v5.2.4 — Prism polish

Fixed

• CryptoPortBase.sha256() type — index.d.ts declaration corrected from string | Promise<string> to Promise<string>, matching the async implementation since v5.2.3.
• keyLength passthrough — KeyResolver.#resolveKeyFromPassphrase and deriveKekFromKdf now forward kdf.keyLength to deriveKey(), fixing a latent bug for vaults configured with non-default key lengths.
• Deno test compatibility — createCryptoAdapter.test.js no longer crashes on Deno by guarding immutable globalThis.Deno restoration with try/catch and skipping Node-only tests on non-Node runtimes.
• README wording — "no public API changes" corrected to "no breaking API changes" in the v5.2.3 summary.
• Barrel re-export description — README and CHANGELOG now show the correct export { default as X } from '...' syntax.
• Vestigial lastchat.txt removed from jsr.json exclude list.

Changed

• keyResolver is now private — CasService.keyResolver changed to #keyResolver, preventing external access to an internal implementation detail.
• VaultPassphraseRotator.js → rotateVaultPassphrase.js — renamed to follow camelCase convention for files that export a function (PascalCase is reserved for classes).
• resolveChunker validation — chunkSize now validated as a finite positive number before constructing FixedChunker; invalid values fall through to CasService default.
• @fileoverview JSDoc added to FileIOHelper.js, createCryptoAdapter.js, and resolveChunker.js.
• KeyResolver design note — class JSDoc now documents the direct CryptoPort.deriveKey() call (bypasses CasService.deriveKey()).
• Long function signature wrapped — rotateVaultPassphrase() export signature broken across multiple lines.
• Test hardening — salt assertion in KeyResolver.resolveForStore, keyLength round-trip test, resolveChunker edge-case tests, guarded rmSync teardown in FileIOHelper.test.js.

Full Changelog: https://github.com/git-stunts/git-cas/blob/main/CHANGELOG.md

What's Changed

• chore: JSDoc total coverage + strict checkJs by @flyingrobots in #14
• chore: deterministic fuzz, DRY chunk verify, DRY KDF metadata by @flyingrobots in #15
• refactor: extract helpers from facade + cleanup by @flyingrobots in #16

Full Changelog: v5.2.1...v5.2.4