fix(dukpt): add KSN/BDK to JSON output for AES and TDES DUKPT derive operations

AES DUKPT IK JSON was missing ksn, iki, counter; working key was missing ksn.
TDES DUKPT IPEK and session key JSON were missing ksn and bdk.
Both now mirror the full derivation context, making json=true self-contained for debugging and cross-validation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: J8k3

src/core/operations/DeriveDUKPTAESKey.mjs

@@ -305,8 +305,9 @@ class DeriveDUKPTAESKey extends Operation {
 
         if (deriveMode === "Initial Key (IK)") {
             if (outputJson) {
-                const out = { inputKeyType, ik: hex(ik) };
+                const out = { inputKeyType, ksn: hex(ksn), iki: hex(iki), counter: `0x${counter.toString(16).padStart(8, "0").toUpperCase()}` };
                 if (inputKeyType === "BDK") out.bdk = hex(inputKey);
+                out.ik = hex(ik);
                 return JSON.stringify(out, null, 4);
             }
             return hex(ik);
@@ -317,7 +318,7 @@ class DeriveDUKPTAESKey extends Operation {
         const wkKey  = deriveWorkingKey(txKey, iki, counter, purpose);
 
         if (outputJson) {
-            const out = { inputKeyType, iki: hex(iki), counter: `0x${counter.toString(16).padStart(8, "0").toUpperCase()}` };
+            const out = { inputKeyType, ksn: hex(ksn), iki: hex(iki), counter: `0x${counter.toString(16).padStart(8, "0").toUpperCase()}` };
             if (inputKeyType === "BDK") out.bdk = hex(inputKey);
             out.ik             = hex(ik);
             out.transactionKey = hex(txKey);

src/core/operations/DeriveDUKPTKey.mjs

@@ -253,9 +253,11 @@ class DeriveDUKPTKey extends Operation {
         const ipek = deriveIpek(bdk, ksn);
         const ipekHex = toHexFast(ipek).toUpperCase();
 
+        const ksnHexOut = toHexFast(ksn).toUpperCase();
+
         if (mode === "Derive IPEK") {
             if (outputJson) {
-                return JSON.stringify({ mode, ipek: ipekHex }, null, 4);
+                return JSON.stringify({ mode, ksn: ksnHexOut, bdk: toHexFast(bdk).toUpperCase(), ipek: ipekHex }, null, 4);
             }
             return ipekHex;
         }
@@ -267,6 +269,8 @@ class DeriveDUKPTKey extends Operation {
         if (outputJson) {
             return JSON.stringify({
                 mode,
+                ksn: ksnHexOut,
+                bdk: toHexFast(bdk).toUpperCase(),
                 ipek: ipekHex,
                 sessionBase: toHexFast(sessionBase).toUpperCase(),
                 variant,