpB,IAAA,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;AAC3C,IAAA,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;AAC/B,CAAC;AAED;;AAEmC;AACnC,eAAe,QAAQ,CAAC,KAAU,EAAA;AAC/B,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACpB,IAAA,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/C,IAAA,OAAO,MAAM,CAAC,SAAS,CACpB,UAAU,EACV,MAAM,CAAC,eAAe,CAAC,QAAQ,CACjC,CAAC;AACL,CAAC;AAED,eAAe,UAAU,CAAC,SAAiB,EAAA;AACxC,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;AACpB,IAAA,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAClC,SAAS,EACT,MAAM,CAAC,eAAe,CAAC,QAAQ,CACjC,CAAC;AACF,IAAA,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,SAAS,GAAG;IACf,cAAc;IACd,gBAAgB;IAChB,QAAQ;IACR,UAAU;;;;;"}
+{"version":3,"file":"compress.js","sources":["../../src/include/compress.ts"],"sourcesContent":["import sodium from \"libsodium-wrappers\";\nimport { compressSync, decompressSync } from \"fflate\";\nimport { unpack, pack } from \"msgpackr\";\nimport crypto from \"./crypto\";\n\n/* ================================\n   Buffer-level\n================================ */\nasync function compressBuffer(input: any): Promise<Uint8Array> {\n   await crypto.init();\n   const encoded = pack(input);\n   return compressSync(encoded);\n}\n\nasync function decompressBuffer(input: Uint8Array): Promise<any> {\n   await crypto.init();\n   const decompressed = decompressSync(input);\n   return unpack(decompressed);\n}\n\n/* ================================\n   String-level\n================================ */\nasync function compress(input: any): Promise<string> {\n   await crypto.init();\n   const compressed = await compressBuffer(input);\n   return sodium.to_base64(\n      compressed,\n      sodium.base64_variants.ORIGINAL\n   );\n}\n\nasync function decompress(base64Str: string): Promise<any> {\n   await crypto.init();\n   const compressed = sodium.from_base64(\n      base64Str,\n      sodium.base64_variants.ORIGINAL\n   );\n   return decompressBuffer(compressed);\n}\n\nconst compresor = {\n   compressBuffer,\n   decompressBuffer,\n   compress,\n   decompress\n}\n\nexport default compresor"],"names":[],"mappings":";;;;;AAKA;;AAEmC;AACnC,eAAe,cAAc,CAAC,KAAU,EAAA;AACrC,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE;AACnB,IAAA,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;AAC3B,IAAA,OAAO,YAAY,CAAC,OAAO,CAAC;AAC/B;AAEA,eAAe,gBAAgB,CAAC,KAAiB,EAAA;AAC9C,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE;AACnB,IAAA,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC;AAC1C,IAAA,OAAO,MAAM,CAAC,YAAY,CAAC;AAC9B;AAEA;;AAEmC;AACnC,eAAe,QAAQ,CAAC,KAAU,EAAA;AAC/B,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE;AACnB,IAAA,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC;AAC9C,IAAA,OAAO,MAAM,CAAC,SAAS,CACpB,UAAU,EACV,MAAM,CAAC,eAAe,CAAC,QAAQ,CACjC;AACJ;AAEA,eAAe,UAAU,CAAC,SAAiB,EAAA;AACxC,IAAA,MAAM,MAAM,CAAC,IAAI,EAAE;AACnB,IAAA,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAClC,SAAS,EACT,MAAM,CAAC,eAAe,CAAC,QAAQ,CACjC;AACD,IAAA,OAAO,gBAAgB,CAAC,UAAU,CAAC;AACtC;AAEA,MAAM,SAAS,GAAG;IACf,cAAc;IACd,gBAAgB;IAChB,QAAQ;IACR;;;;;"}

package/include/crypto.cjs

@@ -3,138 +3,138 @@
 var sodium = require('libsodium-wrappers');
 var compress = require('./compress.cjs');
 
-/* ================================
-   Sodium Init (SAFE & IDP)
-================================ */
-let initPromise = null;
-async function init() {
-    if (!initPromise) {
-        initPromise = sodium.ready.then(() => void 0);
-    }
-    return initPromise;
-}
-/* ================================
-   Key Derivation
-   (Stable & deterministic)
-================================ */
-function deriveKey(secret) {
-    return sodium.crypto_generichash(sodium.crypto_secretbox_KEYBYTES, sodium.from_string(secret), null);
-}
-/* ================================
-   Encrypt (string)
-================================ */
-async function encrypt(input, secret) {
-    const buf = await encryptBuffer(input, secret);
-    return sodium.to_base64(buf, sodium.base64_variants.URLSAFE_NO_PADDING);
-}
-/* ================================
-   Decrypt (string)
-================================ */
-async function decrypt(base64, secret) {
-    await init();
-    const box = sodium.from_base64(base64, sodium.base64_variants.URLSAFE_NO_PADDING);
-    return decryptBuffer(box, secret);
-}
-/* ================================
-   Encrypt (buffer)
-================================ */
-async function encryptBuffer(input, secret) {
-    await init();
-    const key = deriveKey(secret);
-    const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
-    const compressed = await compress.compressBuffer(input);
-    const cipher = sodium.crypto_secretbox_easy(compressed, nonce, key);
-    const out = new Uint8Array(nonce.length + cipher.length);
-    out.set(nonce);
-    out.set(cipher, nonce.length);
-    return out;
-}
-/* ================================
-   Decrypt (buffer)
-================================ */
-async function decryptBuffer(box, secret) {
-    await init();
-    const key = deriveKey(secret);
-    const nonceSize = sodium.crypto_secretbox_NONCEBYTES;
-    if (box.length <= nonceSize)
-        return null;
-    const nonce = box.subarray(0, nonceSize);
-    const cipher = box.subarray(nonceSize);
-    const opened = sodium.crypto_secretbox_open_easy(cipher, nonce, key);
-    if (!opened)
-        return null;
-    return compress.decompressBuffer(opened);
-}
-/* ================================
-   Hash (URL-safe, short)
-================================ */
-async function hash(str) {
-    await init();
-    const digest = sodium.crypto_generichash(32, sodium.from_string(str), null);
-    return sodium
-        .to_base64(digest, sodium.base64_variants.URLSAFE_NO_PADDING)
-        .replace(/[^a-zA-Z0-9]/g, "");
-}
-/* ================================
-   Canonical JSON
-================================ */
-function canonicalJSON(value) {
-    if (value === null || typeof value !== "object") {
-        return JSON.stringify(value);
-    }
-    if (Array.isArray(value)) {
-        return JSON.stringify(value.map(canonicalJSON));
-    }
-    const keys = Object.keys(value).sort();
-    const obj = {};
-    for (const k of keys) {
-        obj[k] = value[k];
-    }
-    return JSON.stringify(obj);
-}
-/* ================================
-   Create Token
-================================ */
-async function createToken(payload, secret) {
-    await init();
-    const key = deriveKey(secret);
-    const json = canonicalJSON(payload);
-    const encryptedPayload = await encrypt(payload, secret);
-    const mac = sodium.crypto_generichash(32, sodium.from_string(json), key);
-    const macBase64 = sodium.to_base64(mac, sodium.base64_variants.URLSAFE_NO_PADDING);
-    return `${encryptedPayload}.${macBase64}`;
-}
-/* ================================
-   Verify Token
-================================ */
-async function verifyToken(token, secret) {
-    await init();
-    const parts = token.split(".");
-    if (parts.length !== 2)
-        return { valid: false };
-    const [payloadBase64, macBase64] = parts;
-    const payload = await decrypt(payloadBase64, secret);
-    if (payload === null)
-        return { valid: false };
-    const json = canonicalJSON(payload);
-    const key = deriveKey(secret);
-    const expectedMac = sodium.crypto_generichash(32, sodium.from_string(json), key);
-    const mac = sodium.from_base64(macBase64, sodium.base64_variants.URLSAFE_NO_PADDING);
-    if (mac.length !== expectedMac.length ||
-        !sodium.memcmp(expectedMac, mac)) {
-        return { valid: false };
-    }
-    return { valid: true, payload };
-}
-const crypto = {
-    init,
-    encrypt,
-    decrypt,
-    encryptBuffer,
-    decryptBuffer,
-    hash,
-    createToken,
-    verifyToken,
+/* ================================
+   Sodium Init (SAFE & IDP)
+================================ */
+let initPromise = null;
+async function init() {
+    if (!initPromise) {
+        initPromise = sodium.ready.then(() => void 0);
+    }
+    return initPromise;
+}
+/* ================================
+   Key Derivation
+   (Stable & deterministic)
+================================ */
+function deriveKey(secret) {
+    return sodium.crypto_generichash(sodium.crypto_secretbox_KEYBYTES, sodium.from_string(secret), null);
+}
+/* ================================
+   Encrypt (string)
+================================ */
+async function encrypt(input, secret) {
+    const buf = await encryptBuffer(input, secret);
+    return sodium.to_base64(buf, sodium.base64_variants.URLSAFE_NO_PADDING);
+}
+/* ================================
+   Decrypt (string)
+================================ */
+async function decrypt(base64, secret) {
+    await init();
+    const box = sodium.from_base64(base64, sodium.base64_variants.URLSAFE_NO_PADDING);
+    return decryptBuffer(box, secret);
+}
+/* ================================
+   Encrypt (buffer)
+================================ */
+async function encryptBuffer(input, secret) {
+    await init();
+    const key = deriveKey(secret);
+    const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+    const compressed = await compress.compressBuffer(input);
+    const cipher = sodium.crypto_secretbox_easy(compressed, nonce, key);
+    const out = new Uint8Array(nonce.length + cipher.length);
+    out.set(nonce);
+    out.set(cipher, nonce.length);
+    return out;
+}
+/* ================================
+   Decrypt (buffer)
+================================ */
+async function decryptBuffer(box, secret) {
+    await init();
+    const key = deriveKey(secret);
+    const nonceSize = sodium.crypto_secretbox_NONCEBYTES;
+    if (box.length <= nonceSize)
+        return null;
+    const nonce = box.subarray(0, nonceSize);
+    const cipher = box.subarray(nonceSize);
+    const opened = sodium.crypto_secretbox_open_easy(cipher, nonce, key);
+    if (!opened)
+        return null;
+    return compress.decompressBuffer(opened);
+}
+/* ================================
+   Hash (URL-safe, short)
+================================ */
+async function hash(str) {
+    await init();
+    const digest = sodium.crypto_generichash(32, sodium.from_string(str), null);
+    return sodium
+        .to_base64(digest, sodium.base64_variants.URLSAFE_NO_PADDING)
+        .replace(/[^a-zA-Z0-9]/g, "");
+}
+/* ================================
+   Canonical JSON
+================================ */
+function canonicalJSON(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return JSON.stringify(value.map(canonicalJSON));
+    }
+    const keys = Object.keys(value).sort();
+    const obj = {};
+    for (const k of keys) {
+        obj[k] = value[k];
+    }
+    return JSON.stringify(obj);
+}
+/* ================================
+   Create Token
+================================ */
+async function createToken(payload, secret) {
+    await init();
+    const key = deriveKey(secret);
+    const json = canonicalJSON(payload);
+    const encryptedPayload = await encrypt(payload, secret);
+    const mac = sodium.crypto_generichash(32, sodium.from_string(json), key);
+    const macBase64 = sodium.to_base64(mac, sodium.base64_variants.URLSAFE_NO_PADDING);
+    return `${encryptedPayload}.${macBase64}`;
+}
+/* ================================
+   Verify Token
+================================ */
+async function verifyToken(token, secret) {
+    await init();
+    const parts = token.split(".");
+    if (parts.length !== 2)
+        return { valid: false };
+    const [payloadBase64, macBase64] = parts;
+    const payload = await decrypt(payloadBase64, secret);
+    if (payload === null)
+        return { valid: false };
+    const json = canonicalJSON(payload);
+    const key = deriveKey(secret);
+    const expectedMac = sodium.crypto_generichash(32, sodium.from_string(json), key);
+    const mac = sodium.from_base64(macBase64, sodium.base64_variants.URLSAFE_NO_PADDING);
+    if (mac.length !== expectedMac.length ||
+        !sodium.memcmp(expectedMac, mac)) {
+        return { valid: false };
+    }
+    return { valid: true, payload };
+}
+const crypto = {
+    init,
+    encrypt,
+    decrypt,
+    encryptBuffer,
+    decryptBuffer,
+    hash,
+    createToken,
+    verifyToken,
 };
 
 module.exports = crypto;

package/include/crypto.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.cjs","sources":["../../src/include/crypto.ts"],"sourcesContent":["import sodium from \"libsodium-wrappers\";\r\nimport compresor from \"./compress\";\r\n\r\n/* ================================\r\n   Types\r\n================================ */\r\nexport type EncryptInput = string | object | any[];\r\n\r\n/* ================================\r\n   Sodium Init (SAFE & IDP)\r\n================================ */\r\nlet initPromise: Promise<void> | null = null;\r\n\r\nasync function init(): Promise<void> {\r\n   if (!initPromise) {\r\n      initPromise = sodium.ready.then(() => void 0);\r\n   }\r\n   return initPromise;\r\n}\r\n\r\n/* ================================\r\n   Key Derivation\r\n   (Stable & deterministic)\r\n================================ */\r\nfunction deriveKey(secret: string): Uint8Array {\r\n   return sodium.crypto_generichash(\r\n      sodium.crypto_secretbox_KEYBYTES,\r\n      sodium.from_string(secret),\r\n      null\r\n   ) as Uint8Array\r\n}\r\n\r\n/* ================================\r\n   Encrypt (string)\r\n================================ */\r\nasync function encrypt(\r\n   input: EncryptInput,\r\n   secret: string\r\n): Promise<string> {\r\n   const buf = await encryptBuffer(input, secret);\r\n   return sodium.to_base64(\r\n      buf,\r\n      sodium.base64_variants.URLSAFE_NO_PADDING\r\n   );\r\n}\r\n\r\n/* ================================\r\n   Decrypt (string)\r\n================================ */\r\nasync function decrypt(\r\n   base64: string,\r\n   secret: string\r\n): Promise<any | null> {\r\n   await init();\r\n\r\n   const box = sodium.from_base64(\r\n      base64,\r\n      sodium.base64_variants.URLSAFE_NO_PADDING\r\n   );\r\n\r\n   return decryptBuffer(box, secret);\r\n}\r\n\r\n/* ================================\r\n   Encrypt (buffer)\r\n================================ */\r\nasync function encryptBuffer(\r\n   input: EncryptInput,\r\n   secret: string\r\n): Promise<Uint8Array> {\r\n   await init();\r\n\r\n   const key = deriveKey(secret);\r\n   const nonce = sodium.randombytes_buf(\r\n      sodium.crypto_secretbox_NONCEBYTES\r\n   ) as Uint8Array\r\n\r\n\r\n   const compressed = await compresor.compressBuffer(input);\r\n\r\n   const cipher = sodium.crypto_secretbox_easy(\r\n      compressed,\r\n      nonce,\r\n      key\r\n   ) as Uint8Array\r\n\r\n   const out = new Uint8Array(nonce.length + cipher.length);\r\n   out.set(nonce);\r\n   out.set(cipher, nonce.length);\r\n\r\n   return out;\r\n}\r\n\r\n/* ================================\r\n   Decrypt (buffer)\r\n================================ */\r\nasync function decryptBuffer(\r\n   box: Uint8Array,\r\n   secret: string\r\n): Promise<any | null> {\r\n   await init();\r\n\r\n   const key = deriveKey(secret);\r\n   const nonceSize = sodium.crypto_secretbox_NONCEBYTES;\r\n\r\n   if (box.length <= nonceSize) return null;\r\n\r\n   const nonce = box.subarray(0, nonceSize);\r\n   const cipher = box.subarray(nonceSize);\r\n\r\n   const opened = sodium.crypto_secretbox_open_easy(\r\n      cipher,\r\n      nonce,\r\n      key\r\n   ) as Uint8Array\r\n\r\n   if (!opened) return null;\r\n\r\n   return compresor.decompressBuffer(opened);\r\n}\r\n\r\n/* ================================\r\n   Hash (URL-safe, short)\r\n================================ */\r\nasync function hash(str: string): Promise<string> {\r\n   await init();\r\n\r\n   const digest = sodium.crypto_generichash(\r\n      32,\r\n      sodium.from_string(str),\r\n      null\r\n   );\r\n\r\n   return sodium\r\n      .to_base64(digest, sodium.base64_variants.URLSAFE_NO_PADDING)\r\n      .replace(/[^a-zA-Z0-9]/g, \"\");\r\n}\r\n\r\n/* ================================\r\n   Canonical JSON\r\n================================ */\r\nfunction canonicalJSON(value: any): string {\r\n   if (value === null || typeof value !== \"object\") {\r\n      return JSON.stringify(value);\r\n   }\r\n\r\n   if (Array.isArray(value)) {\r\n      return JSON.stringify(value.map(canonicalJSON));\r\n   }\r\n\r\n   const keys = Object.keys(value).sort();\r\n   const obj: any = {};\r\n\r\n   for (const k of keys) {\r\n      obj[k] = value[k];\r\n   }\r\n\r\n   return JSON.stringify(obj);\r\n}\r\n\r\n/* ================================\r\n   Create Token\r\n================================ */\r\nasync function createToken(\r\n   payload: Record<string, any>,\r\n   secret: string\r\n): Promise<string> {\r\n   await init();\r\n\r\n   const key = deriveKey(secret);\r\n   const json = canonicalJSON(payload);\r\n\r\n   const encryptedPayload = await encrypt(payload, secret);\r\n\r\n   const mac = sodium.crypto_generichash(\r\n      32,\r\n      sodium.from_string(json),\r\n      key\r\n   );\r\n\r\n   const macBase64 = sodium.to_base64(\r\n      mac,\r\n      sodium.base64_variants.URLSAFE_NO_PADDING\r\n   );\r\n\r\n   return `${encryptedPayload}.${macBase64}`;\r\n}\r\n\r\n/* ================================\r\n   Verify Token\r\n================================ */\r\nasync function verifyToken(\r\n   token: string,\r\n   secret: string\r\n): Promise<{ valid: boolean; payload?: any }> {\r\n   await init();\r\n\r\n   const parts = token.split(\".\");\r\n   if (parts.length !== 2) return { valid: false };\r\n\r\n   const [payloadBase64, macBase64] = parts;\r\n\r\n   const payload = await decrypt(payloadBase64, secret);\r\n   if (payload === null) return { valid: false };\r\n\r\n   const json = canonicalJSON(payload);\r\n   const key = deriveKey(secret);\r\n\r\n   const expectedMac = sodium.crypto_generichash(\r\n      32,\r\n      sodium.from_string(json),\r\n      key\r\n   ) as Uint8Array\r\n\r\n   const mac = sodium.from_base64(\r\n      macBase64,\r\n      sodium.base64_variants.URLSAFE_NO_PADDING\r\n   );\r\n\r\n   if (\r\n      mac.length !== expectedMac.length ||\r\n      !sodium.memcmp(expectedMac, mac)\r\n   ) {\r\n      return { valid: false };\r\n   }\r\n\r\n   return { valid: true, payload };\r\n}\r\n\r\n\r\n\r\nconst crypto = {\r\n   init,\r\n   encrypt,\r\n   decrypt,\r\n   encryptBuffer,\r\n   decryptBuffer,\r\n   hash,\r\n   createToken,\r\n   verifyToken,\r\n}\r\n\r\nexport default crypto"],"names":["compresor"],"mappings":";;;;;AAQA;;AAEmC;AACnC,IAAI,WAAW,GAAyB,IAAI,CAAC;AAE7C,eAAe,IAAI,GAAA;IAChB,IAAI,CAAC,WAAW,EAAE;AACf,QAAA,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC;AAChD,IAAA,CAAA;AACD,IAAA,OAAO,WAAW,CAAC;AACtB,CAAC;AAED;;;AAGmC;AACnC,SAAS,SAAS,CAAC,MAAc,EAAA;AAC9B,IAAA,OAAO,MAAM,CAAC,kBAAkB,CAC7B,MAAM,CAAC,yBAAyB,EAChC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAC1B,IAAI,CACQ,CAAA;AAClB,CAAC;AAED;;AAEmC;AACnC,eAAe,OAAO,CACnB,KAAmB,EACnB,MAAc,EAAA;IAEd,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC/C,IAAA,OAAO,MAAM,CAAC,SAAS,CACpB,GAAG,EACH,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C,CAAC;AACL,CAAC;AAED;;AAEmC;AACnC,eAAe,OAAO,CACnB,MAAc,EACd,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE,CAAC;AAEb,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAC3B,MAAM,EACN,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C,CAAC;AAEF,IAAA,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED;;AAEmC;AACnC,eAAe,aAAa,CACzB,KAAmB,EACnB,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE,CAAC;AAEb,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CACjC,MAAM,CAAC,2BAA2B,CACtB,CAAA;IAGf,MAAM,UAAU,GAAG,MAAMA,QAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAEzD,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,qBAAqB,CACxC,UAAU,EACV,KAAK,EACL,GAAG,CACS,CAAA;AAEf,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AACzD,IAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;AAE9B,IAAA,OAAO,GAAG,CAAC;AACd,CAAC;AAED;;AAEmC;AACnC,eAAe,aAAa,CACzB,GAAe,EACf,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE,CAAC;AAEb,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAC9B,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,2BAA2B,CAAC;AAErD,IAAA,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS;AAAE,QAAA,OAAO,IAAI,CAAC;IAEzC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAEvC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,0BAA0B,CAC7C,MAAM,EACN,KAAK,EACL,GAAG,CACS,CAAA;AAEf,IAAA,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI,CAAC;AAEzB,IAAA,OAAOA,QAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;AAEmC;AACnC,eAAe,IAAI,CAAC,GAAW,EAAA;IAC5B,MAAM,IAAI,EAAE,CAAC;AAEb,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CACrC,EAAE,EACF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EACvB,IAAI,CACN,CAAC;AAEF,IAAA,OAAO,MAAM;SACT,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC;AAC5D,SAAA,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;AAEmC;AACnC,SAAS,aAAa,CAAC,KAAU,EAAA;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC9C,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,IAAA,CAAA;AAED,IAAA,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;AAClD,IAAA,CAAA;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,GAAG,GAAQ,EAAE,CAAC;AAEpB,IAAA,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACnB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AACpB,IAAA,CAAA;AAED,IAAA,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;AAEmC;AACnC,eAAe,WAAW,CACvB,OAA4B,EAC5B,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE,CAAC;AAEb,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAC9B,IAAA,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAExD,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAClC,EAAE,EACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EACxB,GAAG,CACL,CAAC;AAEF,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAC/B,GAAG,EACH,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C,CAAC;AAEF,IAAA,OAAO,CAAA,EAAG,gBAAgB,CAAA,CAAA,EAAI,SAAS,EAAE,CAAC;AAC7C,CAAC;AAED;;AAEmC;AACnC,eAAe,WAAW,CACvB,KAAa,EACb,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE,CAAC;IAEb,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC/B,IAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAEhD,IAAA,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IAEzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,IAAI;AAAE,QAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAE9C,IAAA,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAE9B,IAAA,MAAM,WAAW,GAAG,MAAM,CAAC,kBAAkB,CAC1C,EAAE,EACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EACxB,GAAG,CACS,CAAA;AAEf,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAC3B,SAAS,EACT,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C,CAAC;AAEF,IAAA,IACG,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACjC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,EACjC;AACC,QAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,IAAA,CAAA;AAED,IAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAID,MAAM,MAAM,GAAG;IACZ,IAAI;IACJ,OAAO;IACP,OAAO;IACP,aAAa;IACb,aAAa;IACb,IAAI;IACJ,WAAW;IACX,WAAW;;;;;"}
+{"version":3,"file":"crypto.cjs","sources":["../../src/include/crypto.ts"],"sourcesContent":["import sodium from \"libsodium-wrappers\";\nimport compresor from \"./compress\";\n\n/* ================================\n   Types\n================================ */\nexport type EncryptInput = string | object | any[];\n\n/* ================================\n   Sodium Init (SAFE & IDP)\n================================ */\nlet initPromise: Promise<void> | null = null;\n\nasync function init(): Promise<void> {\n   if (!initPromise) {\n      initPromise = sodium.ready.then(() => void 0);\n   }\n   return initPromise;\n}\n\n/* ================================\n   Key Derivation\n   (Stable & deterministic)\n================================ */\nfunction deriveKey(secret: string): Uint8Array {\n   return sodium.crypto_generichash(\n      sodium.crypto_secretbox_KEYBYTES,\n      sodium.from_string(secret),\n      null\n   ) as Uint8Array\n}\n\n/* ================================\n   Encrypt (string)\n================================ */\nasync function encrypt(\n   input: EncryptInput,\n   secret: string\n): Promise<string> {\n   const buf = await encryptBuffer(input, secret);\n   return sodium.to_base64(\n      buf,\n      sodium.base64_variants.URLSAFE_NO_PADDING\n   );\n}\n\n/* ================================\n   Decrypt (string)\n================================ */\nasync function decrypt(\n   base64: string,\n   secret: string\n): Promise<any | null> {\n   await init();\n\n   const box = sodium.from_base64(\n      base64,\n      sodium.base64_variants.URLSAFE_NO_PADDING\n   );\n\n   return decryptBuffer(box, secret);\n}\n\n/* ================================\n   Encrypt (buffer)\n================================ */\nasync function encryptBuffer(\n   input: EncryptInput,\n   secret: string\n): Promise<Uint8Array> {\n   await init();\n\n   const key = deriveKey(secret);\n   const nonce = sodium.randombytes_buf(\n      sodium.crypto_secretbox_NONCEBYTES\n   ) as Uint8Array\n\n\n   const compressed = await compresor.compressBuffer(input);\n\n   const cipher = sodium.crypto_secretbox_easy(\n      compressed,\n      nonce,\n      key\n   ) as Uint8Array\n\n   const out = new Uint8Array(nonce.length + cipher.length);\n   out.set(nonce);\n   out.set(cipher, nonce.length);\n\n   return out;\n}\n\n/* ================================\n   Decrypt (buffer)\n================================ */\nasync function decryptBuffer(\n   box: Uint8Array,\n   secret: string\n): Promise<any | null> {\n   await init();\n\n   const key = deriveKey(secret);\n   const nonceSize = sodium.crypto_secretbox_NONCEBYTES;\n\n   if (box.length <= nonceSize) return null;\n\n   const nonce = box.subarray(0, nonceSize);\n   const cipher = box.subarray(nonceSize);\n\n   const opened = sodium.crypto_secretbox_open_easy(\n      cipher,\n      nonce,\n      key\n   ) as Uint8Array\n\n   if (!opened) return null;\n\n   return compresor.decompressBuffer(opened);\n}\n\n/* ================================\n   Hash (URL-safe, short)\n================================ */\nasync function hash(str: string): Promise<string> {\n   await init();\n\n   const digest = sodium.crypto_generichash(\n      32,\n      sodium.from_string(str),\n      null\n   );\n\n   return sodium\n      .to_base64(digest, sodium.base64_variants.URLSAFE_NO_PADDING)\n      .replace(/[^a-zA-Z0-9]/g, \"\");\n}\n\n/* ================================\n   Canonical JSON\n================================ */\nfunction canonicalJSON(value: any): string {\n   if (value === null || typeof value !== \"object\") {\n      return JSON.stringify(value);\n   }\n\n   if (Array.isArray(value)) {\n      return JSON.stringify(value.map(canonicalJSON));\n   }\n\n   const keys = Object.keys(value).sort();\n   const obj: any = {};\n\n   for (const k of keys) {\n      obj[k] = value[k];\n   }\n\n   return JSON.stringify(obj);\n}\n\n/* ================================\n   Create Token\n================================ */\nasync function createToken(\n   payload: Record<string, any>,\n   secret: string\n): Promise<string> {\n   await init();\n\n   const key = deriveKey(secret);\n   const json = canonicalJSON(payload);\n\n   const encryptedPayload = await encrypt(payload, secret);\n\n   const mac = sodium.crypto_generichash(\n      32,\n      sodium.from_string(json),\n      key\n   );\n\n   const macBase64 = sodium.to_base64(\n      mac,\n      sodium.base64_variants.URLSAFE_NO_PADDING\n   );\n\n   return `${encryptedPayload}.${macBase64}`;\n}\n\n/* ================================\n   Verify Token\n================================ */\nasync function verifyToken(\n   token: string,\n   secret: string\n): Promise<{ valid: boolean; payload?: any }> {\n   await init();\n\n   const parts = token.split(\".\");\n   if (parts.length !== 2) return { valid: false };\n\n   const [payloadBase64, macBase64] = parts;\n\n   const payload = await decrypt(payloadBase64, secret);\n   if (payload === null) return { valid: false };\n\n   const json = canonicalJSON(payload);\n   const key = deriveKey(secret);\n\n   const expectedMac = sodium.crypto_generichash(\n      32,\n      sodium.from_string(json),\n      key\n   ) as Uint8Array\n\n   const mac = sodium.from_base64(\n      macBase64,\n      sodium.base64_variants.URLSAFE_NO_PADDING\n   );\n\n   if (\n      mac.length !== expectedMac.length ||\n      !sodium.memcmp(expectedMac, mac)\n   ) {\n      return { valid: false };\n   }\n\n   return { valid: true, payload };\n}\n\n\n\nconst crypto = {\n   init,\n   encrypt,\n   decrypt,\n   encryptBuffer,\n   decryptBuffer,\n   hash,\n   createToken,\n   verifyToken,\n}\n\nexport default crypto"],"names":["compresor"],"mappings":";;;;;AAQA;;AAEmC;AACnC,IAAI,WAAW,GAAyB,IAAI;AAE5C,eAAe,IAAI,GAAA;IAChB,IAAI,CAAC,WAAW,EAAE;AACf,QAAA,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC;AAC/C,IAAA;AACD,IAAA,OAAO,WAAW;AACrB;AAEA;;;AAGmC;AACnC,SAAS,SAAS,CAAC,MAAc,EAAA;AAC9B,IAAA,OAAO,MAAM,CAAC,kBAAkB,CAC7B,MAAM,CAAC,yBAAyB,EAChC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAC1B,IAAI,CACQ;AAClB;AAEA;;AAEmC;AACnC,eAAe,OAAO,CACnB,KAAmB,EACnB,MAAc,EAAA;IAEd,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC;AAC9C,IAAA,OAAO,MAAM,CAAC,SAAS,CACpB,GAAG,EACH,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C;AACJ;AAEA;;AAEmC;AACnC,eAAe,OAAO,CACnB,MAAc,EACd,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE;AAEZ,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAC3B,MAAM,EACN,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C;AAED,IAAA,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC;AACpC;AAEA;;AAEmC;AACnC,eAAe,aAAa,CACzB,KAAmB,EACnB,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE;AAEZ,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CACjC,MAAM,CAAC,2BAA2B,CACtB;IAGf,MAAM,UAAU,GAAG,MAAMA,QAAS,CAAC,cAAc,CAAC,KAAK,CAAC;AAExD,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,qBAAqB,CACxC,UAAU,EACV,KAAK,EACL,GAAG,CACS;AAEf,IAAA,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AACxD,IAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;AAE7B,IAAA,OAAO,GAAG;AACb;AAEA;;AAEmC;AACnC,eAAe,aAAa,CACzB,GAAe,EACf,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE;AAEZ,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,2BAA2B;AAEpD,IAAA,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS;AAAE,QAAA,OAAO,IAAI;IAExC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;AAEtC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,0BAA0B,CAC7C,MAAM,EACN,KAAK,EACL,GAAG,CACS;AAEf,IAAA,IAAI,CAAC,MAAM;AAAE,QAAA,OAAO,IAAI;AAExB,IAAA,OAAOA,QAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC;AAC5C;AAEA;;AAEmC;AACnC,eAAe,IAAI,CAAC,GAAW,EAAA;IAC5B,MAAM,IAAI,EAAE;AAEZ,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CACrC,EAAE,EACF,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EACvB,IAAI,CACN;AAED,IAAA,OAAO;SACH,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,kBAAkB;AAC3D,SAAA,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;AACnC;AAEA;;AAEmC;AACnC,SAAS,aAAa,CAAC,KAAU,EAAA;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;AAC9C,QAAA,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;AAC9B,IAAA;AAED,IAAA,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACjD,IAAA;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;IACtC,MAAM,GAAG,GAAQ,EAAE;AAEnB,IAAA,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE;QACnB,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACnB,IAAA;AAED,IAAA,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;AAC7B;AAEA;;AAEmC;AACnC,eAAe,WAAW,CACvB,OAA4B,EAC5B,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE;AAEZ,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;AAC7B,IAAA,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC;IAEnC,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;AAEvD,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAClC,EAAE,EACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EACxB,GAAG,CACL;AAED,IAAA,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAC/B,GAAG,EACH,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C;AAED,IAAA,OAAO,CAAA,EAAG,gBAAgB,CAAA,CAAA,EAAI,SAAS,EAAE;AAC5C;AAEA;;AAEmC;AACnC,eAAe,WAAW,CACvB,KAAa,EACb,MAAc,EAAA;IAEd,MAAM,IAAI,EAAE;IAEZ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AAC9B,IAAA,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;AAAE,QAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;AAE/C,IAAA,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,KAAK;IAExC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC;IACpD,IAAI,OAAO,KAAK,IAAI;AAAE,QAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;AAE7C,IAAA,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC;AACnC,IAAA,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;AAE7B,IAAA,MAAM,WAAW,GAAG,MAAM,CAAC,kBAAkB,CAC1C,EAAE,EACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EACxB,GAAG,CACS;AAEf,IAAA,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAC3B,SAAS,EACT,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAC3C;AAED,IAAA,IACG,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QACjC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,EACjC;AACC,QAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;AACzB,IAAA;AAED,IAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;AAClC;AAIA,MAAM,MAAM,GAAG;IACZ,IAAI;IACJ,OAAO;IACP,OAAO;IACP,aAAa;IACb,aAAa;IACb,IAAI;IACJ,WAAW;IACX,WAAW;;;;;"}

package/include/crypto.d.ts

@@ -1,24 +1,24 @@
-type EncryptInput = string | object | any[];
-declare function init(): Promise<void>;
-declare function encrypt(input: EncryptInput, secret: string): Promise<string>;
-declare function decrypt(base64: string, secret: string): Promise<any | null>;
-declare function encryptBuffer(input: EncryptInput, secret: string): Promise<Uint8Array>;
-declare function decryptBuffer(box: Uint8Array, secret: string): Promise<any | null>;
-declare function hash(str: string): Promise<string>;
-declare function createToken(payload: Record<string, any>, secret: string): Promise<string>;
-declare function verifyToken(token: string, secret: string): Promise<{
-    valid: boolean;
-    payload?: any;
-}>;
-declare const crypto: {
-    init: typeof init;
-    encrypt: typeof encrypt;
-    decrypt: typeof decrypt;
-    encryptBuffer: typeof encryptBuffer;
-    decryptBuffer: typeof decryptBuffer;
-    hash: typeof hash;
-    createToken: typeof createToken;
-    verifyToken: typeof verifyToken;
+type EncryptInput = string | object | any[];
+declare function init(): Promise<void>;
+declare function encrypt(input: EncryptInput, secret: string): Promise<string>;
+declare function decrypt(base64: string, secret: string): Promise<any | null>;
+declare function encryptBuffer(input: EncryptInput, secret: string): Promise<Uint8Array>;
+declare function decryptBuffer(box: Uint8Array, secret: string): Promise<any | null>;
+declare function hash(str: string): Promise<string>;
+declare function createToken(payload: Record<string, any>, secret: string): Promise<string>;
+declare function verifyToken(token: string, secret: string): Promise<{
+    valid: boolean;
+    payload?: any;
+}>;
+declare const crypto: {
+    init: typeof init;
+    encrypt: typeof encrypt;
+    decrypt: typeof decrypt;
+    encryptBuffer: typeof encryptBuffer;
+    decryptBuffer: typeof decryptBuffer;
+    hash: typeof hash;
+    createToken: typeof createToken;
+    verifyToken: typeof verifyToken;
 };
 
 export { crypto as default };

package/include/crypto.js

@@ -1,138 +1,138 @@
 import sodium from 'libsodium-wrappers';
 import compresor from './compress.js';
 
-/* ================================
-   Sodium Init (SAFE & IDP)
-================================ */
-let initPromise = null;
-async function init() {
-    if (!initPromise) {
-        initPromise = sodium.ready.then(() => void 0);
-    }
-    return initPromise;
-}
-/* ================================
-   Key Derivation
-   (Stable & deterministic)
-================================ */
-function deriveKey(secret) {
-    return sodium.crypto_generichash(sodium.crypto_secretbox_KEYBYTES, sodium.from_string(secret), null);
-}
-/* ================================
-   Encrypt (string)
-================================ */
-async function encrypt(input, secret) {
-    const buf = await encryptBuffer(input, secret);
-    return sodium.to_base64(buf, sodium.base64_variants.URLSAFE_NO_PADDING);
-}
-/* ================================
-   Decrypt (string)
-================================ */
-async function decrypt(base64, secret) {
-    await init();
-    const box = sodium.from_base64(base64, sodium.base64_variants.URLSAFE_NO_PADDING);
-    return decryptBuffer(box, secret);
-}
-/* ================================
-   Encrypt (buffer)
-================================ */
-async function encryptBuffer(input, secret) {
-    await init();
-    const key = deriveKey(secret);
-    const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
-    const compressed = await compresor.compressBuffer(input);
-    const cipher = sodium.crypto_secretbox_easy(compressed, nonce, key);
-    const out = new Uint8Array(nonce.length + cipher.length);
-    out.set(nonce);
-    out.set(cipher, nonce.length);
-    return out;
-}
-/* ================================
-   Decrypt (buffer)
-================================ */
-async function decryptBuffer(box, secret) {
-    await init();
-    const key = deriveKey(secret);
-    const nonceSize = sodium.crypto_secretbox_NONCEBYTES;
-    if (box.length <= nonceSize)
-        return null;
-    const nonce = box.subarray(0, nonceSize);
-    const cipher = box.subarray(nonceSize);
-    const opened = sodium.crypto_secretbox_open_easy(cipher, nonce, key);
-    if (!opened)
-        return null;
-    return compresor.decompressBuffer(opened);
-}
-/* ================================
-   Hash (URL-safe, short)
-================================ */
-async function hash(str) {
-    await init();
-    const digest = sodium.crypto_generichash(32, sodium.from_string(str), null);
-    return sodium
-        .to_base64(digest, sodium.base64_variants.URLSAFE_NO_PADDING)
-        .replace(/[^a-zA-Z0-9]/g, "");
-}
-/* ================================
-   Canonical JSON
-================================ */
-function canonicalJSON(value) {
-    if (value === null || typeof value !== "object") {
-        return JSON.stringify(value);
-    }
-    if (Array.isArray(value)) {
-        return JSON.stringify(value.map(canonicalJSON));
-    }
-    const keys = Object.keys(value).sort();
-    const obj = {};
-    for (const k of keys) {
-        obj[k] = value[k];
-    }
-    return JSON.stringify(obj);
-}
-/* ================================
-   Create Token
-================================ */
-async function createToken(payload, secret) {
-    await init();
-    const key = deriveKey(secret);
-    const json = canonicalJSON(payload);
-    const encryptedPayload = await encrypt(payload, secret);
-    const mac = sodium.crypto_generichash(32, sodium.from_string(json), key);
-    const macBase64 = sodium.to_base64(mac, sodium.base64_variants.URLSAFE_NO_PADDING);
-    return `${encryptedPayload}.${macBase64}`;
-}
-/* ================================
-   Verify Token
-================================ */
-async function verifyToken(token, secret) {
-    await init();
-    const parts = token.split(".");
-    if (parts.length !== 2)
-        return { valid: false };
-    const [payloadBase64, macBase64] = parts;
-    const payload = await decrypt(payloadBase64, secret);
-    if (payload === null)
-        return { valid: false };
-    const json = canonicalJSON(payload);
-    const key = deriveKey(secret);
-    const expectedMac = sodium.crypto_generichash(32, sodium.from_string(json), key);
-    const mac = sodium.from_base64(macBase64, sodium.base64_variants.URLSAFE_NO_PADDING);
-    if (mac.length !== expectedMac.length ||
-        !sodium.memcmp(expectedMac, mac)) {
-        return { valid: false };
-    }
-    return { valid: true, payload };
-}
-const crypto = {
-    init,
-    encrypt,
-    decrypt,
-    encryptBuffer,
-    decryptBuffer,
-    hash,
-    createToken,
-    verifyToken,
+/* ================================
+   Sodium Init (SAFE & IDP)
+================================ */
+let initPromise = null;
+async function init() {
+    if (!initPromise) {
+        initPromise = sodium.ready.then(() => void 0);
+    }
+    return initPromise;
+}
+/* ================================
+   Key Derivation
+   (Stable & deterministic)
+================================ */
+function deriveKey(secret) {
+    return sodium.crypto_generichash(sodium.crypto_secretbox_KEYBYTES, sodium.from_string(secret), null);
+}
+/* ================================
+   Encrypt (string)
+================================ */
+async function encrypt(input, secret) {
+    const buf = await encryptBuffer(input, secret);
+    return sodium.to_base64(buf, sodium.base64_variants.URLSAFE_NO_PADDING);
+}
+/* ================================
+   Decrypt (string)
+================================ */
+async function decrypt(base64, secret) {
+    await init();
+    const box = sodium.from_base64(base64, sodium.base64_variants.URLSAFE_NO_PADDING);
+    return decryptBuffer(box, secret);
+}
+/* ================================
+   Encrypt (buffer)
+================================ */
+async function encryptBuffer(input, secret) {
+    await init();
+    const key = deriveKey(secret);
+    const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+    const compressed = await compresor.compressBuffer(input);
+    const cipher = sodium.crypto_secretbox_easy(compressed, nonce, key);
+    const out = new Uint8Array(nonce.length + cipher.length);
+    out.set(nonce);
+    out.set(cipher, nonce.length);
+    return out;
+}
+/* ================================
+   Decrypt (buffer)
+================================ */
+async function decryptBuffer(box, secret) {
+    await init();
+    const key = deriveKey(secret);
+    const nonceSize = sodium.crypto_secretbox_NONCEBYTES;
+    if (box.length <= nonceSize)
+        return null;
+    const nonce = box.subarray(0, nonceSize);
+    const cipher = box.subarray(nonceSize);
+    const opened = sodium.crypto_secretbox_open_easy(cipher, nonce, key);
+    if (!opened)
+        return null;
+    return compresor.decompressBuffer(opened);
+}
+/* ================================
+   Hash (URL-safe, short)
+================================ */
+async function hash(str) {
+    await init();
+    const digest = sodium.crypto_generichash(32, sodium.from_string(str), null);
+    return sodium
+        .to_base64(digest, sodium.base64_variants.URLSAFE_NO_PADDING)
+        .replace(/[^a-zA-Z0-9]/g, "");
+}
+/* ================================
+   Canonical JSON
+================================ */
+function canonicalJSON(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return JSON.stringify(value.map(canonicalJSON));
+    }
+    const keys = Object.keys(value).sort();
+    const obj = {};
+    for (const k of keys) {
+        obj[k] = value[k];
+    }
+    return JSON.stringify(obj);
+}
+/* ================================
+   Create Token
+================================ */
+async function createToken(payload, secret) {
+    await init();
+    const key = deriveKey(secret);
+    const json = canonicalJSON(payload);
+    const encryptedPayload = await encrypt(payload, secret);
+    const mac = sodium.crypto_generichash(32, sodium.from_string(json), key);
+    const macBase64 = sodium.to_base64(mac, sodium.base64_variants.URLSAFE_NO_PADDING);
+    return `${encryptedPayload}.${macBase64}`;
+}
+/* ================================
+   Verify Token
+================================ */
+async function verifyToken(token, secret) {
+    await init();
+    const parts = token.split(".");
+    if (parts.length !== 2)
+        return { valid: false };
+    const [payloadBase64, macBase64] = parts;
+    const payload = await decrypt(payloadBase64, secret);
+    if (payload === null)
+        return { valid: false };
+    const json = canonicalJSON(payload);
+    const key = deriveKey(secret);
+    const expectedMac = sodium.crypto_generichash(32, sodium.from_string(json), key);
+    const mac = sodium.from_base64(macBase64, sodium.base64_variants.URLSAFE_NO_PADDING);
+    if (mac.length !== expectedMac.length ||
+        !sodium.memcmp(expectedMac, mac)) {
+        return { valid: false };
+    }
+    return { valid: true, payload };
+}
+const crypto = {
+    init,
+    encrypt,
+    decrypt,
+    encryptBuffer,
+    decryptBuffer,
+    hash,
+    createToken,
+    verifyToken,
 };
 
 export { crypto as default };