@fgv/ts-web-extras 5.1.0-17 → 5.1.0-19

package/.rush/temp/{edc66e6a37414a0b69e52d768684c18c9d5825e3.tar.log → 42a7a953924ae898114e7b6231a2408228d92433.tar.log}

@@ -1,5 +1,5 @@
-Start time: Mon Apr 27 2026 03:46:28 GMT+0000 (Coordinated Universal Time)
-Invoking "/usr/bin/tar -c -f /home/runner/work/fgv/fgv/common/temp/build-cache/edc66e6a37414a0b69e52d768684c18c9d5825e3-755c33d272322419.temp -z --files-from=-"
+Start time: Mon Apr 27 2026 19:21:09 GMT+0000 (Coordinated Universal Time)
+Invoking "/usr/bin/tar -c -f /home/runner/work/fgv/fgv/common/temp/build-cache/42a7a953924ae898114e7b6231a2408228d92433-b8fcfb48e32acef1.temp -z --files-from=-"
 
 ======= BEGIN PROCESS INPUT ======
 .rush/temp/operation/build/all.log
@@ -41,6 +41,8 @@ dist/test/mocks/idb-keyval.js
 dist/test/mocks/idb-keyval.js.map
 dist/test/setupTests.js
 dist/test/setupTests.js.map
+dist/test/unit/browserCryptoProvider.wrapBytes.test.js
+dist/test/unit/browserCryptoProvider.wrapBytes.test.js.map
 dist/test/unit/browserHashProvider.test.js
 dist/test/unit/browserHashProvider.test.js.map
 dist/test/unit/directoryHandleStore.test.js
@@ -137,6 +139,10 @@ lib/test/setupTests.d.ts
 lib/test/setupTests.d.ts.map
 lib/test/setupTests.js
 lib/test/setupTests.js.map
+lib/test/unit/browserCryptoProvider.wrapBytes.test.d.ts
+lib/test/unit/browserCryptoProvider.wrapBytes.test.d.ts.map
+lib/test/unit/browserCryptoProvider.wrapBytes.test.js
+lib/test/unit/browserCryptoProvider.wrapBytes.test.js.map
 lib/test/unit/browserHashProvider.test.d.ts
 lib/test/unit/browserHashProvider.test.d.ts.map
 lib/test/unit/browserHashProvider.test.js

package/.rush/temp/chunked-rush-logs/ts-web-extras.build.chunks.jsonl

@@ -1,42 +1,44 @@
-{"kind":"O","text":"Invoking: heft test --clean \n"}
+{"kind":"O","text":"Invoking: NODE_OPTIONS=--disable-warning=DEP0040 heft test --clean \n"}
 {"kind":"O","text":" ---- build started ---- \n"}
 {"kind":"O","text":"[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.\n"}
 {"kind":"O","text":"[build:typescript] Using TypeScript version 5.9.3\n"}
 {"kind":"O","text":"[build:api-extractor] Using API Extractor version 7.57.7\n"}
 {"kind":"O","text":"[build:api-extractor] Analysis will use the bundled TypeScript version 5.8.2\n"}
 {"kind":"O","text":"[build:api-extractor] *** The target project appears to use TypeScript 5.9.3 which is newer than the bundled compiler engine; consider upgrading API Extractor.\n"}
-{"kind":"O","text":" ---- build finished (24.065s) ---- \n"}
+{"kind":"O","text":" ---- build finished (23.128s) ---- \n"}
 {"kind":"O","text":" ---- test started ---- \n"}
 {"kind":"O","text":"[test:jest] Using Jest version 29.5.0\n"}
 {"kind":"O","text":"[test:jest] \n"}
-{"kind":"O","text":"[test:jest] Run start. 9 test suites\n"}
+{"kind":"O","text":"[test:jest] Run start. 10 test suites\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/httpTreeAccessors.test.js\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileApiTreeAccessors.test.js\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/localStorageTreeAccessors.test.js\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileSystemAccessTreeAccessors.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/httpTreeAccessors.test.js (duration: 2.358s, 61 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/localStorageTreeAccessors.test.js (duration: 1.702s, 44 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileTreeHelpers.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/localStorageTreeAccessors.test.js (duration: 2.231s, 44 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/httpTreeAccessors.test.js (duration: 2.103s, 61 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileApiTypes.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTreeAccessors.test.js (duration: 3.257s, 65 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTreeAccessors.test.js (duration: 2.550s, 65 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/urlParams.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileSystemAccessTreeAccessors.test.js (duration: 1.807s, 44 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileSystemAccessTreeAccessors.test.js (duration: 1.592s, 44 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] START lib/test/unit/browserCryptoProvider.wrapBytes.test.js\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTypes.test.js (duration: 1.647s, 36 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/directoryHandleStore.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTypes.test.js (duration: 1.259s, 36 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileTreeHelpers.test.js (duration: 2.006s, 35 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/browserHashProvider.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileTreeHelpers.test.js (duration: 2.305s, 35 passed, 0 failed)\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/urlParams.test.js (duration: 1.871s, 60 passed, 0 failed)\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/directoryHandleStore.test.js (duration: 1.696s, 19 passed, 0 failed)\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/browserHashProvider.test.js (duration: 1.902s, 15 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/directoryHandleStore.test.js (duration: 1.362s, 19 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/urlParams.test.js (duration: 1.974s, 60 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/browserCryptoProvider.wrapBytes.test.js (duration: 2.015s, 26 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/browserHashProvider.test.js (duration: 1.383s, 15 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] \n"}
 {"kind":"O","text":"[test:jest] Tests finished:\n"}
-{"kind":"O","text":"[test:jest]   Successes: 379\n"}
+{"kind":"O","text":"[test:jest]   Successes: 405\n"}
 {"kind":"O","text":"[test:jest]   Failures: 0\n"}
-{"kind":"O","text":"[test:jest]   Total: 380\n"}
+{"kind":"O","text":"[test:jest]   Total: 406\n"}
 {"kind":"O","text":"-----------------------------------|---------|----------|---------|---------|-------------------\n"}
 {"kind":"O","text":"File                               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s \n"}
 {"kind":"O","text":"-----------------------------------|---------|----------|---------|---------|-------------------\n"}
-{"kind":"O","text":"All files                          |     100 |    99.62 |     100 |     100 |                   \n"}
+{"kind":"O","text":"All files                          |     100 |    99.64 |     100 |     100 |                   \n"}
 {"kind":"O","text":" crypto-utils                      |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"  browserCryptoProvider.ts         |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"  browserHashProvider.ts           |     100 |      100 |     100 |     100 |                   \n"}
@@ -51,5 +53,5 @@
 {"kind":"O","text":" url-utils                         |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"  urlParams.ts                     |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"-----------------------------------|---------|----------|---------|---------|-------------------\n"}
-{"kind":"O","text":" ---- test finished (9.403s) ---- \n"}
-{"kind":"O","text":"-------------------- Finished (33.476s) --------------------\n"}
+{"kind":"O","text":" ---- test finished (9.881s) ---- \n"}
+{"kind":"O","text":"-------------------- Finished (33.035s) --------------------\n"}

package/.rush/temp/operation/build/all.log

@@ -1,42 +1,44 @@
-Invoking: heft test --clean 
+Invoking: NODE_OPTIONS=--disable-warning=DEP0040 heft test --clean 
  ---- build started ---- 
 [build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.
 [build:typescript] Using TypeScript version 5.9.3
 [build:api-extractor] Using API Extractor version 7.57.7
 [build:api-extractor] Analysis will use the bundled TypeScript version 5.8.2
 [build:api-extractor] *** The target project appears to use TypeScript 5.9.3 which is newer than the bundled compiler engine; consider upgrading API Extractor.
- ---- build finished (24.065s) ---- 
+ ---- build finished (23.128s) ---- 
  ---- test started ---- 
 [test:jest] Using Jest version 29.5.0
 [test:jest] 
-[test:jest] Run start. 9 test suites
+[test:jest] Run start. 10 test suites
 [test:jest] START lib/test/unit/httpTreeAccessors.test.js
 [test:jest] START lib/test/unit/fileApiTreeAccessors.test.js
 [test:jest] START lib/test/unit/localStorageTreeAccessors.test.js
 [test:jest] START lib/test/unit/fileSystemAccessTreeAccessors.test.js
-[test:jest] PASS lib/test/unit/httpTreeAccessors.test.js (duration: 2.358s, 61 passed, 0 failed)
+[test:jest] PASS lib/test/unit/localStorageTreeAccessors.test.js (duration: 1.702s, 44 passed, 0 failed)
 [test:jest] START lib/test/unit/fileTreeHelpers.test.js
-[test:jest] PASS lib/test/unit/localStorageTreeAccessors.test.js (duration: 2.231s, 44 passed, 0 failed)
+[test:jest] PASS lib/test/unit/httpTreeAccessors.test.js (duration: 2.103s, 61 passed, 0 failed)
 [test:jest] START lib/test/unit/fileApiTypes.test.js
-[test:jest] PASS lib/test/unit/fileApiTreeAccessors.test.js (duration: 3.257s, 65 passed, 0 failed)
+[test:jest] PASS lib/test/unit/fileApiTreeAccessors.test.js (duration: 2.550s, 65 passed, 0 failed)
 [test:jest] START lib/test/unit/urlParams.test.js
-[test:jest] PASS lib/test/unit/fileSystemAccessTreeAccessors.test.js (duration: 1.807s, 44 passed, 0 failed)
+[test:jest] PASS lib/test/unit/fileSystemAccessTreeAccessors.test.js (duration: 1.592s, 44 passed, 0 failed)
+[test:jest] START lib/test/unit/browserCryptoProvider.wrapBytes.test.js
+[test:jest] PASS lib/test/unit/fileApiTypes.test.js (duration: 1.647s, 36 passed, 0 failed)
 [test:jest] START lib/test/unit/directoryHandleStore.test.js
-[test:jest] PASS lib/test/unit/fileApiTypes.test.js (duration: 1.259s, 36 passed, 0 failed)
+[test:jest] PASS lib/test/unit/fileTreeHelpers.test.js (duration: 2.006s, 35 passed, 0 failed)
 [test:jest] START lib/test/unit/browserHashProvider.test.js
-[test:jest] PASS lib/test/unit/fileTreeHelpers.test.js (duration: 2.305s, 35 passed, 0 failed)
-[test:jest] PASS lib/test/unit/urlParams.test.js (duration: 1.871s, 60 passed, 0 failed)
-[test:jest] PASS lib/test/unit/directoryHandleStore.test.js (duration: 1.696s, 19 passed, 0 failed)
-[test:jest] PASS lib/test/unit/browserHashProvider.test.js (duration: 1.902s, 15 passed, 0 failed)
+[test:jest] PASS lib/test/unit/directoryHandleStore.test.js (duration: 1.362s, 19 passed, 0 failed)
+[test:jest] PASS lib/test/unit/urlParams.test.js (duration: 1.974s, 60 passed, 0 failed)
+[test:jest] PASS lib/test/unit/browserCryptoProvider.wrapBytes.test.js (duration: 2.015s, 26 passed, 0 failed)
+[test:jest] PASS lib/test/unit/browserHashProvider.test.js (duration: 1.383s, 15 passed, 0 failed)
 [test:jest] 
 [test:jest] Tests finished:
-[test:jest]   Successes: 379
+[test:jest]   Successes: 405
 [test:jest]   Failures: 0
-[test:jest]   Total: 380
+[test:jest]   Total: 406
 -----------------------------------|---------|----------|---------|---------|-------------------
 File                               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s 
 -----------------------------------|---------|----------|---------|---------|-------------------
-All files                          |     100 |    99.62 |     100 |     100 |                   
+All files                          |     100 |    99.64 |     100 |     100 |                   
  crypto-utils                      |     100 |      100 |     100 |     100 |                   
   browserCryptoProvider.ts         |     100 |      100 |     100 |     100 |                   
   browserHashProvider.ts           |     100 |      100 |     100 |     100 |                   
@@ -51,5 +53,5 @@ All files                          |     100 |    99.62 |     100 |     100 |
  url-utils                         |     100 |      100 |     100 |     100 |                   
   urlParams.ts                     |     100 |      100 |     100 |     100 |                   
 -----------------------------------|---------|----------|---------|---------|-------------------
- ---- test finished (9.403s) ---- 
--------------------- Finished (33.476s) --------------------
+ ---- test finished (9.881s) ---- 
+-------------------- Finished (33.035s) --------------------

package/.rush/temp/operation/build/log-chunks.jsonl

@@ -1,42 +1,44 @@
-{"kind":"O","text":"Invoking: heft test --clean \n"}
+{"kind":"O","text":"Invoking: NODE_OPTIONS=--disable-warning=DEP0040 heft test --clean \n"}
 {"kind":"O","text":" ---- build started ---- \n"}
 {"kind":"O","text":"[build:typescript] The TypeScript compiler version 5.9.3 is newer than the latest version that was tested with Heft (5.8); it may not work correctly.\n"}
 {"kind":"O","text":"[build:typescript] Using TypeScript version 5.9.3\n"}
 {"kind":"O","text":"[build:api-extractor] Using API Extractor version 7.57.7\n"}
 {"kind":"O","text":"[build:api-extractor] Analysis will use the bundled TypeScript version 5.8.2\n"}
 {"kind":"O","text":"[build:api-extractor] *** The target project appears to use TypeScript 5.9.3 which is newer than the bundled compiler engine; consider upgrading API Extractor.\n"}
-{"kind":"O","text":" ---- build finished (24.065s) ---- \n"}
+{"kind":"O","text":" ---- build finished (23.128s) ---- \n"}
 {"kind":"O","text":" ---- test started ---- \n"}
 {"kind":"O","text":"[test:jest] Using Jest version 29.5.0\n"}
 {"kind":"O","text":"[test:jest] \n"}
-{"kind":"O","text":"[test:jest] Run start. 9 test suites\n"}
+{"kind":"O","text":"[test:jest] Run start. 10 test suites\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/httpTreeAccessors.test.js\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileApiTreeAccessors.test.js\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/localStorageTreeAccessors.test.js\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileSystemAccessTreeAccessors.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/httpTreeAccessors.test.js (duration: 2.358s, 61 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/localStorageTreeAccessors.test.js (duration: 1.702s, 44 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileTreeHelpers.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/localStorageTreeAccessors.test.js (duration: 2.231s, 44 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/httpTreeAccessors.test.js (duration: 2.103s, 61 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/fileApiTypes.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTreeAccessors.test.js (duration: 3.257s, 65 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTreeAccessors.test.js (duration: 2.550s, 65 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/urlParams.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileSystemAccessTreeAccessors.test.js (duration: 1.807s, 44 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileSystemAccessTreeAccessors.test.js (duration: 1.592s, 44 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] START lib/test/unit/browserCryptoProvider.wrapBytes.test.js\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTypes.test.js (duration: 1.647s, 36 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/directoryHandleStore.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileApiTypes.test.js (duration: 1.259s, 36 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileTreeHelpers.test.js (duration: 2.006s, 35 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] START lib/test/unit/browserHashProvider.test.js\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/fileTreeHelpers.test.js (duration: 2.305s, 35 passed, 0 failed)\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/urlParams.test.js (duration: 1.871s, 60 passed, 0 failed)\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/directoryHandleStore.test.js (duration: 1.696s, 19 passed, 0 failed)\n"}
-{"kind":"O","text":"[test:jest] PASS lib/test/unit/browserHashProvider.test.js (duration: 1.902s, 15 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/directoryHandleStore.test.js (duration: 1.362s, 19 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/urlParams.test.js (duration: 1.974s, 60 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/browserCryptoProvider.wrapBytes.test.js (duration: 2.015s, 26 passed, 0 failed)\n"}
+{"kind":"O","text":"[test:jest] PASS lib/test/unit/browserHashProvider.test.js (duration: 1.383s, 15 passed, 0 failed)\n"}
 {"kind":"O","text":"[test:jest] \n"}
 {"kind":"O","text":"[test:jest] Tests finished:\n"}
-{"kind":"O","text":"[test:jest]   Successes: 379\n"}
+{"kind":"O","text":"[test:jest]   Successes: 405\n"}
 {"kind":"O","text":"[test:jest]   Failures: 0\n"}
-{"kind":"O","text":"[test:jest]   Total: 380\n"}
+{"kind":"O","text":"[test:jest]   Total: 406\n"}
 {"kind":"O","text":"-----------------------------------|---------|----------|---------|---------|-------------------\n"}
 {"kind":"O","text":"File                               | % Stmts | % Branch | % Funcs | % Lines | Uncovered Line #s \n"}
 {"kind":"O","text":"-----------------------------------|---------|----------|---------|---------|-------------------\n"}
-{"kind":"O","text":"All files                          |     100 |    99.62 |     100 |     100 |                   \n"}
+{"kind":"O","text":"All files                          |     100 |    99.64 |     100 |     100 |                   \n"}
 {"kind":"O","text":" crypto-utils                      |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"  browserCryptoProvider.ts         |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"  browserHashProvider.ts           |     100 |      100 |     100 |     100 |                   \n"}
@@ -51,5 +53,5 @@
 {"kind":"O","text":" url-utils                         |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"  urlParams.ts                     |     100 |      100 |     100 |     100 |                   \n"}
 {"kind":"O","text":"-----------------------------------|---------|----------|---------|---------|-------------------\n"}
-{"kind":"O","text":" ---- test finished (9.403s) ---- \n"}
-{"kind":"O","text":"-------------------- Finished (33.476s) --------------------\n"}
+{"kind":"O","text":" ---- test finished (9.881s) ---- \n"}
+{"kind":"O","text":"-------------------- Finished (33.035s) --------------------\n"}

package/.rush/temp/operation/build/state.json

@@ -1,3 +1,3 @@
 {
-  "nonCachedDurationMs": 34138.17083
+  "nonCachedDurationMs": 33858.300957
 }

package/dist/packlets/crypto-utils/browserCryptoProvider.js

@@ -17,10 +17,9 @@
 // LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 // OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 // SOFTWARE.
-/* c8 ignore start - Browser-only implementation cannot be tested in Node.js environment */
-import { captureResult, fail, Failure, succeed, Success } from '@fgv/ts-utils';
+import { captureAsyncResult, captureResult, fail, Failure, succeed, Success } from '@fgv/ts-utils';
 import { CryptoUtils } from '@fgv/ts-extras';
-const CryptoConstants = CryptoUtils.Constants;
+/* c8 ignore start - Used only by browser-only methods that cannot be tested in Node.js environment */
 /**
  * Extracts an `ArrayBuffer` from a Uint8Array, handling the potential SharedArrayBuffer case.
  * @param arr - The Uint8Array to extract from
@@ -32,6 +31,24 @@ function toArrayBuffer(arr) {
     new Uint8Array(buffer).set(arr);
     return buffer;
 }
+/* c8 ignore stop */
+/**
+ * Returns a fresh Uint8Array view over a non-shared ArrayBuffer copy of `arr`.
+ * Used by {@link BrowserCryptoProvider.wrapBytes | wrapBytes} and
+ * {@link BrowserCryptoProvider.unwrapBytes | unwrapBytes}: Node 20's
+ * webcrypto.subtle rejects raw `ArrayBuffer` for several `BufferSource`
+ * parameters with "is not instance of ArrayBuffer, Buffer, TypedArray, or
+ * DataView" even though `ArrayBuffer` should be valid per the spec; a
+ * TypedArray view is accepted on Node 20+ and on browsers, and the explicit
+ * `Uint8Array<ArrayBuffer>` return type also satisfies TypeScript's `BufferSource`
+ * (which excludes the `SharedArrayBuffer` branch of `Uint8Array`'s buffer type).
+ */
+function toBufferView(arr) {
+    const buffer = new ArrayBuffer(arr.byteLength);
+    const view = new Uint8Array(buffer);
+    view.set(arr);
+    return view;
+}
 /**
  * Browser implementation of `ICryptoProvider` using the Web Crypto API.
  * Uses AES-256-GCM for authenticated encryption.
@@ -42,6 +59,7 @@ function toArrayBuffer(arr) {
  * @public
  */
 export class BrowserCryptoProvider {
+    /* c8 ignore start - Existing browser-only methods cannot be tested in Node.js environment */
     /**
      * Creates a new {@link CryptoUtils.BrowserCryptoProvider | BrowserCryptoProvider}.
      * @param cryptoApi - Optional Crypto instance (defaults to globalThis.crypto)
@@ -67,12 +85,12 @@ export class BrowserCryptoProvider {
      * @returns `Success` with encryption result, or `Failure` with an error.
      */
     async encrypt(plaintext, key) {
-        if (key.length !== CryptoConstants.AES_256_KEY_SIZE) {
-            return Failure.with(`Key must be ${CryptoConstants.AES_256_KEY_SIZE} bytes, got ${key.length}`);
+        if (key.length !== CryptoUtils.Constants.AES_256_KEY_SIZE) {
+            return Failure.with(`Key must be ${CryptoUtils.Constants.AES_256_KEY_SIZE} bytes, got ${key.length}`);
         }
         try {
             // Generate random IV
-            const iv = this._crypto.getRandomValues(new Uint8Array(CryptoConstants.GCM_IV_SIZE));
+            const iv = this._crypto.getRandomValues(new Uint8Array(CryptoUtils.Constants.GCM_IV_SIZE));
             // Import the key
             const cryptoKey = await this._crypto.subtle.importKey('raw', toArrayBuffer(key), { name: 'AES-GCM' }, false, ['encrypt']);
             // Encode plaintext to bytes
@@ -82,12 +100,12 @@ export class BrowserCryptoProvider {
             const encryptedWithTag = await this._crypto.subtle.encrypt({
                 name: 'AES-GCM',
                 iv: iv,
-                tagLength: CryptoConstants.GCM_AUTH_TAG_SIZE * 8 // bits
+                tagLength: CryptoUtils.Constants.GCM_AUTH_TAG_SIZE * 8 // bits
             }, cryptoKey, plaintextBytes);
             // Split ciphertext and auth tag (auth tag is last 16 bytes)
             const encryptedArray = new Uint8Array(encryptedWithTag);
-            const encryptedData = encryptedArray.slice(0, encryptedArray.length - CryptoConstants.GCM_AUTH_TAG_SIZE);
-            const authTag = encryptedArray.slice(encryptedArray.length - CryptoConstants.GCM_AUTH_TAG_SIZE);
+            const encryptedData = encryptedArray.slice(0, encryptedArray.length - CryptoUtils.Constants.GCM_AUTH_TAG_SIZE);
+            const authTag = encryptedArray.slice(encryptedArray.length - CryptoUtils.Constants.GCM_AUTH_TAG_SIZE);
             return Success.with({
                 iv,
                 authTag,
@@ -108,14 +126,14 @@ export class BrowserCryptoProvider {
      * @returns `Success` with decrypted UTF-8 string, or `Failure` with an error.
      */
     async decrypt(encryptedData, key, iv, authTag) {
-        if (key.length !== CryptoConstants.AES_256_KEY_SIZE) {
-            return Failure.with(`Key must be ${CryptoConstants.AES_256_KEY_SIZE} bytes, got ${key.length}`);
+        if (key.length !== CryptoUtils.Constants.AES_256_KEY_SIZE) {
+            return Failure.with(`Key must be ${CryptoUtils.Constants.AES_256_KEY_SIZE} bytes, got ${key.length}`);
         }
-        if (iv.length !== CryptoConstants.GCM_IV_SIZE) {
-            return Failure.with(`IV must be ${CryptoConstants.GCM_IV_SIZE} bytes, got ${iv.length}`);
+        if (iv.length !== CryptoUtils.Constants.GCM_IV_SIZE) {
+            return Failure.with(`IV must be ${CryptoUtils.Constants.GCM_IV_SIZE} bytes, got ${iv.length}`);
         }
-        if (authTag.length !== CryptoConstants.GCM_AUTH_TAG_SIZE) {
-            return Failure.with(`Auth tag must be ${CryptoConstants.GCM_AUTH_TAG_SIZE} bytes, got ${authTag.length}`);
+        if (authTag.length !== CryptoUtils.Constants.GCM_AUTH_TAG_SIZE) {
+            return Failure.with(`Auth tag must be ${CryptoUtils.Constants.GCM_AUTH_TAG_SIZE} bytes, got ${authTag.length}`);
         }
         try {
             // Import the key
@@ -128,7 +146,7 @@ export class BrowserCryptoProvider {
             const decrypted = await this._crypto.subtle.decrypt({
                 name: 'AES-GCM',
                 iv: toArrayBuffer(iv),
-                tagLength: CryptoConstants.GCM_AUTH_TAG_SIZE * 8 // bits
+                tagLength: CryptoUtils.Constants.GCM_AUTH_TAG_SIZE * 8 // bits
             }, cryptoKey, encryptedWithTag);
             // Decode to string
             const decoder = new TextDecoder();
@@ -145,7 +163,7 @@ export class BrowserCryptoProvider {
      */
     async generateKey() {
         try {
-            return Success.with(this._crypto.getRandomValues(new Uint8Array(CryptoConstants.AES_256_KEY_SIZE)));
+            return Success.with(this._crypto.getRandomValues(new Uint8Array(CryptoUtils.Constants.AES_256_KEY_SIZE)));
         }
         catch (e) {
             const message = e instanceof Error ? e.message : String(e);
@@ -180,7 +198,7 @@ export class BrowserCryptoProvider {
                 salt: toArrayBuffer(salt),
                 iterations: iterations,
                 hash: 'SHA-256'
-            }, keyMaterial, CryptoConstants.AES_256_KEY_SIZE * 8 // bits
+            }, keyMaterial, CryptoUtils.Constants.AES_256_KEY_SIZE * 8 // bits
             );
             return Success.with(new Uint8Array(derivedBits));
         }
@@ -261,7 +279,147 @@ export class BrowserCryptoProvider {
             return Failure.with('Invalid base64 string');
         }
     }
+    // ============================================================================
+    // Asymmetric Key Operations
+    // ============================================================================
+    /**
+     * Generates a new asymmetric keypair via Web Crypto.
+     * @param algorithm - The algorithm to use.
+     * @param extractable - Whether the resulting keys may be exported.
+     * @returns `Success` with the generated `CryptoKeyPair`, or `Failure` with an error.
+     */
+    async generateKeyPair(algorithm, extractable) {
+        const params = CryptoUtils.keyPairAlgorithmParams[algorithm];
+        const result = await captureAsyncResult(() => this._crypto.subtle.generateKey(params.generateKey, extractable, params.keyPairUsages));
+        return result.withErrorFormat((e) => `Failed to generate ${algorithm} keypair: ${e}`);
+    }
+    /**
+     * Exports a public `CryptoKey` as a JSON Web Key.
+     * @remarks
+     * Rejects non-public keys at runtime. WebCrypto's `exportKey('jwk', ...)`
+     * does not enforce public-vs-private; without this guard a caller that
+     * passed an extractable private key would receive its private fields
+     * (`d`, `p`, `q`, ...) as JWK, defeating the method's name.
+     * @param publicKey - Extractable public key to export.
+     * @returns `Success` with the JWK, or `Failure` if not a public key or if export fails.
+     */
+    async exportPublicKeyJwk(publicKey) {
+        if (publicKey.type !== 'public') {
+            return Failure.with(`exportPublicKeyJwk requires a public CryptoKey, got '${publicKey.type}'`);
+        }
+        const result = await captureAsyncResult(() => this._crypto.subtle.exportKey('jwk', publicKey));
+        return result.withErrorFormat((e) => `Failed to export public key as JWK: ${e}`);
+    }
+    /**
+     * Imports a public-key JWK as a `CryptoKey` for the requested algorithm.
+     * @param jwk - The JSON Web Key produced by a prior export.
+     * @param algorithm - The algorithm the key was generated for.
+     * @returns `Success` with the imported public `CryptoKey`, or `Failure` with an error.
+     */
+    async importPublicKeyJwk(jwk, algorithm) {
+        const params = CryptoUtils.keyPairAlgorithmParams[algorithm];
+        const result = await captureAsyncResult(() => this._crypto.subtle.importKey('jwk', jwk, params.importPublicKey, true, params.publicKeyUsages));
+        return result.withErrorFormat((e) => `Failed to import ${algorithm} public key from JWK: ${e}`);
+    }
+    /* c8 ignore stop */
+    /**
+     * Wraps `plaintext` for the holder of `recipientPublicKey` using
+     * ECIES (ECDH P-256 + HKDF-SHA256 + AES-GCM-256). See
+     * {@link CryptoUtils.ICryptoProvider.wrapBytes | ICryptoProvider.wrapBytes}.
+     * @param plaintext - The bytes to wrap.
+     * @param recipientPublicKey - The recipient's ECDH P-256 public `CryptoKey`.
+     * @param options - HKDF salt and info; see {@link CryptoUtils.IWrapBytesOptions | IWrapBytesOptions}.
+     * @returns `Success` with the wrapped payload, or `Failure` with an error.
+     */
+    async wrapBytes(plaintext, recipientPublicKey, options) {
+        const recipientCheck = checkEcdhP256(recipientPublicKey, 'public', 'recipient public key');
+        if (recipientCheck.isFailure()) {
+            return Failure.with(`wrapBytes failed: ${recipientCheck.message}`);
+        }
+        const subtle = this._crypto.subtle;
+        const result = await captureAsyncResult(async () => {
+            const ephemeral = (await subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, true, [
+                'deriveKey'
+            ]));
+            const hkdfBase = await subtle.deriveKey({ name: 'ECDH', public: recipientPublicKey }, ephemeral.privateKey, { name: 'HKDF' }, false, ['deriveKey']);
+            const wrapKey = await subtle.deriveKey({ name: 'HKDF', salt: toBufferView(options.salt), info: toBufferView(options.info), hash: 'SHA-256' }, hkdfBase, { name: 'AES-GCM', length: 256 }, false, ['encrypt']);
+            const nonce = this._crypto.getRandomValues(new Uint8Array(CryptoUtils.Constants.GCM_IV_SIZE));
+            const ctBuf = await subtle.encrypt({ name: 'AES-GCM', iv: nonce }, wrapKey, toBufferView(plaintext));
+            const ephemeralPublicKey = await subtle.exportKey('jwk', ephemeral.publicKey);
+            return {
+                ephemeralPublicKey,
+                nonce: this.toBase64(nonce),
+                ciphertext: this.toBase64(new Uint8Array(ctBuf))
+            };
+        });
+        return result.withErrorFormat((e) => `wrapBytes failed: ${e}`);
+    }
+    /**
+     * Unwraps a payload produced by `wrapBytes` using the recipient's private
+     * key. See {@link CryptoUtils.ICryptoProvider.unwrapBytes | ICryptoProvider.unwrapBytes}.
+     * @param wrapped - The wrapped payload.
+     * @param recipientPrivateKey - The recipient's ECDH P-256 private `CryptoKey`.
+     * @param options - HKDF salt and info matching the wrap call.
+     * @returns `Success` with the original `plaintext`, or `Failure` with an error.
+     */
+    async unwrapBytes(wrapped, recipientPrivateKey, options) {
+        const recipientCheck = checkEcdhP256(recipientPrivateKey, 'private', 'recipient private key');
+        if (recipientCheck.isFailure()) {
+            return Failure.with(`unwrapBytes failed: ${recipientCheck.message}`);
+        }
+        const nonceResult = this.fromBase64(wrapped.nonce);
+        if (nonceResult.isFailure()) {
+            return Failure.with(`unwrapBytes failed: nonce: ${nonceResult.message}`);
+        }
+        if (nonceResult.value.length !== CryptoUtils.Constants.GCM_IV_SIZE) {
+            return Failure.with(`unwrapBytes failed: nonce must be ${CryptoUtils.Constants.GCM_IV_SIZE} bytes (got ${nonceResult.value.length})`);
+        }
+        const ciphertextResult = this.fromBase64(wrapped.ciphertext);
+        if (ciphertextResult.isFailure()) {
+            return Failure.with(`unwrapBytes failed: ciphertext: ${ciphertextResult.message}`);
+        }
+        if (ciphertextResult.value.length < CryptoUtils.Constants.GCM_AUTH_TAG_SIZE) {
+            return Failure.with(`unwrapBytes failed: ciphertext must be at least ${CryptoUtils.Constants.GCM_AUTH_TAG_SIZE} bytes (got ${ciphertextResult.value.length})`);
+        }
+        const subtle = this._crypto.subtle;
+        const result = await captureAsyncResult(async () => {
+            const ephemeralPub = await subtle.importKey('jwk', wrapped.ephemeralPublicKey, { name: 'ECDH', namedCurve: 'P-256' }, false, []);
+            const hkdfBase = await subtle.deriveKey({ name: 'ECDH', public: ephemeralPub }, recipientPrivateKey, { name: 'HKDF' }, false, ['deriveKey']);
+            const wrapKey = await subtle.deriveKey({ name: 'HKDF', salt: toBufferView(options.salt), info: toBufferView(options.info), hash: 'SHA-256' }, hkdfBase, { name: 'AES-GCM', length: 256 }, false, ['decrypt']);
+            const ptBuf = await subtle.decrypt({ name: 'AES-GCM', iv: toBufferView(nonceResult.value) }, wrapKey, toBufferView(ciphertextResult.value));
+            return new Uint8Array(ptBuf);
+        });
+        return result.withErrorFormat((e) => `unwrapBytes failed: ${e}`);
+    }
+}
+/**
+ * Verifies that `key` is an ECDH P-256 `CryptoKey` of the expected `keyType`
+ * (public or private). Used by the wrap/unwrap methods to surface a clean
+ * `Failure` instead of letting the WebCrypto deriveKey call throw a less
+ * informative error later in the pipeline. Key usages are intentionally not
+ * checked here: WebCrypto already produces a specific error if `deriveKey` is
+ * not in `usages`, and `deriveBits` is an equally valid alternative usage that
+ * an explicit check would have to track.
+ * @param key - The CryptoKey to validate.
+ * @param keyType - The required `key.type` ('public' for wrap, 'private' for unwrap).
+ * @param label - Human-readable role label included in the failure message.
+ * @returns `Success` with the key (unchanged) when the algorithm, curve, and
+ * type all match; otherwise `Failure` with `<label> must be ECDH P-256 (...)`.
+ */
+function checkEcdhP256(key, keyType, label) {
+    if (key.algorithm.name !== 'ECDH') {
+        return Failure.with(`${label} must be ECDH P-256 (got algorithm '${key.algorithm.name}')`);
+    }
+    const namedCurve = key.algorithm.namedCurve;
+    if (namedCurve !== 'P-256') {
+        return Failure.with(`${label} must be ECDH P-256 (got curve '${namedCurve}')`);
+    }
+    if (key.type !== keyType) {
+        return Failure.with(`${label} must be a ${keyType} CryptoKey (got '${key.type}')`);
+    }
+    return succeed(key);
 }
+/* c8 ignore start - Constructs a provider; only meaningful in a real browser environment */
 /**
  * Creates a {@link CryptoUtils.BrowserCryptoProvider | BrowserCryptoProvider} if Web
  * Crypto API is available.