@openclaw/msteams 2026.5.27 → 2026.5.28-beta.2

package/node_modules/jose/dist/types/jws/general/sign.d.ts

@@ -1,44 +1,32 @@
-/**
- * Signing JSON Web Signature (JWS) in General JSON Serialization
- *
- * @module
- */
-import type * as types from '../../types.d.ts';
-/** Used to build General JWS object's individual signatures. */
+import type { KeyLike, GeneralJWS, JWSHeaderParameters, SignOptions } from '../../types';
 export interface Signature {
     /**
      * Sets the JWS Protected Header on the Signature object.
      *
      * @param protectedHeader JWS Protected Header.
      */
-    setProtectedHeader(protectedHeader: types.JWSHeaderParameters): Signature;
+    setProtectedHeader(protectedHeader: JWSHeaderParameters): Signature;
     /**
      * Sets the JWS Unprotected Header on the Signature object.
      *
      * @param unprotectedHeader JWS Unprotected Header.
      */
-    setUnprotectedHeader(unprotectedHeader: types.JWSHeaderParameters): Signature;
-    /** A shorthand for calling addSignature() on the enclosing {@link GeneralSign} instance */
+    setUnprotectedHeader(unprotectedHeader: JWSHeaderParameters): Signature;
+    /** A shorthand for calling addSignature() on the enclosing GeneralSign instance */
     addSignature(...args: Parameters<GeneralSign['addSignature']>): Signature;
-    /** A shorthand for calling encrypt() on the enclosing {@link GeneralSign} instance */
-    sign(...args: Parameters<GeneralSign['sign']>): Promise<types.GeneralJWS>;
-    /** Returns the enclosing {@link GeneralSign} instance */
+    /** A shorthand for calling encrypt() on the enclosing GeneralSign instance */
+    sign(...args: Parameters<GeneralSign['sign']>): Promise<GeneralJWS>;
+    /** Returns the enclosing GeneralSign */
     done(): GeneralSign;
 }
 /**
  * The GeneralSign class is used to build and sign General JWS objects.
  *
- * This class is exported (as a named export) from the main `'jose'` module entry point as well as
- * from its subpath export `'jose/jws/general/sign'`.
- *
  */
 export declare class GeneralSign {
-    #private;
-    /**
-     * {@link GeneralSign} constructor
-     *
-     * @param payload Binary representation of the payload to sign.
-     */
+    private _payload;
+    private _signatures;
+    /** @param payload Binary representation of the payload to sign. */
     constructor(payload: Uint8Array);
     /**
      * Adds an additional signature for the General JWS object.
@@ -47,7 +35,7 @@ export declare class GeneralSign {
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */
-    addSignature(key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: types.SignOptions): Signature;
+    addSignature(key: KeyLike | Uint8Array, options?: SignOptions): Signature;
     /** Signs and resolves the value of the General JWS object. */
-    sign(): Promise<types.GeneralJWS>;
+    sign(): Promise<GeneralJWS>;
 }

package/node_modules/jose/dist/types/jws/general/verify.d.ts

@@ -1,41 +1,25 @@
-/**
- * Verifying JSON Web Signature (JWS) in General JSON Serialization
- *
- * @module
- */
-import type * as types from '../../types.d.ts';
+import type { GeneralJWSInput, GeneralVerifyResult, FlattenedJWSInput, GetKeyFunction, JWSHeaderParameters, KeyLike, VerifyOptions, ResolvedKey } from '../../types';
 /**
  * Interface for General JWS Verification dynamic key resolution. No token components have been
  * verified at the time of this function call.
  *
- * @see {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} to verify using a remote JSON Web Key Set.
+ * @see [createRemoteJWKSet](../functions/jwks_remote.createRemoteJWKSet.md#function-createremotejwkset) to verify using a remote JSON Web Key Set.
  */
-export interface GeneralVerifyGetKey extends types.GenericGetKeyFunction<types.JWSHeaderParameters, types.FlattenedJWSInput, types.CryptoKey | types.KeyObject | types.JWK | Uint8Array> {
+export interface GeneralVerifyGetKey extends GetKeyFunction<JWSHeaderParameters, FlattenedJWSInput> {
 }
 /**
  * Verifies the signature and format of and afterwards decodes the General JWS.
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/jws/general/verify'`.
- *
- * > [!NOTE]\
- * > The function iterates over the `signatures` array in the General JWS and returns the verification
- * > result of the first signature entry that can be successfully verified. The result only contains
- * > the payload, protected header, and unprotected header of that successfully verified signature
- * > entry. Other signature entries in the General JWS are not validated, and their headers are not
- * > included in the returned result. Recipients of a General JWS should only rely on the returned
- * > (verified) data.
- *
  * @param jws General JWS.
  * @param key Key to verify the JWS with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWS Verify options.
  */
-export declare function generalVerify(jws: types.GeneralJWSInput, key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult>;
+export declare function generalVerify(jws: GeneralJWSInput, key: KeyLike | Uint8Array, options?: VerifyOptions): Promise<GeneralVerifyResult>;
 /**
  * @param jws General JWS.
  * @param getKey Function resolving a key to verify the JWS with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWS Verify options.
  */
-export declare function generalVerify(jws: types.GeneralJWSInput, getKey: GeneralVerifyGetKey, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult & types.ResolvedKey>;
+export declare function generalVerify<T extends KeyLike = KeyLike>(jws: GeneralJWSInput, getKey: GeneralVerifyGetKey, options?: VerifyOptions): Promise<GeneralVerifyResult & ResolvedKey<T>>;

package/node_modules/jose/dist/types/jwt/decrypt.d.ts

@@ -1,35 +1,27 @@
-/**
- * JSON Web Token (JWT) Decryption (JWT is in JWE format)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
+import type { KeyLike, DecryptOptions, JWTClaimVerificationOptions, GetKeyFunction, CompactJWEHeaderParameters, FlattenedJWE, JWTDecryptResult, ResolvedKey } from '../types';
 /** Combination of JWE Decryption options and JWT Claims Set verification options. */
-export interface JWTDecryptOptions extends types.DecryptOptions, types.JWTClaimVerificationOptions {
+export interface JWTDecryptOptions extends DecryptOptions, JWTClaimVerificationOptions {
 }
 /**
  * Interface for JWT Decryption dynamic key resolution. No token components have been verified at
  * the time of this function call.
  */
-export interface JWTDecryptGetKey extends types.GetKeyFunction<types.CompactJWEHeaderParameters, types.FlattenedJWE> {
+export interface JWTDecryptGetKey extends GetKeyFunction<CompactJWEHeaderParameters, FlattenedJWE> {
 }
 /**
  * Verifies the JWT format (to be a JWE Compact format), decrypts the ciphertext, validates the JWT
  * Claims Set.
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/jwt/decrypt'`.
- *
  * @param jwt JSON Web Token value (encoded as JWE).
  * @param key Private Key or Secret to decrypt and verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
  * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtDecrypt<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: JWTDecryptOptions): Promise<types.JWTDecryptResult<PayloadType>>;
+export declare function jwtDecrypt(jwt: string | Uint8Array, key: KeyLike | Uint8Array, options?: JWTDecryptOptions): Promise<JWTDecryptResult>;
 /**
  * @param jwt JSON Web Token value (encoded as JWE).
  * @param getKey Function resolving Private Key or Secret to decrypt and verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
  * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtDecrypt<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, getKey: JWTDecryptGetKey, options?: JWTDecryptOptions): Promise<types.JWTDecryptResult<PayloadType> & types.ResolvedKey>;
+export declare function jwtDecrypt<T extends KeyLike = KeyLike>(jwt: string | Uint8Array, getKey: JWTDecryptGetKey, options?: JWTDecryptOptions): Promise<JWTDecryptResult & ResolvedKey<T>>;

package/node_modules/jose/dist/types/jwt/encrypt.d.ts

@@ -1,47 +1,33 @@
-/**
- * JSON Web Token (JWT) Encryption (JWT is in JWE format)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
+import type { EncryptOptions, CompactJWEHeaderParameters, JWEKeyManagementHeaderParameters, KeyLike } from '../types';
+import { ProduceJWT } from './produce';
 /**
  * The EncryptJWT class is used to build and encrypt Compact JWE formatted JSON Web Tokens.
  *
- * This class is exported (as a named export) from the main `'jose'` module entry point as well as
- * from its subpath export `'jose/jwt/encrypt'`.
- *
  */
-export declare class EncryptJWT implements types.ProduceJWT {
-    #private;
-    /**
-     * {@link EncryptJWT} constructor
-     *
-     * @param payload The JWT Claims Set object. Defaults to an empty object.
-     */
-    constructor(payload?: types.JWTPayload);
-    setIssuer(issuer: string): this;
-    setSubject(subject: string): this;
-    setAudience(audience: string | string[]): this;
-    setJti(jwtId: string): this;
-    setNotBefore(input: number | string | Date): this;
-    setExpirationTime(input: number | string | Date): this;
-    setIssuedAt(input?: number | string | Date): this;
+export declare class EncryptJWT extends ProduceJWT {
+    private _cek;
+    private _iv;
+    private _keyManagementParameters;
+    private _protectedHeader;
+    private _replicateIssuerAsHeader;
+    private _replicateSubjectAsHeader;
+    private _replicateAudienceAsHeader;
     /**
      * Sets the JWE Protected Header on the EncryptJWT object.
      *
      * @param protectedHeader JWE Protected Header. Must contain an "alg" (JWE Algorithm) and "enc"
      *   (JWE Encryption Algorithm) properties.
      */
-    setProtectedHeader(protectedHeader: types.CompactJWEHeaderParameters): this;
+    setProtectedHeader(protectedHeader: CompactJWEHeaderParameters): this;
     /**
-     * Sets the JWE Key Management parameters to be used when encrypting.
-     *
-     * (ECDH-ES) Use of this method is needed for ECDH based algorithms to set the "apu" (Agreement
-     * PartyUInfo) or "apv" (Agreement PartyVInfo) parameters.
+     * Sets the JWE Key Management parameters to be used when encrypting. Use of this is method is
+     * really only needed for ECDH based algorithms when utilizing the Agreement PartyUInfo or
+     * Agreement PartyVInfo parameters. Other parameters will always be randomly generated when needed
+     * and missing.
      *
      * @param parameters JWE Key Management parameters.
      */
-    setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): this;
+    setKeyManagementParameters(parameters: JWEKeyManagementHeaderParameters): this;
     /**
      * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
      * enc" (Encryption Algorithm) Header Parameter.
@@ -87,5 +73,5 @@ export declare class EncryptJWT implements types.ProduceJWT {
      *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
      * @param options JWE Encryption options.
      */
-    encrypt(key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: types.EncryptOptions): Promise<string>;
+    encrypt(key: KeyLike | Uint8Array, options?: EncryptOptions): Promise<string>;
 }

package/node_modules/jose/dist/types/jwt/sign.d.ts

@@ -1,37 +1,17 @@
-/**
- * JSON Web Token (JWT) Signing (JWT is in JWS format)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
+import type { JWTHeaderParameters, KeyLike, SignOptions } from '../types';
+import { ProduceJWT } from './produce';
 /**
  * The SignJWT class is used to build and sign Compact JWS formatted JSON Web Tokens.
  *
- * This class is exported (as a named export) from the main `'jose'` module entry point as well as
- * from its subpath export `'jose/jwt/sign'`.
- *
  */
-export declare class SignJWT implements types.ProduceJWT {
-    #private;
-    /**
-     * {@link SignJWT} constructor
-     *
-     * @param payload The JWT Claims Set object. Defaults to an empty object.
-     */
-    constructor(payload?: types.JWTPayload);
-    setIssuer(issuer: string): this;
-    setSubject(subject: string): this;
-    setAudience(audience: string | string[]): this;
-    setJti(jwtId: string): this;
-    setNotBefore(input: number | string | Date): this;
-    setExpirationTime(input: number | string | Date): this;
-    setIssuedAt(input?: number | string | Date): this;
+export declare class SignJWT extends ProduceJWT {
+    private _protectedHeader;
     /**
      * Sets the JWS Protected Header on the SignJWT object.
      *
      * @param protectedHeader JWS Protected Header. Must contain an "alg" (JWS Algorithm) property.
      */
-    setProtectedHeader(protectedHeader: types.JWTHeaderParameters): this;
+    setProtectedHeader(protectedHeader: JWTHeaderParameters): this;
     /**
      * Signs and returns the JWT.
      *
@@ -39,5 +19,5 @@ export declare class SignJWT implements types.ProduceJWT {
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWT Sign options.
      */
-    sign(key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: types.SignOptions): Promise<string>;
+    sign(key: KeyLike | Uint8Array, options?: SignOptions): Promise<string>;
 }

package/node_modules/jose/dist/types/jwt/unsecured.d.ts

@@ -1,43 +1,21 @@
-/**
- * Unsecured (unsigned & unencrypted) JSON Web Tokens (JWT)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
-/** Result of decoding an Unsecured JWT. */
-export interface UnsecuredResult<PayloadType = types.JWTPayload> {
-    payload: PayloadType & types.JWTPayload;
-    header: types.JWSHeaderParameters;
+import type { JWSHeaderParameters, JWTClaimVerificationOptions, JWTPayload } from '../types';
+import { ProduceJWT } from './produce';
+export interface UnsecuredResult {
+    payload: JWTPayload;
+    header: JWSHeaderParameters;
 }
 /**
  * The UnsecuredJWT class is a utility for dealing with `{ "alg": "none" }` Unsecured JWTs.
  *
- * This class is exported (as a named export) from the main `'jose'` module entry point as well as
- * from its subpath export `'jose/jwt/unsecured'`.
- *
  */
-export declare class UnsecuredJWT implements types.ProduceJWT {
-    #private;
-    /**
-     * {@link UnsecuredJWT} constructor
-     *
-     * @param payload The JWT Claims Set object. Defaults to an empty object.
-     */
-    constructor(payload?: types.JWTPayload);
+export declare class UnsecuredJWT extends ProduceJWT {
     /** Encodes the Unsecured JWT. */
     encode(): string;
-    setIssuer(issuer: string): this;
-    setSubject(subject: string): this;
-    setAudience(audience: string | string[]): this;
-    setJti(jwtId: string): this;
-    setNotBefore(input: number | string | Date): this;
-    setExpirationTime(input: number | string | Date): this;
-    setIssuedAt(input?: number | string | Date): this;
     /**
      * Decodes an unsecured JWT.
      *
      * @param jwt Unsecured JWT to decode the payload of.
      * @param options JWT Claims Set validation options.
      */
-    static decode<PayloadType = types.JWTPayload>(jwt: string, options?: types.JWTClaimVerificationOptions): UnsecuredResult<PayloadType>;
+    static decode(jwt: string, options?: JWTClaimVerificationOptions): UnsecuredResult;
 }

package/node_modules/jose/dist/types/jwt/verify.d.ts

@@ -1,37 +1,29 @@
-/**
- * JSON Web Token (JWT) Verification (JWT is in JWS format)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
+import type { KeyLike, VerifyOptions, JWTClaimVerificationOptions, JWTHeaderParameters, GetKeyFunction, FlattenedJWSInput, JWTVerifyResult, ResolvedKey } from '../types';
 /** Combination of JWS Verification options and JWT Claims Set verification options. */
-export interface JWTVerifyOptions extends types.VerifyOptions, types.JWTClaimVerificationOptions {
+export interface JWTVerifyOptions extends VerifyOptions, JWTClaimVerificationOptions {
 }
 /**
  * Interface for JWT Verification dynamic key resolution. No token components have been verified at
  * the time of this function call.
  *
- * @see {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} to verify using a remote JSON Web Key Set.
+ * @see [createRemoteJWKSet](../functions/jwks_remote.createRemoteJWKSet.md#function-createremotejwkset) to verify using a remote JSON Web Key Set.
  */
-export interface JWTVerifyGetKey extends types.GenericGetKeyFunction<types.JWTHeaderParameters, types.FlattenedJWSInput, types.CryptoKey | types.KeyObject | types.JWK | Uint8Array> {
+export interface JWTVerifyGetKey extends GetKeyFunction<JWTHeaderParameters, FlattenedJWSInput> {
 }
 /**
  * Verifies the JWT format (to be a JWS Compact format), verifies the JWS signature, validates the
  * JWT Claims Set.
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/jwt/verify'`.
- *
  * @param jwt JSON Web Token value (encoded as JWS).
  * @param key Key to verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtVerify<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: JWTVerifyOptions): Promise<types.JWTVerifyResult<PayloadType>>;
+export declare function jwtVerify(jwt: string | Uint8Array, key: KeyLike | Uint8Array, options?: JWTVerifyOptions): Promise<JWTVerifyResult>;
 /**
  * @param jwt JSON Web Token value (encoded as JWS).
  * @param getKey Function resolving a key to verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtVerify<PayloadType = types.JWTPayload>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<types.JWTVerifyResult<PayloadType> & types.ResolvedKey>;
+export declare function jwtVerify<T extends KeyLike = KeyLike>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<JWTVerifyResult & ResolvedKey<T>>;

package/node_modules/jose/dist/types/key/export.d.ts

@@ -1,33 +1,21 @@
+import type { JWK, KeyLike } from '../types';
 /**
- * Cryptographic key export functions
+ * Exports a runtime-specific public key representation (KeyObject or CryptoKey) to a PEM-encoded
+ * SPKI string format.
  *
- * @module
+ * @param key Key representation to transform to a PEM-encoded SPKI string format.
  */
-import type * as types from '../types.d.ts';
+export declare function exportSPKI(key: KeyLike): Promise<string>;
 /**
- * Exports a public {@link !CryptoKey} or {@link !KeyObject} to a PEM-encoded SPKI string format.
+ * Exports a runtime-specific private key representation (KeyObject or CryptoKey) to a PEM-encoded
+ * PKCS8 string format.
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/export'`.
- *
- * @param key Key to export to a PEM-encoded SPKI string format.
- */
-export declare function exportSPKI(key: types.CryptoKey | types.KeyObject): Promise<string>;
-/**
- * Exports a private {@link !CryptoKey} or {@link !KeyObject} to a PEM-encoded PKCS8 string format.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/export'`.
- *
- * @param key Key to export to a PEM-encoded PKCS8 string format.
+ * @param key Key representation to transform to a PEM-encoded PKCS8 string format.
  */
-export declare function exportPKCS8(key: types.CryptoKey | types.KeyObject): Promise<string>;
+export declare function exportPKCS8(key: KeyLike): Promise<string>;
 /**
- * Exports a {@link !CryptoKey}, {@link !KeyObject}, or {@link !Uint8Array} to a JWK.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/export'`.
+ * Exports a runtime-specific key representation (KeyLike) to a JWK.
  *
- * @param key Key to export as JWK.
+ * @param key Key representation to export as JWK.
  */
-export declare function exportJWK(key: types.CryptoKey | types.KeyObject | Uint8Array): Promise<types.JWK>;
+export declare function exportJWK(key: KeyLike | Uint8Array): Promise<JWK>;

package/node_modules/jose/dist/types/key/generate_key_pair.d.ts

@@ -1,17 +1,10 @@
-/**
- * Asymmetric key generation
- *
- * @module
- */
-import type * as types from '../types.d.ts';
-/** Asymmetric key pair generation function result. */
-export interface GenerateKeyPairResult {
+import type { KeyLike } from '../types';
+export interface GenerateKeyPairResult<T extends KeyLike = KeyLike> {
     /** The generated Private Key. */
-    privateKey: types.CryptoKey;
+    privateKey: T;
     /** Public Key corresponding to the generated Private Key. */
-    publicKey: types.CryptoKey;
+    publicKey: T;
 }
-/** Asymmetric key pair generation function options. */
 export interface GenerateKeyPairOptions {
     /**
      * The EC "crv" (Curve) or OKP "crv" (Subtype of Key Pair) value to generate. The curve must be
@@ -24,8 +17,9 @@ export interface GenerateKeyPairOptions {
      */
     modulusLength?: number;
     /**
-     * The value to use as {@link !SubtleCrypto.generateKey} `extractable` argument. Default is false.
-     *
+     * (Only effective in Web Crypto API runtimes) The value to use as
+     * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey SubtleCrypto.generateKey()}
+     * `extractable` argument. Default is false.
      */
     extractable?: boolean;
 }
@@ -33,15 +27,10 @@ export interface GenerateKeyPairOptions {
  * Generates a private and a public key for a given JWA algorithm identifier. This can only generate
  * asymmetric key pairs. For symmetric secrets use the `generateSecret` function.
  *
- * > [!NOTE]\
- * > The `privateKey` is generated with `extractable` set to `false` by default. See
- * > {@link GenerateKeyPairOptions.extractable} to generate an extractable `privateKey`.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/generate/keypair'`.
+ * Note: Under Web Crypto API runtime the `privateKey` is generated with `extractable` set to
+ * `false` by default.
  *
- * @param alg JWA Algorithm Identifier to be used with the generated key pair. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
+ * @param alg JWA Algorithm Identifier to be used with the generated key pair.
  * @param options Additional options passed down to the key pair generation.
  */
-export declare function generateKeyPair(alg: string, options?: GenerateKeyPairOptions): Promise<GenerateKeyPairResult>;
+export declare function generateKeyPair<T extends KeyLike = KeyLike>(alg: string, options?: GenerateKeyPairOptions): Promise<GenerateKeyPairResult<T>>;

package/node_modules/jose/dist/types/key/generate_secret.d.ts

@@ -1,35 +1,19 @@
-/**
- * Symmetric key generation
- *
- * @module
- */
-import type * as types from '../types.d.ts';
-/** Secret generation function options. */
+import type { KeyLike } from '../types';
 export interface GenerateSecretOptions {
     /**
-     * The value to use as {@link !SubtleCrypto.generateKey} `extractable` argument. Default is false.
-     *
-     * > [!NOTE]\
-     * > Because A128CBC-HS256, A192CBC-HS384, and A256CBC-HS512 secrets cannot be represented as
-     * > {@link !CryptoKey} this option has no effect for them.
+     * (Only effective in Web Crypto API runtimes) The value to use as
+     * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey SubtleCrypto.generateKey()}
+     * `extractable` argument. Default is false.
      */
     extractable?: boolean;
 }
 /**
  * Generates a symmetric secret key for a given JWA algorithm identifier.
  *
- * > [!NOTE]\
- * > The secret key is generated with `extractable` set to `false` by default.
- *
- * > [!NOTE]\
- * > Because A128CBC-HS256, A192CBC-HS384, and A256CBC-HS512 secrets cannot be represented as
- * > {@link !CryptoKey} this method yields a {@link !Uint8Array} for them instead.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/generate/secret'`.
+ * Note: Under Web Crypto API runtime the secret key is generated with `extractable` set to `false`
+ * by default.
  *
- * @param alg JWA Algorithm Identifier to be used with the generated secret. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
+ * @param alg JWA Algorithm Identifier to be used with the generated secret.
  * @param options Additional options passed down to the secret generation.
  */
-export declare function generateSecret(alg: string, options?: GenerateSecretOptions): Promise<types.CryptoKey | Uint8Array>;
+export declare function generateSecret<T extends KeyLike = KeyLike>(alg: string, options?: GenerateSecretOptions): Promise<T | Uint8Array>;

package/node_modules/jose/dist/types/key/import.d.ts

@@ -1,83 +1,54 @@
-/**
- * Cryptographic key import functions
- *
- * @module
- */
-import type * as types from '../types.d.ts';
-/** Key Import Function options. */
-export interface KeyImportOptions {
+import type { JWK, KeyLike } from '../types';
+export interface PEMImportOptions {
     /**
-     * The value to use as {@link !SubtleCrypto.importKey} `extractable` argument. Default is false for
-     * private keys, true otherwise.
+     * (Only effective in Web Crypto API runtimes) The value to use as
+     * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey SubtleCrypto.importKey()}
+     * `extractable` argument. Default is false.
      */
     extractable?: boolean;
 }
 /**
- * Imports a PEM-encoded SPKI string as a {@link !CryptoKey}.
+ * Imports a PEM-encoded SPKI string as a runtime-specific public key representation (KeyObject or
+ * CryptoKey).
  *
- * > [!NOTE]\
- * > The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
- * > {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
- * > (1.2.840.113549.1.1.1) instead for all RSA algorithms.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/import'`.
- *
- * @param spki PEM-encoded SPKI string
- * @param alg JSON Web Algorithm identifier to be used with the imported key. See
+ * @param pem PEM-encoded SPKI string
+ * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
+ *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
  */
-export declare function importSPKI(spki: string, alg: string, options?: KeyImportOptions): Promise<types.CryptoKey>;
+export declare function importSPKI<T extends KeyLike = KeyLike>(spki: string, alg: string, options?: PEMImportOptions): Promise<T>;
 /**
- * Imports the SPKI from an X.509 string certificate as a {@link !CryptoKey}.
- *
- * > [!NOTE]\
- * > The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
- * > {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
- * > (1.2.840.113549.1.1.1) instead for all RSA algorithms.
+ * Imports the SPKI from an X.509 string certificate as a runtime-specific public key representation
+ * (KeyObject or CryptoKey).
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/import'`.
- *
- * @param x509 X.509 certificate string
- * @param alg JSON Web Algorithm identifier to be used with the imported key. See
+ * @param pem X.509 certificate string
+ * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
+ *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
  */
-export declare function importX509(x509: string, alg: string, options?: KeyImportOptions): Promise<types.CryptoKey>;
+export declare function importX509<T extends KeyLike = KeyLike>(x509: string, alg: string, options?: PEMImportOptions): Promise<T>;
 /**
- * Imports a PEM-encoded PKCS#8 string as a {@link !CryptoKey}.
- *
- * > [!NOTE]\
- * > The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
- * > {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
- * > (1.2.840.113549.1.1.1) instead for all RSA algorithms.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/import'`.
+ * Imports a PEM-encoded PKCS#8 string as a runtime-specific private key representation (KeyObject
+ * or CryptoKey).
  *
- * @param pkcs8 PEM-encoded PKCS#8 string
- * @param alg JSON Web Algorithm identifier to be used with the imported key. See
+ * @param pem PEM-encoded PKCS#8 string
+ * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
+ *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
  */
-export declare function importPKCS8(pkcs8: string, alg: string, options?: KeyImportOptions): Promise<types.CryptoKey>;
+export declare function importPKCS8<T extends KeyLike = KeyLike>(pkcs8: string, alg: string, options?: PEMImportOptions): Promise<T>;
 /**
- * Imports a JWK to a {@link !CryptoKey}. Either the JWK "alg" (Algorithm) Parameter, or the optional
- * "alg" argument, must be present for asymmetric JSON Web Key imports.
- *
- * > [!NOTE]\
- * > The JSON Web Key parameters "use", "key_ops", and "ext" are also used in the {@link !CryptoKey}
- * > import process.
- *
- * > [!NOTE]\
- * > Symmetric JSON Web Keys (i.e. `kty: "oct"`) yield back an {@link !Uint8Array} instead of a
- * > {@link !CryptoKey}.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/key/import'`.
+ * Imports a JWK to a runtime-specific key representation (KeyLike). Either JWK "alg" (Algorithm)
+ * Parameter must be present or the optional "alg" argument. When running on a runtime using
+ * {@link https://www.w3.org/TR/WebCryptoAPI/ Web Cryptography API} the jwk parameters "use",
+ * "key_ops", and "ext" are also used in the resulting `CryptoKey`.
  *
  * @param jwk JSON Web Key.
- * @param alg JSON Web Algorithm identifier to be used with the imported key. Default is the "alg"
- *   property on the JWK. See
+ * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
+ *   with the imported key. Default is the "alg" property on the JWK, its presence is only enforced
+ *   in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
+ * @param octAsKeyObject Forces a symmetric key to be imported to a KeyObject or CryptoKey. Default
+ *   is true unless JWK "ext" (Extractable) is true.
  */
-export declare function importJWK(jwk: types.JWK, alg?: string, options?: KeyImportOptions): Promise<types.CryptoKey | Uint8Array>;
+export declare function importJWK<T extends KeyLike = KeyLike>(jwk: JWK, alg?: string, octAsKeyObject?: boolean): Promise<T | Uint8Array>;