cipher-kit 2.0.0 → 2.1.0

package/dist/{chunk-N2EW2FDZ.cjs → chunk-HMTHK2IY.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk3UX5MZ2P_cjs = require('./chunk-3UX5MZ2P.cjs');
+var chunkBHG5RSUV_cjs = require('./chunk-BHG5RSUV.cjs');
 var buffer = require('buffer');
 var nodeCrypto = require('crypto');
 
@@ -10,7 +10,7 @@ var nodeCrypto__default = /*#__PURE__*/_interopDefault(nodeCrypto);
 
 // src/node/kit.ts
 var kit_exports = {};
-chunk3UX5MZ2P_cjs.__export(kit_exports, {
+chunkBHG5RSUV_cjs.__export(kit_exports, {
   convertBytesToStr: () => convertBytesToStr,
   convertEncoding: () => convertEncoding,
   convertStrToBytes: () => convertStrToBytes,
@@ -37,103 +37,112 @@ chunk3UX5MZ2P_cjs.__export(kit_exports, {
   verifyPassword: () => verifyPassword
 });
 function $convertStrToBytes(data, inputEncoding = "utf8") {
-  if (!chunk3UX5MZ2P_cjs.$isStr(data)) {
-    return chunk3UX5MZ2P_cjs.$err({
+  if (!chunkBHG5RSUV_cjs.$isStr(data)) {
+    return chunkBHG5RSUV_cjs.$err({
       msg: "Crypto NodeJS API - String to Bytes: Empty data",
       desc: "Data must be a non-empty string"
     });
   }
-  if (!chunk3UX5MZ2P_cjs.ENCODING.includes(inputEncoding)) {
-    return chunk3UX5MZ2P_cjs.$err({
+  if (!chunkBHG5RSUV_cjs.ENCODING.includes(inputEncoding)) {
+    return chunkBHG5RSUV_cjs.$err({
       msg: `Crypto NodeJS API - String to Bytes: Unsupported encoding: ${inputEncoding}`,
       desc: "Use base64, base64url, hex, utf8, or latin1"
     });
   }
   try {
-    return chunk3UX5MZ2P_cjs.$ok({ result: buffer.Buffer.from(data, inputEncoding) });
+    return chunkBHG5RSUV_cjs.$ok({ result: buffer.Buffer.from(data, inputEncoding) });
   } catch (error) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: "Crypto NodeJS API - String to Bytes: Failed to convert data", desc: chunk3UX5MZ2P_cjs.$fmtError(error) });
+    return chunkBHG5RSUV_cjs.$err({ msg: "Crypto NodeJS API - String to Bytes: Failed to convert data", desc: chunkBHG5RSUV_cjs.$fmtError(error) });
   }
 }
 function $convertBytesToStr(data, outputEncoding = "utf8") {
   if (!(data instanceof buffer.Buffer)) {
-    return chunk3UX5MZ2P_cjs.$err({
+    return chunkBHG5RSUV_cjs.$err({
       msg: "Crypto NodeJS API - Bytes to String: Invalid data type",
       desc: "Data must be a Buffer"
     });
   }
-  if (!chunk3UX5MZ2P_cjs.ENCODING.includes(outputEncoding)) {
-    return chunk3UX5MZ2P_cjs.$err({
+  if (!chunkBHG5RSUV_cjs.ENCODING.includes(outputEncoding)) {
+    return chunkBHG5RSUV_cjs.$err({
       msg: `Crypto NodeJS API - Bytes to String: Unsupported encoding: ${outputEncoding}`,
       desc: "Use base64, base64url, hex, utf8, or latin1"
     });
   }
   try {
-    return chunk3UX5MZ2P_cjs.$ok(buffer.Buffer.from(data).toString(outputEncoding));
+    return chunkBHG5RSUV_cjs.$ok(buffer.Buffer.from(data).toString(outputEncoding));
   } catch (error) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: "Crypto NodeJS API - Bytes to String: Failed to convert data", desc: chunk3UX5MZ2P_cjs.$fmtError(error) });
+    return chunkBHG5RSUV_cjs.$err({ msg: "Crypto NodeJS API - Bytes to String: Failed to convert data", desc: chunkBHG5RSUV_cjs.$fmtError(error) });
   }
 }
 function $convertEncoding(data, from, to) {
-  if (!chunk3UX5MZ2P_cjs.$isStr(data)) {
-    return chunk3UX5MZ2P_cjs.$err({
+  if (!chunkBHG5RSUV_cjs.$isStr(data)) {
+    return chunkBHG5RSUV_cjs.$err({
       msg: "Crypto NodeJS API - Convert Format: Empty data",
       desc: "Data must be a non-empty string"
     });
   }
-  if (!chunk3UX5MZ2P_cjs.ENCODING.includes(from) || !chunk3UX5MZ2P_cjs.ENCODING.includes(to)) {
-    return chunk3UX5MZ2P_cjs.$err({
+  if (!chunkBHG5RSUV_cjs.ENCODING.includes(from) || !chunkBHG5RSUV_cjs.ENCODING.includes(to)) {
+    return chunkBHG5RSUV_cjs.$err({
       msg: `Crypto NodeJS API - Convert Format: Unsupported encoding: from ${from} to ${to}`,
       desc: "Use base64, base64url, hex, utf8, or latin1"
     });
   }
   const bytes = $convertStrToBytes(data, from);
-  if (bytes.error) return chunk3UX5MZ2P_cjs.$err({ msg: bytes.error.message, desc: bytes.error.description });
+  if (bytes.error) return chunkBHG5RSUV_cjs.$err({ msg: bytes.error.message, desc: bytes.error.description });
   const str = $convertBytesToStr(bytes.result, to);
-  if (str.error) return chunk3UX5MZ2P_cjs.$err({ msg: str.error.message, desc: str.error.description });
-  return chunk3UX5MZ2P_cjs.$ok({ result: str.result });
+  if (str.error) return chunkBHG5RSUV_cjs.$err({ msg: str.error.message, desc: str.error.description });
+  return chunkBHG5RSUV_cjs.$ok({ result: str.result });
 }
 function $generateUuid() {
   try {
-    return chunk3UX5MZ2P_cjs.$ok(nodeCrypto__default.default.randomUUID());
+    return chunkBHG5RSUV_cjs.$ok(nodeCrypto__default.default.randomUUID());
   } catch (error) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "UUID Generation")}: Failed to generate UUID`, desc: chunk3UX5MZ2P_cjs.$fmtError(error) });
+    return chunkBHG5RSUV_cjs.$err({ msg: `${chunkBHG5RSUV_cjs.title("node", "UUID Generation")}: Failed to generate UUID`, desc: chunkBHG5RSUV_cjs.$fmtError(error) });
   }
 }
-function $createSecretKey(secret, options = {}) {
-  if (!chunk3UX5MZ2P_cjs.$isStr(secret)) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "Key Generation")}: Empty Secret`, desc: "Secret must be a non-empty string" });
+function $createSecretKey(secret, options) {
+  if (!chunkBHG5RSUV_cjs.$isStr(secret, 8)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Empty Secret`,
+      desc: "Secret must be a non-empty string with at least 8 characters"
+    });
+  }
+  if (!chunkBHG5RSUV_cjs.$isPlainObj(options)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Invalid options`,
+      desc: "Options must be an object"
+    });
   }
   const algorithm = options.algorithm ?? "aes256gcm";
-  if (!(algorithm in chunk3UX5MZ2P_cjs.ENCRYPTION_ALGORITHMS)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Key Generation")}: Unsupported algorithm: ${algorithm}`,
-      desc: `Supported algorithms are: ${Object.keys(chunk3UX5MZ2P_cjs.ENCRYPTION_ALGORITHMS).join(", ")}`
+  if (!(algorithm in chunkBHG5RSUV_cjs.ENCRYPTION_ALGORITHMS)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Unsupported algorithm: ${algorithm}`,
+      desc: `Supported algorithms are: ${Object.keys(chunkBHG5RSUV_cjs.ENCRYPTION_ALGORITHMS).join(", ")}`
     });
   }
   const digest = options.digest ?? "sha256";
-  if (!(digest in chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Key Generation")}: Unsupported digest: ${digest}`,
-      desc: `Supported digests are: ${Object.keys(chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS).join(", ")}`
+  if (!(digest in chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Unsupported digest: ${digest}`,
+      desc: `Supported digests are: ${Object.keys(chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS).join(", ")}`
     });
   }
   const salt = options.salt ?? "cipher-kit-salt";
-  if (!chunk3UX5MZ2P_cjs.$isStr(salt, 8)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Key Generation")}: Weak salt`,
+  if (!chunkBHG5RSUV_cjs.$isStr(salt, 8)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Weak salt`,
       desc: "Salt must be a non-empty string with at least 8 characters"
     });
   }
   const info = options.info ?? "cipher-kit";
-  if (!chunk3UX5MZ2P_cjs.$isStr(info)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Key Generation")}: Invalid info`,
+  if (!chunkBHG5RSUV_cjs.$isStr(info)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Invalid info`,
       desc: "Info must be a non-empty string"
     });
   }
-  const encryptAlgo = chunk3UX5MZ2P_cjs.ENCRYPTION_ALGORITHMS[algorithm];
-  const digestAlgo = chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS[digest];
+  const encryptAlgo = chunkBHG5RSUV_cjs.ENCRYPTION_ALGORITHMS[algorithm];
+  const digestAlgo = chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS[digest];
   try {
     const derivedKey = nodeCrypto__default.default.hkdfSync(
       digestAlgo.node,
@@ -149,88 +158,100 @@ function $createSecretKey(secret, options = {}) {
       algorithm,
       key
     });
-    return chunk3UX5MZ2P_cjs.$ok({ result: secretKey });
+    return chunkBHG5RSUV_cjs.$ok({ result: secretKey });
   } catch (error) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "Key Generation")}: Failed to create secret key`, desc: chunk3UX5MZ2P_cjs.$fmtError(error) });
+    return chunkBHG5RSUV_cjs.$err({ msg: `${chunkBHG5RSUV_cjs.title("node", "Key Generation")}: Failed to create secret key`, desc: chunkBHG5RSUV_cjs.$fmtError(error) });
   }
 }
-function $encrypt(data, secretKey, options = {}) {
-  if (!chunk3UX5MZ2P_cjs.$isStr(data)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Encryption")}: Empty data for encryption`,
+function $encrypt(data, secretKey, options) {
+  if (!chunkBHG5RSUV_cjs.$isStr(data)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Encryption")}: Empty data for encryption`,
       desc: "Data must be a non-empty string"
     });
   }
-  const encoding = options.encoding ?? "base64url";
-  if (!chunk3UX5MZ2P_cjs.CIPHER_ENCODING.includes(encoding)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Encryption")}: Unsupported output encoding: ${encoding}`,
+  if (!chunkBHG5RSUV_cjs.$isPlainObj(options)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Encryption")}: Invalid options`,
+      desc: "Options must be an object"
+    });
+  }
+  const outputEncoding = options.outputEncoding ?? "base64url";
+  if (!chunkBHG5RSUV_cjs.CIPHER_ENCODING.includes(outputEncoding)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Encryption")}: Unsupported output encoding: ${outputEncoding}`,
       desc: "Use base64, base64url, or hex"
     });
   }
-  const injectedKey = chunk3UX5MZ2P_cjs.$isSecretKey(secretKey, "node");
+  const injectedKey = chunkBHG5RSUV_cjs.$isSecretKey(secretKey, "node");
   if (!injectedKey) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Encryption")}: Invalid Secret Key`,
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Encryption")}: Invalid Secret Key`,
       desc: "Expected a Node SecretKey"
     });
   }
   const { result, error } = $convertStrToBytes(data, "utf8");
-  if (error) return chunk3UX5MZ2P_cjs.$err(error);
+  if (error) return chunkBHG5RSUV_cjs.$err(error);
   try {
     const iv = nodeCrypto__default.default.randomBytes(injectedKey.injected.ivLength);
     const cipher = nodeCrypto__default.default.createCipheriv(injectedKey.injected.node, injectedKey.key, iv);
     const encrypted = buffer.Buffer.concat([cipher.update(result), cipher.final()]);
     const tag = cipher.getAuthTag();
-    const ivStr = $convertBytesToStr(iv, encoding);
-    const cipherStr = $convertBytesToStr(encrypted, encoding);
-    const tagStr = $convertBytesToStr(tag, encoding);
+    const ivStr = $convertBytesToStr(iv, outputEncoding);
+    const cipherStr = $convertBytesToStr(encrypted, outputEncoding);
+    const tagStr = $convertBytesToStr(tag, outputEncoding);
     if (ivStr.error || cipherStr.error || tagStr.error) {
-      return chunk3UX5MZ2P_cjs.$err({
+      return chunkBHG5RSUV_cjs.$err({
         msg: "Crypto NodeJS API - Encryption: Failed to convert IV or encrypted data or tag",
-        desc: `Conversion error: ${chunk3UX5MZ2P_cjs.$fmtResultErr(ivStr.error || cipherStr.error || tagStr.error)}`
+        desc: `Conversion error: ${chunkBHG5RSUV_cjs.$fmtResultErr(ivStr.error || cipherStr.error || tagStr.error)}`
       });
     }
-    return chunk3UX5MZ2P_cjs.$ok(`${ivStr.result}.${cipherStr.result}.${tagStr.result}.`);
+    return chunkBHG5RSUV_cjs.$ok(`${ivStr.result}.${cipherStr.result}.${tagStr.result}.`);
   } catch (error2) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "Encryption")}: Failed to encrypt data`, desc: chunk3UX5MZ2P_cjs.$fmtError(error2) });
+    return chunkBHG5RSUV_cjs.$err({ msg: `${chunkBHG5RSUV_cjs.title("node", "Encryption")}: Failed to encrypt data`, desc: chunkBHG5RSUV_cjs.$fmtError(error2) });
   }
 }
-function $decrypt(encrypted, secretKey, options = {}) {
-  if (chunk3UX5MZ2P_cjs.matchPattern(encrypted, "node") === false) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Decryption")}: Invalid encrypted data format`,
+function $decrypt(encrypted, secretKey, options) {
+  if (!chunkBHG5RSUV_cjs.matchEncryptedPattern(encrypted, "node")) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Decryption")}: Invalid encrypted data format`,
       desc: 'Encrypted data must be in the format "iv.cipher.tag."'
     });
   }
-  const encoding = options.encoding ?? "base64url";
-  if (!chunk3UX5MZ2P_cjs.CIPHER_ENCODING.includes(encoding)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Decryption")}: Unsupported input encoding: ${encoding}`,
+  if (!chunkBHG5RSUV_cjs.$isPlainObj(options)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Decryption")}: Invalid options`,
+      desc: "Options must be an object"
+    });
+  }
+  const inputEncoding = options.inputEncoding ?? "base64url";
+  if (!chunkBHG5RSUV_cjs.CIPHER_ENCODING.includes(inputEncoding)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Decryption")}: Unsupported input encoding: ${inputEncoding}`,
       desc: "Use base64, base64url, or hex"
     });
   }
   const [iv, cipher, tag] = encrypted.split(".", 4);
-  if (!chunk3UX5MZ2P_cjs.$isStr(iv) || !chunk3UX5MZ2P_cjs.$isStr(cipher) || !chunk3UX5MZ2P_cjs.$isStr(tag)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Decryption")}: Invalid encrypted data`,
+  if (!chunkBHG5RSUV_cjs.$isStr(iv) || !chunkBHG5RSUV_cjs.$isStr(cipher) || !chunkBHG5RSUV_cjs.$isStr(tag)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Decryption")}: Invalid encrypted data`,
       desc: "Encrypted data must contain valid IV, encrypted data, and tag components"
     });
   }
-  const injectedKey = chunk3UX5MZ2P_cjs.$isSecretKey(secretKey, "node");
+  const injectedKey = chunkBHG5RSUV_cjs.$isSecretKey(secretKey, "node");
   if (!injectedKey) {
-    return chunk3UX5MZ2P_cjs.$err({
+    return chunkBHG5RSUV_cjs.$err({
       msg: "Crypto NodeJS API - Decryption: Invalid Secret Key",
       desc: "Expected a Node SecretKey"
     });
   }
-  const ivBytes = $convertStrToBytes(iv, encoding);
-  const cipherBytes = $convertStrToBytes(cipher, encoding);
-  const tagBytes = $convertStrToBytes(tag, encoding);
+  const ivBytes = $convertStrToBytes(iv, inputEncoding);
+  const cipherBytes = $convertStrToBytes(cipher, inputEncoding);
+  const tagBytes = $convertStrToBytes(tag, inputEncoding);
   if (ivBytes.error || cipherBytes.error || tagBytes.error) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Decryption")}: Failed to convert IV or encrypted data or tag`,
-      desc: `Conversion error: ${chunk3UX5MZ2P_cjs.$fmtResultErr(ivBytes.error || cipherBytes.error || tagBytes.error)}`
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Decryption")}: Failed to convert IV or encrypted data or tag`,
+      desc: `Conversion error: ${chunkBHG5RSUV_cjs.$fmtResultErr(ivBytes.error || cipherBytes.error || tagBytes.error)}`
     });
   }
   try {
@@ -239,115 +260,129 @@ function $decrypt(encrypted, secretKey, options = {}) {
     const decrypted = buffer.Buffer.concat([decipher.update(cipherBytes.result), decipher.final()]);
     return $convertBytesToStr(decrypted, "utf8");
   } catch (error) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "Decryption")}: Failed to decrypt data`, desc: chunk3UX5MZ2P_cjs.$fmtError(error) });
+    return chunkBHG5RSUV_cjs.$err({ msg: `${chunkBHG5RSUV_cjs.title("node", "Decryption")}: Failed to decrypt data`, desc: chunkBHG5RSUV_cjs.$fmtError(error) });
   }
 }
-function $encryptObj(data, secretKey, options = {}) {
-  const { result, error } = chunk3UX5MZ2P_cjs.$stringifyObj(data);
-  if (error) return chunk3UX5MZ2P_cjs.$err(error);
+function $encryptObj(data, secretKey, options) {
+  const { result, error } = chunkBHG5RSUV_cjs.$stringifyObj(data);
+  if (error) return chunkBHG5RSUV_cjs.$err(error);
   return $encrypt(result, secretKey, options);
 }
-function $decryptObj(encrypted, secretKey, options = {}) {
+function $decryptObj(encrypted, secretKey, options) {
   const { result, error } = $decrypt(encrypted, secretKey, options);
-  if (error) return chunk3UX5MZ2P_cjs.$err(error);
-  return chunk3UX5MZ2P_cjs.$parseToObj(result);
+  if (error) return chunkBHG5RSUV_cjs.$err(error);
+  return chunkBHG5RSUV_cjs.$parseToObj(result);
 }
 function $hash(data, options = {}) {
-  if (!chunk3UX5MZ2P_cjs.$isStr(data)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Hashing")}: Empty data for hashing`,
+  if (!chunkBHG5RSUV_cjs.$isStr(data)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Hashing")}: Empty data for hashing`,
       desc: "Data must be a non-empty string"
     });
   }
-  const encoding = options.encoding ?? "base64url";
-  if (!chunk3UX5MZ2P_cjs.CIPHER_ENCODING.includes(encoding)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Hashing")}: Unsupported output encoding: ${encoding}`,
+  if (!chunkBHG5RSUV_cjs.$isPlainObj(options)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Hashing")}: Invalid options`,
+      desc: "Options must be an object"
+    });
+  }
+  const outputEncoding = options.outputEncoding ?? "base64url";
+  if (!chunkBHG5RSUV_cjs.CIPHER_ENCODING.includes(outputEncoding)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Hashing")}: Unsupported output encoding: ${outputEncoding}`,
       desc: "Use base64, base64url, or hex"
     });
   }
   const digest = options.digest ?? "sha256";
-  if (!(digest in chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Hashing")}: Unsupported digest: ${digest}`,
-      desc: `Supported digests are: ${Object.keys(chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS).join(", ")}`
+  if (!(digest in chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Hashing")}: Unsupported digest: ${digest}`,
+      desc: `Supported digests are: ${Object.keys(chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS).join(", ")}`
     });
   }
-  const digestAlgo = chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS[digest];
+  const digestAlgo = chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS[digest];
   const { result, error } = $convertStrToBytes(data, "utf8");
-  if (error) return chunk3UX5MZ2P_cjs.$err(error);
+  if (error) return chunkBHG5RSUV_cjs.$err(error);
   try {
     const hashed = nodeCrypto__default.default.createHash(digestAlgo.node).update(result).digest();
-    return $convertBytesToStr(hashed, encoding);
+    return $convertBytesToStr(hashed, outputEncoding);
   } catch (error2) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "Hashing")}: Failed to hash data with Crypto NodeJS`, desc: chunk3UX5MZ2P_cjs.$fmtError(error2) });
+    return chunkBHG5RSUV_cjs.$err({ msg: `${chunkBHG5RSUV_cjs.title("node", "Hashing")}: Failed to hash data with Crypto NodeJS`, desc: chunkBHG5RSUV_cjs.$fmtError(error2) });
   }
 }
-function $hashPassword(password, options = {}) {
-  if (!chunk3UX5MZ2P_cjs.$isStr(password)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Empty password for hashing`,
+function $hashPassword(password, options) {
+  if (!chunkBHG5RSUV_cjs.$isStr(password)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Empty password for hashing`,
       desc: "Password must be a non-empty string"
     });
   }
+  if (!chunkBHG5RSUV_cjs.$isPlainObj(options)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Invalid options`,
+      desc: "Options must be an object"
+    });
+  }
   const digest = options.digest ?? "sha512";
-  if (!(digest in chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Unsupported digest: ${digest}`,
-      desc: `Supported digests are: ${Object.keys(chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS).join(", ")}`
+  if (!(digest in chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Unsupported digest: ${digest}`,
+      desc: `Supported digests are: ${Object.keys(chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS).join(", ")}`
     });
   }
-  const digestAlgo = chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS[digest];
-  const encoding = options.encoding ?? "base64url";
-  if (!chunk3UX5MZ2P_cjs.CIPHER_ENCODING.includes(encoding)) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Unsupported encoding: ${encoding}`,
+  const digestAlgo = chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS[digest];
+  const outputEncoding = options.outputEncoding ?? "base64url";
+  if (!chunkBHG5RSUV_cjs.CIPHER_ENCODING.includes(outputEncoding)) {
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Unsupported encoding: ${outputEncoding}`,
       desc: "Use base64, base64url, or hex"
     });
   }
   const saltLength = options.saltLength ?? 16;
   if (typeof saltLength !== "number" || saltLength < 8) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Weak salt length`,
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Weak salt length`,
       desc: "Salt length must be a number and at least 8 bytes (recommended 16 or more)"
     });
   }
   const iterations = options.iterations ?? 32e4;
   if (typeof iterations !== "number" || iterations < 1e3) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Weak iterations count`,
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Weak iterations count`,
       desc: "Iterations must be a number and at least 1000 (recommended 320,000 or more)"
     });
   }
   const keyLength = options.keyLength ?? 64;
   if (typeof keyLength !== "number" || keyLength < 16) {
-    return chunk3UX5MZ2P_cjs.$err({
-      msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Invalid key length`,
+    return chunkBHG5RSUV_cjs.$err({
+      msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Invalid key length`,
       desc: "Key length must be a number and at least 16 bytes (recommended 64 or more)"
     });
   }
   try {
     const salt = nodeCrypto__default.default.randomBytes(saltLength);
     const hash2 = nodeCrypto__default.default.pbkdf2Sync(password.normalize("NFKC"), salt, iterations, keyLength, digestAlgo.node);
-    return chunk3UX5MZ2P_cjs.$ok({ salt: salt.toString(encoding), hash: hash2.toString(encoding) });
+    return chunkBHG5RSUV_cjs.$ok({ result: hash2.toString(outputEncoding), salt: salt.toString(outputEncoding) });
   } catch (error) {
-    return chunk3UX5MZ2P_cjs.$err({ msg: `${chunk3UX5MZ2P_cjs.title("node", "Password Hashing")}: Failed to hash password`, desc: chunk3UX5MZ2P_cjs.$fmtError(error) });
+    return chunkBHG5RSUV_cjs.$err({ msg: `${chunkBHG5RSUV_cjs.title("node", "Password Hashing")}: Failed to hash password`, desc: chunkBHG5RSUV_cjs.$fmtError(error) });
   }
 }
-function $verifyPassword(password, hashedPassword, salt, options = {}) {
-  if (!chunk3UX5MZ2P_cjs.$isStr(password) || !chunk3UX5MZ2P_cjs.$isStr(hashedPassword) || !chunk3UX5MZ2P_cjs.$isStr(salt)) return false;
+function $verifyPassword(password, hashedPassword, salt, options) {
+  if (!chunkBHG5RSUV_cjs.$isStr(password) || !chunkBHG5RSUV_cjs.$isStr(hashedPassword) || !chunkBHG5RSUV_cjs.$isStr(salt) || !chunkBHG5RSUV_cjs.$isPlainObj(options)) {
+    return false;
+  }
   const digest = options.digest ?? "sha512";
-  if (!(digest in chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS)) return false;
-  const digestAlgo = chunk3UX5MZ2P_cjs.DIGEST_ALGORITHMS[digest];
-  const encoding = options.encoding ?? "base64url";
-  if (!chunk3UX5MZ2P_cjs.CIPHER_ENCODING.includes(encoding)) return false;
+  if (!(digest in chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS)) return false;
+  const digestAlgo = chunkBHG5RSUV_cjs.DIGEST_ALGORITHMS[digest];
+  const inputEncoding = options.inputEncoding ?? "base64url";
+  if (!chunkBHG5RSUV_cjs.CIPHER_ENCODING.includes(inputEncoding)) return false;
   const iterations = options.iterations ?? 32e4;
   if (typeof iterations !== "number" || iterations < 1e3) return false;
   const keyLength = options.keyLength ?? 64;
   if (typeof keyLength !== "number" || keyLength < 16) return false;
-  const saltBytes = $convertStrToBytes(salt, encoding);
+  const saltBytes = $convertStrToBytes(salt, inputEncoding);
   if (saltBytes.error) return false;
-  const hashedPasswordBytes = $convertStrToBytes(hashedPassword, encoding);
+  const hashedPasswordBytes = $convertStrToBytes(hashedPassword, inputEncoding);
   if (hashedPasswordBytes.error) return false;
   try {
     return nodeCrypto__default.default.timingSafeEqual(
@@ -361,14 +396,14 @@ function $verifyPassword(password, hashedPassword, salt, options = {}) {
 
 // src/node/kit.ts
 function isNodeSecretKey(x) {
-  return chunk3UX5MZ2P_cjs.$isSecretKey(x, "node") !== null;
+  return chunkBHG5RSUV_cjs.$isSecretKey(x, "node") !== null;
 }
 function tryGenerateUuid() {
   return $generateUuid();
 }
 function generateUuid() {
   const { result, error } = $generateUuid();
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryCreateSecretKey(secret, options = {}) {
@@ -376,7 +411,7 @@ function tryCreateSecretKey(secret, options = {}) {
 }
 function createSecretKey(secret, options = {}) {
   const { result, error } = $createSecretKey(secret, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryEncrypt(data, secretKey, options = {}) {
@@ -384,7 +419,7 @@ function tryEncrypt(data, secretKey, options = {}) {
 }
 function encrypt(data, secretKey, options = {}) {
   const { result, error } = $encrypt(data, secretKey, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryDecrypt(encrypted, secretKey, options = {}) {
@@ -392,7 +427,7 @@ function tryDecrypt(encrypted, secretKey, options = {}) {
 }
 function decrypt(encrypted, secretKey, options = {}) {
   const { result, error } = $decrypt(encrypted, secretKey, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryEncryptObj(data, secretKey, options = {}) {
@@ -400,7 +435,7 @@ function tryEncryptObj(data, secretKey, options = {}) {
 }
 function encryptObj(data, secretKey, options = {}) {
   const { result, error } = $encryptObj(data, secretKey, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryDecryptObj(encrypted, secretKey, options = {}) {
@@ -408,7 +443,7 @@ function tryDecryptObj(encrypted, secretKey, options = {}) {
 }
 function decryptObj(encrypted, secretKey, options = {}) {
   const { result, error } = $decryptObj(encrypted, secretKey, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryHash(data, options = {}) {
@@ -416,16 +451,16 @@ function tryHash(data, options = {}) {
 }
 function hash(data, options = {}) {
   const { result, error } = $hash(data, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryHashPassword(password, options = {}) {
   return $hashPassword(password, options);
 }
 function hashPassword(password, options = {}) {
-  const { hash: hash2, salt, error } = $hashPassword(password, options);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
-  return { hash: hash2, salt };
+  const { result, salt, error } = $hashPassword(password, options);
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
+  return { result, salt };
 }
 function verifyPassword(password, hashedPassword, salt, options = {}) {
   return $verifyPassword(password, hashedPassword, salt, options);
@@ -435,7 +470,7 @@ function tryConvertStrToBytes(data, inputEncoding = "utf8") {
 }
 function convertStrToBytes(data, inputEncoding = "utf8") {
   const { result, error } = $convertStrToBytes(data, inputEncoding);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryConvertBytesToStr(data, outputEncoding = "utf8") {
@@ -443,7 +478,7 @@ function tryConvertBytesToStr(data, outputEncoding = "utf8") {
 }
 function convertBytesToStr(data, outputEncoding = "utf8") {
   const { result, error } = $convertBytesToStr(data, outputEncoding);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 function tryConvertEncoding(data, from, to) {
@@ -451,7 +486,7 @@ function tryConvertEncoding(data, from, to) {
 }
 function convertEncoding(data, from, to) {
   const { result, error } = $convertEncoding(data, from, to);
-  if (error) throw new Error(chunk3UX5MZ2P_cjs.$fmtResultErr(error));
+  if (error) throw new Error(chunkBHG5RSUV_cjs.$fmtResultErr(error));
   return result;
 }
 
@@ -480,5 +515,5 @@ exports.tryGenerateUuid = tryGenerateUuid;
 exports.tryHash = tryHash;
 exports.tryHashPassword = tryHashPassword;
 exports.verifyPassword = verifyPassword;
-//# sourceMappingURL=chunk-N2EW2FDZ.cjs.map
-//# sourceMappingURL=chunk-N2EW2FDZ.cjs.map
+//# sourceMappingURL=chunk-HMTHK2IY.cjs.map
+//# sourceMappingURL=chunk-HMTHK2IY.cjs.map