@venizia/ignis-helpers 0.2.0-3 → 0.2.0-31

package/dist/cjs/core.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RetryJitterModes = exports.RetryBackoffStrategies = exports.executeWithRetryUntil = exports.executeWithRetry = exports.executeWithPerformanceMeasure = exports.keysToCamel = exports.toCamel = exports.int = exports.toBoolean = exports.LogLevels = exports.EnvironmentNames = exports.BaseHelper = void 0;
+exports.ProjectRootRegistry = exports.executeWithPerformanceMeasure = exports.toCamel = exports.toBoolean = exports.keysToCamel = exports.int = exports.blankToUndefined = exports.BuildInfoRegistry = exports.TreeWalker = exports.TreeBuilder = exports.SlugHelper = exports.RetryHelper = exports.RetryJitterModes = exports.RetryBackoffStrategies = exports.LogLevels = exports.EnvironmentNames = exports.BaseHelper = void 0;
 var base_1 = require("./modules/base");
 Object.defineProperty(exports, "BaseHelper", { enumerable: true, get: function () { return base_1.BaseHelper; } });
 // By name, never `export *` from `./modules/env`: that barrel also carries `Environment` and
@@ -22,26 +22,41 @@ Object.defineProperty(exports, "BaseHelper", { enumerable: true, get: function (
 var names_1 = require("./modules/env/names");
 Object.defineProperty(exports, "EnvironmentNames", { enumerable: true, get: function () { return names_1.EnvironmentNames; } });
 __exportStar(require("./modules/error"), exports);
-__exportStar(require("./modules/uid"), exports);
-__exportStar(require("./modules/pool"), exports);
-__exportStar(require("./modules/queue/internal/hf"), exports);
 var types_1 = require("./modules/logger/common/types");
 Object.defineProperty(exports, "LogLevels", { enumerable: true, get: function () { return types_1.LogLevels; } });
 __exportStar(require("./modules/network/http-request/fetcher/base-fetcher"), exports);
+__exportStar(require("./modules/pool"), exports);
+__exportStar(require("./modules/queue/internal/hf"), exports);
+__exportStar(require("./modules/uid"), exports);
+// The url guard, pure half only: `UrlPolicy` decides a url and a literal address with string and
+// number work. Its sibling `UrlIngest` reaches `node:dns` and stays out of this subpath.
+__exportStar(require("./modules/network/url-safety/common/constants"), exports);
+__exportStar(require("./modules/network/url-safety/policy"), exports);
+var constants_1 = require("./modules/retry/common/constants");
+Object.defineProperty(exports, "RetryBackoffStrategies", { enumerable: true, get: function () { return constants_1.RetryBackoffStrategies; } });
+Object.defineProperty(exports, "RetryJitterModes", { enumerable: true, get: function () { return constants_1.RetryJitterModes; } });
+var helper_1 = require("./modules/retry/helper");
+Object.defineProperty(exports, "RetryHelper", { enumerable: true, get: function () { return helper_1.RetryHelper; } });
+var helper_2 = require("./modules/slug/helper");
+Object.defineProperty(exports, "SlugHelper", { enumerable: true, get: function () { return helper_2.SlugHelper; } });
+var builder_1 = require("./modules/tree/builder");
+Object.defineProperty(exports, "TreeBuilder", { enumerable: true, get: function () { return builder_1.TreeBuilder; } });
+var walk_1 = require("./modules/tree/walk");
+Object.defineProperty(exports, "TreeWalker", { enumerable: true, get: function () { return walk_1.TreeWalker; } });
 // Pure value/type utilities that already live under the root barrel's `./utilities` re-export -
-// that barrel also carries node-only siblings (module.utility.ts, request.utility.ts,
-// crypto.utility.ts), so it cannot itself become a subpath. Named one at a time here instead of
-// widening the barrel: every symbol below is verified free of node builtins/globals.
+// that barrel also carries node-only siblings (module.utility.ts, request.utility.ts), so it
+// cannot itself become a subpath. Named one at a time here instead of widening the barrel: every
+// symbol below is verified free of node builtins/globals.
+var build_info_utility_1 = require("./utilities/build-info.utility");
+Object.defineProperty(exports, "BuildInfoRegistry", { enumerable: true, get: function () { return build_info_utility_1.BuildInfoRegistry; } });
 var parse_utility_1 = require("./utilities/parse.utility");
-Object.defineProperty(exports, "toBoolean", { enumerable: true, get: function () { return parse_utility_1.toBoolean; } });
+Object.defineProperty(exports, "blankToUndefined", { enumerable: true, get: function () { return parse_utility_1.blankToUndefined; } });
 Object.defineProperty(exports, "int", { enumerable: true, get: function () { return parse_utility_1.int; } });
-Object.defineProperty(exports, "toCamel", { enumerable: true, get: function () { return parse_utility_1.toCamel; } });
 Object.defineProperty(exports, "keysToCamel", { enumerable: true, get: function () { return parse_utility_1.keysToCamel; } });
+Object.defineProperty(exports, "toBoolean", { enumerable: true, get: function () { return parse_utility_1.toBoolean; } });
+Object.defineProperty(exports, "toCamel", { enumerable: true, get: function () { return parse_utility_1.toCamel; } });
 var performance_utility_1 = require("./utilities/performance.utility");
 Object.defineProperty(exports, "executeWithPerformanceMeasure", { enumerable: true, get: function () { return performance_utility_1.executeWithPerformanceMeasure; } });
-var retry_utility_1 = require("./utilities/retry.utility");
-Object.defineProperty(exports, "executeWithRetry", { enumerable: true, get: function () { return retry_utility_1.executeWithRetry; } });
-Object.defineProperty(exports, "executeWithRetryUntil", { enumerable: true, get: function () { return retry_utility_1.executeWithRetryUntil; } });
-Object.defineProperty(exports, "RetryBackoffStrategies", { enumerable: true, get: function () { return retry_utility_1.RetryBackoffStrategies; } });
-Object.defineProperty(exports, "RetryJitterModes", { enumerable: true, get: function () { return retry_utility_1.RetryJitterModes; } });
+var project_root_utility_1 = require("./utilities/project-root.utility");
+Object.defineProperty(exports, "ProjectRootRegistry", { enumerable: true, get: function () { return project_root_utility_1.ProjectRootRegistry; } });
 //# sourceMappingURL=core.js.map

package/dist/cjs/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/core.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uCAA4C;AAAnC,kGAAA,UAAU,OAAA;AACnB,6FAA6F;AAC7F,8DAA8D;AAC9D,6CAAuD;AAA9C,yGAAA,gBAAgB,OAAA;AACzB,kDAAgC;AAChC,gDAA8B;AAC9B,iDAA+B;AAC/B,8DAA4C;AAE5C,uDAA0D;AAAjD,kGAAA,SAAS,OAAA;AAClB,sFAAoE;AAEpE,gGAAgG;AAChG,sFAAsF;AACtF,gGAAgG;AAChG,qFAAqF;AACrF,2DAAiF;AAAxE,0GAAA,SAAS,OAAA;AAAE,oGAAA,GAAG,OAAA;AAAE,wGAAA,OAAO,OAAA;AAAE,4GAAA,WAAW,OAAA;AAC7C,uEAAgF;AAAvE,oIAAA,6BAA6B,OAAA;AACtC,2DAKmC;AAJjC,iHAAA,gBAAgB,OAAA;AAChB,sHAAA,qBAAqB,OAAA;AACrB,uHAAA,sBAAsB,OAAA;AACtB,iHAAA,gBAAgB,OAAA"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../src/core.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uCAA4C;AAAnC,kGAAA,UAAU,OAAA;AACnB,6FAA6F;AAC7F,8DAA8D;AAC9D,6CAAuD;AAA9C,yGAAA,gBAAgB,OAAA;AACzB,kDAAgC;AAChC,uDAA0D;AAAjD,kGAAA,SAAS,OAAA;AAElB,sFAAoE;AACpE,iDAA+B;AAC/B,8DAA4C;AAC5C,gDAA8B;AAC9B,iGAAiG;AACjG,yFAAyF;AACzF,gFAA8D;AAE9D,sEAAoD;AACpD,8DAA4F;AAAnF,mHAAA,sBAAsB,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAGjD,iDAAqD;AAA5C,qGAAA,WAAW,OAAA;AACpB,gDAAmD;AAA1C,oGAAA,UAAU,OAAA;AACnB,kDAAqD;AAA5C,sGAAA,WAAW,OAAA;AAcpB,4CAAiD;AAAxC,kGAAA,UAAU,OAAA;AAEnB,gGAAgG;AAChG,6FAA6F;AAC7F,iGAAiG;AACjG,0DAA0D;AAC1D,qEAAmE;AAA1D,uHAAA,iBAAiB,OAAA;AAE1B,2DAAmG;AAA1F,iHAAA,gBAAgB,OAAA;AAAE,oGAAA,GAAG,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,0GAAA,SAAS,OAAA;AAAE,wGAAA,OAAO,OAAA;AAC/D,uEAAgF;AAAvE,oIAAA,6BAA6B,OAAA;AACtC,yEAAuE;AAA9D,2HAAA,mBAAmB,OAAA"}

package/dist/cjs/modules/base.d.ts

@@ -1,4 +1,4 @@
-import { ILogger } from '../modules/logger/common/types';
+import { ILogger } from './logger/common/types';
 export declare class BaseHelper {
     scope: string;
     identifier: string;

package/dist/cjs/modules/base.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseHelper = void 0;
-const resolver_1 = require("../modules/logger/resolver");
+const resolver_1 = require("./logger/resolver");
 class BaseHelper {
     constructor(opts) {
         this.logger = resolver_1.LoggerResolver.resolve({

package/dist/cjs/modules/cron/{cron.helper.d.ts → helper.d.ts}

@@ -1,4 +1,4 @@
-import { BaseHelper } from '../../modules/base';
+import { BaseHelper } from '../base';
 import { CronJob, CronOnCompleteCommand } from 'cron';
 export interface ICronHelperOptions {
     cronTime: string;
@@ -32,4 +32,4 @@ export declare class CronHelper extends BaseHelper {
         cronTime: string;
     }): CronHelper;
 }
-//# sourceMappingURL=cron.helper.d.ts.map
+//# sourceMappingURL=helper.d.ts.map

package/dist/cjs/modules/cron/helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../../../../src/modules/cron/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAY,MAAM,MAAM,CAAC;AAIhE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CAChD;AAED,qBAAa,UAAW,SAAQ,UAAU;IACxC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAAC,CAA+B;IACnD,OAAO,CAAC,SAAS,CAAU;IAC3B,OAAO,CAAC,EAAE,CAAC,CAAS;IACpB,OAAO,CAAC,YAAY,CAAC,CAAkC;IAEhD,QAAQ,EAAE,OAAO,CAAC;gBAEb,IAAI,EAAE,kBAAkB;IAcpC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,kBAAkB;IAI3C,sFAAsF;IACtF,SAAS,CAAC,aAAa,IAAI,IAAI;IAuB/B,uLAAuL;IACjL,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAQhC,KAAK;IASC,IAAI;IASV,cAAc,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE;IAwBrE,SAAS,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE;CAcrC"}

package/dist/cjs/modules/cron/{cron.helper.js → helper.js}

@@ -4,7 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CronHelper = void 0;
-const base_1 = require("../../modules/base");
+const base_1 = require("../base");
 const promise_utility_1 = require("../../utilities/promise.utility");
 const cron_1 = require("cron");
 const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
@@ -103,4 +103,4 @@ class CronHelper extends base_1.BaseHelper {
     }
 }
 exports.CronHelper = CronHelper;
-//# sourceMappingURL=cron.helper.js.map
+//# sourceMappingURL=helper.js.map

package/dist/cjs/modules/cron/helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../../../../src/modules/cron/helper.ts"],"names":[],"mappings":";;;;;;AAAA,yCAA4C;AAC5C,iEAA4D;AAC5D,+BAAgE;AAChE,6DAAqC;AACrC,oCAA4C;AAW5C,MAAa,UAAW,SAAQ,iBAAU;IAUxC,YAAY,IAAwB;QAClC,KAAK,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAEhF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,GAAG,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,KAAK,CAAC;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QAEjC,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,IAAwB;QACzC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,sFAAsF;IAC5E,aAAa;QACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAA,iBAAO,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,wBAAgB,CAAC,QAAQ,CAAC;gBAC9B,OAAO,EAAE,yEAAyE;aACnF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,cAAO,CAAC,IAAI,CAAC;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,KAAK,EAAE,IAAI,CAAC,SAAS;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,QAAQ,EAAE,IAAI,CAAC,EAAE;aAClB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAgB,CAAC,QAAQ,CAAC;gBAC9B,OAAO,EAAE,+DAA+D,IAAI,CAAC,QAAQ,aAAa,KAAK,EAAE;aAC1G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uLAAuL;IACvL,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,cAAc,CAAC,IAAsD;QACnE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAEpD,IAAI,YAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,YAAY,GAAG,IAAI,eAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAgB,CAAC,QAAQ,CAAC;gBAC9B,OAAO,EAAE,oEAAoE,QAAQ,aAAa,KAAK,EAAE;aAC1G,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAA,+BAAa,EAAC;gBACZ,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;gBAC/B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAA0B;QAClC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAE1B,MAAM,OAAO,GAAuB;YAClC,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;QAEF,OAAO,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;CACF;AArHD,gCAqHC"}

package/dist/cjs/modules/cron/index.d.ts

@@ -1,2 +1,2 @@
-export * from './cron.helper';
+export * from './helper';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/cron/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/cron/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/modules/cron/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/dist/cjs/modules/cron/index.js

@@ -14,5 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./cron.helper"), exports);
+__exportStar(require("./helper"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/modules/cron/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/cron/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/cron/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB"}

package/dist/cjs/modules/crypto/algorithms/aes-legacy.algorithm.d.ts

@@ -1,12 +1,16 @@
-import C from 'node:crypto';
 import type { AESAlgorithmType } from './aes.algorithm';
 import { BaseCryptoAlgorithm } from './base.algorithm';
 interface IAESExtraOptions {
     iv?: Buffer;
-    inputEncoding?: C.Encoding;
-    outputEncoding?: C.Encoding;
+    inputEncoding?: BufferEncoding;
+    outputEncoding?: BufferEncoding;
     doThrow?: boolean;
 }
+/**
+ * Frozen back-compat format - keys come from `normalizeSecretKeyLegacy` (padEnd/truncate), never
+ * PBKDF2. `kdfSalt`/`kdfIterations` are deliberately absent from `IAESExtraOptions`: there is no
+ * salt to override, so the option would type-check and silently do nothing.
+ */
 export declare class LegacyAES extends BaseCryptoAlgorithm<AESAlgorithmType, string, string, string, string, string, IAESExtraOptions> {
     constructor(opts: {
         algorithm: AESAlgorithmType;

package/dist/cjs/modules/crypto/algorithms/aes-legacy.algorithm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aes-legacy.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes-legacy.algorithm.ts"],"names":[],"mappings":"AACA,OAAO,CAAC,MAAM,aAAa,CAAC;AAG5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAIvD,UAAU,gBAAgB;IACxB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC3B,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,SAAU,SAAQ,mBAAmB,CAChD,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,gBAAgB,CACjB;gBACa,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE;IAIjD,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,gBAAgB;IAIhD,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IA2C1E,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAanE,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IA6C1E,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAa1D,OAAO,CAAC,wBAAwB;CASjC"}
+{"version":3,"file":"aes-legacy.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes-legacy.algorithm.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAIvD,UAAU,gBAAgB;IACxB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,mBAAmB,CAChD,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,MAAM,EACN,gBAAgB,CACjB;gBACa,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE;IAIjD,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,gBAAgB;IAIhD,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IA2C1E,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAanE,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IA6C1E,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAa1D,OAAO,CAAC,wBAAwB;CASjC"}

package/dist/cjs/modules/crypto/algorithms/aes-legacy.algorithm.js

@@ -10,6 +10,11 @@ const node_fs_1 = __importDefault(require("node:fs"));
 const common_1 = require("../common");
 const base_algorithm_1 = require("./base.algorithm");
 const DEFAULT_LENGTH = 16;
+/**
+ * Frozen back-compat format - keys come from `normalizeSecretKeyLegacy` (padEnd/truncate), never
+ * PBKDF2. `kdfSalt`/`kdfIterations` are deliberately absent from `IAESExtraOptions`: there is no
+ * salt to override, so the option would type-check and silently do nothing.
+ */
 class LegacyAES extends base_algorithm_1.BaseCryptoAlgorithm {
     constructor(opts) {
         super({ scope: LegacyAES.name, ...opts });

package/dist/cjs/modules/crypto/algorithms/aes-legacy.algorithm.js.map

@@ -1 +1 @@
-{"version":3,"file":"aes-legacy.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes-legacy.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,6DAAqC;AACrC,8DAA4B;AAC5B,sDAAyB;AACzB,sCAA4C;AAE5C,qDAAuD;AAEvD,MAAM,cAAc,GAAG,EAAE,CAAC;AAS1B,MAAa,SAAU,SAAQ,oCAQ9B;IACC,YAAY,IAAqC;QAC/C,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,SAA2B;QAC9C,OAAO,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EACJ,EAAE,GAAG,qBAAC,CAAC,WAAW,CAAC,cAAc,CAAC,EAClC,aAAa,GAAG,OAAO,EACvB,cAAc,GAAG,QAAQ,EACzB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC;gBAC9C,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;aACnC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,qBAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAE5E,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAEnC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAE,MAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;oBACjD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAExB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAA8C;QACxD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,aAAa,GAAG,QAAQ,EAAE,cAAc,GAAG,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAE/F,IAAI,CAAC;YACH,MAAM,EAAE,GACN,IAAI,CAAC,IAAI,EAAE,EAAE;gBACb,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC;gBAC/D,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAClC,IAAI,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC;YAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC;gBAC9C,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;aACnC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,qBAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAEhF,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAC1D,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,MAAM,GAAG,cAAc,CAC3B,CAAC;oBACF,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;oBAC9B,QAA0B,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAChD,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC5E,cAAc,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAA8C;QACxD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,wBAAwB,CAAC,IAAyD;QACxF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,wBAAe,EAAE,GAAG,IAAI,CAAC;QAE1D,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;CACF;AA5ID,8BA4IC"}
+{"version":3,"file":"aes-legacy.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes-legacy.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,6DAAqC;AACrC,8DAA4B;AAC5B,sDAAyB;AACzB,sCAA4C;AAE5C,qDAAuD;AAEvD,MAAM,cAAc,GAAG,EAAE,CAAC;AAS1B;;;;GAIG;AACH,MAAa,SAAU,SAAQ,oCAQ9B;IACC,YAAY,IAAqC;QAC/C,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,SAA2B;QAC9C,OAAO,IAAI,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EACJ,EAAE,GAAG,qBAAC,CAAC,WAAW,CAAC,cAAc,CAAC,EAClC,aAAa,GAAG,OAAO,EACvB,cAAc,GAAG,QAAQ,EACzB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC;gBAC9C,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;aACnC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,qBAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAE5E,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAEnC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAE,MAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;oBACjD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAExB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAA8C;QACxD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,IAAkE;QACxE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,aAAa,GAAG,QAAQ,EAAE,cAAc,GAAG,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAE/F,IAAI,CAAC;YACH,MAAM,EAAE,GACN,IAAI,CAAC,IAAI,EAAE,EAAE;gBACb,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC;gBAC/D,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAClC,IAAI,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC;YAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC;gBAC9C,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;aACnC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,qBAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAEhF,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAC1D,EAAE,CAAC,MAAM,EACT,EAAE,CAAC,MAAM,GAAG,cAAc,CAC3B,CAAC;oBACF,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;oBAC9B,QAA0B,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAChD,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC5E,cAAc,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAA8C;QACxD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,wBAAwB,CAAC,IAAyD;QACxF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,wBAAe,EAAE,GAAG,IAAI,CAAC;QAE1D,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;CACF;AA5ID,8BA4IC"}

package/dist/cjs/modules/crypto/algorithms/aes.algorithm.d.ts

@@ -1,9 +1,12 @@
-import C from 'node:crypto';
 import { BaseCryptoAlgorithm } from './base.algorithm';
 interface IAESDecryptOptions {
-    inputEncoding?: C.Encoding;
-    outputEncoding?: C.Encoding;
+    inputEncoding?: BufferEncoding;
+    outputEncoding?: BufferEncoding;
     doThrow?: boolean;
+    /** Per-deployment PBKDF2 salt override. Must be supplied identically on encrypt and decrypt; omit for the shipped default. */
+    kdfSalt?: string;
+    /** PBKDF2 iteration count override. Must be supplied identically on encrypt and decrypt; omit for the shipped default. */
+    kdfIterations?: number;
 }
 /** `iv` is encrypt-only: the envelope carries the IV, so decrypt reads it from there and a supplied one would be silently ignored. */
 interface IAESExtraOptions extends IAESDecryptOptions {
@@ -20,11 +23,20 @@ export declare class AES extends BaseCryptoAlgorithm<AESAlgorithmType, string, s
         algorithm: AESAlgorithmType;
     });
     static withAlgorithm(algorithm: AESAlgorithmType): AES;
-    protected resolveEncryptKey(secret: TAESSecret): {
+    protected resolveEncryptKey(opts: {
+        secret: TAESSecret;
+        kdfSalt?: string;
+        kdfIterations?: number;
+    }): {
         id: string;
         key: Buffer;
     };
-    protected resolveDecryptKey(secret: TAESSecret, id: string): Buffer;
+    protected resolveDecryptKey(opts: {
+        secret: TAESSecret;
+        id: string;
+        kdfSalt?: string;
+        kdfIterations?: number;
+    }): Buffer;
     encrypt(opts: {
         message: string;
         secret: TAESSecret;

package/dist/cjs/modules/crypto/algorithms/aes.algorithm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aes.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes.algorithm.ts"],"names":[],"mappings":"AACA,OAAO,CAAC,MAAM,aAAa,CAAC;AAG5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAMvD,UAAU,kBAAkB;IAC1B,aAAa,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC3B,cAAc,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,sIAAsI;AACtI,UAAU,gBAAiB,SAAQ,kBAAkB;IACnD,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,gBAAgB,EAAE,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,aAAa,CAAC;AAE7D,qBAAa,GAAI,SAAQ,mBAAmB,CAC1C,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,UAAU,EACV,MAAM,EACN,MAAM,EACN,gBAAgB,CACjB;gBACa,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE;IAIjD,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,gBAAgB;IAIhD,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IAc5E,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM;IAwBnE,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IA+C9E,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,MAAM;IAavE,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;KAAE;IAiDhF,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE;CAY/D"}
+{"version":3,"file":"aes.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes.algorithm.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAMvD,UAAU,kBAAkB;IAC1B,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8HAA8H;IAC9H,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0HAA0H;IAC1H,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,sIAAsI;AACtI,UAAU,gBAAiB,SAAQ,kBAAkB;IACnD,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,gBAAgB,EAAE,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,aAAa,CAAC;AAE7D,qBAAa,GAAI,SAAQ,mBAAmB,CAC1C,gBAAgB,EAChB,MAAM,EACN,MAAM,EACN,UAAU,EACV,MAAM,EACN,MAAM,EACN,gBAAgB,CACjB;gBACa,IAAI,EAAE;QAAE,SAAS,EAAE,gBAAgB,CAAA;KAAE;IAIjD,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,gBAAgB;IAIhD,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE;QAChC,MAAM,EAAE,UAAU,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IAiB/B,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE;QAChC,MAAM,EAAE,UAAU,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,MAAM;IAyBV,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,gBAAgB,CAAA;KAAE;IAiD9E,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,MAAM;IAavE,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;KAAE;IAuDhF,WAAW,CAAC,IAAI,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE;CAY/D"}

package/dist/cjs/modules/crypto/algorithms/aes.algorithm.js

@@ -7,7 +7,7 @@ exports.AES = void 0;
 const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const node_fs_1 = __importDefault(require("node:fs"));
-const error_1 = require("../../../modules/error");
+const error_1 = require("../../error");
 const base_algorithm_1 = require("./base.algorithm");
 const DEFAULT_LENGTH = 16;
 const CIPHERTEXT_VERSION = 0x01;
@@ -19,7 +19,8 @@ class AES extends base_algorithm_1.BaseCryptoAlgorithm {
     static withAlgorithm(algorithm) {
         return new AES({ algorithm });
     }
-    resolveEncryptKey(secret) {
+    resolveEncryptKey(opts) {
+        const { secret, kdfSalt, kdfIterations } = opts;
         const entry = Array.isArray(secret) ? secret[0] : { id: DEFAULT_KEY_ID, secret };
         if (!entry || (0, isEmpty_1.default)(entry.secret)) {
             throw (0, error_1.getError)({ message: '[AES][resolveEncryptKey] Missing secret or empty keyring' });
@@ -27,13 +28,16 @@ class AES extends base_algorithm_1.BaseCryptoAlgorithm {
         const key = this.normalizeSecretKey({
             secret: entry.secret,
             length: this.getAlgorithmKeySize(),
+            kdfSalt,
+            kdfIterations,
         });
         return { id: entry.id, key };
     }
-    resolveDecryptKey(secret, id) {
+    resolveDecryptKey(opts) {
+        const { secret, id, kdfSalt, kdfIterations } = opts;
         const length = this.getAlgorithmKeySize();
         if (!Array.isArray(secret)) {
-            return this.normalizeSecretKey({ secret, length });
+            return this.normalizeSecretKey({ secret, length, kdfSalt, kdfIterations });
         }
         const entry = secret.find(e => e.id === id);
         if (!entry) {
@@ -47,13 +51,13 @@ class AES extends base_algorithm_1.BaseCryptoAlgorithm {
                 message: `[AES][resolveDecryptKey] Keyring entry for key id "${id}" has an empty secret`,
             });
         }
-        return this.normalizeSecretKey({ secret: entry.secret, length });
+        return this.normalizeSecretKey({ secret: entry.secret, length, kdfSalt, kdfIterations });
     }
     encrypt(opts) {
         const { message, secret } = opts;
-        const { iv = node_crypto_1.default.randomBytes(DEFAULT_LENGTH), inputEncoding = 'utf-8', outputEncoding = 'base64', doThrow = true, } = opts.opts ?? {};
+        const { iv = node_crypto_1.default.randomBytes(DEFAULT_LENGTH), inputEncoding = 'utf-8', outputEncoding = 'base64', doThrow = true, kdfSalt, kdfIterations, } = opts.opts ?? {};
         try {
-            const { id, key } = this.resolveEncryptKey(secret);
+            const { id, key } = this.resolveEncryptKey({ secret, kdfSalt, kdfIterations });
             const idBuffer = Buffer.from(id, 'utf-8');
             if (idBuffer.length > 0xff) {
                 throw (0, error_1.getError)({ message: '[AES][encrypt] Key id too long (max 255 bytes)' });
@@ -96,7 +100,7 @@ class AES extends base_algorithm_1.BaseCryptoAlgorithm {
     }
     decrypt(opts) {
         const { message, secret } = opts;
-        const { inputEncoding = 'base64', outputEncoding = 'utf-8', doThrow = true } = opts.opts ?? {};
+        const { inputEncoding = 'base64', outputEncoding = 'utf-8', doThrow = true, kdfSalt, kdfIterations, } = opts.opts ?? {};
         try {
             const raw = Buffer.from(message, inputEncoding);
             const version = raw[0];
@@ -109,7 +113,7 @@ class AES extends base_algorithm_1.BaseCryptoAlgorithm {
             cursor += idLength;
             const iv = raw.subarray(cursor, cursor + DEFAULT_LENGTH);
             cursor += DEFAULT_LENGTH;
-            const key = this.resolveDecryptKey(secret, id);
+            const key = this.resolveDecryptKey({ secret, id, kdfSalt, kdfIterations });
             const decipher = node_crypto_1.default.createDecipheriv(this.algorithm, key, iv);
             switch (this.algorithm) {
                 case 'aes-256-cbc': {

package/dist/cjs/modules/crypto/algorithms/aes.algorithm.js.map

@@ -1 +1 @@
-{"version":3,"file":"aes.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,6DAAqC;AACrC,8DAA4B;AAC5B,sDAAyB;AACzB,2CAA2C;AAC3C,qDAAuD;AAEvD,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,cAAc,GAAG,GAAG,CAAC;AAsB3B,MAAa,GAAI,SAAQ,oCAQxB;IACC,YAAY,IAAqC;QAC/C,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,SAA2B;QAC9C,OAAO,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAChC,CAAC;IAES,iBAAiB,CAAC,MAAkB;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAEjF,IAAI,CAAC,KAAK,IAAI,IAAA,iBAAO,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;SACnC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;IAC/B,CAAC;IAES,iBAAiB,CAAC,MAAkB,EAAE,EAAU;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,yEAAyE,EAAE,GAAG;aACxF,CAAC,CAAC;QACL,CAAC;QAED,kIAAkI;QAClI,IAAI,IAAA,iBAAO,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,sDAAsD,EAAE,uBAAuB;aACzF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,IAAsE;QAC5E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EACJ,EAAE,GAAG,qBAAC,CAAC,WAAW,CAAC,cAAc,CAAC,EAClC,aAAa,GAAG,OAAO,EACvB,cAAc,GAAG,QAAQ,EACzB,OAAO,GAAG,IAAI,GACf,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,MAAM,GAAG,qBAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAEzD,qFAAqF;YACrF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAErC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAEnC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAE,MAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;oBACjD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAExB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAkD;QAC5D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,IAAwE;QAC9E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,aAAa,GAAG,QAAQ,EAAE,cAAc,GAAG,OAAO,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAE/F,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;gBACnC,MAAM,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,MAAM,GAAG,CAAC,CAAC;YAEf,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,IAAI,QAAQ,CAAC;YAEnB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;YACzD,MAAM,IAAI,cAAc,CAAC;YAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,qBAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAE7D,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;oBAC9D,MAAM,IAAI,cAAc,CAAC;oBACxB,QAA0B,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAChD,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC5E,cAAc,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAkD;QAC5D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAhLD,kBAgLC"}
+{"version":3,"file":"aes.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/aes.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,6DAAqC;AACrC,8DAA4B;AAC5B,sDAAyB;AACzB,2CAA2C;AAC3C,qDAAuD;AAEvD,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,cAAc,GAAG,GAAG,CAAC;AA0B3B,MAAa,GAAI,SAAQ,oCAQxB;IACC,YAAY,IAAqC;QAC/C,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,SAA2B;QAC9C,OAAO,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAChC,CAAC;IAES,iBAAiB,CAAC,IAI3B;QACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAEjF,IAAI,CAAC,KAAK,IAAI,IAAA,iBAAO,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE;YAClC,OAAO;YACP,aAAa;SACd,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC;IAC/B,CAAC;IAES,iBAAiB,CAAC,IAK3B;QACC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,yEAAyE,EAAE,GAAG;aACxF,CAAC,CAAC;QACL,CAAC;QAED,kIAAkI;QAClI,IAAI,IAAA,iBAAO,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,sDAAsD,EAAE,uBAAuB;aACzF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,CAAC,IAAsE;QAC5E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EACJ,EAAE,GAAG,qBAAC,CAAC,WAAW,CAAC,cAAc,CAAC,EAClC,aAAa,GAAG,OAAO,EACvB,cAAc,GAAG,QAAQ,EACzB,OAAO,GAAG,IAAI,EACd,OAAO,EACP,aAAa,GACd,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBAC3B,MAAM,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,MAAM,GAAG,qBAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAEzD,qFAAqF;YACrF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAErC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAEnC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAE,MAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;oBACjD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAExB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAkD;QAC5D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,IAAwE;QAC9E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EACJ,aAAa,GAAG,QAAQ,EACxB,cAAc,GAAG,OAAO,EACxB,OAAO,GAAG,IAAI,EACd,OAAO,EACP,aAAa,GACd,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;gBACnC,MAAM,IAAA,gBAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,MAAM,GAAG,CAAC,CAAC;YAEf,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrE,MAAM,IAAI,QAAQ,CAAC;YAEnB,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;YACzD,MAAM,IAAI,cAAc,CAAC;YAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,qBAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAE7D,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACvB,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;oBAC9D,MAAM,IAAI,cAAc,CAAC;oBACxB,QAA0B,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAChD,MAAM;gBACR,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAC5E,cAAc,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAAkD;QAC5D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEtC,IAAI,CAAC,YAAY,IAAI,IAAA,iBAAO,EAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AArMD,kBAqMC"}

package/dist/cjs/modules/crypto/algorithms/base.algorithm.d.ts

@@ -1,4 +1,4 @@
-import { BaseHelper } from '../../../modules/base';
+import { BaseHelper } from '../../base';
 import { ICryptoAlgorithm } from '../common';
 export declare abstract class AbstractCryptoAlgorithm<AlgorithmType extends string, EncryptInputType = unknown, DecryptInputType = unknown, SecretKeyType = unknown, EncryptReturnType = unknown, DecryptReturnType = unknown, ExtraOptions = unknown> extends BaseHelper implements ICryptoAlgorithm<AlgorithmType, EncryptInputType, DecryptInputType, SecretKeyType, EncryptReturnType, DecryptReturnType, ExtraOptions> {
     algorithm: AlgorithmType;
@@ -21,10 +21,15 @@ export declare abstract class BaseCryptoAlgorithm<AlgorithmType extends string,
     validateAlgorithmName(opts: {
         algorithm: AlgorithmType;
     }): void;
+    /** Omit `kdfSalt`/`kdfIterations` for the shipped default (byte-identical to every prior release). Supplying either requires supplying the same value again on decrypt. */
     normalizeSecretKey(opts: {
         secret: string;
         length: number;
+        kdfSalt?: string;
+        kdfIterations?: number;
     }): Buffer;
+    /** Rejects a `kdfSalt` short enough to look configured while giving up most of the protection a salt exists for (NIST SP 800-132: 128-bit minimum). */
+    private validateKdfSalt;
     getAlgorithmKeySize(): number;
 }
 //# sourceMappingURL=base.algorithm.d.ts.map

package/dist/cjs/modules/crypto/algorithms/base.algorithm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/base.algorithm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,OAAO,EAKL,gBAAgB,EACjB,MAAM,WAAW,CAAC;AAInB,8BAAsB,uBAAuB,CAC3C,aAAa,SAAS,MAAM,EAC5B,gBAAgB,GAAG,OAAO,EAC1B,gBAAgB,GAAG,OAAO,EAC1B,aAAa,GAAG,OAAO,EACvB,iBAAiB,GAAG,OAAO,EAC3B,iBAAiB,GAAG,OAAO,EAC3B,YAAY,GAAG,OAAO,CAEtB,SAAQ,UACR,YACE,gBAAgB,CACd,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,CACb;IAEH,SAAS,EAAE,aAAa,CAAC;IAEzB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,MAAM,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB,GAAG,iBAAiB;IAErB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,MAAM,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB,GAAG,iBAAiB;CACtB;AAED,8BAAsB,mBAAmB,CACvC,aAAa,SAAS,MAAM,EAC5B,gBAAgB,GAAG,OAAO,EAC1B,gBAAgB,GAAG,OAAO,EAC1B,aAAa,GAAG,OAAO,EACvB,iBAAiB,GAAG,OAAO,EAC3B,iBAAiB,GAAG,OAAO,EAC3B,YAAY,GAAG,OAAO,CACtB,SAAQ,uBAAuB,CAC/B,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,CACb;gBACa,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,aAAa,CAAA;KAAE;IAU7D,qBAAqB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,aAAa,CAAA;KAAE;IAUxD,kBAAkB,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAoBpE,mBAAmB;CAIpB"}
+{"version":3,"file":"base.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/base.algorithm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,OAAO,EAKL,gBAAgB,EAEjB,MAAM,WAAW,CAAC;AAInB,8BAAsB,uBAAuB,CAC3C,aAAa,SAAS,MAAM,EAC5B,gBAAgB,GAAG,OAAO,EAC1B,gBAAgB,GAAG,OAAO,EAC1B,aAAa,GAAG,OAAO,EACvB,iBAAiB,GAAG,OAAO,EAC3B,iBAAiB,GAAG,OAAO,EAC3B,YAAY,GAAG,OAAO,CAEtB,SAAQ,UACR,YACE,gBAAgB,CACd,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,CACb;IAEH,SAAS,EAAE,aAAa,CAAC;IAEzB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,MAAM,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB,GAAG,iBAAiB;IAErB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,MAAM,EAAE,aAAa,CAAC;QACtB,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB,GAAG,iBAAiB;CACtB;AAED,8BAAsB,mBAAmB,CACvC,aAAa,SAAS,MAAM,EAC5B,gBAAgB,GAAG,OAAO,EAC1B,gBAAgB,GAAG,OAAO,EAC1B,aAAa,GAAG,OAAO,EACvB,iBAAiB,GAAG,OAAO,EAC3B,iBAAiB,GAAG,OAAO,EAC3B,YAAY,GAAG,OAAO,CACtB,SAAQ,uBAAuB,CAC/B,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,CACb;gBACa,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,aAAa,CAAA;KAAE;IAU7D,qBAAqB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,aAAa,CAAA;KAAE;IAUxD,2KAA2K;IAC3K,kBAAkB,CAAC,IAAI,EAAE;QACvB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,MAAM;IAqBV,uJAAuJ;IACvJ,OAAO,CAAC,eAAe;IAWvB,mBAAmB;CAIpB"}

package/dist/cjs/modules/crypto/algorithms/base.algorithm.js

@@ -5,8 +5,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BaseCryptoAlgorithm = exports.AbstractCryptoAlgorithm = void 0;
 const node_crypto_1 = __importDefault(require("node:crypto"));
-const base_1 = require("../../../modules/base");
-const error_1 = require("../../../modules/error");
+const base_1 = require("../../base");
+const error_1 = require("../../error");
 const utilities_1 = require("../../../utilities");
 const common_1 = require("../common");
 const DERIVED_KEY_CACHE = new Map();
@@ -30,17 +30,33 @@ class BaseCryptoAlgorithm extends AbstractCryptoAlgorithm {
             });
         }
     }
+    /** Omit `kdfSalt`/`kdfIterations` for the shipped default (byte-identical to every prior release). Supplying either requires supplying the same value again on decrypt. */
     normalizeSecretKey(opts) {
-        const { secret, length } = opts;
-        const cacheKey = `${common_1.DEFAULT_KDF_DIGEST}:${common_1.DEFAULT_KDF_ITERATIONS}:${length}:${secret}`;
+        const { secret, length, kdfSalt, kdfIterations } = opts;
+        if (kdfSalt !== undefined) {
+            this.validateKdfSalt({ kdfSalt });
+        }
+        const salt = kdfSalt ?? common_1.DEFAULT_KDF_SALT;
+        const iterations = kdfIterations ?? common_1.DEFAULT_KDF_ITERATIONS;
+        const cacheKey = `${common_1.DEFAULT_KDF_DIGEST}:${iterations}:${length}:${salt}:${secret}`;
         const cached = DERIVED_KEY_CACHE.get(cacheKey);
         if (cached) {
             return cached;
         }
-        const key = node_crypto_1.default.pbkdf2Sync(secret, common_1.DEFAULT_KDF_SALT, common_1.DEFAULT_KDF_ITERATIONS, length, common_1.DEFAULT_KDF_DIGEST);
+        const key = node_crypto_1.default.pbkdf2Sync(secret, salt, iterations, length, common_1.DEFAULT_KDF_DIGEST);
         DERIVED_KEY_CACHE.set(cacheKey, key);
         return key;
     }
+    /** Rejects a `kdfSalt` short enough to look configured while giving up most of the protection a salt exists for (NIST SP 800-132: 128-bit minimum). */
+    validateKdfSalt(opts) {
+        const { kdfSalt } = opts;
+        const byteLength = Buffer.byteLength(kdfSalt, 'utf-8');
+        if (byteLength < common_1.MINIMUM_KDF_SALT_BYTES) {
+            throw (0, error_1.getError)({
+                message: `[BaseCryptoAlgorithm][validateKdfSalt] kdfSalt must be at least ${common_1.MINIMUM_KDF_SALT_BYTES} bytes, got ${byteLength}`,
+            });
+        }
+    }
     getAlgorithmKeySize() {
         const b = (0, utilities_1.int)(this.algorithm?.split('-')?.[1] ?? common_1.DEFAULT_CIPHER_BITS);
         return (0, utilities_1.int)(b / 8);

package/dist/cjs/modules/crypto/algorithms/base.algorithm.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/base.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA4B;AAC5B,yCAA4C;AAC5C,2CAA2C;AAC3C,2CAAkC;AAClC,sCAMmB;AAEnB,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD,MAAsB,uBASpB,SAAQ,iBAAU;CAyBnB;AAlCD,0DAkCC;AAED,MAAsB,mBAQpB,SAAQ,uBAQT;IACC,YAAY,IAAiD;QAC3D,KAAK,CAAC;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,IAAI;YAC/D,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,qBAAqB,CAAC,IAAkC;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE3B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,+DAA+D,SAAS,EAAE;aACpF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,IAAwC;QACzD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEhC,MAAM,QAAQ,GAAG,GAAG,2BAAkB,IAAI,+BAAsB,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,qBAAC,CAAC,UAAU,CACtB,MAAM,EACN,yBAAgB,EAChB,+BAAsB,EACtB,MAAM,EACN,2BAAkB,CACnB,CAAC;QACF,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mBAAmB;QACjB,MAAM,CAAC,GAAG,IAAA,eAAG,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,4BAAmB,CAAC,CAAC;QACtE,OAAO,IAAA,eAAG,EAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpB,CAAC;CACF;AA7DD,kDA6DC"}
+{"version":3,"file":"base.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/base.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA4B;AAC5B,yCAA4C;AAC5C,2CAA2C;AAC3C,2CAAkC;AAClC,sCAOmB;AAEnB,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD,MAAsB,uBASpB,SAAQ,iBAAU;CAyBnB;AAlCD,0DAkCC;AAED,MAAsB,mBAQpB,SAAQ,uBAQT;IACC,YAAY,IAAiD;QAC3D,KAAK,CAAC;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,IAAI;YAC/D,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,qBAAqB,CAAC,IAAkC;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE3B,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,+DAA+D,SAAS,EAAE;aACpF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,2KAA2K;IAC3K,kBAAkB,CAAC,IAKlB;QACC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAExD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,IAAI,yBAAgB,CAAC;QACzC,MAAM,UAAU,GAAG,aAAa,IAAI,+BAAsB,CAAC;QAE3D,MAAM,QAAQ,GAAG,GAAG,2BAAkB,IAAI,UAAU,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACnF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,qBAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,2BAAkB,CAAC,CAAC;QAC/E,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uJAAuJ;IAC/I,eAAe,CAAC,IAAyB;QAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEvD,IAAI,UAAU,GAAG,+BAAsB,EAAE,CAAC;YACxC,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,mEAAmE,+BAAsB,eAAe,UAAU,EAAE;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,MAAM,CAAC,GAAG,IAAA,eAAG,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,4BAAmB,CAAC,CAAC;QACtE,OAAO,IAAA,eAAG,EAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpB,CAAC;CACF;AAhFD,kDAgFC"}

package/dist/cjs/modules/crypto/algorithms/ecdh.algorithm.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ECDH = void 0;
-const error_1 = require("../../../modules/error");
+const error_1 = require("../../error");
 const base_algorithm_1 = require("./base.algorithm");
 const CURVE = { name: 'ECDH', namedCurve: 'P-256' };
 const CIPHER = 'AES-GCM';

package/dist/cjs/modules/crypto/algorithms/hash.algorithm.d.ts

@@ -0,0 +1,34 @@
+import { BaseHelper } from '../../base';
+import { THashAlgorithm, THashOutputEncoding } from '../common';
+interface IHashExtraOptions {
+    outputEncoding?: THashOutputEncoding;
+}
+/**
+ * One-way message digests and keyed HMACs. Unlike `AES`/`RSA` this has no `decrypt` - a digest
+ * cannot be reversed, so `digest`/`hmac` are the only operations, not `ICryptoAlgorithm`.
+ */
+export declare class Hash extends BaseHelper {
+    algorithm: THashAlgorithm;
+    constructor(opts: {
+        algorithm: THashAlgorithm;
+    });
+    /** Memoized - `BaseHelper`'s constructor resolves a logger on every allocation (~50ns), and downstream token code calls `withAlgorithm` per request. */
+    private static readonly instances;
+    static withAlgorithm(algorithm: THashAlgorithm): Hash;
+    validateAlgorithmName(opts: {
+        algorithm: THashAlgorithm;
+    }): void;
+    /** Plain digest, no secret. MD5/SHA1 are broken/weak - see {@link HashAlgorithms} - never use for security decisions. */
+    digest(opts: {
+        message: string;
+        opts?: IHashExtraOptions;
+    }): string;
+    /** Keyed HMAC. `secret` is mandatory and validated non-empty so a request for an HMAC never silently degrades into an unkeyed digest. */
+    hmac(opts: {
+        message: string;
+        secret: string;
+        opts?: IHashExtraOptions;
+    }): string;
+}
+export {};
+//# sourceMappingURL=hash.algorithm.d.ts.map

package/dist/cjs/modules/crypto/algorithms/hash.algorithm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.algorithm.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/hash.algorithm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAGL,cAAc,EACd,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAEnB,UAAU,iBAAiB;IACzB,cAAc,CAAC,EAAE,mBAAmB,CAAC;CACtC;AAED;;;GAGG;AACH,qBAAa,IAAK,SAAQ,UAAU;IAClC,SAAS,EAAE,cAAc,CAAC;gBAEd,IAAI,EAAE;QAAE,SAAS,EAAE,cAAc,CAAA;KAAE;IAO/C,wJAAwJ;IACxJ,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAEpE,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,cAAc;IAY9C,qBAAqB,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,cAAc,CAAA;KAAE;IAUzD,yHAAyH;IACzH,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;KAAE,GAAG,MAAM;IAOnE,yIAAyI;IACzI,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;KAAE,GAAG,MAAM;CAYlF"}

package/dist/cjs/modules/crypto/algorithms/hash.algorithm.js

@@ -0,0 +1,59 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Hash = void 0;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const base_1 = require("../../base");
+const error_1 = require("../../error");
+const common_1 = require("../common");
+/**
+ * One-way message digests and keyed HMACs. Unlike `AES`/`RSA` this has no `decrypt` - a digest
+ * cannot be reversed, so `digest`/`hmac` are the only operations, not `ICryptoAlgorithm`.
+ */
+class Hash extends base_1.BaseHelper {
+    constructor(opts) {
+        super({ scope: Hash.name, identifier: opts.algorithm });
+        this.validateAlgorithmName({ algorithm: opts.algorithm });
+        this.algorithm = opts.algorithm;
+    }
+    /** Memoized - `BaseHelper`'s constructor resolves a logger on every allocation (~50ns), and downstream token code calls `withAlgorithm` per request. */
+    static { this.instances = new Map(); }
+    static withAlgorithm(algorithm) {
+        const cached = Hash.instances.get(algorithm);
+        if (cached) {
+            return cached;
+        }
+        const created = new Hash({ algorithm });
+        Hash.instances.set(algorithm, created);
+        return created;
+    }
+    validateAlgorithmName(opts) {
+        const { algorithm } = opts;
+        if (!algorithm || !common_1.HashAlgorithms.isValid(algorithm)) {
+            throw (0, error_1.getError)({
+                message: `[Hash][validateAlgorithmName] Invalid algorithm name | algorithm: ${algorithm}`,
+            });
+        }
+    }
+    /** Plain digest, no secret. MD5/SHA1 are broken/weak - see {@link HashAlgorithms} - never use for security decisions. */
+    digest(opts) {
+        const { message } = opts;
+        const { outputEncoding = common_1.DEFAULT_HASH_OUTPUT_ENCODING } = opts.opts ?? {};
+        return node_crypto_1.default.createHash(this.algorithm).update(message).digest(outputEncoding);
+    }
+    /** Keyed HMAC. `secret` is mandatory and validated non-empty so a request for an HMAC never silently degrades into an unkeyed digest. */
+    hmac(opts) {
+        const { message, secret } = opts;
+        const { outputEncoding = common_1.DEFAULT_HASH_OUTPUT_ENCODING } = opts.opts ?? {};
+        if (!secret) {
+            throw (0, error_1.getError)({
+                message: `[Hash][hmac] Missing secret for HMAC-${this.algorithm.toUpperCase()}`,
+            });
+        }
+        return node_crypto_1.default.createHmac(this.algorithm, secret).update(message).digest(outputEncoding);
+    }
+}
+exports.Hash = Hash;
+//# sourceMappingURL=hash.algorithm.js.map

package/dist/cjs/modules/crypto/algorithms/hash.algorithm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.algorithm.js","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/hash.algorithm.ts"],"names":[],"mappings":";;;;;;AAAA,8DAA4B;AAC5B,yCAA4C;AAC5C,2CAA2C;AAC3C,sCAKmB;AAMnB;;;GAGG;AACH,MAAa,IAAK,SAAQ,iBAAU;IAGlC,YAAY,IAAmC;QAC7C,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAE1D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,wJAAwJ;aAChI,cAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEpE,MAAM,CAAC,aAAa,CAAC,SAAyB;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEvC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qBAAqB,CAAC,IAAmC;QACvD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAE3B,IAAI,CAAC,SAAS,IAAI,CAAC,uBAAc,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,qEAAqE,SAAS,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yHAAyH;IACzH,MAAM,CAAC,IAAmD;QACxD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACzB,MAAM,EAAE,cAAc,GAAG,qCAA4B,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAE1E,OAAO,qBAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7E,CAAC;IAED,yIAAyI;IACzI,IAAI,CAAC,IAAmE;QACtE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,cAAc,GAAG,qCAA4B,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAE1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAA,gBAAQ,EAAC;gBACb,OAAO,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE;aAChF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,qBAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACrF,CAAC;;AAvDH,oBAwDC"}

package/dist/cjs/modules/crypto/algorithms/index.d.ts

@@ -2,5 +2,6 @@ export * from './base.algorithm';
 export * from './aes.algorithm';
 export * from './aes-legacy.algorithm';
 export * from './ecdh.algorithm';
+export * from './hash.algorithm';
 export * from './rsa.algorithm';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/modules/crypto/algorithms/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/modules/crypto/algorithms/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/cjs/modules/crypto/algorithms/index.js

@@ -18,5 +18,6 @@ __exportStar(require("./base.algorithm"), exports);
 __exportStar(require("./aes.algorithm"), exports);
 __exportStar(require("./aes-legacy.algorithm"), exports);
 __exportStar(require("./ecdh.algorithm"), exports);
+__exportStar(require("./hash.algorithm"), exports);
 __exportStar(require("./rsa.algorithm"), exports);
 //# sourceMappingURL=index.js.map