Small, sharp npm packages.

import { verify } from "@lacspace/password";
import { verifyTotp } from "@lacspace/otp";
import { sign } from "@lacspace/jwt";
import { lockout } from "@lacspace/lock";

const guard = lockout({ maxAttempts: 5, baseDelayMs: 60_000 });

async function login(email: string, pw: string, code: string) {
  if ((await guard.check(email)).locked) throw new Error("Too many attempts");

  const user = await db.users.findOne({ email });
  const okPw  = user && (await verify(pw, user.passwordHash));
  const ok2fa = okPw && (await verifyTotp(code, user.totpSecret)) !== null;

  if (!ok2fa) { await guard.record(email); throw new Error("Invalid credentials"); }

  await guard.reset(email);
  return sign({ sub: user.id, role: user.role }, process.env.JWT_SECRET!, { expiresIn: 3600 });
}

import { encrypt, decrypt } from "@lacspace/crypto";
import { redact } from "@lacspace/redact";

const KEY = process.env.DATA_KEY!; // 256-bit base64url key

// store encrypted — authenticated AES-256-GCM
await db.users.updateOne({ _id }, { $set: { pan: await encrypt(pan, KEY) } });

// read it back
const pan = await decrypt(user.pan, KEY);

// never leak secrets into logs
logger.info(redact({ user: user.email, token, pan })); // → masked

import { seoMetadata, article, jsonLd } from "@lacspace/seo";
import { toNextSitemap } from "@lacspace/sitemap";

// app/blog/[slug]/page.tsx
export const metadata = seoMetadata({
  title: post.title, description: post.excerpt,
  canonical: `/blog/${post.slug}`, image: post.cover, baseUrl: "https://site.com",
});

const schema = article({ headline: post.title, author: "Lumi AI", datePublished: post.date });
// <script type="application/ld+json">{jsonLd(schema)}</script>

// app/sitemap.ts
export default () => toNextSitemap(posts.map((p) => ({ loc: `https://site.com/blog/${p.slug}` })));

import { RSI } from "@lacspace/indicators";
import { charges } from "@lacspace/market";
import { MarketClock, NSE } from "@lacspace/market-clock";

const rsi = new RSI(14);
socket.on("ltp", (price) => {
  const value = rsi.next(price);          // O(1) per tick — no array recompute
  if (value !== null && value > 70) flag("overbought", value);
});

new MarketClock(NSE).isOpen();            // is NSE trading right now?
charges({ segment: "intraday", buy: 100, sell: 102, qty: 500 }).netPnl; // 946.34