Encryption that's hard to misuse.

import { EncryptixClient, generateMasterKey } from '@ppabari/encryptix';

// Generate once, store as ENCRYPTIX_KEY
const key = generateMasterKey();        // 64-char hex = 32 bytes
const enc = new EncryptixClient();     // reads ENCRYPTIX_KEY from env

// Purpose-scoped, authenticated encryption
const payload = await enc.encrypt('user@example.com', 'user:email');
const email   = await enc.decrypt(payload, 'user:email');

// Wrong purpose fails — even with the correct key
await enc.decrypt(payload, 'payment:card'); // ✗ throws