import bcrypt from 'bcryptjs'; /** Pure password helpers (no server-only import) so they are unit-testable. */ export function hashPassword(plain: string): Promise { return bcrypt.hash(plain, 10); } export function verifyPassword(plain: string, hash: string): Promise { return bcrypt.compare(plain, hash); }