cipher-kit 2.0.0-beta.0 → 2.0.0-beta.1

package/dist/{chunk-J5YHHXDC.js → chunk-6HNTSQAP.js}

@@ -5,11 +5,64 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
-function $isStr(value, min = 1) {
-  return value !== null && value !== void 0 && typeof value === "string" && value.trim().length >= min;
+
+// src/helpers/consts.ts
+var ENCODING_FORMATS = Object.freeze(["base64", "base64url", "hex", "utf8", "latin1"]);
+var DIGEST_ALGORITHMS = Object.freeze({
+  sha256: { node: "sha256", web: "SHA-256" },
+  sha384: { node: "sha384", web: "SHA-384" },
+  sha512: { node: "sha512", web: "SHA-512" }
+});
+var ENCRYPTION_ALGORITHMS = Object.freeze({
+  aes256gcm: { name: "aes256gcm", keyBytes: 32, ivLength: 12, node: "aes-256-gcm", web: "AES-GCM" },
+  aes192gcm: { name: "aes192gcm", keyBytes: 24, ivLength: 12, node: "aes-192-gcm", web: "AES-GCM" },
+  aes128gcm: { name: "aes128gcm", keyBytes: 16, ivLength: 12, node: "aes-128-gcm", web: "AES-GCM" }
+});
+var PASSWORD_HASHING = Object.freeze({
+  pbkdf2: { saltLength: 16, iterations: 32e4, keyLength: 64 }
+});
+
+// src/helpers/validate.ts
+function $isStr(x, min = 1) {
+  return x !== null && x !== void 0 && typeof x === "string" && x.trim().length >= min;
 }
-function $isObj(value) {
-  return typeof value === "object" && value !== null && value !== void 0 && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+function $isObj(x) {
+  if (typeof x !== "object" || x === null || x === void 0) return false;
+  const proto = Object.getPrototypeOf(x);
+  return proto === Object.prototype || proto === null;
+}
+function $isLooseObj(x) {
+  return typeof x === "object" && x !== null && x !== void 0;
+}
+var expectedKeys = /* @__PURE__ */ new Set(["platform", "digest", "algo", "key"]);
+var expectedAlgoKeys = /* @__PURE__ */ new Set(["name", "keyBytes", "ivLength", "node", "web"]);
+function isSecretKey(x, platform) {
+  if (!$isLooseObj(x) || platform !== "node" && platform !== "web" || x.platform !== platform) return false;
+  const keys = Object.keys(x);
+  if (keys.length !== expectedKeys.size) return false;
+  for (const key of keys) if (!expectedKeys.has(key)) return false;
+  for (const key of expectedKeys) if (!Object.hasOwn(x, key)) return false;
+  if (typeof x.digest !== "string" || !(x.digest in DIGEST_ALGORITHMS)) return false;
+  if (!$isLooseObj(x.algo) || typeof x.algo.name !== "string" || !(x.algo.name in ENCRYPTION_ALGORITHMS)) return false;
+  const algoKeys = Object.keys(x.algo);
+  if (algoKeys.length !== expectedAlgoKeys.size) return false;
+  for (const key of algoKeys) if (!expectedAlgoKeys.has(key)) return false;
+  for (const key of expectedAlgoKeys) if (!Object.hasOwn(x.algo, key)) return false;
+  const algo = ENCRYPTION_ALGORITHMS[x.algo.name];
+  if (x.algo.keyBytes !== algo.keyBytes || x.algo.ivLength !== algo.ivLength || x.algo.node !== algo.node || x.algo.web !== algo.web) {
+    return false;
+  }
+  if (!$isLooseObj(x.key) || x.key.type !== "secret") return false;
+  if (platform === "node") {
+    if (!(x.key instanceof nodeCrypto.KeyObject) || typeof x.key.symmetricKeySize === "number" && x.key.symmetricKeySize !== algo.keyBytes) {
+      return false;
+    }
+    return true;
+  }
+  if (!$isLooseObj(x.key.algorithm) || x.key.algorithm.name !== algo.web || typeof x.key.algorithm.length === "number" && x.key.algorithm.length !== algo.keyBytes * 8 || typeof x.key.extractable !== "boolean" || !Array.isArray(x.key.usages) || x.key.usages.length !== 2 || !(x.key.usages.includes("encrypt") && x.key.usages.includes("decrypt"))) {
+    return false;
+  }
+  return true;
 }
 var ENCRYPTED_REGEX = Object.freeze({
   general: /^(?:[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+(?:\.[A-Za-z0-9_-]+)?\.)$/,
@@ -21,12 +74,6 @@ function matchPattern(data, format) {
   if (!(format in ENCRYPTED_REGEX)) throw new Error(`Unknown format: ${format}`);
   return ENCRYPTED_REGEX[format].test(data);
 }
-function isNodeSecretKey(key) {
-  return key instanceof nodeCrypto.KeyObject;
-}
-function isWebSecretKey(key) {
-  return key !== null && key !== void 0 && typeof key === "object" && "type" in key && typeof key.type === "string" && "algorithm" in key && typeof key.algorithm === "object" && "extractable" in key && typeof key.extractable === "boolean" && "usages" in key && Array.isArray(key.usages) && key.usages.every((usage) => typeof usage === "string");
-}
 
 // src/helpers/error.ts
 function $ok(result) {
@@ -87,22 +134,6 @@ function parseToObj(str) {
   return result;
 }
 
-// src/helpers/consts.ts
-var ENCODING_FORMATS = Object.freeze(["base64", "base64url", "hex", "utf8", "latin1"]);
-var DIGEST_ALGORITHMS = Object.freeze({
-  sha256: { node: "sha256", web: "SHA-256" },
-  sha384: { node: "sha384", web: "SHA-384" },
-  sha512: { node: "sha512", web: "SHA-512" }
-});
-var ENCRYPTION_ALGORITHMS = Object.freeze({
-  aes256gcm: { keyBytes: 32, ivLength: 12, node: "aes-256-gcm", web: "AES-GCM" },
-  aes192gcm: { keyBytes: 24, ivLength: 12, node: "aes-192-gcm", web: "AES-GCM" },
-  aes128gcm: { keyBytes: 16, ivLength: 12, node: "aes-128-gcm", web: "AES-GCM" }
-});
-var PASSWORD_HASHING = Object.freeze({
-  pbkdf2: { saltLength: 16, iterations: 32e4, keyLength: 64 }
-});
-
-export { $err, $fmtError, $fmtResultErr, $isStr, $ok, $parseToObj, $stringifyObj, DIGEST_ALGORITHMS, ENCODING_FORMATS, ENCRYPTED_REGEX, ENCRYPTION_ALGORITHMS, PASSWORD_HASHING, __export, isNodeSecretKey, isWebSecretKey, matchPattern, parseToObj, stringifyObj, tryParseToObj, tryStringifyObj };
-//# sourceMappingURL=chunk-J5YHHXDC.js.map
-//# sourceMappingURL=chunk-J5YHHXDC.js.map
+export { $err, $fmtError, $fmtResultErr, $isStr, $ok, $parseToObj, $stringifyObj, DIGEST_ALGORITHMS, ENCODING_FORMATS, ENCRYPTED_REGEX, ENCRYPTION_ALGORITHMS, PASSWORD_HASHING, __export, isSecretKey, matchPattern, parseToObj, stringifyObj, tryParseToObj, tryStringifyObj };
+//# sourceMappingURL=chunk-6HNTSQAP.js.map
+//# sourceMappingURL=chunk-6HNTSQAP.js.map

package/dist/chunk-6HNTSQAP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/helpers/consts.ts","../src/helpers/validate.ts","../src/helpers/error.ts","../src/helpers/object.ts"],"names":[],"mappings":";;;;;;;;;AAAO,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO,CAAC,UAAU,WAAA,EAAa,KAAA,EAAO,MAAA,EAAQ,QAAQ,CAAU;AAEhG,IAAM,iBAAA,GAAoB,OAAO,MAAA,CAAO;AAAA,EAC7C,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,SAAA,EAAU;AAAA,EACzC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,SAAA,EAAU;AAAA,EACzC,MAAA,EAAQ,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,SAAA;AACjC,CAAU;AAEH,IAAM,qBAAA,GAAwB,OAAO,MAAA,CAAO;AAAA,EACjD,SAAA,EAAW,EAAE,IAAA,EAAM,WAAA,EAAa,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,IAAA,EAAM,aAAA,EAAe,GAAA,EAAK,SAAA,EAAU;AAAA,EAChG,SAAA,EAAW,EAAE,IAAA,EAAM,WAAA,EAAa,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,IAAA,EAAM,aAAA,EAAe,GAAA,EAAK,SAAA,EAAU;AAAA,EAChG,SAAA,EAAW,EAAE,IAAA,EAAM,WAAA,EAAa,QAAA,EAAU,EAAA,EAAI,QAAA,EAAU,EAAA,EAAI,IAAA,EAAM,aAAA,EAAe,GAAA,EAAK,SAAA;AACxF,CAAU;AAEH,IAAM,gBAAA,GAAmB,OAAO,MAAA,CAAO;AAAA,EAC5C,QAAQ,EAAE,UAAA,EAAY,IAAI,UAAA,EAAY,IAAA,EAAS,WAAW,EAAA;AAC5D,CAAU;;;ACZH,SAAS,MAAA,CAAO,CAAA,EAAY,GAAA,GAAM,CAAA,EAAgB;AACvD,EAAA,OAAO,CAAA,KAAM,IAAA,IAAQ,CAAA,KAAM,MAAA,IAAa,OAAO,MAAM,QAAA,IAAY,CAAA,CAAE,IAAA,EAAK,CAAE,MAAA,IAAU,GAAA;AACtF;AAEO,SAAS,OAAO,CAAA,EAA0C;AAC/D,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,MAAM,IAAA,IAAQ,CAAA,KAAM,QAAW,OAAO,KAAA;AACnE,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,CAAC,CAAA;AACrC,EAAA,OAAO,KAAA,KAAU,MAAA,CAAO,SAAA,IAAa,KAAA,KAAU,IAAA;AACjD;AAEO,SAAS,YAAY,CAAA,EAA0C;AACpE,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAA,KAAM,MAAA;AACtD;AAEA,IAAM,YAAA,uBAAmB,GAAA,CAAI,CAAC,YAAY,QAAA,EAAU,MAAA,EAAQ,KAAK,CAAC,CAAA;AAClE,IAAM,gBAAA,uBAAuB,GAAA,CAAI,CAAC,QAAQ,UAAA,EAAY,UAAA,EAAY,MAAA,EAAQ,KAAK,CAAC,CAAA;AAEzE,SAAS,WAAA,CAA6C,GAAY,QAAA,EAA8C;AACrH,EAAA,IAAI,CAAC,WAAA,CAAY,CAAC,CAAA,IAAM,QAAA,KAAa,MAAA,IAAU,QAAA,KAAa,KAAA,IAAU,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAO,KAAA;AAEtG,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AAC1B,EAAA,IAAI,IAAA,CAAK,MAAA,KAAW,YAAA,CAAa,IAAA,EAAM,OAAO,KAAA;AAC9C,EAAA,KAAA,MAAW,GAAA,IAAO,MAAM,IAAI,CAAC,aAAa,GAAA,CAAI,GAAG,GAAG,OAAO,KAAA;AAC3D,EAAA,KAAA,MAAW,GAAA,IAAO,cAAc,IAAI,CAAC,OAAO,MAAA,CAAO,CAAA,EAAG,GAAG,CAAA,EAAG,OAAO,KAAA;AAEnE,EAAA,IAAI,OAAO,EAAE,MAAA,KAAW,QAAA,IAAY,EAAE,CAAA,CAAE,MAAA,IAAU,oBAAoB,OAAO,KAAA;AAC7E,EAAA,IAAI,CAAC,WAAA,CAAY,CAAA,CAAE,IAAI,KAAK,OAAO,CAAA,CAAE,IAAA,CAAK,IAAA,KAAS,YAAY,EAAE,CAAA,CAAE,IAAA,CAAK,IAAA,IAAQ,wBAAwB,OAAO,KAAA;AAE/G,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,IAAI,CAAA;AACnC,EAAA,IAAI,QAAA,CAAS,MAAA,KAAW,gBAAA,CAAiB,IAAA,EAAM,OAAO,KAAA;AACtD,EAAA,KAAA,MAAW,GAAA,IAAO,UAAU,IAAI,CAAC,iBAAiB,GAAA,CAAI,GAAG,GAAG,OAAO,KAAA;AACnE,EAAA,KAAA,MAAW,GAAA,IAAO,gBAAA,EAAkB,IAAI,CAAC,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,EAAM,GAAG,CAAA,EAAG,OAAO,KAAA;AAE5E,EAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,CAAA,CAAE,IAAA,CAAK,IAA0C,CAAA;AACpF,EAAA,IACE,EAAE,IAAA,CAAK,QAAA,KAAa,KAAK,QAAA,IACzB,CAAA,CAAE,KAAK,QAAA,KAAa,IAAA,CAAK,YACzB,CAAA,CAAE,IAAA,CAAK,SAAS,IAAA,CAAK,IAAA,IACrB,EAAE,IAAA,CAAK,GAAA,KAAQ,KAAK,GAAA,EACpB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,YAAY,CAAA,CAAE,GAAG,KAAK,CAAA,CAAE,GAAA,CAAI,IAAA,KAAS,QAAA,EAAU,OAAO,KAAA;AAE3D,EAAA,IAAI,aAAa,MAAA,EAAQ;AACvB,IAAA,IACE,EAAE,CAAA,CAAE,GAAA,YAAe,UAAA,CAAW,cAC7B,OAAO,CAAA,CAAE,GAAA,CAAI,gBAAA,KAAqB,QAAA,IAAY,CAAA,CAAE,GAAA,CAAI,gBAAA,KAAqB,KAAK,QAAA,EAC/E;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IACE,CAAC,WAAA,CAAY,CAAA,CAAE,GAAA,CAAI,SAAS,KAC5B,CAAA,CAAE,GAAA,CAAI,SAAA,CAAU,IAAA,KAAS,IAAA,CAAK,GAAA,IAC7B,OAAO,CAAA,CAAE,GAAA,CAAI,SAAA,CAAU,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,GAAA,CAAI,SAAA,CAAU,MAAA,KAAW,IAAA,CAAK,QAAA,GAAW,CAAA,IAC1F,OAAO,CAAA,CAAE,IAAI,WAAA,KAAgB,SAAA,IAC7B,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,IAAI,MAAM,CAAA,IAC3B,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,MAAA,KAAW,KACxB,EAAE,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,IAAK,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,CAAA,EACrE;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAGO,IAAM,eAAA,GAAkB,OAAO,MAAA,CAAO;AAAA,EAC3C,OAAA,EAAS,6DAAA;AAAA,EACT,IAAA,EAAM,0DAAA;AAAA,EACN,GAAA,EAAK;AACP,CAAC;AAGM,SAAS,YAAA,CAAa,MAAc,MAAA,EAA6C;AACtF,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,KAAA;AACrC,EAAA,IAAI,EAAE,UAAU,eAAA,CAAA,EAAkB,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,MAAM,CAAA,CAAE,CAAA;AAC7E,EAAA,OAAO,eAAA,CAAgB,MAAM,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AAC1C;;;ACtEO,SAAS,IAAO,MAAA,EAAuB;AAC5C,EAAA,IAAI,MAAA,CAAO,MAAM,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,GAAI,MAAA,EAAsB;AACtE,EAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAO;AACjC;AAIO,SAAS,KAAK,GAAA,EAA0E;AAC7F,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO;AAAA,MACL,OAAA,EAAS,KAAA,IAAS,GAAA,GAAM,GAAA,CAAI,MAAM,GAAA,CAAI,OAAA;AAAA,MACtC,WAAA,EAAa,MAAA,IAAU,GAAA,GAAM,GAAA,CAAI,OAAO,GAAA,CAAI;AAAA;AAC9C,GACF;AACF;AAEO,SAAS,UAAU,KAAA,EAAwB;AAChD,EAAA,IAAI,KAAA,YAAiB,KAAA,EAAO,OAAO,KAAA,CAAM,OAAA;AACzC,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,OAAO,OAAO,KAAK,CAAA;AACrB;AAEO,SAAS,cAAc,GAAA,EAAwB;AACpD,EAAA,OAAO,CAAA,EAAG,GAAA,CAAI,OAAO,CAAA,GAAA,EAAM,IAAI,WAAW,CAAA,CAAA;AAC5C;;;ACrCO,SAAS,cAA0D,GAAA,EAAwB;AAChG,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,MAAA,CAAO,GAAG,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,GAAA,EAAK,gBAAA,EAAkB,IAAA,EAAM,6BAAA,EAA+B,CAAA;AAC5F,IAAA,OAAO,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA;AAAA,EAChC,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,IAAA,CAAK,EAAE,GAAA,EAAK,0BAAA,EAA4B,MAAM,SAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EACzE;AACF;AASO,SAAS,aAAyD,GAAA,EAAgB;AACvF,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAI,cAAc,GAAG,CAAA;AAC3C,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAM,aAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT;AAQO,SAAS,gBAA4D,GAAA,EAAwB;AAClG,EAAA,OAAO,cAAc,GAAG,CAAA;AAC1B;AAEO,SAAS,YAAwD,GAAA,EAAoC;AAC1G,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,MAAA,CAAO,GAAG,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,GAAA,EAAK,wBAAA,EAA0B,IAAA,EAAM,6BAAA,EAA+B,CAAA;AACpG,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAE1B,IAAA,IAAI,CAAC,MAAA,CAAO,GAAG,CAAA,EAAG,OAAO,IAAA,CAAK,EAAE,GAAA,EAAK,gCAAA,EAAkC,IAAA,EAAM,mCAAA,EAAqC,CAAA;AAClH,IAAA,OAAO,GAAA,CAAI,EAAE,MAAA,EAAQ,GAAA,EAAU,CAAA;AAAA,EACjC,SAAS,KAAA,EAAO;AACd,IAAA,OAAO,IAAA,CAAK,EAAE,GAAA,EAAK,yBAAA,EAA2B,MAAM,SAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EACxE;AACF;AAQO,SAAS,cAA0D,GAAA,EAAoC;AAC5G,EAAA,OAAO,YAAe,GAAG,CAAA;AAC3B;AASO,SAAS,WAAuD,GAAA,EAAgB;AACrF,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAM,GAAI,YAAe,GAAG,CAAA;AAC5C,EAAA,IAAI,OAAO,MAAM,IAAI,KAAA,CAAM,aAAA,CAAc,KAAK,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA;AACT","file":"chunk-6HNTSQAP.js","sourcesContent":["export const ENCODING_FORMATS = Object.freeze(['base64', 'base64url', 'hex', 'utf8', 'latin1'] as const);\r\n\r\nexport const DIGEST_ALGORITHMS = Object.freeze({\r\n  sha256: { node: 'sha256', web: 'SHA-256' },\r\n  sha384: { node: 'sha384', web: 'SHA-384' },\r\n  sha512: { node: 'sha512', web: 'SHA-512' },\r\n} as const);\r\n\r\nexport const ENCRYPTION_ALGORITHMS = Object.freeze({\r\n  aes256gcm: { name: 'aes256gcm', keyBytes: 32, ivLength: 12, node: 'aes-256-gcm', web: 'AES-GCM' },\r\n  aes192gcm: { name: 'aes192gcm', keyBytes: 24, ivLength: 12, node: 'aes-192-gcm', web: 'AES-GCM' },\r\n  aes128gcm: { name: 'aes128gcm', keyBytes: 16, ivLength: 12, node: 'aes-128-gcm', web: 'AES-GCM' },\r\n} as const);\r\n\r\nexport const PASSWORD_HASHING = Object.freeze({\r\n  pbkdf2: { saltLength: 16, iterations: 320_000, keyLength: 64 },\r\n} as const);\r\n","import nodeCrypto from 'node:crypto';\r\nimport type { SecretKey } from '~/helpers/types';\r\nimport { DIGEST_ALGORITHMS, ENCRYPTION_ALGORITHMS } from './consts';\r\n\r\nexport function $isStr(x: unknown, min = 1): x is string {\r\n  return x !== null && x !== undefined && typeof x === 'string' && x.trim().length >= min;\r\n}\r\n\r\nexport function $isObj(x: unknown): x is Record<string, unknown> {\r\n  if (typeof x !== 'object' || x === null || x === undefined) return false;\r\n  const proto = Object.getPrototypeOf(x);\r\n  return proto === Object.prototype || proto === null;\r\n}\r\n\r\nexport function $isLooseObj(x: unknown): x is Record<string, unknown> {\r\n  return typeof x === 'object' && x !== null && x !== undefined;\r\n}\r\n\r\nconst expectedKeys = new Set(['platform', 'digest', 'algo', 'key']);\r\nconst expectedAlgoKeys = new Set(['name', 'keyBytes', 'ivLength', 'node', 'web']);\r\n\r\nexport function isSecretKey<Platform extends 'node' | 'web'>(x: unknown, platform: Platform): x is SecretKey<Platform> {\r\n  if (!$isLooseObj(x) || (platform !== 'node' && platform !== 'web') || x.platform !== platform) return false;\r\n\r\n  const keys = Object.keys(x);\r\n  if (keys.length !== expectedKeys.size) return false;\r\n  for (const key of keys) if (!expectedKeys.has(key)) return false;\r\n  for (const key of expectedKeys) if (!Object.hasOwn(x, key)) return false;\r\n\r\n  if (typeof x.digest !== 'string' || !(x.digest in DIGEST_ALGORITHMS)) return false;\r\n  if (!$isLooseObj(x.algo) || typeof x.algo.name !== 'string' || !(x.algo.name in ENCRYPTION_ALGORITHMS)) return false;\r\n\r\n  const algoKeys = Object.keys(x.algo);\r\n  if (algoKeys.length !== expectedAlgoKeys.size) return false;\r\n  for (const key of algoKeys) if (!expectedAlgoKeys.has(key)) return false;\r\n  for (const key of expectedAlgoKeys) if (!Object.hasOwn(x.algo, key)) return false;\r\n\r\n  const algo = ENCRYPTION_ALGORITHMS[x.algo.name as keyof typeof ENCRYPTION_ALGORITHMS];\r\n  if (\r\n    x.algo.keyBytes !== algo.keyBytes ||\r\n    x.algo.ivLength !== algo.ivLength ||\r\n    x.algo.node !== algo.node ||\r\n    x.algo.web !== algo.web\r\n  ) {\r\n    return false;\r\n  }\r\n\r\n  if (!$isLooseObj(x.key) || x.key.type !== 'secret') return false;\r\n\r\n  if (platform === 'node') {\r\n    if (\r\n      !(x.key instanceof nodeCrypto.KeyObject) ||\r\n      (typeof x.key.symmetricKeySize === 'number' && x.key.symmetricKeySize !== algo.keyBytes)\r\n    ) {\r\n      return false;\r\n    }\r\n    return true;\r\n  }\r\n\r\n  if (\r\n    !$isLooseObj(x.key.algorithm) ||\r\n    x.key.algorithm.name !== algo.web ||\r\n    (typeof x.key.algorithm.length === 'number' && x.key.algorithm.length !== algo.keyBytes * 8) ||\r\n    typeof x.key.extractable !== 'boolean' ||\r\n    !Array.isArray(x.key.usages) ||\r\n    x.key.usages.length !== 2 ||\r\n    !(x.key.usages.includes('encrypt') && x.key.usages.includes('decrypt'))\r\n  ) {\r\n    return false;\r\n  }\r\n  return true;\r\n}\r\n\r\n/** Regular expressions for encrypted data patterns */\r\nexport const ENCRYPTED_REGEX = Object.freeze({\r\n  general: /^(?:[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+(?:\\.[A-Za-z0-9_-]+)?\\.)$/,\r\n  node: /^([A-Za-z0-9_-]+)\\.([A-Za-z0-9_-]+)\\.([A-Za-z0-9_-]+)\\.$/,\r\n  web: /^([A-Za-z0-9_-]+)\\.([A-Za-z0-9_-]+)\\.$/,\r\n});\r\n\r\n/** Checks if the input string matches the specified encrypted data pattern. */\r\nexport function matchPattern(data: string, format: 'general' | 'node' | 'web'): boolean {\r\n  if (typeof data !== 'string') return false;\r\n  if (!(format in ENCRYPTED_REGEX)) throw new Error(`Unknown format: ${format}`);\r\n  return ENCRYPTED_REGEX[format].test(data);\r\n}\r\n","import { $isObj } from './validate';\r\n\r\nexport interface ResultErr {\r\n  readonly message: string;\r\n  readonly description: string;\r\n}\r\n\r\nexport type Result<T, E = ResultErr> = T extends object\r\n  ?\r\n      | ({ readonly [K in keyof T]: T[K] } & { readonly success: true; readonly error?: undefined })\r\n      | ({ readonly [K in keyof T]?: undefined } & { readonly success: false; readonly error: E })\r\n  :\r\n      | { readonly success: true; readonly result: T; readonly error?: undefined }\r\n      | { readonly success: false; readonly error: E; readonly result?: undefined };\r\n\r\nexport function $ok<T>(result?: T): Result<T> {\r\n  if ($isObj(result)) return { success: true, ...(result as T & object) } as Result<T>;\r\n  return { success: true, result } as Result<T>;\r\n}\r\n\r\nexport function $err(err: { msg: string; desc: string }): Result<never, ResultErr>;\r\nexport function $err(err: ResultErr): Result<never, ResultErr>;\r\nexport function $err(err: { msg: string; desc: string } | ResultErr): Result<never, ResultErr> {\r\n  return {\r\n    success: false,\r\n    error: {\r\n      message: 'msg' in err ? err.msg : err.message,\r\n      description: 'desc' in err ? err.desc : err.description,\r\n    },\r\n  } as Result<never, ResultErr>;\r\n}\r\n\r\nexport function $fmtError(error: unknown): string {\r\n  if (error instanceof Error) return error.message;\r\n  if (typeof error === 'string') return error;\r\n  return String(error);\r\n}\r\n\r\nexport function $fmtResultErr(err: ResultErr): string {\r\n  return `${err.message} - ${err.description}`;\r\n}\r\n","import { $err, $fmtError, $fmtResultErr, $ok, type Result } from './error';\r\nimport { $isObj, $isStr } from './validate';\r\n\r\nexport function $stringifyObj<T extends object = Record<string, unknown>>(obj: T): Result<string> {\r\n  try {\r\n    if (!$isObj(obj)) return $err({ msg: 'Invalid object', desc: 'Input is not a plain object' });\r\n    return $ok(JSON.stringify(obj));\r\n  } catch (error) {\r\n    return $err({ msg: 'Utility: Stringify error', desc: $fmtError(error) });\r\n  }\r\n}\r\n\r\n/**\r\n * Stringify an object.\r\n *\r\n * @param obj - The object to stringify.\r\n * @returns An JSON string.\r\n * @throws {Error} If the object cannot be stringified.\r\n */\r\nexport function stringifyObj<T extends object = Record<string, unknown>>(obj: T): string {\r\n  const { result, error } = $stringifyObj(obj);\r\n  if (error) throw new Error($fmtResultErr(error));\r\n  return result;\r\n}\r\n\r\n/**\r\n * Stringify an object.\r\n *\r\n * @param obj - The object to stringify.\r\n * @returns A Result containing the JSON string or an error.\r\n */\r\nexport function tryStringifyObj<T extends object = Record<string, unknown>>(obj: T): Result<string> {\r\n  return $stringifyObj(obj);\r\n}\r\n\r\nexport function $parseToObj<T extends object = Record<string, unknown>>(str: string): Result<{ result: T }> {\r\n  try {\r\n    if (!$isStr(str)) return $err({ msg: 'Utility: Invalid input', desc: 'Input is not a valid string' });\r\n    const obj = JSON.parse(str);\r\n\r\n    if (!$isObj(obj)) return $err({ msg: 'Utility: Invalid object format', desc: 'Parsed data is not a plain object' });\r\n    return $ok({ result: obj as T });\r\n  } catch (error) {\r\n    return $err({ msg: 'Utility: Invalid format', desc: $fmtError(error) });\r\n  }\r\n}\r\n\r\n/**\r\n * Parse a string to an object.\r\n *\r\n * @param str - The JSON string to parse.\r\n * @returns A Result containing the parsed object or an error.\r\n */\r\nexport function tryParseToObj<T extends object = Record<string, unknown>>(str: string): Result<{ result: T }> {\r\n  return $parseToObj<T>(str);\r\n}\r\n\r\n/**\r\n * Parse a string to an object.\r\n *\r\n * @param str - The JSON string to parse.\r\n * @returns A parsed object.\r\n * @throws {Error} If the string cannot be parsed or is not a valid object.\r\n */\r\nexport function parseToObj<T extends object = Record<string, unknown>>(str: string): T {\r\n  const { result, error } = $parseToObj<T>(str);\r\n  if (error) throw new Error($fmtResultErr(error));\r\n  return result;\r\n}\r\n"]}

package/dist/{chunk-IYMK2O3K.cjs → chunk-DZLEO2JD.cjs}

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkD656BYPA_cjs = require('./chunk-D656BYPA.cjs');
+var chunkZIVTPFKN_cjs = require('./chunk-ZIVTPFKN.cjs');
 
 // src/web/kit.ts
 var kit_exports = {};
-chunkD656BYPA_cjs.__export(kit_exports, {
+chunkZIVTPFKN_cjs.__export(kit_exports, {
   convertBytesToStr: () => convertBytesToStr,
   convertFormat: () => convertFormat,
   convertStrToBytes: () => convertStrToBytes,
@@ -16,7 +16,6 @@ chunkD656BYPA_cjs.__export(kit_exports, {
   generateUuid: () => generateUuid,
   hash: () => hash,
   hashPassword: () => hashPassword,
-  isWebSecretKey: () => chunkD656BYPA_cjs.isWebSecretKey,
   tryConvertBytesToStr: () => tryConvertBytesToStr,
   tryConvertFormat: () => tryConvertFormat,
   tryConvertStrToBytes: () => tryConvertStrToBytes,
@@ -35,34 +34,34 @@ chunkD656BYPA_cjs.__export(kit_exports, {
 var textEncoder = new TextEncoder();
 var textDecoder = new TextDecoder();
 function $convertStrToBytes(data, format = "utf8") {
-  if (!chunkD656BYPA_cjs.$isStr(data)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.$isStr(data)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - String to Bytes: Empty data",
       desc: "Data must be a non-empty string"
     });
   }
-  if (!chunkD656BYPA_cjs.ENCODING_FORMATS.includes(format)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(format)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: `Crypto Web API - String to Bytes: Unsupported encode format: ${format}`,
       desc: "Use base64, base64url, hex, utf8, or latin1"
     });
   }
   try {
     const bytes = strToBytes[format](data);
-    return chunkD656BYPA_cjs.$ok({ result: bytes });
+    return chunkZIVTPFKN_cjs.$ok({ result: bytes });
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - String to Bytes: Failed to convert data", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - String to Bytes: Failed to convert data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
 function $convertBytesToStr(data, format = "utf8") {
   if (!(data instanceof ArrayBuffer || data instanceof Uint8Array)) {
-    return chunkD656BYPA_cjs.$err({
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Bytes to String: Invalid data type",
       desc: "Data must be an ArrayBuffer or Uint8Array"
     });
   }
-  if (!chunkD656BYPA_cjs.ENCODING_FORMATS.includes(format)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(format)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: `Crypto Web API - Bytes to String: Unsupported format: ${format}`,
       desc: "Use base64, base64url, hex, utf8, or latin1"
     });
@@ -70,29 +69,29 @@ function $convertBytesToStr(data, format = "utf8") {
   try {
     const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);
     const str = bytesToStr[format](bytes);
-    return chunkD656BYPA_cjs.$ok(str);
+    return chunkZIVTPFKN_cjs.$ok(str);
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Bytes to String: Failed to convert data", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Bytes to String: Failed to convert data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
 function $convertFormat(data, from, to) {
-  if (!chunkD656BYPA_cjs.$isStr(data)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.$isStr(data)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Convert Format: Empty data",
       desc: "Data must be a non-empty string"
     });
   }
-  if (!chunkD656BYPA_cjs.ENCODING_FORMATS.includes(from) || !chunkD656BYPA_cjs.ENCODING_FORMATS.includes(to)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(from) || !chunkZIVTPFKN_cjs.ENCODING_FORMATS.includes(to)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: `Crypto Web API - Convert Format: Unsupported format: from ${from} to ${to}`,
       desc: "Use base64, base64url, hex, utf8, or latin1"
     });
   }
   const bytes = $convertStrToBytes(data, from);
-  if (bytes.error) return chunkD656BYPA_cjs.$err({ msg: bytes.error.message, desc: bytes.error.description });
+  if (bytes.error) return chunkZIVTPFKN_cjs.$err({ msg: bytes.error.message, desc: bytes.error.description });
   const str = $convertBytesToStr(bytes.result, to);
-  if (str.error) return chunkD656BYPA_cjs.$err({ msg: str.error.message, desc: str.error.description });
-  return chunkD656BYPA_cjs.$ok({ result: str.result });
+  if (str.error) return chunkZIVTPFKN_cjs.$err({ msg: str.error.message, desc: str.error.description });
+  return chunkZIVTPFKN_cjs.$ok({ result: str.result });
 }
 var strToBytes = {
   base64: $fromBase64,
@@ -158,136 +157,175 @@ function $fromHex(data) {
 // src/web/web-encrypt.ts
 function $generateUuid() {
   try {
-    return chunkD656BYPA_cjs.$ok(crypto.randomUUID());
+    return chunkZIVTPFKN_cjs.$ok(crypto.randomUUID());
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - UUID Generation: Failed to generate UUID", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - UUID Generation: Failed to generate UUID", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
-async function $createSecretKey(key) {
-  if (!chunkD656BYPA_cjs.$isStr(key)) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Key Generation: Empty key", desc: "Key must be a non-empty string" });
+async function $createSecretKey(secret, options = {}) {
+  if (!chunkZIVTPFKN_cjs.$isStr(secret)) {
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Key Generation: Empty Secret", desc: "Secret must be a non-empty string" });
   }
+  const algorithm = options.algorithm ?? "aes256gcm";
+  if (!(algorithm in chunkZIVTPFKN_cjs.ENCRYPTION_ALGORITHMS)) {
+    return chunkZIVTPFKN_cjs.$err({
+      msg: `Crypto NodeJS API - Key Generation: Unsupported algorithm: ${algorithm}`,
+      desc: `Supported algorithms are: ${Object.keys(chunkZIVTPFKN_cjs.ENCRYPTION_ALGORITHMS).join(", ")}`
+    });
+  }
+  const digest = options.digest ?? "sha256";
+  if (!(digest in chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS)) {
+    return chunkZIVTPFKN_cjs.$err({
+      msg: `Crypto NodeJS API - Key Generation: Unsupported digest: ${digest}`,
+      desc: `Supported digests are: ${Object.keys(chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS).join(", ")}`
+    });
+  }
+  const salt = options.salt ?? "cipher-kit-salt";
+  if (!chunkZIVTPFKN_cjs.$isStr(salt, 8)) {
+    return chunkZIVTPFKN_cjs.$err({
+      msg: "Crypto NodeJS API - Key Generation: Weak salt",
+      desc: "Salt must be a non-empty string with at least 8 characters"
+    });
+  }
+  const info = options.info ?? "cipher-kit";
+  if (!chunkZIVTPFKN_cjs.$isStr(info)) {
+    return chunkZIVTPFKN_cjs.$err({
+      msg: "Crypto NodeJS API - Key Generation: Invalid info",
+      desc: "Info must be a non-empty string"
+    });
+  }
+  const encryptAlgo = chunkZIVTPFKN_cjs.ENCRYPTION_ALGORITHMS[algorithm];
+  const digestAlgo = chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS[digest];
   try {
-    const secretKey = await crypto.subtle.deriveKey(
+    const ikm = await crypto.subtle.importKey("raw", textEncoder.encode(secret.normalize("NFKC")), "HKDF", false, [
+      "deriveKey"
+    ]);
+    const key = await crypto.subtle.deriveKey(
       {
         name: "HKDF",
-        hash: chunkD656BYPA_cjs.DIGEST_ALGORITHMS.sha256.web,
-        salt: textEncoder.encode("cipher-kit-salt"),
-        info: textEncoder.encode("cipher-kit")
+        hash: digestAlgo.web,
+        salt: textEncoder.encode(salt.normalize("NFKC")),
+        info: textEncoder.encode(info.normalize("NFKC"))
       },
-      await crypto.subtle.importKey("raw", textEncoder.encode(key.normalize("NFKC")), "HKDF", false, ["deriveKey"]),
-      { name: chunkD656BYPA_cjs.ENCRYPTION_ALGORITHMS.aes256gcm.web, length: chunkD656BYPA_cjs.ENCRYPTION_ALGORITHMS.aes256gcm.keyBytes * 8 },
+      ikm,
+      { name: encryptAlgo.web, length: encryptAlgo.keyBytes * 8 },
       true,
       ["encrypt", "decrypt"]
     );
-    return chunkD656BYPA_cjs.$ok({ result: secretKey });
+    const secretKey = Object.freeze({
+      platform: "web",
+      digest,
+      algo: encryptAlgo,
+      key
+    });
+    return chunkZIVTPFKN_cjs.$ok({ result: secretKey });
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Key Generation: Failed to create secret key",
-      desc: chunkD656BYPA_cjs.$fmtError(error)
+      desc: chunkZIVTPFKN_cjs.$fmtError(error)
     });
   }
 }
 async function $encrypt(data, secretKey) {
-  if (!chunkD656BYPA_cjs.$isStr(data)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.$isStr(data)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Encryption: Empty data for encryption",
       desc: "Data must be a non-empty string"
     });
   }
-  if (!chunkD656BYPA_cjs.isWebSecretKey(secretKey)) {
-    return chunkD656BYPA_cjs.$err({
-      msg: "Crypto Web API - Encryption: Invalid encryption key",
-      desc: "Expected a WebApiKey (webcrypto.CryptoKey)"
+  if (!chunkZIVTPFKN_cjs.isSecretKey(secretKey, "web")) {
+    return chunkZIVTPFKN_cjs.$err({
+      msg: "Crypto Web API - Encryption: Invalid Secret Key",
+      desc: "Expected a Web SecretKey"
     });
   }
   const bytes = $convertStrToBytes(data, "utf8");
-  if (bytes.error) return chunkD656BYPA_cjs.$err(bytes.error);
+  if (bytes.error) return chunkZIVTPFKN_cjs.$err(bytes.error);
   try {
-    const iv = crypto.getRandomValues(new Uint8Array(chunkD656BYPA_cjs.ENCRYPTION_ALGORITHMS.aes256gcm.ivLength));
+    const iv = crypto.getRandomValues(new Uint8Array(secretKey.algo.ivLength));
     const cipherWithTag = await crypto.subtle.encrypt(
-      { name: chunkD656BYPA_cjs.ENCRYPTION_ALGORITHMS.aes256gcm.web, iv },
-      secretKey,
+      { name: secretKey.algo.web, iv },
+      secretKey.key,
       bytes.result
     );
     const ivStr = $convertBytesToStr(iv, "base64url");
     const cipherStr = $convertBytesToStr(cipherWithTag, "base64url");
     if (ivStr.error || cipherStr.error) {
-      return chunkD656BYPA_cjs.$err({
+      return chunkZIVTPFKN_cjs.$err({
         msg: "Crypto Web API - Encryption: Failed to convert IV or encrypted data",
         desc: `Conversion error: ${ivStr.error || cipherStr.error}`
       });
     }
-    return chunkD656BYPA_cjs.$ok(`${ivStr.result}.${cipherStr.result}.`);
+    return chunkZIVTPFKN_cjs.$ok(`${ivStr.result}.${cipherStr.result}.`);
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Encryption: Failed to encrypt data", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Encryption: Failed to encrypt data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
 async function $decrypt(encrypted, secretKey) {
-  if (chunkD656BYPA_cjs.matchPattern(encrypted, "web") === false) {
-    return chunkD656BYPA_cjs.$err({
+  if (chunkZIVTPFKN_cjs.matchPattern(encrypted, "web") === false) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Decryption: Invalid encrypted data format",
       desc: 'Encrypted data must be in the format "iv.cipherWithTag."'
     });
   }
   const [iv, encryptedWithTag] = encrypted.split(".", 3);
-  if (!chunkD656BYPA_cjs.$isStr(iv) || !chunkD656BYPA_cjs.$isStr(encryptedWithTag)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.$isStr(iv) || !chunkZIVTPFKN_cjs.$isStr(encryptedWithTag)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Decryption: Invalid encrypted data",
       desc: "Encrypted data must contain valid IV, encrypted and tag components"
     });
   }
-  if (!chunkD656BYPA_cjs.isWebSecretKey(secretKey)) {
-    return chunkD656BYPA_cjs.$err({
-      msg: "Crypto Web API - Decryption: Invalid decryption key",
-      desc: "Expected a WebApiKey (webcrypto.CryptoKey)"
+  if (!chunkZIVTPFKN_cjs.isSecretKey(secretKey, "web")) {
+    return chunkZIVTPFKN_cjs.$err({
+      msg: "Crypto Web API - Decryption: Invalid Secret Key",
+      desc: "Expected a Web SecretKey"
     });
   }
   const ivBytes = $convertStrToBytes(iv, "base64url");
   const cipherWithTagBytes = $convertStrToBytes(encryptedWithTag, "base64url");
   if (ivBytes.error || cipherWithTagBytes.error) {
-    return chunkD656BYPA_cjs.$err({
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Decryption: Failed to convert IV or encrypted data",
       desc: `Conversion error: ${ivBytes.error || cipherWithTagBytes.error}`
     });
   }
   try {
     const decrypted = await crypto.subtle.decrypt(
-      { name: chunkD656BYPA_cjs.ENCRYPTION_ALGORITHMS.aes256gcm.web, iv: ivBytes.result },
-      secretKey,
+      { name: secretKey.algo.web, iv: ivBytes.result },
+      secretKey.key,
       cipherWithTagBytes.result
     );
     return $convertBytesToStr(decrypted, "utf8");
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Decryption: Failed to decrypt data", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Decryption: Failed to decrypt data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
 async function $encryptObj(data, secretKey) {
-  const { result, error } = chunkD656BYPA_cjs.$stringifyObj(data);
-  if (error) return chunkD656BYPA_cjs.$err(error);
+  const { result, error } = chunkZIVTPFKN_cjs.$stringifyObj(data);
+  if (error) return chunkZIVTPFKN_cjs.$err(error);
   return await $encrypt(result, secretKey);
 }
 async function $decryptObj(encrypted, secretKey) {
   const { result, error } = await $decrypt(encrypted, secretKey);
-  if (error) return chunkD656BYPA_cjs.$err(error);
-  return chunkD656BYPA_cjs.$parseToObj(result);
+  if (error) return chunkZIVTPFKN_cjs.$err(error);
+  return chunkZIVTPFKN_cjs.$parseToObj(result);
 }
 async function $hash(data) {
-  if (!chunkD656BYPA_cjs.$isStr(data, 0)) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Hashing: Empty data for hashing", desc: "Data must be a non-empty string" });
+  if (!chunkZIVTPFKN_cjs.$isStr(data, 0)) {
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Hashing: Empty data for hashing", desc: "Data must be a non-empty string" });
   }
   const bytes = $convertStrToBytes(data, "utf8");
-  if (bytes.error) return chunkD656BYPA_cjs.$err(bytes.error);
+  if (bytes.error) return chunkZIVTPFKN_cjs.$err(bytes.error);
   try {
-    const hashed = await crypto.subtle.digest(chunkD656BYPA_cjs.DIGEST_ALGORITHMS.sha256.web, bytes.result);
+    const hashed = await crypto.subtle.digest(chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS.sha256.web, bytes.result);
     return $convertBytesToStr(hashed, "base64url");
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Hashing: Failed to hash data", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Hashing: Failed to hash data", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
 async function $hashPassword(password) {
-  if (!chunkD656BYPA_cjs.$isStr(password)) {
-    return chunkD656BYPA_cjs.$err({
+  if (!chunkZIVTPFKN_cjs.$isStr(password)) {
+    return chunkZIVTPFKN_cjs.$err({
       msg: "Crypto Web API - Password Hashing: Empty password",
       desc: "Password must be a non-empty string"
     });
@@ -302,21 +340,21 @@ async function $hashPassword(password) {
       ["deriveBits"]
     );
     const bits = await crypto.subtle.deriveBits(
-      { name: "PBKDF2", salt, iterations: chunkD656BYPA_cjs.PASSWORD_HASHING.pbkdf2.iterations, hash: chunkD656BYPA_cjs.DIGEST_ALGORITHMS.sha512.web },
+      { name: "PBKDF2", salt, iterations: chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.iterations, hash: chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS.sha512.web },
       baseKey,
-      chunkD656BYPA_cjs.PASSWORD_HASHING.pbkdf2.keyLength * 8
+      chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.keyLength * 8
     );
     const saltStr = $convertBytesToStr(salt, "base64url");
-    if (saltStr.error) return chunkD656BYPA_cjs.$err(saltStr.error);
+    if (saltStr.error) return chunkZIVTPFKN_cjs.$err(saltStr.error);
     const hashedPasswordStr = $convertBytesToStr(bits, "base64url");
-    if (hashedPasswordStr.error) return chunkD656BYPA_cjs.$err(hashedPasswordStr.error);
-    return chunkD656BYPA_cjs.$ok({ hash: hashedPasswordStr.result, salt: saltStr.result });
+    if (hashedPasswordStr.error) return chunkZIVTPFKN_cjs.$err(hashedPasswordStr.error);
+    return chunkZIVTPFKN_cjs.$ok({ hash: hashedPasswordStr.result, salt: saltStr.result });
   } catch (error) {
-    return chunkD656BYPA_cjs.$err({ msg: "Crypto Web API - Password Hashing: Failed to hash password", desc: chunkD656BYPA_cjs.$fmtError(error) });
+    return chunkZIVTPFKN_cjs.$err({ msg: "Crypto Web API - Password Hashing: Failed to hash password", desc: chunkZIVTPFKN_cjs.$fmtError(error) });
   }
 }
 async function $verifyPassword(password, hashedPassword, salt) {
-  if (!chunkD656BYPA_cjs.$isStr(password) || !chunkD656BYPA_cjs.$isStr(hashedPassword) || !chunkD656BYPA_cjs.$isStr(salt)) return false;
+  if (!chunkZIVTPFKN_cjs.$isStr(password) || !chunkZIVTPFKN_cjs.$isStr(hashedPassword) || !chunkZIVTPFKN_cjs.$isStr(salt)) return false;
   const saltBytes = $convertStrToBytes(salt, "base64url");
   if (saltBytes.error) return false;
   const { result: hashedPasswordBytes, error: hashedPasswordError } = $convertStrToBytes(hashedPassword, "base64url");
@@ -334,11 +372,11 @@ async function $verifyPassword(password, hashedPassword, salt) {
         {
           name: "PBKDF2",
           salt: saltBytes.result,
-          iterations: chunkD656BYPA_cjs.PASSWORD_HASHING.pbkdf2.iterations,
-          hash: chunkD656BYPA_cjs.DIGEST_ALGORITHMS.sha512.web
+          iterations: chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.iterations,
+          hash: chunkZIVTPFKN_cjs.DIGEST_ALGORITHMS.sha512.web
         },
         baseKey,
-        chunkD656BYPA_cjs.PASSWORD_HASHING.pbkdf2.keyLength * 8
+        chunkZIVTPFKN_cjs.PASSWORD_HASHING.pbkdf2.keyLength * 8
       )
     );
     if (bits.length !== hashedPasswordBytes.length) return false;
@@ -358,15 +396,15 @@ function tryGenerateUuid() {
 }
 function generateUuid() {
   const { result, error } = $generateUuid();
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
-async function tryCreateSecretKey(key) {
-  return await $createSecretKey(key);
+async function tryCreateSecretKey(secret, options = {}) {
+  return await $createSecretKey(secret, options);
 }
-async function createSecretKey(key) {
-  const { result, error } = await $createSecretKey(key);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+async function createSecretKey(secret, options = {}) {
+  const { result, error } = await $createSecretKey(secret, options);
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 async function tryEncrypt(data, secretKey) {
@@ -374,7 +412,7 @@ async function tryEncrypt(data, secretKey) {
 }
 async function encrypt(data, secretKey) {
   const { result, error } = await $encrypt(data, secretKey);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 async function tryDecrypt(encrypted, secretKey) {
@@ -382,7 +420,7 @@ async function tryDecrypt(encrypted, secretKey) {
 }
 async function decrypt(encrypted, secretKey) {
   const { result, error } = await $decrypt(encrypted, secretKey);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 async function tryEncryptObj(data, secretKey) {
@@ -390,7 +428,7 @@ async function tryEncryptObj(data, secretKey) {
 }
 async function encryptObj(data, secretKey) {
   const { result, error } = await $encryptObj(data, secretKey);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 async function tryDecryptObj(encrypted, secretKey) {
@@ -398,7 +436,7 @@ async function tryDecryptObj(encrypted, secretKey) {
 }
 async function decryptObj(encrypted, secretKey) {
   const { result, error } = await $decryptObj(encrypted, secretKey);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return { result };
 }
 async function tryHash(data) {
@@ -406,7 +444,7 @@ async function tryHash(data) {
 }
 async function hash(data) {
   const { result, error } = await $hash(data);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 async function tryHashPassword(password) {
@@ -414,7 +452,7 @@ async function tryHashPassword(password) {
 }
 async function hashPassword(password) {
   const { hash: hash2, salt, error } = await $hashPassword(password);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return { hash: hash2, salt };
 }
 async function verifyPassword(password, hashedPassword, salt) {
@@ -425,7 +463,7 @@ function tryConvertStrToBytes(data, format = "utf8") {
 }
 function convertStrToBytes(data, format = "utf8") {
   const { result, error } = $convertStrToBytes(data, format);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 function tryConvertBytesToStr(data, format = "utf8") {
@@ -433,7 +471,7 @@ function tryConvertBytesToStr(data, format = "utf8") {
 }
 function convertBytesToStr(data, format = "utf8") {
   const { result, error } = $convertBytesToStr(data, format);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 function tryConvertFormat(data, from, to) {
@@ -441,7 +479,7 @@ function tryConvertFormat(data, from, to) {
 }
 function convertFormat(data, from, to) {
   const { result, error } = $convertFormat(data, from, to);
-  if (error) throw new Error(chunkD656BYPA_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkZIVTPFKN_cjs.$fmtResultErr(error));
   return result;
 }
 
@@ -469,5 +507,5 @@ exports.tryGenerateUuid = tryGenerateUuid;
 exports.tryHash = tryHash;
 exports.tryHashPassword = tryHashPassword;
 exports.verifyPassword = verifyPassword;
-//# sourceMappingURL=chunk-IYMK2O3K.cjs.map
-//# sourceMappingURL=chunk-IYMK2O3K.cjs.map
+//# sourceMappingURL=chunk-DZLEO2JD.cjs.map
+//# sourceMappingURL=chunk-DZLEO2JD.cjs.map