@fgv/ts-web-extras-argon2 5.1.0-27 → 5.1.0-29

package/.rush/temp/84f4698424f6c0bcfb3eeaa50b47f3e82ab9c5a7.tar.log

@@ -0,0 +1,42 @@
+Start time: Tue May 19 2026 18:40:28 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -c -f /home/runner/work/fgv/fgv/common/temp/build-cache/84f4698424f6c0bcfb3eeaa50b47f3e82ab9c5a7-4d3fffdada12869c.temp -z --files-from=-"
+
+======= BEGIN PROCESS INPUT ======
+.rush/temp/operation/build/all.log
+.rush/temp/operation/build/log-chunks.jsonl
+.rush/temp/operation/build/state.json
+dist/index.js
+dist/index.js.map
+dist/packlets/argon2/browserArgon2Provider.js
+dist/packlets/argon2/browserArgon2Provider.js.map
+dist/packlets/argon2/index.js
+dist/packlets/argon2/index.js.map
+dist/test/unit/argon2/browserArgon2Provider.test.js
+dist/test/unit/argon2/browserArgon2Provider.test.js.map
+dist/ts-web-extras-argon2.d.ts
+dist/tsdoc-metadata.json
+lib/index.d.ts
+lib/index.d.ts.map
+lib/index.js
+lib/index.js.map
+lib/packlets/argon2/browserArgon2Provider.d.ts
+lib/packlets/argon2/browserArgon2Provider.d.ts.map
+lib/packlets/argon2/browserArgon2Provider.js
+lib/packlets/argon2/browserArgon2Provider.js.map
+lib/packlets/argon2/index.d.ts
+lib/packlets/argon2/index.d.ts.map
+lib/packlets/argon2/index.js
+lib/packlets/argon2/index.js.map
+lib/test/unit/argon2/browserArgon2Provider.test.d.ts
+lib/test/unit/argon2/browserArgon2Provider.test.d.ts.map
+lib/test/unit/argon2/browserArgon2Provider.test.js
+lib/test/unit/argon2/browserArgon2Provider.test.js.map
+temp/build/lint/_eslint-5eVG3S6w.json
+temp/build/typescript/ts_8nwakTlr.json
+temp/ts-web-extras-argon2.api.json
+temp/ts-web-extras-argon2.api.md
+======== END PROCESS INPUT =======
+======= BEGIN PROCESS OUTPUT =======
+======== END PROCESS OUTPUT ========
+
+Exited with code "0"

package/.rush/temp/chunked-rush-logs/ts-web-extras-argon2.build.chunks.jsonl

@@ -0,0 +1,9 @@
+{"kind":"O","text":"Invoking: heft build --clean \n"}
+{"kind":"O","text":" ---- build started ---- \n"}
+{"kind":"O","text":"[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.\n"}
+{"kind":"O","text":"[build:typescript] Using TypeScript version 5.9.3\n"}
+{"kind":"O","text":"[build:lint] Using ESLint version 9.39.4\n"}
+{"kind":"O","text":"[build:api-extractor] Using API Extractor version 7.58.7\n"}
+{"kind":"O","text":"[build:api-extractor] Analysis will use the bundled TypeScript version 5.9.3\n"}
+{"kind":"O","text":" ---- build finished (19.098s) ---- \n"}
+{"kind":"O","text":"-------------------- Finished (19.102s) --------------------\n"}

package/.rush/temp/operation/build/all.log

@@ -0,0 +1,9 @@
+Invoking: heft build --clean 
+ ---- build started ---- 
+[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.
+[build:typescript] Using TypeScript version 5.9.3
+[build:lint] Using ESLint version 9.39.4
+[build:api-extractor] Using API Extractor version 7.58.7
+[build:api-extractor] Analysis will use the bundled TypeScript version 5.9.3
+ ---- build finished (19.098s) ---- 
+-------------------- Finished (19.102s) --------------------

package/.rush/temp/operation/build/log-chunks.jsonl

@@ -0,0 +1,9 @@
+{"kind":"O","text":"Invoking: heft build --clean \n"}
+{"kind":"O","text":" ---- build started ---- \n"}
+{"kind":"O","text":"[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.\n"}
+{"kind":"O","text":"[build:typescript] Using TypeScript version 5.9.3\n"}
+{"kind":"O","text":"[build:lint] Using ESLint version 9.39.4\n"}
+{"kind":"O","text":"[build:api-extractor] Using API Extractor version 7.58.7\n"}
+{"kind":"O","text":"[build:api-extractor] Analysis will use the bundled TypeScript version 5.9.3\n"}
+{"kind":"O","text":" ---- build finished (19.098s) ---- \n"}
+{"kind":"O","text":"-------------------- Finished (19.102s) --------------------\n"}

package/.rush/temp/operation/build/state.json

@@ -0,0 +1,3 @@
+{
+  "nonCachedDurationMs": 19955.520883999998
+}

package/.rush/temp/shrinkwrap-deps.json

@@ -56,14 +56,14 @@
   "@istanbuljs/load-nyc-config@1.1.0": "@istanbuljs/load-nyc-config@1.1.0:+tylbO0guJzkDbovYDgbHxTUl8kcvrir2peVAz60F9g=:",
   "@istanbuljs/schema@0.1.6": "@istanbuljs/schema@0.1.6:kHUsJhhk+xYurqEbatAwNKyk2wIdJh5oEFxE+OA9lAI=:",
   "@jest/console@29.7.0": "@jest/console@29.7.0:TQRkf42vTpyRj6JKPw9BkdMha9I54trgb3XRAe32Pl0=:",
-  "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):V0zwu+VAbcIqksDeTe5n4d5ZTagkHAxWMk+ZDMS/d8s=:",
+  "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "@jest/core@29.5.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):vfQwH98lHyFmOMKFwuLSUMu2oYc+jo7kNYES54VpHpM=:",
   "@jest/core@29.7.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "@jest/core@29.7.0(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):b1NlQGJwtwPo53fIAa52W7sL74ntIH9Gd71zkNZjtQU=:",
   "@jest/environment@29.7.0": "@jest/environment@29.7.0:OccT6t+RUEze2pPv2096Z0ZxEfPR51vzs3/M92hG+lg=:",
   "@jest/expect-utils@29.7.0": "@jest/expect-utils@29.7.0:/5kYHU3SqucZ7ntrJG7Xb6LROYA/xdv03kWifxweOOE=:",
   "@jest/expect@29.7.0": "@jest/expect@29.7.0:5RHpcXNns1pWGTly3ZEOXwfx30hQaVIQ/8ZSq+ggjXI=:",
   "@jest/fake-timers@29.7.0": "@jest/fake-timers@29.7.0:JvLOwTWmr/YwC0klYOyunqcJz4R6q9PWAQ9QL6BQGXU=:",
   "@jest/globals@29.7.0": "@jest/globals@29.7.0:rn89P6vMp8c61OyeFehs6p5mXPyh1Mg7SlqmQWtTqnk=:",
-  "@jest/reporters@29.5.0": "@jest/reporters@29.5.0:ZiTpAQdVIeEqE4kKPlJw5c+M6YeyZu1cxnKpzGXMKb0=:",
+  "@jest/reporters@29.5.0": "@jest/reporters@29.5.0:QAx67DoDgrmxGGeOO9XnaWpsolOsg2mf8YgGBlIjOhM=:",
   "@jest/reporters@29.7.0": "@jest/reporters@29.7.0:Tpczh4EpmTvIn/FN76ivA6tR31dNM++7NkS9J7dt4mE=:",
   "@jest/schemas@29.6.3": "@jest/schemas@29.6.3:k3bivx0mavN4Y4JNrlgZwLcSoyQrOCZXUXmIQ1Nsblc=:",
   "@jest/source-map@29.6.3": "@jest/source-map@29.6.3:YrWW+6HHLR2tfBDJ0S2FXQEQC+LRLZAxnV8EE+gaNkg=:",
@@ -157,8 +157,8 @@
   "@typescript-eslint/parser@8.56.1(eslint@9.37.0(jiti@2.7.0))(typescript@5.8.3)": "@typescript-eslint/parser@8.56.1(eslint@9.37.0(jiti@2.7.0))(typescript@5.8.3):gY3oJ8Qa8yQw9MilFm9zL330Ig+ihnjnAFKtjOpL+JM=:",
   "@typescript-eslint/parser@8.56.1(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3)": "@typescript-eslint/parser@8.56.1(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3):IObb8qC909jXqUvvc2AGU4SXIVCm64dC/YgeexZXn5k=:",
   "@typescript-eslint/parser@8.59.3(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3)": "@typescript-eslint/parser@8.59.3(eslint@9.39.4(jiti@2.7.0))(typescript@5.9.3):DWHVak7g3z8Gq6oXyoVHa09NFMm+1YrikFbi//bjj8I=:",
-  "@typescript-eslint/project-service@8.56.1(typescript@5.8.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.8.3):FfgcSYlXvtFZ/3N7mrxILyidaGkI2MvkdZFemEaPrlc=:",
-  "@typescript-eslint/project-service@8.56.1(typescript@5.9.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.9.3):rkrN1q21SxLWTf+VycNAkuMIJ6+fX1fKMfYYLvcugh0=:",
+  "@typescript-eslint/project-service@8.56.1(typescript@5.8.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.8.3):L+l5gLoQs5jJA99jom0A+h+VN2ISYACSekXHA1c1EwI=:",
+  "@typescript-eslint/project-service@8.56.1(typescript@5.9.3)": "@typescript-eslint/project-service@8.56.1(typescript@5.9.3):GSD5sT6y3sR1zlsIgMPHy0OlPy4VfklleV3legIGWOs=:",
   "@typescript-eslint/project-service@8.59.3(typescript@5.9.3)": "@typescript-eslint/project-service@8.59.3(typescript@5.9.3):TdtQIDvh8U+Zg9ZhH+lSb++qqy5nbqa8kGNXmm0SjTs=:",
   "@typescript-eslint/scope-manager@8.56.1": "@typescript-eslint/scope-manager@8.56.1:oakiB4Lxz5IzduhJyobePnldPnbj+7aVEx2xiDKHndY=:",
   "@typescript-eslint/scope-manager@8.59.3": "@typescript-eslint/scope-manager@8.59.3:Ts9EflddW/+1TZMWGiBwaa+te9EFZTwTiltllXqs2fk=:",
@@ -186,9 +186,10 @@
   "acorn@8.16.0": "acorn@8.16.0:jUfpbMqUSWQXeMk9lBKufnFEiAXwmYW9Gyao55/YJG0=:",
   "agent-base@6.0.2": "agent-base@6.0.2:s+vm2vdDiTWD5EEK8YZUuCJ8nNJVPz+o/sVHEzuEw90=:",
   "ajv-draft-04@1.0.0(ajv@8.18.0)": "ajv-draft-04@1.0.0(ajv@8.18.0):JG8wTlojY/flM3PwHQclVQAYfj7Apf56biGgSdOawQA=:",
-  "ajv-formats@3.0.1": "ajv-formats@3.0.1:UsGmpDGZlVReLuxRucUPL4JVD/HgxRGxNHwFFDT4HgQ=:",
+  "ajv-formats@3.0.1": "ajv-formats@3.0.1:7+hwYT+T7Wmw6jFzMzBm5dGWCyFLue4kddTc+2OQECA=:",
   "ajv@6.15.0": "ajv@6.15.0:SD87QJjJxWrlD9SUV0MTNqxBwRwf0xRmGzKqFBfAZSg=:",
   "ajv@8.18.0": "ajv@8.18.0:fTpbnLje6H+gfMLuSRWwe2Qp/VZ11RZHypBNhBPLmX8=:",
+  "ajv@8.20.0": "ajv@8.20.0:/ablYS+O64orF8yVeWOKxUDKBphSTMP9xnFhKylMYb0=:",
   "ansi-escapes@4.3.2": "ansi-escapes@4.3.2:krrUMjeesFpE6MS4Ii5hJdNFd3JYXKgtoieUIuY2ico=:",
   "ansi-regex@5.0.1": "ansi-regex@5.0.1:cbFbJn342lSe4Qm0qQ4VieLS/1iZGV2bhNms0khI14g=:",
   "ansi-styles@4.3.0": "ansi-styles@4.3.0:ZWSFBwfXYCdLBmX2ZXoVqBWX7sfMR5ZmhLs9Hyh39XY=:",
@@ -431,7 +432,7 @@
   "jest-changed-files@29.7.0": "jest-changed-files@29.7.0:oQS4ZWmXYqUwlExhMtgIYgDrwHDfmSOPex9x9R1BwUQ=:",
   "jest-circus@29.7.0": "jest-circus@29.7.0:yKDzkjQNELGCvKM8K1D/BYsyoDeetnFypU+2dKjWLrw=:",
   "jest-cli@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-cli@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):sid6fyxWeD2LmzsKeuE9ulLUfPuKWIe3mrX89qQvdUg=:",
-  "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):bdseYaXTdKR2bnqvvkKVkXc6oiy1i5XV15pv2y90AZI=:",
+  "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-config@29.5.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):lS+QCqueeY8mS0Dqn36KKAbEXQEsDuU+i6KMbrKL/GQ=:",
   "jest-config@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3))": "jest-config@29.7.0(@types/node@20.19.41)(ts-node@10.9.2(@types/node@20.19.41)(typescript@5.9.3)):UT4Gi5l03YYG8sqOkmsIqMrvyBccuYh7Lb46SznLdO4=:",
   "jest-diff@29.7.0": "jest-diff@29.7.0:Ul5FBhhA/MnkZjU6Dat9uRuf6qcBfKMXWTGRugGLmDY=:",
   "jest-docblock@29.7.0": "jest-docblock@29.7.0:pvQX9Pr6W46Wv/xaMCwWM5f6zyR3WoTJC/YHcZu48HU=:",
@@ -453,7 +454,7 @@
   "jest-resolve@29.7.0": "jest-resolve@29.7.0:hvpSASO6uKsWu0SgUVZVsNF5S0LSrMpEb1G6FwvShKo=:",
   "jest-runner@29.7.0": "jest-runner@29.7.0:5+B6nV1nN59/Eg+IsyyAqFFiKLiMsiUc88cR+p1HE3U=:",
   "jest-runtime@29.7.0": "jest-runtime@29.7.0:nRTNmq97N5lDhQkiTdeeRwvDOtYleSbv0G0VPVt3q2Q=:",
-  "jest-snapshot@29.5.0": "jest-snapshot@29.5.0:zd7GXLUt/VoNTVpYF5W2mQWcnrkmG1j1FHLm/4cjoHo=:",
+  "jest-snapshot@29.5.0": "jest-snapshot@29.5.0:QntNipgva8RvAs1Nhm45LPl5b2PU7nNaTd2XwI6Xwas=:",
   "jest-snapshot@29.7.0": "jest-snapshot@29.7.0:kggrREcar663ZeUts8W+NgpOyg8GFr1lEOh1Lj1SiUI=:",
   "jest-util@29.7.0": "jest-util@29.7.0:gHlcHPbEBD1XLvUIxS8pkftzVgiU9ELvAxf4UXScHRc=:",
   "jest-validate@29.7.0": "jest-validate@29.7.0:X0BFNNuaTkbRX14EvARv9uObBFs94o3bDjvhgzQqER4=:",

package/dist/index.js

@@ -0,0 +1,21 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+export { BrowserArgon2Provider, CryptoUtils } from './packlets/argon2';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nexport { BrowserArgon2Provider, CryptoUtils } from './packlets/argon2';\n"]}

package/dist/packlets/argon2/browserArgon2Provider.js

@@ -0,0 +1,88 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+import { argon2id } from 'hash-wasm';
+import { captureAsyncResult, fail, succeed } from '@fgv/ts-utils';
+/**
+ * Browser (and Node) implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by
+ * `hash-wasm` (pure WASM — no Web Crypto dependency). Runs identically in both Node and
+ * browser environments, enabling cross-runtime test equivalence.
+ * @public
+ */
+export class BrowserArgon2Provider {
+    constructor() { }
+    /**
+     * Creates a new {@link BrowserArgon2Provider} instance.
+     * @returns Success with a new provider instance.
+     * @public
+     */
+    static create() {
+        return succeed(new BrowserArgon2Provider());
+    }
+    /**
+     * Derives a key using Argon2id via the hash-wasm WASM implementation.
+     *
+     * @remarks
+     * `hash-wasm` computes Argon2id sequentially regardless of the `parallelism` value —
+     * the WASM engine does not spawn worker threads. The `parallelism` value IS still wired
+     * into the hash computation; output bytes differ for different parallelism values.
+     * For interoperability with server-side Node derivations, ensure both sides use the same
+     * `parallelism` value (recommend `parallelism: 1` unless compatibility requires otherwise).
+     *
+     * @param password - The password or passphrase (string or raw bytes).
+     * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).
+     * @param params - Argon2id parameters. All values are validated before derivation.
+     * @returns Success with the derived key bytes, or Failure with a descriptive message.
+     * @public
+     */
+    async argon2id(password, salt, params) {
+        const error = BrowserArgon2Provider._validateParams(params);
+        if (error !== undefined) {
+            return fail(error);
+        }
+        return captureAsyncResult(async () => {
+            const result = await argon2id({
+                password,
+                salt,
+                iterations: params.iterations,
+                parallelism: params.parallelism,
+                memorySize: params.memoryKiB,
+                hashLength: params.outputBytes,
+                outputType: 'binary'
+            });
+            return result;
+        });
+    }
+    static _validateParams(params) {
+        if (params.memoryKiB < 8) {
+            return `argon2id: memoryKiB must be >= 8, got ${params.memoryKiB}`;
+        }
+        if (params.iterations < 1) {
+            return `argon2id: iterations must be >= 1, got ${params.iterations}`;
+        }
+        if (params.parallelism < 1 || params.parallelism > 255) {
+            return `argon2id: parallelism must be 1..255, got ${params.parallelism}`;
+        }
+        if (params.outputBytes < 4) {
+            return `argon2id: outputBytes must be >= 4, got ${params.outputBytes}`;
+        }
+        return undefined;
+    }
+}
+//# sourceMappingURL=browserArgon2Provider.js.map

package/dist/packlets/argon2/browserArgon2Provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserArgon2Provider.js","sourceRoot":"","sources":["../../../src/packlets/argon2/browserArgon2Provider.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAU,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IAChC,gBAAuB,CAAC;IAExB;;;;OAIG;IACI,MAAM,CAAC,MAAM;QAClB,OAAO,OAAO,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,QAAQ,CACnB,QAA6B,EAC7B,IAAgB,EAChB,MAAmC;QAEnC,MAAM,KAAK,GAAG,qBAAqB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,OAAO,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,QAAQ;gBACR,IAAI;gBACJ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,UAAU,EAAE,QAAQ;aACrB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,MAAmC;QAChE,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,yCAAyC,MAAM,CAAC,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,0CAA0C,MAAM,CAAC,UAAU,EAAE,CAAC;QACvE,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;YACvD,OAAO,6CAA6C,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3E,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,2CAA2C,MAAM,CAAC,WAAW,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nimport { argon2id } from 'hash-wasm';\nimport { Result, captureAsyncResult, fail, succeed } from '@fgv/ts-utils';\nimport { CryptoUtils } from '@fgv/ts-extras';\n\n/**\n * Browser (and Node) implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by\n * `hash-wasm` (pure WASM — no Web Crypto dependency). Runs identically in both Node and\n * browser environments, enabling cross-runtime test equivalence.\n * @public\n */\nexport class BrowserArgon2Provider implements CryptoUtils.IArgon2idProvider {\n  private constructor() {}\n\n  /**\n   * Creates a new {@link BrowserArgon2Provider} instance.\n   * @returns Success with a new provider instance.\n   * @public\n   */\n  public static create(): Result<BrowserArgon2Provider> {\n    return succeed(new BrowserArgon2Provider());\n  }\n\n  /**\n   * Derives a key using Argon2id via the hash-wasm WASM implementation.\n   *\n   * @remarks\n   * `hash-wasm` computes Argon2id sequentially regardless of the `parallelism` value —\n   * the WASM engine does not spawn worker threads. The `parallelism` value IS still wired\n   * into the hash computation; output bytes differ for different parallelism values.\n   * For interoperability with server-side Node derivations, ensure both sides use the same\n   * `parallelism` value (recommend `parallelism: 1` unless compatibility requires otherwise).\n   *\n   * @param password - The password or passphrase (string or raw bytes).\n   * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).\n   * @param params - Argon2id parameters. All values are validated before derivation.\n   * @returns Success with the derived key bytes, or Failure with a descriptive message.\n   * @public\n   */\n  public async argon2id(\n    password: Uint8Array | string,\n    salt: Uint8Array,\n    params: CryptoUtils.IArgon2idParams\n  ): Promise<Result<Uint8Array>> {\n    const error = BrowserArgon2Provider._validateParams(params);\n    if (error !== undefined) {\n      return fail(error);\n    }\n\n    return captureAsyncResult(async () => {\n      const result = await argon2id({\n        password,\n        salt,\n        iterations: params.iterations,\n        parallelism: params.parallelism,\n        memorySize: params.memoryKiB,\n        hashLength: params.outputBytes,\n        outputType: 'binary'\n      });\n      return result;\n    });\n  }\n\n  private static _validateParams(params: CryptoUtils.IArgon2idParams): string | undefined {\n    if (params.memoryKiB < 8) {\n      return `argon2id: memoryKiB must be >= 8, got ${params.memoryKiB}`;\n    }\n    if (params.iterations < 1) {\n      return `argon2id: iterations must be >= 1, got ${params.iterations}`;\n    }\n    if (params.parallelism < 1 || params.parallelism > 255) {\n      return `argon2id: parallelism must be 1..255, got ${params.parallelism}`;\n    }\n    if (params.outputBytes < 4) {\n      return `argon2id: outputBytes must be >= 4, got ${params.outputBytes}`;\n    }\n    return undefined;\n  }\n}\n"]}

package/dist/packlets/argon2/index.js

@@ -0,0 +1,24 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+export { BrowserArgon2Provider } from './browserArgon2Provider';
+// Re-export CryptoUtils namespace from ts-extras for consumer convenience
+// (provides IArgon2idProvider, IArgon2idParams, ARGON2ID_OWASP_MIN, ARGON2ID_PASSPHRASE).
+export { CryptoUtils } from '@fgv/ts-extras';
+//# sourceMappingURL=index.js.map

package/dist/packlets/argon2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/packlets/argon2/index.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,0EAA0E;AAC1E,0FAA0F;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nexport { BrowserArgon2Provider } from './browserArgon2Provider';\n\n// Re-export CryptoUtils namespace from ts-extras for consumer convenience\n// (provides IArgon2idProvider, IArgon2idParams, ARGON2ID_OWASP_MIN, ARGON2ID_PASSPHRASE).\nexport { CryptoUtils } from '@fgv/ts-extras';\n"]}

package/dist/test/unit/argon2/browserArgon2Provider.test.js

@@ -0,0 +1,96 @@
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+import '@fgv/ts-utils-jest';
+import { BrowserArgon2Provider } from '../../../packlets/argon2';
+// RFC 9106 §B.3 parameter set (no secret/AD — our interface does not expose those fields).
+// t=3, m=32, p=4, tag=32. Used for determinism and cross-runtime agreement.
+const RFC_PARAMS = {
+    memoryKiB: 32,
+    iterations: 3,
+    parallelism: 4,
+    outputBytes: 32
+};
+const RFC_PASSWORD = new Uint8Array(32).fill(0x01);
+const RFC_SALT = new Uint8Array(16).fill(0x02);
+describe('BrowserArgon2Provider', () => {
+    let provider;
+    beforeEach(() => {
+        provider = BrowserArgon2Provider.create().orThrow();
+    });
+    describe('create()', () => {
+        test('returns a provider instance', () => {
+            expect(BrowserArgon2Provider.create()).toSucceedAndSatisfy((p) => {
+                expect(p).toBeInstanceOf(BrowserArgon2Provider);
+            });
+        });
+    });
+    describe('argon2id()', () => {
+        test('derives a key with Uint8Array password', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {
+                expect(bytes).toBeInstanceOf(Uint8Array);
+                expect(bytes.length).toBe(RFC_PARAMS.outputBytes);
+            });
+        });
+        test('derives a key with string password', async () => {
+            expect(await provider.argon2id('password', RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {
+                expect(bytes).toBeInstanceOf(Uint8Array);
+                expect(bytes.length).toBe(RFC_PARAMS.outputBytes);
+            });
+        });
+        test('is deterministic — same inputs produce identical bytes', async () => {
+            const r1 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();
+            const r2 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();
+            expect(r1).toEqual(r2);
+        });
+        test('different passwords produce different bytes', async () => {
+            const a = (await provider.argon2id(new Uint8Array(32).fill(0x01), RFC_SALT, RFC_PARAMS)).orThrow();
+            const b = (await provider.argon2id(new Uint8Array(32).fill(0x02), RFC_SALT, RFC_PARAMS)).orThrow();
+            expect(a).not.toEqual(b);
+        });
+        test('different salts produce different bytes', async () => {
+            const a = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x02), RFC_PARAMS)).orThrow();
+            const b = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x03), RFC_PARAMS)).orThrow();
+            expect(a).not.toEqual(b);
+        });
+        test('respects outputBytes', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { outputBytes: 64 }))).toSucceedAndSatisfy((bytes) => {
+                expect(bytes.length).toBe(64);
+            });
+        });
+    });
+    describe('parameter validation', () => {
+        test('fails when memoryKiB < 8', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { memoryKiB: 7 }))).toFailWith(/memoryKiB must be >= 8/i);
+        });
+        test('fails when iterations < 1', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { iterations: 0 }))).toFailWith(/iterations must be >= 1/i);
+        });
+        test('fails when parallelism < 1', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { parallelism: 0 }))).toFailWith(/parallelism must be 1\.\.255/i);
+        });
+        test('fails when parallelism > 255', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { parallelism: 256 }))).toFailWith(/parallelism must be 1\.\.255/i);
+        });
+        test('fails when outputBytes < 4', async () => {
+            expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, Object.assign(Object.assign({}, RFC_PARAMS), { outputBytes: 3 }))).toFailWith(/outputBytes must be >= 4/i);
+        });
+    });
+});
+//# sourceMappingURL=browserArgon2Provider.test.js.map

package/dist/test/unit/argon2/browserArgon2Provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserArgon2Provider.test.js","sourceRoot":"","sources":["../../../../src/test/unit/argon2/browserArgon2Provider.test.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;AAEZ,OAAO,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,2FAA2F;AAC3F,4EAA4E;AAC5E,MAAM,UAAU,GAAgC;IAC9C,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,EAAE;CAChB,CAAC;AACF,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE/C,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,QAA+B,CAAC;IAEpC,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/D,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChG,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9F,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnF,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnF,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnG,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACnG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACvG,MAAM,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACvG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACtC,MAAM,CACJ,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,EAAE,IAAG,CACpF,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,IAAI,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,SAAS,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CACjG,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,UAAU,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CAClG,0BAA0B,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CACnG,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,GAAG,IAAG,CAAC,CAAC,UAAU,CACrG,+BAA+B,CAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,kCAAO,UAAU,KAAE,WAAW,EAAE,CAAC,IAAG,CAAC,CAAC,UAAU,CACnG,2BAA2B,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nimport '@fgv/ts-utils-jest';\nimport { BrowserArgon2Provider } from '../../../packlets/argon2';\nimport { CryptoUtils } from '@fgv/ts-extras';\n\n// RFC 9106 §B.3 parameter set (no secret/AD — our interface does not expose those fields).\n// t=3, m=32, p=4, tag=32. Used for determinism and cross-runtime agreement.\nconst RFC_PARAMS: CryptoUtils.IArgon2idParams = {\n  memoryKiB: 32,\n  iterations: 3,\n  parallelism: 4,\n  outputBytes: 32\n};\nconst RFC_PASSWORD = new Uint8Array(32).fill(0x01);\nconst RFC_SALT = new Uint8Array(16).fill(0x02);\n\ndescribe('BrowserArgon2Provider', () => {\n  let provider: BrowserArgon2Provider;\n\n  beforeEach(() => {\n    provider = BrowserArgon2Provider.create().orThrow();\n  });\n\n  describe('create()', () => {\n    test('returns a provider instance', () => {\n      expect(BrowserArgon2Provider.create()).toSucceedAndSatisfy((p) => {\n        expect(p).toBeInstanceOf(BrowserArgon2Provider);\n      });\n    });\n  });\n\n  describe('argon2id()', () => {\n    test('derives a key with Uint8Array password', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {\n        expect(bytes).toBeInstanceOf(Uint8Array);\n        expect(bytes.length).toBe(RFC_PARAMS.outputBytes);\n      });\n    });\n\n    test('derives a key with string password', async () => {\n      expect(await provider.argon2id('password', RFC_SALT, RFC_PARAMS)).toSucceedAndSatisfy((bytes) => {\n        expect(bytes).toBeInstanceOf(Uint8Array);\n        expect(bytes.length).toBe(RFC_PARAMS.outputBytes);\n      });\n    });\n\n    test('is deterministic — same inputs produce identical bytes', async () => {\n      const r1 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();\n      const r2 = (await provider.argon2id(RFC_PASSWORD, RFC_SALT, RFC_PARAMS)).orThrow();\n      expect(r1).toEqual(r2);\n    });\n\n    test('different passwords produce different bytes', async () => {\n      const a = (await provider.argon2id(new Uint8Array(32).fill(0x01), RFC_SALT, RFC_PARAMS)).orThrow();\n      const b = (await provider.argon2id(new Uint8Array(32).fill(0x02), RFC_SALT, RFC_PARAMS)).orThrow();\n      expect(a).not.toEqual(b);\n    });\n\n    test('different salts produce different bytes', async () => {\n      const a = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x02), RFC_PARAMS)).orThrow();\n      const b = (await provider.argon2id(RFC_PASSWORD, new Uint8Array(16).fill(0x03), RFC_PARAMS)).orThrow();\n      expect(a).not.toEqual(b);\n    });\n\n    test('respects outputBytes', async () => {\n      expect(\n        await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, outputBytes: 64 })\n      ).toSucceedAndSatisfy((bytes) => {\n        expect(bytes.length).toBe(64);\n      });\n    });\n  });\n\n  describe('parameter validation', () => {\n    test('fails when memoryKiB < 8', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, memoryKiB: 7 })).toFailWith(\n        /memoryKiB must be >= 8/i\n      );\n    });\n\n    test('fails when iterations < 1', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, iterations: 0 })).toFailWith(\n        /iterations must be >= 1/i\n      );\n    });\n\n    test('fails when parallelism < 1', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, parallelism: 0 })).toFailWith(\n        /parallelism must be 1\\.\\.255/i\n      );\n    });\n\n    test('fails when parallelism > 255', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, parallelism: 256 })).toFailWith(\n        /parallelism must be 1\\.\\.255/i\n      );\n    });\n\n    test('fails when outputBytes < 4', async () => {\n      expect(await provider.argon2id(RFC_PASSWORD, RFC_SALT, { ...RFC_PARAMS, outputBytes: 3 })).toFailWith(\n        /outputBytes must be >= 4/i\n      );\n    });\n  });\n});\n"]}

package/dist/ts-web-extras-argon2.d.ts

@@ -0,0 +1,40 @@
+import { CryptoUtils } from '@fgv/ts-extras';
+import { Result } from '@fgv/ts-utils';
+
+/**
+ * Browser (and Node) implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by
+ * `hash-wasm` (pure WASM — no Web Crypto dependency). Runs identically in both Node and
+ * browser environments, enabling cross-runtime test equivalence.
+ * @public
+ */
+export declare class BrowserArgon2Provider implements CryptoUtils.IArgon2idProvider {
+    private constructor();
+    /**
+     * Creates a new {@link BrowserArgon2Provider} instance.
+     * @returns Success with a new provider instance.
+     * @public
+     */
+    static create(): Result<BrowserArgon2Provider>;
+    /**
+     * Derives a key using Argon2id via the hash-wasm WASM implementation.
+     *
+     * @remarks
+     * `hash-wasm` computes Argon2id sequentially regardless of the `parallelism` value —
+     * the WASM engine does not spawn worker threads. The `parallelism` value IS still wired
+     * into the hash computation; output bytes differ for different parallelism values.
+     * For interoperability with server-side Node derivations, ensure both sides use the same
+     * `parallelism` value (recommend `parallelism: 1` unless compatibility requires otherwise).
+     *
+     * @param password - The password or passphrase (string or raw bytes).
+     * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).
+     * @param params - Argon2id parameters. All values are validated before derivation.
+     * @returns Success with the derived key bytes, or Failure with a descriptive message.
+     * @public
+     */
+    argon2id(password: Uint8Array | string, salt: Uint8Array, params: CryptoUtils.IArgon2idParams): Promise<Result<Uint8Array>>;
+    private static _validateParams;
+}
+
+export { CryptoUtils }
+
+export { }

package/dist/tsdoc-metadata.json

@@ -0,0 +1,11 @@
+// This file is read by tools that parse documentation comments conforming to the TSDoc standard.
+// It should be published with your NPM package.  It should not be tracked by Git.
+{
+  "tsdocVersion": "0.12",
+  "toolPackages": [
+    {
+      "packageName": "@microsoft/api-extractor",
+      "packageVersion": "7.58.7"
+    }
+  ]
+}

package/lib/index.d.ts

@@ -0,0 +1,2 @@
+export { BrowserArgon2Provider, CryptoUtils } from './packlets/argon2';
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/lib/index.js

@@ -0,0 +1,26 @@
+"use strict";
+// Copyright (c) 2026 Erik Fortune
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in all
+// copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+// SOFTWARE.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoUtils = exports.BrowserArgon2Provider = void 0;
+var argon2_1 = require("./packlets/argon2");
+Object.defineProperty(exports, "BrowserArgon2Provider", { enumerable: true, get: function () { return argon2_1.BrowserArgon2Provider; } });
+Object.defineProperty(exports, "CryptoUtils", { enumerable: true, get: function () { return argon2_1.CryptoUtils; } });
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,iFAAiF;AACjF,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,YAAY;;;AAEZ,4CAAuE;AAA9D,+GAAA,qBAAqB,OAAA;AAAE,qGAAA,WAAW,OAAA","sourcesContent":["// Copyright (c) 2026 Erik Fortune\n//\n// Permission is hereby granted, free of charge, to any person obtaining a copy\n// of this software and associated documentation files (the \"Software\"), to deal\n// in the Software without restriction, including without limitation the rights\n// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell\n// copies of the Software, and to permit persons to whom the Software is\n// furnished to do so, subject to the following conditions:\n//\n// The above copyright notice and this permission notice shall be included in all\n// copies or substantial portions of the Software.\n//\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\n// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\n// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\n// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\n// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\n// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\n// SOFTWARE.\n\nexport { BrowserArgon2Provider, CryptoUtils } from './packlets/argon2';\n"]}

package/lib/packlets/argon2/browserArgon2Provider.d.ts

@@ -0,0 +1,36 @@
+import { Result } from '@fgv/ts-utils';
+import { CryptoUtils } from '@fgv/ts-extras';
+/**
+ * Browser (and Node) implementation of {@link @fgv/ts-extras#IArgon2idProvider} backed by
+ * `hash-wasm` (pure WASM — no Web Crypto dependency). Runs identically in both Node and
+ * browser environments, enabling cross-runtime test equivalence.
+ * @public
+ */
+export declare class BrowserArgon2Provider implements CryptoUtils.IArgon2idProvider {
+    private constructor();
+    /**
+     * Creates a new {@link BrowserArgon2Provider} instance.
+     * @returns Success with a new provider instance.
+     * @public
+     */
+    static create(): Result<BrowserArgon2Provider>;
+    /**
+     * Derives a key using Argon2id via the hash-wasm WASM implementation.
+     *
+     * @remarks
+     * `hash-wasm` computes Argon2id sequentially regardless of the `parallelism` value —
+     * the WASM engine does not spawn worker threads. The `parallelism` value IS still wired
+     * into the hash computation; output bytes differ for different parallelism values.
+     * For interoperability with server-side Node derivations, ensure both sides use the same
+     * `parallelism` value (recommend `parallelism: 1` unless compatibility requires otherwise).
+     *
+     * @param password - The password or passphrase (string or raw bytes).
+     * @param salt - The salt (must be at least 8 bytes; 16+ bytes recommended).
+     * @param params - Argon2id parameters. All values are validated before derivation.
+     * @returns Success with the derived key bytes, or Failure with a descriptive message.
+     * @public
+     */
+    argon2id(password: Uint8Array | string, salt: Uint8Array, params: CryptoUtils.IArgon2idParams): Promise<Result<Uint8Array>>;
+    private static _validateParams;
+}
+//# sourceMappingURL=browserArgon2Provider.d.ts.map

package/lib/packlets/argon2/browserArgon2Provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserArgon2Provider.d.ts","sourceRoot":"","sources":["../../../src/packlets/argon2/browserArgon2Provider.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,MAAM,EAAqC,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,WAAW,CAAC,iBAAiB;IACzE,OAAO;IAEP;;;;OAIG;WACW,MAAM,IAAI,MAAM,CAAC,qBAAqB,CAAC;IAIrD;;;;;;;;;;;;;;;OAeG;IACU,QAAQ,CACnB,QAAQ,EAAE,UAAU,GAAG,MAAM,EAC7B,IAAI,EAAE,UAAU,EAChB,MAAM,EAAE,WAAW,CAAC,eAAe,GAClC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAoB9B,OAAO,CAAC,MAAM,CAAC,eAAe;CAe/B"}