@credo-ts/core 0.6.0-pr-2392-20251010173905 → 0.6.0-pr-2457-20251016083534

package/build/modules/kms/KeyManagementService.d.ts

@@ -1,14 +1,14 @@
-import { KmsJwkPrivate, KmsJwkPublic } from "./jwk/knownJwk.js";
-import { AgentContext } from "../../agent/context/AgentContext.js";
 import { KmsCreateKeyOptions, KmsCreateKeyReturn, KmsCreateKeyType } from "./options/KmsCreateKeyOptions.js";
+import { KmsDecryptOptions, KmsDecryptReturn } from "./options/KmsDecryptOptions.js";
 import { KmsDeleteKeyOptions } from "./options/KmsDeleteKeyOptions.js";
+import { KmsEncryptOptions, KmsEncryptReturn } from "./options/KmsEncryptOptions.js";
+import { KmsImportKeyOptions, KmsImportKeyReturn } from "./options/KmsImportKeyOptions.js";
+import { KmsOperation } from "./options/KmsOperation.js";
 import { KmsRandomBytesOptions, KmsRandomBytesReturn } from "./options/KmsRandomBytesOptions.js";
 import { KmsSignOptions, KmsSignReturn } from "./options/KmsSignOptions.js";
 import { KmsVerifyOptions, KmsVerifyReturn } from "./options/KmsVerifyOptions.js";
-import { KmsImportKeyOptions, KmsImportKeyReturn } from "./options/KmsImportKeyOptions.js";
-import { KmsEncryptOptions, KmsEncryptReturn } from "./options/KmsEncryptOptions.js";
-import { KmsDecryptOptions, KmsDecryptReturn } from "./options/KmsDecryptOptions.js";
-import { KmsOperation } from "./options/KmsOperation.js";
+import { KmsJwkPrivate, KmsJwkPublic } from "./jwk/knownJwk.js";
+import { AgentContext } from "../../agent/context/AgentContext.js";
 
 //#region src/modules/kms/KeyManagementService.d.ts
 interface KeyManagementService {

package/build/modules/kms/error/KeyManagementKeyNotFoundError.d.mts

@@ -2,7 +2,7 @@ import { KeyManagementError } from "./KeyManagementError.mjs";
 
 //#region src/modules/kms/error/KeyManagementKeyNotFoundError.d.ts
 declare class KeyManagementKeyNotFoundError extends KeyManagementError {
-  constructor(keyId: string, backend: string);
+  constructor(keyId: string, backends: string[], extraMessage?: string);
 }
 //#endregion
 export { KeyManagementKeyNotFoundError };

package/build/modules/kms/error/KeyManagementKeyNotFoundError.d.ts

@@ -2,7 +2,7 @@ import { KeyManagementError } from "./KeyManagementError.js";
 
 //#region src/modules/kms/error/KeyManagementKeyNotFoundError.d.ts
 declare class KeyManagementKeyNotFoundError extends KeyManagementError {
-  constructor(keyId: string, backend: string);
+  constructor(keyId: string, backends: string[], extraMessage?: string);
 }
 //#endregion
 export { KeyManagementKeyNotFoundError };

package/build/modules/kms/error/KeyManagementKeyNotFoundError.js

@@ -4,8 +4,11 @@ const require_KeyManagementError = require('./KeyManagementError.js');
 
 //#region src/modules/kms/error/KeyManagementKeyNotFoundError.ts
 var KeyManagementKeyNotFoundError = class extends require_KeyManagementError.KeyManagementError {
-	constructor(keyId, backend) {
-		super(`Key with key id '${keyId}' not found in backend '${backend}'`);
+	constructor(keyId, backends, extraMessage) {
+		const base = `Key with key id '${keyId}' not found in backend`;
+		const withBackends = backends.length > 1 ? `${base}s ${backends.map((b) => `'${b}'`).join(", ")}` : `${base} '${backends[0]}'`;
+		const withExtraMessage = extraMessage ? `${withBackends}. ${extraMessage}` : withBackends;
+		super(withExtraMessage);
 	}
 };
 

package/build/modules/kms/error/KeyManagementKeyNotFoundError.mjs

@@ -4,8 +4,11 @@ import { KeyManagementError } from "./KeyManagementError.mjs";
 
 //#region src/modules/kms/error/KeyManagementKeyNotFoundError.ts
 var KeyManagementKeyNotFoundError = class extends KeyManagementError {
-	constructor(keyId, backend) {
-		super(`Key with key id '${keyId}' not found in backend '${backend}'`);
+	constructor(keyId, backends, extraMessage) {
+		const base = `Key with key id '${keyId}' not found in backend`;
+		const withBackends = backends.length > 1 ? `${base}s ${backends.map((b) => `'${b}'`).join(", ")}` : `${base} '${backends[0]}'`;
+		const withExtraMessage = extraMessage ? `${withBackends}. ${extraMessage}` : withBackends;
+		super(withExtraMessage);
 	}
 };
 

package/build/modules/kms/error/KeyManagementKeyNotFoundError.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"KeyManagementKeyNotFoundError.mjs","names":[],"sources":["../../../../src/modules/kms/error/KeyManagementKeyNotFoundError.ts"],"sourcesContent":["import { KeyManagementError } from './KeyManagementError'\n\nexport class KeyManagementKeyNotFoundError extends KeyManagementError {\n  public constructor(keyId: string, backend: string) {\n    super(`Key with key id '${keyId}' not found in backend '${backend}'`)\n  }\n}\n"],"mappings":";;;;;AAEA,IAAa,gCAAb,cAAmD,mBAAmB;CACpE,AAAO,YAAY,OAAe,SAAiB;AACjD,QAAM,oBAAoB,MAAM,0BAA0B,QAAQ,GAAG"}
+{"version":3,"file":"KeyManagementKeyNotFoundError.mjs","names":[],"sources":["../../../../src/modules/kms/error/KeyManagementKeyNotFoundError.ts"],"sourcesContent":["import { KeyManagementError } from './KeyManagementError'\n\nexport class KeyManagementKeyNotFoundError extends KeyManagementError {\n  public constructor(keyId: string, backends: string[], extraMessage?: string) {\n    const base = `Key with key id '${keyId}' not found in backend`\n\n    const withBackends =\n      backends.length > 1 ? `${base}s ${backends.map((b) => `'${b}'`).join(', ')}` : `${base} '${backends[0]}'`\n\n    const withExtraMessage = extraMessage ? `${withBackends}. ${extraMessage}` : withBackends\n\n    super(withExtraMessage)\n  }\n}\n"],"mappings":";;;;;AAEA,IAAa,gCAAb,cAAmD,mBAAmB;CACpE,AAAO,YAAY,OAAe,UAAoB,cAAuB;EAC3E,MAAM,OAAO,oBAAoB,MAAM;EAEvC,MAAM,eACJ,SAAS,SAAS,IAAI,GAAG,KAAK,IAAI,SAAS,KAAK,MAAM,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,KAAK,GAAG,KAAK,IAAI,SAAS,GAAG;EAEzG,MAAM,mBAAmB,eAAe,GAAG,aAAa,IAAI,iBAAiB;AAE7E,QAAM,iBAAiB"}

package/build/modules/kms/index.d.mts

@@ -1,46 +1,46 @@
+import { KeyManagementError } from "./error/KeyManagementError.mjs";
+import { KeyManagementAlgorithmNotSupportedError } from "./error/KeyManagementAlgorithmNotSupportedError.mjs";
+import { KeyManagementKeyExistsError } from "./error/KeyManagementKeyExistsError.mjs";
+import { KeyManagementKeyNotFoundError } from "./error/KeyManagementKeyNotFoundError.mjs";
+import { KnownJwaContentEncryptionAlgorithm, KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithm, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithm, KnownJwaSignatureAlgorithms } from "./jwk/jwa.mjs";
+import { KmsCreateKeyForSignatureAlgorithmOptions, KmsCreateKeyOptions, KmsCreateKeyReturn, KmsCreateKeyType, KmsCreateKeyTypeAssymetric, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "./options/KmsCreateKeyOptions.mjs";
+import { KmsDecryptDataDecryption, KmsDecryptDataDecryptionAesCbc, KmsDecryptDataDecryptionAesGcm, KmsDecryptDataDecryptionC20p, KmsDecryptOptions, KmsDecryptReturn } from "./options/KmsDecryptOptions.mjs";
+import { KmsDeleteKeyOptions } from "./options/KmsDeleteKeyOptions.mjs";
+import { KmsEncryptDataEncryption, KmsEncryptDataEncryptionAesCbc, KmsEncryptDataEncryptionAesGcm, KmsEncryptDataEncryptionX20c, KmsEncryptOptions, KmsEncryptReturn, KmsEncryptedKey } from "./options/KmsEncryptOptions.mjs";
+import { KmsGetPublicKeyOptions } from "./options/KmsGetPublicKeyOptions.mjs";
+import { KmsImportKeyOptions, KmsImportKeyReturn } from "./options/KmsImportKeyOptions.mjs";
+import { KmsKeyAgreementDecryptEcdhEsKw, KmsKeyAgreementDecryptEcdhHsalsa20, KmsKeyAgreementDecryptOptions } from "./options/KmsKeyAgreementDecryptOptions.mjs";
+import { KmsJwkPublicEcdh, KmsKeyAgreementEcdhEs, KmsKeyAgreementEncryptEcdhEsKw, KmsKeyAgreementEncryptEcdhHsalsa20, KmsKeyAgreementEncryptOptions } from "./options/KmsKeyAgreementEncryptOptions.mjs";
+import { KmsOperation, KmsOperationCreateKey, KmsOperationDecrypt, KmsOperationDeleteKey, KmsOperationEncrypt, KmsOperationImportKey, KmsOperationSign, KmsOperationVerify, getKmsOperationHumanDescription } from "./options/KmsOperation.mjs";
+import { KmsRandomBytesOptions, KmsRandomBytesReturn } from "./options/KmsRandomBytesOptions.mjs";
+import { KmsSignOptions, KmsSignReturn } from "./options/KmsSignOptions.mjs";
+import { KmsVerifyOptions, KmsVerifyReturn } from "./options/KmsVerifyOptions.mjs";
 import { KmsJwkPrivateEc, KmsJwkPublicEc } from "./jwk/kty/ec/ecJwk.mjs";
 import { KmsJwkPrivateOct, KmsJwkPublicOct } from "./jwk/kty/oct/octJwk.mjs";
 import { KmsJwkPrivateOkp, KmsJwkPublicOkp } from "./jwk/kty/okp/okpJwk.mjs";
 import { KmsJwkPrivateRsa, KmsJwkPublicRsa } from "./jwk/kty/rsa/rsaJwk.mjs";
 import { KmsJwkPrivate, KmsJwkPrivateAsymmetric, KmsJwkPrivateFromKmsJwkPublic, KmsJwkPublic, KmsJwkPublicAsymmetric, KmsJwkPublicFromCreateType, KmsJwkPublicFromKmsJwkPrivate, assertJwkAsymmetric, isJwkAsymmetric, publicJwkFromPrivateJwk } from "./jwk/knownJwk.mjs";
-import { KnownJwaContentEncryptionAlgorithm, KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithm, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithm, KnownJwaSignatureAlgorithms } from "./jwk/jwa.mjs";
+import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./jwk/alg/encryption.mjs";
+import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./jwk/alg/keyDerivation.mjs";
+import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./jwk/alg/signing.mjs";
 import { assertSupportedEncryptionAlgorithm, assertSupportedKeyAgreementAlgorithm } from "./jwk/assertSupported.mjs";
+import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./jwk/equals.mjs";
+import { getJwkHumanDescription } from "./jwk/humanDescription.mjs";
+import { Jwk, JwkCommon } from "./jwk/jwk.mjs";
+import { assertKeyAllowsDecrypt, assertKeyAllowsDerive, assertKeyAllowsEncrypt, assertKeyAllowsSign, assertKeyAllowsVerify, keyAllowsDecrypt, keyAllowsEncrypt, keyAllowsSign, keyAllowsVerify } from "./jwk/keyOps.mjs";
+import { derEcSignatureToRaw, rawEcSignatureToDer } from "./jwk/kty/ec/ecSignature.mjs";
 import { P256PublicJwk } from "./jwk/kty/ec/P256PublicJwk.mjs";
 import { P384PublicJwk } from "./jwk/kty/ec/P384PublicJwk.mjs";
 import { P521PublicJwk } from "./jwk/kty/ec/P521PublicJwk.mjs";
 import { Secp256k1PublicJwk } from "./jwk/kty/ec/Secp256k1PublicJwk.mjs";
-import { derEcSignatureToRaw, rawEcSignatureToDer } from "./jwk/kty/ec/ecSignature.mjs";
 import { Ed25519PublicJwk } from "./jwk/kty/okp/Ed25519PublicJwk.mjs";
 import { X25519PublicJwk } from "./jwk/kty/okp/X25519PublicJwk.mjs";
 import { RsaPublicJwk } from "./jwk/kty/rsa/RsaPublicJwk.mjs";
-import { Jwk, JwkCommon } from "./jwk/jwk.mjs";
-import { assertKeyAllowsDecrypt, assertKeyAllowsDerive, assertKeyAllowsEncrypt, assertKeyAllowsSign, assertKeyAllowsVerify, keyAllowsDecrypt, keyAllowsEncrypt, keyAllowsSign, keyAllowsVerify } from "./jwk/keyOps.mjs";
-import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./jwk/alg/encryption.mjs";
-import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./jwk/alg/signing.mjs";
-import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./jwk/alg/keyDerivation.mjs";
-import { getJwkHumanDescription } from "./jwk/humanDescription.mjs";
-import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./jwk/equals.mjs";
 import { PublicJwk } from "./jwk/PublicJwk.mjs";
-import { KmsCreateKeyForSignatureAlgorithmOptions, KmsCreateKeyOptions, KmsCreateKeyReturn, KmsCreateKeyType, KmsCreateKeyTypeAssymetric, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "./options/KmsCreateKeyOptions.mjs";
-import { KmsDeleteKeyOptions } from "./options/KmsDeleteKeyOptions.mjs";
-import { KmsRandomBytesOptions, KmsRandomBytesReturn } from "./options/KmsRandomBytesOptions.mjs";
-import { KmsSignOptions, KmsSignReturn } from "./options/KmsSignOptions.mjs";
-import { KmsVerifyOptions, KmsVerifyReturn } from "./options/KmsVerifyOptions.mjs";
-import { KmsImportKeyOptions, KmsImportKeyReturn } from "./options/KmsImportKeyOptions.mjs";
-import { KmsGetPublicKeyOptions } from "./options/KmsGetPublicKeyOptions.mjs";
-import { KmsEncryptDataEncryption, KmsEncryptDataEncryptionAesCbc, KmsEncryptDataEncryptionAesGcm, KmsEncryptDataEncryptionX20c, KmsEncryptOptions, KmsEncryptReturn, KmsEncryptedKey } from "./options/KmsEncryptOptions.mjs";
-import { KmsDecryptDataDecryption, KmsDecryptDataDecryptionAesCbc, KmsDecryptDataDecryptionAesGcm, KmsDecryptDataDecryptionC20p, KmsDecryptOptions, KmsDecryptReturn } from "./options/KmsDecryptOptions.mjs";
-import { KmsJwkPublicEcdh, KmsKeyAgreementEcdhEs, KmsKeyAgreementEncryptEcdhEsKw, KmsKeyAgreementEncryptEcdhHsalsa20, KmsKeyAgreementEncryptOptions } from "./options/KmsKeyAgreementEncryptOptions.mjs";
-import { KmsKeyAgreementDecryptEcdhEsKw, KmsKeyAgreementDecryptEcdhHsalsa20, KmsKeyAgreementDecryptOptions } from "./options/KmsKeyAgreementDecryptOptions.mjs";
-import { KmsOperation, KmsOperationCreateKey, KmsOperationDecrypt, KmsOperationDeleteKey, KmsOperationEncrypt, KmsOperationImportKey, KmsOperationSign, KmsOperationVerify, getKmsOperationHumanDescription } from "./options/KmsOperation.mjs";
 import { KeyManagementService } from "./KeyManagementService.mjs";
 import { KeyManagementModuleConfig, KeyManagementModuleConfigOptions } from "./KeyManagementModuleConfig.mjs";
 import { KeyManagementApi } from "./KeyManagementApi.mjs";
 import { KeyManagementModule } from "./KeyManagementModule.mjs";
-import { KeyManagementError } from "./error/KeyManagementError.mjs";
-import { KeyManagementKeyExistsError } from "./error/KeyManagementKeyExistsError.mjs";
-import { KeyManagementKeyNotFoundError } from "./error/KeyManagementKeyNotFoundError.mjs";
-import { KeyManagementAlgorithmNotSupportedError } from "./error/KeyManagementAlgorithmNotSupportedError.mjs";
 import { legacyKeyIdFromPublicJwk } from "./legacy.mjs";
 
 //#region src/modules/kms/index.d.ts

package/build/modules/kms/index.d.ts

@@ -1,46 +1,46 @@
+import { KeyManagementError } from "./error/KeyManagementError.js";
+import { KeyManagementAlgorithmNotSupportedError } from "./error/KeyManagementAlgorithmNotSupportedError.js";
+import { KeyManagementKeyExistsError } from "./error/KeyManagementKeyExistsError.js";
+import { KeyManagementKeyNotFoundError } from "./error/KeyManagementKeyNotFoundError.js";
+import { KnownJwaContentEncryptionAlgorithm, KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithm, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithm, KnownJwaSignatureAlgorithms } from "./jwk/jwa.js";
+import { KmsCreateKeyForSignatureAlgorithmOptions, KmsCreateKeyOptions, KmsCreateKeyReturn, KmsCreateKeyType, KmsCreateKeyTypeAssymetric, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "./options/KmsCreateKeyOptions.js";
+import { KmsDecryptDataDecryption, KmsDecryptDataDecryptionAesCbc, KmsDecryptDataDecryptionAesGcm, KmsDecryptDataDecryptionC20p, KmsDecryptOptions, KmsDecryptReturn } from "./options/KmsDecryptOptions.js";
+import { KmsDeleteKeyOptions } from "./options/KmsDeleteKeyOptions.js";
+import { KmsEncryptDataEncryption, KmsEncryptDataEncryptionAesCbc, KmsEncryptDataEncryptionAesGcm, KmsEncryptDataEncryptionX20c, KmsEncryptOptions, KmsEncryptReturn, KmsEncryptedKey } from "./options/KmsEncryptOptions.js";
+import { KmsGetPublicKeyOptions } from "./options/KmsGetPublicKeyOptions.js";
+import { KmsImportKeyOptions, KmsImportKeyReturn } from "./options/KmsImportKeyOptions.js";
+import { KmsKeyAgreementDecryptEcdhEsKw, KmsKeyAgreementDecryptEcdhHsalsa20, KmsKeyAgreementDecryptOptions } from "./options/KmsKeyAgreementDecryptOptions.js";
+import { KmsJwkPublicEcdh, KmsKeyAgreementEcdhEs, KmsKeyAgreementEncryptEcdhEsKw, KmsKeyAgreementEncryptEcdhHsalsa20, KmsKeyAgreementEncryptOptions } from "./options/KmsKeyAgreementEncryptOptions.js";
+import { KmsOperation, KmsOperationCreateKey, KmsOperationDecrypt, KmsOperationDeleteKey, KmsOperationEncrypt, KmsOperationImportKey, KmsOperationSign, KmsOperationVerify, getKmsOperationHumanDescription } from "./options/KmsOperation.js";
+import { KmsRandomBytesOptions, KmsRandomBytesReturn } from "./options/KmsRandomBytesOptions.js";
+import { KmsSignOptions, KmsSignReturn } from "./options/KmsSignOptions.js";
+import { KmsVerifyOptions, KmsVerifyReturn } from "./options/KmsVerifyOptions.js";
 import { KmsJwkPrivateEc, KmsJwkPublicEc } from "./jwk/kty/ec/ecJwk.js";
 import { KmsJwkPrivateOct, KmsJwkPublicOct } from "./jwk/kty/oct/octJwk.js";
 import { KmsJwkPrivateOkp, KmsJwkPublicOkp } from "./jwk/kty/okp/okpJwk.js";
 import { KmsJwkPrivateRsa, KmsJwkPublicRsa } from "./jwk/kty/rsa/rsaJwk.js";
 import { KmsJwkPrivate, KmsJwkPrivateAsymmetric, KmsJwkPrivateFromKmsJwkPublic, KmsJwkPublic, KmsJwkPublicAsymmetric, KmsJwkPublicFromCreateType, KmsJwkPublicFromKmsJwkPrivate, assertJwkAsymmetric, isJwkAsymmetric, publicJwkFromPrivateJwk } from "./jwk/knownJwk.js";
-import { KnownJwaContentEncryptionAlgorithm, KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithm, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithm, KnownJwaSignatureAlgorithms } from "./jwk/jwa.js";
+import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./jwk/alg/encryption.js";
+import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./jwk/alg/keyDerivation.js";
+import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./jwk/alg/signing.js";
 import { assertSupportedEncryptionAlgorithm, assertSupportedKeyAgreementAlgorithm } from "./jwk/assertSupported.js";
+import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./jwk/equals.js";
+import { getJwkHumanDescription } from "./jwk/humanDescription.js";
+import { Jwk, JwkCommon } from "./jwk/jwk.js";
+import { assertKeyAllowsDecrypt, assertKeyAllowsDerive, assertKeyAllowsEncrypt, assertKeyAllowsSign, assertKeyAllowsVerify, keyAllowsDecrypt, keyAllowsEncrypt, keyAllowsSign, keyAllowsVerify } from "./jwk/keyOps.js";
+import { derEcSignatureToRaw, rawEcSignatureToDer } from "./jwk/kty/ec/ecSignature.js";
 import { P256PublicJwk } from "./jwk/kty/ec/P256PublicJwk.js";
 import { P384PublicJwk } from "./jwk/kty/ec/P384PublicJwk.js";
 import { P521PublicJwk } from "./jwk/kty/ec/P521PublicJwk.js";
 import { Secp256k1PublicJwk } from "./jwk/kty/ec/Secp256k1PublicJwk.js";
-import { derEcSignatureToRaw, rawEcSignatureToDer } from "./jwk/kty/ec/ecSignature.js";
 import { Ed25519PublicJwk } from "./jwk/kty/okp/Ed25519PublicJwk.js";
 import { X25519PublicJwk } from "./jwk/kty/okp/X25519PublicJwk.js";
 import { RsaPublicJwk } from "./jwk/kty/rsa/RsaPublicJwk.js";
-import { Jwk, JwkCommon } from "./jwk/jwk.js";
-import { assertKeyAllowsDecrypt, assertKeyAllowsDerive, assertKeyAllowsEncrypt, assertKeyAllowsSign, assertKeyAllowsVerify, keyAllowsDecrypt, keyAllowsEncrypt, keyAllowsSign, keyAllowsVerify } from "./jwk/keyOps.js";
-import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./jwk/alg/encryption.js";
-import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./jwk/alg/signing.js";
-import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./jwk/alg/keyDerivation.js";
-import { getJwkHumanDescription } from "./jwk/humanDescription.js";
-import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./jwk/equals.js";
 import { PublicJwk } from "./jwk/PublicJwk.js";
-import { KmsCreateKeyForSignatureAlgorithmOptions, KmsCreateKeyOptions, KmsCreateKeyReturn, KmsCreateKeyType, KmsCreateKeyTypeAssymetric, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "./options/KmsCreateKeyOptions.js";
-import { KmsDeleteKeyOptions } from "./options/KmsDeleteKeyOptions.js";
-import { KmsRandomBytesOptions, KmsRandomBytesReturn } from "./options/KmsRandomBytesOptions.js";
-import { KmsSignOptions, KmsSignReturn } from "./options/KmsSignOptions.js";
-import { KmsVerifyOptions, KmsVerifyReturn } from "./options/KmsVerifyOptions.js";
-import { KmsImportKeyOptions, KmsImportKeyReturn } from "./options/KmsImportKeyOptions.js";
-import { KmsGetPublicKeyOptions } from "./options/KmsGetPublicKeyOptions.js";
-import { KmsEncryptDataEncryption, KmsEncryptDataEncryptionAesCbc, KmsEncryptDataEncryptionAesGcm, KmsEncryptDataEncryptionX20c, KmsEncryptOptions, KmsEncryptReturn, KmsEncryptedKey } from "./options/KmsEncryptOptions.js";
-import { KmsDecryptDataDecryption, KmsDecryptDataDecryptionAesCbc, KmsDecryptDataDecryptionAesGcm, KmsDecryptDataDecryptionC20p, KmsDecryptOptions, KmsDecryptReturn } from "./options/KmsDecryptOptions.js";
-import { KmsJwkPublicEcdh, KmsKeyAgreementEcdhEs, KmsKeyAgreementEncryptEcdhEsKw, KmsKeyAgreementEncryptEcdhHsalsa20, KmsKeyAgreementEncryptOptions } from "./options/KmsKeyAgreementEncryptOptions.js";
-import { KmsKeyAgreementDecryptEcdhEsKw, KmsKeyAgreementDecryptEcdhHsalsa20, KmsKeyAgreementDecryptOptions } from "./options/KmsKeyAgreementDecryptOptions.js";
-import { KmsOperation, KmsOperationCreateKey, KmsOperationDecrypt, KmsOperationDeleteKey, KmsOperationEncrypt, KmsOperationImportKey, KmsOperationSign, KmsOperationVerify, getKmsOperationHumanDescription } from "./options/KmsOperation.js";
 import { KeyManagementService } from "./KeyManagementService.js";
 import { KeyManagementModuleConfig, KeyManagementModuleConfigOptions } from "./KeyManagementModuleConfig.js";
 import { KeyManagementApi } from "./KeyManagementApi.js";
 import { KeyManagementModule } from "./KeyManagementModule.js";
-import { KeyManagementError } from "./error/KeyManagementError.js";
-import { KeyManagementKeyExistsError } from "./error/KeyManagementKeyExistsError.js";
-import { KeyManagementKeyNotFoundError } from "./error/KeyManagementKeyNotFoundError.js";
-import { KeyManagementAlgorithmNotSupportedError } from "./error/KeyManagementAlgorithmNotSupportedError.js";
 import { legacyKeyIdFromPublicJwk } from "./legacy.js";
 
 //#region src/modules/kms/index.d.ts

package/build/modules/kms/index.js

@@ -2,34 +2,34 @@
 
 const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.js');
 const require_KeyManagementError = require('./error/KeyManagementError.js');
-const require_KeyManagementModuleConfig = require('./KeyManagementModuleConfig.js');
+const require_KeyManagementAlgorithmNotSupportedError = require('./error/KeyManagementAlgorithmNotSupportedError.js');
+const require_KeyManagementKeyExistsError = require('./error/KeyManagementKeyExistsError.js');
 const require_KeyManagementKeyNotFoundError = require('./error/KeyManagementKeyNotFoundError.js');
-const require_jwa = require('./jwk/jwa.js');
 const require_humanDescription = require('./jwk/humanDescription.js');
+const require_encryption = require('./jwk/alg/encryption.js');
+const require_keyDerivation = require('./jwk/alg/keyDerivation.js');
+const require_signing = require('./jwk/alg/signing.js');
+const require_assertSupported = require('./jwk/assertSupported.js');
+const require_equals = require('./jwk/equals.js');
+const require_jwa = require('./jwk/jwa.js');
 const require_keyOps = require('./jwk/keyOps.js');
 const require_knownJwk = require('./jwk/knownJwk.js');
-const require_KeyManagementAlgorithmNotSupportedError = require('./error/KeyManagementAlgorithmNotSupportedError.js');
-const require_assertSupported = require('./jwk/assertSupported.js');
+const require_ecSignature = require('./jwk/kty/ec/ecSignature.js');
 const require_P256PublicJwk = require('./jwk/kty/ec/P256PublicJwk.js');
 const require_P384PublicJwk = require('./jwk/kty/ec/P384PublicJwk.js');
 const require_P521PublicJwk = require('./jwk/kty/ec/P521PublicJwk.js');
 const require_Secp256k1PublicJwk = require('./jwk/kty/ec/Secp256k1PublicJwk.js');
-const require_ecSignature = require('./jwk/kty/ec/ecSignature.js');
 const require_X25519PublicJwk = require('./jwk/kty/okp/X25519PublicJwk.js');
 const require_Ed25519PublicJwk = require('./jwk/kty/okp/Ed25519PublicJwk.js');
 const require_RsaPublicJwk = require('./jwk/kty/rsa/RsaPublicJwk.js');
-const require_encryption = require('./jwk/alg/encryption.js');
-const require_signing = require('./jwk/alg/signing.js');
-const require_keyDerivation = require('./jwk/alg/keyDerivation.js');
-const require_equals = require('./jwk/equals.js');
 const require_legacy = require('./legacy.js');
 const require_PublicJwk = require('./jwk/PublicJwk.js');
 require('./jwk/index.js');
+const require_KeyManagementModuleConfig = require('./KeyManagementModuleConfig.js');
 const require_KmsOperation = require('./options/KmsOperation.js');
 require('./options/index.js');
 const require_KeyManagementApi = require('./KeyManagementApi.js');
 const require_KeyManagementModule = require('./KeyManagementModule.js');
-const require_KeyManagementKeyExistsError = require('./error/KeyManagementKeyExistsError.js');
 
 //#region src/modules/kms/index.ts
 var kms_exports = /* @__PURE__ */ require_rolldown_runtime.__export({

package/build/modules/kms/index.mjs

@@ -2,34 +2,34 @@
 
 import { __export } from "../../_virtual/rolldown_runtime.mjs";
 import { KeyManagementError } from "./error/KeyManagementError.mjs";
-import { KeyManagementModuleConfig } from "./KeyManagementModuleConfig.mjs";
+import { KeyManagementAlgorithmNotSupportedError } from "./error/KeyManagementAlgorithmNotSupportedError.mjs";
+import { KeyManagementKeyExistsError } from "./error/KeyManagementKeyExistsError.mjs";
 import { KeyManagementKeyNotFoundError } from "./error/KeyManagementKeyNotFoundError.mjs";
-import { KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithms } from "./jwk/jwa.mjs";
 import { getJwkHumanDescription } from "./jwk/humanDescription.mjs";
+import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./jwk/alg/encryption.mjs";
+import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./jwk/alg/keyDerivation.mjs";
+import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./jwk/alg/signing.mjs";
+import { assertSupportedEncryptionAlgorithm, assertSupportedKeyAgreementAlgorithm } from "./jwk/assertSupported.mjs";
+import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./jwk/equals.mjs";
+import { KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithms } from "./jwk/jwa.mjs";
 import { assertKeyAllowsDecrypt, assertKeyAllowsDerive, assertKeyAllowsEncrypt, assertKeyAllowsSign, assertKeyAllowsVerify, keyAllowsDecrypt, keyAllowsEncrypt, keyAllowsSign, keyAllowsVerify } from "./jwk/keyOps.mjs";
 import { assertJwkAsymmetric, isJwkAsymmetric, publicJwkFromPrivateJwk } from "./jwk/knownJwk.mjs";
-import { KeyManagementAlgorithmNotSupportedError } from "./error/KeyManagementAlgorithmNotSupportedError.mjs";
-import { assertSupportedEncryptionAlgorithm, assertSupportedKeyAgreementAlgorithm } from "./jwk/assertSupported.mjs";
+import { derEcSignatureToRaw, rawEcSignatureToDer } from "./jwk/kty/ec/ecSignature.mjs";
 import { P256PublicJwk } from "./jwk/kty/ec/P256PublicJwk.mjs";
 import { P384PublicJwk } from "./jwk/kty/ec/P384PublicJwk.mjs";
 import { P521PublicJwk } from "./jwk/kty/ec/P521PublicJwk.mjs";
 import { Secp256k1PublicJwk } from "./jwk/kty/ec/Secp256k1PublicJwk.mjs";
-import { derEcSignatureToRaw, rawEcSignatureToDer } from "./jwk/kty/ec/ecSignature.mjs";
 import { X25519PublicJwk } from "./jwk/kty/okp/X25519PublicJwk.mjs";
 import { Ed25519PublicJwk } from "./jwk/kty/okp/Ed25519PublicJwk.mjs";
 import { RsaPublicJwk } from "./jwk/kty/rsa/RsaPublicJwk.mjs";
-import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./jwk/alg/encryption.mjs";
-import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./jwk/alg/signing.mjs";
-import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./jwk/alg/keyDerivation.mjs";
-import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./jwk/equals.mjs";
 import { legacyKeyIdFromPublicJwk } from "./legacy.mjs";
 import { PublicJwk } from "./jwk/PublicJwk.mjs";
 import "./jwk/index.mjs";
+import { KeyManagementModuleConfig } from "./KeyManagementModuleConfig.mjs";
 import { getKmsOperationHumanDescription } from "./options/KmsOperation.mjs";
 import "./options/index.mjs";
 import { KeyManagementApi } from "./KeyManagementApi.mjs";
 import { KeyManagementModule } from "./KeyManagementModule.mjs";
-import { KeyManagementKeyExistsError } from "./error/KeyManagementKeyExistsError.mjs";
 
 //#region src/modules/kms/index.ts
 var kms_exports = /* @__PURE__ */ __export({

package/build/modules/kms/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/modules/kms/index.ts"],"sourcesContent":["export * from './KeyManagementApi'\nexport * from './KeyManagementModule'\nexport * from './KeyManagementModuleConfig'\nexport * from './KeyManagementService'\n\nexport * from './options'\n\nexport * from './error/KeyManagementError'\nexport * from './error/KeyManagementKeyExistsError'\nexport * from './error/KeyManagementKeyNotFoundError'\nexport * from './error/KeyManagementAlgorithmNotSupportedError'\n\nexport * from './jwk'\nexport { legacyKeyIdFromPublicJwk } from './legacy'\n"],"mappings":""}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/modules/kms/index.ts"],"sourcesContent":["export * from './error/KeyManagementAlgorithmNotSupportedError'\nexport * from './error/KeyManagementError'\nexport * from './error/KeyManagementKeyExistsError'\nexport * from './error/KeyManagementKeyNotFoundError'\nexport * from './jwk'\nexport * from './KeyManagementApi'\nexport * from './KeyManagementModule'\nexport * from './KeyManagementModuleConfig'\nexport * from './KeyManagementService'\nexport { legacyKeyIdFromPublicJwk } from './legacy'\nexport * from './options'\n"],"mappings":""}

package/build/modules/kms/jwk/PublicJwk.d.mts

@@ -1,5 +1,6 @@
-import { KmsJwkPublicAsymmetric } from "./knownJwk.mjs";
+import { Constructor } from "../../../utils/mixins.mjs";
 import { KnownJwaKeyAgreementAlgorithm, KnownJwaSignatureAlgorithm } from "./jwa.mjs";
+import { KmsJwkPublicAsymmetric } from "./knownJwk.mjs";
 import { P256PublicJwk } from "./kty/ec/P256PublicJwk.mjs";
 import { P384PublicJwk } from "./kty/ec/P384PublicJwk.mjs";
 import { P521PublicJwk } from "./kty/ec/P521PublicJwk.mjs";
@@ -7,7 +8,6 @@ import { Secp256k1PublicJwk } from "./kty/ec/Secp256k1PublicJwk.mjs";
 import { Ed25519PublicJwk } from "./kty/okp/Ed25519PublicJwk.mjs";
 import { X25519PublicJwk } from "./kty/okp/X25519PublicJwk.mjs";
 import { RsaPublicJwk } from "./kty/rsa/RsaPublicJwk.mjs";
-import { Constructor } from "../../../utils/mixins.mjs";
 import { HashName } from "../../../crypto/hashes/Hasher.mjs";
 
 //#region src/modules/kms/jwk/PublicJwk.d.ts
@@ -52,7 +52,7 @@ declare class PublicJwk<Jwk extends SupportedPublicJwk = SupportedPublicJwk> {
   /**
    * SHA-256 jwk thumbprint
    */
-  getJwkThumbprint(hashAlgorithm?: HashName): Uint8Array<ArrayBufferLike>;
+  getJwkThumbprint(hashAlgorithm?: HashName): Uint8Array<ArrayBuffer>;
   /**
    * Get the signature algorithm to use with this jwk. If the jwk has an `alg` field defined
    * it will use that alg, and otherwise fall back to the first supported signature algorithm.
@@ -85,7 +85,6 @@ declare class PublicJwk<Jwk extends SupportedPublicJwk = SupportedPublicJwk> {
    * of the JWK such as keyId, use, etc..
    */
   equals(other: PublicJwk): boolean;
-  private toJSON;
   /**
    * Get human description of a jwk type. This does
    * not include the (public) key material

package/build/modules/kms/jwk/PublicJwk.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicJwk.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/PublicJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;cAuBa,6BAAmB,0BAAA,uBAAA,uBAAA,uBAAA,sBAAA,4BAAA;KASpB,uBAAA,WAAkC;KAClC,kBAAA,GACR,mBACA,gBACA,gBACA,gBACA,eACA,qBACA;KAEC,qBAAqB;;KAA8B,UAAU,IAAI;KAEjE,2BAA2B;;KAAoC,UAAU,IAAI;cAErE,sBAAsB,qBAAqB;EAvB3C,iBAAA,GAAA;EAQZ,QAAA,WAAA,CAAA;SAR+B,WAAA,CAAA,OAAA,EAAA,OAAA,CAAA,EA0BY,SA1BZ,CA0BY,kBA1BZ,CAAA;SAAA,aAAA,CAAA,YAiFU,sBAjFV,CAAA,CAAA,GAAA,EAiFuC,GAjFvC,CAAA,EAkFS,SAlFT,CAmF1B,YAnF0B,CAmFb,kBAnFa,EAmFO,GAnFP,CAAA,SAAA,KAAA,GAmF4B,kBAnF5B,GAmFiD,YAnFjD,CAmF8D,kBAnF9D,EAmFkF,GAnFlF,CAAA,CAAA;QAAA,CAAA;IAAA;IAAA,EAAA;IAAA,UAAA,CAAA,EAAA,OAAA;MAuFuC,GAvFvC,CAAA,KAAA,CAAA;MAAA,4BAAA,CAAA,CAAA,EA8Fa,0BA9Fb,EAAA;MAAA,wCAAA,CAAA,CAAA,EAkGyB,6BAlGzB,EAAA;EAAA;AAShC;AACA;EAA8B,IAAA,GAAA,CAAA,CAAA,EA+FV,GA/FU,CAAA,KAAA,CAAA,CAAA,KAAA,CAAA;;;;MAI1B,KAAA,CAAA,CAAA,EAAA,MAAA;MACA,QAAA,CAAA,CAAA,EAAA,OAAA;MACA,KAAA,CAAA,KAAA,EAAA,MAAA;MACA,WAAA,CAAA,CAAA,EAAA,MAAA;EAAe,IAAA,SAAA,CAAA,CAAA,EAiHO,GAjHP,CAAA,WAAA,CAAA;EAEd;;;MAAmD,mBAAA,CAAA,CAAA,EAsHpB,GAtHoB,CAAA,qBAAA,CAAA;MAAU,QAAA,CAAA,CAAA,EA2H/B,uBA3H+B;;;AAAK;EAEhD,gBAAA,CAAA,aAAA,CAAA,EA+HkB,QA/HlB,CAAA,EA+HsC,UA/HtC,CA+HsC,eA/HtC,CAAA;;;;;;AAEvB;EAAsB,IAAA,kBAAA,CAAA,CAAA,EAAA,IAAA,CAAA,8BAAA,CAAA,CAAA,MAAA,CAAA;SAAa,aAAA,CAAA,kBA6Ja,kBA7Jb,CAAA,WAAA,CAAA,CAAA,CAAA,SAAA,EA6JyD,SA7JzD,CAAA,EA4LM,SA5LN,CA4LgB,kBA5LhB,CA4LmC,kBA5LnC,EA4LuD,SA5LvD,CAAA,CAAA;;;;MA0DO,WAAA,CAAA,CAAA,EAAA,MAAA;;;;SAEpC,eAAA,CAAA,WAAA,EAAA,MAAA,CAAA,EAgJ6C,SAhJ7C,CAgJ6C,gBAhJ7C,GAgJ6C,aAhJ7C,GAgJ6C,aAhJ7C,GAgJ6C,aAhJ7C,GAgJ6C,YAhJ7C,GAgJ6C,kBAhJ7C,GAgJ6C,eAhJ7C,CAAA;;;;KAA2E,aAkKhE,kBAlKgE,EAAA,aAmKhE,kBAnKgE,GAmK3C,IAnK2C,EAAA,aAoKhE,kBApKgE,GAoK3C,IApK2C,CAAA,CAAA,QAAA,EAsKnE,WAtKmE,CAsKvD,IAtKuD,CAAA,EAAA,QAAA,CAAA,EAuKlE,WAvKkE,CAuKtD,IAvKsD,CAAA,EAAA,QAAA,CAAA,EAwKlE,WAxKkE,CAwKtD,IAxKsD,CAAA,CAAA,EAAA,IAAA,IAyKpE,SAzKoE,CAyK1D,IAzK0D,CAAA,GAyKlD,SAzKkD,CAyKxC,IAzKwC,CAAA,GAyKhC,SAzKgC,CAyKtB,IAzKsB,CAAA;;;;;;WAsB7D,CAAA,IAAA,EA8JV,GA9JU,SA8JE,gBA9JF,GAAA,OA8J4B,eA9J5B,GAAA,KAAA,CAAA,EA+Jf,GA/Je,SA+JH,gBA/JG,GA+JgB,SA/JhB,CA+J0B,eA/J1B,CAAA,GAAA,KAAA;;;;;;QA2CyC,CAAA,KAAA,EAmItC,SAnIsC,CAAA,EAAA,OAAA;UAgCb,MAAA;;;;;MA+BP,uBAAA,CAAA,CAAA,EAAA,MAAA;SAgBU,4CAAA,CAAA,GAAA,EAsEe,0BAtEf,CAAA,EAsE4C,uBAtE5C"}
+{"version":3,"file":"PublicJwk.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/PublicJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;cAuBa,6BAAmB,0BAAA,uBAAA,uBAAA,uBAAA,sBAAA,4BAAA;KASpB,uBAAA,WAAkC;KAClC,kBAAA,GACR,mBACA,gBACA,gBACA,gBACA,eACA,qBACA;KAEC,qBAAqB;;KAA8B,UAAU,IAAI;KAEjE,2BAA2B;;KAAoC,UAAU,IAAI;cAErE,sBAAsB,qBAAqB;EAvB3C,iBAAA,GAAA;EAQZ,QAAA,WAAA,CAAA;SAR+B,WAAA,CAAA,OAAA,EAAA,OAAA,CAAA,EA0BY,SA1BZ,CA0BY,kBA1BZ,CAAA;SAAA,aAAA,CAAA,YAiFU,sBAjFV,CAAA,CAAA,GAAA,EAiFuC,GAjFvC,CAAA,EAkFS,SAlFT,CAmF1B,YAnF0B,CAmFb,kBAnFa,EAmFO,GAnFP,CAAA,SAAA,KAAA,GAmF4B,kBAnF5B,GAmFiD,YAnFjD,CAmF8D,kBAnF9D,EAmFkF,GAnFlF,CAAA,CAAA;QAAA,CAAA;IAAA;IAAA,EAAA;IAAA,UAAA,CAAA,EAAA,OAAA;MAuFuC,GAvFvC,CAAA,KAAA,CAAA;MAAA,4BAAA,CAAA,CAAA,EA+Fa,0BA/Fb,EAAA;MAAA,wCAAA,CAAA,CAAA,EAmGyB,6BAnGzB,EAAA;EAAA;AAShC;AACA;EAA8B,IAAA,GAAA,CAAA,CAAA,EAgGV,GAhGU,CAAA,KAAA,CAAA,CAAA,KAAA,CAAA;;;;MAI1B,KAAA,CAAA,CAAA,EAAA,MAAA;MACA,QAAA,CAAA,CAAA,EAAA,OAAA;MACA,KAAA,CAAA,KAAA,EAAA,MAAA;MACA,WAAA,CAAA,CAAA,EAAA,MAAA;EAAe,IAAA,SAAA,CAAA,CAAA,EAkHO,GAlHP,CAAA,WAAA,CAAA;EAEd;;;MAAmD,mBAAA,CAAA,CAAA,EAuHpB,GAvHoB,CAAA,qBAAA,CAAA;MAAU,QAAA,CAAA,CAAA,EA4H/B,uBA5H+B;;;AAAK;EAEhD,gBAAA,CAAA,aAAA,CAAA,EAgIkB,QAhIlB,CAAA,EAgIsC,UAhItC,CAgIsC,WAhItC,CAAA;;;;;;AAEvB;EAAsB,IAAA,kBAAA,CAAA,CAAA,EAAA,IAAA,CAAA,8BAAA,CAAA,CAAA,MAAA,CAAA;SAAa,aAAA,CAAA,kBA8Ja,kBA9Jb,CAAA,WAAA,CAAA,CAAA,CAAA,SAAA,EA8JyD,SA9JzD,CAAA,EA6LM,SA7LN,CA6LgB,kBA7LhB,CA6LmC,kBA7LnC,EA6LuD,SA7LvD,CAAA,CAAA;;;;MA0DO,WAAA,CAAA,CAAA,EAAA,MAAA;;;;SAEpC,eAAA,CAAA,WAAA,EAAA,MAAA,CAAA,EAiJ6C,SAjJ7C,CAiJ6C,gBAjJ7C,GAiJ6C,aAjJ7C,GAiJ6C,aAjJ7C,GAiJ6C,aAjJ7C,GAiJ6C,YAjJ7C,GAiJ6C,kBAjJ7C,GAiJ6C,eAjJ7C,CAAA;;;;KAA2E,aAmKhE,kBAnKgE,EAAA,aAoKhE,kBApKgE,GAoK3C,IApK2C,EAAA,aAqKhE,kBArKgE,GAqK3C,IArK2C,CAAA,CAAA,QAAA,EAuKnE,WAvKmE,CAuKvD,IAvKuD,CAAA,EAAA,QAAA,CAAA,EAwKlE,WAxKkE,CAwKtD,IAxKsD,CAAA,EAAA,QAAA,CAAA,EAyKlE,WAzKkE,CAyKtD,IAzKsD,CAAA,CAAA,EAAA,IAAA,IA0KpE,SA1KoE,CA0K1D,IA1K0D,CAAA,GA0KlD,SA1KkD,CA0KxC,IA1KwC,CAAA,GA0KhC,SA1KgC,CA0KtB,IA1KsB,CAAA;;;;;;WAuB7D,CAAA,IAAA,EA8JV,GA9JU,SA8JE,gBA9JF,GAAA,OA8J4B,eA9J5B,GAAA,KAAA,CAAA,EA+Jf,GA/Je,SA+JH,gBA/JG,GA+JgB,SA/JhB,CA+J0B,eA/J1B,CAAA,GAAA,KAAA;;;;;;QA2CyC,CAAA,KAAA,EAmItC,SAnIsC,CAAA,EAAA,OAAA;;;;;MA+DV,uBAAA,CAAA,CAAA,EAAA,MAAA;SAAV,4CAAA,CAAA,GAAA,EAgFyB,0BAhFzB,CAAA,EAgFsD,uBAhFtD"}

package/build/modules/kms/jwk/PublicJwk.d.ts

@@ -1,5 +1,6 @@
-import { KmsJwkPublicAsymmetric } from "./knownJwk.js";
+import { Constructor } from "../../../utils/mixins.js";
 import { KnownJwaKeyAgreementAlgorithm, KnownJwaSignatureAlgorithm } from "./jwa.js";
+import { KmsJwkPublicAsymmetric } from "./knownJwk.js";
 import { P256PublicJwk } from "./kty/ec/P256PublicJwk.js";
 import { P384PublicJwk } from "./kty/ec/P384PublicJwk.js";
 import { P521PublicJwk } from "./kty/ec/P521PublicJwk.js";
@@ -7,7 +8,6 @@ import { Secp256k1PublicJwk } from "./kty/ec/Secp256k1PublicJwk.js";
 import { Ed25519PublicJwk } from "./kty/okp/Ed25519PublicJwk.js";
 import { X25519PublicJwk } from "./kty/okp/X25519PublicJwk.js";
 import { RsaPublicJwk } from "./kty/rsa/RsaPublicJwk.js";
-import { Constructor } from "../../../utils/mixins.js";
 import { HashName } from "../../../crypto/hashes/Hasher.js";
 
 //#region src/modules/kms/jwk/PublicJwk.d.ts
@@ -52,7 +52,7 @@ declare class PublicJwk<Jwk extends SupportedPublicJwk = SupportedPublicJwk> {
   /**
    * SHA-256 jwk thumbprint
    */
-  getJwkThumbprint(hashAlgorithm?: HashName): Uint8Array<ArrayBufferLike>;
+  getJwkThumbprint(hashAlgorithm?: HashName): Uint8Array<ArrayBuffer>;
   /**
    * Get the signature algorithm to use with this jwk. If the jwk has an `alg` field defined
    * it will use that alg, and otherwise fall back to the first supported signature algorithm.
@@ -85,7 +85,6 @@ declare class PublicJwk<Jwk extends SupportedPublicJwk = SupportedPublicJwk> {
    * of the JWK such as keyId, use, etc..
    */
   equals(other: PublicJwk): boolean;
-  private toJSON;
   /**
    * Get human description of a jwk type. This does
    * not include the (public) key material

package/build/modules/kms/jwk/PublicJwk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicJwk.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/PublicJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;cAuBa,6BAAmB,0BAAA,uBAAA,uBAAA,uBAAA,sBAAA,4BAAA;KASpB,uBAAA,WAAkC;KAClC,kBAAA,GACR,mBACA,gBACA,gBACA,gBACA,eACA,qBACA;KAEC,qBAAqB;;KAA8B,UAAU,IAAI;KAEjE,2BAA2B;;AArBhC,CAAA,GAAa,CAqBuD,CArBvD,SAqBiE,CArBjE,GAqBqE,CArBrE,GAAA,KAQZ,CAAA,GAAA,KAAA;AAAA,cAeY,SAfZ,CAAA,YAekC,kBAflC,GAeuD,kBAfvD,CAAA,CAAA;mBAR+B,GAAA;UAAA,WAAA,CAAA;SAAA,WAAA,CAAA,OAAA,EAAA,OAAA,CAAA,EA0BY,SA1BZ,CA0BY,kBA1BZ,CAAA;SAAA,aAAA,CAAA,YAiFU,sBAjFV,CAAA,CAAA,GAAA,EAiFuC,GAjFvC,CAAA,EAkFS,SAlFT,CAmF1B,YAnF0B,CAmFb,kBAnFa,EAmFO,GAnFP,CAAA,SAAA,KAAA,GAmF4B,kBAnF5B,GAmFiD,YAnFjD,CAmF8D,kBAnF9D,EAmFkF,GAnFlF,CAAA,CAAA;QAAA,CAAA;IAAA;IAAA,EAAA;IAAA,UAAA,CAAA,EAAA,OAAA;MAuFuC,GAvFvC,CAAA,KAAA,CAAA;EAAA,IAAA,4BAAA,CAAA,CAAA,EA8Fa,0BA9Fb,EAAA;EASpB,IAAA,wCAAkC,CAAA,CAAA,EAyFW,6BAzFQ,EAAA;EACrD;;;MAER,GAAA,CAAA,CAAA,EA6FgB,GA7FhB,CAAA,KAAA,CAAA,CAAA,KAAA,CAAA;;;;MAIA,KAAA,CAAA,CAAA,EAAA,MAAA;MACA,QAAA,CAAA,CAAA,EAAA,OAAA;EAAe,IAAA,KAAA,CAAA,KAAA,EAAA,MAAA;EAEd,IAAA,WAAY,CAAA,CAAA,EAAA,MAAA;EAAA,IAAA,SAAA,CAAA,CAAA,EA+GS,GA/GT,CAAA,WAAA,CAAA;;;;MAAqD,mBAAA,CAAA,CAAA,EAsHlC,GAtHkC,CAAA,qBAAA,CAAA;EAAC,IAAA,QAAA,CAAA,CAAA,EA2HpC,uBA3HoC;EAElE;;;kBAA+D,CAAA,aAAA,CAAA,EA+H3B,QA/H2B,CAAA,EA+HP,UA/HO,CA+HP,eA/HO,CAAA;;;;AAEpE;;;MAAwD,kBAAA,CAAA,CAAA,EAAA,IAAA,CAAA,8BAAA,CAAA,CAAA,MAAA,CAAA;SAGZ,aAAA,CAAA,kBA0JI,kBA1JJ,CAAA,WAAA,CAAA,CAAA,CAAA,SAAA,EA0JgD,SA1JhD,CAAA,EAyLH,SAzLG,CAyLO,kBAzLP,CAyL0B,kBAzL1B,EAyL8C,SAzL9C,CAAA,CAAA;;;;MAyDzB,WAAA,CAAA,CAAA,EAAA,MAAA;;;;SAA2E,eAAA,CAAA,WAAA,EAAA,MAAA,CAAA,EAgJ3C,SAhJ2C,CAgJ3C,gBAhJ2C,GAgJ3C,aAhJ2C,GAgJ3C,aAhJ2C,GAgJ3C,aAhJ2C,GAgJ3C,YAhJ2C,GAgJ3C,kBAhJ2C,GAgJ3C,eAhJ2C,CAAA;;;;KAI5E,aA8JD,kBA9JC,EAAA,aA+JD,kBA/JC,GA+JoB,IA/JpB,EAAA,aAgKD,kBAhKC,GAgKoB,IAhKpB,CAAA,CAAA,QAAA,EAkKJ,WAlKI,CAkKQ,IAlKR,CAAA,EAAA,QAAA,CAAA,EAmKH,WAnKG,CAmKS,IAnKT,CAAA,EAAA,QAAA,CAAA,EAoKH,WApKG,CAoKS,IApKT,CAAA,CAAA,EAAA,IAAA,IAqKL,SArKK,CAqKK,IArKL,CAAA,GAqKa,SArKb,CAqKuB,IArKvB,CAAA,GAqK+B,SArK/B,CAqKyC,IArKzC,CAAA;;;;;;WAkDkB,CAAA,IAAA,EA8H1B,GA9H0B,SA8Hd,gBA9Hc,GAAA,OA8HY,eA9HZ,GAAA,KAAA,CAAA,EA+H/B,GA/H+B,SA+HnB,gBA/HmB,GA+HA,SA/HA,CA+HU,eA/HV,CAAA,GAAA,KAAA;;;;;;QA2CwD,CAAA,KAAA,EAmGrE,SAnGqE,CAAA,EAAA,OAAA;UA+BtB,MAAA;;;;;MAgBnB,uBAAA,CAAA,CAAA,EAAA,MAAA;SAAA,4CAAA,CAAA,GAAA,EAsEe,0BAtEf,CAAA,EAsE4C,uBAtE5C"}
+{"version":3,"file":"PublicJwk.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/PublicJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;cAuBa,6BAAmB,0BAAA,uBAAA,uBAAA,uBAAA,sBAAA,4BAAA;KASpB,uBAAA,WAAkC;KAClC,kBAAA,GACR,mBACA,gBACA,gBACA,gBACA,eACA,qBACA;KAEC,qBAAqB;;KAA8B,UAAU,IAAI;KAEjE,2BAA2B;;AArBhC,CAAA,GAAa,CAqBuD,CArBvD,SAqBiE,CArBjE,GAqBqE,CArBrE,GAAA,KAQZ,CAAA,GAAA,KAAA;AAAA,cAeY,SAfZ,CAAA,YAekC,kBAflC,GAeuD,kBAfvD,CAAA,CAAA;mBAR+B,GAAA;UAAA,WAAA,CAAA;SAAA,WAAA,CAAA,OAAA,EAAA,OAAA,CAAA,EA0BY,SA1BZ,CA0BY,kBA1BZ,CAAA;SAAA,aAAA,CAAA,YAiFU,sBAjFV,CAAA,CAAA,GAAA,EAiFuC,GAjFvC,CAAA,EAkFS,SAlFT,CAmF1B,YAnF0B,CAmFb,kBAnFa,EAmFO,GAnFP,CAAA,SAAA,KAAA,GAmF4B,kBAnF5B,GAmFiD,YAnFjD,CAmF8D,kBAnF9D,EAmFkF,GAnFlF,CAAA,CAAA;QAAA,CAAA;IAAA;IAAA,EAAA;IAAA,UAAA,CAAA,EAAA,OAAA;MAuFuC,GAvFvC,CAAA,KAAA,CAAA;EAAA,IAAA,4BAAA,CAAA,CAAA,EA+Fa,0BA/Fb,EAAA;EASpB,IAAA,wCAAkC,CAAA,CAAA,EA0FW,6BA1FQ,EAAA;EACrD;;;MAER,GAAA,CAAA,CAAA,EA8FgB,GA9FhB,CAAA,KAAA,CAAA,CAAA,KAAA,CAAA;;;;MAIA,KAAA,CAAA,CAAA,EAAA,MAAA;MACA,QAAA,CAAA,CAAA,EAAA,OAAA;EAAe,IAAA,KAAA,CAAA,KAAA,EAAA,MAAA;EAEd,IAAA,WAAY,CAAA,CAAA,EAAA,MAAA;EAAA,IAAA,SAAA,CAAA,CAAA,EAgHS,GAhHT,CAAA,WAAA,CAAA;;;;MAAqD,mBAAA,CAAA,CAAA,EAuHlC,GAvHkC,CAAA,qBAAA,CAAA;EAAC,IAAA,QAAA,CAAA,CAAA,EA4HpC,uBA5HoC;EAElE;;;kBAA+D,CAAA,aAAA,CAAA,EAgI3B,QAhI2B,CAAA,EAgIP,UAhIO,CAgIP,WAhIO,CAAA;;;;AAEpE;;;MAAwD,kBAAA,CAAA,CAAA,EAAA,IAAA,CAAA,8BAAA,CAAA,CAAA,MAAA,CAAA;SAGZ,aAAA,CAAA,kBA2JI,kBA3JJ,CAAA,WAAA,CAAA,CAAA,CAAA,SAAA,EA2JgD,SA3JhD,CAAA,EA0LH,SA1LG,CA0LO,kBA1LP,CA0L0B,kBA1L1B,EA0L8C,SA1L9C,CAAA,CAAA;;;;MAyDzB,WAAA,CAAA,CAAA,EAAA,MAAA;;;;SAA2E,eAAA,CAAA,WAAA,EAAA,MAAA,CAAA,EAiJ3C,SAjJ2C,CAiJ3C,gBAjJ2C,GAiJ3C,aAjJ2C,GAiJ3C,aAjJ2C,GAiJ3C,aAjJ2C,GAiJ3C,YAjJ2C,GAiJ3C,kBAjJ2C,GAiJ3C,eAjJ2C,CAAA;;;;KAI5E,aA+JD,kBA/JC,EAAA,aAgKD,kBAhKC,GAgKoB,IAhKpB,EAAA,aAiKD,kBAjKC,GAiKoB,IAjKpB,CAAA,CAAA,QAAA,EAmKJ,WAnKI,CAmKQ,IAnKR,CAAA,EAAA,QAAA,CAAA,EAoKH,WApKG,CAoKS,IApKT,CAAA,EAAA,QAAA,CAAA,EAqKH,WArKG,CAqKS,IArKT,CAAA,CAAA,EAAA,IAAA,IAsKL,SAtKK,CAsKK,IAtKL,CAAA,GAsKa,SAtKb,CAsKuB,IAtKvB,CAAA,GAsK+B,SAtK/B,CAsKyC,IAtKzC,CAAA;;;;;;WAmDkB,CAAA,IAAA,EA8H1B,GA9H0B,SA8Hd,gBA9Hc,GAAA,OA8HY,eA9HZ,GAAA,KAAA,CAAA,EA+H/B,GA/H+B,SA+HnB,gBA/HmB,GA+HA,SA/HA,CA+HU,eA/HV,CAAA,GAAA,KAAA;;;;;;QA2CwD,CAAA,KAAA,EAmGrE,SAnGqE,CAAA,EAAA,OAAA;;;;;MA+CzC,uBAAA,CAAA,CAAA,EAAA,MAAA;SAAA,4CAAA,CAAA,GAAA,EAgEe,0BAhEf,CAAA,EAgE4C,uBAhE5C"}

package/build/modules/kms/jwk/PublicJwk.js

@@ -2,13 +2,14 @@
 
 const require_CredoError = require('../../../error/CredoError.js');
 require('../../../error/index.js');
-const require_zod = require('../../../utils/zod.js');
 const require_KeyManagementError = require('../error/KeyManagementError.js');
 const require_TypedArrayEncoder = require('../../../utils/TypedArrayEncoder.js');
 const require_MultiBaseEncoder = require('../../../utils/MultiBaseEncoder.js');
 const require_VarintEncoder = require('../../../utils/VarintEncoder.js');
 require('../../../utils/index.js');
 const require_humanDescription = require('./humanDescription.js');
+const require_equals = require('./equals.js');
+const require_zod = require('../../../utils/zod.js');
 const require_knownJwk = require('./knownJwk.js');
 const require_P256PublicJwk = require('./kty/ec/P256PublicJwk.js');
 const require_P384PublicJwk = require('./kty/ec/P384PublicJwk.js');
@@ -18,7 +19,6 @@ const require_X25519PublicJwk = require('./kty/okp/X25519PublicJwk.js');
 const require_Ed25519PublicJwk = require('./kty/okp/Ed25519PublicJwk.js');
 const require_RsaPublicJwk = require('./kty/rsa/RsaPublicJwk.js');
 require('./kty/index.js');
-const require_equals = require('./equals.js');
 const require_legacy = require('../legacy.js');
 const require_jwkThumbprint = require('./jwkThumbprint.js');
 
@@ -200,9 +200,6 @@ var PublicJwk = class PublicJwk {
 	equals(other) {
 		return require_equals.assymetricPublicJwkMatches(this.toJson(), other.toJson());
 	}
-	toJSON() {
-		return { jwk: this.jwk };
-	}
 	/**
 	* Get human description of a jwk type. This does
 	* not include the (public) key material

package/build/modules/kms/jwk/PublicJwk.mjs

@@ -2,13 +2,14 @@
 
 import { CredoError } from "../../../error/CredoError.mjs";
 import "../../../error/index.mjs";
-import { zParseWithErrorHandling } from "../../../utils/zod.mjs";
 import { KeyManagementError } from "../error/KeyManagementError.mjs";
 import { TypedArrayEncoder } from "../../../utils/TypedArrayEncoder.mjs";
 import { MultiBaseEncoder } from "../../../utils/MultiBaseEncoder.mjs";
 import { VarintEncoder } from "../../../utils/VarintEncoder.mjs";
 import "../../../utils/index.mjs";
 import { getJwkHumanDescription } from "./humanDescription.mjs";
+import { assymetricPublicJwkMatches } from "./equals.mjs";
+import { zParseWithErrorHandling } from "../../../utils/zod.mjs";
 import { assertJwkAsymmetric, publicJwkFromPrivateJwk, zKmsJwkPublic } from "./knownJwk.mjs";
 import { P256PublicJwk } from "./kty/ec/P256PublicJwk.mjs";
 import { P384PublicJwk } from "./kty/ec/P384PublicJwk.mjs";
@@ -18,7 +19,6 @@ import { X25519PublicJwk } from "./kty/okp/X25519PublicJwk.mjs";
 import { Ed25519PublicJwk } from "./kty/okp/Ed25519PublicJwk.mjs";
 import { RsaPublicJwk } from "./kty/rsa/RsaPublicJwk.mjs";
 import "./kty/index.mjs";
-import { assymetricPublicJwkMatches } from "./equals.mjs";
 import { legacyKeyIdFromPublicJwk } from "../legacy.mjs";
 import { calculateJwkThumbprint } from "./jwkThumbprint.mjs";
 
@@ -200,9 +200,6 @@ var PublicJwk = class PublicJwk {
 	equals(other) {
 		return assymetricPublicJwkMatches(this.toJson(), other.toJson());
 	}
-	toJSON() {
-		return { jwk: this.jwk };
-	}
 	/**
 	* Get human description of a jwk type. This does
 	* not include the (public) key material

package/build/modules/kms/jwk/PublicJwk.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"PublicJwk.mjs","names":["jwk: Jwk","jwkInstance: SupportedPublicJwk"],"sources":["../../../../src/modules/kms/jwk/PublicJwk.ts"],"sourcesContent":["import type { HashName } from '../../../crypto'\nimport { CredoError } from '../../../error'\nimport { MultiBaseEncoder, TypedArrayEncoder, VarintEncoder } from '../../../utils'\nimport type { Constructor } from '../../../utils/mixins'\nimport { zParseWithErrorHandling } from '../../../utils/zod'\nimport { KeyManagementError } from '../error/KeyManagementError'\nimport { legacyKeyIdFromPublicJwk } from '../legacy'\nimport { assymetricPublicJwkMatches } from './equals'\nimport { getJwkHumanDescription } from './humanDescription'\nimport type { KnownJwaKeyAgreementAlgorithm, KnownJwaSignatureAlgorithm } from './jwa'\nimport { calculateJwkThumbprint } from './jwkThumbprint'\nimport { type KmsJwkPublicAsymmetric, assertJwkAsymmetric, publicJwkFromPrivateJwk, zKmsJwkPublic } from './knownJwk'\n\nimport {\n  Ed25519PublicJwk,\n  P256PublicJwk,\n  P384PublicJwk,\n  P521PublicJwk,\n  RsaPublicJwk,\n  Secp256k1PublicJwk,\n  X25519PublicJwk,\n} from './kty'\n\nexport const SupportedPublicJwks = [\n  Ed25519PublicJwk,\n  P256PublicJwk,\n  P384PublicJwk,\n  P521PublicJwk,\n  RsaPublicJwk,\n  Secp256k1PublicJwk,\n  X25519PublicJwk,\n]\nexport type SupportedPublicJwkClass = (typeof SupportedPublicJwks)[number]\nexport type SupportedPublicJwk =\n  | Ed25519PublicJwk\n  | P256PublicJwk\n  | P384PublicJwk\n  | P521PublicJwk\n  | RsaPublicJwk\n  | Secp256k1PublicJwk\n  | X25519PublicJwk\n\ntype ExtractByJwk<T, K> = T extends { jwk: infer J } ? (K extends J ? T : never) : never\n\ntype ExtractByPublicKey<T, K> = T extends { publicKey: infer J } ? (K extends J ? T : never) : never\n\nexport class PublicJwk<Jwk extends SupportedPublicJwk = SupportedPublicJwk> {\n  private constructor(private readonly jwk: Jwk) {}\n\n  public static fromUnknown(jwkJson: unknown) {\n    // We remove any private properties if they are present\n    const publicJwk = publicJwkFromPrivateJwk(zParseWithErrorHandling(zKmsJwkPublic, jwkJson, 'jwk is not a valid jwk'))\n    assertJwkAsymmetric(publicJwk)\n\n    let jwkInstance: SupportedPublicJwk\n    if (publicJwk.kty === 'RSA') {\n      jwkInstance = new RsaPublicJwk(publicJwk)\n    } else if (publicJwk.kty === 'EC') {\n      if (publicJwk.crv === 'P-256') {\n        jwkInstance = new P256PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else if (publicJwk.crv === 'P-384') {\n        jwkInstance = new P384PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else if (publicJwk.crv === 'P-521') {\n        jwkInstance = new P521PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else if (publicJwk.crv === 'secp256k1') {\n        jwkInstance = new Secp256k1PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else {\n        throw new KeyManagementError(\n          `Unsupported kty '${publicJwk.kty}' with crv '${publicJwk.crv}' for creating jwk instance`\n        )\n      }\n    } else if (publicJwk.crv === 'Ed25519') {\n      jwkInstance = new Ed25519PublicJwk({\n        ...publicJwk,\n        crv: publicJwk.crv,\n      })\n    } else if (publicJwk.crv === 'X25519') {\n      jwkInstance = new X25519PublicJwk({\n        ...publicJwk,\n        crv: publicJwk.crv,\n      })\n    } else {\n      throw new KeyManagementError(`Unsupported kty '${publicJwk.kty}' for creating jwk instance`)\n    }\n\n    return new PublicJwk(jwkInstance)\n  }\n\n  // FIXME: all Jwk combinations should be separate types.\n  // so not kty: EC, and crv: P-256 | P-384\n  // but: kty: EC, and crv: P-256 | kty: EC, and crv: P-384\n  // As the first appraoch messes with TypeScript's type inference\n  public static fromPublicJwk<Jwk extends KmsJwkPublicAsymmetric>(jwk: Jwk) {\n    return PublicJwk.fromUnknown(jwk) as PublicJwk<\n      ExtractByJwk<SupportedPublicJwk, Jwk> extends never ? SupportedPublicJwk : ExtractByJwk<SupportedPublicJwk, Jwk>\n    >\n  }\n\n  public toJson({ includeKid = true }: { includeKid?: boolean } = {}): Jwk['jwk'] {\n    if (includeKid) return this.jwk.jwk\n\n    const { kid, ...jwk } = this.jwk.jwk\n    return jwk\n  }\n\n  public get supportedSignatureAlgorithms(): KnownJwaSignatureAlgorithm[] {\n    return this.jwk.supportedSignatureAlgorithms ?? []\n  }\n\n  public get supportdEncryptionKeyAgreementAlgorithms(): KnownJwaKeyAgreementAlgorithm[] {\n    return this.jwk.supportdEncryptionKeyAgreementAlgorithms ?? []\n  }\n\n  /**\n   * key type as defined in [JWA Specification](https://tools.ietf.org/html/rfc7518#section-6.1)\n   */\n  public get kty(): Jwk['jwk']['kty'] {\n    return this.jwk.jwk.kty\n  }\n\n  /**\n   * Get the key id for a public jwk. If the public jwk does not have\n   */\n  public get keyId(): string {\n    if (this.jwk.jwk.kid) return this.jwk.jwk.kid\n\n    throw new KeyManagementError('Unable to determine keyId for jwk')\n  }\n\n  public get hasKeyId(): boolean {\n    return this.jwk.jwk.kid !== undefined\n  }\n\n  public set keyId(keyId: string) {\n    this.jwk.jwk.kid = keyId\n  }\n\n  public get legacyKeyId() {\n    return legacyKeyIdFromPublicJwk(this)\n  }\n\n  public get publicKey(): Jwk['publicKey'] {\n    return this.jwk.publicKey\n  }\n\n  /**\n   * Return the compressed public key. If the key type does not support compressed public keys, it will return null\n   */\n  public get compressedPublicKey(): Jwk['compressedPublicKey'] {\n    return this.jwk.compressedPublicKey\n  }\n\n  public get JwkClass() {\n    return this.jwk.constructor as SupportedPublicJwkClass\n  }\n\n  /**\n   * SHA-256 jwk thumbprint\n   */\n  public getJwkThumbprint(hashAlgorithm: HashName = 'sha-256') {\n    return calculateJwkThumbprint({\n      jwk: this.jwk.jwk,\n      hashAlgorithm: hashAlgorithm,\n    })\n  }\n\n  /**\n   * Get the signature algorithm to use with this jwk. If the jwk has an `alg` field defined\n   * it will use that alg, and otherwise fall back to the first supported signature algorithm.\n   *\n   * If no algorithm is supported it will throw an error\n   */\n  public get signatureAlgorithm() {\n    if (this.jwk.jwk.alg) {\n      if (!this.supportedSignatureAlgorithms.includes(this.jwk.jwk.alg as KnownJwaSignatureAlgorithm)) {\n        throw new KeyManagementError(\n          `${getJwkHumanDescription(this.jwk.jwk)} defines alg '${this.jwk.jwk.alg}' but this alg is not supported.`\n        )\n      }\n\n      return this.jwk.jwk.alg as this['supportedSignatureAlgorithms'][number]\n    }\n\n    const alg = this.supportedSignatureAlgorithms[0]\n    if (!alg) {\n      throw new KeyManagementError(`${getJwkHumanDescription(this.jwk.jwk)} has no supported signature algorithms`)\n    }\n\n    return alg as this['supportedSignatureAlgorithms'][number]\n  }\n\n  public static fromPublicKey<Supported extends SupportedPublicJwk['publicKey']>(publicKey: Supported) {\n    let jwkInstance: SupportedPublicJwk\n\n    if (publicKey.kty === 'RSA') {\n      jwkInstance = RsaPublicJwk.fromPublicKey(publicKey)\n    } else if (publicKey.kty === 'EC') {\n      if (publicKey.crv === 'P-256') {\n        jwkInstance = P256PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else if (publicKey.crv === 'P-384') {\n        jwkInstance = P384PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else if (publicKey.crv === 'P-521') {\n        jwkInstance = P521PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else if (publicKey.crv === 'secp256k1') {\n        jwkInstance = Secp256k1PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else {\n        throw new KeyManagementError(\n          // @ts-expect-error\n          `Unsupported kty '${publicKey.kty}' with crv '${publicKey.crv}' for creating jwk instance based on public key bytes`\n        )\n      }\n    } else if (publicKey.crv === 'X25519') {\n      jwkInstance = X25519PublicJwk.fromPublicKey(publicKey.publicKey)\n    } else if (publicKey.crv === 'Ed25519') {\n      jwkInstance = Ed25519PublicJwk.fromPublicKey(publicKey.publicKey)\n    } else {\n      throw new KeyManagementError(\n        // @ts-expect-error\n        `Unsupported kty '${publicKey.kty}' for creating jwk instance based on public key bytes`\n      )\n    }\n\n    return new PublicJwk(jwkInstance) as PublicJwk<ExtractByPublicKey<SupportedPublicJwk, Supported>>\n  }\n\n  /**\n   * Returns the jwk encoded a Base58 multibase encoded multicodec key\n   */\n  public get fingerprint() {\n    const prefixBytes = VarintEncoder.encode(this.jwk.multicodecPrefix)\n    const prefixedPublicKey = new Uint8Array([...prefixBytes, ...this.jwk.multicodec])\n\n    return `z${TypedArrayEncoder.toBase58(prefixedPublicKey)}`\n  }\n\n  /**\n   * Create a jwk instance based on a Base58 multibase encoded multicodec key\n   */\n  public static fromFingerprint(fingerprint: string) {\n    const { data } = MultiBaseEncoder.decode(fingerprint)\n    const [code, byteLength] = VarintEncoder.decode(data)\n    const publicKey = data.slice(byteLength)\n\n    const PublicJwkClass = SupportedPublicJwks.find((JwkClass) => JwkClass.multicodecPrefix === code)\n    if (!PublicJwkClass) {\n      throw new KeyManagementError(`Unsupported multicodec public key with prefix '${code}'`)\n    }\n\n    const jwk = PublicJwkClass.fromMulticodec(publicKey)\n    return new PublicJwk(jwk)\n  }\n\n  /**\n   * Check whether this PublicJwk instance is of a specific type\n   */\n  public is<\n    Jwk1 extends SupportedPublicJwk,\n    Jwk2 extends SupportedPublicJwk = Jwk1,\n    Jwk3 extends SupportedPublicJwk = Jwk1,\n  >(\n    jwkType1: Constructor<Jwk1>,\n    jwkType2?: Constructor<Jwk2>,\n    jwkType3?: Constructor<Jwk3>\n  ): this is PublicJwk<Jwk1> | PublicJwk<Jwk2> | PublicJwk<Jwk3> {\n    const types = [jwkType1, jwkType2, jwkType3].filter(Boolean) as Constructor<SupportedPublicJwk>[]\n    return types.some((type) => this.jwk.constructor === type)\n  }\n\n  /**\n   * Convert the PublicJwk to another type.\n   *\n   * NOTE: only supportedf or Ed25519 to X25519 at the moment\n   */\n  public convertTo(\n    type: Jwk extends Ed25519PublicJwk ? typeof X25519PublicJwk : never\n  ): Jwk extends Ed25519PublicJwk ? PublicJwk<X25519PublicJwk> : never {\n    if (!this.is(Ed25519PublicJwk) || type !== X25519PublicJwk) {\n      throw new KeyManagementError('Unsupported key conversion. Only Ed25519 to X25519 is supported.')\n    }\n\n    return PublicJwk.fromPublicJwk(this.jwk.toX25519PublicJwk()) as Jwk extends Ed25519PublicJwk\n      ? PublicJwk<X25519PublicJwk>\n      : never\n  }\n\n  /**\n   * Check whether this jwk instance is the same as another jwk instance.\n   * It does this by comparing the key types and public keys, not other fields\n   * of the JWK such as keyId, use, etc..\n   */\n  public equals(other: PublicJwk) {\n    return assymetricPublicJwkMatches(this.toJson(), other.toJson())\n  }\n\n  private toJSON() {\n    return {\n      jwk: this.jwk,\n    }\n  }\n\n  /**\n   * Get human description of a jwk type. This does\n   * not include the (public) key material\n   */\n  public get jwkTypehumanDescription() {\n    return getJwkHumanDescription(this.toJson())\n  }\n\n  public static supportedPublicJwkClassForSignatureAlgorithm(alg: KnownJwaSignatureAlgorithm): SupportedPublicJwkClass {\n    const supportedPublicJwkClass = SupportedPublicJwks.find((JwkClass) =>\n      JwkClass.supportedSignatureAlgorithms.includes(alg)\n    )\n\n    if (!supportedPublicJwkClass) {\n      throw new CredoError(`Could not determine supported public jwk class for alg '${alg}'`)\n    }\n\n    return supportedPublicJwkClass\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAeD,IAAa,YAAb,MAAa,UAA+D;CAC1E,AAAQ,YAAY,AAAiBA,KAAU;EAAV;;CAErC,OAAc,YAAY,SAAkB;EAE1C,MAAM,YAAY,wBAAwB,wBAAwB,eAAe,SAAS,yBAAyB,CAAC;AACpH,sBAAoB,UAAU;EAE9B,IAAIC;AACJ,MAAI,UAAU,QAAQ,MACpB,eAAc,IAAI,aAAa,UAAU;WAChC,UAAU,QAAQ,KAC3B,KAAI,UAAU,QAAQ,QACpB,eAAc,IAAI,cAAc;GAC9B,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,QAC3B,eAAc,IAAI,cAAc;GAC9B,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,QAC3B,eAAc,IAAI,cAAc;GAC9B,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,YAC3B,eAAc,IAAI,mBAAmB;GACnC,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;MAEF,OAAM,IAAI,mBACR,oBAAoB,UAAU,IAAI,cAAc,UAAU,IAAI,6BAC/D;WAEM,UAAU,QAAQ,UAC3B,eAAc,IAAI,iBAAiB;GACjC,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,SAC3B,eAAc,IAAI,gBAAgB;GAChC,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;MAEF,OAAM,IAAI,mBAAmB,oBAAoB,UAAU,IAAI,6BAA6B;AAG9F,SAAO,IAAI,UAAU,YAAY;;CAOnC,OAAc,cAAkD,KAAU;AACxE,SAAO,UAAU,YAAY,IAAI;;CAKnC,AAAO,OAAO,EAAE,aAAa,SAAmC,EAAE,EAAc;AAC9E,MAAI,WAAY,QAAO,KAAK,IAAI;EAEhC,MAAM,EAAE,IAAK,GAAG,QAAQ,KAAK,IAAI;AACjC,SAAO;;CAGT,IAAW,+BAA6D;AACtE,SAAO,KAAK,IAAI,gCAAgC,EAAE;;CAGpD,IAAW,2CAA4E;AACrF,SAAO,KAAK,IAAI,4CAA4C,EAAE;;;;;CAMhE,IAAW,MAAyB;AAClC,SAAO,KAAK,IAAI,IAAI;;;;;CAMtB,IAAW,QAAgB;AACzB,MAAI,KAAK,IAAI,IAAI,IAAK,QAAO,KAAK,IAAI,IAAI;AAE1C,QAAM,IAAI,mBAAmB,oCAAoC;;CAGnE,IAAW,WAAoB;AAC7B,SAAO,KAAK,IAAI,IAAI,QAAQ;;CAG9B,IAAW,MAAM,OAAe;AAC9B,OAAK,IAAI,IAAI,MAAM;;CAGrB,IAAW,cAAc;AACvB,SAAO,yBAAyB,KAAK;;CAGvC,IAAW,YAA8B;AACvC,SAAO,KAAK,IAAI;;;;;CAMlB,IAAW,sBAAkD;AAC3D,SAAO,KAAK,IAAI;;CAGlB,IAAW,WAAW;AACpB,SAAO,KAAK,IAAI;;;;;CAMlB,AAAO,iBAAiB,gBAA0B,WAAW;AAC3D,SAAO,uBAAuB;GAC5B,KAAK,KAAK,IAAI;GACC;GAChB,CAAC;;;;;;;;CASJ,IAAW,qBAAqB;AAC9B,MAAI,KAAK,IAAI,IAAI,KAAK;AACpB,OAAI,CAAC,KAAK,6BAA6B,SAAS,KAAK,IAAI,IAAI,IAAkC,CAC7F,OAAM,IAAI,mBACR,GAAG,uBAAuB,KAAK,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,kCAC1E;AAGH,UAAO,KAAK,IAAI,IAAI;;EAGtB,MAAM,MAAM,KAAK,6BAA6B;AAC9C,MAAI,CAAC,IACH,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,KAAK,IAAI,IAAI,CAAC,wCAAwC;AAG/G,SAAO;;CAGT,OAAc,cAAiE,WAAsB;EACnG,IAAIA;AAEJ,MAAI,UAAU,QAAQ,MACpB,eAAc,aAAa,cAAc,UAAU;WAC1C,UAAU,QAAQ,KAC3B,KAAI,UAAU,QAAQ,QACpB,eAAc,cAAc,cAAc,UAAU,UAAU;WACrD,UAAU,QAAQ,QAC3B,eAAc,cAAc,cAAc,UAAU,UAAU;WACrD,UAAU,QAAQ,QAC3B,eAAc,cAAc,cAAc,UAAU,UAAU;WACrD,UAAU,QAAQ,YAC3B,eAAc,mBAAmB,cAAc,UAAU,UAAU;MAEnE,OAAM,IAAI,mBAER,oBAAoB,UAAU,IAAI,cAAc,UAAU,IAAI,uDAC/D;WAEM,UAAU,QAAQ,SAC3B,eAAc,gBAAgB,cAAc,UAAU,UAAU;WACvD,UAAU,QAAQ,UAC3B,eAAc,iBAAiB,cAAc,UAAU,UAAU;MAEjE,OAAM,IAAI,mBAER,oBAAoB,UAAU,IAAI,uDACnC;AAGH,SAAO,IAAI,UAAU,YAAY;;;;;CAMnC,IAAW,cAAc;EACvB,MAAM,cAAc,cAAc,OAAO,KAAK,IAAI,iBAAiB;EACnE,MAAM,oBAAoB,IAAI,WAAW,CAAC,GAAG,aAAa,GAAG,KAAK,IAAI,WAAW,CAAC;AAElF,SAAO,IAAI,kBAAkB,SAAS,kBAAkB;;;;;CAM1D,OAAc,gBAAgB,aAAqB;EACjD,MAAM,EAAE,SAAS,iBAAiB,OAAO,YAAY;EACrD,MAAM,CAAC,MAAM,cAAc,cAAc,OAAO,KAAK;EACrD,MAAM,YAAY,KAAK,MAAM,WAAW;EAExC,MAAM,iBAAiB,oBAAoB,MAAM,aAAa,SAAS,qBAAqB,KAAK;AACjG,MAAI,CAAC,eACH,OAAM,IAAI,mBAAmB,kDAAkD,KAAK,GAAG;AAIzF,SAAO,IAAI,UADC,eAAe,eAAe,UAAU,CAC3B;;;;;CAM3B,AAAO,GAKL,UACA,UACA,UAC6D;AAE7D,SADc;GAAC;GAAU;GAAU;GAAS,CAAC,OAAO,QAAQ,CAC/C,MAAM,SAAS,KAAK,IAAI,gBAAgB,KAAK;;;;;;;CAQ5D,AAAO,UACL,MACmE;AACnE,MAAI,CAAC,KAAK,GAAG,iBAAiB,IAAI,SAAS,gBACzC,OAAM,IAAI,mBAAmB,mEAAmE;AAGlG,SAAO,UAAU,cAAc,KAAK,IAAI,mBAAmB,CAAC;;;;;;;CAU9D,AAAO,OAAO,OAAkB;AAC9B,SAAO,2BAA2B,KAAK,QAAQ,EAAE,MAAM,QAAQ,CAAC;;CAGlE,AAAQ,SAAS;AACf,SAAO,EACL,KAAK,KAAK,KACX;;;;;;CAOH,IAAW,0BAA0B;AACnC,SAAO,uBAAuB,KAAK,QAAQ,CAAC;;CAG9C,OAAc,6CAA6C,KAA0D;EACnH,MAAM,0BAA0B,oBAAoB,MAAM,aACxD,SAAS,6BAA6B,SAAS,IAAI,CACpD;AAED,MAAI,CAAC,wBACH,OAAM,IAAI,WAAW,2DAA2D,IAAI,GAAG;AAGzF,SAAO"}
+{"version":3,"file":"PublicJwk.mjs","names":["jwk: Jwk","jwkInstance: SupportedPublicJwk"],"sources":["../../../../src/modules/kms/jwk/PublicJwk.ts"],"sourcesContent":["import type { HashName } from '../../../crypto'\nimport { CredoError } from '../../../error'\nimport { MultiBaseEncoder, TypedArrayEncoder, VarintEncoder } from '../../../utils'\nimport type { Constructor } from '../../../utils/mixins'\nimport { zParseWithErrorHandling } from '../../../utils/zod'\nimport { KeyManagementError } from '../error/KeyManagementError'\nimport { legacyKeyIdFromPublicJwk } from '../legacy'\nimport { assymetricPublicJwkMatches } from './equals'\nimport { getJwkHumanDescription } from './humanDescription'\nimport type { KnownJwaKeyAgreementAlgorithm, KnownJwaSignatureAlgorithm } from './jwa'\nimport { calculateJwkThumbprint } from './jwkThumbprint'\nimport { assertJwkAsymmetric, type KmsJwkPublicAsymmetric, publicJwkFromPrivateJwk, zKmsJwkPublic } from './knownJwk'\n\nimport {\n  Ed25519PublicJwk,\n  P256PublicJwk,\n  P384PublicJwk,\n  P521PublicJwk,\n  RsaPublicJwk,\n  Secp256k1PublicJwk,\n  X25519PublicJwk,\n} from './kty'\n\nexport const SupportedPublicJwks = [\n  Ed25519PublicJwk,\n  P256PublicJwk,\n  P384PublicJwk,\n  P521PublicJwk,\n  RsaPublicJwk,\n  Secp256k1PublicJwk,\n  X25519PublicJwk,\n]\nexport type SupportedPublicJwkClass = (typeof SupportedPublicJwks)[number]\nexport type SupportedPublicJwk =\n  | Ed25519PublicJwk\n  | P256PublicJwk\n  | P384PublicJwk\n  | P521PublicJwk\n  | RsaPublicJwk\n  | Secp256k1PublicJwk\n  | X25519PublicJwk\n\ntype ExtractByJwk<T, K> = T extends { jwk: infer J } ? (K extends J ? T : never) : never\n\ntype ExtractByPublicKey<T, K> = T extends { publicKey: infer J } ? (K extends J ? T : never) : never\n\nexport class PublicJwk<Jwk extends SupportedPublicJwk = SupportedPublicJwk> {\n  private constructor(private readonly jwk: Jwk) {}\n\n  public static fromUnknown(jwkJson: unknown) {\n    // We remove any private properties if they are present\n    const publicJwk = publicJwkFromPrivateJwk(zParseWithErrorHandling(zKmsJwkPublic, jwkJson, 'jwk is not a valid jwk'))\n    assertJwkAsymmetric(publicJwk)\n\n    let jwkInstance: SupportedPublicJwk\n    if (publicJwk.kty === 'RSA') {\n      jwkInstance = new RsaPublicJwk(publicJwk)\n    } else if (publicJwk.kty === 'EC') {\n      if (publicJwk.crv === 'P-256') {\n        jwkInstance = new P256PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else if (publicJwk.crv === 'P-384') {\n        jwkInstance = new P384PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else if (publicJwk.crv === 'P-521') {\n        jwkInstance = new P521PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else if (publicJwk.crv === 'secp256k1') {\n        jwkInstance = new Secp256k1PublicJwk({\n          ...publicJwk,\n          crv: publicJwk.crv,\n        })\n      } else {\n        throw new KeyManagementError(\n          `Unsupported kty '${publicJwk.kty}' with crv '${publicJwk.crv}' for creating jwk instance`\n        )\n      }\n    } else if (publicJwk.crv === 'Ed25519') {\n      jwkInstance = new Ed25519PublicJwk({\n        ...publicJwk,\n        crv: publicJwk.crv,\n      })\n    } else if (publicJwk.crv === 'X25519') {\n      jwkInstance = new X25519PublicJwk({\n        ...publicJwk,\n        crv: publicJwk.crv,\n      })\n    } else {\n      throw new KeyManagementError(`Unsupported kty '${publicJwk.kty}' for creating jwk instance`)\n    }\n\n    return new PublicJwk(jwkInstance)\n  }\n\n  // FIXME: all Jwk combinations should be separate types.\n  // so not kty: EC, and crv: P-256 | P-384\n  // but: kty: EC, and crv: P-256 | kty: EC, and crv: P-384\n  // As the first appraoch messes with TypeScript's type inference\n  public static fromPublicJwk<Jwk extends KmsJwkPublicAsymmetric>(jwk: Jwk) {\n    return PublicJwk.fromUnknown(jwk) as PublicJwk<\n      ExtractByJwk<SupportedPublicJwk, Jwk> extends never ? SupportedPublicJwk : ExtractByJwk<SupportedPublicJwk, Jwk>\n    >\n  }\n\n  public toJson({ includeKid = true }: { includeKid?: boolean } = {}): Jwk['jwk'] {\n    if (includeKid) return this.jwk.jwk\n\n    // biome-ignore lint/correctness/noUnusedVariables: no explanation\n    const { kid, ...jwk } = this.jwk.jwk\n    return jwk\n  }\n\n  public get supportedSignatureAlgorithms(): KnownJwaSignatureAlgorithm[] {\n    return this.jwk.supportedSignatureAlgorithms ?? []\n  }\n\n  public get supportdEncryptionKeyAgreementAlgorithms(): KnownJwaKeyAgreementAlgorithm[] {\n    return this.jwk.supportdEncryptionKeyAgreementAlgorithms ?? []\n  }\n\n  /**\n   * key type as defined in [JWA Specification](https://tools.ietf.org/html/rfc7518#section-6.1)\n   */\n  public get kty(): Jwk['jwk']['kty'] {\n    return this.jwk.jwk.kty\n  }\n\n  /**\n   * Get the key id for a public jwk. If the public jwk does not have\n   */\n  public get keyId(): string {\n    if (this.jwk.jwk.kid) return this.jwk.jwk.kid\n\n    throw new KeyManagementError('Unable to determine keyId for jwk')\n  }\n\n  public get hasKeyId(): boolean {\n    return this.jwk.jwk.kid !== undefined\n  }\n\n  public set keyId(keyId: string) {\n    this.jwk.jwk.kid = keyId\n  }\n\n  public get legacyKeyId() {\n    return legacyKeyIdFromPublicJwk(this)\n  }\n\n  public get publicKey(): Jwk['publicKey'] {\n    return this.jwk.publicKey\n  }\n\n  /**\n   * Return the compressed public key. If the key type does not support compressed public keys, it will return null\n   */\n  public get compressedPublicKey(): Jwk['compressedPublicKey'] {\n    return this.jwk.compressedPublicKey\n  }\n\n  public get JwkClass() {\n    return this.jwk.constructor as SupportedPublicJwkClass\n  }\n\n  /**\n   * SHA-256 jwk thumbprint\n   */\n  public getJwkThumbprint(hashAlgorithm: HashName = 'sha-256') {\n    return calculateJwkThumbprint({\n      jwk: this.jwk.jwk,\n      hashAlgorithm: hashAlgorithm,\n    })\n  }\n\n  /**\n   * Get the signature algorithm to use with this jwk. If the jwk has an `alg` field defined\n   * it will use that alg, and otherwise fall back to the first supported signature algorithm.\n   *\n   * If no algorithm is supported it will throw an error\n   */\n  public get signatureAlgorithm() {\n    if (this.jwk.jwk.alg) {\n      if (!this.supportedSignatureAlgorithms.includes(this.jwk.jwk.alg as KnownJwaSignatureAlgorithm)) {\n        throw new KeyManagementError(\n          `${getJwkHumanDescription(this.jwk.jwk)} defines alg '${this.jwk.jwk.alg}' but this alg is not supported.`\n        )\n      }\n\n      return this.jwk.jwk.alg as this['supportedSignatureAlgorithms'][number]\n    }\n\n    const alg = this.supportedSignatureAlgorithms[0]\n    if (!alg) {\n      throw new KeyManagementError(`${getJwkHumanDescription(this.jwk.jwk)} has no supported signature algorithms`)\n    }\n\n    return alg as this['supportedSignatureAlgorithms'][number]\n  }\n\n  public static fromPublicKey<Supported extends SupportedPublicJwk['publicKey']>(publicKey: Supported) {\n    let jwkInstance: SupportedPublicJwk\n\n    if (publicKey.kty === 'RSA') {\n      jwkInstance = RsaPublicJwk.fromPublicKey(publicKey)\n    } else if (publicKey.kty === 'EC') {\n      if (publicKey.crv === 'P-256') {\n        jwkInstance = P256PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else if (publicKey.crv === 'P-384') {\n        jwkInstance = P384PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else if (publicKey.crv === 'P-521') {\n        jwkInstance = P521PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else if (publicKey.crv === 'secp256k1') {\n        jwkInstance = Secp256k1PublicJwk.fromPublicKey(publicKey.publicKey)\n      } else {\n        throw new KeyManagementError(\n          // @ts-expect-error\n          `Unsupported kty '${publicKey.kty}' with crv '${publicKey.crv}' for creating jwk instance based on public key bytes`\n        )\n      }\n    } else if (publicKey.crv === 'X25519') {\n      jwkInstance = X25519PublicJwk.fromPublicKey(publicKey.publicKey)\n    } else if (publicKey.crv === 'Ed25519') {\n      jwkInstance = Ed25519PublicJwk.fromPublicKey(publicKey.publicKey)\n    } else {\n      throw new KeyManagementError(\n        // @ts-expect-error\n        `Unsupported kty '${publicKey.kty}' for creating jwk instance based on public key bytes`\n      )\n    }\n\n    return new PublicJwk(jwkInstance) as PublicJwk<ExtractByPublicKey<SupportedPublicJwk, Supported>>\n  }\n\n  /**\n   * Returns the jwk encoded a Base58 multibase encoded multicodec key\n   */\n  public get fingerprint() {\n    const prefixBytes = VarintEncoder.encode(this.jwk.multicodecPrefix)\n    const prefixedPublicKey = new Uint8Array([...prefixBytes, ...this.jwk.multicodec])\n\n    return `z${TypedArrayEncoder.toBase58(prefixedPublicKey)}`\n  }\n\n  /**\n   * Create a jwk instance based on a Base58 multibase encoded multicodec key\n   */\n  public static fromFingerprint(fingerprint: string) {\n    const { data } = MultiBaseEncoder.decode(fingerprint)\n    const [code, byteLength] = VarintEncoder.decode(data)\n    const publicKey = data.slice(byteLength)\n\n    const PublicJwkClass = SupportedPublicJwks.find((JwkClass) => JwkClass.multicodecPrefix === code)\n    if (!PublicJwkClass) {\n      throw new KeyManagementError(`Unsupported multicodec public key with prefix '${code}'`)\n    }\n\n    const jwk = PublicJwkClass.fromMulticodec(publicKey)\n    return new PublicJwk(jwk)\n  }\n\n  /**\n   * Check whether this PublicJwk instance is of a specific type\n   */\n  public is<\n    Jwk1 extends SupportedPublicJwk,\n    Jwk2 extends SupportedPublicJwk = Jwk1,\n    Jwk3 extends SupportedPublicJwk = Jwk1,\n  >(\n    jwkType1: Constructor<Jwk1>,\n    jwkType2?: Constructor<Jwk2>,\n    jwkType3?: Constructor<Jwk3>\n  ): this is PublicJwk<Jwk1> | PublicJwk<Jwk2> | PublicJwk<Jwk3> {\n    const types = [jwkType1, jwkType2, jwkType3].filter(Boolean) as Constructor<SupportedPublicJwk>[]\n    return types.some((type) => this.jwk.constructor === type)\n  }\n\n  /**\n   * Convert the PublicJwk to another type.\n   *\n   * NOTE: only supportedf or Ed25519 to X25519 at the moment\n   */\n  public convertTo(\n    type: Jwk extends Ed25519PublicJwk ? typeof X25519PublicJwk : never\n  ): Jwk extends Ed25519PublicJwk ? PublicJwk<X25519PublicJwk> : never {\n    if (!this.is(Ed25519PublicJwk) || type !== X25519PublicJwk) {\n      throw new KeyManagementError('Unsupported key conversion. Only Ed25519 to X25519 is supported.')\n    }\n\n    return PublicJwk.fromPublicJwk(this.jwk.toX25519PublicJwk()) as Jwk extends Ed25519PublicJwk\n      ? PublicJwk<X25519PublicJwk>\n      : never\n  }\n\n  /**\n   * Check whether this jwk instance is the same as another jwk instance.\n   * It does this by comparing the key types and public keys, not other fields\n   * of the JWK such as keyId, use, etc..\n   */\n  public equals(other: PublicJwk) {\n    return assymetricPublicJwkMatches(this.toJson(), other.toJson())\n  }\n\n  /**\n   * Get human description of a jwk type. This does\n   * not include the (public) key material\n   */\n  public get jwkTypehumanDescription() {\n    return getJwkHumanDescription(this.toJson())\n  }\n\n  public static supportedPublicJwkClassForSignatureAlgorithm(alg: KnownJwaSignatureAlgorithm): SupportedPublicJwkClass {\n    const supportedPublicJwkClass = SupportedPublicJwks.find((JwkClass) =>\n      JwkClass.supportedSignatureAlgorithms.includes(alg)\n    )\n\n    if (!supportedPublicJwkClass) {\n      throw new CredoError(`Could not determine supported public jwk class for alg '${alg}'`)\n    }\n\n    return supportedPublicJwkClass\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAeD,IAAa,YAAb,MAAa,UAA+D;CAC1E,AAAQ,YAAY,AAAiBA,KAAU;EAAV;;CAErC,OAAc,YAAY,SAAkB;EAE1C,MAAM,YAAY,wBAAwB,wBAAwB,eAAe,SAAS,yBAAyB,CAAC;AACpH,sBAAoB,UAAU;EAE9B,IAAIC;AACJ,MAAI,UAAU,QAAQ,MACpB,eAAc,IAAI,aAAa,UAAU;WAChC,UAAU,QAAQ,KAC3B,KAAI,UAAU,QAAQ,QACpB,eAAc,IAAI,cAAc;GAC9B,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,QAC3B,eAAc,IAAI,cAAc;GAC9B,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,QAC3B,eAAc,IAAI,cAAc;GAC9B,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,YAC3B,eAAc,IAAI,mBAAmB;GACnC,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;MAEF,OAAM,IAAI,mBACR,oBAAoB,UAAU,IAAI,cAAc,UAAU,IAAI,6BAC/D;WAEM,UAAU,QAAQ,UAC3B,eAAc,IAAI,iBAAiB;GACjC,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;WACO,UAAU,QAAQ,SAC3B,eAAc,IAAI,gBAAgB;GAChC,GAAG;GACH,KAAK,UAAU;GAChB,CAAC;MAEF,OAAM,IAAI,mBAAmB,oBAAoB,UAAU,IAAI,6BAA6B;AAG9F,SAAO,IAAI,UAAU,YAAY;;CAOnC,OAAc,cAAkD,KAAU;AACxE,SAAO,UAAU,YAAY,IAAI;;CAKnC,AAAO,OAAO,EAAE,aAAa,SAAmC,EAAE,EAAc;AAC9E,MAAI,WAAY,QAAO,KAAK,IAAI;EAGhC,MAAM,EAAE,IAAK,GAAG,QAAQ,KAAK,IAAI;AACjC,SAAO;;CAGT,IAAW,+BAA6D;AACtE,SAAO,KAAK,IAAI,gCAAgC,EAAE;;CAGpD,IAAW,2CAA4E;AACrF,SAAO,KAAK,IAAI,4CAA4C,EAAE;;;;;CAMhE,IAAW,MAAyB;AAClC,SAAO,KAAK,IAAI,IAAI;;;;;CAMtB,IAAW,QAAgB;AACzB,MAAI,KAAK,IAAI,IAAI,IAAK,QAAO,KAAK,IAAI,IAAI;AAE1C,QAAM,IAAI,mBAAmB,oCAAoC;;CAGnE,IAAW,WAAoB;AAC7B,SAAO,KAAK,IAAI,IAAI,QAAQ;;CAG9B,IAAW,MAAM,OAAe;AAC9B,OAAK,IAAI,IAAI,MAAM;;CAGrB,IAAW,cAAc;AACvB,SAAO,yBAAyB,KAAK;;CAGvC,IAAW,YAA8B;AACvC,SAAO,KAAK,IAAI;;;;;CAMlB,IAAW,sBAAkD;AAC3D,SAAO,KAAK,IAAI;;CAGlB,IAAW,WAAW;AACpB,SAAO,KAAK,IAAI;;;;;CAMlB,AAAO,iBAAiB,gBAA0B,WAAW;AAC3D,SAAO,uBAAuB;GAC5B,KAAK,KAAK,IAAI;GACC;GAChB,CAAC;;;;;;;;CASJ,IAAW,qBAAqB;AAC9B,MAAI,KAAK,IAAI,IAAI,KAAK;AACpB,OAAI,CAAC,KAAK,6BAA6B,SAAS,KAAK,IAAI,IAAI,IAAkC,CAC7F,OAAM,IAAI,mBACR,GAAG,uBAAuB,KAAK,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,kCAC1E;AAGH,UAAO,KAAK,IAAI,IAAI;;EAGtB,MAAM,MAAM,KAAK,6BAA6B;AAC9C,MAAI,CAAC,IACH,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,KAAK,IAAI,IAAI,CAAC,wCAAwC;AAG/G,SAAO;;CAGT,OAAc,cAAiE,WAAsB;EACnG,IAAIA;AAEJ,MAAI,UAAU,QAAQ,MACpB,eAAc,aAAa,cAAc,UAAU;WAC1C,UAAU,QAAQ,KAC3B,KAAI,UAAU,QAAQ,QACpB,eAAc,cAAc,cAAc,UAAU,UAAU;WACrD,UAAU,QAAQ,QAC3B,eAAc,cAAc,cAAc,UAAU,UAAU;WACrD,UAAU,QAAQ,QAC3B,eAAc,cAAc,cAAc,UAAU,UAAU;WACrD,UAAU,QAAQ,YAC3B,eAAc,mBAAmB,cAAc,UAAU,UAAU;MAEnE,OAAM,IAAI,mBAER,oBAAoB,UAAU,IAAI,cAAc,UAAU,IAAI,uDAC/D;WAEM,UAAU,QAAQ,SAC3B,eAAc,gBAAgB,cAAc,UAAU,UAAU;WACvD,UAAU,QAAQ,UAC3B,eAAc,iBAAiB,cAAc,UAAU,UAAU;MAEjE,OAAM,IAAI,mBAER,oBAAoB,UAAU,IAAI,uDACnC;AAGH,SAAO,IAAI,UAAU,YAAY;;;;;CAMnC,IAAW,cAAc;EACvB,MAAM,cAAc,cAAc,OAAO,KAAK,IAAI,iBAAiB;EACnE,MAAM,oBAAoB,IAAI,WAAW,CAAC,GAAG,aAAa,GAAG,KAAK,IAAI,WAAW,CAAC;AAElF,SAAO,IAAI,kBAAkB,SAAS,kBAAkB;;;;;CAM1D,OAAc,gBAAgB,aAAqB;EACjD,MAAM,EAAE,SAAS,iBAAiB,OAAO,YAAY;EACrD,MAAM,CAAC,MAAM,cAAc,cAAc,OAAO,KAAK;EACrD,MAAM,YAAY,KAAK,MAAM,WAAW;EAExC,MAAM,iBAAiB,oBAAoB,MAAM,aAAa,SAAS,qBAAqB,KAAK;AACjG,MAAI,CAAC,eACH,OAAM,IAAI,mBAAmB,kDAAkD,KAAK,GAAG;AAIzF,SAAO,IAAI,UADC,eAAe,eAAe,UAAU,CAC3B;;;;;CAM3B,AAAO,GAKL,UACA,UACA,UAC6D;AAE7D,SADc;GAAC;GAAU;GAAU;GAAS,CAAC,OAAO,QAAQ,CAC/C,MAAM,SAAS,KAAK,IAAI,gBAAgB,KAAK;;;;;;;CAQ5D,AAAO,UACL,MACmE;AACnE,MAAI,CAAC,KAAK,GAAG,iBAAiB,IAAI,SAAS,gBACzC,OAAM,IAAI,mBAAmB,mEAAmE;AAGlG,SAAO,UAAU,cAAc,KAAK,IAAI,mBAAmB,CAAC;;;;;;;CAU9D,AAAO,OAAO,OAAkB;AAC9B,SAAO,2BAA2B,KAAK,QAAQ,EAAE,MAAM,QAAQ,CAAC;;;;;;CAOlE,IAAW,0BAA0B;AACnC,SAAO,uBAAuB,KAAK,QAAQ,CAAC;;CAG9C,OAAc,6CAA6C,KAA0D;EACnH,MAAM,0BAA0B,oBAAoB,MAAM,aACxD,SAAS,6BAA6B,SAAS,IAAI,CACpD;AAED,MAAI,CAAC,wBACH,OAAM,IAAI,WAAW,2DAA2D,IAAI,GAAG;AAGzF,SAAO"}

package/build/modules/kms/jwk/alg/encryption.d.mts

@@ -1,6 +1,6 @@
+import { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithm } from "../jwa.mjs";
 import { KmsJwkPublicOct } from "../kty/oct/octJwk.mjs";
 import { KmsJwkPrivate, KmsJwkPublic } from "../knownJwk.mjs";
-import { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithm } from "../jwa.mjs";
 
 //#region src/modules/kms/jwk/alg/encryption.d.ts
 declare function supportedEncryptionAlgsForKey(jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>): ("A128GCM" | "A192GCM" | "A256GCM" | "A128CBC" | "A256CBC" | "C20P" | "XC20P" | "XSALSA20-POLY1305" | "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512" | "A128KW" | "A192KW" | "A256KW")[];