@credo-ts/core 0.6.0-pr-2392-20251010173905 → 0.6.0-pr-2457-20251016083534

package/build/modules/kms/jwk/alg/encryption.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/encryption.ts"],"sourcesContent":[],"mappings":";;;;;iBAQgB,6BAAA,MAAmC,gBAAgB,QAAQ,cAAc;;;;AAAzF;;;AAA2E,iBA2B3D,2BAAA,CA3B2D,GAAA,EA4BpE,aA5BoE,GA4BpD,OA5BoD,CA4B5C,YA5B4C,EA4B9B,eA5B8B,CAAA,CAAA,EA6BxE,KA7BwE,CA6BlE,kCA7BkE,GA6B7B,8BA7B6B,CAAA;AAAc,iBA2CzE,gCAAA,CA3CyE,GAAA,EA4ClF,aA5CkF,GA4ClE,OA5CkE,CA4C1D,YA5C0D,EA4C5C,eA5C4C,CAAA,EAAA,SAAA,EA6C5E,kCA7C4E,GA6CvC,8BA7CuC,CAAA,EAAA,IAAA"}
+{"version":3,"file":"encryption.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/encryption.ts"],"sourcesContent":[],"mappings":";;;;;iBAOgB,6BAAA,MAAmC,gBAAgB,QAAQ,cAAc;;;;AAAzF;;;AAA2E,iBA2B3D,2BAAA,CA3B2D,GAAA,EA4BpE,aA5BoE,GA4BpD,OA5BoD,CA4B5C,YA5B4C,EA4B9B,eA5B8B,CAAA,CAAA,EA6BxE,KA7BwE,CA6BlE,kCA7BkE,GA6B7B,8BA7B6B,CAAA;AAAc,iBA2CzE,gCAAA,CA3CyE,GAAA,EA4ClF,aA5CkF,GA4ClE,OA5CkE,CA4C1D,YA5C0D,EA4C5C,eA5C4C,CAAA,EAAA,SAAA,EA6C5E,kCA7C4E,GA6CvC,8BA7CuC,CAAA,EAAA,IAAA"}

package/build/modules/kms/jwk/alg/encryption.d.ts

@@ -1,6 +1,6 @@
+import { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithm } from "../jwa.js";
 import { KmsJwkPublicOct } from "../kty/oct/octJwk.js";
 import { KmsJwkPrivate, KmsJwkPublic } from "../knownJwk.js";
-import { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithm } from "../jwa.js";
 
 //#region src/modules/kms/jwk/alg/encryption.d.ts
 declare function supportedEncryptionAlgsForKey(jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>): ("A128GCM" | "A192GCM" | "A256GCM" | "A128CBC" | "A256CBC" | "C20P" | "XC20P" | "XSALSA20-POLY1305" | "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512" | "A128KW" | "A192KW" | "A256KW")[];

package/build/modules/kms/jwk/alg/encryption.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.d.ts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/encryption.ts"],"sourcesContent":[],"mappings":";;;;;iBAQgB,6BAAA,MAAmC,gBAAgB,QAAQ,cAAc;;AAAzF;;;;;AAAmE,iBA2BnD,2BAAA,CA3BmD,GAAA,EA4B5D,aA5B4D,GA4B5C,OA5B4C,CA4BpC,YA5BoC,EA4BtB,eA5BsB,CAAA,CAAA,EA6BhE,KA7BgE,CA6B1D,kCA7B0D,GA6BrB,8BA7BqB,CAAA;AAAO,iBA2C1D,gCAAA,CA3C0D,GAAA,EA4CnE,aA5CmE,GA4CnD,OA5CmD,CA4C3C,YA5C2C,EA4C7B,eA5C6B,CAAA,EAAA,SAAA,EA6C7D,kCA7C6D,GA6CxB,8BA7CwB,CAAA,EAAA,IAAA"}
+{"version":3,"file":"encryption.d.ts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/encryption.ts"],"sourcesContent":[],"mappings":";;;;;iBAOgB,6BAAA,MAAmC,gBAAgB,QAAQ,cAAc;;AAAzF;;;;;AAAmE,iBA2BnD,2BAAA,CA3BmD,GAAA,EA4B5D,aA5B4D,GA4B5C,OA5B4C,CA4BpC,YA5BoC,EA4BtB,eA5BsB,CAAA,CAAA,EA6BhE,KA7BgE,CA6B1D,kCA7B0D,GA6BrB,8BA7BqB,CAAA;AAAO,iBA2C1D,gCAAA,CA3C0D,GAAA,EA4CnE,aA5CmE,GA4CnD,OA5CmD,CA4C3C,YA5C2C,EA4C7B,eA5C6B,CAAA,EAAA,SAAA,EA6C7D,kCA7C6D,GA6CxB,8BA7CwB,CAAA,EAAA,IAAA"}

package/build/modules/kms/jwk/alg/encryption.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.mjs","names":["algs: Array<KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm>"],"sources":["../../../../../src/modules/kms/jwk/alg/encryption.ts"],"sourcesContent":["import type { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithm } from '../jwa'\nimport type { KmsJwkPrivate, KmsJwkPublic } from '../knownJwk'\nimport type { KmsJwkPublicOct } from '../kty/oct/octJwk'\n\nimport { TypedArrayEncoder } from '../../../../utils'\nimport { KeyManagementError } from '../../error/KeyManagementError'\nimport { getJwkHumanDescription } from '../humanDescription'\n\nexport function supportedEncryptionAlgsForKey(jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>) {\n  const algs: Array<KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm> = []\n\n  // Only symmetric (oct) keys can be used directly for content encryption\n  if (jwk.kty === 'oct') {\n    const keyBits = TypedArrayEncoder.fromBase64(jwk.k).length * 8\n\n    // For CBC-HMAC composite algorithms we need exact key sizes\n    if (keyBits === 256) algs.push('A128CBC-HS256')\n    if (keyBits === 384) algs.push('A192CBC-HS384')\n    if (keyBits === 512) algs.push('A256CBC-HS512')\n\n    // For GCM/CBC we just need the exact AES key size\n    if (keyBits === 128) algs.push('A128GCM', 'A128CBC', 'A128KW')\n    if (keyBits === 192) algs.push('A192GCM', 'A192KW')\n    if (keyBits === 256) algs.push('A256GCM', 'A256CBC', 'A256KW', 'C20P', 'XC20P')\n  }\n\n  return algs\n}\n\n/**\n * Get the allowed content encryption algs for a key. If takes all the known supported\n * algs and will filter these based on the optional `alg` key in the JWK.\n *\n * This does not handle the intended key `use` and `key_ops`.\n */\nexport function allowedEncryptionAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): Array<KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm> {\n  const supportedAlgs = supportedEncryptionAlgsForKey(jwk)\n  const allowedAlg = jwk.alg\n\n  return !allowedAlg\n    ? // If no `alg` specified on jwk, return all supported algs\n      supportedAlgs\n    : // If `alg` is specified and supported, return the allowed alg\n      allowedAlg && supportedAlgs.includes(allowedAlg as KnownJwaContentEncryptionAlgorithm)\n      ? [allowedAlg as KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm]\n      : // Otherwise nothing is allowed (`alg` is specified but not supported)\n        []\n}\n\nexport function assertAllowedEncryptionAlgForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>,\n  algorithm: KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm\n) {\n  const allowedAlgs = allowedEncryptionAlgsForKey(jwk)\n  if (!allowedAlgs.includes(algorithm)) {\n    const allowedAlgsText =\n      allowedAlgs.length > 0 ? ` Allowed algs are ${allowedAlgs.map((alg) => `'${alg}'`).join(', ')}` : ''\n    throw new KeyManagementError(\n      `${getJwkHumanDescription(\n        jwk\n      )} cannot be used with algorithm '${algorithm}' for content encryption or decryption.${allowedAlgsText}`\n    )\n  }\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,8BAA8B,KAA6D;CACzG,MAAMA,OAAmF,EAAE;AAG3F,KAAI,IAAI,QAAQ,OAAO;EACrB,MAAM,UAAU,kBAAkB,WAAW,IAAI,EAAE,CAAC,SAAS;AAG7D,MAAI,YAAY,IAAK,MAAK,KAAK,gBAAgB;AAC/C,MAAI,YAAY,IAAK,MAAK,KAAK,gBAAgB;AAC/C,MAAI,YAAY,IAAK,MAAK,KAAK,gBAAgB;AAG/C,MAAI,YAAY,IAAK,MAAK,KAAK,WAAW,WAAW,SAAS;AAC9D,MAAI,YAAY,IAAK,MAAK,KAAK,WAAW,SAAS;AACnD,MAAI,YAAY,IAAK,MAAK,KAAK,WAAW,WAAW,UAAU,QAAQ,QAAQ;;AAGjF,QAAO;;;;;;;;AAST,SAAgB,4BACd,KAC4E;CAC5E,MAAM,gBAAgB,8BAA8B,IAAI;CACxD,MAAM,aAAa,IAAI;AAEvB,QAAO,CAAC,aAEJ,gBAEA,cAAc,cAAc,SAAS,WAAiD,GACpF,CAAC,WAAkF,GAEnF,EAAE;;AAGV,SAAgB,iCACd,KACA,WACA;CACA,MAAM,cAAc,4BAA4B,IAAI;AACpD,KAAI,CAAC,YAAY,SAAS,UAAU,EAAE;EACpC,MAAM,kBACJ,YAAY,SAAS,IAAI,qBAAqB,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;AACpG,QAAM,IAAI,mBACR,GAAG,uBACD,IACD,CAAC,kCAAkC,UAAU,yCAAyC,kBACxF"}
+{"version":3,"file":"encryption.mjs","names":["algs: Array<KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm>"],"sources":["../../../../../src/modules/kms/jwk/alg/encryption.ts"],"sourcesContent":["import { TypedArrayEncoder } from '../../../../utils'\nimport { KeyManagementError } from '../../error/KeyManagementError'\nimport { getJwkHumanDescription } from '../humanDescription'\nimport type { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyEncryptionAlgorithm } from '../jwa'\nimport type { KmsJwkPrivate, KmsJwkPublic } from '../knownJwk'\nimport type { KmsJwkPublicOct } from '../kty/oct/octJwk'\n\nexport function supportedEncryptionAlgsForKey(jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>) {\n  const algs: Array<KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm> = []\n\n  // Only symmetric (oct) keys can be used directly for content encryption\n  if (jwk.kty === 'oct') {\n    const keyBits = TypedArrayEncoder.fromBase64(jwk.k).length * 8\n\n    // For CBC-HMAC composite algorithms we need exact key sizes\n    if (keyBits === 256) algs.push('A128CBC-HS256')\n    if (keyBits === 384) algs.push('A192CBC-HS384')\n    if (keyBits === 512) algs.push('A256CBC-HS512')\n\n    // For GCM/CBC we just need the exact AES key size\n    if (keyBits === 128) algs.push('A128GCM', 'A128CBC', 'A128KW')\n    if (keyBits === 192) algs.push('A192GCM', 'A192KW')\n    if (keyBits === 256) algs.push('A256GCM', 'A256CBC', 'A256KW', 'C20P', 'XC20P')\n  }\n\n  return algs\n}\n\n/**\n * Get the allowed content encryption algs for a key. If takes all the known supported\n * algs and will filter these based on the optional `alg` key in the JWK.\n *\n * This does not handle the intended key `use` and `key_ops`.\n */\nexport function allowedEncryptionAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): Array<KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm> {\n  const supportedAlgs = supportedEncryptionAlgsForKey(jwk)\n  const allowedAlg = jwk.alg\n\n  return !allowedAlg\n    ? // If no `alg` specified on jwk, return all supported algs\n      supportedAlgs\n    : // If `alg` is specified and supported, return the allowed alg\n      allowedAlg && supportedAlgs.includes(allowedAlg as KnownJwaContentEncryptionAlgorithm)\n      ? [allowedAlg as KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm]\n      : // Otherwise nothing is allowed (`alg` is specified but not supported)\n        []\n}\n\nexport function assertAllowedEncryptionAlgForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>,\n  algorithm: KnownJwaContentEncryptionAlgorithm | KnownJwaKeyEncryptionAlgorithm\n) {\n  const allowedAlgs = allowedEncryptionAlgsForKey(jwk)\n  if (!allowedAlgs.includes(algorithm)) {\n    const allowedAlgsText =\n      allowedAlgs.length > 0 ? ` Allowed algs are ${allowedAlgs.map((alg) => `'${alg}'`).join(', ')}` : ''\n    throw new KeyManagementError(\n      `${getJwkHumanDescription(\n        jwk\n      )} cannot be used with algorithm '${algorithm}' for content encryption or decryption.${allowedAlgsText}`\n    )\n  }\n}\n"],"mappings":";;;;;;;;AAOA,SAAgB,8BAA8B,KAA6D;CACzG,MAAMA,OAAmF,EAAE;AAG3F,KAAI,IAAI,QAAQ,OAAO;EACrB,MAAM,UAAU,kBAAkB,WAAW,IAAI,EAAE,CAAC,SAAS;AAG7D,MAAI,YAAY,IAAK,MAAK,KAAK,gBAAgB;AAC/C,MAAI,YAAY,IAAK,MAAK,KAAK,gBAAgB;AAC/C,MAAI,YAAY,IAAK,MAAK,KAAK,gBAAgB;AAG/C,MAAI,YAAY,IAAK,MAAK,KAAK,WAAW,WAAW,SAAS;AAC9D,MAAI,YAAY,IAAK,MAAK,KAAK,WAAW,SAAS;AACnD,MAAI,YAAY,IAAK,MAAK,KAAK,WAAW,WAAW,UAAU,QAAQ,QAAQ;;AAGjF,QAAO;;;;;;;;AAST,SAAgB,4BACd,KAC4E;CAC5E,MAAM,gBAAgB,8BAA8B,IAAI;CACxD,MAAM,aAAa,IAAI;AAEvB,QAAO,CAAC,aAEJ,gBAEA,cAAc,cAAc,SAAS,WAAiD,GACpF,CAAC,WAAkF,GAEnF,EAAE;;AAGV,SAAgB,iCACd,KACA,WACA;CACA,MAAM,cAAc,4BAA4B,IAAI;AACpD,KAAI,CAAC,YAAY,SAAS,UAAU,EAAE;EACpC,MAAM,kBACJ,YAAY,SAAS,IAAI,qBAAqB,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;AACpG,QAAM,IAAI,mBACR,GAAG,uBACD,IACD,CAAC,kCAAkC,UAAU,yCAAyC,kBACxF"}

package/build/modules/kms/jwk/alg/index.js

@@ -1,5 +1,5 @@
 
 
 const require_encryption = require('./encryption.js');
-const require_signing = require('./signing.js');
 const require_keyDerivation = require('./keyDerivation.js');
+const require_signing = require('./signing.js');

package/build/modules/kms/jwk/alg/index.mjs

@@ -1,5 +1,5 @@
 
 
 import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./encryption.mjs";
-import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./signing.mjs";
 import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./keyDerivation.mjs";
+import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./signing.mjs";

package/build/modules/kms/jwk/alg/keyDerivation.d.mts

@@ -1,6 +1,6 @@
+import { KnownJwaKeyAgreementAlgorithm } from "../jwa.mjs";
 import { KmsJwkPublicOct } from "../kty/oct/octJwk.mjs";
 import { KmsJwkPrivate, KmsJwkPublic } from "../knownJwk.mjs";
-import { KnownJwaKeyAgreementAlgorithm } from "../jwa.mjs";
 
 //#region src/modules/kms/jwk/alg/keyDerivation.d.ts
 declare function supportedKeyDerivationAlgsForKey(jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>): KnownJwaKeyAgreementAlgorithm[];

package/build/modules/kms/jwk/alg/keyDerivation.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"keyDerivation.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/keyDerivation.ts"],"sourcesContent":[],"mappings":";;;;;iBAcgB,gCAAA,MACT,gBAAgB,QAAQ,cAAc,mBAC1C;;;;AAFH;;;AAC+B,iBAwBf,8BAAA,CAxBe,GAAA,EAyBxB,aAzBwB,GAyBR,OAzBQ,CAyBA,YAzBA,EAyBc,eAzBd,CAAA,CAAA,EA0B5B,6BA1B4B,EAAA;AAAc,iBAwC7B,mCAAA,CAxC6B,GAAA,EAyCtC,aAzCsC,GAyCtB,OAzCsB,CAyCd,YAzCc,EAyCA,eAzCA,CAAA,EAAA,SAAA,EA0ChC,6BA1CgC,CAAA,EAAA,IAAA"}
+{"version":3,"file":"keyDerivation.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/keyDerivation.ts"],"sourcesContent":[],"mappings":";;;;;iBAagB,gCAAA,MACT,gBAAgB,QAAQ,cAAc,mBAC1C;;;;AAFH;;;AAC+B,iBAwBf,8BAAA,CAxBe,GAAA,EAyBxB,aAzBwB,GAyBR,OAzBQ,CAyBA,YAzBA,EAyBc,eAzBd,CAAA,CAAA,EA0B5B,6BA1B4B,EAAA;AAAc,iBAwC7B,mCAAA,CAxC6B,GAAA,EAyCtC,aAzCsC,GAyCtB,OAzCsB,CAyCd,YAzCc,EAyCA,eAzCA,CAAA,EAAA,SAAA,EA0ChC,6BA1CgC,CAAA,EAAA,IAAA"}

package/build/modules/kms/jwk/alg/keyDerivation.d.ts

@@ -1,6 +1,6 @@
+import { KnownJwaKeyAgreementAlgorithm } from "../jwa.js";
 import { KmsJwkPublicOct } from "../kty/oct/octJwk.js";
 import { KmsJwkPrivate, KmsJwkPublic } from "../knownJwk.js";
-import { KnownJwaKeyAgreementAlgorithm } from "../jwa.js";
 
 //#region src/modules/kms/jwk/alg/keyDerivation.d.ts
 declare function supportedKeyDerivationAlgsForKey(jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>): KnownJwaKeyAgreementAlgorithm[];

package/build/modules/kms/jwk/alg/keyDerivation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keyDerivation.d.ts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/keyDerivation.ts"],"sourcesContent":[],"mappings":";;;;;iBAcgB,gCAAA,MACT,gBAAgB,QAAQ,cAAc,mBAC1C;;AAFH;;;;;AACuB,iBAwBP,8BAAA,CAxBO,GAAA,EAyBhB,aAzBgB,GAyBA,OAzBA,CAyBQ,YAzBR,EAyBsB,eAzBtB,CAAA,CAAA,EA0BpB,6BA1BoB,EAAA;AACpB,iBAuCa,mCAAA,CAvCb,GAAA,EAwCI,aAxCJ,GAwCoB,OAxCpB,CAwC4B,YAxC5B,EAwC0C,eAxC1C,CAAA,EAAA,SAAA,EAyCU,6BAzCV,CAAA,EAAA,IAAA"}
+{"version":3,"file":"keyDerivation.d.ts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/keyDerivation.ts"],"sourcesContent":[],"mappings":";;;;;iBAagB,gCAAA,MACT,gBAAgB,QAAQ,cAAc,mBAC1C;;AAFH;;;;;AACuB,iBAwBP,8BAAA,CAxBO,GAAA,EAyBhB,aAzBgB,GAyBA,OAzBA,CAyBQ,YAzBR,EAyBsB,eAzBtB,CAAA,CAAA,EA0BpB,6BA1BoB,EAAA;AACpB,iBAuCa,mCAAA,CAvCb,GAAA,EAwCI,aAxCJ,GAwCoB,OAxCpB,CAwC4B,YAxC5B,EAwC0C,eAxC1C,CAAA,EAAA,SAAA,EAyCU,6BAzCV,CAAA,EAAA,IAAA"}

package/build/modules/kms/jwk/alg/keyDerivation.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keyDerivation.mjs","names":["algs: KnownJwaKeyAgreementAlgorithm[]"],"sources":["../../../../../src/modules/kms/jwk/alg/keyDerivation.ts"],"sourcesContent":["import type { KnownJwaKeyAgreementAlgorithm } from '../jwa'\nimport type { KmsJwkPrivate, KmsJwkPublic, KmsJwkPublicCrv } from '../knownJwk'\nimport type { KmsJwkPrivateOct, KmsJwkPublicOct } from '../kty/oct/octJwk'\nimport type { KmsJwkPrivateRsa, KmsJwkPublicRsa } from '../kty/rsa/rsaJwk'\n\nimport { KeyManagementError } from '../../error/KeyManagementError'\nimport { getJwkHumanDescription } from '../humanDescription'\n\nfunction isCrvJwk<Jwk extends KmsJwkPrivate | KmsJwkPublic>(\n  jwk: Jwk\n): jwk is Exclude<Jwk, KmsJwkPrivateOct | KmsJwkPrivateRsa | KmsJwkPublicOct | KmsJwkPublicRsa> {\n  return jwk.kty === 'EC' || jwk.kty === 'OKP'\n}\n\nexport function supportedKeyDerivationAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaKeyAgreementAlgorithm[] {\n  const algs: KnownJwaKeyAgreementAlgorithm[] = []\n\n  const allowedCurves: KmsJwkPublicCrv['crv'][] = ['P-256', 'P-384', 'P-521', 'X25519', 'secp256k1']\n  if (isCrvJwk(jwk) && allowedCurves.includes(jwk.crv)) {\n    algs.push('ECDH-ES', 'ECDH-ES+A128KW', 'ECDH-ES+A192KW', 'ECDH-ES+A256KW')\n  }\n\n  // Special case where we allow Ed25519 for X25519 based operation, since that is\n  // how DIDComm v1 works.\n  if (jwk.kty === 'OKP' && (jwk.crv === 'X25519' || jwk.crv === 'Ed25519')) {\n    algs.push('ECDH-HSALSA20')\n  }\n\n  return algs\n}\n\n/**\n * Get the allowed key derivation algs for a key. If takes all the known supported\n * algs and will filter these based on the optional `alg` key in the JWK.\n *\n * This does not handle the intended key `use` and `key_ops`.\n */\nexport function allowedKeyDerivationAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaKeyAgreementAlgorithm[] {\n  const supportedAlgs = supportedKeyDerivationAlgsForKey(jwk)\n  const allowedAlg = jwk.alg\n\n  return !allowedAlg\n    ? // If no `alg` specified on jwk, return all supported algs\n      supportedAlgs\n    : // If `alg` is specified and supported, return the allowed alg\n      allowedAlg && supportedAlgs.includes(allowedAlg as KnownJwaKeyAgreementAlgorithm)\n      ? [allowedAlg as KnownJwaKeyAgreementAlgorithm]\n      : // Otherwise nothing is allowed (`alg` is specified but not supported)\n        []\n}\n\nexport function assertAllowedKeyDerivationAlgForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>,\n  algorithm: KnownJwaKeyAgreementAlgorithm\n) {\n  const allowedAlgs = allowedKeyDerivationAlgsForKey(jwk)\n  if (!allowedAlgs.includes(algorithm)) {\n    const allowedAlgsText =\n      allowedAlgs.length > 0 ? ` Allowed algs are ${allowedAlgs.map((alg) => `'${alg}'`).join(', ')}` : ''\n    throw new KeyManagementError(\n      `${getJwkHumanDescription(\n        jwk\n      )} cannot be used with algorithm '${algorithm}' for key derivation.${allowedAlgsText}`\n    )\n  }\n}\n"],"mappings":";;;;;;AAQA,SAAS,SACP,KAC8F;AAC9F,QAAO,IAAI,QAAQ,QAAQ,IAAI,QAAQ;;AAGzC,SAAgB,iCACd,KACiC;CACjC,MAAMA,OAAwC,EAAE;AAGhD,KAAI,SAAS,IAAI,IAD+B;EAAC;EAAS;EAAS;EAAS;EAAU;EAAY,CAC/D,SAAS,IAAI,IAAI,CAClD,MAAK,KAAK,WAAW,kBAAkB,kBAAkB,iBAAiB;AAK5E,KAAI,IAAI,QAAQ,UAAU,IAAI,QAAQ,YAAY,IAAI,QAAQ,WAC5D,MAAK,KAAK,gBAAgB;AAG5B,QAAO;;;;;;;;AAST,SAAgB,+BACd,KACiC;CACjC,MAAM,gBAAgB,iCAAiC,IAAI;CAC3D,MAAM,aAAa,IAAI;AAEvB,QAAO,CAAC,aAEJ,gBAEA,cAAc,cAAc,SAAS,WAA4C,GAC/E,CAAC,WAA4C,GAE7C,EAAE;;AAGV,SAAgB,oCACd,KACA,WACA;CACA,MAAM,cAAc,+BAA+B,IAAI;AACvD,KAAI,CAAC,YAAY,SAAS,UAAU,EAAE;EACpC,MAAM,kBACJ,YAAY,SAAS,IAAI,qBAAqB,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;AACpG,QAAM,IAAI,mBACR,GAAG,uBACD,IACD,CAAC,kCAAkC,UAAU,uBAAuB,kBACtE"}
+{"version":3,"file":"keyDerivation.mjs","names":["algs: KnownJwaKeyAgreementAlgorithm[]"],"sources":["../../../../../src/modules/kms/jwk/alg/keyDerivation.ts"],"sourcesContent":["import { KeyManagementError } from '../../error/KeyManagementError'\nimport { getJwkHumanDescription } from '../humanDescription'\nimport type { KnownJwaKeyAgreementAlgorithm } from '../jwa'\nimport type { KmsJwkPrivate, KmsJwkPublic, KmsJwkPublicCrv } from '../knownJwk'\nimport type { KmsJwkPrivateOct, KmsJwkPublicOct } from '../kty/oct/octJwk'\nimport type { KmsJwkPrivateRsa, KmsJwkPublicRsa } from '../kty/rsa/rsaJwk'\n\nfunction isCrvJwk<Jwk extends KmsJwkPrivate | KmsJwkPublic>(\n  jwk: Jwk\n): jwk is Exclude<Jwk, KmsJwkPrivateOct | KmsJwkPrivateRsa | KmsJwkPublicOct | KmsJwkPublicRsa> {\n  return jwk.kty === 'EC' || jwk.kty === 'OKP'\n}\n\nexport function supportedKeyDerivationAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaKeyAgreementAlgorithm[] {\n  const algs: KnownJwaKeyAgreementAlgorithm[] = []\n\n  const allowedCurves: KmsJwkPublicCrv['crv'][] = ['P-256', 'P-384', 'P-521', 'X25519', 'secp256k1']\n  if (isCrvJwk(jwk) && allowedCurves.includes(jwk.crv)) {\n    algs.push('ECDH-ES', 'ECDH-ES+A128KW', 'ECDH-ES+A192KW', 'ECDH-ES+A256KW')\n  }\n\n  // Special case where we allow Ed25519 for X25519 based operation, since that is\n  // how DIDComm v1 works.\n  if (jwk.kty === 'OKP' && (jwk.crv === 'X25519' || jwk.crv === 'Ed25519')) {\n    algs.push('ECDH-HSALSA20')\n  }\n\n  return algs\n}\n\n/**\n * Get the allowed key derivation algs for a key. If takes all the known supported\n * algs and will filter these based on the optional `alg` key in the JWK.\n *\n * This does not handle the intended key `use` and `key_ops`.\n */\nexport function allowedKeyDerivationAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaKeyAgreementAlgorithm[] {\n  const supportedAlgs = supportedKeyDerivationAlgsForKey(jwk)\n  const allowedAlg = jwk.alg\n\n  return !allowedAlg\n    ? // If no `alg` specified on jwk, return all supported algs\n      supportedAlgs\n    : // If `alg` is specified and supported, return the allowed alg\n      allowedAlg && supportedAlgs.includes(allowedAlg as KnownJwaKeyAgreementAlgorithm)\n      ? [allowedAlg as KnownJwaKeyAgreementAlgorithm]\n      : // Otherwise nothing is allowed (`alg` is specified but not supported)\n        []\n}\n\nexport function assertAllowedKeyDerivationAlgForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>,\n  algorithm: KnownJwaKeyAgreementAlgorithm\n) {\n  const allowedAlgs = allowedKeyDerivationAlgsForKey(jwk)\n  if (!allowedAlgs.includes(algorithm)) {\n    const allowedAlgsText =\n      allowedAlgs.length > 0 ? ` Allowed algs are ${allowedAlgs.map((alg) => `'${alg}'`).join(', ')}` : ''\n    throw new KeyManagementError(\n      `${getJwkHumanDescription(\n        jwk\n      )} cannot be used with algorithm '${algorithm}' for key derivation.${allowedAlgsText}`\n    )\n  }\n}\n"],"mappings":";;;;;;AAOA,SAAS,SACP,KAC8F;AAC9F,QAAO,IAAI,QAAQ,QAAQ,IAAI,QAAQ;;AAGzC,SAAgB,iCACd,KACiC;CACjC,MAAMA,OAAwC,EAAE;AAGhD,KAAI,SAAS,IAAI,IAD+B;EAAC;EAAS;EAAS;EAAS;EAAU;EAAY,CAC/D,SAAS,IAAI,IAAI,CAClD,MAAK,KAAK,WAAW,kBAAkB,kBAAkB,iBAAiB;AAK5E,KAAI,IAAI,QAAQ,UAAU,IAAI,QAAQ,YAAY,IAAI,QAAQ,WAC5D,MAAK,KAAK,gBAAgB;AAG5B,QAAO;;;;;;;;AAST,SAAgB,+BACd,KACiC;CACjC,MAAM,gBAAgB,iCAAiC,IAAI;CAC3D,MAAM,aAAa,IAAI;AAEvB,QAAO,CAAC,aAEJ,gBAEA,cAAc,cAAc,SAAS,WAA4C,GAC/E,CAAC,WAA4C,GAE7C,EAAE;;AAGV,SAAgB,oCACd,KACA,WACA;CACA,MAAM,cAAc,+BAA+B,IAAI;AACvD,KAAI,CAAC,YAAY,SAAS,UAAU,EAAE;EACpC,MAAM,kBACJ,YAAY,SAAS,IAAI,qBAAqB,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;AACpG,QAAM,IAAI,mBACR,GAAG,uBACD,IACD,CAAC,kCAAkC,UAAU,uBAAuB,kBACtE"}

package/build/modules/kms/jwk/alg/signing.d.mts

@@ -1,6 +1,6 @@
+import { KnownJwaSignatureAlgorithm } from "../jwa.mjs";
 import { KmsJwkPublicOct } from "../kty/oct/octJwk.mjs";
 import { KmsJwkPrivate, KmsJwkPublic } from "../knownJwk.mjs";
-import { KnownJwaSignatureAlgorithm } from "../jwa.mjs";
 
 //#region src/modules/kms/jwk/alg/signing.d.ts
 

package/build/modules/kms/jwk/alg/signing.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"signing.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/signing.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAeA;;;AAC+B,iBADf,+BAAA,CACe,GAAA,EAAxB,aAAwB,GAAR,OAAQ,CAAA,YAAA,EAAc,eAAd,CAAA,CAAA,EAC5B,0BAD4B,EAAA;AAAc,iBAe7B,6BAAA,CAf6B,GAAA,EAgBtC,aAhBsC,GAgBtB,OAhBsB,CAgBd,YAhBc,EAgBA,eAhBA,CAAA,EAAA,SAAA,EAiBhC,0BAjBgC,CAAA,EAAA,IAAA;AAAtB,iBAiCP,0BAAA,CAjCO,GAAA,EAkChB,aAlCgB,GAkCA,OAlCA,CAkCQ,YAlCR,EAkCsB,eAlCtB,CAAA,CAAA,EAmCpB,0BAnCoB,EAAA"}
+{"version":3,"file":"signing.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/signing.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAcA;;;AAC+B,iBADf,+BAAA,CACe,GAAA,EAAxB,aAAwB,GAAR,OAAQ,CAAA,YAAA,EAAc,eAAd,CAAA,CAAA,EAC5B,0BAD4B,EAAA;AAAc,iBAe7B,6BAAA,CAf6B,GAAA,EAgBtC,aAhBsC,GAgBtB,OAhBsB,CAgBd,YAhBc,EAgBA,eAhBA,CAAA,EAAA,SAAA,EAiBhC,0BAjBgC,CAAA,EAAA,IAAA;AAAtB,iBAiCP,0BAAA,CAjCO,GAAA,EAkChB,aAlCgB,GAkCA,OAlCA,CAkCQ,YAlCR,EAkCsB,eAlCtB,CAAA,CAAA,EAmCpB,0BAnCoB,EAAA"}

package/build/modules/kms/jwk/alg/signing.d.ts

@@ -1,6 +1,6 @@
+import { KnownJwaSignatureAlgorithm } from "../jwa.js";
 import { KmsJwkPublicOct } from "../kty/oct/octJwk.js";
 import { KmsJwkPrivate, KmsJwkPublic } from "../knownJwk.js";
-import { KnownJwaSignatureAlgorithm } from "../jwa.js";
 
 //#region src/modules/kms/jwk/alg/signing.d.ts
 

package/build/modules/kms/jwk/alg/signing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signing.d.ts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/signing.ts"],"sourcesContent":[],"mappings":";;;;;;;AAeA;;;;;AACuB,iBADP,+BAAA,CACO,GAAA,EAAhB,aAAgB,GAAA,OAAA,CAAQ,YAAR,EAAsB,eAAtB,CAAA,CAAA,EACpB,0BADoB,EAAA;AACpB,iBAca,6BAAA,CAdb,GAAA,EAeI,aAfJ,GAeoB,OAfpB,CAe4B,YAf5B,EAe0C,eAf1C,CAAA,EAAA,SAAA,EAgBU,0BAhBV,CAAA,EAAA,IAAA;AAA0B,iBAgCb,0BAAA,CAhCa,GAAA,EAiCtB,aAjCsB,GAiCN,OAjCM,CAiCE,YAjCF,EAiCgB,eAjChB,CAAA,CAAA,EAkC1B,0BAlC0B,EAAA"}
+{"version":3,"file":"signing.d.ts","names":[],"sources":["../../../../../src/modules/kms/jwk/alg/signing.ts"],"sourcesContent":[],"mappings":";;;;;;;AAcA;;;;;AACuB,iBADP,+BAAA,CACO,GAAA,EAAhB,aAAgB,GAAA,OAAA,CAAQ,YAAR,EAAsB,eAAtB,CAAA,CAAA,EACpB,0BADoB,EAAA;AACpB,iBAca,6BAAA,CAdb,GAAA,EAeI,aAfJ,GAeoB,OAfpB,CAe4B,YAf5B,EAe0C,eAf1C,CAAA,EAAA,SAAA,EAgBU,0BAhBV,CAAA,EAAA,IAAA;AAA0B,iBAgCb,0BAAA,CAhCa,GAAA,EAiCtB,aAjCsB,GAiCN,OAjCM,CAiCE,YAjCF,EAiCgB,eAjChB,CAAA,CAAA,EAkC1B,0BAlC0B,EAAA"}

package/build/modules/kms/jwk/alg/signing.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"signing.mjs","names":["minBits2048: KnownJwaSignatureAlgorithm[]","minBits3072: KnownJwaSignatureAlgorithm[]","minBits4096: KnownJwaSignatureAlgorithm[]","minBits256: KnownJwaSignatureAlgorithm[]","minBits384: KnownJwaSignatureAlgorithm[]","minBits512: KnownJwaSignatureAlgorithm[]"],"sources":["../../../../../src/modules/kms/jwk/alg/signing.ts"],"sourcesContent":["import type { KnownJwaSignatureAlgorithm } from '../jwa'\nimport type { KmsJwkPrivate, KmsJwkPublic } from '../knownJwk'\nimport type { KmsJwkPublicOct } from '../kty/oct/octJwk'\n\nimport { TypedArrayEncoder } from '../../../../utils'\nimport { KeyManagementError } from '../../error/KeyManagementError'\nimport type { KmsCreateKeyType } from '../../options'\nimport { getJwkHumanDescription } from '../humanDescription'\n\n/**\n * Get the allowed algs for a signing key. If takes all the known supported\n * algs and will filter these based on the optional `alg` key in the JWK.\n *\n * This does not handle the intended key `use` and `key_ops`.\n */\nexport function allowedSigningAlgsForSigningKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaSignatureAlgorithm[] {\n  const supportedAlgs = supportedSigningAlgsForKey(jwk)\n  const allowedAlg = jwk.alg\n\n  return !allowedAlg\n    ? // If no `alg` specified on jwk, return all supported algs\n      supportedAlgs\n    : // If `alg` is specified and supported, return the allowed alg\n      allowedAlg && supportedAlgs.includes(allowedAlg as KnownJwaSignatureAlgorithm)\n      ? [allowedAlg as KnownJwaSignatureAlgorithm]\n      : // Otherwise nothing is allowed (`alg` is specified but not supported)\n        []\n}\n\nexport function assertAllowedSigningAlgForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>,\n  algorithm: KnownJwaSignatureAlgorithm\n) {\n  const allowedAlgs = allowedSigningAlgsForSigningKey(jwk)\n  if (!allowedAlgs.includes(algorithm)) {\n    const allowedAlgsText =\n      allowedAlgs.length > 0 ? ` Allowed algs are ${allowedAlgs.map((alg) => `'${alg}'`).join(', ')}` : ''\n    throw new KeyManagementError(\n      `${getJwkHumanDescription(\n        jwk\n      )} cannot be used with algorithm '${algorithm}' for signature creation or verification.${allowedAlgsText}`\n    )\n  }\n}\n\n// NOTE: this should be replaced by the PublicJwk class\n// but it woun't work for oct keys\nexport function supportedSigningAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaSignatureAlgorithm[] {\n  if (jwk.kty === 'EC' || jwk.kty === 'OKP') {\n    switch (jwk.crv) {\n      case 'secp256k1':\n        return ['ES256K']\n      case 'P-256':\n        return ['ES256']\n      case 'P-384':\n        return ['ES384']\n      case 'P-521':\n        return ['ES512']\n      case 'Ed25519':\n        return ['EdDSA']\n\n      // X25519\n      default:\n        return []\n    }\n  }\n\n  if (jwk.kty === 'RSA') {\n    const keyBits = TypedArrayEncoder.fromBase64(jwk.n).length * 8\n\n    // RSA needs minimum bit lengths for each algorithm\n    const minBits2048: KnownJwaSignatureAlgorithm[] = ['PS256', 'RS256']\n    const minBits3072: KnownJwaSignatureAlgorithm[] = [...minBits2048, 'RS384', 'PS384']\n    const minBits4096: KnownJwaSignatureAlgorithm[] = [...minBits3072, 'RS512', 'PS512']\n\n    return keyBits >= 4096 ? minBits4096 : keyBits >= 3072 ? minBits3072 : keyBits >= 2048 ? minBits2048 : []\n  }\n\n  // On other layers we need to filter for alg types, as you don't want any `oct` key with enough length to used for hmac purposes\n  if (jwk.kty === 'oct') {\n    const keyBits = TypedArrayEncoder.fromBase64(jwk.k).length * 8\n\n    // hmac needs minimum bit lengths for each algorithm\n    const minBits256: KnownJwaSignatureAlgorithm[] = ['HS256']\n    const minBits384: KnownJwaSignatureAlgorithm[] = [...minBits256, 'HS384']\n    const minBits512: KnownJwaSignatureAlgorithm[] = [...minBits384, 'HS512']\n    return keyBits >= 512 ? minBits512 : keyBits >= 384 ? minBits384 : keyBits >= 256 ? minBits256 : []\n  }\n\n  return []\n}\n\n// TODO: Can we move this to the JWK classes?\nexport function createKeyTypeForSigningAlgorithm(algorithm: KnownJwaSignatureAlgorithm): KmsCreateKeyType {\n  // On JWK class we can have\n  if (algorithm === 'ES256') {\n    return {\n      kty: 'EC',\n      crv: 'P-256',\n    }\n  }\n\n  if (algorithm === 'ES384') {\n    return {\n      kty: 'EC',\n      crv: 'P-384',\n    }\n  }\n\n  if (algorithm === 'ES512') {\n    return {\n      kty: 'EC',\n      crv: 'P-521',\n    }\n  }\n\n  if (algorithm === 'ES256K') {\n    return {\n      kty: 'EC',\n      crv: 'secp256k1',\n    }\n  }\n\n  if (algorithm === 'EdDSA') {\n    return {\n      kty: 'OKP',\n      crv: 'Ed25519',\n    }\n  }\n\n  if (algorithm === 'HS256') {\n    return {\n      kty: 'oct',\n      algorithm: 'hmac',\n      length: 256,\n    }\n  }\n\n  if (algorithm === 'HS384') {\n    return {\n      kty: 'oct',\n      algorithm: 'hmac',\n      length: 384,\n    }\n  }\n\n  if (algorithm === 'HS512') {\n    return {\n      kty: 'oct',\n      algorithm: 'hmac',\n      length: 512,\n    }\n  }\n\n  if (algorithm === 'PS256' || algorithm === 'RS256') {\n    return {\n      kty: 'RSA',\n      modulusLength: 2048,\n    }\n  }\n\n  if (algorithm === 'PS384' || algorithm === 'RS384') {\n    return {\n      kty: 'RSA',\n      modulusLength: 3072,\n    }\n  }\n\n  if (algorithm === 'PS512' || algorithm === 'RS512') {\n    return {\n      kty: 'RSA',\n      modulusLength: 4096,\n    }\n  }\n\n  throw new KeyManagementError(`unknown signature algorithm '${algorithm}' for creating key `)\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,SAAgB,gCACd,KAC8B;CAC9B,MAAM,gBAAgB,2BAA2B,IAAI;CACrD,MAAM,aAAa,IAAI;AAEvB,QAAO,CAAC,aAEJ,gBAEA,cAAc,cAAc,SAAS,WAAyC,GAC5E,CAAC,WAAyC,GAE1C,EAAE;;AAGV,SAAgB,8BACd,KACA,WACA;CACA,MAAM,cAAc,gCAAgC,IAAI;AACxD,KAAI,CAAC,YAAY,SAAS,UAAU,EAAE;EACpC,MAAM,kBACJ,YAAY,SAAS,IAAI,qBAAqB,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;AACpG,QAAM,IAAI,mBACR,GAAG,uBACD,IACD,CAAC,kCAAkC,UAAU,2CAA2C,kBAC1F;;;AAML,SAAgB,2BACd,KAC8B;AAC9B,KAAI,IAAI,QAAQ,QAAQ,IAAI,QAAQ,MAClC,SAAQ,IAAI,KAAZ;EACE,KAAK,YACH,QAAO,CAAC,SAAS;EACnB,KAAK,QACH,QAAO,CAAC,QAAQ;EAClB,KAAK,QACH,QAAO,CAAC,QAAQ;EAClB,KAAK,QACH,QAAO,CAAC,QAAQ;EAClB,KAAK,UACH,QAAO,CAAC,QAAQ;EAGlB,QACE,QAAO,EAAE;;AAIf,KAAI,IAAI,QAAQ,OAAO;EACrB,MAAM,UAAU,kBAAkB,WAAW,IAAI,EAAE,CAAC,SAAS;EAG7D,MAAMA,cAA4C,CAAC,SAAS,QAAQ;EACpE,MAAMC,cAA4C;GAAC,GAAG;GAAa;GAAS;GAAQ;EACpF,MAAMC,cAA4C;GAAC,GAAG;GAAa;GAAS;GAAQ;AAEpF,SAAO,WAAW,OAAO,cAAc,WAAW,OAAO,cAAc,WAAW,OAAO,cAAc,EAAE;;AAI3G,KAAI,IAAI,QAAQ,OAAO;EACrB,MAAM,UAAU,kBAAkB,WAAW,IAAI,EAAE,CAAC,SAAS;EAG7D,MAAMC,aAA2C,CAAC,QAAQ;EAC1D,MAAMC,aAA2C,CAAC,GAAG,YAAY,QAAQ;EACzE,MAAMC,aAA2C,CAAC,GAAG,YAAY,QAAQ;AACzE,SAAO,WAAW,MAAM,aAAa,WAAW,MAAM,aAAa,WAAW,MAAM,aAAa,EAAE;;AAGrG,QAAO,EAAE;;AAIX,SAAgB,iCAAiC,WAAyD;AAExG,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,SAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,WAAW;EACX,QAAQ;EACT;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,WAAW;EACX,QAAQ;EACT;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,WAAW;EACX,QAAQ;EACT;AAGH,KAAI,cAAc,WAAW,cAAc,QACzC,QAAO;EACL,KAAK;EACL,eAAe;EAChB;AAGH,KAAI,cAAc,WAAW,cAAc,QACzC,QAAO;EACL,KAAK;EACL,eAAe;EAChB;AAGH,KAAI,cAAc,WAAW,cAAc,QACzC,QAAO;EACL,KAAK;EACL,eAAe;EAChB;AAGH,OAAM,IAAI,mBAAmB,gCAAgC,UAAU,qBAAqB"}
+{"version":3,"file":"signing.mjs","names":["minBits2048: KnownJwaSignatureAlgorithm[]","minBits3072: KnownJwaSignatureAlgorithm[]","minBits4096: KnownJwaSignatureAlgorithm[]","minBits256: KnownJwaSignatureAlgorithm[]","minBits384: KnownJwaSignatureAlgorithm[]","minBits512: KnownJwaSignatureAlgorithm[]"],"sources":["../../../../../src/modules/kms/jwk/alg/signing.ts"],"sourcesContent":["import { TypedArrayEncoder } from '../../../../utils'\nimport { KeyManagementError } from '../../error/KeyManagementError'\nimport type { KmsCreateKeyType } from '../../options'\nimport { getJwkHumanDescription } from '../humanDescription'\nimport type { KnownJwaSignatureAlgorithm } from '../jwa'\nimport type { KmsJwkPrivate, KmsJwkPublic } from '../knownJwk'\nimport type { KmsJwkPublicOct } from '../kty/oct/octJwk'\n\n/**\n * Get the allowed algs for a signing key. If takes all the known supported\n * algs and will filter these based on the optional `alg` key in the JWK.\n *\n * This does not handle the intended key `use` and `key_ops`.\n */\nexport function allowedSigningAlgsForSigningKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaSignatureAlgorithm[] {\n  const supportedAlgs = supportedSigningAlgsForKey(jwk)\n  const allowedAlg = jwk.alg\n\n  return !allowedAlg\n    ? // If no `alg` specified on jwk, return all supported algs\n      supportedAlgs\n    : // If `alg` is specified and supported, return the allowed alg\n      allowedAlg && supportedAlgs.includes(allowedAlg as KnownJwaSignatureAlgorithm)\n      ? [allowedAlg as KnownJwaSignatureAlgorithm]\n      : // Otherwise nothing is allowed (`alg` is specified but not supported)\n        []\n}\n\nexport function assertAllowedSigningAlgForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>,\n  algorithm: KnownJwaSignatureAlgorithm\n) {\n  const allowedAlgs = allowedSigningAlgsForSigningKey(jwk)\n  if (!allowedAlgs.includes(algorithm)) {\n    const allowedAlgsText =\n      allowedAlgs.length > 0 ? ` Allowed algs are ${allowedAlgs.map((alg) => `'${alg}'`).join(', ')}` : ''\n    throw new KeyManagementError(\n      `${getJwkHumanDescription(\n        jwk\n      )} cannot be used with algorithm '${algorithm}' for signature creation or verification.${allowedAlgsText}`\n    )\n  }\n}\n\n// NOTE: this should be replaced by the PublicJwk class\n// but it woun't work for oct keys\nexport function supportedSigningAlgsForKey(\n  jwk: KmsJwkPrivate | Exclude<KmsJwkPublic, KmsJwkPublicOct>\n): KnownJwaSignatureAlgorithm[] {\n  if (jwk.kty === 'EC' || jwk.kty === 'OKP') {\n    switch (jwk.crv) {\n      case 'secp256k1':\n        return ['ES256K']\n      case 'P-256':\n        return ['ES256']\n      case 'P-384':\n        return ['ES384']\n      case 'P-521':\n        return ['ES512']\n      case 'Ed25519':\n        return ['EdDSA']\n\n      // X25519\n      default:\n        return []\n    }\n  }\n\n  if (jwk.kty === 'RSA') {\n    const keyBits = TypedArrayEncoder.fromBase64(jwk.n).length * 8\n\n    // RSA needs minimum bit lengths for each algorithm\n    const minBits2048: KnownJwaSignatureAlgorithm[] = ['PS256', 'RS256']\n    const minBits3072: KnownJwaSignatureAlgorithm[] = [...minBits2048, 'RS384', 'PS384']\n    const minBits4096: KnownJwaSignatureAlgorithm[] = [...minBits3072, 'RS512', 'PS512']\n\n    return keyBits >= 4096 ? minBits4096 : keyBits >= 3072 ? minBits3072 : keyBits >= 2048 ? minBits2048 : []\n  }\n\n  // On other layers we need to filter for alg types, as you don't want any `oct` key with enough length to used for hmac purposes\n  if (jwk.kty === 'oct') {\n    const keyBits = TypedArrayEncoder.fromBase64(jwk.k).length * 8\n\n    // hmac needs minimum bit lengths for each algorithm\n    const minBits256: KnownJwaSignatureAlgorithm[] = ['HS256']\n    const minBits384: KnownJwaSignatureAlgorithm[] = [...minBits256, 'HS384']\n    const minBits512: KnownJwaSignatureAlgorithm[] = [...minBits384, 'HS512']\n    return keyBits >= 512 ? minBits512 : keyBits >= 384 ? minBits384 : keyBits >= 256 ? minBits256 : []\n  }\n\n  return []\n}\n\n// TODO: Can we move this to the JWK classes?\nexport function createKeyTypeForSigningAlgorithm(algorithm: KnownJwaSignatureAlgorithm): KmsCreateKeyType {\n  // On JWK class we can have\n  if (algorithm === 'ES256') {\n    return {\n      kty: 'EC',\n      crv: 'P-256',\n    }\n  }\n\n  if (algorithm === 'ES384') {\n    return {\n      kty: 'EC',\n      crv: 'P-384',\n    }\n  }\n\n  if (algorithm === 'ES512') {\n    return {\n      kty: 'EC',\n      crv: 'P-521',\n    }\n  }\n\n  if (algorithm === 'ES256K') {\n    return {\n      kty: 'EC',\n      crv: 'secp256k1',\n    }\n  }\n\n  if (algorithm === 'EdDSA') {\n    return {\n      kty: 'OKP',\n      crv: 'Ed25519',\n    }\n  }\n\n  if (algorithm === 'HS256') {\n    return {\n      kty: 'oct',\n      algorithm: 'hmac',\n      length: 256,\n    }\n  }\n\n  if (algorithm === 'HS384') {\n    return {\n      kty: 'oct',\n      algorithm: 'hmac',\n      length: 384,\n    }\n  }\n\n  if (algorithm === 'HS512') {\n    return {\n      kty: 'oct',\n      algorithm: 'hmac',\n      length: 512,\n    }\n  }\n\n  if (algorithm === 'PS256' || algorithm === 'RS256') {\n    return {\n      kty: 'RSA',\n      modulusLength: 2048,\n    }\n  }\n\n  if (algorithm === 'PS384' || algorithm === 'RS384') {\n    return {\n      kty: 'RSA',\n      modulusLength: 3072,\n    }\n  }\n\n  if (algorithm === 'PS512' || algorithm === 'RS512') {\n    return {\n      kty: 'RSA',\n      modulusLength: 4096,\n    }\n  }\n\n  throw new KeyManagementError(`unknown signature algorithm '${algorithm}' for creating key `)\n}\n"],"mappings":";;;;;;;;;;;;;;AAcA,SAAgB,gCACd,KAC8B;CAC9B,MAAM,gBAAgB,2BAA2B,IAAI;CACrD,MAAM,aAAa,IAAI;AAEvB,QAAO,CAAC,aAEJ,gBAEA,cAAc,cAAc,SAAS,WAAyC,GAC5E,CAAC,WAAyC,GAE1C,EAAE;;AAGV,SAAgB,8BACd,KACA,WACA;CACA,MAAM,cAAc,gCAAgC,IAAI;AACxD,KAAI,CAAC,YAAY,SAAS,UAAU,EAAE;EACpC,MAAM,kBACJ,YAAY,SAAS,IAAI,qBAAqB,YAAY,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;AACpG,QAAM,IAAI,mBACR,GAAG,uBACD,IACD,CAAC,kCAAkC,UAAU,2CAA2C,kBAC1F;;;AAML,SAAgB,2BACd,KAC8B;AAC9B,KAAI,IAAI,QAAQ,QAAQ,IAAI,QAAQ,MAClC,SAAQ,IAAI,KAAZ;EACE,KAAK,YACH,QAAO,CAAC,SAAS;EACnB,KAAK,QACH,QAAO,CAAC,QAAQ;EAClB,KAAK,QACH,QAAO,CAAC,QAAQ;EAClB,KAAK,QACH,QAAO,CAAC,QAAQ;EAClB,KAAK,UACH,QAAO,CAAC,QAAQ;EAGlB,QACE,QAAO,EAAE;;AAIf,KAAI,IAAI,QAAQ,OAAO;EACrB,MAAM,UAAU,kBAAkB,WAAW,IAAI,EAAE,CAAC,SAAS;EAG7D,MAAMA,cAA4C,CAAC,SAAS,QAAQ;EACpE,MAAMC,cAA4C;GAAC,GAAG;GAAa;GAAS;GAAQ;EACpF,MAAMC,cAA4C;GAAC,GAAG;GAAa;GAAS;GAAQ;AAEpF,SAAO,WAAW,OAAO,cAAc,WAAW,OAAO,cAAc,WAAW,OAAO,cAAc,EAAE;;AAI3G,KAAI,IAAI,QAAQ,OAAO;EACrB,MAAM,UAAU,kBAAkB,WAAW,IAAI,EAAE,CAAC,SAAS;EAG7D,MAAMC,aAA2C,CAAC,QAAQ;EAC1D,MAAMC,aAA2C,CAAC,GAAG,YAAY,QAAQ;EACzE,MAAMC,aAA2C,CAAC,GAAG,YAAY,QAAQ;AACzE,SAAO,WAAW,MAAM,aAAa,WAAW,MAAM,aAAa,WAAW,MAAM,aAAa,EAAE;;AAGrG,QAAO,EAAE;;AAIX,SAAgB,iCAAiC,WAAyD;AAExG,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,SAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,KAAK;EACN;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,WAAW;EACX,QAAQ;EACT;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,WAAW;EACX,QAAQ;EACT;AAGH,KAAI,cAAc,QAChB,QAAO;EACL,KAAK;EACL,WAAW;EACX,QAAQ;EACT;AAGH,KAAI,cAAc,WAAW,cAAc,QACzC,QAAO;EACL,KAAK;EACL,eAAe;EAChB;AAGH,KAAI,cAAc,WAAW,cAAc,QACzC,QAAO;EACL,KAAK;EACL,eAAe;EAChB;AAGH,KAAI,cAAc,WAAW,cAAc,QACzC,QAAO;EACL,KAAK;EACL,eAAe;EAChB;AAGH,OAAM,IAAI,mBAAmB,gCAAgC,UAAU,qBAAqB"}

package/build/modules/kms/jwk/assertSupported.d.mts

@@ -1,8 +1,8 @@
 import { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyAgreementAlgorithm, KnownJwaKeyEncryptionAlgorithm } from "./jwa.mjs";
-import { KmsEncryptDataEncryption } from "../options/KmsEncryptOptions.mjs";
 import { KmsDecryptDataDecryption } from "../options/KmsDecryptOptions.mjs";
-import { KmsKeyAgreementEncryptOptions } from "../options/KmsKeyAgreementEncryptOptions.mjs";
+import { KmsEncryptDataEncryption } from "../options/KmsEncryptOptions.mjs";
 import { KmsKeyAgreementDecryptOptions } from "../options/KmsKeyAgreementDecryptOptions.mjs";
+import { KmsKeyAgreementEncryptOptions } from "../options/KmsKeyAgreementEncryptOptions.mjs";
 
 //#region src/modules/kms/jwk/assertSupported.d.ts
 declare function assertSupportedKeyAgreementAlgorithm<KeyAgreement extends KmsKeyAgreementEncryptOptions | KmsKeyAgreementDecryptOptions, SupportedAlgorithms extends KnownJwaKeyAgreementAlgorithm[]>(keyAgreement: KeyAgreement, supportedAlgorithms: SupportedAlgorithms, backend: string): asserts keyAgreement is KeyAgreement & {

package/build/modules/kms/jwk/assertSupported.d.ts

@@ -1,8 +1,8 @@
 import { KnownJwaContentEncryptionAlgorithm, KnownJwaKeyAgreementAlgorithm, KnownJwaKeyEncryptionAlgorithm } from "./jwa.js";
-import { KmsEncryptDataEncryption } from "../options/KmsEncryptOptions.js";
 import { KmsDecryptDataDecryption } from "../options/KmsDecryptOptions.js";
-import { KmsKeyAgreementEncryptOptions } from "../options/KmsKeyAgreementEncryptOptions.js";
+import { KmsEncryptDataEncryption } from "../options/KmsEncryptOptions.js";
 import { KmsKeyAgreementDecryptOptions } from "../options/KmsKeyAgreementDecryptOptions.js";
+import { KmsKeyAgreementEncryptOptions } from "../options/KmsKeyAgreementEncryptOptions.js";
 
 //#region src/modules/kms/jwk/assertSupported.d.ts
 declare function assertSupportedKeyAgreementAlgorithm<KeyAgreement extends KmsKeyAgreementEncryptOptions | KmsKeyAgreementDecryptOptions, SupportedAlgorithms extends KnownJwaKeyAgreementAlgorithm[]>(keyAgreement: KeyAgreement, supportedAlgorithms: SupportedAlgorithms, backend: string): asserts keyAgreement is KeyAgreement & {

package/build/modules/kms/jwk/humanDescription.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"humanDescription.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/humanDescription.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAYA;;;;AAAwE,iBAAxD,sBAAA,CAAwD,GAAA,EAA5B,aAA4B,GAAZ,YAAY,CAAA,EAAA,MAAA"}
+{"version":3,"file":"humanDescription.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/humanDescription.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAWA;;;;AAAwE,iBAAxD,sBAAA,CAAwD,GAAA,EAA5B,aAA4B,GAAZ,YAAY,CAAA,EAAA,MAAA"}

package/build/modules/kms/jwk/humanDescription.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"humanDescription.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/humanDescription.ts"],"sourcesContent":[],"mappings":";;;;;;AAYA;;;;;;iBAAgB,sBAAA,MAA4B,gBAAgB"}
+{"version":3,"file":"humanDescription.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/humanDescription.ts"],"sourcesContent":[],"mappings":";;;;;;AAWA;;;;;;iBAAgB,sBAAA,MAA4B,gBAAgB"}

package/build/modules/kms/jwk/humanDescription.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"humanDescription.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/humanDescription.ts"],"sourcesContent":["import type { KmsJwkPrivate, KmsJwkPublic } from './knownJwk'\n\nimport { TypedArrayEncoder } from '../../../utils'\n\n/**\n * Gets text description of a key.\n *\n * - `EC key with crv '<crv>'`\n * - `RSA key with bith length <bitLength>\n * - `oct key`\n * - `'<kty>' key`\n */\nexport function getJwkHumanDescription(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (jwk.kty === 'EC' || jwk.kty === 'OKP') {\n    return `${jwk.kty} key with crv '${jwk.crv}'`\n  }\n\n  if (jwk.kty === 'RSA') {\n    // n is the modulus, base64url encoded. Decode to get bit length\n    const nBytes = TypedArrayEncoder.fromBase64(jwk.n).length\n    const bitLength = nBytes * 8\n    return `RSA key with bit length ${bitLength}`\n  }\n  if (jwk.kty === 'oct') {\n    return 'oct key'\n  }\n\n  // @ts-expect-error\n  return `'${jwk.kty}' key'`\n}\n"],"mappings":";;;;;;;;;;;;;;AAYA,SAAgB,uBAAuB,KAAmC;AACxE,KAAI,IAAI,QAAQ,QAAQ,IAAI,QAAQ,MAClC,QAAO,GAAG,IAAI,IAAI,iBAAiB,IAAI,IAAI;AAG7C,KAAI,IAAI,QAAQ,MAId,QAAO,2BAFQ,kBAAkB,WAAW,IAAI,EAAE,CAAC,SACxB;AAG7B,KAAI,IAAI,QAAQ,MACd,QAAO;AAIT,QAAO,IAAI,IAAI,IAAI"}
+{"version":3,"file":"humanDescription.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/humanDescription.ts"],"sourcesContent":["import { TypedArrayEncoder } from '../../../utils'\nimport type { KmsJwkPrivate, KmsJwkPublic } from './knownJwk'\n\n/**\n * Gets text description of a key.\n *\n * - `EC key with crv '<crv>'`\n * - `RSA key with bith length <bitLength>\n * - `oct key`\n * - `'<kty>' key`\n */\nexport function getJwkHumanDescription(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (jwk.kty === 'EC' || jwk.kty === 'OKP') {\n    return `${jwk.kty} key with crv '${jwk.crv}'`\n  }\n\n  if (jwk.kty === 'RSA') {\n    // n is the modulus, base64url encoded. Decode to get bit length\n    const nBytes = TypedArrayEncoder.fromBase64(jwk.n).length\n    const bitLength = nBytes * 8\n    return `RSA key with bit length ${bitLength}`\n  }\n  if (jwk.kty === 'oct') {\n    return 'oct key'\n  }\n\n  // @ts-expect-error\n  return `'${jwk.kty}' key'`\n}\n"],"mappings":";;;;;;;;;;;;;;AAWA,SAAgB,uBAAuB,KAAmC;AACxE,KAAI,IAAI,QAAQ,QAAQ,IAAI,QAAQ,MAClC,QAAO,GAAG,IAAI,IAAI,iBAAiB,IAAI,IAAI;AAG7C,KAAI,IAAI,QAAQ,MAId,QAAO,2BAFQ,kBAAkB,WAAW,IAAI,EAAE,CAAC,SACxB;AAG7B,KAAI,IAAI,QAAQ,MACd,QAAO;AAIT,QAAO,IAAI,IAAI,IAAI"}

package/build/modules/kms/jwk/index.js

@@ -1,22 +1,22 @@
 
 
-const require_jwa = require('./jwa.js');
 const require_humanDescription = require('./humanDescription.js');
+const require_encryption = require('./alg/encryption.js');
+const require_keyDerivation = require('./alg/keyDerivation.js');
+const require_signing = require('./alg/signing.js');
+require('./alg/index.js');
+const require_assertSupported = require('./assertSupported.js');
+const require_equals = require('./equals.js');
+const require_jwa = require('./jwa.js');
 const require_keyOps = require('./keyOps.js');
 const require_knownJwk = require('./knownJwk.js');
-const require_assertSupported = require('./assertSupported.js');
+const require_ecSignature = require('./kty/ec/ecSignature.js');
 const require_P256PublicJwk = require('./kty/ec/P256PublicJwk.js');
 const require_P384PublicJwk = require('./kty/ec/P384PublicJwk.js');
 const require_P521PublicJwk = require('./kty/ec/P521PublicJwk.js');
 const require_Secp256k1PublicJwk = require('./kty/ec/Secp256k1PublicJwk.js');
-const require_ecSignature = require('./kty/ec/ecSignature.js');
 const require_X25519PublicJwk = require('./kty/okp/X25519PublicJwk.js');
 const require_Ed25519PublicJwk = require('./kty/okp/Ed25519PublicJwk.js');
 const require_RsaPublicJwk = require('./kty/rsa/RsaPublicJwk.js');
 require('./kty/index.js');
-const require_encryption = require('./alg/encryption.js');
-const require_signing = require('./alg/signing.js');
-const require_keyDerivation = require('./alg/keyDerivation.js');
-require('./alg/index.js');
-const require_equals = require('./equals.js');
 const require_PublicJwk = require('./PublicJwk.js');

package/build/modules/kms/jwk/index.mjs

@@ -1,22 +1,22 @@
 
 
-import { KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithms } from "./jwa.mjs";
 import { getJwkHumanDescription } from "./humanDescription.mjs";
+import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./alg/encryption.mjs";
+import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./alg/keyDerivation.mjs";
+import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./alg/signing.mjs";
+import "./alg/index.mjs";
+import { assertSupportedEncryptionAlgorithm, assertSupportedKeyAgreementAlgorithm } from "./assertSupported.mjs";
+import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./equals.mjs";
+import { KnownJwaContentEncryptionAlgorithms, KnownJwaKeyAgreementAlgorithms, KnownJwaKeyEncryptionAlgorithms, KnownJwaSignatureAlgorithms } from "./jwa.mjs";
 import { assertKeyAllowsDecrypt, assertKeyAllowsDerive, assertKeyAllowsEncrypt, assertKeyAllowsSign, assertKeyAllowsVerify, keyAllowsDecrypt, keyAllowsEncrypt, keyAllowsSign, keyAllowsVerify } from "./keyOps.mjs";
 import { assertJwkAsymmetric, isJwkAsymmetric, publicJwkFromPrivateJwk } from "./knownJwk.mjs";
-import { assertSupportedEncryptionAlgorithm, assertSupportedKeyAgreementAlgorithm } from "./assertSupported.mjs";
+import { derEcSignatureToRaw, rawEcSignatureToDer } from "./kty/ec/ecSignature.mjs";
 import { P256PublicJwk } from "./kty/ec/P256PublicJwk.mjs";
 import { P384PublicJwk } from "./kty/ec/P384PublicJwk.mjs";
 import { P521PublicJwk } from "./kty/ec/P521PublicJwk.mjs";
 import { Secp256k1PublicJwk } from "./kty/ec/Secp256k1PublicJwk.mjs";
-import { derEcSignatureToRaw, rawEcSignatureToDer } from "./kty/ec/ecSignature.mjs";
 import { X25519PublicJwk } from "./kty/okp/X25519PublicJwk.mjs";
 import { Ed25519PublicJwk } from "./kty/okp/Ed25519PublicJwk.mjs";
 import { RsaPublicJwk } from "./kty/rsa/RsaPublicJwk.mjs";
 import "./kty/index.mjs";
-import { allowedEncryptionAlgsForKey, assertAllowedEncryptionAlgForKey, supportedEncryptionAlgsForKey } from "./alg/encryption.mjs";
-import { allowedSigningAlgsForSigningKey, assertAllowedSigningAlgForKey, supportedSigningAlgsForKey } from "./alg/signing.mjs";
-import { allowedKeyDerivationAlgsForKey, assertAllowedKeyDerivationAlgForKey, supportedKeyDerivationAlgsForKey } from "./alg/keyDerivation.mjs";
-import "./alg/index.mjs";
-import { assertAsymmetricJwkKeyTypeMatches, assymetricJwkKeyTypeMatches, assymetricPublicJwkMatches } from "./equals.mjs";
 import { PublicJwk } from "./PublicJwk.mjs";

package/build/modules/kms/jwk/jwkThumbprint.js

@@ -1,9 +1,9 @@
 
 
-const require_Hasher = require('../../../crypto/hashes/Hasher.js');
-const require_zod = require('../../../utils/zod.js');
 const require_TypedArrayEncoder = require('../../../utils/TypedArrayEncoder.js');
+const require_Hasher = require('../../../crypto/hashes/Hasher.js');
 require('../../../utils/index.js');
+const require_zod = require('../../../utils/zod.js');
 const require_knownJwk = require('./knownJwk.js');
 
 //#region src/modules/kms/jwk/jwkThumbprint.ts

package/build/modules/kms/jwk/jwkThumbprint.mjs

@@ -1,9 +1,9 @@
 
 
-import { Hasher } from "../../../crypto/hashes/Hasher.mjs";
-import { zParseWithErrorHandling } from "../../../utils/zod.mjs";
 import { TypedArrayEncoder } from "../../../utils/TypedArrayEncoder.mjs";
+import { Hasher } from "../../../crypto/hashes/Hasher.mjs";
 import "../../../utils/index.mjs";
+import { zParseWithErrorHandling } from "../../../utils/zod.mjs";
 import { zKmsJwkPublic } from "./knownJwk.mjs";
 
 //#region src/modules/kms/jwk/jwkThumbprint.ts

package/build/modules/kms/jwk/jwkThumbprint.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"jwkThumbprint.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/jwkThumbprint.ts"],"sourcesContent":["import { type HashName, Hasher } from '../../../crypto/hashes/Hasher'\nimport { TypedArrayEncoder } from '../../../utils'\nimport { zParseWithErrorHandling } from '../../../utils/zod'\nimport { type KmsJwkPublic, zKmsJwkPublic } from './knownJwk'\n\nexport const zJwkThumbprintComponents = zKmsJwkPublic.transform((data) => {\n  if (data.kty === 'EC') {\n    return { crv: data.crv, kty: data.kty, x: data.x, y: data.y }\n  }\n\n  if (data.kty === 'OKP') {\n    return { crv: data.crv, kty: data.kty, x: data.x }\n  }\n\n  if (data.kty === 'RSA') {\n    return { e: data.e, kty: data.kty, n: data.n }\n  }\n\n  if (data.kty === 'oct') {\n    return { k: data.k, kty: data.kty }\n  }\n\n  throw new Error('Unsupported kty')\n})\n\nexport interface CalculateJwkThumbprintOptions {\n  /**\n   * The jwk to calcualte the thumbprint for.\n   */\n  jwk: KmsJwkPublic\n\n  /**\n   * The hashing algorithm to use for calculating the thumbprint\n   */\n  hashAlgorithm: HashName\n}\n\nexport function calculateJwkThumbprint(options: CalculateJwkThumbprintOptions): Uint8Array {\n  const jwkThumbprintComponents = zParseWithErrorHandling(\n    zJwkThumbprintComponents,\n    options.jwk,\n    `Provided jwk does not match a supported jwk structure. Either the 'kty' is not supported, or required values are missing.`\n  )\n\n  const thumbprint = Hasher.hash(\n    TypedArrayEncoder.fromString(JSON.stringify(jwkThumbprintComponents)),\n    options.hashAlgorithm\n  )\n\n  return thumbprint\n}\n"],"mappings":";;;;;;;;;AAKA,MAAa,2BAA2B,cAAc,WAAW,SAAS;AACxE,KAAI,KAAK,QAAQ,KACf,QAAO;EAAE,KAAK,KAAK;EAAK,KAAK,KAAK;EAAK,GAAG,KAAK;EAAG,GAAG,KAAK;EAAG;AAG/D,KAAI,KAAK,QAAQ,MACf,QAAO;EAAE,KAAK,KAAK;EAAK,KAAK,KAAK;EAAK,GAAG,KAAK;EAAG;AAGpD,KAAI,KAAK,QAAQ,MACf,QAAO;EAAE,GAAG,KAAK;EAAG,KAAK,KAAK;EAAK,GAAG,KAAK;EAAG;AAGhD,KAAI,KAAK,QAAQ,MACf,QAAO;EAAE,GAAG,KAAK;EAAG,KAAK,KAAK;EAAK;AAGrC,OAAM,IAAI,MAAM,kBAAkB;EAClC;AAcF,SAAgB,uBAAuB,SAAoD;CACzF,MAAM,0BAA0B,wBAC9B,0BACA,QAAQ,KACR,4HACD;AAOD,QALmB,OAAO,KACxB,kBAAkB,WAAW,KAAK,UAAU,wBAAwB,CAAC,EACrE,QAAQ,cACT"}
+{"version":3,"file":"jwkThumbprint.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/jwkThumbprint.ts"],"sourcesContent":["import { Hasher, type HashName } from '../../../crypto/hashes/Hasher'\nimport type { Uint8ArrayBuffer } from '../../../types'\nimport { TypedArrayEncoder } from '../../../utils'\nimport { zParseWithErrorHandling } from '../../../utils/zod'\nimport { type KmsJwkPublic, zKmsJwkPublic } from './knownJwk'\n\nexport const zJwkThumbprintComponents = zKmsJwkPublic.transform((data) => {\n  if (data.kty === 'EC') {\n    return { crv: data.crv, kty: data.kty, x: data.x, y: data.y }\n  }\n\n  if (data.kty === 'OKP') {\n    return { crv: data.crv, kty: data.kty, x: data.x }\n  }\n\n  if (data.kty === 'RSA') {\n    return { e: data.e, kty: data.kty, n: data.n }\n  }\n\n  if (data.kty === 'oct') {\n    return { k: data.k, kty: data.kty }\n  }\n\n  throw new Error('Unsupported kty')\n})\n\nexport interface CalculateJwkThumbprintOptions {\n  /**\n   * The jwk to calcualte the thumbprint for.\n   */\n  jwk: KmsJwkPublic\n\n  /**\n   * The hashing algorithm to use for calculating the thumbprint\n   */\n  hashAlgorithm: HashName\n}\n\nexport function calculateJwkThumbprint(options: CalculateJwkThumbprintOptions): Uint8ArrayBuffer {\n  const jwkThumbprintComponents = zParseWithErrorHandling(\n    zJwkThumbprintComponents,\n    options.jwk,\n    `Provided jwk does not match a supported jwk structure. Either the 'kty' is not supported, or required values are missing.`\n  )\n\n  const thumbprint = Hasher.hash(\n    TypedArrayEncoder.fromString(JSON.stringify(jwkThumbprintComponents)),\n    options.hashAlgorithm\n  )\n\n  return thumbprint\n}\n"],"mappings":";;;;;;;;;AAMA,MAAa,2BAA2B,cAAc,WAAW,SAAS;AACxE,KAAI,KAAK,QAAQ,KACf,QAAO;EAAE,KAAK,KAAK;EAAK,KAAK,KAAK;EAAK,GAAG,KAAK;EAAG,GAAG,KAAK;EAAG;AAG/D,KAAI,KAAK,QAAQ,MACf,QAAO;EAAE,KAAK,KAAK;EAAK,KAAK,KAAK;EAAK,GAAG,KAAK;EAAG;AAGpD,KAAI,KAAK,QAAQ,MACf,QAAO;EAAE,GAAG,KAAK;EAAG,KAAK,KAAK;EAAK,GAAG,KAAK;EAAG;AAGhD,KAAI,KAAK,QAAQ,MACf,QAAO;EAAE,GAAG,KAAK;EAAG,KAAK,KAAK;EAAK;AAGrC,OAAM,IAAI,MAAM,kBAAkB;EAClC;AAcF,SAAgB,uBAAuB,SAA0D;CAC/F,MAAM,0BAA0B,wBAC9B,0BACA,QAAQ,KACR,4HACD;AAOD,QALmB,OAAO,KACxB,kBAAkB,WAAW,KAAK,UAAU,wBAAwB,CAAC,EACrE,QAAQ,cACT"}

package/build/modules/kms/jwk/keyOps.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"keyOps.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/keyOps.ts"],"sourcesContent":[],"mappings":";;;;;AA8CgB,iBANA,qBAAA,CAMe,GAAA,EANY,aAMZ,GAN4B,YAM5B,CAAA,EAAA,IAAA;AAAA,iBAAf,eAAA,CAAe,GAAA,EAAM,YAAN,GAAqB,aAArB,CAAA,EAAA,OAAA;AAAM,iBAWrB,qBAAA,CAXqB,GAAA,EAWM,aAXN,GAWsB,YAXtB,CAAA,EAAA,IAAA;AAAe,iBAiBpC,aAAA,CAjBoC,GAAA,EAiBjB,aAjBiB,GAiBD,YAjBC,CAAA,EAAA,OAAA;AAAa,iBA4BjD,mBAAA,CA5BiD,GAAA,EA4BxB,aA5BwB,GA4BR,YA5BQ,CAAA,EAAA,IAAA;AAWjD,iBAuBA,gBAAA,CAvBqB,GAAA,EAuBC,YAvBD,GAuBgB,aAvBhB,CAAA,EAAA,OAAA;AAAA,iBAkCrB,sBAAA,CAlCqB,GAAA,EAkCO,aAlCP,GAkCuB,YAlCvB,CAAA,EAAA,IAAA;AAAM,iBAwC3B,gBAAA,CAxC2B,GAAA,EAwCL,YAxCK,GAwCU,aAxCV,CAAA,EAAA,OAAA;AAAgB,iBAmD3C,sBAAA,CAnD2C,GAAA,EAmDf,aAnDe,GAmDC,YAnDD,CAAA,EAAA,IAAA"}
+{"version":3,"file":"keyOps.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/keyOps.ts"],"sourcesContent":[],"mappings":";;;;;AA4CgB,iBANA,qBAAA,CAMe,GAAA,EANY,aAMZ,GAN4B,YAM5B,CAAA,EAAA,IAAA;AAAA,iBAAf,eAAA,CAAe,GAAA,EAAM,YAAN,GAAqB,aAArB,CAAA,EAAA,OAAA;AAAM,iBAWrB,qBAAA,CAXqB,GAAA,EAWM,aAXN,GAWsB,YAXtB,CAAA,EAAA,IAAA;AAAe,iBAiBpC,aAAA,CAjBoC,GAAA,EAiBjB,aAjBiB,GAiBD,YAjBC,CAAA,EAAA,OAAA;AAAa,iBA4BjD,mBAAA,CA5BiD,GAAA,EA4BxB,aA5BwB,GA4BR,YA5BQ,CAAA,EAAA,IAAA;AAWjD,iBAuBA,gBAAA,CAvBqB,GAAA,EAuBC,YAvBD,GAuBgB,aAvBhB,CAAA,EAAA,OAAA;AAAA,iBAkCrB,sBAAA,CAlCqB,GAAA,EAkCO,aAlCP,GAkCuB,YAlCvB,CAAA,EAAA,IAAA;AAAM,iBAwC3B,gBAAA,CAxC2B,GAAA,EAwCL,YAxCK,GAwCU,aAxCV,CAAA,EAAA,OAAA;AAAgB,iBAmD3C,sBAAA,CAnD2C,GAAA,EAmDf,aAnDe,GAmDC,YAnDD,CAAA,EAAA,IAAA"}

package/build/modules/kms/jwk/keyOps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keyOps.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/keyOps.ts"],"sourcesContent":[],"mappings":";;;;;AA8CqC,iBANrB,qBAAA,CAMqB,GAAA,EANM,aAMN,GANsB,YAMtB,CAAA,EAAA,IAAA;AAAe,iBAApC,eAAA,CAAoC,GAAA,EAAf,YAAe,GAAA,aAAA,CAAA,EAAA,OAAA;AAAa,iBAWjD,qBAAA,CAXiD,GAAA,EAWtB,aAXsB,GAWN,YAXM,CAAA,EAAA,IAAA;AAWjD,iBAMA,aAAA,CANqB,GAAA,EAMF,aANE,GAMc,YANd,CAAA,EAAA,OAAA;AAAA,iBAiBrB,mBAAA,CAjBqB,GAAA,EAiBI,aAjBJ,GAiBoB,YAjBpB,CAAA,EAAA,IAAA;AAAM,iBAuB3B,gBAAA,CAvB2B,GAAA,EAuBL,YAvBK,GAuBU,aAvBV,CAAA,EAAA,OAAA;AAAgB,iBAkC3C,sBAAA,CAlC2C,GAAA,EAkCf,aAlCe,GAkCC,YAlCD,CAAA,EAAA,IAAA;AAAY,iBAwCvD,gBAAA,CAxCuD,GAAA,EAwCjC,YAxCiC,GAwClB,aAxCkB,CAAA,EAAA,OAAA;AAMvD,iBA6CA,sBAAA,CA7Ca,GAAA,EA6Ce,aA7Cf,GA6C+B,YA7C/B,CAAA,EAAA,IAAA"}
+{"version":3,"file":"keyOps.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/keyOps.ts"],"sourcesContent":[],"mappings":";;;;;AA4CqC,iBANrB,qBAAA,CAMqB,GAAA,EANM,aAMN,GANsB,YAMtB,CAAA,EAAA,IAAA;AAAe,iBAApC,eAAA,CAAoC,GAAA,EAAf,YAAe,GAAA,aAAA,CAAA,EAAA,OAAA;AAAa,iBAWjD,qBAAA,CAXiD,GAAA,EAWtB,aAXsB,GAWN,YAXM,CAAA,EAAA,IAAA;AAWjD,iBAMA,aAAA,CANqB,GAAA,EAMF,aANE,GAMc,YANd,CAAA,EAAA,OAAA;AAAA,iBAiBrB,mBAAA,CAjBqB,GAAA,EAiBI,aAjBJ,GAiBoB,YAjBpB,CAAA,EAAA,IAAA;AAAM,iBAuB3B,gBAAA,CAvB2B,GAAA,EAuBL,YAvBK,GAuBU,aAvBV,CAAA,EAAA,OAAA;AAAgB,iBAkC3C,sBAAA,CAlC2C,GAAA,EAkCf,aAlCe,GAkCC,YAlCD,CAAA,EAAA,IAAA;AAAY,iBAwCvD,gBAAA,CAxCuD,GAAA,EAwCjC,YAxCiC,GAwClB,aAxCkB,CAAA,EAAA,OAAA;AAMvD,iBA6CA,sBAAA,CA7Ca,GAAA,EA6Ce,aA7Cf,GA6C+B,YA7C/B,CAAA,EAAA,IAAA"}

package/build/modules/kms/jwk/keyOps.js

@@ -1,9 +1,9 @@
 
 
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.js');
-const require_zod = require('../../../utils/zod.js');
 const require_KeyManagementError = require('../error/KeyManagementError.js');
 const require_humanDescription = require('./humanDescription.js');
+const require_zod = require('../../../utils/zod.js');
 let zod = require("zod");
 zod = require_rolldown_runtime.__toESM(zod);
 

package/build/modules/kms/jwk/keyOps.mjs

@@ -1,8 +1,8 @@
 
 
-import { zUniqueArray } from "../../../utils/zod.mjs";
 import { KeyManagementError } from "../error/KeyManagementError.mjs";
 import { getJwkHumanDescription } from "./humanDescription.mjs";
+import { zUniqueArray } from "../../../utils/zod.mjs";
 import { z } from "zod";
 
 //#region src/modules/kms/jwk/keyOps.ts

package/build/modules/kms/jwk/keyOps.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keyOps.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/keyOps.ts"],"sourcesContent":["import type { KmsJwkPrivate, KmsJwkPublic } from './knownJwk'\n\nimport { z } from 'zod'\nimport { KeyManagementError } from '../error/KeyManagementError'\n\nimport { zUniqueArray } from '../../../utils/zod'\nimport { getJwkHumanDescription } from './humanDescription'\n\nexport const zKnownJwkUse = z.union([z.literal('sig').describe('signature'), z.literal('enc').describe('encryption')])\nexport type KnownJwkUse = z.output<typeof zKnownJwkUse>\n\nexport const zJwkUse = z.union([zKnownJwkUse, z.string()])\nexport type JwkUse = z.output<typeof zJwkUse>\n\nexport const zKnownJwkKeyOps = z.union([\n  z.literal('sign').describe('compute digital signature or MAC'),\n  z.literal('verify').describe('verify digital signature or MAC'),\n  z.literal('encrypt').describe('encrypt content'),\n  z.literal('decrypt').describe('decrypt content and validate decryption, if applicable'),\n  z.literal('wrapKey').describe('encrypt key'),\n  z.literal('unwrapKey').describe('decrypt key and validate decryption, if applicable'),\n  z.literal('deriveKey').describe('derive key'),\n  z.literal('deriveBits').describe('derive bits not to be used as a key'),\n])\nexport type KnownJwkKeyOps = z.output<typeof zKnownJwkKeyOps>\n\nexport const zJwkKeyOps = zUniqueArray(z.union([zKnownJwkKeyOps, z.string()]))\nexport type JwkKeyOps = z.output<typeof zJwkKeyOps>\n\nexport function keyAllowsDerive(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'enc') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('deriveKey')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsDerive(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsDerive(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow key derivation operations`)\n  }\n}\n\nexport function keyAllowsVerify(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'sig') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('verify')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsVerify(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsVerify(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow verification operations`)\n  }\n}\n\nexport function keyAllowsSign(key: KmsJwkPrivate | KmsJwkPublic): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'sig') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('sign')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsSign(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsSign(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow signing operations`)\n  }\n}\n\nexport function keyAllowsEncrypt(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'enc') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('encrypt')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsEncrypt(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsEncrypt(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow encryption operations`)\n  }\n}\n\nexport function keyAllowsDecrypt(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'enc') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('decrypt')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsDecrypt(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsDecrypt(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow decryption operations`)\n  }\n}\n"],"mappings":";;;;;;;;AAQA,MAAa,eAAe,EAAE,MAAM,CAAC,EAAE,QAAQ,MAAM,CAAC,SAAS,YAAY,EAAE,EAAE,QAAQ,MAAM,CAAC,SAAS,aAAa,CAAC,CAAC;AAGtH,MAAa,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAG1D,MAAa,kBAAkB,EAAE,MAAM;CACrC,EAAE,QAAQ,OAAO,CAAC,SAAS,mCAAmC;CAC9D,EAAE,QAAQ,SAAS,CAAC,SAAS,kCAAkC;CAC/D,EAAE,QAAQ,UAAU,CAAC,SAAS,kBAAkB;CAChD,EAAE,QAAQ,UAAU,CAAC,SAAS,yDAAyD;CACvF,EAAE,QAAQ,UAAU,CAAC,SAAS,cAAc;CAC5C,EAAE,QAAQ,YAAY,CAAC,SAAS,qDAAqD;CACrF,EAAE,QAAQ,YAAY,CAAC,SAAS,aAAa;CAC7C,EAAE,QAAQ,aAAa,CAAC,SAAS,sCAAsC;CACxE,CAAC;AAGF,MAAa,aAAa,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG9E,SAAgB,gBAAgB,KAA4C;AAE1E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,YAAY,CACnD,QAAO;AAET,QAAO;;AAGT,SAAgB,sBAAsB,KAAmC;AACvE,KAAI,CAAC,gBAAgB,IAAI,CACvB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,iDAAiD;;AAIjH,SAAgB,gBAAgB,KAA4C;AAE1E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,SAAS,CAChD,QAAO;AAET,QAAO;;AAGT,SAAgB,sBAAsB,KAAmC;AACvE,KAAI,CAAC,gBAAgB,IAAI,CACvB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,+CAA+C;;AAI/G,SAAgB,cAAc,KAA4C;AAExE,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,OAAO,CAC9C,QAAO;AAET,QAAO;;AAGT,SAAgB,oBAAoB,KAAmC;AACrE,KAAI,CAAC,cAAc,IAAI,CACrB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,0CAA0C;;AAI1G,SAAgB,iBAAiB,KAA4C;AAE3E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,UAAU,CACjD,QAAO;AAET,QAAO;;AAGT,SAAgB,uBAAuB,KAAmC;AACxE,KAAI,CAAC,iBAAiB,IAAI,CACxB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,6CAA6C;;AAI7G,SAAgB,iBAAiB,KAA4C;AAE3E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,UAAU,CACjD,QAAO;AAET,QAAO;;AAGT,SAAgB,uBAAuB,KAAmC;AACxE,KAAI,CAAC,iBAAiB,IAAI,CACxB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,6CAA6C"}
+{"version":3,"file":"keyOps.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/keyOps.ts"],"sourcesContent":["import { z } from 'zod'\nimport { zUniqueArray } from '../../../utils/zod'\nimport { KeyManagementError } from '../error/KeyManagementError'\nimport { getJwkHumanDescription } from './humanDescription'\nimport type { KmsJwkPrivate, KmsJwkPublic } from './knownJwk'\n\nexport const zKnownJwkUse = z.union([z.literal('sig').describe('signature'), z.literal('enc').describe('encryption')])\nexport type KnownJwkUse = z.output<typeof zKnownJwkUse>\n\nexport const zJwkUse = z.union([zKnownJwkUse, z.string()])\nexport type JwkUse = z.output<typeof zJwkUse>\n\nexport const zKnownJwkKeyOps = z.union([\n  z.literal('sign').describe('compute digital signature or MAC'),\n  z.literal('verify').describe('verify digital signature or MAC'),\n  z.literal('encrypt').describe('encrypt content'),\n  z.literal('decrypt').describe('decrypt content and validate decryption, if applicable'),\n  z.literal('wrapKey').describe('encrypt key'),\n  z.literal('unwrapKey').describe('decrypt key and validate decryption, if applicable'),\n  z.literal('deriveKey').describe('derive key'),\n  z.literal('deriveBits').describe('derive bits not to be used as a key'),\n])\nexport type KnownJwkKeyOps = z.output<typeof zKnownJwkKeyOps>\n\nexport const zJwkKeyOps = zUniqueArray(z.union([zKnownJwkKeyOps, z.string()]))\nexport type JwkKeyOps = z.output<typeof zJwkKeyOps>\n\nexport function keyAllowsDerive(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'enc') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('deriveKey')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsDerive(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsDerive(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow key derivation operations`)\n  }\n}\n\nexport function keyAllowsVerify(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'sig') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('verify')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsVerify(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsVerify(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow verification operations`)\n  }\n}\n\nexport function keyAllowsSign(key: KmsJwkPrivate | KmsJwkPublic): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'sig') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('sign')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsSign(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsSign(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow signing operations`)\n  }\n}\n\nexport function keyAllowsEncrypt(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'enc') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('encrypt')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsEncrypt(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsEncrypt(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow encryption operations`)\n  }\n}\n\nexport function keyAllowsDecrypt(key: KmsJwkPublic | KmsJwkPrivate): boolean {\n  // Check if key has use/key_ops restrictions\n  if (key.use && key.use !== 'enc') {\n    return false\n  }\n  if (key.key_ops && !key.key_ops.includes('decrypt')) {\n    return false\n  }\n  return true\n}\n\nexport function assertKeyAllowsDecrypt(jwk: KmsJwkPrivate | KmsJwkPublic) {\n  if (!keyAllowsDecrypt(jwk)) {\n    throw new KeyManagementError(`${getJwkHumanDescription(jwk)} usage does not allow decryption operations`)\n  }\n}\n"],"mappings":";;;;;;;;AAMA,MAAa,eAAe,EAAE,MAAM,CAAC,EAAE,QAAQ,MAAM,CAAC,SAAS,YAAY,EAAE,EAAE,QAAQ,MAAM,CAAC,SAAS,aAAa,CAAC,CAAC;AAGtH,MAAa,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAG1D,MAAa,kBAAkB,EAAE,MAAM;CACrC,EAAE,QAAQ,OAAO,CAAC,SAAS,mCAAmC;CAC9D,EAAE,QAAQ,SAAS,CAAC,SAAS,kCAAkC;CAC/D,EAAE,QAAQ,UAAU,CAAC,SAAS,kBAAkB;CAChD,EAAE,QAAQ,UAAU,CAAC,SAAS,yDAAyD;CACvF,EAAE,QAAQ,UAAU,CAAC,SAAS,cAAc;CAC5C,EAAE,QAAQ,YAAY,CAAC,SAAS,qDAAqD;CACrF,EAAE,QAAQ,YAAY,CAAC,SAAS,aAAa;CAC7C,EAAE,QAAQ,aAAa,CAAC,SAAS,sCAAsC;CACxE,CAAC;AAGF,MAAa,aAAa,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG9E,SAAgB,gBAAgB,KAA4C;AAE1E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,YAAY,CACnD,QAAO;AAET,QAAO;;AAGT,SAAgB,sBAAsB,KAAmC;AACvE,KAAI,CAAC,gBAAgB,IAAI,CACvB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,iDAAiD;;AAIjH,SAAgB,gBAAgB,KAA4C;AAE1E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,SAAS,CAChD,QAAO;AAET,QAAO;;AAGT,SAAgB,sBAAsB,KAAmC;AACvE,KAAI,CAAC,gBAAgB,IAAI,CACvB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,+CAA+C;;AAI/G,SAAgB,cAAc,KAA4C;AAExE,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,OAAO,CAC9C,QAAO;AAET,QAAO;;AAGT,SAAgB,oBAAoB,KAAmC;AACrE,KAAI,CAAC,cAAc,IAAI,CACrB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,0CAA0C;;AAI1G,SAAgB,iBAAiB,KAA4C;AAE3E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,UAAU,CACjD,QAAO;AAET,QAAO;;AAGT,SAAgB,uBAAuB,KAAmC;AACxE,KAAI,CAAC,iBAAiB,IAAI,CACxB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,6CAA6C;;AAI7G,SAAgB,iBAAiB,KAA4C;AAE3E,KAAI,IAAI,OAAO,IAAI,QAAQ,MACzB,QAAO;AAET,KAAI,IAAI,WAAW,CAAC,IAAI,QAAQ,SAAS,UAAU,CACjD,QAAO;AAET,QAAO;;AAGT,SAAgB,uBAAuB,KAAmC;AACxE,KAAI,CAAC,iBAAiB,IAAI,CACxB,OAAM,IAAI,mBAAmB,GAAG,uBAAuB,IAAI,CAAC,6CAA6C"}

package/build/modules/kms/jwk/knownJwk.d.mts

@@ -1,8 +1,8 @@
+import { KmsCreateKeyType, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "../options/KmsCreateKeyOptions.mjs";
 import { KmsJwkPrivateEc, KmsJwkPublicEc } from "./kty/ec/ecJwk.mjs";
 import { KmsJwkPrivateOct, KmsJwkPublicOct } from "./kty/oct/octJwk.mjs";
 import { KmsJwkPrivateOkp, KmsJwkPublicOkp } from "./kty/okp/okpJwk.mjs";
 import { KmsJwkPrivateRsa, KmsJwkPublicRsa } from "./kty/rsa/rsaJwk.mjs";
-import { KmsCreateKeyType, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "../options/KmsCreateKeyOptions.mjs";
 import { z } from "zod";
 
 //#region src/modules/kms/jwk/knownJwk.d.ts

package/build/modules/kms/jwk/knownJwk.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"knownJwk.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/knownJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;cAwCa,yBAAuB,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;EAAvB,CAAA,aAAA;EAIX,CAAA,eAAA,eAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAJkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;AAKpC,CAAA,CAAA,CAAA,CAAY;AAAsB,KAAtB,sBAAA,GAAyB,CAAA,CAAE,MAAL,CAAA,OAAmB,uBAAnB,CAAA;AAAmB,iBAErC,eAAA,CAFqC,GAAA,EAG9C,YAH8C,GAG/B,aAH+B,CAAA,EAAA,GAAA,IAI3C,uBAJ2C,GAIjB,sBAJiB;AAAhB,iBAQrB,mBAAA,CARuB,GAAA,EAShC,YATgC,GASjB,aATiB,EAAA,KAAA,CAAA,EAAA,MAAA,CAAA,EAAA,QAAA,GAAA,IAWrB,sBAXqB,GAWI,uBAXJ;cAuB1B,eAAa,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAA,eAAA,CAAA;EAAA,GAAA,eAAA,YAAA,CAAA;EAMd,GAAA,eAAY,YAAA,CAAA;EAAA,OAAA,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;KAAmB,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;KAAhB,eAAE,aAAA,CAAA;EAAM,GAAA,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;EAmBtB,GAAA,eAKX,YAAA,CAAA;EAAA,UAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KALyB,EAAA,QAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnBf,YAAA,GAAe,CAAA,CAAE,cAAc;cAmB9B,gBAAc,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,eAAA,WAAA,YAAA,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;IAMf,CAAA,eAAa,YAAA,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;KAAmB,aAAA,cAAA,oBAAA,CAAA;IAAhB,CAAE,eAAA,YAAA,CAAA;IAAM,CAAA,eAAA,YAAA,CAAA;IAEvB,CAAA,eAAA,YAIX,CAAA;EAAA,CAAA,cAAA,EAAA,aAAA,CAAA,mBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAJmC,EAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAFzB,aAAA,GAAgB,CAAA,CAAE,cAAc;cAE/B,0BAAwB,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKzB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;CAAuB,EAAA;KAAmB,EAAA,IAAA;KAAhB,EAAE,OAAA,GAAA,OAAA,GAAA,OAAA,GAAA,WAAA;EAAM,CAAA,EAAA,MAAA;EAE9B,CAAA,EAAA,MAAA;EAAuB,CAAA,EAAA,MAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;KAAgB,CAAA,EAAA,MAAA,GAAA,SAAA;SAAe,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAAY,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKnF,GAAA,CAAA,EAAA,OAAA,GAAA,SAAA;EAA6B,GAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAc,CAAA,EAAA,MAAA,GAAA,SAAA;YAAoB,CAAA,EAAA,MAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;eACpF,CAAA;gBACA;gBAAa;gBACX;iBACA;iBAAa;iBACX;KAA0B,eAAA,WAAA,YAAA,CAAA;IAC1B,CAAA,eAAA,YAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;IACX,CAAA,eAAA,YAAA,CAAA;KAAyB,aAAA,cAAA,oBAAA,CAAA;IACzB,CAAA,eAAA,YAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;IAEX,CAAA,eAAA,YAA6B,CAAA;EAAA,CAAA,cAAA,EAAA,aAAA,CAAA,mBAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;IAAiB,CAAA,eAAA,YAAA,CAAA;IAAY,CAAA,eAAA,YAAA,CAAA;iBAC/E,EAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;KACA,cAAA,CAAA,KAAA,CAAA;gBAAY;gBACV;KACA,eAAA,YAAA,CAAA;KAAY,eAAA,YAAA,CAAA;SACV,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;KAAyB,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;KACzB,eAAA,aAAA,CAAA;KAAY,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;KACV,eAAA,YAAA,CAAA;YAAwB,eAAA,YAAA,CAAA;KACxB,eAAA,YAAA,CAAA;CAAY,EAAA,OAAA,cAAA,EAAA;EAEV,GAAA,EAAA,KAAA;EAA0B,CAAA,EAAA,MAAA;KAAc,MAAA;KAAoB,MAAA;KAAa,MAAA;KACjF,MAAA;MACA,MAAA;MAAa,MAAA;MACX,MAAA;KACA,CAAA,EAAA,MAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;SACX,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAyB,CAAA,EAAA,MAAA,GAAA,SAAA;KACzB,CAAA,EAAA,OAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KACX,CAAA,EAAA,MAAA,GAAA,SAAA;YAAwB,CAAA,EAAA,MAAA,GAAA,SAAA;KACxB,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,GAAA,CAAA,oBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnCV,uBAAA,GAA0B,CAAA,CAAE,cAAc;iBAEtC,uBAAA,aAAoC,gBAAgB,eAAe;KAKvE,2CAA2C,oBAAoB,aAAa,sBACpF,mBACA,aAAa,sBACX,mBACA,aAAa,sBACX;OAA0B;IAC1B,aAAa,qBACX;OAAyB;IACzB;KAEE,0CAA0C,iBAAiB,YAAY,mBAC/E,kBACA,YAAY,mBACV,kBACA,YAAY,mBACV;OAAyB;IACzB,YAAY,kBACV;OAAwB;IACxB;KAEE,wCAAwC,oBAAoB,aAAa,sBACjF,kBACA,aAAa,sBACX,kBACA,aAAa,sBACX;OAAyB;IACzB,aAAa,qBACX;OAAwB;IACxB"}
+{"version":3,"file":"knownJwk.d.mts","names":[],"sources":["../../../../src/modules/kms/jwk/knownJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;cAuCa,yBAAuB,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;EAAvB,CAAA,aAAA;EAIX,CAAA,eAAA,eAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAJkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;AAKpC,CAAA,CAAA,CAAA,CAAY;AAAsB,KAAtB,sBAAA,GAAyB,CAAA,CAAE,MAAL,CAAA,OAAmB,uBAAnB,CAAA;AAAmB,iBAErC,eAAA,CAFqC,GAAA,EAG9C,YAH8C,GAG/B,aAH+B,CAAA,EAAA,GAAA,IAI3C,uBAJ2C,GAIjB,sBAJiB;AAAhB,iBAQrB,mBAAA,CARuB,GAAA,EAShC,YATgC,GASjB,aATiB,EAAA,KAAA,CAAA,EAAA,MAAA,CAAA,EAAA,QAAA,GAAA,IAWrB,sBAXqB,GAWI,uBAXJ;cAuB1B,eAAa,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAA,eAAA,CAAA;EAAA,GAAA,eAAA,YAAA,CAAA;EAMd,GAAA,eAAY,YAAA,CAAA;EAAA,OAAA,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;KAAmB,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;KAAhB,eAAE,aAAA,CAAA;EAAM,GAAA,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;EAmBtB,GAAA,eAKX,YAAA,CAAA;EAAA,UAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KALyB,EAAA,QAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnBf,YAAA,GAAe,CAAA,CAAE,cAAc;cAmB9B,gBAAc,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,eAAA,WAAA,YAAA,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;IAMf,CAAA,eAAa,YAAA,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;KAAmB,aAAA,cAAA,oBAAA,CAAA;IAAhB,CAAE,eAAA,YAAA,CAAA;IAAM,CAAA,eAAA,YAAA,CAAA;IAEvB,CAAA,eAAA,YAIX,CAAA;EAAA,CAAA,cAAA,EAAA,aAAA,CAAA,mBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAJmC,EAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAFzB,aAAA,GAAgB,CAAA,CAAE,cAAc;cAE/B,0BAAwB,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKzB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;CAAuB,EAAA;KAAmB,EAAA,IAAA;KAAhB,EAAE,OAAA,GAAA,OAAA,GAAA,OAAA,GAAA,WAAA;EAAM,CAAA,EAAA,MAAA;EAE9B,CAAA,EAAA,MAAA;EAAuB,CAAA,EAAA,MAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;KAAgB,CAAA,EAAA,MAAA,GAAA,SAAA;SAAe,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAAY,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKnF,GAAA,CAAA,EAAA,OAAA,GAAA,SAAA;EAA6B,GAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAc,CAAA,EAAA,MAAA,GAAA,SAAA;YAAoB,CAAA,EAAA,MAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;eACpF,CAAA;gBACA;gBAAa;gBACX;iBACA;iBAAa;iBACX;KAA0B,eAAA,WAAA,YAAA,CAAA;IAC1B,CAAA,eAAA,YAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;IACX,CAAA,eAAA,YAAA,CAAA;KAAyB,aAAA,cAAA,oBAAA,CAAA;IACzB,CAAA,eAAA,YAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;IAEX,CAAA,eAAA,YAA6B,CAAA;EAAA,CAAA,cAAA,EAAA,aAAA,CAAA,mBAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;IAAiB,CAAA,eAAA,YAAA,CAAA;IAAY,CAAA,eAAA,YAAA,CAAA;iBAC/E,EAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;KACA,cAAA,CAAA,KAAA,CAAA;gBAAY;gBACV;KACA,eAAA,YAAA,CAAA;KAAY,eAAA,YAAA,CAAA;SACV,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;KAAyB,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;KACzB,eAAA,aAAA,CAAA;KAAY,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;KACV,eAAA,YAAA,CAAA;YAAwB,eAAA,YAAA,CAAA;KACxB,eAAA,YAAA,CAAA;CAAY,EAAA,OAAA,cAAA,EAAA;EAEV,GAAA,EAAA,KAAA;EAA0B,CAAA,EAAA,MAAA;KAAc,MAAA;KAAoB,MAAA;KAAa,MAAA;KACjF,MAAA;MACA,MAAA;MAAa,MAAA;MACX,MAAA;KACA,CAAA,EAAA,MAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;SACX,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAyB,CAAA,EAAA,MAAA,GAAA,SAAA;KACzB,CAAA,EAAA,OAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KACX,CAAA,EAAA,MAAA,GAAA,SAAA;YAAwB,CAAA,EAAA,MAAA,GAAA,SAAA;KACxB,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,GAAA,CAAA,oBAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnCV,uBAAA,GAA0B,CAAA,CAAE,cAAc;iBAEtC,uBAAA,aAAoC,gBAAgB,eAAe;KAKvE,2CAA2C,oBAAoB,aAAa,sBACpF,mBACA,aAAa,sBACX,mBACA,aAAa,sBACX;OAA0B;IAC1B,aAAa,qBACX;OAAyB;IACzB;KAEE,0CAA0C,iBAAiB,YAAY,mBAC/E,kBACA,YAAY,mBACV,kBACA,YAAY,mBACV;OAAyB;IACzB,YAAY,kBACV;OAAwB;IACxB;KAEE,wCAAwC,oBAAoB,aAAa,sBACjF,kBACA,aAAa,sBACX,kBACA,aAAa,sBACX;OAAyB;IACzB,aAAa,qBACX;OAAwB;IACxB"}

package/build/modules/kms/jwk/knownJwk.d.ts

@@ -1,8 +1,8 @@
+import { KmsCreateKeyType, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "../options/KmsCreateKeyOptions.js";
 import { KmsJwkPrivateEc, KmsJwkPublicEc } from "./kty/ec/ecJwk.js";
 import { KmsJwkPrivateOct, KmsJwkPublicOct } from "./kty/oct/octJwk.js";
 import { KmsJwkPrivateOkp, KmsJwkPublicOkp } from "./kty/okp/okpJwk.js";
 import { KmsJwkPrivateRsa, KmsJwkPublicRsa } from "./kty/rsa/rsaJwk.js";
-import { KmsCreateKeyType, KmsCreateKeyTypeEc, KmsCreateKeyTypeOct, KmsCreateKeyTypeOkp, KmsCreateKeyTypeRsa } from "../options/KmsCreateKeyOptions.js";
 import { z } from "zod";
 
 //#region src/modules/kms/jwk/knownJwk.d.ts

package/build/modules/kms/jwk/knownJwk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"knownJwk.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/knownJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;cAwCa,yBAAuB,CAAA,CAAA,8BAAA,CAAA,CAAA;;EAAvB,GAAA,WAAA,CAAA,CAAA,OAAA,EAAA,OAIX,EAAA,OAAA,EAAA,WAAA,CAAA,CAAA;EAAA,CAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAJkC,cAAA,CAAA,KAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKxB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAsB,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;;AAAG,KAAzB,sBAAA,GAAyB,CAAA,CAAE,MAAA,CAAA,OAAc,uBAAd,CAAA;AAAM,iBAE7B,eAAA,CAF6B,GAAA,EAGtC,YAHsC,GAGvB,aAHuB,CAAA,EAAA,GAAA,IAInC,uBAJmC,GAIT,sBAJS;AAE7B,iBAMA,mBAAA,CANe,GAAA,EAOxB,YAPwB,GAOT,aAPS,EAAA,KAAA,CAAA,EAAA,MAAA,CAAA,EAAA,QAAA,GAAA,IASb,sBATa,GASY,uBATZ;cAqBlB,eAAa,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAAA,CAAA;EAAA,GAAA,cAAA,CAAA,KAAA,CAAA;EAMd,CAAA,eAAY,eAAA,CAAA;EAAA,GAAA,eAAA,YAAA,CAAA;KAAmB,eAAA,YAAA,CAAA;SAAd,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;EAAM,GAAA,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;EAmBtB,GAAA,eAKX,aAAA,CAAA;EAAA,GAAA,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UALyB,cAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnBf,YAAA,GAAe,CAAA,CAAE,cAAc;cAmB9B,gBAAc,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAA;EAAA,EAAA,aAAA;EAMf,GAAA,eAAa,WAAA,YAAA,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;IAAmB,CAAA,eAAA,YAAA,CAAA;IAAhB,CAAE,eAAA,YAAA,CAAA;EAAM,CAAA,EAAA,aAAA,cAAA,oBAAA,CAAA;IAEvB,CAAA,eAAA,YAIX,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAJmC,EAAA,aAAA,CAAA,EAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAFzB,aAAA,GAAgB,CAAA,CAAE,cAAc;cAE/B,0BAAwB,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,OAAA,GAAA,SAAA;EAAA,GAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAKzB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAuB,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;KAAmB,CAAA,EAAA,MAAA,GAAA,SAAA;;EAAR,GAAA,EAAA,IAAA;EAE9B,GAAA,EAAA,OAAA,GAAA,OAAA,GAAA,OAAuB,GAAA,WAAA;EAAA,CAAA,EAAA,MAAA;KAAa,MAAA;KAAgB,MAAA;KAAe,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKnF,OAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAA6B,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;KAAc,CAAA,EAAA,OAAA,GAAA,SAAA;KAAoB,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;YACpF,CAAA,EAAA,MAAA,GAAA,SAAA;KACA,CAAA,EAAA,MAAA,GAAA,SAAA;eAAa,CAAA;gBACX;gBACA;gBAAa;iBACX;iBAA0B;iBAC1B;KAAa,eAAA,WAAA,YAAA,CAAA;IACX,CAAA,eAAA,YAAA,CAAA;IAAyB,CAAA,eAAA,YAAA,CAAA;IACzB,CAAA,eAAA,YAAA,CAAA;EAAa,CAAA,EAAA,aAAA,cAAA,oBAAA,CAAA;IAEX,CAAA,eAAA,YAA6B,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;iBAAiB,EAAA,aAAA,CAAA,mBAAA,CAAA;IAAY,CAAA,eAAA,YAAA,CAAA;IAC/E,CAAA,eAAA,YAAA,CAAA;IACA,CAAA,eAAA,YAAA,CAAA;iBAAY,EAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;KACV,cAAA,CAAA,KAAA,CAAA;gBACA;gBAAY;KACV,eAAA,YAAA,CAAA;KAAyB,eAAA,YAAA,CAAA;SACzB,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;KAAY,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;KACV,eAAA,aAAA,CAAA;KAAwB,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;KACxB,eAAA,YAAA,CAAA;EAAY,UAAA,eAAA,YAAA,CAAA;EAEV,GAAA,eAAA,YAA0B,CAAA;CAAA,EAAA,OAAA,cAAA,EAAA;KAAc,EAAA,KAAA;KAAoB,MAAA;KAAa,MAAA;KACjF,MAAA;KACA,MAAA;KAAa,MAAA;MACX,MAAA;MACA,MAAA;MAAa,MAAA;KACX,CAAA,EAAA,MAAA,GAAA,SAAA;KAAyB,CAAA,EAAA,MAAA,GAAA,SAAA;SACzB,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;KACX,CAAA,EAAA,OAAA,GAAA,SAAA;KAAwB,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KACxB,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnCV,uBAAA,GAA0B,CAAA,CAAE,cAAc;iBAEtC,uBAAA,aAAoC,gBAAgB,eAAe;KAKvE,2CAA2C,oBAAoB,aAAa,sBACpF,mBACA,aAAa,sBACX,mBACA,aAAa,sBACX;OAA0B;IAC1B,aAAa,qBACX;OAAyB;IACzB;KAEE,0CAA0C,iBAAiB,YAAY,mBAC/E,kBACA,YAAY,mBACV,kBACA,YAAY,mBACV;OAAyB;IACzB,YAAY,kBACV;OAAwB;IACxB;KAEE,wCAAwC,oBAAoB,aAAa,sBACjF,kBACA,aAAa,sBACX,kBACA,aAAa,sBACX;OAAyB;IACzB,aAAa,qBACX;OAAwB;IACxB"}
+{"version":3,"file":"knownJwk.d.ts","names":[],"sources":["../../../../src/modules/kms/jwk/knownJwk.ts"],"sourcesContent":[],"mappings":";;;;;;;;cAuCa,yBAAuB,CAAA,CAAA,8BAAA,CAAA,CAAA;;EAAvB,GAAA,WAAA,CAAA,CAAA,OAAA,EAAA,OAIX,EAAA,OAAA,EAAA,WAAA,CAAA,CAAA;EAAA,CAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAJkC,cAAA,CAAA,KAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKxB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAsB,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;;AAAG,KAAzB,sBAAA,GAAyB,CAAA,CAAE,MAAA,CAAA,OAAc,uBAAd,CAAA;AAAM,iBAE7B,eAAA,CAF6B,GAAA,EAGtC,YAHsC,GAGvB,aAHuB,CAAA,EAAA,GAAA,IAInC,uBAJmC,GAIT,sBAJS;AAE7B,iBAMA,mBAAA,CANe,GAAA,EAOxB,YAPwB,GAOT,aAPS,EAAA,KAAA,CAAA,EAAA,MAAA,CAAA,EAAA,QAAA,GAAA,IASb,sBATa,GASY,uBATZ;cAqBlB,eAAa,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAAA,CAAA;EAAA,GAAA,cAAA,CAAA,KAAA,CAAA;EAMd,CAAA,eAAY,eAAA,CAAA;EAAA,GAAA,eAAA,YAAA,CAAA;KAAmB,eAAA,YAAA,CAAA;SAAd,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;EAAM,GAAA,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;EAmBtB,GAAA,eAKX,aAAA,CAAA;EAAA,GAAA,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UALyB,cAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnBf,YAAA,GAAe,CAAA,CAAE,cAAc;cAmB9B,gBAAc,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAA;EAAA,EAAA,aAAA;EAMf,GAAA,eAAa,WAAA,YAAA,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;IAAmB,CAAA,eAAA,YAAA,CAAA;IAAhB,CAAE,eAAA,YAAA,CAAA;EAAM,CAAA,EAAA,aAAA,cAAA,oBAAA,CAAA;IAEvB,CAAA,eAAA,YAIX,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAJmC,EAAA,aAAA,CAAA,EAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAFzB,aAAA,GAAgB,CAAA,CAAE,cAAc;cAE/B,0BAAwB,CAAA,CAAA,8BAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;KAAA,CAAA,EAAA,OAAA,GAAA,SAAA;EAAA,GAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAKzB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAuB,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;KAAmB,CAAA,EAAA,MAAA,GAAA,SAAA;;EAAR,GAAA,EAAA,IAAA;EAE9B,GAAA,EAAA,OAAA,GAAA,OAAA,GAAA,OAAuB,GAAA,WAAA;EAAA,CAAA,EAAA,MAAA;KAAa,MAAA;KAAgB,MAAA;KAAe,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAKnF,OAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAA6B,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;KAAc,CAAA,EAAA,OAAA,GAAA,SAAA;KAAoB,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;YACpF,CAAA,EAAA,MAAA,GAAA,SAAA;KACA,CAAA,EAAA,MAAA,GAAA,SAAA;eAAa,CAAA;gBACX;gBACA;gBAAa;iBACX;iBAA0B;iBAC1B;KAAa,eAAA,WAAA,YAAA,CAAA;IACX,CAAA,eAAA,YAAA,CAAA;IAAyB,CAAA,eAAA,YAAA,CAAA;IACzB,CAAA,eAAA,YAAA,CAAA;EAAa,CAAA,EAAA,aAAA,cAAA,oBAAA,CAAA;IAEX,CAAA,eAAA,YAA6B,CAAA;IAAA,CAAA,eAAA,YAAA,CAAA;IAAa,CAAA,eAAA,YAAA,CAAA;iBAAiB,EAAA,aAAA,CAAA,mBAAA,CAAA;IAAY,CAAA,eAAA,YAAA,CAAA;IAC/E,CAAA,eAAA,YAAA,CAAA;IACA,CAAA,eAAA,YAAA,CAAA;iBAAY,EAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,CAAA;KACV,cAAA,CAAA,KAAA,CAAA;gBACA;gBAAY;KACV,eAAA,YAAA,CAAA;KAAyB,eAAA,YAAA,CAAA;SACzB,eAAA,aAAA,WAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,MAAA,CAAA,cAAA,CAAA,QAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,SAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,WAAA,CAAA,cAAA,CAAA,YAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,EAAA,MAAA,EAAA,CAAA,CAAA;KAAY,eAAA,WAAA,CAAA,WAAA,CAAA,aAAA,CAAA,KAAA,CAAA,cAAA,CAAA,KAAA,CAAA,CAAA,CAAA,aAAA,CAAA,CAAA,CAAA;KACV,eAAA,aAAA,CAAA;KAAwB,eAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;KACxB,eAAA,YAAA,CAAA;EAAY,UAAA,eAAA,YAAA,CAAA;EAEV,GAAA,eAAA,YAA0B,CAAA;CAAA,EAAA,OAAA,cAAA,EAAA;KAAc,EAAA,KAAA;KAAoB,MAAA;KAAa,MAAA;KACjF,MAAA;KACA,MAAA;KAAa,MAAA;MACX,MAAA;MACA,MAAA;MAAa,MAAA;KACX,CAAA,EAAA,MAAA,GAAA,SAAA;KAAyB,CAAA,EAAA,MAAA,GAAA,SAAA;SACzB,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KAAa,CAAA,EAAA,MAAA,GAAA,SAAA;KACX,CAAA,EAAA,OAAA,GAAA,SAAA;KAAwB,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;KACxB,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAnCV,uBAAA,GAA0B,CAAA,CAAE,cAAc;iBAEtC,uBAAA,aAAoC,gBAAgB,eAAe;KAKvE,2CAA2C,oBAAoB,aAAa,sBACpF,mBACA,aAAa,sBACX,mBACA,aAAa,sBACX;OAA0B;IAC1B,aAAa,qBACX;OAAyB;IACzB;KAEE,0CAA0C,iBAAiB,YAAY,mBAC/E,kBACA,YAAY,mBACV,kBACA,YAAY,mBACV;OAAyB;IACzB,YAAY,kBACV;OAAwB;IACxB;KAEE,wCAAwC,oBAAoB,aAAa,sBACjF,kBACA,aAAa,sBACX,kBACA,aAAa,sBACX;OAAyB;IACzB,aAAa,qBACX;OAAwB;IACxB"}

package/build/modules/kms/jwk/knownJwk.js

@@ -1,8 +1,8 @@
 
 
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.js');
-const require_zod = require('../../../utils/zod.js');
 const require_KeyManagementError = require('../error/KeyManagementError.js');
+const require_zod = require('../../../utils/zod.js');
 const require_ecJwk = require('./kty/ec/ecJwk.js');
 const require_octJwk = require('./kty/oct/octJwk.js');
 const require_okpJwk = require('./kty/okp/okpJwk.js');

package/build/modules/kms/jwk/knownJwk.mjs

@@ -1,7 +1,7 @@
 
 
-import { zParseWithErrorHandling } from "../../../utils/zod.mjs";
 import { KeyManagementError } from "../error/KeyManagementError.mjs";
+import { zParseWithErrorHandling } from "../../../utils/zod.mjs";
 import { zKmsJwkPrivateEc, zKmsJwkPrivateToPublicEc, zKmsJwkPublicEc } from "./kty/ec/ecJwk.mjs";
 import { zKmsJwkPrivateOct, zKmsJwkPrivateToPublicOct, zKmsJwkPublicOct } from "./kty/oct/octJwk.mjs";
 import { zKmsJwkPrivateOkp, zKmsJwkPrivateToPublicOkp, zKmsJwkPublicOkp } from "./kty/okp/okpJwk.mjs";

package/build/modules/kms/jwk/knownJwk.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"knownJwk.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/knownJwk.ts"],"sourcesContent":["import { z } from 'zod'\nimport { KeyManagementError } from '../error/KeyManagementError'\nimport type {\n  KmsCreateKeyType,\n  KmsCreateKeyTypeEc,\n  KmsCreateKeyTypeOct,\n  KmsCreateKeyTypeOkp,\n  KmsCreateKeyTypeRsa,\n} from '../options'\n\nimport { zParseWithErrorHandling } from '../../../utils/zod'\nimport {\n  type KmsJwkPrivateEc,\n  type KmsJwkPublicEc,\n  zKmsJwkPrivateEc,\n  zKmsJwkPrivateToPublicEc,\n  zKmsJwkPublicEc,\n} from './kty/ec/ecJwk'\nimport {\n  type KmsJwkPrivateOct,\n  type KmsJwkPublicOct,\n  zKmsJwkPrivateOct,\n  zKmsJwkPrivateToPublicOct,\n  zKmsJwkPublicOct,\n} from './kty/oct/octJwk'\nimport {\n  type KmsJwkPrivateOkp,\n  type KmsJwkPublicOkp,\n  zKmsJwkPrivateOkp,\n  zKmsJwkPrivateToPublicOkp,\n  zKmsJwkPublicOkp,\n} from './kty/okp/okpJwk'\nimport {\n  type KmsJwkPrivateRsa,\n  type KmsJwkPublicRsa,\n  zKmsJwkPrivateRsa,\n  zKmsJwkPrivateToPublicRsa,\n  zKmsJwkPublicRsa,\n} from './kty/rsa/rsaJwk'\n\nexport const zKmsJwkPublicAsymmetric = z.discriminatedUnion('kty', [\n  zKmsJwkPublicEc,\n  zKmsJwkPublicRsa,\n  zKmsJwkPublicOkp,\n])\nexport type KmsJwkPublicAsymmetric = z.output<typeof zKmsJwkPublicAsymmetric>\n\nexport function isJwkAsymmetric(\n  jwk: KmsJwkPublic | KmsJwkPrivate\n): jwk is KmsJwkPrivateAsymmetric | KmsJwkPublicAsymmetric {\n  return jwk.kty !== 'oct'\n}\n\nexport function assertJwkAsymmetric(\n  jwk: KmsJwkPublic | KmsJwkPrivate,\n  keyId?: string\n): asserts jwk is KmsJwkPublicAsymmetric | KmsJwkPrivateAsymmetric {\n  if (!isJwkAsymmetric(jwk)) {\n    if (keyId) {\n      throw new KeyManagementError(`Expected jwk with keyId ${keyId} to be an assymetric jwk, but found kty 'oct'`)\n    }\n    throw new KeyManagementError(\"Expected jwk to be an assymetric jwk, but found kty 'oct'\")\n  }\n}\n\nexport const zKmsJwkPublicCrv = z.discriminatedUnion('kty', [zKmsJwkPublicEc, zKmsJwkPublicOkp])\nexport type KmsJwkPublicCrv = z.output<typeof zKmsJwkPublicCrv>\n\nexport const zKmsJwkPublic = z.discriminatedUnion('kty', [\n  zKmsJwkPublicEc,\n  zKmsJwkPublicRsa,\n  zKmsJwkPublicOct,\n  zKmsJwkPublicOkp,\n])\nexport type KmsJwkPublic = z.output<typeof zKmsJwkPublic>\n\nconst zKmsJwkPrivateToPublic = z\n  .discriminatedUnion('kty', [\n    zKmsJwkPrivateToPublicEc,\n    zKmsJwkPrivateToPublicRsa,\n    zKmsJwkPrivateToPublicOct,\n    zKmsJwkPrivateToPublicOkp,\n  ])\n  // Mdoc library does not work well with undefined values. It should not be needed\n  // but for now it's the easiest approach\n  .transform(\n    (jwk): KmsJwkPublic =>\n      Object.fromEntries(Object.entries(jwk).filter(([, value]) => value !== undefined)) as KmsJwkPublic\n  )\n\nexport const zKmsJwkPrivateCrv = z.discriminatedUnion('kty', [zKmsJwkPrivateEc, zKmsJwkPrivateOkp])\nexport type KmsJwkPrivateCrv = z.output<typeof zKmsJwkPrivateCrv>\n\nexport const zKmsJwkPrivate = z.discriminatedUnion('kty', [\n  zKmsJwkPrivateEc,\n  zKmsJwkPrivateRsa,\n  zKmsJwkPrivateOct,\n  zKmsJwkPrivateOkp,\n])\nexport type KmsJwkPrivate = z.output<typeof zKmsJwkPrivate>\n\nexport const zKmsJwkPrivateAsymmetric = z.discriminatedUnion('kty', [\n  zKmsJwkPrivateEc,\n  zKmsJwkPrivateRsa,\n  zKmsJwkPrivateOkp,\n])\nexport type KmsJwkPrivateAsymmetric = z.output<typeof zKmsJwkPrivateAsymmetric>\n\nexport function publicJwkFromPrivateJwk(privateJwk: KmsJwkPrivate | KmsJwkPublic): KmsJwkPublic {\n  // This will remove any private properties\n  return zParseWithErrorHandling(zKmsJwkPrivateToPublic, privateJwk)\n}\n\nexport type KmsJwkPrivateFromKmsJwkPublic<Type extends KmsCreateKeyType> = Type extends KmsCreateKeyTypeRsa\n  ? KmsJwkPrivateRsa\n  : Type extends KmsCreateKeyTypeOct\n    ? KmsJwkPrivateOct\n    : Type extends KmsCreateKeyTypeOkp\n      ? KmsJwkPrivateOkp & { crv: Type['crv'] }\n      : Type extends KmsCreateKeyTypeEc\n        ? KmsJwkPrivateEc & { crv: Type['crv'] }\n        : KmsJwkPrivate\n\nexport type KmsJwkPublicFromKmsJwkPrivate<Jwk extends KmsJwkPrivate> = Jwk extends KmsJwkPrivateRsa\n  ? KmsJwkPublicRsa\n  : Jwk extends KmsJwkPrivateOct\n    ? KmsJwkPublicOct\n    : Jwk extends KmsJwkPrivateOkp\n      ? KmsJwkPublicOkp & { crv: Jwk['crv'] }\n      : Jwk extends KmsJwkPrivateEc\n        ? KmsJwkPublicEc & { crv: Jwk['crv'] }\n        : KmsJwkPublic\n\nexport type KmsJwkPublicFromCreateType<Type extends KmsCreateKeyType> = Type extends KmsCreateKeyTypeRsa\n  ? KmsJwkPublicRsa\n  : Type extends KmsCreateKeyTypeOct\n    ? KmsJwkPublicOct\n    : Type extends KmsCreateKeyTypeOkp\n      ? KmsJwkPublicOkp & { crv: Type['crv'] }\n      : Type extends KmsCreateKeyTypeEc\n        ? KmsJwkPublicEc & { crv: Type['crv'] }\n        : KmsJwkPublic\n"],"mappings":";;;;;;;;;;;AAwCA,MAAa,0BAA0B,EAAE,mBAAmB,OAAO;CACjE;CACA;CACA;CACD,CAAC;AAGF,SAAgB,gBACd,KACyD;AACzD,QAAO,IAAI,QAAQ;;AAGrB,SAAgB,oBACd,KACA,OACiE;AACjE,KAAI,CAAC,gBAAgB,IAAI,EAAE;AACzB,MAAI,MACF,OAAM,IAAI,mBAAmB,2BAA2B,MAAM,+CAA+C;AAE/G,QAAM,IAAI,mBAAmB,4DAA4D;;;AAI7F,MAAa,mBAAmB,EAAE,mBAAmB,OAAO,CAAC,iBAAiB,iBAAiB,CAAC;AAGhG,MAAa,gBAAgB,EAAE,mBAAmB,OAAO;CACvD;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAM,yBAAyB,EAC5B,mBAAmB,OAAO;CACzB;CACA;CACA;CACA;CACD,CAAC,CAGD,WACE,QACC,OAAO,YAAY,OAAO,QAAQ,IAAI,CAAC,QAAQ,GAAG,WAAW,UAAU,OAAU,CAAC,CACrF;AAEH,MAAa,oBAAoB,EAAE,mBAAmB,OAAO,CAAC,kBAAkB,kBAAkB,CAAC;AAGnG,MAAa,iBAAiB,EAAE,mBAAmB,OAAO;CACxD;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,2BAA2B,EAAE,mBAAmB,OAAO;CAClE;CACA;CACA;CACD,CAAC;AAGF,SAAgB,wBAAwB,YAAwD;AAE9F,QAAO,wBAAwB,wBAAwB,WAAW"}
+{"version":3,"file":"knownJwk.mjs","names":[],"sources":["../../../../src/modules/kms/jwk/knownJwk.ts"],"sourcesContent":["import { z } from 'zod'\nimport { zParseWithErrorHandling } from '../../../utils/zod'\nimport { KeyManagementError } from '../error/KeyManagementError'\nimport type {\n  KmsCreateKeyType,\n  KmsCreateKeyTypeEc,\n  KmsCreateKeyTypeOct,\n  KmsCreateKeyTypeOkp,\n  KmsCreateKeyTypeRsa,\n} from '../options'\nimport {\n  type KmsJwkPrivateEc,\n  type KmsJwkPublicEc,\n  zKmsJwkPrivateEc,\n  zKmsJwkPrivateToPublicEc,\n  zKmsJwkPublicEc,\n} from './kty/ec/ecJwk'\nimport {\n  type KmsJwkPrivateOct,\n  type KmsJwkPublicOct,\n  zKmsJwkPrivateOct,\n  zKmsJwkPrivateToPublicOct,\n  zKmsJwkPublicOct,\n} from './kty/oct/octJwk'\nimport {\n  type KmsJwkPrivateOkp,\n  type KmsJwkPublicOkp,\n  zKmsJwkPrivateOkp,\n  zKmsJwkPrivateToPublicOkp,\n  zKmsJwkPublicOkp,\n} from './kty/okp/okpJwk'\nimport {\n  type KmsJwkPrivateRsa,\n  type KmsJwkPublicRsa,\n  zKmsJwkPrivateRsa,\n  zKmsJwkPrivateToPublicRsa,\n  zKmsJwkPublicRsa,\n} from './kty/rsa/rsaJwk'\n\nexport const zKmsJwkPublicAsymmetric = z.discriminatedUnion('kty', [\n  zKmsJwkPublicEc,\n  zKmsJwkPublicRsa,\n  zKmsJwkPublicOkp,\n])\nexport type KmsJwkPublicAsymmetric = z.output<typeof zKmsJwkPublicAsymmetric>\n\nexport function isJwkAsymmetric(\n  jwk: KmsJwkPublic | KmsJwkPrivate\n): jwk is KmsJwkPrivateAsymmetric | KmsJwkPublicAsymmetric {\n  return jwk.kty !== 'oct'\n}\n\nexport function assertJwkAsymmetric(\n  jwk: KmsJwkPublic | KmsJwkPrivate,\n  keyId?: string\n): asserts jwk is KmsJwkPublicAsymmetric | KmsJwkPrivateAsymmetric {\n  if (!isJwkAsymmetric(jwk)) {\n    if (keyId) {\n      throw new KeyManagementError(`Expected jwk with keyId ${keyId} to be an assymetric jwk, but found kty 'oct'`)\n    }\n    throw new KeyManagementError(\"Expected jwk to be an assymetric jwk, but found kty 'oct'\")\n  }\n}\n\nexport const zKmsJwkPublicCrv = z.discriminatedUnion('kty', [zKmsJwkPublicEc, zKmsJwkPublicOkp])\nexport type KmsJwkPublicCrv = z.output<typeof zKmsJwkPublicCrv>\n\nexport const zKmsJwkPublic = z.discriminatedUnion('kty', [\n  zKmsJwkPublicEc,\n  zKmsJwkPublicRsa,\n  zKmsJwkPublicOct,\n  zKmsJwkPublicOkp,\n])\nexport type KmsJwkPublic = z.output<typeof zKmsJwkPublic>\n\nconst zKmsJwkPrivateToPublic = z\n  .discriminatedUnion('kty', [\n    zKmsJwkPrivateToPublicEc,\n    zKmsJwkPrivateToPublicRsa,\n    zKmsJwkPrivateToPublicOct,\n    zKmsJwkPrivateToPublicOkp,\n  ])\n  // Mdoc library does not work well with undefined values. It should not be needed\n  // but for now it's the easiest approach\n  .transform(\n    (jwk): KmsJwkPublic =>\n      Object.fromEntries(Object.entries(jwk).filter(([, value]) => value !== undefined)) as KmsJwkPublic\n  )\n\nexport const zKmsJwkPrivateCrv = z.discriminatedUnion('kty', [zKmsJwkPrivateEc, zKmsJwkPrivateOkp])\nexport type KmsJwkPrivateCrv = z.output<typeof zKmsJwkPrivateCrv>\n\nexport const zKmsJwkPrivate = z.discriminatedUnion('kty', [\n  zKmsJwkPrivateEc,\n  zKmsJwkPrivateRsa,\n  zKmsJwkPrivateOct,\n  zKmsJwkPrivateOkp,\n])\nexport type KmsJwkPrivate = z.output<typeof zKmsJwkPrivate>\n\nexport const zKmsJwkPrivateAsymmetric = z.discriminatedUnion('kty', [\n  zKmsJwkPrivateEc,\n  zKmsJwkPrivateRsa,\n  zKmsJwkPrivateOkp,\n])\nexport type KmsJwkPrivateAsymmetric = z.output<typeof zKmsJwkPrivateAsymmetric>\n\nexport function publicJwkFromPrivateJwk(privateJwk: KmsJwkPrivate | KmsJwkPublic): KmsJwkPublic {\n  // This will remove any private properties\n  return zParseWithErrorHandling(zKmsJwkPrivateToPublic, privateJwk)\n}\n\nexport type KmsJwkPrivateFromKmsJwkPublic<Type extends KmsCreateKeyType> = Type extends KmsCreateKeyTypeRsa\n  ? KmsJwkPrivateRsa\n  : Type extends KmsCreateKeyTypeOct\n    ? KmsJwkPrivateOct\n    : Type extends KmsCreateKeyTypeOkp\n      ? KmsJwkPrivateOkp & { crv: Type['crv'] }\n      : Type extends KmsCreateKeyTypeEc\n        ? KmsJwkPrivateEc & { crv: Type['crv'] }\n        : KmsJwkPrivate\n\nexport type KmsJwkPublicFromKmsJwkPrivate<Jwk extends KmsJwkPrivate> = Jwk extends KmsJwkPrivateRsa\n  ? KmsJwkPublicRsa\n  : Jwk extends KmsJwkPrivateOct\n    ? KmsJwkPublicOct\n    : Jwk extends KmsJwkPrivateOkp\n      ? KmsJwkPublicOkp & { crv: Jwk['crv'] }\n      : Jwk extends KmsJwkPrivateEc\n        ? KmsJwkPublicEc & { crv: Jwk['crv'] }\n        : KmsJwkPublic\n\nexport type KmsJwkPublicFromCreateType<Type extends KmsCreateKeyType> = Type extends KmsCreateKeyTypeRsa\n  ? KmsJwkPublicRsa\n  : Type extends KmsCreateKeyTypeOct\n    ? KmsJwkPublicOct\n    : Type extends KmsCreateKeyTypeOkp\n      ? KmsJwkPublicOkp & { crv: Type['crv'] }\n      : Type extends KmsCreateKeyTypeEc\n        ? KmsJwkPublicEc & { crv: Type['crv'] }\n        : KmsJwkPublic\n"],"mappings":";;;;;;;;;;;AAuCA,MAAa,0BAA0B,EAAE,mBAAmB,OAAO;CACjE;CACA;CACA;CACD,CAAC;AAGF,SAAgB,gBACd,KACyD;AACzD,QAAO,IAAI,QAAQ;;AAGrB,SAAgB,oBACd,KACA,OACiE;AACjE,KAAI,CAAC,gBAAgB,IAAI,EAAE;AACzB,MAAI,MACF,OAAM,IAAI,mBAAmB,2BAA2B,MAAM,+CAA+C;AAE/G,QAAM,IAAI,mBAAmB,4DAA4D;;;AAI7F,MAAa,mBAAmB,EAAE,mBAAmB,OAAO,CAAC,iBAAiB,iBAAiB,CAAC;AAGhG,MAAa,gBAAgB,EAAE,mBAAmB,OAAO;CACvD;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAM,yBAAyB,EAC5B,mBAAmB,OAAO;CACzB;CACA;CACA;CACA;CACD,CAAC,CAGD,WACE,QACC,OAAO,YAAY,OAAO,QAAQ,IAAI,CAAC,QAAQ,GAAG,WAAW,UAAU,OAAU,CAAC,CACrF;AAEH,MAAa,oBAAoB,EAAE,mBAAmB,OAAO,CAAC,kBAAkB,kBAAkB,CAAC;AAGnG,MAAa,iBAAiB,EAAE,mBAAmB,OAAO;CACxD;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,2BAA2B,EAAE,mBAAmB,OAAO;CAClE;CACA;CACA;CACD,CAAC;AAGF,SAAgB,wBAAwB,YAAwD;AAE9F,QAAO,wBAAwB,wBAAwB,WAAW"}

package/build/modules/kms/jwk/kty/PublicJwk.d.mts

@@ -1,12 +1,13 @@
-import { KmsJwkPublicAsymmetric } from "../knownJwk.mjs";
 import { KnownJwaKeyAgreementAlgorithm, KnownJwaSignatureAlgorithm } from "../jwa.mjs";
+import { AnyUint8Array } from "../../../../types.mjs";
+import { KmsJwkPublicAsymmetric } from "../knownJwk.mjs";
 
 //#region src/modules/kms/jwk/kty/PublicJwk.d.ts
 interface PublicJwkType<Jwk extends KmsJwkPublicAsymmetric = KmsJwkPublicAsymmetric> {
   readonly jwk: Jwk;
   supportedSignatureAlgorithms: KnownJwaSignatureAlgorithm[] | undefined;
   supportdEncryptionKeyAgreementAlgorithms: KnownJwaKeyAgreementAlgorithm[] | undefined;
-  multicodec: Uint8Array;
+  multicodec: AnyUint8Array;
 }
 //#endregion
 export { PublicJwkType };

package/build/modules/kms/jwk/kty/PublicJwk.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"PublicJwk.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/kty/PublicJwk.ts"],"sourcesContent":[],"mappings":";;;;UAGiB,0BAA0B,yBAAyB;gBACpD;gCAEgB;4CACY;EAJ3B,UAAA,EAMH,UANgB"}
+{"version":3,"file":"PublicJwk.d.mts","names":[],"sources":["../../../../../src/modules/kms/jwk/kty/PublicJwk.ts"],"sourcesContent":[],"mappings":";;;;;UAIiB,0BAA0B,yBAAyB;gBACpD;gCAEgB;4CACY;EAJ3B,UAAA,EAMH,aANgB"}

package/build/modules/kms/jwk/kty/PublicJwk.d.ts

@@ -1,12 +1,13 @@
-import { KmsJwkPublicAsymmetric } from "../knownJwk.js";
 import { KnownJwaKeyAgreementAlgorithm, KnownJwaSignatureAlgorithm } from "../jwa.js";
+import { AnyUint8Array } from "../../../../types.js";
+import { KmsJwkPublicAsymmetric } from "../knownJwk.js";
 
 //#region src/modules/kms/jwk/kty/PublicJwk.d.ts
 interface PublicJwkType<Jwk extends KmsJwkPublicAsymmetric = KmsJwkPublicAsymmetric> {
   readonly jwk: Jwk;
   supportedSignatureAlgorithms: KnownJwaSignatureAlgorithm[] | undefined;
   supportdEncryptionKeyAgreementAlgorithms: KnownJwaKeyAgreementAlgorithm[] | undefined;
-  multicodec: Uint8Array;
+  multicodec: AnyUint8Array;
 }
 //#endregion
 export { PublicJwkType };