strata-storage 2.6.1 → 2.7.0

package/dist/features/compression/index.d.ts

@@ -1,2 +1,2 @@
-export * from '../compression';
+export * from "../compression.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/features/compression.d.ts

@@ -6,7 +6,11 @@
  * Compression configuration
  */
 export interface CompressionConfig {
-    algorithm?: 'lz' | 'gzip';
+    /**
+     * Compression algorithm. Only the bundled zero-dependency LZ codec is
+     * implemented (`'lz'`); the field is kept for forward compatibility.
+     */
+    algorithm?: 'lz';
     threshold?: number;
     level?: number;
 }

package/dist/features/compression.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../../src/features/compression.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAA8B;gBAEhC,MAAM,GAAE,iBAAsB;IAQ1C;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC;IA8BhE;;OAEG;IACG,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAazE;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,cAAc;IAWvD;;OAEG;IACH,OAAO,CAAC,UAAU;IAmClB;;OAEG;IACH,OAAO,CAAC,YAAY;IA+BpB;;OAEG;IACH,OAAO,CAAC,cAAc;IA2BtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6BxB;;OAEG;IACH,mBAAmB,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM;IAI3D;;OAEG;IACH,oBAAoB,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM;CAO7D"}
+{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../../src/features/compression.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAA8B;gBAEhC,MAAM,GAAE,iBAAsB;IAQ1C;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC;IA8BhE;;OAEG;IACG,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC;IAazE;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,cAAc;IAWvD;;OAEG;IACH,OAAO,CAAC,UAAU;IAmClB;;OAEG;IACH,OAAO,CAAC,YAAY;IA+BpB;;OAEG;IACH,OAAO,CAAC,cAAc;IA2BtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA6BxB;;OAEG;IACH,mBAAmB,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM;IAI3D;;OAEG;IACH,oBAAoB,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM;CAO7D"}

package/dist/features/encryption/index.d.ts

@@ -1,2 +1,2 @@
-export * from '../encryption';
+export * from "../encryption.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/features/encryption.d.ts

@@ -10,6 +10,7 @@ export interface EncryptionConfig {
     keyLength?: 128 | 192 | 256;
     iterations?: number;
     saltLength?: number;
+    keyDerivation?: 'PBKDF2';
 }
 /**
  * Encrypted data structure
@@ -20,16 +21,37 @@ export interface EncryptedData {
     iv: string;
     algorithm: string;
     iterations: number;
+    /**
+     * Base64 HMAC-SHA256 tag over (iv || ciphertext), present only for AES-CBC.
+     *
+     * AES-CBC provides confidentiality but NOT authentication, so without a MAC a
+     * CBC ciphertext is malleable and vulnerable to padding-oracle / bit-flip
+     * attacks. We therefore use Encrypt-then-MAC: a separate HMAC key is derived
+     * from the same password (domain-separated salt) and the tag is verified
+     * before decryption. AES-GCM is authenticated by construction and does not
+     * carry this field.
+     */
+    mac?: string;
 }
+/**
+ * Default PBKDF2 iteration count. Raised to 600,000 to match current OWASP
+ * guidance for PBKDF2-HMAC-SHA256. The per-record `iterations` value is stored
+ * in {@link EncryptedData} and used on decrypt, so raising this default never
+ * breaks data written with an older, lower count.
+ */
+export declare const DEFAULT_PBKDF2_ITERATIONS = 600000;
 /**
  * Encryption manager using Web Crypto API
  */
 export declare class EncryptionManager {
     private config;
     private keyCache;
+    private macKeyCache;
     constructor(config?: EncryptionConfig);
     /**
-     * Check if encryption is available
+     * Check if encryption is available. Uses the Web Crypto API via `globalThis`
+     * so it works in browsers, Web Workers, and modern Node.js / SSR runtimes
+     * (Node 20+ exposes `globalThis.crypto.subtle`) — not just the browser.
      */
     isAvailable(): boolean;
     /**
@@ -44,6 +66,32 @@ export declare class EncryptionManager {
      * Derive encryption key from password
      */
     private deriveKey;
+    /**
+     * Derive a separate HMAC-SHA256 key for Encrypt-then-MAC on AES-CBC.
+     *
+     * The HMAC key must be cryptographically independent of the AES key, so the
+     * PBKDF2 salt is domain-separated with a trailing marker byte. The MAC key is
+     * non-extractable and limited to sign/verify.
+     */
+    private deriveMacKey;
+    /**
+     * Import a password string as PBKDF2 key material.
+     */
+    private importPasswordKeyMaterial;
+    /**
+     * Build an opaque cache key by hashing the password together with the public
+     * derivation parameters. Returns a base64 SHA-256 digest so the raw password
+     * is never used as (or recoverable from) the Map key.
+     */
+    private hashCacheKey;
+    /**
+     * Copy a (possibly offset) typed array into a standalone ArrayBuffer.
+     */
+    private toArrayBuffer;
+    /**
+     * Concatenate two buffers into one ArrayBuffer.
+     */
+    private concatBuffers;
     /**
      * Convert ArrayBuffer to base64
      */
@@ -57,7 +105,12 @@ export declare class EncryptionManager {
      */
     clearCache(): void;
     /**
-     * Generate a secure random password
+     * Generate a secure random password.
+     *
+     * Uses rejection sampling so every character in the alphabet is equally
+     * likely. Naive `randomByte % alphabetLength` is biased whenever 256 is not a
+     * multiple of the alphabet length (here 89), making some characters more
+     * probable and slightly reducing entropy.
      */
     generatePassword(length?: number): string;
     /**

package/dist/features/encryption.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/features/encryption.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAqC;gBAEzC,MAAM,GAAE,gBAAqB;IASzC;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA8CtE;;OAEG;IACG,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAiCtF;;OAEG;YACW,SAAS;IA8CvB;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,UAAU,IAAI,IAAI;IAIlB;;OAEG;IACH,gBAAgB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM;IAc7C;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAU1C"}
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/features/encryption.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,QAAQ,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;OASG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAEhD;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAqC;IACrD,OAAO,CAAC,WAAW,CAAqC;gBAE5C,MAAM,GAAE,gBAAqB;IAczC;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAKtB;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAsDtE;;OAEG;IACG,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IA6DtF;;OAEG;YACW,SAAS;IAuCvB;;;;;;OAMG;YACW,YAAY;IAyC1B;;OAEG;YACW,yBAAyB;IASvC;;;;OAIG;YACW,YAAY;IAM1B;;OAEG;IACH,OAAO,CAAC,aAAa;IAIrB;;OAEG;IACH,OAAO,CAAC,aAAa;IAOrB;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,UAAU,IAAI,IAAI;IAKlB;;;;;;;OAOG;IACH,gBAAgB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM;IAsB7C;;OAEG;IACG,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAU1C"}

package/dist/features/encryption.js

@@ -3,25 +3,40 @@
  * Zero-dependency encryption/decryption for storage values
  */
 import { EncryptionError } from "../utils/errors.js";
+/**
+ * Default PBKDF2 iteration count. Raised to 600,000 to match current OWASP
+ * guidance for PBKDF2-HMAC-SHA256. The per-record `iterations` value is stored
+ * in {@link EncryptedData} and used on decrypt, so raising this default never
+ * breaks data written with an older, lower count.
+ */
+export const DEFAULT_PBKDF2_ITERATIONS = 600000;
 /**
  * Encryption manager using Web Crypto API
  */
 export class EncryptionManager {
     config;
     keyCache = new Map();
+    macKeyCache = new Map();
     constructor(config = {}) {
+        if (config.keyDerivation && config.keyDerivation !== 'PBKDF2') {
+            throw new EncryptionError('Unsupported key derivation function: only PBKDF2 is available');
+        }
         this.config = {
             algorithm: config.algorithm || 'AES-GCM',
             keyLength: config.keyLength || 256,
-            iterations: config.iterations || 100000,
+            iterations: config.iterations || DEFAULT_PBKDF2_ITERATIONS,
             saltLength: config.saltLength || 16,
+            keyDerivation: 'PBKDF2',
         };
     }
     /**
-     * Check if encryption is available
+     * Check if encryption is available. Uses the Web Crypto API via `globalThis`
+     * so it works in browsers, Web Workers, and modern Node.js / SSR runtimes
+     * (Node 20+ exposes `globalThis.crypto.subtle`) — not just the browser.
      */
     isAvailable() {
-        return typeof window !== 'undefined' && window.crypto && window.crypto.subtle !== undefined;
+        const cryptoObj = globalThis.crypto;
+        return !!cryptoObj && typeof cryptoObj.subtle !== 'undefined';
     }
     /**
      * Encrypt data
@@ -46,14 +61,20 @@ export class EncryptionManager {
                 name: this.config.algorithm,
                 iv: iv,
             }, key, dataBuffer);
-            // Convert to base64 for storage
-            return {
+            const result = {
                 data: this.bufferToBase64(encryptedBuffer),
-                salt: this.bufferToBase64(salt.buffer.slice(salt.byteOffset, salt.byteOffset + salt.byteLength)),
-                iv: this.bufferToBase64(iv.buffer.slice(iv.byteOffset, iv.byteOffset + iv.byteLength)),
+                salt: this.bufferToBase64(this.toArrayBuffer(salt)),
+                iv: this.bufferToBase64(this.toArrayBuffer(iv)),
                 algorithm: this.config.algorithm,
                 iterations: this.config.iterations,
             };
+            // Encrypt-then-MAC for the unauthenticated CBC mode.
+            if (this.config.algorithm === 'AES-CBC') {
+                const macKey = await this.deriveMacKey(password, salt, this.config.iterations);
+                const mac = await crypto.subtle.sign('HMAC', macKey, this.concatBuffers(this.toArrayBuffer(iv), encryptedBuffer));
+                result.mac = this.bufferToBase64(mac);
+            }
+            return result;
         }
         catch (error) {
             throw new EncryptionError(`Encryption failed: ${error}`);
@@ -71,6 +92,21 @@ export class EncryptionManager {
             const dataBuffer = this.base64ToBuffer(encryptedData.data);
             const salt = this.base64ToBuffer(encryptedData.salt);
             const iv = this.base64ToBuffer(encryptedData.iv);
+            // For AES-CBC, verify the HMAC tag BEFORE attempting decryption
+            // (Encrypt-then-MAC). This authenticates the ciphertext and prevents
+            // padding-oracle / tampering attacks against the unauthenticated mode.
+            if (encryptedData.algorithm === 'AES-CBC') {
+                if (!encryptedData.mac) {
+                    throw new EncryptionError('AES-CBC value is missing its authentication tag. It was written by a version ' +
+                        'that did not authenticate CBC and cannot be safely decrypted — re-encrypt the ' +
+                        'data (preferably with the default AES-GCM).');
+                }
+                const macKey = await this.deriveMacKey(password, new Uint8Array(salt), encryptedData.iterations);
+                const valid = await crypto.subtle.verify('HMAC', macKey, this.base64ToBuffer(encryptedData.mac), this.concatBuffers(iv, dataBuffer));
+                if (!valid) {
+                    throw new EncryptionError('Authentication failed: data has been tampered with');
+                }
+            }
             // Derive key from password
             const key = await this.deriveKey(password, new Uint8Array(salt), encryptedData.iterations);
             // Decrypt data
@@ -84,6 +120,8 @@ export class EncryptionManager {
             return JSON.parse(decryptedStr);
         }
         catch (error) {
+            if (error instanceof EncryptionError)
+                throw error;
             throw new EncryptionError(`Decryption failed: ${error}`);
         }
     }
@@ -91,19 +129,14 @@ export class EncryptionManager {
      * Derive encryption key from password
      */
     async deriveKey(password, salt, iterations = this.config.iterations) {
-        // Check cache
-        const saltBuffer = salt.buffer.slice(salt.byteOffset, salt.byteOffset + salt.byteLength);
-        const cacheKey = `${password}-${this.bufferToBase64(saltBuffer)}-${iterations}`;
-        if (this.keyCache.has(cacheKey)) {
-            return this.keyCache.get(cacheKey);
-        }
-        // Import password as key material
-        const encoder = new TextEncoder();
-        const passwordBuffer = encoder.encode(password);
-        const keyMaterial = await crypto.subtle.importKey('raw', passwordBuffer, 'PBKDF2', false, [
-            'deriveBits',
-            'deriveKey',
-        ]);
+        const saltBuffer = this.toArrayBuffer(salt);
+        // Cache key is a hash of the composite, never the raw password — so the
+        // plaintext secret is not retained as a Map key for the process lifetime.
+        const cacheKey = await this.hashCacheKey(`aes:${this.bufferToBase64(saltBuffer)}:${iterations}`, password);
+        const cached = this.keyCache.get(cacheKey);
+        if (cached)
+            return cached;
+        const keyMaterial = await this.importPasswordKeyMaterial(password);
         // Derive key using PBKDF2
         const key = await crypto.subtle.deriveKey({
             name: 'PBKDF2',
@@ -114,10 +147,76 @@ export class EncryptionManager {
             name: this.config.algorithm,
             length: this.config.keyLength,
         }, false, ['encrypt', 'decrypt']);
-        // Cache the key
         this.keyCache.set(cacheKey, key);
         return key;
     }
+    /**
+     * Derive a separate HMAC-SHA256 key for Encrypt-then-MAC on AES-CBC.
+     *
+     * The HMAC key must be cryptographically independent of the AES key, so the
+     * PBKDF2 salt is domain-separated with a trailing marker byte. The MAC key is
+     * non-extractable and limited to sign/verify.
+     */
+    async deriveMacKey(password, salt, iterations = this.config.iterations) {
+        // Domain separation: a distinct salt yields a key unrelated to the AES key.
+        const macSalt = new Uint8Array(salt.length + 1);
+        macSalt.set(salt, 0);
+        macSalt[salt.length] = 0x01; // marker distinguishing the MAC key derivation
+        const macSaltBuffer = this.toArrayBuffer(macSalt);
+        const cacheKey = await this.hashCacheKey(`hmac:${this.bufferToBase64(macSaltBuffer)}:${iterations}`, password);
+        const cached = this.macKeyCache.get(cacheKey);
+        if (cached)
+            return cached;
+        const keyMaterial = await this.importPasswordKeyMaterial(password);
+        const macKey = await crypto.subtle.deriveKey({
+            name: 'PBKDF2',
+            salt: macSaltBuffer,
+            iterations: iterations,
+            hash: 'SHA-256',
+        }, keyMaterial, {
+            name: 'HMAC',
+            hash: 'SHA-256',
+            length: 256,
+        }, false, ['sign', 'verify']);
+        this.macKeyCache.set(cacheKey, macKey);
+        return macKey;
+    }
+    /**
+     * Import a password string as PBKDF2 key material.
+     */
+    async importPasswordKeyMaterial(password) {
+        const encoder = new TextEncoder();
+        const passwordBuffer = encoder.encode(password);
+        return crypto.subtle.importKey('raw', passwordBuffer, 'PBKDF2', false, [
+            'deriveBits',
+            'deriveKey',
+        ]);
+    }
+    /**
+     * Build an opaque cache key by hashing the password together with the public
+     * derivation parameters. Returns a base64 SHA-256 digest so the raw password
+     * is never used as (or recoverable from) the Map key.
+     */
+    async hashCacheKey(scope, password) {
+        const encoder = new TextEncoder();
+        const digest = await crypto.subtle.digest('SHA-256', encoder.encode(`${scope}:${password}`));
+        return this.bufferToBase64(digest);
+    }
+    /**
+     * Copy a (possibly offset) typed array into a standalone ArrayBuffer.
+     */
+    toArrayBuffer(view) {
+        return view.buffer.slice(view.byteOffset, view.byteOffset + view.byteLength);
+    }
+    /**
+     * Concatenate two buffers into one ArrayBuffer.
+     */
+    concatBuffers(a, b) {
+        const out = new Uint8Array(a.byteLength + b.byteLength);
+        out.set(new Uint8Array(a), 0);
+        out.set(new Uint8Array(b), a.byteLength);
+        return out.buffer;
+    }
     /**
      * Convert ArrayBuffer to base64
      */
@@ -145,17 +244,31 @@ export class EncryptionManager {
      */
     clearCache() {
         this.keyCache.clear();
+        this.macKeyCache.clear();
     }
     /**
-     * Generate a secure random password
+     * Generate a secure random password.
+     *
+     * Uses rejection sampling so every character in the alphabet is equally
+     * likely. Naive `randomByte % alphabetLength` is biased whenever 256 is not a
+     * multiple of the alphabet length (here 89), making some characters more
+     * probable and slightly reducing entropy.
      */
     generatePassword(length = 32) {
         const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()_+-=[]{}|;:,.<>?';
-        const array = new Uint8Array(length);
-        crypto.getRandomValues(array);
+        // Largest multiple of chars.length that fits in a byte; bytes at or above
+        // this threshold are rejected to remove modulo bias.
+        const limit = Math.floor(256 / chars.length) * chars.length;
         let password = '';
-        for (let i = 0; i < length; i++) {
-            password += chars[array[i] % chars.length];
+        const buffer = new Uint8Array(length);
+        while (password.length < length) {
+            crypto.getRandomValues(buffer);
+            for (let i = 0; i < buffer.length && password.length < length; i++) {
+                const byte = buffer[i];
+                if (byte < limit) {
+                    password += chars[byte % chars.length];
+                }
+            }
         }
         return password;
     }

package/dist/features/migration.d.ts

@@ -1,7 +1,7 @@
 /**
  * Migration utilities for storage upgrades
  */
-import type { StorageAdapter } from '@/types';
+import type { StorageAdapter } from "../types/index.js";
 export interface Migration {
     version: number;
     up: (adapter: StorageAdapter) => Promise<void>;

package/dist/features/observer/index.d.ts

@@ -1,2 +1,2 @@
-export * from '../observer';
+export * from "../observer.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/features/observer.d.ts

@@ -1,7 +1,7 @@
 /**
  * Storage Observer - Watch for storage changes
  */
-import type { ObserverCallback, StorageEvent } from '@/types';
+import type { ObserverCallback, StorageEvent } from "../types/index.js";
 export declare class StorageObserver {
     private observers;
     /**

package/dist/features/query/index.d.ts

@@ -1,2 +1,2 @@
-export * from '../query';
+export * from "../query.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/features/query.d.ts

@@ -2,7 +2,7 @@
  * Query Engine Feature
  * Zero-dependency implementation of MongoDB-like query operators
  */
-import type { QueryCondition } from '@/types';
+import type { QueryCondition } from "../types/index.js";
 /**
  * Query engine for advanced data filtering
  */

package/dist/features/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/features/query.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,SAAS,CAAC;AAG9D;;GAEG;AACH,qBAAa,WAAW;IACtB;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO;IAwB3D;;OAEG;IACH,OAAO,CAAC,YAAY;IAIpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2DvB;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACH,OAAO,CAAC,cAAc;IAmBtB;;OAEG;IACH,OAAO,CAAC,MAAM;IA+Bd;;OAEG;IACH,OAAO,CAAC,OAAO;IAyBf;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAOpB;;OAEG;IACH,OAAO,CAAC,OAAO;IASf;;OAEG;IACH,OAAO,CAAC,WAAW;IAcnB;;OAEG;IACH,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;IAoBxD;;OAEG;IACH,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA2B5E;;OAEG;IACH,OAAO,CAAC,cAAc;IAetB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAc1B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,WAAW,CAE/C"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/features/query.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAkB,MAAM,SAAS,CAAC;AAG9D;;GAEG;AACH,qBAAa,WAAW;IACtB;;OAEG;IACH,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,GAAG,OAAO;IAwB3D;;OAEG;IACH,OAAO,CAAC,YAAY;IAIpB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IASxB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2DvB;;OAEG;IACH,OAAO,CAAC,aAAa;IAkBrB;;OAEG;IACH,OAAO,CAAC,cAAc;IAqBtB;;OAEG;IACH,OAAO,CAAC,MAAM;IA+Bd;;OAEG;IACH,OAAO,CAAC,OAAO;IAyBf;;;;;;;;OAQG;IACH,OAAO,CAAC,YAAY;IAOpB;;OAEG;IACH,OAAO,CAAC,OAAO;IASf;;OAEG;IACH,OAAO,CAAC,WAAW;IAcnB;;OAEG;IACH,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;IAoBxD;;OAEG;IACH,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA2B5E;;OAEG;IACH,OAAO,CAAC,cAAc;IAetB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CAc1B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,WAAW,CAE/C"}

package/dist/features/query.js

@@ -121,7 +121,9 @@ export class QueryEngine {
             if (current === null || current === undefined) {
                 return undefined;
             }
-            if (typeof current === 'object' && part in current) {
+            // Match own properties only — `in` would traverse the prototype chain and
+            // could resolve a path segment to an inherited member (e.g. `constructor`).
+            if (typeof current === 'object' && Object.prototype.hasOwnProperty.call(current, part)) {
                 current = current[part];
             }
             else {

package/dist/features/sync/index.d.ts

@@ -1,2 +1,2 @@
-export * from '../sync';
+export * from "../sync.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/features/sync.d.ts

@@ -2,8 +2,8 @@
  * Cross-tab Synchronization Feature
  * Zero-dependency implementation using BroadcastChannel and storage events
  */
-import { EventEmitter } from '@/utils';
-import type { StorageType, SubscriptionCallback, UnsubscribeFunction } from '@/types';
+import { EventEmitter } from "../utils/index.js";
+import type { StorageType, SubscriptionCallback, UnsubscribeFunction } from "../types/index.js";
 /**
  * Sync configuration
  */
@@ -61,6 +61,14 @@ export declare class SyncManager extends EventEmitter {
     private setupBroadcastChannel;
     /**
      * Set up storage event listeners for fallback sync
+     *
+     * NOTE: the `storage` event is the cross-tab fallback for environments without
+     * BroadcastChannel, and the browser only fires it for `localStorage` changes
+     * made in OTHER tabs. `sessionStorage` is tab-scoped — it never propagates
+     * cross-tab and never raises a cross-tab `storage` event — so this fallback is
+     * inherently localStorage-only (see `SessionStorageAdapter.capabilities.crossTab
+     * === false`). BroadcastChannel remains the real cross-tab mechanism when
+     * available.
      */
     private setupStorageEvents;
     /**
@@ -72,7 +80,15 @@ export declare class SyncManager extends EventEmitter {
      */
     private emitChange;
     /**
-     * Generate unique origin ID
+     * Narrow an untrusted BroadcastChannel payload to a well-formed SyncMessage.
+     */
+    private isValidSyncMessage;
+    /**
+     * Generate unique origin ID.
+     *
+     * Prefers `crypto.randomUUID()` so two tabs cannot collide on the same origin
+     * (a collision would defeat the self-message filter and cause an echo loop).
+     * Falls back to timestamp + random only where Web Crypto is unavailable.
      */
     private generateOrigin;
     /**

package/dist/features/sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/features/sync.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAEV,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,OAAO,CAAC,CAAmB;IACnC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAuE;IACxF,OAAO,CAAC,cAAc,CAAyD;gBAEnE,MAAM,GAAE,UAAe;IAYnC;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAYjC;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,IAAI;IAuBrD;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,oBAAoB,GAAG,mBAAmB;IAY9D;;OAEG;IACH,KAAK,IAAI,IAAI;IAuBb;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAInC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA6B7B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA+C1B;;OAEG;IACH,OAAO,CAAC,WAAW;IAcnB;;OAEG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACH,OAAO,CAAC,cAAc;IAItB;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO;CAyB5C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,WAAW,CAElE"}
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/features/sync.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAEV,WAAW,EAEX,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAYjB;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,OAAO,CAAC,CAAmB;IACnC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAuE;IACxF,OAAO,CAAC,cAAc,CAAyD;gBAEnE,MAAM,GAAE,UAAe;IAYnC;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAYjC;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,IAAI;IAuBrD;;OAEG;IACH,SAAS,CAAC,QAAQ,EAAE,oBAAoB,GAAG,mBAAmB;IAY9D;;OAEG;IACH,KAAK,IAAI,IAAI;IAuBb;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAInC;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAkC7B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,kBAAkB;IA2C1B;;OAEG;IACH,OAAO,CAAC,WAAW;IAcnB;;OAEG;IACH,OAAO,CAAC,UAAU;IAIlB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAQtB;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO;CA2C5C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,WAAW,CAElE"}

package/dist/features/sync.js

@@ -4,6 +4,13 @@
  */
 import { EventEmitter } from "../utils/index.js";
 import { logger } from "../utils/logger.js";
+function isStorageValue(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'value' in value &&
+        'created' in value &&
+        'updated' in value);
+}
 /**
  * Cross-tab synchronization manager
  */
@@ -105,6 +112,11 @@ export class SyncManager extends EventEmitter {
             this.channel = new BroadcastChannel(this.config.channelName);
             this.channel.onmessage = (event) => {
                 const message = event.data;
+                // Validate inbound shape before trusting it. Same-origin scripts can
+                // post arbitrary messages onto this channel, so reject anything that
+                // isn't a well-formed SyncMessage instead of emitting a malformed change.
+                if (!this.isValidSyncMessage(message))
+                    return;
                 // Ignore messages from self
                 if (message.origin === this.origin)
                     return;
@@ -128,19 +140,23 @@ export class SyncManager extends EventEmitter {
     }
     /**
      * Set up storage event listeners for fallback sync
+     *
+     * NOTE: the `storage` event is the cross-tab fallback for environments without
+     * BroadcastChannel, and the browser only fires it for `localStorage` changes
+     * made in OTHER tabs. `sessionStorage` is tab-scoped — it never propagates
+     * cross-tab and never raises a cross-tab `storage` event — so this fallback is
+     * inherently localStorage-only (see `SessionStorageAdapter.capabilities.crossTab
+     * === false`). BroadcastChannel remains the real cross-tab mechanism when
+     * available.
      */
     setupStorageEvents() {
         if (typeof window === 'undefined')
             return;
         const listener = (event) => {
-            // Only process events from other windows
+            // The browser only fires cross-tab `storage` events for localStorage.
             if (event.storageArea !== window.localStorage)
                 return;
-            // Parse the storage type from key prefix
-            let storageType = 'localStorage';
-            if (event.key?.startsWith('strata:session:')) {
-                storageType = 'sessionStorage';
-            }
+            const storageType = 'localStorage';
             // Check if this storage type is enabled for sync
             if (!this.config.storages.includes(storageType))
                 return;
@@ -194,10 +210,30 @@ export class SyncManager extends EventEmitter {
         this.emit('change', change);
     }
     /**
-     * Generate unique origin ID
+     * Narrow an untrusted BroadcastChannel payload to a well-formed SyncMessage.
+     */
+    isValidSyncMessage(message) {
+        if (typeof message !== 'object' || message === null)
+            return false;
+        const m = message;
+        return ((m.type === 'set' || m.type === 'remove' || m.type === 'clear') &&
+            typeof m.storage === 'string' &&
+            typeof m.timestamp === 'number' &&
+            typeof m.origin === 'string');
+    }
+    /**
+     * Generate unique origin ID.
+     *
+     * Prefers `crypto.randomUUID()` so two tabs cannot collide on the same origin
+     * (a collision would defeat the self-message filter and cause an echo loop).
+     * Falls back to timestamp + random only where Web Crypto is unavailable.
      */
     generateOrigin() {
-        return `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+        const cryptoObj = globalThis.crypto;
+        if (cryptoObj && typeof cryptoObj.randomUUID === 'function') {
+            return cryptoObj.randomUUID();
+        }
+        return `${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
     }
     /**
      * Resolve conflicts between values
@@ -215,7 +251,19 @@ export class SyncManager extends EventEmitter {
                 // Return the last value (most recent)
                 return values[values.length - 1];
             case 'merge':
-                // Simple merge for objects
+                if (values.every(isStorageValue)) {
+                    const wrappers = values;
+                    const latest = wrappers[wrappers.length - 1];
+                    const payloads = wrappers.map((entry) => entry.value);
+                    if (payloads.every((payload) => typeof payload === 'object' && payload !== null && !Array.isArray(payload))) {
+                        return {
+                            ...latest,
+                            value: Object.assign({}, ...payloads),
+                        };
+                    }
+                    return latest;
+                }
+                // Simple merge for plain user objects
                 if (values.every((v) => typeof v === 'object' && v !== null && !Array.isArray(v))) {
                     return Object.assign({}, ...values);
                 }

package/dist/features/ttl/index.d.ts

@@ -1,2 +1,2 @@
-export * from '../ttl';
+export * from "../ttl.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/features/ttl.d.ts

@@ -2,8 +2,8 @@
  * TTL (Time To Live) Manager
  * Handles automatic expiration of storage items
  */
-import type { StorageValue } from '@/types';
-import { EventEmitter } from '@/utils';
+import type { StorageValue } from "../types/index.js";
+import { EventEmitter } from "../utils/index.js";
 export interface TTLConfig {
     /**
      * Default TTL in milliseconds

package/dist/firebase.d.ts

@@ -1,4 +1,4 @@
-import type { Strata } from './core/Strata';
+import type { Strata } from "./core/Strata.js";
 /**
  * Firebase sync configuration
  */

package/dist/firebase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firebase.d.ts","sourceRoot":"","sources":["../src/firebase.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAI5C;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC,CAyOf;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAQ5D"}
+{"version":3,"file":"firebase.d.ts","sourceRoot":"","sources":["../src/firebase.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAI5C;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA+BD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,IAAI,CAAC,CAyOf;AAED;;GAEG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAQ5D"}