feat(stdlib): add base64 encode/decode functions 🔐

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

Author: timfennis

Cargo.lock

@@ -34,6 +34,7 @@ num = "0.4.3"
 once_cell = "1.21.3"
 ordered-float = "5.1.0"
 yansi = { version = "1.0.1", features = ["detect-tty", "detect-env"] }
+base64 = "0.22"
 rand = "0.10.0"
 rand_chacha = "0.10.0"
 regex = "1.12.3"

Cargo.toml

@@ -15,6 +15,7 @@ once_cell.workspace = true
 tap.workspace = true
 
 # Optional
+base64 = { workspace = true, optional = true }
 rand = { workspace = true, optional = true }
 regex = { workspace = true, optional = true }
 serde_json = { workspace = true, optional = true }
@@ -24,7 +25,8 @@ md5 = { version = "0.8.0", optional = true }
 sha1 = { version = "0.10.6", optional = true }
 
 [features]
-default = ["crypto", "rand", "regex", "serde"]
+default = ["base64", "crypto", "rand", "regex", "serde"]
+base64 = ["dep:base64"]
 crypto = ["dep:md5", "dep:sha1"]
 rand = ["dep:rand"]
 regex = ["dep:regex"]

ndc_stdlib/Cargo.toml

@@ -0,0 +1,28 @@
+use ndc_macros::export_module;
+
+#[export_module]
+mod internal {
+    use ::base64::Engine as _;
+
+    /// Encodes a string using standard base64 (RFC 4648).
+    pub fn base64_encode(val: &str) -> String {
+        ::base64::engine::general_purpose::STANDARD.encode(val)
+    }
+
+    /// Decodes a standard base64-encoded string.
+    pub fn base64_decode(val: &str) -> anyhow::Result<String> {
+        let bytes = ::base64::engine::general_purpose::STANDARD.decode(val)?;
+        String::from_utf8(bytes).map_err(anyhow::Error::new)
+    }
+
+    /// Encodes a string using URL-safe base64 without padding (RFC 4648 §5).
+    pub fn base64_url_encode(val: &str) -> String {
+        ::base64::engine::general_purpose::URL_SAFE_NO_PAD.encode(val)
+    }
+
+    /// Decodes a URL-safe base64-encoded string (no padding required).
+    pub fn base64_url_decode(val: &str) -> anyhow::Result<String> {
+        let bytes = ::base64::engine::general_purpose::URL_SAFE_NO_PAD.decode(val)?;
+        String::from_utf8(bytes).map_err(anyhow::Error::new)
+    }
+}

ndc_stdlib/src/base64.rs

@@ -15,6 +15,8 @@ pub mod sequence;
 pub mod string;
 pub mod value;
 
+#[cfg(feature = "base64")]
+pub mod base64;
 #[cfg(feature = "crypto")]
 pub mod crypto;
 #[cfg(feature = "rand")]
@@ -26,6 +28,8 @@ pub mod serde;
 
 pub fn register(env: &mut FunctionRegistry<Rc<NativeFunction>>) {
     aoc::register(env);
+    #[cfg(feature = "base64")]
+    base64::register(env);
     cmp::register(env);
     #[cfg(feature = "crypto")]
     crypto::register(env);