@openclaw/msteams 2026.5.27 → 2026.5.28-beta.2

package/node_modules/jose/dist/types/util/base64url.d.ts

@@ -1,9 +1,19 @@
 /**
- * Base64URL encoding and decoding utilities
+ * Utility function to encode a string or Uint8Array as a base64url string.
  *
- * @module
+ * @param input Value that will be base64url-encoded.
  */
-/** Decodes a Base64URL encoded input. */
-export declare function decode(input: Uint8Array | string): Uint8Array;
-/** Encodes an input using Base64URL with no padding. */
-export declare function encode(input: Uint8Array | string): string;
+interface Base64UrlEncode {
+    (input: Uint8Array | string): string;
+}
+/**
+ * Utility function to decode a base64url encoded string.
+ *
+ * @param input Value that will be base64url-decoded.
+ */
+interface Base64UrlDecode {
+    (input: Uint8Array | string): Uint8Array;
+}
+export declare const encode: Base64UrlEncode;
+export declare const decode: Base64UrlDecode;
+export {};

package/node_modules/jose/dist/types/util/decode_jwt.d.ts

@@ -1,18 +1,10 @@
-/**
- * JSON Web Token (JWT) Claims Set Decoding (no validation, no signature checking)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
+import type { JWTPayload } from '../types';
 /**
  * Decodes a signed JSON Web Token payload. This does not validate the JWT Claims Set types or
  * values. This does not validate the JWS Signature. For a proper Signed JWT Claims Set validation
  * and JWS signature verification use `jose.jwtVerify()`. For an encrypted JWT Claims Set validation
  * and JWE decryption use `jose.jwtDecrypt()`.
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/jwt/decode'`.
- *
  * @param jwt JWT token in compact JWS serialization.
  */
-export declare function decodeJwt<PayloadType = types.JWTPayload>(jwt: string): PayloadType & types.JWTPayload;
+export declare function decodeJwt(jwt: string): JWTPayload;

package/node_modules/jose/dist/types/util/decode_protected_header.d.ts

@@ -1,17 +1,8 @@
-/**
- * JOSE Protected Header Decoding (JWE, JWS, all serialization syntaxes)
- *
- * @module
- */
-import type * as types from '../types.d.ts';
-/** JWE and JWS Header Parameters */
-export type ProtectedHeaderParameters = types.JWSHeaderParameters & types.JWEHeaderParameters;
+import type { JWSHeaderParameters, JWEHeaderParameters } from '../types';
+export type ProtectedHeaderParameters = JWSHeaderParameters & JWEHeaderParameters;
 /**
  * Decodes the Protected Header of a JWE/JWS/JWT token utilizing any JOSE serialization.
  *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/decode/protected_header'`.
- *
  * @param token JWE/JWS/JWT token in any JOSE serialization.
  */
 export declare function decodeProtectedHeader(token: string | object): ProtectedHeaderParameters;

package/node_modules/jose/dist/types/util/errors.d.ts

@@ -1,81 +1,47 @@
-/**
- * JOSE module errors and error codes
- *
- * @module
- */
-import type * as types from '../types.d.ts';
+import type { KeyLike } from '../types';
 /**
  * A generic Error that all other JOSE specific Error subclasses extend.
  *
  */
 export declare class JOSEError extends Error {
-    /**
-     * A unique error code for the particular error subclass.
-     *
-     * @ignore
-     */
-    static code: string;
-    /** A unique error code for {@link JOSEError}. */
+    /** A unique error code for the particular error subclass. */
+    static get code(): string;
+    /** A unique error code for the particular error subclass. */
     code: string;
-    /** @ignore */
-    constructor(message?: string, options?: {
-        cause?: unknown;
-    });
+    constructor(message?: string);
 }
 /**
  * An error subclass thrown when a JWT Claim Set member validation fails.
  *
  */
 export declare class JWTClaimValidationFailed extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWTClaimValidationFailed}. */
+    static get code(): 'ERR_JWT_CLAIM_VALIDATION_FAILED';
     code: string;
     /** The Claim for which the validation failed. */
     claim: string;
     /** Reason code for the validation failure. */
     reason: string;
-    /**
-     * The parsed JWT Claims Set (aka payload). Other JWT claims may or may not have been verified at
-     * this point. The JSON Web Signature (JWS) or a JSON Web Encryption (JWE) structures' integrity
-     * has however been verified. Claims Set verification happens after the JWS Signature or JWE
-     * Decryption processes.
-     */
-    payload: types.JWTPayload;
-    /** @ignore */
-    constructor(message: string, payload: types.JWTPayload, claim?: string, reason?: string);
+    constructor(message: string, claim?: string, reason?: string);
 }
 /**
  * An error subclass thrown when a JWT is expired.
  *
  */
 export declare class JWTExpired extends JOSEError implements JWTClaimValidationFailed {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWTExpired}. */
+    static get code(): 'ERR_JWT_EXPIRED';
     code: string;
     /** The Claim for which the validation failed. */
     claim: string;
     /** Reason code for the validation failure. */
     reason: string;
-    /**
-     * The parsed JWT Claims Set (aka payload). Other JWT claims may or may not have been verified at
-     * this point. The JSON Web Signature (JWS) or a JSON Web Encryption (JWE) structures' integrity
-     * has however been verified. Claims Set verification happens after the JWS Signature or JWE
-     * Decryption processes.
-     */
-    payload: types.JWTPayload;
-    /** @ignore */
-    constructor(message: string, payload: types.JWTPayload, claim?: string, reason?: string);
+    constructor(message: string, claim?: string, reason?: string);
 }
 /**
  * An error subclass thrown when a JOSE Algorithm is not allowed per developer preference.
  *
  */
 export declare class JOSEAlgNotAllowed extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JOSEAlgNotAllowed}. */
+    static get code(): 'ERR_JOSE_ALG_NOT_ALLOWED';
     code: string;
 }
 /**
@@ -84,9 +50,7 @@ export declare class JOSEAlgNotAllowed extends JOSEError {
  *
  */
 export declare class JOSENotSupported extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JOSENotSupported}. */
+    static get code(): 'ERR_JOSE_NOT_SUPPORTED';
     code: string;
 }
 /**
@@ -94,23 +58,25 @@ export declare class JOSENotSupported extends JOSEError {
  *
  */
 export declare class JWEDecryptionFailed extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWEDecryptionFailed}. */
+    static get code(): 'ERR_JWE_DECRYPTION_FAILED';
     code: string;
-    /** @ignore */
-    constructor(message?: string, options?: {
-        cause?: unknown;
-    });
+    message: string;
+}
+/**
+ * An error subclass thrown when a JWE ciphertext decompression fails.
+ *
+ */
+export declare class JWEDecompressionFailed extends JOSEError {
+    static get code(): 'ERR_JWE_DECOMPRESSION_FAILED';
+    code: string;
+    message: string;
 }
 /**
  * An error subclass thrown when a JWE is invalid.
  *
  */
 export declare class JWEInvalid extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWEInvalid}. */
+    static get code(): 'ERR_JWE_INVALID';
     code: string;
 }
 /**
@@ -118,9 +84,7 @@ export declare class JWEInvalid extends JOSEError {
  *
  */
 export declare class JWSInvalid extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWSInvalid}. */
+    static get code(): 'ERR_JWS_INVALID';
     code: string;
 }
 /**
@@ -128,9 +92,7 @@ export declare class JWSInvalid extends JOSEError {
  *
  */
 export declare class JWTInvalid extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWTInvalid}. */
+    static get code(): 'ERR_JWT_INVALID';
     code: string;
 }
 /**
@@ -138,9 +100,7 @@ export declare class JWTInvalid extends JOSEError {
  *
  */
 export declare class JWKInvalid extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWKInvalid}. */
+    static get code(): 'ERR_JWK_INVALID';
     code: string;
 }
 /**
@@ -148,9 +108,7 @@ export declare class JWKInvalid extends JOSEError {
  *
  */
 export declare class JWKSInvalid extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWKSInvalid}. */
+    static get code(): 'ERR_JWKS_INVALID';
     code: string;
 }
 /**
@@ -158,14 +116,9 @@ export declare class JWKSInvalid extends JOSEError {
  *
  */
 export declare class JWKSNoMatchingKey extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWKSNoMatchingKey}. */
+    static get code(): 'ERR_JWKS_NO_MATCHING_KEY';
     code: string;
-    /** @ignore */
-    constructor(message?: string, options?: {
-        cause?: unknown;
-    });
+    message: string;
 }
 /**
  * An error subclass thrown when multiple keys match from a JWKS.
@@ -173,41 +126,26 @@ export declare class JWKSNoMatchingKey extends JOSEError {
  */
 export declare class JWKSMultipleMatchingKeys extends JOSEError {
     /** @ignore */
-    [Symbol.asyncIterator]: () => AsyncIterableIterator<types.CryptoKey>;
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWKSMultipleMatchingKeys}. */
+    [Symbol.asyncIterator]: () => AsyncIterableIterator<KeyLike>;
+    static get code(): 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
     code: string;
-    /** @ignore */
-    constructor(message?: string, options?: {
-        cause?: unknown;
-    });
+    message: string;
 }
 /**
  * Timeout was reached when retrieving the JWKS response.
  *
  */
 export declare class JWKSTimeout extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWKSTimeout}. */
+    static get code(): 'ERR_JWKS_TIMEOUT';
     code: string;
-    /** @ignore */
-    constructor(message?: string, options?: {
-        cause?: unknown;
-    });
+    message: string;
 }
 /**
  * An error subclass thrown when JWS signature verification fails.
  *
  */
 export declare class JWSSignatureVerificationFailed extends JOSEError {
-    /** @ignore */
-    static code: string;
-    /** A unique error code for {@link JWSSignatureVerificationFailed}. */
+    static get code(): 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
     code: string;
-    /** @ignore */
-    constructor(message?: string, options?: {
-        cause?: unknown;
-    });
+    message: string;
 }

package/node_modules/jose/package.json

@@ -1,9 +1,8 @@
 {
   "name": "jose",
-  "version": "6.2.3",
-  "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
+  "version": "4.15.9",
+  "description": "'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
-    "akp",
     "browser",
     "bun",
     "cloudflare",
@@ -14,7 +13,6 @@
     "detached",
     "ec",
     "ecdsa",
-    "ed25519",
     "eddsa",
     "edge",
     "electron",
@@ -30,9 +28,7 @@
     "jwk",
     "jwks",
     "jws",
-    "jwt-decode",
     "jwt",
-    "ml-dsa",
     "netlify",
     "next",
     "nextjs",
@@ -42,6 +38,7 @@
     "pem",
     "pkcs8",
     "rsa",
+    "secp256k1",
     "sign",
     "signature",
     "spki",
@@ -61,140 +58,33 @@
   "license": "MIT",
   "author": "Filip Skokan <panva.ip@gmail.com>",
   "sideEffects": false,
-  "type": "module",
   "exports": {
     ".": {
       "types": "./dist/types/index.d.ts",
-      "default": "./dist/webapi/index.js"
-    },
-    "./jwk/embedded": {
-      "types": "./dist/types/jwk/embedded.d.ts",
-      "default": "./dist/webapi/jwk/embedded.js"
-    },
-    "./jwk/thumbprint": {
-      "types": "./dist/types/jwk/thumbprint.d.ts",
-      "default": "./dist/webapi/jwk/thumbprint.js"
-    },
-    "./key/import": {
-      "types": "./dist/types/key/import.d.ts",
-      "default": "./dist/webapi/key/import.js"
-    },
-    "./key/export": {
-      "types": "./dist/types/key/export.d.ts",
-      "default": "./dist/webapi/key/export.js"
-    },
-    "./key/generate/keypair": {
-      "types": "./dist/types/key/generate_key_pair.d.ts",
-      "default": "./dist/webapi/key/generate_key_pair.js"
-    },
-    "./key/generate/secret": {
-      "types": "./dist/types/key/generate_secret.d.ts",
-      "default": "./dist/webapi/key/generate_secret.js"
-    },
-    "./jwks/remote": {
-      "types": "./dist/types/jwks/remote.d.ts",
-      "default": "./dist/webapi/jwks/remote.js"
-    },
-    "./jwks/local": {
-      "types": "./dist/types/jwks/local.d.ts",
-      "default": "./dist/webapi/jwks/local.js"
-    },
-    "./jwt/sign": {
-      "types": "./dist/types/jwt/sign.d.ts",
-      "default": "./dist/webapi/jwt/sign.js"
-    },
-    "./jwt/verify": {
-      "types": "./dist/types/jwt/verify.d.ts",
-      "default": "./dist/webapi/jwt/verify.js"
-    },
-    "./jwt/encrypt": {
-      "types": "./dist/types/jwt/encrypt.d.ts",
-      "default": "./dist/webapi/jwt/encrypt.js"
-    },
-    "./jwt/decrypt": {
-      "types": "./dist/types/jwt/decrypt.d.ts",
-      "default": "./dist/webapi/jwt/decrypt.js"
-    },
-    "./jwt/unsecured": {
-      "types": "./dist/types/jwt/unsecured.d.ts",
-      "default": "./dist/webapi/jwt/unsecured.js"
-    },
-    "./jwt/decode": {
-      "types": "./dist/types/util/decode_jwt.d.ts",
-      "default": "./dist/webapi/util/decode_jwt.js"
-    },
-    "./decode/protected_header": {
-      "types": "./dist/types/util/decode_protected_header.d.ts",
-      "default": "./dist/webapi/util/decode_protected_header.js"
-    },
-    "./jws/compact/sign": {
-      "types": "./dist/types/jws/compact/sign.d.ts",
-      "default": "./dist/webapi/jws/compact/sign.js"
-    },
-    "./jws/compact/verify": {
-      "types": "./dist/types/jws/compact/verify.d.ts",
-      "default": "./dist/webapi/jws/compact/verify.js"
-    },
-    "./jws/flattened/sign": {
-      "types": "./dist/types/jws/flattened/sign.d.ts",
-      "default": "./dist/webapi/jws/flattened/sign.js"
-    },
-    "./jws/flattened/verify": {
-      "types": "./dist/types/jws/flattened/verify.d.ts",
-      "default": "./dist/webapi/jws/flattened/verify.js"
-    },
-    "./jws/general/sign": {
-      "types": "./dist/types/jws/general/sign.d.ts",
-      "default": "./dist/webapi/jws/general/sign.js"
-    },
-    "./jws/general/verify": {
-      "types": "./dist/types/jws/general/verify.d.ts",
-      "default": "./dist/webapi/jws/general/verify.js"
-    },
-    "./jwe/compact/encrypt": {
-      "types": "./dist/types/jwe/compact/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/compact/encrypt.js"
-    },
-    "./jwe/compact/decrypt": {
-      "types": "./dist/types/jwe/compact/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/compact/decrypt.js"
-    },
-    "./jwe/flattened/encrypt": {
-      "types": "./dist/types/jwe/flattened/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/flattened/encrypt.js"
-    },
-    "./jwe/flattened/decrypt": {
-      "types": "./dist/types/jwe/flattened/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/flattened/decrypt.js"
-    },
-    "./jwe/general/encrypt": {
-      "types": "./dist/types/jwe/general/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/general/encrypt.js"
-    },
-    "./jwe/general/decrypt": {
-      "types": "./dist/types/jwe/general/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/general/decrypt.js"
-    },
-    "./errors": {
-      "types": "./dist/types/util/errors.d.ts",
-      "default": "./dist/webapi/util/errors.js"
-    },
-    "./base64url": {
-      "types": "./dist/types/util/base64url.d.ts",
-      "default": "./dist/webapi/util/base64url.js"
+      "bun": "./dist/browser/index.js",
+      "deno": "./dist/browser/index.js",
+      "browser": "./dist/browser/index.js",
+      "worker": "./dist/browser/index.js",
+      "workerd": "./dist/browser/index.js",
+      "import": "./dist/node/esm/index.js",
+      "require": "./dist/node/cjs/index.js"
     },
     "./package.json": "./package.json"
   },
-  "main": "./dist/webapi/index.js",
+  "main": "./dist/node/cjs/index.js",
+  "browser": "./dist/browser/index.js",
   "types": "./dist/types/index.d.ts",
   "files": [
-    "dist/webapi/**/*.js",
+    "dist/**/package.json",
+    "dist/**/*.js",
     "dist/types/**/*.d.ts",
     "!dist/**/*.bundle.js",
     "!dist/**/*.umd.js",
     "!dist/**/*.min.js",
+    "!dist/node/webcrypto/**/*",
     "!dist/types/runtime/*",
     "!dist/types/lib/*",
     "!dist/deno/**/*"
-  ]
+  ],
+  "deno": "./dist/browser/index.js"
 }

package/node_modules/jwks-rsa/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jwks-rsa",
-  "version": "4.0.1",
+  "version": "3.2.2",
   "description": "Library to retrieve RSA public keys from a JWKS endpoint",
   "main": "src/index.js",
   "files": [
@@ -9,14 +9,14 @@
   ],
   "types": "index.d.ts",
   "engines": {
-    "node": "^20.19.0 || ^22.12.0 || >= 23.0.0"
+    "node": ">=14"
   },
   "dependencies": {
     "@types/jsonwebtoken": "^9.0.4",
     "debug": "^4.3.4",
-    "jose": "^6.1.3",
+    "jose": "^4.15.4",
     "limiter": "^1.1.5",
-    "lru-memoizer": "^3.0.0"
+    "lru-memoizer": "^2.2.0"
   },
   "devDependencies": {
     "@types/chai": "^4.3.9",

package/node_modules/jwks-rsa/src/integrations/config.js

@@ -6,6 +6,7 @@ const allowedSignatureAlg = [
   'PS384',
   'PS512',
   'ES256',
+  'ES256K',
   'ES384',
   'ES512',
   'EdDSA'

package/node_modules/jwks-rsa/src/utils.js

@@ -14,6 +14,8 @@ function resolveAlg(jwk) {
     switch (jwk.crv) {
       case 'P-256':
         return 'ES256';
+      case 'secp256k1':
+        return 'ES256K';
       case 'P-384':
         return 'ES384';
       case 'P-521':

package/node_modules/jwks-rsa/src/wrappers/cache.js

@@ -7,7 +7,7 @@ function cacheWrapper(client, { cacheMaxEntries = 5, cacheMaxAge = 600000 }) {
   return promisify(memoizer({
     hash: (kid) => kid,
     load: callbackify(client.getSigningKey.bind(client)),
-    ttl: cacheMaxAge,
+    maxAge: cacheMaxAge,
     max: cacheMaxEntries
   }));
 }