@atlasauth/emulator-core 0.1.0 → 0.3.0

package/dist/jwe.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isOpDecryptAlg = exports.JWE_ENCS = exports.OP_DECRYPT_ALGS = void 0;
+exports.generateEncKey = generateEncKey;
+exports.decryptJwe = decryptJwe;
+/* eslint-disable @typescript-eslint/no-explicit-any */
+const jws_1 = require("./jws");
+/**
+ * Compact JWE decryption on Web Crypto only (like `jws.ts`), for request objects a client encrypts to the emulator's
+ * published encryption key: key management `RSA-OAEP-256` or `ECDH-ES` (P-256, direct), content encryption
+ * `A128GCM`, `A256GCM`, `A128CBC-HS256` or `A256CBC-HS512`. The same lists the real provider accepts.
+ */
+exports.OP_DECRYPT_ALGS = ['RSA-OAEP-256', 'ECDH-ES'];
+exports.JWE_ENCS = ['A128GCM', 'A256GCM', 'A128CBC-HS256', 'A256CBC-HS512'];
+const isOpDecryptAlg = (v) => exports.OP_DECRYPT_ALGS.includes(v);
+exports.isOpDecryptAlg = isOpDecryptAlg;
+async function generateEncKey(alg, kid) {
+    const pair = (await (alg === 'RSA-OAEP-256'
+        ? crypto.subtle.generateKey({ name: 'RSA-OAEP', modulusLength: 2048, publicExponent: new Uint8Array([1, 0, 1]), hash: 'SHA-256' }, false, ['decrypt', 'encrypt'])
+        : crypto.subtle.generateKey({ name: 'ECDH', namedCurve: 'P-256' }, false, ['deriveBits'])));
+    const jwk = (await crypto.subtle.exportKey('jwk', pair.publicKey));
+    delete jwk.key_ops;
+    delete jwk.ext;
+    return { alg, kid, publicJwk: { ...jwk, kid, use: 'enc', alg }, privateKey: pair.privateKey };
+}
+const ENC_KEY_BYTES = { A128GCM: 16, A256GCM: 32, 'A128CBC-HS256': 32, 'A256CBC-HS512': 64 };
+const u32 = (n) => new Uint8Array([(n >>> 24) & 255, (n >>> 16) & 255, (n >>> 8) & 255, n & 255]);
+const cat = (...parts) => {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts)
+        (out.set(p, at), (at += p.length));
+    return out;
+};
+const lenPrefixed = (b) => cat(u32(b.length), b);
+/** RFC 7518 section 4.6.2: the Concat KDF with SHA-256, `bits` of output. */
+async function concatKdf(z, algId, apu, apv, bits) {
+    const info = cat(lenPrefixed(new TextEncoder().encode(algId)), lenPrefixed(apu), lenPrefixed(apv), u32(bits));
+    const rounds = Math.ceil(bits / 256);
+    const parts = [];
+    for (let i = 1; i <= rounds; i++)
+        parts.push(new Uint8Array(await crypto.subtle.digest('SHA-256', cat(u32(i), z, info))));
+    return cat(...parts).slice(0, bits / 8);
+}
+const tagEqual = (a, b) => {
+    if (a.length !== b.length)
+        return false;
+    let d = 0;
+    for (let i = 0; i < a.length; i++)
+        d |= a[i] ^ b[i];
+    return d === 0;
+};
+/** The plaintext of a compact JWE, or null when it is malformed, names another key, or fails authentication. Never throws. */
+async function decryptJwe(jwe, key) {
+    try {
+        const parts = jwe.split('.');
+        if (parts.length !== 5)
+            return null;
+        const [h, ek, iv, ct, tag] = parts;
+        const header = JSON.parse(new TextDecoder().decode((0, jws_1.b64urlDecode)(h)));
+        const keyBytes = ENC_KEY_BYTES[header.enc];
+        if (header.alg !== key.alg || !keyBytes || header.zip !== undefined)
+            return null;
+        let cek;
+        if (key.alg === 'RSA-OAEP-256') {
+            cek = new Uint8Array(await crypto.subtle.decrypt({ name: 'RSA-OAEP' }, key.privateKey, (0, jws_1.b64urlDecode)(ek)));
+        }
+        else {
+            const epk = header.epk;
+            if (ek || !epk || epk.kty !== 'EC' || epk.crv !== 'P-256')
+                return null;
+            const pub = await crypto.subtle.importKey('jwk', { kty: 'EC', crv: 'P-256', x: epk.x, y: epk.y }, { name: 'ECDH', namedCurve: 'P-256' }, false, []);
+            const z = new Uint8Array(await crypto.subtle.deriveBits({ name: 'ECDH', public: pub }, key.privateKey, 256));
+            cek = await concatKdf(z, header.enc, header.apu ? (0, jws_1.b64urlDecode)(header.apu) : new Uint8Array(), header.apv ? (0, jws_1.b64urlDecode)(header.apv) : new Uint8Array(), keyBytes * 8);
+        }
+        if (cek.length !== keyBytes)
+            return null;
+        const aad = new TextEncoder().encode(h);
+        const ivB = (0, jws_1.b64urlDecode)(iv);
+        const ctB = (0, jws_1.b64urlDecode)(ct);
+        const tagB = (0, jws_1.b64urlDecode)(tag);
+        if (header.enc.endsWith('GCM')) {
+            const k = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['decrypt']);
+            return new TextDecoder().decode(await crypto.subtle.decrypt({ name: 'AES-GCM', iv: ivB, additionalData: aad, tagLength: 128 }, k, cat(ctB, tagB)));
+        }
+        const half = keyBytes / 2;
+        const hash = header.enc === 'A128CBC-HS256' ? 'SHA-256' : 'SHA-512';
+        const mac = await crypto.subtle.importKey('raw', cek.slice(0, half), { name: 'HMAC', hash }, false, ['sign']);
+        const al = new Uint8Array(8);
+        new DataView(al.buffer).setUint32(4, aad.length * 8);
+        const expected = new Uint8Array(await crypto.subtle.sign('HMAC', mac, cat(aad, ivB, ctB, al))).slice(0, half);
+        if (!tagEqual(expected, tagB))
+            return null;
+        const k = await crypto.subtle.importKey('raw', cek.slice(half), 'AES-CBC', false, ['decrypt']);
+        return new TextDecoder().decode(await crypto.subtle.decrypt({ name: 'AES-CBC', iv: ivB }, k, ctB));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=jwe.js.map

package/dist/jwe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwe.js","sourceRoot":"","sources":["../src/jwe.ts"],"names":[],"mappings":";;;AAoBA,wCAQC;AA6BD,gCAuCC;AAhGD,uDAAuD;AACvD,+BAAqC;AAErC;;;;GAIG;AACU,QAAA,eAAe,GAAG,CAAC,cAAc,EAAE,SAAS,CAAU,CAAC;AAEvD,QAAA,QAAQ,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,CAAU,CAAC;AACnF,MAAM,cAAc,GAAG,CAAC,CAAU,EAAqB,EAAE,CAAE,uBAAqC,CAAC,QAAQ,CAAC,CAAW,CAAC,CAAC;AAAjH,QAAA,cAAc,kBAAmG;AASvH,KAAK,UAAU,cAAc,CAAC,GAAiB,EAAE,GAAW;IACjE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,cAAc;QACzC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAkB,CAAC;IAC/G,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAwB,CAAC;IAC1F,OAAO,GAAG,CAAC,OAAO,CAAC;IACnB,OAAO,GAAG,CAAC,GAAG,CAAC;IACf,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,aAAa,GAA2B,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;AACrH,MAAM,GAAG,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACtH,MAAM,GAAG,GAAG,CAAC,GAAG,KAAmB,EAAc,EAAE;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AACF,MAAM,WAAW,GAAG,CAAC,CAAa,EAAc,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAEzE,6EAA6E;AAC7E,KAAK,UAAU,SAAS,CAAC,CAAa,EAAE,KAAa,EAAE,GAAe,EAAE,GAAe,EAAE,IAAY;IACnG,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAiB,CAAC,CAAC,CAAC,CAAC;IAC1I,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAE,CAAa,EAAW,EAAE;IACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC,CAAC;AAEF,8HAA8H;AACvH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,GAAa;IACzD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,KAAiD,CAAC;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAA,kBAAY,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACjF,IAAI,GAAe,CAAC;QACpB,IAAI,GAAG,CAAC,GAAG,KAAK,cAAc,EAAE,CAAC;YAC/B,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,IAAA,kBAAY,EAAC,EAAE,CAAiB,CAAC,CAAC,CAAC;QAC5H,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YACvE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACpJ,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7G,GAAG,GAAG,MAAM,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,kBAAY,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,kBAAY,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QACzK,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAA,kBAAY,EAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAA,kBAAY,EAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YACnG,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAmB,EAAE,cAAc,EAAE,GAAmB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAiB,CAAC,CAAC,CAAC;QACrM,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9H,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9H,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/G,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAmB,EAAE,EAAE,CAAC,EAAE,GAAmB,CAAC,CAAC,CAAC;IACrI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/jws.d.ts

@@ -0,0 +1,41 @@
+/** JWS and DPoP helpers on Web Crypto only (no node:crypto), so the engine still runs in a browser worker. */
+export declare const b64urlDecode: (s: string) => Uint8Array;
+export interface DecodedJwt {
+    header: Record<string, any>;
+    payload: Record<string, any>;
+    signingInput: string;
+    signature: Uint8Array;
+}
+/** Split and parse a compact JWS; null when it is not one. Does not verify anything. */
+export declare function decodeJwt(token: string): DecodedJwt | null;
+export declare const SUPPORTED_ALGS: string[];
+/** Verify a JWS signature with a public JWK. Never throws; a private-key JWK is refused. */
+export declare function verifyJws(jwt: DecodedJwt, jwk: Record<string, any>): Promise<boolean>;
+/** RFC 7638 thumbprint of a public JWK (base64url SHA-256); null for a key type the engine does not read. */
+export declare function jwkThumbprintOf(jwk: Record<string, any>): Promise<string | null>;
+/** `*` any run of characters, `?` one character; anchored. */
+export declare const globMatch: (pattern: string, value: string) => boolean;
+export declare const DPOP_IAT_WINDOW_S = 300;
+export interface DpopCheck {
+    proof: string;
+    htm: string;
+    /** The URL the request was sent to; query and fragment are ignored (RFC 9449 section 4.3). */
+    htu: string;
+    nowMs: number;
+    /** When the proof accompanies an access token, the token it must hash (`ath`). */
+    accessToken?: string;
+    /** The server nonce the proof must carry, when one was issued. */
+    nonce?: string;
+}
+/** Validate a DPoP proof per RFC 9449. Returns the key thumbprint and jti, or throws Error(reason). Replay (jti) is the caller's. */
+export declare function verifyDpopProof(c: DpopCheck): Promise<{
+    jkt: string;
+    jti: string;
+    iat: number;
+}>;
+/**
+ * The client certificate thumbprint (`x5t#S256`) a trusted edge forwarded, for mTLS binding. The emulator has no TLS, so
+ * it reads what a proxy would set: `x-client-cert` (PEM, optionally URL-encoded) or `x-client-cert-sha256` (the
+ * fingerprint, hex or base64url). Returns undefined when neither is present, null when one is present but unreadable.
+ */
+export declare function forwardedCertThumbprint(headers: Headers): Promise<string | undefined | null>;

package/dist/jws.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DPOP_IAT_WINDOW_S = exports.globMatch = exports.SUPPORTED_ALGS = exports.b64urlDecode = void 0;
+exports.decodeJwt = decodeJwt;
+exports.verifyJws = verifyJws;
+exports.jwkThumbprintOf = jwkThumbprintOf;
+exports.verifyDpopProof = verifyDpopProof;
+exports.forwardedCertThumbprint = forwardedCertThumbprint;
+/* eslint-disable @typescript-eslint/no-explicit-any */
+const crypto_util_1 = require("./crypto-util");
+/** JWS and DPoP helpers on Web Crypto only (no node:crypto), so the engine still runs in a browser worker. */
+const b64urlDecode = (s) => {
+    const pad = s.replace(/-/g, '+').replace(/_/g, '/');
+    return Uint8Array.from(atob(pad + '='.repeat((4 - (pad.length % 4)) % 4)), (c) => c.charCodeAt(0));
+};
+exports.b64urlDecode = b64urlDecode;
+const text = (s) => new TextDecoder().decode((0, exports.b64urlDecode)(s));
+/** Split and parse a compact JWS; null when it is not one. Does not verify anything. */
+function decodeJwt(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3 || parts.some((p) => !p))
+        return null;
+    try {
+        const header = JSON.parse(text(parts[0]));
+        const payload = JSON.parse(text(parts[1]));
+        if (!header || typeof header !== 'object' || !payload || typeof payload !== 'object')
+            return null;
+        return { header, payload, signingInput: `${parts[0]}.${parts[1]}`, signature: (0, exports.b64urlDecode)(parts[2]) };
+    }
+    catch {
+        return null;
+    }
+}
+const hashOf = (bits) => `SHA-${bits}`;
+const ALGS = {
+    ES256: { import: { name: 'ECDSA', namedCurve: 'P-256' }, verify: { name: 'ECDSA', hash: hashOf('256') } },
+    ES384: { import: { name: 'ECDSA', namedCurve: 'P-384' }, verify: { name: 'ECDSA', hash: hashOf('384') } },
+    RS256: { import: { name: 'RSASSA-PKCS1-v1_5', hash: hashOf('256') }, verify: { name: 'RSASSA-PKCS1-v1_5' } },
+    RS384: { import: { name: 'RSASSA-PKCS1-v1_5', hash: hashOf('384') }, verify: { name: 'RSASSA-PKCS1-v1_5' } },
+    RS512: { import: { name: 'RSASSA-PKCS1-v1_5', hash: hashOf('512') }, verify: { name: 'RSASSA-PKCS1-v1_5' } },
+    ES512: { import: { name: 'ECDSA', namedCurve: 'P-521' }, verify: { name: 'ECDSA', hash: hashOf('512') } },
+    PS256: { import: { name: 'RSA-PSS', hash: hashOf('256') }, verify: { name: 'RSA-PSS', saltLength: 32 } },
+    PS384: { import: { name: 'RSA-PSS', hash: hashOf('384') }, verify: { name: 'RSA-PSS', saltLength: 48 } },
+    EdDSA: { import: { name: 'Ed25519' }, verify: { name: 'Ed25519' } },
+};
+exports.SUPPORTED_ALGS = Object.keys(ALGS);
+/** Verify a JWS signature with a public JWK. Never throws; a private-key JWK is refused. */
+async function verifyJws(jwt, jwk) {
+    const spec = ALGS[String(jwt.header.alg)];
+    if (!spec || 'd' in jwk || 'k' in jwk)
+        return false;
+    try {
+        const key = await crypto.subtle.importKey('jwk', { ...jwk, alg: undefined, use: undefined, key_ops: undefined }, spec.import, false, ['verify']);
+        return await crypto.subtle.verify(spec.verify, key, jwt.signature, new TextEncoder().encode(jwt.signingInput));
+    }
+    catch {
+        return false;
+    }
+}
+const THUMB_KEYS = { EC: ['crv', 'kty', 'x', 'y'], RSA: ['e', 'kty', 'n'], OKP: ['crv', 'kty', 'x'] };
+/** RFC 7638 thumbprint of a public JWK (base64url SHA-256); null for a key type the engine does not read. */
+async function jwkThumbprintOf(jwk) {
+    const keys = THUMB_KEYS[String(jwk.kty)];
+    if (!keys || keys.some((k) => typeof jwk[k] !== 'string'))
+        return null;
+    return (0, crypto_util_1.bytesToB64url)(await (0, crypto_util_1.sha256)(JSON.stringify(Object.fromEntries(keys.map((k) => [k, jwk[k]])))));
+}
+/** `*` any run of characters, `?` one character; anchored. */
+const globMatch = (pattern, value) => new RegExp(`^${pattern.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*').replace(/\?/g, '.')}$`, 's').test(value);
+exports.globMatch = globMatch;
+exports.DPOP_IAT_WINDOW_S = 300;
+const stripUrl = (u) => {
+    const x = new URL(u);
+    return `${x.protocol}//${x.host}${x.pathname}`;
+};
+/** Validate a DPoP proof per RFC 9449. Returns the key thumbprint and jti, or throws Error(reason). Replay (jti) is the caller's. */
+async function verifyDpopProof(c) {
+    const jwt = decodeJwt(c.proof);
+    if (!jwt)
+        throw new Error('The DPoP proof is not a JWT.');
+    const { header, payload } = jwt;
+    if (header.typ !== 'dpop+jwt')
+        throw new Error('The DPoP proof typ must be dpop+jwt.');
+    if (!(String(header.alg) in ALGS))
+        throw new Error('The DPoP proof alg is not an asymmetric algorithm this server accepts.');
+    const jwk = header.jwk;
+    if (!jwk || typeof jwk !== 'object' || 'd' in jwk)
+        throw new Error('The DPoP proof header must carry a public jwk.');
+    if (!(await verifyJws(jwt, jwk)))
+        throw new Error('The DPoP proof signature does not verify against its jwk.');
+    if (typeof payload.jti !== 'string' || !payload.jti)
+        throw new Error('The DPoP proof needs a jti.');
+    if (String(payload.htm).toUpperCase() !== c.htm.toUpperCase())
+        throw new Error('The DPoP proof htm does not match the request method.');
+    if (typeof payload.htu !== 'string' || stripUrl(payload.htu) !== stripUrl(c.htu))
+        throw new Error('The DPoP proof htu does not match the request URL.');
+    if (typeof payload.iat !== 'number' || Math.abs(c.nowMs / 1000 - payload.iat) > exports.DPOP_IAT_WINDOW_S)
+        throw new Error('The DPoP proof iat is outside the accepted window.');
+    if (c.nonce !== undefined && payload.nonce !== c.nonce)
+        throw new Error('The DPoP proof nonce is missing or wrong.');
+    if (c.accessToken !== undefined && payload.ath !== (0, crypto_util_1.bytesToB64url)(await (0, crypto_util_1.sha256)(c.accessToken)))
+        throw new Error('The DPoP proof ath does not match the access token.');
+    const jkt = await jwkThumbprintOf(jwk);
+    if (!jkt)
+        throw new Error('The DPoP proof jwk is not a key type this server reads.');
+    return { jkt, jti: payload.jti, iat: payload.iat };
+}
+/**
+ * The client certificate thumbprint (`x5t#S256`) a trusted edge forwarded, for mTLS binding. The emulator has no TLS, so
+ * it reads what a proxy would set: `x-client-cert` (PEM, optionally URL-encoded) or `x-client-cert-sha256` (the
+ * fingerprint, hex or base64url). Returns undefined when neither is present, null when one is present but unreadable.
+ */
+async function forwardedCertThumbprint(headers) {
+    const pem = headers.get('x-client-cert');
+    if (pem) {
+        try {
+            const body = decodeURIComponent(pem).replace(/-----[A-Z ]+-----/g, '').replace(/\s+/g, '');
+            const der = Uint8Array.from(atob(body), (ch) => ch.charCodeAt(0));
+            if (!der.length)
+                return null;
+            return (0, crypto_util_1.bytesToB64url)(await (0, crypto_util_1.sha256)(der));
+        }
+        catch {
+            return null;
+        }
+    }
+    const fp = headers.get('x-client-cert-sha256');
+    if (!fp)
+        return undefined;
+    const hex = fp.replace(/:/g, '');
+    if (/^[0-9a-fA-F]{64}$/.test(hex))
+        return (0, crypto_util_1.bytesToB64url)(Uint8Array.from(hex.match(/../g).map((h) => parseInt(h, 16))));
+    return /^[A-Za-z0-9_-]{43}$/.test(fp) ? fp : null;
+}
+//# sourceMappingURL=jws.js.map

package/dist/jws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.js","sourceRoot":"","sources":["../src/jws.ts"],"names":[],"mappings":";;;AAkBA,8BAWC;AAqBD,8BASC;AAKD,0CAIC;AAyBD,0CAkBC;AAOD,0DAiBC;AAvID,uDAAuD;AACvD,+CAAsD;AAEtD,8GAA8G;AACvG,MAAM,YAAY,GAAG,CAAC,CAAS,EAAc,EAAE;IACpD,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC,CAAC;AAHW,QAAA,YAAY,gBAGvB;AACF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAA,oBAAY,EAAC,CAAC,CAAC,CAAC,CAAC;AAS9E,wFAAwF;AACxF,SAAgB,SAAS,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAA,oBAAY,EAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAMD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;AAC/C,MAAM,IAAI,GAA4B;IACpC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;IACzG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;IACzG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE;IAC5G,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE;IAC5G,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE;IAC5G,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;IACzG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;IACxG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;IACxG,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;CACpE,CAAC;AACW,QAAA,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEhD,4FAA4F;AACrF,KAAK,UAAU,SAAS,CAAC,GAAe,EAAE,GAAwB;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/J,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,SAAyB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAiB,CAAC,CAAC;IACjJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAA6B,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AAEhI,6GAA6G;AACtG,KAAK,UAAU,eAAe,CAAC,GAAwB;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,IAAA,2BAAa,EAAC,MAAM,IAAA,oBAAM,EAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,8DAA8D;AACvD,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,KAAa,EAAW,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAnL,QAAA,SAAS,aAA0K;AAEnL,QAAA,iBAAiB,GAAG,GAAG,CAAC;AAcrC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE;IACrC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjD,CAAC,CAAC;AAEF,qIAAqI;AAC9H,KAAK,UAAU,eAAe,CAAC,CAAY;IAChD,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAChC,IAAI,MAAM,CAAC,GAAG,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC7H,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACrH,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/G,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACpG,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACxI,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxJ,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,yBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACzK,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACrH,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,IAAA,2BAAa,EAAC,MAAM,IAAA,oBAAM,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACtK,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACrF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,uBAAuB,CAAC,OAAgB;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3F,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,IAAA,2BAAa,EAAC,MAAM,IAAA,oBAAM,EAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAA,2BAAa,EAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,OAAO,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/messages.d.ts

@@ -21,9 +21,16 @@ export interface MessageQuery {
  * The universal message sink: everything the engine would have sent (email, SMS, WhatsApp, voice, push)
  * lands here instead. Read it with `GET /__emulator/messages` or `engine.messages`.
  */
+/** What the messaging layer decides for one outgoing message before it is sunk. `done` gets the sunk copy, or null when it was not delivered. */
+export interface MessagePlan {
+    deliver: boolean;
+    done?: (sunk: SunkMessage | null) => void;
+}
 export declare class MessageSink {
     private readonly clock;
     readonly messages: SunkMessage[];
+    /** Suppression, provider failover and the message ledger plug in here (see handlers/messaging.ts); unset, every message is delivered. */
+    route?: (m: Omit<SunkMessage, 'id' | 'at'>) => MessagePlan;
     private waiters;
     constructor(clock: Clock);
     send(m: Omit<SunkMessage, 'id' | 'at'>): SunkMessage;

package/dist/messages.js

@@ -1,18 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MessageSink = void 0;
-/**
- * The universal message sink: everything the engine would have sent (email, SMS, WhatsApp, voice, push)
- * lands here instead. Read it with `GET /__emulator/messages` or `engine.messages`.
- */
 class MessageSink {
     clock;
     messages = [];
+    /** Suppression, provider failover and the message ledger plug in here (see handlers/messaging.ts); unset, every message is delivered. */
+    route;
     waiters = [];
     constructor(clock) {
         this.clock = clock;
     }
     send(m) {
+        const plan = this.route?.(m);
+        if (plan && !plan.deliver) {
+            plan.done?.(null);
+            return { id: 0, at: new Date(this.clock.now()).toISOString(), ...m, meta: { ...(m.meta ?? {}), undelivered: true } };
+        }
         const full = { id: this.messages.length + 1, at: new Date(this.clock.now()).toISOString(), ...m };
         this.messages.push(full);
         for (const w of [...this.waiters]) {
@@ -22,6 +25,7 @@ class MessageSink {
                 w.resolve(full);
             }
         }
+        plan?.done?.(full);
         return full;
     }
     matches(m, q) {

package/dist/messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"messages.js","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":";;;AAsBA;;;GAGG;AACH,MAAa,WAAW;IAIO;IAHpB,QAAQ,GAAkB,EAAE,CAAC;IAC9B,OAAO,GAAwG,EAAE,CAAC;IAE1H,YAA6B,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAE7C,IAAI,CAAC,CAAiC;QACpC,MAAM,IAAI,GAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,CAAc,EAAE,CAAe;QAC7C,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtJ,CAAC;IAED,IAAI,CAAC,IAAkB,EAAE;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,gHAAgH;IAChH,OAAO,CAAC,CAAe,EAAE,SAAS,GAAG,IAAI;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;gBAC7D,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,SAAS,MAAM,CAAC,CAAC,CAAC;YACnF,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;CACF;AA7CD,kCA6CC"}
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":";;;AAgCA,MAAa,WAAW;IAMO;IALpB,QAAQ,GAAkB,EAAE,CAAC;IACtC,yIAAyI;IACzI,KAAK,CAAsD;IACnD,OAAO,GAAwG,EAAE,CAAC;IAE1H,YAA6B,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAE7C,IAAI,CAAC,CAAiC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACvH,CAAC;QACD,MAAM,IAAI,GAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnD,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,OAAO,CAAC,CAAc,EAAE,CAAe;QAC7C,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACtJ,CAAC;IAED,IAAI,CAAC,IAAkB,EAAE;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,gHAAgH;IAChH,OAAO,CAAC,CAAe,EAAE,SAAS,GAAG,IAAI;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;gBAC7D,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,SAAS,MAAM,CAAC,CAAC,CAAC;YACnF,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;CACF;AArDD,kCAqDC"}

package/dist/messaging-callbacks.d.ts

@@ -0,0 +1,100 @@
+export type EventStatus = 'sent' | 'delivered' | 'bounced' | 'complained' | 'failed';
+export interface DeliveryEvent {
+    channel: 'email' | 'sms';
+    provider: string;
+    messageIds: string[];
+    status: EventStatus;
+    bounceType?: 'hard' | 'soft' | 'unknown';
+    recipient?: string;
+    detail?: string;
+    /** Epoch milliseconds. */
+    at: number;
+    suppress?: 'hard_bounce' | 'complaint' | 'unsubscribe' | 'invalid';
+}
+export declare const sha256Hex: (v: string | Uint8Array) => Promise<string>;
+export interface TestKeys {
+    ec(): Promise<{
+        publicB64: string;
+        privateKey: CryptoKey;
+    }>;
+    rsa(): Promise<{
+        publicB64: string;
+        pkcs8: Uint8Array;
+        certPem: string;
+    }>;
+}
+export declare function testKeys(): TestKeys;
+/** The test signing secret the emulator uses for a provider when none was stored (stable per instance). */
+export declare function testSecret(instanceId: string, provider: string): Promise<string>;
+/** The URL token of the providers that cannot sign (and the fallback when no signing secret is stored). */
+export declare const receiverToken: (instanceId: string, provider: string) => Promise<string>;
+export declare function idVariants(id: unknown): string[];
+export declare function verifySvix(i: {
+    secret: string;
+    id: string;
+    timestamp: string;
+    signatureHeader: string;
+    body: string;
+    now: number;
+}): Promise<boolean>;
+export declare function snsStringToSign(m: Record<string, unknown>): string | null;
+/** Where the emulator's SNS signing key is "served"; any other SNS host fails like an unreachable certificate. */
+export declare const SNS_CERT_URL = "https://sns.us-east-1.amazonaws.com/SimpleNotificationService-emulator.pem";
+export declare function presentedTokens(headers: Headers, query: Record<string, string>): string[];
+export interface CallbackIn {
+    provider: string;
+    raw: string;
+    contentType: string;
+    headers: Headers;
+    query: Record<string, string>;
+    /** Every public URL the sender could have signed (Twilio signs the URL). */
+    urls: string[];
+    /** The stored verification secret (signing key, public key, whsec_, topic ARNs), or null. */
+    secret: string | null;
+    token: string;
+    /** Auth tokens of the instance's Twilio SMS providers. */
+    twilioTokens: string[];
+    /** The certificate (PEM) an SNS `SigningCertURL` serves, or null when nothing is served there. */
+    snsCertificate: (url: string) => Promise<string | null>;
+    /** Epoch seconds. */
+    now: number;
+}
+export type CallbackOut = {
+    ok: false;
+    why: string;
+    malformed?: boolean;
+    message?: string;
+} | {
+    ok: true;
+    events: DeliveryEvent[];
+    id: string;
+    confirmed?: boolean;
+    subscribeUrl?: string;
+};
+/** Verify one callback with the provider's own scheme and say what it reports. Never throws. */
+export declare function verifyCallback(i: CallbackIn): Promise<CallbackOut>;
+export interface PrepIn {
+    provider: string;
+    event: EventStatus;
+    bounce: 'hard' | 'soft';
+    messageId: string;
+    recipient: string;
+    detail?: string;
+    /** The signing secret to use, or null for the URL-token mode of the providers that have one. */
+    secret: string | null;
+    token: string;
+    /** The public URL the callback is posted to, without a query. */
+    url: string;
+    now: number;
+    /** Appended to what is signed, so the signature is well formed but wrong (a tampered callback). */
+    salt: string;
+    topic: string;
+    keys: TestKeys;
+}
+export interface Prepared {
+    content_type: string;
+    body: string;
+    headers: Record<string, string>;
+    query: Record<string, string>;
+}
+export declare function prepareCallback(p: PrepIn): Promise<Prepared>;