@fgv/ts-extras-argon2 5.1.0-27 → 5.1.0-29

package/.rush/temp/1eeff6c792a22da33ec43389adf2e5a1cc51a542.tar.log

@@ -0,0 +1,48 @@
+Start time: Tue May 19 2026 18:40:59 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -c -f /home/runner/work/fgv/fgv/common/temp/build-cache/1eeff6c792a22da33ec43389adf2e5a1cc51a542-c28e0894e1234cc0.temp -z --files-from=-"
+
+======= BEGIN PROCESS INPUT ======
+.rush/temp/operation/build/all.log
+.rush/temp/operation/build/log-chunks.jsonl
+.rush/temp/operation/build/state.json
+dist/index.js
+dist/index.js.map
+dist/packlets/argon2/index.js
+dist/packlets/argon2/index.js.map
+dist/packlets/argon2/nodeArgon2Provider.js
+dist/packlets/argon2/nodeArgon2Provider.js.map
+dist/test/unit/argon2/crossRuntime.test.js
+dist/test/unit/argon2/crossRuntime.test.js.map
+dist/test/unit/argon2/nodeArgon2Provider.test.js
+dist/test/unit/argon2/nodeArgon2Provider.test.js.map
+dist/ts-extras-argon2.d.ts
+dist/tsdoc-metadata.json
+lib/index.d.ts
+lib/index.d.ts.map
+lib/index.js
+lib/index.js.map
+lib/packlets/argon2/index.d.ts
+lib/packlets/argon2/index.d.ts.map
+lib/packlets/argon2/index.js
+lib/packlets/argon2/index.js.map
+lib/packlets/argon2/nodeArgon2Provider.d.ts
+lib/packlets/argon2/nodeArgon2Provider.d.ts.map
+lib/packlets/argon2/nodeArgon2Provider.js
+lib/packlets/argon2/nodeArgon2Provider.js.map
+lib/test/unit/argon2/crossRuntime.test.d.ts
+lib/test/unit/argon2/crossRuntime.test.d.ts.map
+lib/test/unit/argon2/crossRuntime.test.js
+lib/test/unit/argon2/crossRuntime.test.js.map
+lib/test/unit/argon2/nodeArgon2Provider.test.d.ts
+lib/test/unit/argon2/nodeArgon2Provider.test.d.ts.map
+lib/test/unit/argon2/nodeArgon2Provider.test.js
+lib/test/unit/argon2/nodeArgon2Provider.test.js.map
+temp/build/lint/_eslint-5eVG3S6w.json
+temp/build/typescript/ts_8nwakTlr.json
+temp/ts-extras-argon2.api.json
+temp/ts-extras-argon2.api.md
+======== END PROCESS INPUT =======
+======= BEGIN PROCESS OUTPUT =======
+======== END PROCESS OUTPUT ========
+
+Exited with code "0"

package/.rush/temp/chunked-rush-logs/ts-extras-argon2.build.chunks.jsonl

@@ -0,0 +1,9 @@
+{"kind":"O","text":"Invoking: heft build --clean \n"}
+{"kind":"O","text":" ---- build started ---- \n"}
+{"kind":"O","text":"[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.\n"}
+{"kind":"O","text":"[build:typescript] Using TypeScript version 5.9.3\n"}
+{"kind":"O","text":"[build:lint] Using ESLint version 9.39.4\n"}
+{"kind":"O","text":"[build:api-extractor] Using API Extractor version 7.58.7\n"}
+{"kind":"O","text":"[build:api-extractor] Analysis will use the bundled TypeScript version 5.9.3\n"}
+{"kind":"O","text":" ---- build finished (17.433s) ---- \n"}
+{"kind":"O","text":"-------------------- Finished (17.442s) --------------------\n"}

package/.rush/temp/operation/build/all.log

@@ -0,0 +1,9 @@
+Invoking: heft build --clean 
+ ---- build started ---- 
+[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.
+[build:typescript] Using TypeScript version 5.9.3
+[build:lint] Using ESLint version 9.39.4
+[build:api-extractor] Using API Extractor version 7.58.7
+[build:api-extractor] Analysis will use the bundled TypeScript version 5.9.3
+ ---- build finished (17.433s) ---- 
+-------------------- Finished (17.442s) --------------------

package/.rush/temp/operation/build/log-chunks.jsonl

@@ -0,0 +1,9 @@
+{"kind":"O","text":"Invoking: heft build --clean \n"}
+{"kind":"O","text":" ---- build started ---- \n"}
+{"kind":"O","text":"[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.\n"}
+{"kind":"O","text":"[build:typescript] Using TypeScript version 5.9.3\n"}
+{"kind":"O","text":"[build:lint] Using ESLint version 9.39.4\n"}
+{"kind":"O","text":"[build:api-extractor] Using API Extractor version 7.58.7\n"}
+{"kind":"O","text":"[build:api-extractor] Analysis will use the bundled TypeScript version 5.9.3\n"}
+{"kind":"O","text":" ---- build finished (17.433s) ---- \n"}
+{"kind":"O","text":"-------------------- Finished (17.442s) --------------------\n"}

package/.rush/temp/operation/build/state.json

@@ -0,0 +1,3 @@
+{
+  "nonCachedDurationMs": 18958.439717999994
+}

package/.rush/temp/shrinkwrap-deps.json

@@ -57,14 +57,14 @@
   "@istanbuljs/load-nyc-config@1.1.0": "@istanbuljs/load-nyc-config@1.1.0:+tylbO0guJzkDbovYDgbHxTUl8kcvrir2peVAz60F9g=:",
   "@istanbuljs/schema@0.1.6": "@istanbuljs/schema@0.1.6:kHUsJhhk+xYurqEbatAwNKyk2wIdJh5oEFxE+OA9lAI=:",
   "@jest/console@29.7.0": "@jest/console@29.7.0:TQRkf42vTpyRj6JKPw9BkdMha9I54trgb3XRAe32Pl0=:",
-  "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):V0zwu+VAbcIqksDeTe5n4d5ZTagkHAxWMk+ZDMS/d8s=:",
+  "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):vfQwH98lHyFmOMKFwuLSUMu2oYc+jo7kNYES54VpHpM=:",
   "@jest/core@29.7.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "@jest/core@29.7.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):b1NlQGJwtwPo53fIAa52W7sL74ntIH9Gd71zkNZjtQU=:",
   "@jest/environment@29.7.0": "@jest/environment@29.7.0:OccT6t+RUEze2pPv2096Z0ZxEfPR51vzs3/M92hG+lg=:",
   "@jest/expect-utils@29.7.0": "@jest/expect-utils@29.7.0:/5kYHU3SqucZ7ntrJG7Xb6LROYA/xdv03kWifxweOOE=:",
   "@jest/expect@29.7.0": "@jest/expect@29.7.0:5RHpcXNns1pWGTly3ZEOXwfx30hQaVIQ/8ZSq+ggjXI=:",
   "@jest/fake-timers@29.7.0": "@jest/fake-timers@29.7.0:JvLOwTWmr/YwC0klYOyunqcJz4R6q9PWAQ9QL6BQGXU=:",
   "@jest/globals@29.7.0": "@jest/globals@29.7.0:rn89P6vMp8c61OyeFehs6p5mXPyh1Mg7SlqmQWtTqnk=:",
-  "@jest/reporters@29.5.0": "@jest/reporters@29.5.0:ZiTpAQdVIeEqE4kKPlJw5c+M6YeyZu1cxnKpzGXMKb0=:",
+  "@jest/reporters@29.5.0": "@jest/reporters@29.5.0:QAx67DoDgrmxGGeOO9XnaWpsolOsg2mf8YgGBlIjOhM=:",
   "@jest/reporters@29.7.0": "@jest/reporters@29.7.0:Tpczh4EpmTvIn/FN76ivA6tR31dNM++7NkS9J7dt4mE=:",
   "@jest/schemas@29.6.3": "@jest/schemas@29.6.3:k3bivx0mavN4Y4JNrlgZwLcSoyQrOCZXUXmIQ1Nsblc=:",
   "@jest/source-map@29.6.3": "@jest/source-map@29.6.3:YrWW+6HHLR2tfBDJ0S2FXQEQC+LRLZAxnV8EE+gaNkg=:",
@@ -159,8 +159,8 @@
   "@typescript-eslint/parser@8.56.1(eslint@9.37.0(jiti@2.7.0))(typescript@5.8.3)": "@typescript-eslint/parser@8.56.1(eslint@9.37.0(jiti@2.7.0))(typescript@5.8.3):gY3oJ8Qa8yQw9MilFm9zL330Ig+ihnjnAFKtjOpL+JM=:",
   "@typescript-eslint/parser@8.56.1(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3)": "@typescript-eslint/parser@8.56.1(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3):IObb8qC909jXqUvvc2AGU4SXIVCm64dC/YgeexZXn5k=:",
   "@typescript-eslint/parser@8.59.3(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3)": "@typescript-eslint/parser@8.59.3(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3):DWHVak7g3z8Gq6oXyoVHa09NFMm+1YrikFbi//bjj8I=:",
-  "@typescript-eslint/project-service@8.56.1(typescript@5.8.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.8.3):FfgcSYlXvtFZ/3N7mrxILyidaGkI2MvkdZFemEaPrlc=:",
-  "@typescript-eslint/project-service@8.56.1(typescript@5.9.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.9.3):rkrN1q21SxLWTf+VycNAkuMIJ6+fX1fKMfYYLvcugh0=:",
+  "@typescript-eslint/project-service@8.56.1(typescript@5.8.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.8.3):L+l5gLoQs5jJA99jom0A+h+VN2ISYACSekXHA1c1EwI=:",
+  "@typescript-eslint/project-service@8.56.1(typescript@5.9.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.9.3):GSD5sT6y3sR1zlsIgMPHy0OlPy4VfklleV3legIGWOs=:",
   "@typescript-eslint/project-service@8.59.3(typescript@5.9.3)": "@typescript-eslint/project-service@8.59.3(typescript@5.9.3):TdtQIDvh8U+Zg9ZhH+lSb++qqy5nbqa8kGNXmm0SjTs=:",
   "@typescript-eslint/scope-manager@8.56.1": "@typescript-eslint/scope-manager@8.56.1:oakiB4Lxz5IzduhJyobePnldPnbj+7aVEx2xiDKHndY=:",
   "@typescript-eslint/scope-manager@8.59.3": "@typescript-eslint/scope-manager@8.59.3:Ts9EflddW/+1TZMWGiBwaa+te9EFZTwTiltllXqs2fk=:",
@@ -188,9 +188,10 @@
   "acorn@8.16.0": "acorn@8.16.0:jUfpbMqUSWQXeMk9lBKufnFEiAXwmYW9Gyao55/YJG0=:",
   "agent-base@6.0.2": "agent-base@6.0.2:s+vm2vdDiTWD5EEK8YZUuCJ8nNJVPz+o/sVHEzuEw90=:",
   "ajv-draft-04@1.0.0(ajv@8.18.0)": "ajv-draft-04@1.0.0(ajv@8.18.0):JG8wTlojY/flM3PwHQclVQAYfj7Apf56biGgSdOawQA=:",
-  "ajv-formats@3.0.1": "ajv-formats@3.0.1:UsGmpDGZlVReLuxRucUPL4JVD/HgxRGxNHwFFDT4HgQ=:",
+  "ajv-formats@3.0.1": "ajv-formats@3.0.1:7+hwYT+T7Wmw6jFzMzBm5dGWCyFLue4kddTc+2OQECA=:",
   "ajv@6.15.0": "ajv@6.15.0:SD87QJjJxWrlD9SUV0MTNqxBwRwf0xRmGzKqFBfAZSg=:",
   "ajv@8.18.0": "ajv@8.18.0:fTpbnLje6H+gfMLuSRWwe2Qp/VZ11RZHypBNhBPLmX8=:",
+  "ajv@8.20.0": "ajv@8.20.0:/ablYS+O64orF8yVeWOKxUDKBphSTMP9xnFhKylMYb0=:",
   "ansi-escapes@4.3.2": "ansi-escapes@4.3.2:krrUMjeesFpE6MS4Ii5hJdNFd3JYXKgtoieUIuY2ico=:",
   "ansi-regex@5.0.1": "ansi-regex@5.0.1:cbFbJn342lSe4Qm0qQ4VieLS/1iZGV2bhNms0khI14g=:",
   "ansi-styles@4.3.0": "ansi-styles@4.3.0:ZWSFBwfXYCdLBmX2ZXoVqBWX7sfMR5ZmhLs9Hyh39XY=:",
@@ -434,7 +435,7 @@
   "jest-changed-files@29.7.0": "jest-changed-files@29.7.0:oQS4ZWmXYqUwlExhMtgIYgDrwHDfmSOPex9x9R1BwUQ=:",
   "jest-circus@29.7.0": "jest-circus@29.7.0:yKDzkjQNELGCvKM8K1D/BYsyoDeetnFypU+2dKjWLrw=:",
   "jest-cli@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-cli@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):sid6fyxWeD2LmzsKeuE9ulLUfPuKWIe3mrX89qQvdUg=:",
-  "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):bdseYaXTdKR2bnqvvkKVkXc6oiy1i5XV15pv2y90AZI=:",
+  "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):lS+QCqueeY8mS0Dqn36KKAbEXQEsDuU+i6KMbrKL/GQ=:",
   "jest-config@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-config@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):UT4Gi5l03YYG8sqOkmsIqMrvyBccuYh7Lb46SznLdO4=:",
   "jest-diff@29.7.0": "jest-diff@29.7.0:Ul5FBhhA/MnkZjU6Dat9uRuf6qcBfKMXWTGRugGLmDY=:",
   "jest-docblock@29.7.0": "jest-docblock@29.7.0:pvQX9Pr6W46Wv/xaMCwWM5f6zyR3WoTJC/YHcZu48HU=:",
@@ -456,7 +457,7 @@
   "jest-resolve@29.7.0": "jest-resolve@29.7.0:hvpSASO6uKsWu0SgUVZVsNF5S0LSrMpEb1G6FwvShKo=:",
   "jest-runner@29.7.0": "jest-runner@29.7.0:5+B6nV1nN59/Eg+IsyyAqFFiKLiMsiUc88cR+p1HE3U=:",
   "jest-runtime@29.7.0": "jest-runtime@29.7.0:nRTNmq97N5lDhQkiTdeeRwvDOtYleSbv0G0VPVt3q2Q=:",
-  "jest-snapshot@29.5.0": "jest-snapshot@29.5.0:zd7GXLUt/VoNTVpYF5W2mQWcnrkmG1j1FHLm/4cjoHo=:",
+  "jest-snapshot@29.5.0": "jest-snapshot@29.5.0:QntNipgva8RvAs1Nhm45LPl5b2PU7nNaTd2XwI6Xwas=:",
   "jest-snapshot@29.7.0": "jest-snapshot@29.7.0:kggrREcar663ZeUts8W+NgpOyg8GFr1lEOh1Lj1SiUI=:",
   "jest-util@29.7.0": "jest-util@29.7.0:gHlcHPbEBD1XLvUIxS8pkftzVgiU9ELvAxf4UXScHRc=:",
   "jest-validate@29.7.0": "jest-validate@29.7.0:X0BFNNuaTkbRX14EvARv9uObBFs94o3bDjvhgzQqER4=:",

package/dist/index.js

@@ -0,0 +1,21 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+export { NodeArgon2Provider, CryptoUtils } from './packlets/argon2';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nexport { NodeArgon2Provider, CryptoUtils } from './packlets/argon2';\n"]}

package/dist/packlets/argon2/index.js

@@ -0,0 +1,24 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+export { NodeArgon2Provider } from './nodeArgon2Provider';
+// Re-export CryptoUtils namespace from ts-extras for consumer convenience
+// (provides IArgon2idProvider, IArgon2idParams, ARGON2ID_OWASP_MIN, ARGON2ID_PASSPHRASE).
+export { CryptoUtils } from '@fgv/ts-extras';
+//# sourceMappingURL=index.js.map

package/dist/packlets/argon2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/packlets/argon2/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,0EAA0E;AAC1E,0FAA0F;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nexport { NodeArgon2Provider } from './nodeArgon2Provider';\n\n// Re-export CryptoUtils namespace from ts-extras for consumer convenience\n// (provides IArgon2idProvider, IArgon2idParams, ARGON2ID_OWASP_MIN, ARGON2ID_PASSPHRASE).\nexport { CryptoUtils } from '@fgv/ts-extras';\n"]}

package/dist/packlets/argon2/nodeArgon2Provider.js

@@ -0,0 +1,80 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+import * as argon2 from 'argon2';
+import { captureAsyncResult, fail, succeed } from '@fgv/ts-utils';
+/**
+ * Node.js implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by the
+ * `argon2` (kelektiv) native binding.
+ * @public
+ */
+export class NodeArgon2Provider {
+    constructor() { }
+    /**
+     * Creates a new {@link NodeArgon2Provider} instance.
+     * @returns Success with a new provider instance.
+     * @public
+     */
+    static create() {
+        return succeed(new NodeArgon2Provider());
+    }
+    /**
+     * Derives a key using Argon2id.
+     *
+     * @param password - The password or passphrase (string or raw bytes).
+     * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).
+     * @param params - Argon2id parameters. All values are validated before derivation.
+     * @returns Success with the derived key bytes, or Failure with a descriptive message.
+     * @public
+     */
+    async argon2id(password, salt, params) {
+        const error = NodeArgon2Provider._validateParams(params);
+        if (error !== undefined) {
+            return fail(error);
+        }
+        return captureAsyncResult(async () => {
+            const result = await argon2.hash(password instanceof Uint8Array ? Buffer.from(password) : password, {
+                type: argon2.argon2id,
+                salt: Buffer.from(salt),
+                memoryCost: params.memoryKiB,
+                timeCost: params.iterations,
+                parallelism: params.parallelism,
+                hashLength: params.outputBytes,
+                raw: true
+            });
+            return Uint8Array.from(result);
+        });
+    }
+    static _validateParams(params) {
+        if (params.memoryKiB < 8) {
+            return `argon2id: memoryKiB must be >= 8, got ${params.memoryKiB}`;
+        }
+        if (params.iterations < 1) {
+            return `argon2id: iterations must be >= 1, got ${params.iterations}`;
+        }
+        if (params.parallelism < 1 || params.parallelism > 255) {
+            return `argon2id: parallelism must be 1..255, got ${params.parallelism}`;
+        }
+        if (params.outputBytes < 4) {
+            return `argon2id: outputBytes must be >= 4, got ${params.outputBytes}`;
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=nodeArgon2Provider.js.map

package/dist/packlets/argon2/nodeArgon2Provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeArgon2Provider.js","sourceRoot":"","sources":["../../../src/packlets/argon2/nodeArgon2Provider.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAU,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG1E;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAC7B,gBAAuB,CAAC;IAExB;;;;OAIG;IACI,MAAM,CAAC,MAAM;QAClB,OAAO,OAAO,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,QAAQ,CACnB,QAA6B,EAC7B,IAAgB,EAChB,MAAmC;QAEnC,MAAM,KAAK,GAAG,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;gBAClG,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,QAAQ,EAAE,MAAM,CAAC,UAAU;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,GAAG,EAAE,IAAI;aACV,CAAC,CAAC;YACH,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,MAAmC;QAChE,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,yCAAyC,MAAM,CAAC,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,0CAA0C,MAAM,CAAC,UAAU,EAAE,CAAC;QACvE,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YACvD,OAAO,6CAA6C,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,2CAA2C,MAAM,CAAC,WAAW,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nimport * as argon2 from 'argon2';\nimport { Result, captureAsyncResult, fail, succeed } from '@fgv/ts-utils';\nimport { CryptoUtils } from '@fgv/ts-extras';\n\n/**\n * Node.js implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by the\n * `argon2` (kelektiv) native binding.\n * @public\n */\nexport class NodeArgon2Provider implements CryptoUtils.IArgon2idProvider {\n  private constructor() {}\n\n  /**\n   * Creates a new {@link NodeArgon2Provider} instance.\n   * @returns Success with a new provider instance.\n   * @public\n   */\n  public static create(): Result<NodeArgon2Provider> {\n    return succeed(new NodeArgon2Provider());\n  }\n\n  /**\n   * Derives a key using Argon2id.\n   *\n   * @param password - The password or passphrase (string or raw bytes).\n   * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).\n   * @param params - Argon2id parameters. All values are validated before derivation.\n   * @returns Success with the derived key bytes, or Failure with a descriptive message.\n   * @public\n   */\n  public async argon2id(\n    password: Uint8Array | string,\n    salt: Uint8Array,\n    params: CryptoUtils.IArgon2idParams\n  ): Promise<Result<Uint8Array>> {\n    const error = NodeArgon2Provider._validateParams(params);\n    if (error !== undefined) {\n      return fail(error);\n    }\n\n    return captureAsyncResult(async () => {\n      const result = await argon2.hash(password instanceof Uint8Array ? Buffer.from(password) : password, {\n        type: argon2.argon2id,\n        salt: Buffer.from(salt),\n        memoryCost: params.memoryKiB,\n        timeCost: params.iterations,\n        parallelism: params.parallelism,\n        hashLength: params.outputBytes,\n        raw: true\n      });\n      return Uint8Array.from(result);\n    });\n  }\n\n  private static _validateParams(params: CryptoUtils.IArgon2idParams): string | undefined {\n    if (params.memoryKiB < 8) {\n      return `argon2id: memoryKiB must be >= 8, got ${params.memoryKiB}`;\n    }\n    if (params.iterations < 1) {\n      return `argon2id: iterations must be >= 1, got ${params.iterations}`;\n    }\n    if (params.parallelism < 1 || params.parallelism > 255) {\n      return `argon2id: parallelism must be 1..255, got ${params.parallelism}`;\n    }\n    if (params.outputBytes < 4) {\n      return `argon2id: outputBytes must be >= 4, got ${params.outputBytes}`;\n    }\n    return undefined;\n  }\n}\n"]}

package/dist/test/unit/argon2/crossRuntime.test.js

@@ -0,0 +1,96 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+import '@fgv/ts-utils-jest';
+import { NodeArgon2Provider } from '../../../packlets/argon2';
+import { BrowserArgon2Provider } from '@fgv/ts-web-extras-argon2';
+// RFC 9106 §B.3 parameter set (no secret/AD — our IArgon2idParams interface does not expose
+// those optional Argon2 fields). Both implementations must agree on this exact output.
+const RFC_PARAMS = {
+    memoryKiB: 32,
+    iterations: 3,
+    parallelism: 4,
+    outputBytes: 32
+};
+const RFC_PASSWORD = new Uint8Array(32).fill(0x01);
+const RFC_SALT = new Uint8Array(16).fill(0x02);
+// Verified independently against both argon2 (kelektiv) and hash-wasm.
+const RFC_EXPECTED_HEX = '03aab965c12001c9d7d0d2de33192c0494b684bb148196d73c1df1acaf6d0c2e';
+const SWEEP = [
+    {
+        label: 'RFC §B.3 base case',
+        password: RFC_PASSWORD,
+        salt: RFC_SALT,
+        params: RFC_PARAMS
+    },
+    {
+        label: 'string password',
+        password: 'correct horse battery staple',
+        salt: RFC_SALT,
+        params: RFC_PARAMS
+    },
+    {
+        label: 'higher memoryKiB',
+        password: RFC_PASSWORD,
+        salt: RFC_SALT,
+        params: Object.assign(Object.assign({}, RFC_PARAMS), { memoryKiB: 64 })
+    },
+    {
+        label: 'more iterations',
+        password: RFC_PASSWORD,
+        salt: RFC_SALT,
+        params: Object.assign(Object.assign({}, RFC_PARAMS), { iterations: 5 })
+    },
+    {
+        label: 'parallelism=1',
+        password: RFC_PASSWORD,
+        salt: RFC_SALT,
+        params: Object.assign(Object.assign({}, RFC_PARAMS), { parallelism: 1 })
+    },
+    {
+        label: 'longer output (64 bytes)',
+        password: RFC_PASSWORD,
+        salt: RFC_SALT,
+        params: Object.assign(Object.assign({}, RFC_PARAMS), { outputBytes: 64 })
+    },
+    {
+        label: 'different salt',
+        password: RFC_PASSWORD,
+        salt: new Uint8Array(16).fill(0x07),
+        params: RFC_PARAMS
+    }
+];
+describe('cross-runtime equivalence: NodeArgon2Provider vs BrowserArgon2Provider', () => {
+    let node;
+    let browser;
+    beforeEach(() => {
+        node = NodeArgon2Provider.create().orThrow();
+        browser = BrowserArgon2Provider.create().orThrow();
+    });
+    test('RFC §B.3 parameter set matches known-good hex output', async () => {
+        const nodeBytes = (await node.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();
+        expect(Buffer.from(nodeBytes).toString('hex')).toBe(RFC_EXPECTED_HEX);
+    });
+    test.each(SWEEP)('$label: outputs are byte-identical', async ({ password, salt, params }) => {
+        const nodeBytes = (await node.argon2id(password, salt, params)).orThrow();
+        const browserBytes = (await browser.argon2id(password, salt, params)).orThrow();
+        expect(nodeBytes).toEqual(browserBytes);
+    });
+});
+//# sourceMappingURL=crossRuntime.test.js.map

package/dist/test/unit/argon2/crossRuntime.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crossRuntime.test.js","sourceRoot":"","sources":["../../../../src/test/unit/argon2/crossRuntime.test.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAGlE,4FAA4F;AAC5F,uFAAuF;AACvF,MAAM,UAAU,GAAgC;IAC9C,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;CAChB,CAAC;AACF,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE/C,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,kEAAkE,CAAC;AAU5F,MAAM,KAAK,GAAgB;IACzB;QACE,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,UAAU;KACnB;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,8BAA8B;QACxC,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,UAAU;KACnB;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM,kCAAO,UAAU,KAAE,SAAS,EAAE,EAAE,GAAE;KACzC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM,kCAAO,UAAU,KAAE,UAAU,EAAE,CAAC,GAAE;KACzC;IACD;QACE,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM,kCAAO,UAAU,KAAE,WAAW,EAAE,CAAC,GAAE;KAC1C;IACD;QACE,KAAK,EAAE,0BAA0B;QACjC,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM,kCAAO,UAAU,KAAE,WAAW,EAAE,EAAE,GAAE;KAC3C;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,UAAU;KACnB;CACF,CAAC;AAEF,QAAQ,CAAC,wEAAwE,EAAE,GAAG,EAAE;IACtF,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAA8B,CAAC;IAEnC,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QAC7C,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,oCAAoC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1F,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1E,MAAM,YAAY,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nimport '@fgv/ts-utils-jest';\nimport { NodeArgon2Provider } from '../../../packlets/argon2';\nimport { BrowserArgon2Provider } from '@fgv/ts-web-extras-argon2';\nimport { CryptoUtils } from '@fgv/ts-extras';\n\n// RFC 9106 §B.3 parameter set (no secret/AD — our IArgon2idParams interface does not expose\n// those optional Argon2 fields). Both implementations must agree on this exact output.\nconst RFC_PARAMS: CryptoUtils.IArgon2idParams = {\n  memoryKiB: 32,\n  iterations: 3,\n  parallelism: 4,\n  outputBytes: 32\n};\nconst RFC_PASSWORD = new Uint8Array(32).fill(0x01);\nconst RFC_SALT = new Uint8Array(16).fill(0x02);\n\n// Verified independently against both argon2 (kelektiv) and hash-wasm.\nconst RFC_EXPECTED_HEX = '03aab965c12001c9d7d0d2de33192c0494b684bb148196d73c1df1acaf6d0c2e';\n\n// Parameter sweep — covers variation in each dimension independently.\ninterface ITestCase {\n  label: string;\n  password: Uint8Array | string;\n  salt: Uint8Array;\n  params: CryptoUtils.IArgon2idParams;\n}\n\nconst SWEEP: ITestCase[] = [\n  {\n    label: 'RFC §B.3 base case',\n    password: RFC_PASSWORD,\n    salt: RFC_SALT,\n    params: RFC_PARAMS\n  },\n  {\n    label: 'string password',\n    password: 'correct horse battery staple',\n    salt: RFC_SALT,\n    params: RFC_PARAMS\n  },\n  {\n    label: 'higher memoryKiB',\n    password: RFC_PASSWORD,\n    salt: RFC_SALT,\n    params: { ...RFC_PARAMS, memoryKiB: 64 }\n  },\n  {\n    label: 'more iterations',\n    password: RFC_PASSWORD,\n    salt: RFC_SALT,\n    params: { ...RFC_PARAMS, iterations: 5 }\n  },\n  {\n    label: 'parallelism=1',\n    password: RFC_PASSWORD,\n    salt: RFC_SALT,\n    params: { ...RFC_PARAMS, parallelism: 1 }\n  },\n  {\n    label: 'longer output (64 bytes)',\n    password: RFC_PASSWORD,\n    salt: RFC_SALT,\n    params: { ...RFC_PARAMS, outputBytes: 64 }\n  },\n  {\n    label: 'different salt',\n    password: RFC_PASSWORD,\n    salt: new Uint8Array(16).fill(0x07),\n    params: RFC_PARAMS\n  }\n];\n\ndescribe('cross-runtime equivalence: NodeArgon2Provider vs BrowserArgon2Provider', () => {\n  let node: NodeArgon2Provider;\n  let browser: BrowserArgon2Provider;\n\n  beforeEach(() => {\n    node = NodeArgon2Provider.create().orThrow();\n    browser = BrowserArgon2Provider.create().orThrow();\n  });\n\n  test('RFC §B.3 parameter set matches known-good hex output', async () => {\n    const nodeBytes = (await node.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();\n    expect(Buffer.from(nodeBytes).toString('hex')).toBe(RFC_EXPECTED_HEX);\n  });\n\n  test.each(SWEEP)('$label: outputs are byte-identical', async ({ password, salt, params }) => {\n    const nodeBytes = (await node.argon2id(password, salt, params)).orThrow();\n    const browserBytes = (await browser.argon2id(password, salt, params)).orThrow();\n    expect(nodeBytes).toEqual(browserBytes);\n  });\n});\n"]}

package/dist/test/unit/argon2/nodeArgon2Provider.test.js

@@ -0,0 +1,100 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+import '@fgv/ts-utils-jest';
+import { NodeArgon2Provider } from '../../../packlets/argon2';
+// RFC 9106 §B.3 parameter set (no secret/AD — our interface does not expose those fields).
+// t=3, m=32, p=4, tag=32. Used for determinism and cross-runtime agreement.
+const RFC_PARAMS = {
+    memoryKiB: 32,
+    iterations: 3,
+    parallelism: 4,
+    outputBytes: 32
+};
+const RFC_PASSWORD = new Uint8Array(32).fill(0x01);
+const RFC_SALT = new Uint8Array(16).fill(0x02);
+describe('NodeArgon2Provider', () => {
+    let provider;
+    beforeEach(() => {
+        provider = NodeArgon2Provider.create().orThrow();
+    });
+    describe('create()', () => {
+        test('returns a provider instance', () => {
+            expect(NodeArgon2Provider.create()).toSucceedAndSatisfy((p) => {
+                expect(p).toBeInstanceOf(NodeArgon2Provider);
+            });
+        });
+    });
+    describe('argon2id()', () => {
+        test('derives a key with Uint8Array password', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {
+                expect(bytes).toBeInstanceOf(Uint8Array);
+                expect(bytes.length).toBe(RFC_PARAMS.outputBytes);
+            });
+        });
+        test('derives a key with string password', async () => {
+            expect(await provider.argon2id('password', RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {
+                expect(bytes).toBeInstanceOf(Uint8Array);
+                expect(bytes.length).toBe(RFC_PARAMS.outputBytes);
+            });
+        });
+        test('is deterministic — same inputs produce identical bytes', async () => {
+            const r1 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();
+            const r2 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();
+            expect(r1).toEqual(r2);
+        });
+        test('different passwords produce different bytes', async () => {
+            const a = (await provider.argon2id(new Uint8Array(32).fill(0x01), RFC_SALT, RFC_PARAMS)).orThrow();
+            const b = (await provider.argon2id(new Uint8Array(32).fill(0x02), RFC_SALT, RFC_PARAMS)).orThrow();
+            expect(a).not.toEqual(b);
+        });
+        test('different salts produce different bytes', async () => {
+            const a = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x02), RFC_PARAMS)).orThrow();
+            const b = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x03), RFC_PARAMS)).orThrow();
+            expect(a).not.toEqual(b);
+        });
+        test('respects outputBytes', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { outputBytes: 64 }))).toSucceedAndSatisfy((bytes) => {
+                expect(bytes.length).toBe(64);
+            });
+        });
+        test('returns failure when underlying library rejects (salt too short)', async () => {
+            const tinySalt = new Uint8Array(1).fill(0x02); // argon2 requires >= 8 bytes
+            expect(await provider.argon2id(RFC_PASSWORD, tinySalt, RFC_PARAMS)).toFail();
+        });
+    });
+    describe('parameter validation', () => {
+        test('fails when memoryKiB < 8', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { memoryKiB: 7 }))).toFailWith(/memoryKiB must be >= 8/i);
+        });
+        test('fails when iterations < 1', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { iterations: 0 }))).toFailWith(/iterations must be >= 1/i);
+        });
+        test('fails when parallelism < 1', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { parallelism: 0 }))).toFailWith(/parallelism must be 1\.\.255/i);
+        });
+        test('fails when parallelism > 255', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { parallelism: 256 }))).toFailWith(/parallelism must be 1\.\.255/i);
+        });
+        test('fails when outputBytes < 4', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { outputBytes: 3 }))).toFailWith(/outputBytes must be >= 4/i);
+        });
+    });
+});
+//# sourceMappingURL=nodeArgon2Provider.test.js.map

package/dist/test/unit/argon2/nodeArgon2Provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeArgon2Provider.test.js","sourceRoot":"","sources":["../../../../src/test/unit/argon2/nodeArgon2Provider.test.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAG9D,2FAA2F;AAC3F,4EAA4E;AAC5E,MAAM,UAAU,GAAgC;IAC9C,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;CAChB,CAAC;AACF,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE/C,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,QAA4B,CAAC;IAEjC,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5D,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChG,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9F,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnF,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnF,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnG,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACvG,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACvG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,CACJ,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,EAAE,IAAG,CACpF,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B;YAC5E,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,SAAS,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CACjG,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,UAAU,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CAClG,0BAA0B,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CACnG,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,GAAG,IAAG,CAAC,CAAC,UAAU,CACrG,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CACnG,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nimport '@fgv/ts-utils-jest';\nimport { NodeArgon2Provider } from '../../../packlets/argon2';\nimport { CryptoUtils } from '@fgv/ts-extras';\n\n// RFC 9106 §B.3 parameter set (no secret/AD — our interface does not expose those fields).\n// t=3, m=32, p=4, tag=32. Used for determinism and cross-runtime agreement.\nconst RFC_PARAMS: CryptoUtils.IArgon2idParams = {\n  memoryKiB: 32,\n  iterations: 3,\n  parallelism: 4,\n  outputBytes: 32\n};\nconst RFC_PASSWORD = new Uint8Array(32).fill(0x01);\nconst RFC_SALT = new Uint8Array(16).fill(0x02);\n\ndescribe('NodeArgon2Provider', () => {\n  let provider: NodeArgon2Provider;\n\n  beforeEach(() => {\n    provider = NodeArgon2Provider.create().orThrow();\n  });\n\n  describe('create()', () => {\n    test('returns a provider instance', () => {\n      expect(NodeArgon2Provider.create()).toSucceedAndSatisfy((p) => {\n        expect(p).toBeInstanceOf(NodeArgon2Provider);\n      });\n    });\n  });\n\n  describe('argon2id()', () => {\n    test('derives a key with Uint8Array password', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {\n        expect(bytes).toBeInstanceOf(Uint8Array);\n        expect(bytes.length).toBe(RFC_PARAMS.outputBytes);\n      });\n    });\n\n    test('derives a key with string password', async () => {\n      expect(await provider.argon2id('password', RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {\n        expect(bytes).toBeInstanceOf(Uint8Array);\n        expect(bytes.length).toBe(RFC_PARAMS.outputBytes);\n      });\n    });\n\n    test('is deterministic — same inputs produce identical bytes', async () => {\n      const r1 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();\n      const r2 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();\n      expect(r1).toEqual(r2);\n    });\n\n    test('different passwords produce different bytes', async () => {\n      const a = (await provider.argon2id(new Uint8Array(32).fill(0x01), RFC_SALT, RFC_PARAMS)).orThrow();\n      const b = (await provider.argon2id(new Uint8Array(32).fill(0x02), RFC_SALT, RFC_PARAMS)).orThrow();\n      expect(a).not.toEqual(b);\n    });\n\n    test('different salts produce different bytes', async () => {\n      const a = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x02), RFC_PARAMS)).orThrow();\n      const b = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x03), RFC_PARAMS)).orThrow();\n      expect(a).not.toEqual(b);\n    });\n\n    test('respects outputBytes', async () => {\n      expect(\n        await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, outputBytes: 64 })\n      ).toSucceedAndSatisfy((bytes) => {\n        expect(bytes.length).toBe(64);\n      });\n    });\n\n    test('returns failure when underlying library rejects (salt too short)', async () => {\n      const tinySalt = new Uint8Array(1).fill(0x02); // argon2 requires >= 8 bytes\n      expect(await provider.argon2id(RFC_PASSWORD, tinySalt, RFC_PARAMS)).toFail();\n    });\n  });\n\n  describe('parameter validation', () => {\n    test('fails when memoryKiB < 8', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, memoryKiB: 7 })).toFailWith(\n        /memoryKiB must be >= 8/i\n      );\n    });\n\n    test('fails when iterations < 1', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, iterations: 0 })).toFailWith(\n        /iterations must be >= 1/i\n      );\n    });\n\n    test('fails when parallelism < 1', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, parallelism: 0 })).toFailWith(\n        /parallelism must be 1\\.\\.255/i\n      );\n    });\n\n    test('fails when parallelism > 255', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, parallelism: 256 })).toFailWith(\n        /parallelism must be 1\\.\\.255/i\n      );\n    });\n\n    test('fails when outputBytes < 4', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, outputBytes: 3 })).toFailWith(\n        /outputBytes must be >= 4/i\n      );\n    });\n  });\n});\n"]}

package/dist/ts-extras-argon2.d.ts

@@ -0,0 +1,32 @@
+import { CryptoUtils } from '@fgv/ts-extras';
+import { Result } from '@fgv/ts-utils';
+
+export { CryptoUtils }
+
+/**
+ * Node.js implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by the
+ * `argon2` (kelektiv) native binding.
+ * @public
+ */
+export declare class NodeArgon2Provider implements CryptoUtils.IArgon2idProvider {
+    private constructor();
+    /**
+     * Creates a new {@link NodeArgon2Provider} instance.
+     * @returns Success with a new provider instance.
+     * @public
+     */
+    static create(): Result<NodeArgon2Provider>;
+    /**
+     * Derives a key using Argon2id.
+     *
+     * @param password - The password or passphrase (string or raw bytes).
+     * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).
+     * @param params - Argon2id parameters. All values are validated before derivation.
+     * @returns Success with the derived key bytes, or Failure with a descriptive message.
+     * @public
+     */
+    argon2id(password: Uint8Array | string, salt: Uint8Array, params: CryptoUtils.IArgon2idParams): Promise<Result<Uint8Array>>;
+    private static _validateParams;
+}
+
+export { }

package/dist/tsdoc-metadata.json

@@ -0,0 +1,11 @@
+// This file is read by tools that parse documentation comments conforming to the TSDoc standard.
+// It should be published with your NPM package.  It should not be tracked by Git.
+{
+  "tsdocVersion": "0.12",
+  "toolPackages": [
+    {
+      "packageName": "@microsoft/api-extractor",
+      "packageVersion": "7.58.7"
+    }
+  ]
+}

package/lib/index.d.ts

@@ -0,0 +1,2 @@
+export { NodeArgon2Provider, CryptoUtils } from './packlets/argon2';
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/lib/index.js

@@ -0,0 +1,26 @@
+"use strict";
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoUtils = exports.NodeArgon2Provider = void 0;
+var argon2_1 = require("./packlets/argon2");
+Object.defineProperty(exports, "NodeArgon2Provider", { enumerable: true, get: function () { return argon2_1.NodeArgon2Provider; } });
+Object.defineProperty(exports, "CryptoUtils", { enumerable: true, get: function () { return argon2_1.CryptoUtils; } });
+//# sourceMappingURL=index.js.map