@owf/token-status-list 0.2.0 → 0.3.0-alpha-20260508181749

package/dist/index.cjs

@@ -363,40 +363,10 @@ function getStatusListFromJWT(jwt) {
 	return decodeJwtPayload(jwt).status.status_list;
 }
 //#endregion
-Object.defineProperty(exports, "CoseKey", {
-	enumerable: true,
-	get: function() {
-		return _owf_cose.CoseKey;
-	}
-});
 exports.JWTClaimNames = JWTClaimNames;
 exports.JWT_STATUS_LIST_TYPE = JWT_STATUS_LIST_TYPE;
-Object.defineProperty(exports, "Mac0Context", {
-	enumerable: true,
-	get: function() {
-		return _owf_cose.Mac0Context;
-	}
-});
-Object.defineProperty(exports, "MacAlgorithm", {
-	enumerable: true,
-	get: function() {
-		return _owf_cose.MacAlgorithm;
-	}
-});
 exports.MediaTypes = MediaTypes;
 exports.SLException = SLException;
-Object.defineProperty(exports, "Sign1Context", {
-	enumerable: true,
-	get: function() {
-		return _owf_cose.Sign1Context;
-	}
-});
-Object.defineProperty(exports, "SignatureAlgorithm", {
-	enumerable: true,
-	get: function() {
-		return _owf_cose.SignatureAlgorithm;
-	}
-});
 exports.StatusList = StatusList;
 exports.StatusListCbor = StatusListCbor;
 exports.StatusListCwt = StatusListCwt;

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["IdentityException","z","zUint8Array","CborStructure","TypedMap","RegisteredCwtClaimKey","z","CborStructure","TypedMap","ProtectedHeaders","UnprotectedHeaders","Cwt"],"sources":["../src/status-list-exception.ts","../src/status-list.ts","../src/cbor/status-list-cbor.ts","../src/types.ts","../src/cbor/status-list-cwt-payload.ts","../src/cbor/status-list-cwt.ts","../src/jwt-types.ts","../src/status-list-jwt.ts"],"sourcesContent":["import { IdentityException } from '@owf/identity-common'\n\n/**\n * SLException is a custom error class for Status List related exceptions.\n */\nexport class SLException extends IdentityException {\n  constructor(message: string, details?: unknown) {\n    super(message, details)\n    Object.setPrototypeOf(this, SLException.prototype)\n    this.name = 'SLException'\n  }\n}\n","import { deflate, inflate } from 'pako'\nimport { SLException } from './status-list-exception'\nimport type { BitsPerStatus } from './types'\n\n/**\n * StatusList is a class that manages a list of statuses with variable bit size.\n */\nexport class StatusList {\n  private _statusList: number[]\n  private bitsPerStatus: BitsPerStatus\n  private totalStatuses: number\n  public aggregationUri?: string\n\n  constructor(statusList: number[], bitsPerStatus: BitsPerStatus, aggregationUri?: string) {\n    if (![1, 2, 4, 8].includes(bitsPerStatus)) {\n      throw new SLException('bitsPerStatus must be 1, 2, 4, or 8')\n    }\n    for (let i = 0; i < statusList.length; i++) {\n      if (statusList[i] > 2 ** bitsPerStatus) {\n        throw new SLException(`Status value out of range at index ${i} with value ${statusList[i]}`)\n      }\n    }\n    this._statusList = statusList\n    this.bitsPerStatus = bitsPerStatus\n    this.totalStatuses = statusList.length\n    this.aggregationUri = aggregationUri\n  }\n\n  /** Get the status list. */\n  get statusList(): number[] {\n    return this._statusList\n  }\n\n  /** Get the number of bits per status. */\n  getBitsPerStatus(): BitsPerStatus {\n    return this.bitsPerStatus\n  }\n\n  /** Get the status at a specific index. */\n  getStatus(index: number): number {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    return this._statusList[index]\n  }\n\n  /** Set the status at a specific index. */\n  setStatus(index: number, value: number): void {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    this._statusList[index] = value\n  }\n\n  /** Compress the status list and return as raw bytes. */\n  compressStatusListToBytes(): Uint8Array {\n    const byteArray = this.encodeStatusListIntoByteArray()\n    return deflate(byteArray, { level: 9 })\n  }\n\n  /** Decompress a raw byte array and return a new StatusList instance. */\n  static decompressStatusListFromBytes(\n    compressed: Uint8Array,\n    bitsPerStatus: BitsPerStatus,\n    aggregationUri?: string\n  ): StatusList {\n    try {\n      const decompressed = inflate(compressed)\n      const statusList = StatusList.decodeStatusListFromByteArray(decompressed, bitsPerStatus)\n      return new StatusList(statusList, bitsPerStatus, aggregationUri)\n    } catch (err: unknown) {\n      throw new Error(`Decompression failed: ${err}`)\n    }\n  }\n\n  /** Encode the status list into a byte array. */\n  public encodeStatusListIntoByteArray(): Uint8Array {\n    const numBits = this.bitsPerStatus\n    const numBytes = Math.ceil((this.totalStatuses * numBits) / 8)\n    const byteArray = new Uint8Array(numBytes)\n    let byteIndex = 0\n    let bitIndex = 0\n    let currentByte = ''\n    for (let i = 0; i < this.totalStatuses; i++) {\n      const status = this._statusList[i]\n      currentByte = status.toString(2).padStart(numBits, '0') + currentByte\n      bitIndex += numBits\n\n      if (bitIndex >= 8 || i === this.totalStatuses - 1) {\n        if (i === this.totalStatuses - 1 && bitIndex % 8 !== 0) {\n          currentByte = currentByte.padStart(8, '0')\n        }\n        byteArray[byteIndex] = Number.parseInt(currentByte, 2)\n        currentByte = ''\n        bitIndex = 0\n        byteIndex++\n      }\n    }\n\n    return byteArray\n  }\n\n  /** Decode the byte array into a status list. */\n  private static decodeStatusListFromByteArray(byteArray: Uint8Array, bitsPerStatus: BitsPerStatus): number[] {\n    const numBits = bitsPerStatus\n    const totalStatuses = (byteArray.length * 8) / numBits\n    const statusList = new Array<number>(totalStatuses)\n    let bitIndex = 0\n    for (let i = 0; i < totalStatuses; i++) {\n      const byte = byteArray[Math.floor((i * numBits) / 8)]\n      let byteString = byte.toString(2)\n      if (byteString.length < 8) {\n        byteString = '0'.repeat(8 - byteString.length) + byteString\n      }\n      const status = byteString.slice(bitIndex, bitIndex + numBits)\n      const group = Math.floor(i / (8 / numBits))\n      const indexInGroup = i % (8 / numBits)\n      const position = group * (8 / numBits) + (8 / numBits + -1 - indexInGroup)\n      statusList[position] = Number.parseInt(status, 2)\n      bitIndex = (bitIndex + numBits) % 8\n    }\n    return statusList\n  }\n}\n","import { CborStructure, TypedMap, typedMap, zUint8Array } from '@owf/cose'\nimport { z } from 'zod'\nimport { StatusList } from '../status-list'\nimport type { BitsPerStatus } from '../types'\n\nexport const statusListCborEncodedSchema = typedMap([\n  ['bits', z.union([z.literal(1), z.literal(2), z.literal(4), z.literal(8)])],\n  ['lst', zUint8Array],\n  ['aggregation_uri', z.string().optional()],\n])\n\nexport const statusListCborDecodedSchema = z.instanceof(StatusList)\n\nexport type StatusListCborEncodedStructure = z.infer<typeof statusListCborEncodedSchema>\nexport type StatusListCborDecodedStructure = z.infer<typeof statusListCborDecodedSchema>\n\nexport type CreateStatusListCborOptions = {\n  bits: BitsPerStatus\n  list: Uint8Array | number[]\n  aggregationUri?: string\n}\n\nexport type StatusListCborWithStatusListOptions = {\n  statusList: StatusList\n}\n\nexport class StatusListCbor extends CborStructure<StatusListCborEncodedStructure, StatusListCborDecodedStructure> {\n  public statusList = this.structure\n\n  public static override get encodingSchema() {\n    return z.codec(statusListCborEncodedSchema, statusListCborDecodedSchema, {\n      encode: (statusList) => {\n        return new TypedMap([\n          ['bits', statusList.getBitsPerStatus()],\n          ['lst', statusList.compressStatusListToBytes()],\n          ['aggregation_uri', statusList.aggregationUri],\n        ]) satisfies StatusListCborEncodedStructure\n      },\n      decode: (input) => {\n        return StatusList.decompressStatusListFromBytes(\n          input.get('lst'),\n          input.get('bits'),\n          input.get('aggregation_uri')\n        )\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCborOptions | StatusListCborWithStatusListOptions) {\n    const statusList =\n      'statusList' in options\n        ? options.statusList\n        : options.list instanceof Uint8Array\n          ? StatusList.decompressStatusListFromBytes(options.list, options.bits, options.aggregationUri)\n          : new StatusList(options.list, options.bits, options.aggregationUri)\n\n    return new StatusListCbor(statusList)\n  }\n}\n","// ==================== Common Types & Constants ====================\n\n/**\n * Status Type values as defined in the spec.\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-7\n */\nexport const StatusTypes = {\n  /** The status of the Referenced Token is valid, correct or legal. */\n  VALID: 0x00,\n  /** The status of the Referenced Token is revoked, annulled, taken back, recalled or cancelled. */\n  INVALID: 0x01,\n  /** The status of the Referenced Token is temporarily invalid, hanging, debarred from privilege. */\n  SUSPENDED: 0x02,\n  /** Application-specific status (0x03). */\n  APPLICATION_SPECIFIC_3: 0x03,\n  /** Application-specific status range start (0x0C). */\n  APPLICATION_SPECIFIC_RANGE_START: 0x0c,\n  /** Application-specific status range end (0x0F). */\n  APPLICATION_SPECIFIC_RANGE_END: 0x0f,\n} as const\n\nexport type StatusType = (typeof StatusTypes)[keyof typeof StatusTypes] | number\n\n/**\n * Media types for Status List Tokens\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.7\n */\nexport const MediaTypes = {\n  /** Media type for JWT-based Status List Token */\n  STATUS_LIST_JWT: 'application/statuslist+jwt',\n  /** Media type for CWT-based Status List Token */\n  STATUS_LIST_CWT: 'application/statuslist+cwt',\n} as const\n\n/**\n * BitsPerStatus type.\n */\nexport type BitsPerStatus = 1 | 2 | 4 | 8\n\n/**\n * Reference to a status list entry.\n */\nexport interface StatusListEntry {\n  idx: number\n  uri: string\n}\n","import { CborStructure, RegisteredCwtClaimKey, TypedMap, typedMap } from '@owf/cose'\nimport z from 'zod'\nimport type { StatusList } from '../status-list'\nimport { StatusListCbor, type StatusListCborEncodedStructure } from './status-list-cbor'\n\nexport enum StatusListCwtClaimKey {\n  TimeToLive = 65534,\n  StatusList = 65533,\n}\n\nconst statusListCwtPayloadSchema = typedMap([\n  [RegisteredCwtClaimKey.Subject, z.string()],\n  [RegisteredCwtClaimKey.IssuedAt, z.number()],\n  [RegisteredCwtClaimKey.ExpirationTime, z.number().optional()],\n  [StatusListCwtClaimKey.TimeToLive, z.number().optional()],\n  [StatusListCwtClaimKey.StatusList, z.instanceof(StatusListCbor)],\n])\n\nexport type StatusListCwtPayloadEncodedStructure = z.infer<typeof statusListCwtPayloadSchema>\nexport type StatusListCwtPayloadDecodedStructure = z.infer<typeof statusListCwtPayloadSchema>\n\nexport type CreateStatusListCwtPayloadOptions = {\n  subject: string\n  statusList: StatusListCbor | StatusList\n  issuedAt?: Date\n  expirationTime?: Date\n  timeToLive?: number\n}\n\nexport class StatusListCwtPayload extends CborStructure<\n  StatusListCwtPayloadEncodedStructure,\n  StatusListCwtPayloadDecodedStructure\n> {\n  public static override get encodingSchema() {\n    return z.codec(statusListCwtPayloadSchema.in, statusListCwtPayloadSchema.out, {\n      decode: (input) => {\n        const map: StatusListCwtPayloadDecodedStructure = TypedMap.fromMap(input)\n\n        map.set(\n          StatusListCwtClaimKey.StatusList,\n          StatusListCbor.fromEncodedStructure(\n            input.get(StatusListCwtClaimKey.StatusList) as StatusListCborEncodedStructure\n          )\n        )\n\n        return map\n      },\n      encode: (output) => {\n        const map = output.toMap() as Map<unknown, unknown>\n        map.set(StatusListCwtClaimKey.StatusList, output.get(StatusListCwtClaimKey.StatusList).encodedStructure)\n        return map\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCwtPayloadOptions) {\n    const map: StatusListCwtPayloadEncodedStructure = new TypedMap([\n      [RegisteredCwtClaimKey.Subject, options.subject],\n      [RegisteredCwtClaimKey.IssuedAt, Math.floor((options.issuedAt?.getTime() ?? Date.now()) / 1000)],\n      [\n        RegisteredCwtClaimKey.ExpirationTime,\n        options.expirationTime ? Math.floor(options.expirationTime.getTime() / 1000) : undefined,\n      ],\n      [StatusListCwtClaimKey.TimeToLive, options.timeToLive],\n      [\n        StatusListCwtClaimKey.StatusList,\n        options.statusList instanceof StatusListCbor\n          ? options.statusList\n          : StatusListCbor.create({ statusList: options.statusList }),\n      ],\n    ])\n\n    return new StatusListCwtPayload(statusListCwtPayloadSchema.parse(map.toMap()))\n  }\n\n  public get subject() {\n    return this.structure.get(RegisteredCwtClaimKey.Subject)\n  }\n\n  public get issuedAt() {\n    return new Date(this.structure.get(RegisteredCwtClaimKey.IssuedAt) * 1000)\n  }\n\n  public get expirationTime() {\n    return this.structure.has(RegisteredCwtClaimKey.ExpirationTime)\n      ? // biome-ignore lint/style/noNonNullAssertion: checked with `has` in the line above\n        new Date(this.structure.get(RegisteredCwtClaimKey.ExpirationTime)! * 1000)\n      : undefined\n  }\n\n  public get timeToLive() {\n    return this.structure.get(StatusListCwtClaimKey.TimeToLive)\n  }\n\n  public get statusList() {\n    return this.structure.get(StatusListCwtClaimKey.StatusList).statusList\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.structure.set(\n      StatusListCwtClaimKey.StatusList,\n      statusList instanceof StatusListCbor ? statusList : StatusListCbor.create({ statusList })\n    )\n  }\n}\n","import {\n  type CoseKey,\n  Cwt,\n  type Mac0Context,\n  type ProtectedHeaderOptions,\n  ProtectedHeaders,\n  type Sign1Context,\n  type SignatureAlgorithm,\n  type UnprotectedHeaderOptions,\n  UnprotectedHeaders,\n} from '@owf/cose'\nimport { StatusList } from '../status-list'\nimport { type BitsPerStatus, MediaTypes } from '../types'\nimport { StatusListCbor } from './status-list-cbor'\nimport { type CreateStatusListCwtPayloadOptions, StatusListCwtPayload } from './status-list-cwt-payload'\n\nexport type StatusListCwtOptions = {\n  payload: StatusListCwtPayload | CreateStatusListCwtPayloadOptions\n  protectedHeaders?: ProtectedHeaders | ProtectedHeaderOptions['protectedHeaders']\n  unprotectedHeaders?: UnprotectedHeaders | UnprotectedHeaderOptions['unprotectedHeaders']\n}\n\nexport enum StatusListCwtHeaderKey {\n  Typ = 16,\n}\n\nexport class StatusListCwt {\n  public payload: StatusListCwtPayload\n  public protectedHeaders?: ProtectedHeaders\n  public unprotectedHeaders?: UnprotectedHeaders\n\n  public constructor(options: StatusListCwtOptions) {\n    this.payload =\n      options.payload instanceof StatusListCwtPayload ? options.payload : StatusListCwtPayload.create(options.payload)\n    this.protectedHeaders =\n      options.protectedHeaders instanceof ProtectedHeaders\n        ? options.protectedHeaders\n        : ProtectedHeaders.create({ protectedHeaders: options.protectedHeaders })\n    this.unprotectedHeaders =\n      options.unprotectedHeaders instanceof UnprotectedHeaders\n        ? options.unprotectedHeaders\n        : UnprotectedHeaders.create({ unprotectedHeaders: options.unprotectedHeaders })\n\n    if (this.protectedHeaders.headers.get(StatusListCwtHeaderKey.Typ) === undefined) {\n      this.protectedHeaders.headers.set(StatusListCwtHeaderKey.Typ, MediaTypes.STATUS_LIST_CWT)\n    }\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.payload.setStatusList(statusList)\n  }\n\n  public updateStatusList(index: number, value: number) {\n    this.payload.statusList.setStatus(index, value)\n  }\n\n  /**\n   *\n   * Create a minimal status list cwt. If you want to configure more options, use the constructor method\n   *\n   */\n  public static createFromStatusListAndSubject(\n    statusList:\n      | StatusList\n      | StatusListCbor\n      | { statusList: number[]; bitsPerStatus: BitsPerStatus; aggregationUri?: string },\n    subject: string\n  ) {\n    const cborStatusList =\n      statusList instanceof StatusListCbor\n        ? statusList\n        : statusList instanceof StatusList\n          ? StatusListCbor.create({ statusList })\n          : StatusListCbor.create({\n              bits: statusList.bitsPerStatus,\n              list: statusList.statusList,\n              aggregationUri: statusList.aggregationUri,\n            })\n\n    return new StatusListCwt({ payload: StatusListCwtPayload.create({ statusList: cborStatusList, subject }) })\n  }\n\n  public static fromToken(token: Uint8Array) {\n    const cwt = Cwt.fromToken(token)\n    const payload = StatusListCwtPayload.decode(cwt.payload)\n\n    return new StatusListCwt({\n      payload,\n      protectedHeaders: cwt.protectedHeaders,\n      unprotectedHeaders: cwt.unprotectedHeaders,\n    })\n  }\n\n  public async signAndEncode(\n    options: {\n      signingKey: CoseKey\n      algorithm?: SignatureAlgorithm\n    },\n    ctx: Pick<Sign1Context, 'sign'>\n  ) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asSign1.sign(options, ctx)).encode()\n  }\n\n  public async authenticateAndEncode(options: { key: Uint8Array }, ctx: Pick<Mac0Context, 'mac'>) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asMac0.authenticate(options, ctx)).encode()\n  }\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport type { BitsPerStatus, StatusListEntry } from './types'\n\n// ==================== JWT Types & Constants ====================\n\n/**\n * JWT type header value for Status List Token\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-5.1\n */\nexport const JWT_STATUS_LIST_TYPE = 'statuslist+jwt'\n\n/**\n * JWT claim names for Status List\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.1\n */\nexport const JWTClaimNames = {\n  STATUS: 'status',\n  STATUS_LIST: 'status_list',\n  TTL: 'ttl',\n  IDX: 'idx',\n  URI: 'uri',\n  BITS: 'bits',\n  LST: 'lst',\n  AGGREGATION_URI: 'aggregation_uri',\n} as const\n\n/**\n * Payload for a JWT with a status reference.\n */\nexport interface JWTwithStatusListPayload extends JwtPayload {\n  status: {\n    status_list: StatusListEntry\n  }\n}\n\n/**\n * Payload for a Status List JWT.\n */\nexport interface StatusListJWTPayload extends JwtPayload {\n  ttl?: number\n  status_list: {\n    bits: BitsPerStatus\n    lst: string\n  }\n}\n\n/**\n * Header parameters for a JWT Status List Token.\n */\nexport type StatusListJWTHeaderParameters = {\n  alg: string\n  typ: typeof JWT_STATUS_LIST_TYPE\n  [key: string]: unknown\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport { base64UrlToUint8Array, base64urlDecode, uint8ArrayToBase64Url } from '@owf/identity-common'\nimport type { JWTwithStatusListPayload, StatusListJWTHeaderParameters, StatusListJWTPayload } from './jwt-types'\nimport { JWT_STATUS_LIST_TYPE } from './jwt-types'\nimport { StatusList } from './status-list'\nimport { SLException } from './status-list-exception'\nimport type { StatusListEntry } from './types'\n\n/**\n * Decode a JWT and return the payload.\n * @param jwt JWT token in compact JWS serialization.\n */\nfunction decodeJwtPayload<T>(jwt: string): T {\n  const parts = jwt.split('.')\n  return JSON.parse(base64urlDecode(parts[1]))\n}\n\n/**\n * Adds the status list to the payload and header of a JWT.\n */\nexport function createHeaderAndPayload(list: StatusList, payload: JwtPayload, header: StatusListJWTHeaderParameters) {\n  if (!payload.sub) {\n    throw new SLException('sub field is required')\n  }\n  if (!payload.iat) {\n    throw new SLException('iat field is required')\n  }\n\n  header.typ = JWT_STATUS_LIST_TYPE\n  payload.status_list = {\n    bits: list.getBitsPerStatus(),\n    lst: uint8ArrayToBase64Url(list.compressStatusListToBytes()),\n  }\n  return { header, payload }\n}\n\n/**\n * Get the status list from a JWT, but do not verify the signature.\n */\nexport function getListFromStatusListJWT(jwt: string): StatusList {\n  const payload = decodeJwtPayload<StatusListJWTPayload>(jwt)\n  const statusList = payload.status_list\n  const compressed = base64UrlToUint8Array(statusList.lst)\n  return StatusList.decompressStatusListFromBytes(compressed, statusList.bits)\n}\n\n/**\n * Get the status list entry from a JWT, but do not verify the signature.\n */\nexport function getStatusListFromJWT(jwt: string): StatusListEntry {\n  const payload = decodeJwtPayload<JWTwithStatusListPayload>(jwt)\n  return payload.status.status_list\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,IAAa,cAAb,MAAa,oBAAoBA,qBAAAA,kBAAkB;CACjD,YAAY,SAAiB,SAAmB;AAC9C,QAAM,SAAS,QAAQ;AACvB,SAAO,eAAe,MAAM,YAAY,UAAU;AAClD,OAAK,OAAO;;;;;;;;ACFhB,IAAa,aAAb,MAAa,WAAW;CAMtB,YAAY,YAAsB,eAA8B,gBAAyB;AACvF,MAAI,CAAC;GAAC;GAAG;GAAG;GAAG;GAAE,CAAC,SAAS,cAAc,CACvC,OAAM,IAAI,YAAY,sCAAsC;AAE9D,OAAK,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,IACrC,KAAI,WAAW,KAAK,KAAK,cACvB,OAAM,IAAI,YAAY,sCAAsC,EAAE,cAAc,WAAW,KAAK;AAGhG,OAAK,cAAc;AACnB,OAAK,gBAAgB;AACrB,OAAK,gBAAgB,WAAW;AAChC,OAAK,iBAAiB;;;CAIxB,IAAI,aAAuB;AACzB,SAAO,KAAK;;;CAId,mBAAkC;AAChC,SAAO,KAAK;;;CAId,UAAU,OAAuB;AAC/B,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,SAAO,KAAK,YAAY;;;CAI1B,UAAU,OAAe,OAAqB;AAC5C,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,OAAK,YAAY,SAAS;;;CAI5B,4BAAwC;AAEtC,UAAA,GAAA,KAAA,SADkB,KAAK,+BAA+B,EAC5B,EAAE,OAAO,GAAG,CAAC;;;CAIzC,OAAO,8BACL,YACA,eACA,gBACY;AACZ,MAAI;GACF,MAAM,gBAAA,GAAA,KAAA,SAAuB,WAAW;AAExC,UAAO,IAAI,WADQ,WAAW,8BAA8B,cAAc,cAAc,EACtD,eAAe,eAAe;WACzD,KAAc;AACrB,SAAM,IAAI,MAAM,yBAAyB,MAAM;;;;CAKnD,gCAAmD;EACjD,MAAM,UAAU,KAAK;EACrB,MAAM,WAAW,KAAK,KAAM,KAAK,gBAAgB,UAAW,EAAE;EAC9D,MAAM,YAAY,IAAI,WAAW,SAAS;EAC1C,IAAI,YAAY;EAChB,IAAI,WAAW;EACf,IAAI,cAAc;AAClB,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,eAAe,KAAK;AAE3C,iBADe,KAAK,YAAY,GACX,SAAS,EAAE,CAAC,SAAS,SAAS,IAAI,GAAG;AAC1D,eAAY;AAEZ,OAAI,YAAY,KAAK,MAAM,KAAK,gBAAgB,GAAG;AACjD,QAAI,MAAM,KAAK,gBAAgB,KAAK,WAAW,MAAM,EACnD,eAAc,YAAY,SAAS,GAAG,IAAI;AAE5C,cAAU,aAAa,OAAO,SAAS,aAAa,EAAE;AACtD,kBAAc;AACd,eAAW;AACX;;;AAIJ,SAAO;;;CAIT,OAAe,8BAA8B,WAAuB,eAAwC;EAC1G,MAAM,UAAU;EAChB,MAAM,gBAAiB,UAAU,SAAS,IAAK;EAC/C,MAAM,aAAa,IAAI,MAAc,cAAc;EACnD,IAAI,WAAW;AACf,OAAK,IAAI,IAAI,GAAG,IAAI,eAAe,KAAK;GAEtC,IAAI,aADS,UAAU,KAAK,MAAO,IAAI,UAAW,EAAE,EAC9B,SAAS,EAAE;AACjC,OAAI,WAAW,SAAS,EACtB,cAAa,IAAI,OAAO,IAAI,WAAW,OAAO,GAAG;GAEnD,MAAM,SAAS,WAAW,MAAM,UAAU,WAAW,QAAQ;GAC7D,MAAM,QAAQ,KAAK,MAAM,KAAK,IAAI,SAAS;GAC3C,MAAM,eAAe,KAAK,IAAI;GAC9B,MAAM,WAAW,SAAS,IAAI,YAAY,IAAI,UAAU,KAAK;AAC7D,cAAW,YAAY,OAAO,SAAS,QAAQ,EAAE;AACjD,eAAY,WAAW,WAAW;;AAEpC,SAAO;;;;;ACpHX,MAAa,+BAAA,GAAA,UAAA,UAAuC;CAClD,CAAC,QAAQC,IAAAA,EAAE,MAAM;EAACA,IAAAA,EAAE,QAAQ,EAAE;EAAEA,IAAAA,EAAE,QAAQ,EAAE;EAAEA,IAAAA,EAAE,QAAQ,EAAE;EAAEA,IAAAA,EAAE,QAAQ,EAAE;EAAC,CAAC,CAAC;CAC3E,CAAC,OAAOC,UAAAA,YAAY;CACpB,CAAC,mBAAmBD,IAAAA,EAAE,QAAQ,CAAC,UAAU,CAAC;CAC3C,CAAC;AAEF,MAAa,8BAA8BA,IAAAA,EAAE,WAAW,WAAW;AAenE,IAAa,iBAAb,MAAa,uBAAuBE,UAAAA,cAA8E;;;oBAC5F,KAAK;;CAEzB,WAA2B,iBAAiB;AAC1C,SAAOF,IAAAA,EAAE,MAAM,6BAA6B,6BAA6B;GACvE,SAAS,eAAe;AACtB,WAAO,IAAIG,UAAAA,SAAS;KAClB,CAAC,QAAQ,WAAW,kBAAkB,CAAC;KACvC,CAAC,OAAO,WAAW,2BAA2B,CAAC;KAC/C,CAAC,mBAAmB,WAAW,eAAe;KAC/C,CAAC;;GAEJ,SAAS,UAAU;AACjB,WAAO,WAAW,8BAChB,MAAM,IAAI,MAAM,EAChB,MAAM,IAAI,OAAO,EACjB,MAAM,IAAI,kBAAkB,CAC7B;;GAEJ,CAAC;;CAGJ,OAAc,OAAO,SAA4E;AAQ/F,SAAO,IAAI,eANT,gBAAgB,UACZ,QAAQ,aACR,QAAQ,gBAAgB,aACtB,WAAW,8BAA8B,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,GAC5F,IAAI,WAAW,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,CAErC;;;;;;;;;AClDzC,MAAa,cAAc;CAEzB,OAAO;CAEP,SAAS;CAET,WAAW;CAEX,wBAAwB;CAExB,kCAAkC;CAElC,gCAAgC;CACjC;;;;;AAQD,MAAa,aAAa;CAExB,iBAAiB;CAEjB,iBAAiB;CAClB;;;AC3BD,IAAY,wBAAL,yBAAA,uBAAA;AACL,uBAAA,sBAAA,gBAAA,SAAA;AACA,uBAAA,sBAAA,gBAAA,SAAA;;KACD;AAED,MAAM,8BAAA,GAAA,UAAA,UAAsC;CAC1C,CAACC,UAAAA,sBAAsB,SAASC,IAAAA,QAAE,QAAQ,CAAC;CAC3C,CAACD,UAAAA,sBAAsB,UAAUC,IAAAA,QAAE,QAAQ,CAAC;CAC5C,CAACD,UAAAA,sBAAsB,gBAAgBC,IAAAA,QAAE,QAAQ,CAAC,UAAU,CAAC;CAC7D,CAAA,OAAmCA,IAAAA,QAAE,QAAQ,CAAC,UAAU,CAAC;CACzD,CAAA,OAAmCA,IAAAA,QAAE,WAAW,eAAe,CAAC;CACjE,CAAC;AAaF,IAAa,uBAAb,MAAa,6BAA6BC,UAAAA,cAGxC;CACA,WAA2B,iBAAiB;AAC1C,SAAOD,IAAAA,QAAE,MAAM,2BAA2B,IAAI,2BAA2B,KAAK;GAC5E,SAAS,UAAU;IACjB,MAAM,MAA4CE,UAAAA,SAAS,QAAQ,MAAM;AAEzE,QAAI,IAAA,OAEF,eAAe,qBACb,MAAM,IAAA,MAAqC,CAC5C,CACF;AAED,WAAO;;GAET,SAAS,WAAW;IAClB,MAAM,MAAM,OAAO,OAAO;AAC1B,QAAI,IAAA,OAAsC,OAAO,IAAA,MAAqC,CAAC,iBAAiB;AACxG,WAAO;;GAEV,CAAC;;CAGJ,OAAc,OAAO,SAA4C;EAC/D,MAAM,MAA4C,IAAIA,UAAAA,SAAS;GAC7D,CAACH,UAAAA,sBAAsB,SAAS,QAAQ,QAAQ;GAChD,CAACA,UAAAA,sBAAsB,UAAU,KAAK,OAAO,QAAQ,UAAU,SAAS,IAAI,KAAK,KAAK,IAAI,IAAK,CAAC;GAChG,CACEA,UAAAA,sBAAsB,gBACtB,QAAQ,iBAAiB,KAAK,MAAM,QAAQ,eAAe,SAAS,GAAG,IAAK,GAAG,KAAA,EAChF;GACD,CAAA,OAAmC,QAAQ,WAAW;GACtD,CAAA,OAEE,QAAQ,sBAAsB,iBAC1B,QAAQ,aACR,eAAe,OAAO,EAAE,YAAY,QAAQ,YAAY,CAAC,CAC9D;GACF,CAAC;AAEF,SAAO,IAAI,qBAAqB,2BAA2B,MAAM,IAAI,OAAO,CAAC,CAAC;;CAGhF,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,QAAQ;;CAG1D,IAAW,WAAW;AACpB,yBAAO,IAAI,KAAK,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,SAAS,GAAG,IAAK;;CAG5E,IAAW,iBAAiB;AAC1B,SAAO,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,eAAe,mBAE3D,IAAI,KAAK,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,eAAe,GAAI,IAAK,GAC1E,KAAA;;CAGN,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC;;CAG7D,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC,CAAC;;CAG9D,cAAqB,YAAyC;AAC5D,OAAK,UAAU,IAAA,OAEb,sBAAsB,iBAAiB,aAAa,eAAe,OAAO,EAAE,YAAY,CAAC,CAC1F;;;;;AChFL,IAAY,yBAAL,yBAAA,wBAAA;AACL,wBAAA,uBAAA,SAAA,MAAA;;KACD;AAED,IAAa,gBAAb,MAAa,cAAc;CAKzB,YAAmB,SAA+B;AAChD,OAAK,UACH,QAAQ,mBAAmB,uBAAuB,QAAQ,UAAU,qBAAqB,OAAO,QAAQ,QAAQ;AAClH,OAAK,mBACH,QAAQ,4BAA4BI,UAAAA,mBAChC,QAAQ,mBACRA,UAAAA,iBAAiB,OAAO,EAAE,kBAAkB,QAAQ,kBAAkB,CAAC;AAC7E,OAAK,qBACH,QAAQ,8BAA8BC,UAAAA,qBAClC,QAAQ,qBACRA,UAAAA,mBAAmB,OAAO,EAAE,oBAAoB,QAAQ,oBAAoB,CAAC;AAEnF,MAAI,KAAK,iBAAiB,QAAQ,IAAA,GAA+B,KAAK,KAAA,EACpE,MAAK,iBAAiB,QAAQ,IAAA,IAAgC,WAAW,gBAAgB;;CAI7F,cAAqB,YAAyC;AAC5D,OAAK,QAAQ,cAAc,WAAW;;CAGxC,iBAAwB,OAAe,OAAe;AACpD,OAAK,QAAQ,WAAW,UAAU,OAAO,MAAM;;;;;;;CAQjD,OAAc,+BACZ,YAIA,SACA;EACA,MAAM,iBACJ,sBAAsB,iBAClB,aACA,sBAAsB,aACpB,eAAe,OAAO,EAAE,YAAY,CAAC,GACrC,eAAe,OAAO;GACpB,MAAM,WAAW;GACjB,MAAM,WAAW;GACjB,gBAAgB,WAAW;GAC5B,CAAC;AAEV,SAAO,IAAI,cAAc,EAAE,SAAS,qBAAqB,OAAO;GAAE,YAAY;GAAgB;GAAS,CAAC,EAAE,CAAC;;CAG7G,OAAc,UAAU,OAAmB;EACzC,MAAM,MAAMC,UAAAA,IAAI,UAAU,MAAM;AAGhC,SAAO,IAAI,cAAc;GACvB,SAHc,qBAAqB,OAAO,IAAI,QAAQ;GAItD,kBAAkB,IAAI;GACtB,oBAAoB,IAAI;GACzB,CAAC;;CAGJ,MAAa,cACX,SAIA,KACA;AAMA,UAAQ,MALI,IAAIA,UAAAA,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ;;CAGxD,MAAa,sBAAsB,SAA8B,KAA+B;AAM9F,UAAQ,MALI,IAAIA,UAAAA,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,OAAO,aAAa,SAAS,IAAI,EAAE,QAAQ;;;;;;;;;ACzGjE,MAAa,uBAAuB;;;;;AAMpC,MAAa,gBAAgB;CAC3B,QAAQ;CACR,aAAa;CACb,KAAK;CACL,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,iBAAiB;CAClB;;;;;;;ACZD,SAAS,iBAAoB,KAAgB;CAC3C,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAO,KAAK,OAAA,GAAA,qBAAA,iBAAsB,MAAM,GAAG,CAAC;;;;;AAM9C,SAAgB,uBAAuB,MAAkB,SAAqB,QAAuC;AACnH,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAEhD,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAGhD,QAAO,MAAM;AACb,SAAQ,cAAc;EACpB,MAAM,KAAK,kBAAkB;EAC7B,MAAA,GAAA,qBAAA,uBAA2B,KAAK,2BAA2B,CAAC;EAC7D;AACD,QAAO;EAAE;EAAQ;EAAS;;;;;AAM5B,SAAgB,yBAAyB,KAAyB;CAEhE,MAAM,aADU,iBAAuC,IAAI,CAChC;CAC3B,MAAM,cAAA,GAAA,qBAAA,uBAAmC,WAAW,IAAI;AACxD,QAAO,WAAW,8BAA8B,YAAY,WAAW,KAAK;;;;;AAM9E,SAAgB,qBAAqB,KAA8B;AAEjE,QADgB,iBAA2C,IAAI,CAChD,OAAO"}
+{"version":3,"file":"index.cjs","names":["IdentityException","z","zUint8Array","CborStructure","TypedMap","RegisteredCwtClaimKey","z","CborStructure","TypedMap","ProtectedHeaders","UnprotectedHeaders","Cwt"],"sources":["../src/status-list-exception.ts","../src/status-list.ts","../src/cbor/status-list-cbor.ts","../src/types.ts","../src/cbor/status-list-cwt-payload.ts","../src/cbor/status-list-cwt.ts","../src/jwt-types.ts","../src/status-list-jwt.ts"],"sourcesContent":["import { IdentityException } from '@owf/identity-common'\n\n/**\n * SLException is a custom error class for Status List related exceptions.\n */\nexport class SLException extends IdentityException {\n  constructor(message: string, details?: unknown) {\n    super(message, details)\n    Object.setPrototypeOf(this, SLException.prototype)\n    this.name = 'SLException'\n  }\n}\n","import { deflate, inflate } from 'pako'\nimport { SLException } from './status-list-exception'\nimport type { BitsPerStatus } from './types'\n\n/**\n * StatusList is a class that manages a list of statuses with variable bit size.\n */\nexport class StatusList {\n  private _statusList: number[]\n  private bitsPerStatus: BitsPerStatus\n  private totalStatuses: number\n  public aggregationUri?: string\n\n  constructor(statusList: number[], bitsPerStatus: BitsPerStatus, aggregationUri?: string) {\n    if (![1, 2, 4, 8].includes(bitsPerStatus)) {\n      throw new SLException('bitsPerStatus must be 1, 2, 4, or 8')\n    }\n    for (let i = 0; i < statusList.length; i++) {\n      if (statusList[i] > 2 ** bitsPerStatus) {\n        throw new SLException(`Status value out of range at index ${i} with value ${statusList[i]}`)\n      }\n    }\n    this._statusList = statusList\n    this.bitsPerStatus = bitsPerStatus\n    this.totalStatuses = statusList.length\n    this.aggregationUri = aggregationUri\n  }\n\n  /** Get the status list. */\n  get statusList(): number[] {\n    return this._statusList\n  }\n\n  /** Get the number of bits per status. */\n  getBitsPerStatus(): BitsPerStatus {\n    return this.bitsPerStatus\n  }\n\n  /** Get the status at a specific index. */\n  getStatus(index: number): number {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    return this._statusList[index]\n  }\n\n  /** Set the status at a specific index. */\n  setStatus(index: number, value: number): void {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    this._statusList[index] = value\n  }\n\n  /** Compress the status list and return as raw bytes. */\n  compressStatusListToBytes(): Uint8Array {\n    const byteArray = this.encodeStatusListIntoByteArray()\n    return deflate(byteArray, { level: 9 })\n  }\n\n  /** Decompress a raw byte array and return a new StatusList instance. */\n  static decompressStatusListFromBytes(\n    compressed: Uint8Array,\n    bitsPerStatus: BitsPerStatus,\n    aggregationUri?: string\n  ): StatusList {\n    try {\n      const decompressed = inflate(compressed)\n      const statusList = StatusList.decodeStatusListFromByteArray(decompressed, bitsPerStatus)\n      return new StatusList(statusList, bitsPerStatus, aggregationUri)\n    } catch (err: unknown) {\n      throw new Error(`Decompression failed: ${err}`)\n    }\n  }\n\n  /** Encode the status list into a byte array. */\n  public encodeStatusListIntoByteArray(): Uint8Array {\n    const numBits = this.bitsPerStatus\n    const numBytes = Math.ceil((this.totalStatuses * numBits) / 8)\n    const byteArray = new Uint8Array(numBytes)\n    let byteIndex = 0\n    let bitIndex = 0\n    let currentByte = ''\n    for (let i = 0; i < this.totalStatuses; i++) {\n      const status = this._statusList[i]\n      currentByte = status.toString(2).padStart(numBits, '0') + currentByte\n      bitIndex += numBits\n\n      if (bitIndex >= 8 || i === this.totalStatuses - 1) {\n        if (i === this.totalStatuses - 1 && bitIndex % 8 !== 0) {\n          currentByte = currentByte.padStart(8, '0')\n        }\n        byteArray[byteIndex] = Number.parseInt(currentByte, 2)\n        currentByte = ''\n        bitIndex = 0\n        byteIndex++\n      }\n    }\n\n    return byteArray\n  }\n\n  /** Decode the byte array into a status list. */\n  private static decodeStatusListFromByteArray(byteArray: Uint8Array, bitsPerStatus: BitsPerStatus): number[] {\n    const numBits = bitsPerStatus\n    const totalStatuses = (byteArray.length * 8) / numBits\n    const statusList = new Array<number>(totalStatuses)\n    let bitIndex = 0\n    for (let i = 0; i < totalStatuses; i++) {\n      const byte = byteArray[Math.floor((i * numBits) / 8)]\n      let byteString = byte.toString(2)\n      if (byteString.length < 8) {\n        byteString = '0'.repeat(8 - byteString.length) + byteString\n      }\n      const status = byteString.slice(bitIndex, bitIndex + numBits)\n      const group = Math.floor(i / (8 / numBits))\n      const indexInGroup = i % (8 / numBits)\n      const position = group * (8 / numBits) + (8 / numBits + -1 - indexInGroup)\n      statusList[position] = Number.parseInt(status, 2)\n      bitIndex = (bitIndex + numBits) % 8\n    }\n    return statusList\n  }\n}\n","import { CborStructure, TypedMap, typedMap, zUint8Array } from '@owf/cose'\nimport { z } from 'zod'\nimport { StatusList } from '../status-list'\nimport type { BitsPerStatus } from '../types'\n\nexport const statusListCborEncodedSchema = typedMap([\n  ['bits', z.union([z.literal(1), z.literal(2), z.literal(4), z.literal(8)])],\n  ['lst', zUint8Array],\n  ['aggregation_uri', z.string().optional()],\n])\n\nexport const statusListCborDecodedSchema = z.instanceof(StatusList)\n\nexport type StatusListCborEncodedStructure = z.infer<typeof statusListCborEncodedSchema>\nexport type StatusListCborDecodedStructure = z.infer<typeof statusListCborDecodedSchema>\n\nexport type CreateStatusListCborOptions = {\n  bits: BitsPerStatus\n  list: Uint8Array | number[]\n  aggregationUri?: string\n}\n\nexport type StatusListCborWithStatusListOptions = {\n  statusList: StatusList\n}\n\nexport class StatusListCbor extends CborStructure<StatusListCborEncodedStructure, StatusListCborDecodedStructure> {\n  public statusList = this.structure\n\n  public static override get encodingSchema() {\n    return z.codec(statusListCborEncodedSchema, statusListCborDecodedSchema, {\n      encode: (statusList) => {\n        return new TypedMap([\n          ['bits', statusList.getBitsPerStatus()],\n          ['lst', statusList.compressStatusListToBytes()],\n          ['aggregation_uri', statusList.aggregationUri],\n        ]) satisfies StatusListCborEncodedStructure\n      },\n      decode: (input) => {\n        return StatusList.decompressStatusListFromBytes(\n          input.get('lst'),\n          input.get('bits'),\n          input.get('aggregation_uri')\n        )\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCborOptions | StatusListCborWithStatusListOptions) {\n    const statusList =\n      'statusList' in options\n        ? options.statusList\n        : options.list instanceof Uint8Array\n          ? StatusList.decompressStatusListFromBytes(options.list, options.bits, options.aggregationUri)\n          : new StatusList(options.list, options.bits, options.aggregationUri)\n\n    return new StatusListCbor(statusList)\n  }\n}\n","// ==================== Common Types & Constants ====================\n\n/**\n * Status Type values as defined in the spec.\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-7\n */\nexport const StatusTypes = {\n  /** The status of the Referenced Token is valid, correct or legal. */\n  VALID: 0x00,\n  /** The status of the Referenced Token is revoked, annulled, taken back, recalled or cancelled. */\n  INVALID: 0x01,\n  /** The status of the Referenced Token is temporarily invalid, hanging, debarred from privilege. */\n  SUSPENDED: 0x02,\n  /** Application-specific status (0x03). */\n  APPLICATION_SPECIFIC_3: 0x03,\n  /** Application-specific status range start (0x0C). */\n  APPLICATION_SPECIFIC_RANGE_START: 0x0c,\n  /** Application-specific status range end (0x0F). */\n  APPLICATION_SPECIFIC_RANGE_END: 0x0f,\n} as const\n\nexport type StatusType = (typeof StatusTypes)[keyof typeof StatusTypes] | number\n\n/**\n * Media types for Status List Tokens\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.7\n */\nexport const MediaTypes = {\n  /** Media type for JWT-based Status List Token */\n  STATUS_LIST_JWT: 'application/statuslist+jwt',\n  /** Media type for CWT-based Status List Token */\n  STATUS_LIST_CWT: 'application/statuslist+cwt',\n} as const\n\n/**\n * BitsPerStatus type.\n */\nexport type BitsPerStatus = 1 | 2 | 4 | 8\n\n/**\n * Reference to a status list entry.\n */\nexport interface StatusListEntry {\n  idx: number\n  uri: string\n}\n","import { CborStructure, RegisteredCwtClaimKey, TypedMap, typedMap } from '@owf/cose'\nimport z from 'zod'\nimport type { StatusList } from '../status-list'\nimport { StatusListCbor, type StatusListCborEncodedStructure } from './status-list-cbor'\n\nexport enum StatusListCwtClaimKey {\n  TimeToLive = 65534,\n  StatusList = 65533,\n}\n\nconst statusListCwtPayloadSchema = typedMap([\n  [RegisteredCwtClaimKey.Subject, z.string()],\n  [RegisteredCwtClaimKey.IssuedAt, z.number()],\n  [RegisteredCwtClaimKey.ExpirationTime, z.number().optional()],\n  [StatusListCwtClaimKey.TimeToLive, z.number().optional()],\n  [StatusListCwtClaimKey.StatusList, z.instanceof(StatusListCbor)],\n])\n\nexport type StatusListCwtPayloadEncodedStructure = z.infer<typeof statusListCwtPayloadSchema>\nexport type StatusListCwtPayloadDecodedStructure = z.infer<typeof statusListCwtPayloadSchema>\n\nexport type CreateStatusListCwtPayloadOptions = {\n  subject: string\n  statusList: StatusListCbor | StatusList\n  issuedAt?: Date\n  expirationTime?: Date\n  timeToLive?: number\n}\n\nexport class StatusListCwtPayload extends CborStructure<\n  StatusListCwtPayloadEncodedStructure,\n  StatusListCwtPayloadDecodedStructure\n> {\n  public static override get encodingSchema() {\n    return z.codec(statusListCwtPayloadSchema.in, statusListCwtPayloadSchema.out, {\n      decode: (input) => {\n        const map: StatusListCwtPayloadDecodedStructure = TypedMap.fromMap(input)\n\n        map.set(\n          StatusListCwtClaimKey.StatusList,\n          StatusListCbor.fromEncodedStructure(\n            input.get(StatusListCwtClaimKey.StatusList) as StatusListCborEncodedStructure\n          )\n        )\n\n        return map\n      },\n      encode: (output) => {\n        const map = output.toMap() as Map<unknown, unknown>\n        map.set(StatusListCwtClaimKey.StatusList, output.get(StatusListCwtClaimKey.StatusList).encodedStructure)\n        return map\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCwtPayloadOptions) {\n    const map: StatusListCwtPayloadEncodedStructure = new TypedMap([\n      [RegisteredCwtClaimKey.Subject, options.subject],\n      [RegisteredCwtClaimKey.IssuedAt, Math.floor((options.issuedAt?.getTime() ?? Date.now()) / 1000)],\n      [\n        RegisteredCwtClaimKey.ExpirationTime,\n        options.expirationTime ? Math.floor(options.expirationTime.getTime() / 1000) : undefined,\n      ],\n      [StatusListCwtClaimKey.TimeToLive, options.timeToLive],\n      [\n        StatusListCwtClaimKey.StatusList,\n        options.statusList instanceof StatusListCbor\n          ? options.statusList\n          : StatusListCbor.create({ statusList: options.statusList }),\n      ],\n    ])\n\n    return new StatusListCwtPayload(statusListCwtPayloadSchema.parse(map.toMap()))\n  }\n\n  public get subject() {\n    return this.structure.get(RegisteredCwtClaimKey.Subject)\n  }\n\n  public get issuedAt() {\n    return new Date(this.structure.get(RegisteredCwtClaimKey.IssuedAt) * 1000)\n  }\n\n  public get expirationTime() {\n    return this.structure.has(RegisteredCwtClaimKey.ExpirationTime)\n      ? // biome-ignore lint/style/noNonNullAssertion: checked with `has` in the line above\n        new Date(this.structure.get(RegisteredCwtClaimKey.ExpirationTime)! * 1000)\n      : undefined\n  }\n\n  public get timeToLive() {\n    return this.structure.get(StatusListCwtClaimKey.TimeToLive)\n  }\n\n  public get statusList() {\n    return this.structure.get(StatusListCwtClaimKey.StatusList).statusList\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.structure.set(\n      StatusListCwtClaimKey.StatusList,\n      statusList instanceof StatusListCbor ? statusList : StatusListCbor.create({ statusList })\n    )\n  }\n}\n","import type { Mac0Context } from '@owf/cose'\nimport {\n  type CoseKey,\n  Cwt,\n  type ProtectedHeaderOptions,\n  ProtectedHeaders,\n  type Sign1Context,\n  type SignatureAlgorithm,\n  type UnprotectedHeaderOptions,\n  UnprotectedHeaders,\n} from '@owf/cose'\nimport { StatusList } from '../status-list'\nimport { type BitsPerStatus, MediaTypes } from '../types'\nimport { StatusListCbor } from './status-list-cbor'\nimport { type CreateStatusListCwtPayloadOptions, StatusListCwtPayload } from './status-list-cwt-payload'\n\nexport type StatusListCwtOptions = {\n  payload: StatusListCwtPayload | CreateStatusListCwtPayloadOptions\n  protectedHeaders?: ProtectedHeaders | ProtectedHeaderOptions['protectedHeaders']\n  unprotectedHeaders?: UnprotectedHeaders | UnprotectedHeaderOptions['unprotectedHeaders']\n}\n\nexport enum StatusListCwtHeaderKey {\n  Typ = 16,\n}\n\nexport class StatusListCwt {\n  public payload: StatusListCwtPayload\n  public protectedHeaders?: ProtectedHeaders\n  public unprotectedHeaders?: UnprotectedHeaders\n\n  public constructor(options: StatusListCwtOptions) {\n    this.payload =\n      options.payload instanceof StatusListCwtPayload ? options.payload : StatusListCwtPayload.create(options.payload)\n    this.protectedHeaders =\n      options.protectedHeaders instanceof ProtectedHeaders\n        ? options.protectedHeaders\n        : ProtectedHeaders.create({ protectedHeaders: options.protectedHeaders })\n    this.unprotectedHeaders =\n      options.unprotectedHeaders instanceof UnprotectedHeaders\n        ? options.unprotectedHeaders\n        : UnprotectedHeaders.create({ unprotectedHeaders: options.unprotectedHeaders })\n\n    if (this.protectedHeaders.headers.get(StatusListCwtHeaderKey.Typ) === undefined) {\n      this.protectedHeaders.headers.set(StatusListCwtHeaderKey.Typ, MediaTypes.STATUS_LIST_CWT)\n    }\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.payload.setStatusList(statusList)\n  }\n\n  public updateStatusList(index: number, value: number) {\n    this.payload.statusList.setStatus(index, value)\n  }\n\n  /**\n   *\n   * Create a minimal status list cwt. If you want to configure more options, use the constructor method\n   *\n   */\n  public static createFromStatusListAndSubject(\n    statusList:\n      | StatusList\n      | StatusListCbor\n      | { statusList: number[]; bitsPerStatus: BitsPerStatus; aggregationUri?: string },\n    subject: string\n  ) {\n    const cborStatusList =\n      statusList instanceof StatusListCbor\n        ? statusList\n        : statusList instanceof StatusList\n          ? StatusListCbor.create({ statusList })\n          : StatusListCbor.create({\n              bits: statusList.bitsPerStatus,\n              list: statusList.statusList,\n              aggregationUri: statusList.aggregationUri,\n            })\n\n    return new StatusListCwt({ payload: StatusListCwtPayload.create({ statusList: cborStatusList, subject }) })\n  }\n\n  public static fromToken(token: Uint8Array) {\n    const cwt = Cwt.fromToken(token)\n    const payload = StatusListCwtPayload.decode(cwt.payload)\n\n    return new StatusListCwt({\n      payload,\n      protectedHeaders: cwt.protectedHeaders,\n      unprotectedHeaders: cwt.unprotectedHeaders,\n    })\n  }\n\n  public async signAndEncode(\n    options: {\n      signingKey: CoseKey\n      algorithm?: SignatureAlgorithm\n    },\n    ctx: Pick<Sign1Context, 'sign'>\n  ) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asSign1.sign(options, ctx)).encode()\n  }\n\n  public async authenticateAndEncode(options: { key: Uint8Array }, ctx: Pick<Mac0Context, 'mac'>) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asMac0.authenticate(options, ctx)).encode()\n  }\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport type { BitsPerStatus, StatusListEntry } from './types'\n\n// ==================== JWT Types & Constants ====================\n\n/**\n * JWT type header value for Status List Token\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-5.1\n */\nexport const JWT_STATUS_LIST_TYPE = 'statuslist+jwt'\n\n/**\n * JWT claim names for Status List\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.1\n */\nexport const JWTClaimNames = {\n  STATUS: 'status',\n  STATUS_LIST: 'status_list',\n  TTL: 'ttl',\n  IDX: 'idx',\n  URI: 'uri',\n  BITS: 'bits',\n  LST: 'lst',\n  AGGREGATION_URI: 'aggregation_uri',\n} as const\n\n/**\n * Payload for a JWT with a status reference.\n */\nexport interface JWTwithStatusListPayload extends JwtPayload {\n  status: {\n    status_list: StatusListEntry\n  }\n}\n\n/**\n * Payload for a Status List JWT.\n */\nexport interface StatusListJWTPayload extends JwtPayload {\n  ttl?: number\n  status_list: {\n    bits: BitsPerStatus\n    lst: string\n  }\n}\n\n/**\n * Header parameters for a JWT Status List Token.\n */\nexport type StatusListJWTHeaderParameters = {\n  alg: string\n  typ: typeof JWT_STATUS_LIST_TYPE\n  [key: string]: unknown\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport { base64UrlToUint8Array, base64urlDecode, uint8ArrayToBase64Url } from '@owf/identity-common'\nimport type { JWTwithStatusListPayload, StatusListJWTHeaderParameters, StatusListJWTPayload } from './jwt-types'\nimport { JWT_STATUS_LIST_TYPE } from './jwt-types'\nimport { StatusList } from './status-list'\nimport { SLException } from './status-list-exception'\nimport type { StatusListEntry } from './types'\n\n/**\n * Decode a JWT and return the payload.\n * @param jwt JWT token in compact JWS serialization.\n */\nfunction decodeJwtPayload<T>(jwt: string): T {\n  const parts = jwt.split('.')\n  return JSON.parse(base64urlDecode(parts[1]))\n}\n\n/**\n * Adds the status list to the payload and header of a JWT.\n */\nexport function createHeaderAndPayload(list: StatusList, payload: JwtPayload, header: StatusListJWTHeaderParameters) {\n  if (!payload.sub) {\n    throw new SLException('sub field is required')\n  }\n  if (!payload.iat) {\n    throw new SLException('iat field is required')\n  }\n\n  header.typ = JWT_STATUS_LIST_TYPE\n  payload.status_list = {\n    bits: list.getBitsPerStatus(),\n    lst: uint8ArrayToBase64Url(list.compressStatusListToBytes()),\n  }\n  return { header, payload }\n}\n\n/**\n * Get the status list from a JWT, but do not verify the signature.\n */\nexport function getListFromStatusListJWT(jwt: string): StatusList {\n  const payload = decodeJwtPayload<StatusListJWTPayload>(jwt)\n  const statusList = payload.status_list\n  const compressed = base64UrlToUint8Array(statusList.lst)\n  return StatusList.decompressStatusListFromBytes(compressed, statusList.bits)\n}\n\n/**\n * Get the status list entry from a JWT, but do not verify the signature.\n */\nexport function getStatusListFromJWT(jwt: string): StatusListEntry {\n  const payload = decodeJwtPayload<JWTwithStatusListPayload>(jwt)\n  return payload.status.status_list\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,IAAa,cAAb,MAAa,oBAAoBA,qBAAAA,kBAAkB;CACjD,YAAY,SAAiB,SAAmB;AAC9C,QAAM,SAAS,QAAQ;AACvB,SAAO,eAAe,MAAM,YAAY,UAAU;AAClD,OAAK,OAAO;;;;;;;;ACFhB,IAAa,aAAb,MAAa,WAAW;CAMtB,YAAY,YAAsB,eAA8B,gBAAyB;AACvF,MAAI,CAAC;GAAC;GAAG;GAAG;GAAG;GAAE,CAAC,SAAS,cAAc,CACvC,OAAM,IAAI,YAAY,sCAAsC;AAE9D,OAAK,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,IACrC,KAAI,WAAW,KAAK,KAAK,cACvB,OAAM,IAAI,YAAY,sCAAsC,EAAE,cAAc,WAAW,KAAK;AAGhG,OAAK,cAAc;AACnB,OAAK,gBAAgB;AACrB,OAAK,gBAAgB,WAAW;AAChC,OAAK,iBAAiB;;;CAIxB,IAAI,aAAuB;AACzB,SAAO,KAAK;;;CAId,mBAAkC;AAChC,SAAO,KAAK;;;CAId,UAAU,OAAuB;AAC/B,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,SAAO,KAAK,YAAY;;;CAI1B,UAAU,OAAe,OAAqB;AAC5C,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,OAAK,YAAY,SAAS;;;CAI5B,4BAAwC;AAEtC,UAAA,GAAA,KAAA,SADkB,KAAK,+BAA+B,EAC5B,EAAE,OAAO,GAAG,CAAC;;;CAIzC,OAAO,8BACL,YACA,eACA,gBACY;AACZ,MAAI;GACF,MAAM,gBAAA,GAAA,KAAA,SAAuB,WAAW;AAExC,UAAO,IAAI,WADQ,WAAW,8BAA8B,cAAc,cAAc,EACtD,eAAe,eAAe;WACzD,KAAc;AACrB,SAAM,IAAI,MAAM,yBAAyB,MAAM;;;;CAKnD,gCAAmD;EACjD,MAAM,UAAU,KAAK;EACrB,MAAM,WAAW,KAAK,KAAM,KAAK,gBAAgB,UAAW,EAAE;EAC9D,MAAM,YAAY,IAAI,WAAW,SAAS;EAC1C,IAAI,YAAY;EAChB,IAAI,WAAW;EACf,IAAI,cAAc;AAClB,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,eAAe,KAAK;AAE3C,iBADe,KAAK,YAAY,GACX,SAAS,EAAE,CAAC,SAAS,SAAS,IAAI,GAAG;AAC1D,eAAY;AAEZ,OAAI,YAAY,KAAK,MAAM,KAAK,gBAAgB,GAAG;AACjD,QAAI,MAAM,KAAK,gBAAgB,KAAK,WAAW,MAAM,EACnD,eAAc,YAAY,SAAS,GAAG,IAAI;AAE5C,cAAU,aAAa,OAAO,SAAS,aAAa,EAAE;AACtD,kBAAc;AACd,eAAW;AACX;;;AAIJ,SAAO;;;CAIT,OAAe,8BAA8B,WAAuB,eAAwC;EAC1G,MAAM,UAAU;EAChB,MAAM,gBAAiB,UAAU,SAAS,IAAK;EAC/C,MAAM,aAAa,IAAI,MAAc,cAAc;EACnD,IAAI,WAAW;AACf,OAAK,IAAI,IAAI,GAAG,IAAI,eAAe,KAAK;GAEtC,IAAI,aADS,UAAU,KAAK,MAAO,IAAI,UAAW,EAAE,EAC9B,SAAS,EAAE;AACjC,OAAI,WAAW,SAAS,EACtB,cAAa,IAAI,OAAO,IAAI,WAAW,OAAO,GAAG;GAEnD,MAAM,SAAS,WAAW,MAAM,UAAU,WAAW,QAAQ;GAC7D,MAAM,QAAQ,KAAK,MAAM,KAAK,IAAI,SAAS;GAC3C,MAAM,eAAe,KAAK,IAAI;GAC9B,MAAM,WAAW,SAAS,IAAI,YAAY,IAAI,UAAU,KAAK;AAC7D,cAAW,YAAY,OAAO,SAAS,QAAQ,EAAE;AACjD,eAAY,WAAW,WAAW;;AAEpC,SAAO;;;;;ACpHX,MAAa,+BAAA,GAAA,UAAA,UAAuC;CAClD,CAAC,QAAQC,IAAAA,EAAE,MAAM;EAACA,IAAAA,EAAE,QAAQ,EAAE;EAAEA,IAAAA,EAAE,QAAQ,EAAE;EAAEA,IAAAA,EAAE,QAAQ,EAAE;EAAEA,IAAAA,EAAE,QAAQ,EAAE;EAAC,CAAC,CAAC;CAC3E,CAAC,OAAOC,UAAAA,YAAY;CACpB,CAAC,mBAAmBD,IAAAA,EAAE,QAAQ,CAAC,UAAU,CAAC;CAC3C,CAAC;AAEF,MAAa,8BAA8BA,IAAAA,EAAE,WAAW,WAAW;AAenE,IAAa,iBAAb,MAAa,uBAAuBE,UAAAA,cAA8E;;;oBAC5F,KAAK;;CAEzB,WAA2B,iBAAiB;AAC1C,SAAOF,IAAAA,EAAE,MAAM,6BAA6B,6BAA6B;GACvE,SAAS,eAAe;AACtB,WAAO,IAAIG,UAAAA,SAAS;KAClB,CAAC,QAAQ,WAAW,kBAAkB,CAAC;KACvC,CAAC,OAAO,WAAW,2BAA2B,CAAC;KAC/C,CAAC,mBAAmB,WAAW,eAAe;KAC/C,CAAC;;GAEJ,SAAS,UAAU;AACjB,WAAO,WAAW,8BAChB,MAAM,IAAI,MAAM,EAChB,MAAM,IAAI,OAAO,EACjB,MAAM,IAAI,kBAAkB,CAC7B;;GAEJ,CAAC;;CAGJ,OAAc,OAAO,SAA4E;AAQ/F,SAAO,IAAI,eANT,gBAAgB,UACZ,QAAQ,aACR,QAAQ,gBAAgB,aACtB,WAAW,8BAA8B,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,GAC5F,IAAI,WAAW,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,CAErC;;;;;;;;;AClDzC,MAAa,cAAc;CAEzB,OAAO;CAEP,SAAS;CAET,WAAW;CAEX,wBAAwB;CAExB,kCAAkC;CAElC,gCAAgC;CACjC;;;;;AAQD,MAAa,aAAa;CAExB,iBAAiB;CAEjB,iBAAiB;CAClB;;;AC3BD,IAAY,wBAAL,yBAAA,uBAAA;AACL,uBAAA,sBAAA,gBAAA,SAAA;AACA,uBAAA,sBAAA,gBAAA,SAAA;;KACD;AAED,MAAM,8BAAA,GAAA,UAAA,UAAsC;CAC1C,CAACC,UAAAA,sBAAsB,SAASC,IAAAA,QAAE,QAAQ,CAAC;CAC3C,CAACD,UAAAA,sBAAsB,UAAUC,IAAAA,QAAE,QAAQ,CAAC;CAC5C,CAACD,UAAAA,sBAAsB,gBAAgBC,IAAAA,QAAE,QAAQ,CAAC,UAAU,CAAC;CAC7D,CAAA,OAAmCA,IAAAA,QAAE,QAAQ,CAAC,UAAU,CAAC;CACzD,CAAA,OAAmCA,IAAAA,QAAE,WAAW,eAAe,CAAC;CACjE,CAAC;AAaF,IAAa,uBAAb,MAAa,6BAA6BC,UAAAA,cAGxC;CACA,WAA2B,iBAAiB;AAC1C,SAAOD,IAAAA,QAAE,MAAM,2BAA2B,IAAI,2BAA2B,KAAK;GAC5E,SAAS,UAAU;IACjB,MAAM,MAA4CE,UAAAA,SAAS,QAAQ,MAAM;AAEzE,QAAI,IAAA,OAEF,eAAe,qBACb,MAAM,IAAA,MAAqC,CAC5C,CACF;AAED,WAAO;;GAET,SAAS,WAAW;IAClB,MAAM,MAAM,OAAO,OAAO;AAC1B,QAAI,IAAA,OAAsC,OAAO,IAAA,MAAqC,CAAC,iBAAiB;AACxG,WAAO;;GAEV,CAAC;;CAGJ,OAAc,OAAO,SAA4C;EAC/D,MAAM,MAA4C,IAAIA,UAAAA,SAAS;GAC7D,CAACH,UAAAA,sBAAsB,SAAS,QAAQ,QAAQ;GAChD,CAACA,UAAAA,sBAAsB,UAAU,KAAK,OAAO,QAAQ,UAAU,SAAS,IAAI,KAAK,KAAK,IAAI,IAAK,CAAC;GAChG,CACEA,UAAAA,sBAAsB,gBACtB,QAAQ,iBAAiB,KAAK,MAAM,QAAQ,eAAe,SAAS,GAAG,IAAK,GAAG,KAAA,EAChF;GACD,CAAA,OAAmC,QAAQ,WAAW;GACtD,CAAA,OAEE,QAAQ,sBAAsB,iBAC1B,QAAQ,aACR,eAAe,OAAO,EAAE,YAAY,QAAQ,YAAY,CAAC,CAC9D;GACF,CAAC;AAEF,SAAO,IAAI,qBAAqB,2BAA2B,MAAM,IAAI,OAAO,CAAC,CAAC;;CAGhF,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,QAAQ;;CAG1D,IAAW,WAAW;AACpB,yBAAO,IAAI,KAAK,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,SAAS,GAAG,IAAK;;CAG5E,IAAW,iBAAiB;AAC1B,SAAO,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,eAAe,mBAE3D,IAAI,KAAK,KAAK,UAAU,IAAIA,UAAAA,sBAAsB,eAAe,GAAI,IAAK,GAC1E,KAAA;;CAGN,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC;;CAG7D,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC,CAAC;;CAG9D,cAAqB,YAAyC;AAC5D,OAAK,UAAU,IAAA,OAEb,sBAAsB,iBAAiB,aAAa,eAAe,OAAO,EAAE,YAAY,CAAC,CAC1F;;;;;AChFL,IAAY,yBAAL,yBAAA,wBAAA;AACL,wBAAA,uBAAA,SAAA,MAAA;;KACD;AAED,IAAa,gBAAb,MAAa,cAAc;CAKzB,YAAmB,SAA+B;AAChD,OAAK,UACH,QAAQ,mBAAmB,uBAAuB,QAAQ,UAAU,qBAAqB,OAAO,QAAQ,QAAQ;AAClH,OAAK,mBACH,QAAQ,4BAA4BI,UAAAA,mBAChC,QAAQ,mBACRA,UAAAA,iBAAiB,OAAO,EAAE,kBAAkB,QAAQ,kBAAkB,CAAC;AAC7E,OAAK,qBACH,QAAQ,8BAA8BC,UAAAA,qBAClC,QAAQ,qBACRA,UAAAA,mBAAmB,OAAO,EAAE,oBAAoB,QAAQ,oBAAoB,CAAC;AAEnF,MAAI,KAAK,iBAAiB,QAAQ,IAAA,GAA+B,KAAK,KAAA,EACpE,MAAK,iBAAiB,QAAQ,IAAA,IAAgC,WAAW,gBAAgB;;CAI7F,cAAqB,YAAyC;AAC5D,OAAK,QAAQ,cAAc,WAAW;;CAGxC,iBAAwB,OAAe,OAAe;AACpD,OAAK,QAAQ,WAAW,UAAU,OAAO,MAAM;;;;;;;CAQjD,OAAc,+BACZ,YAIA,SACA;EACA,MAAM,iBACJ,sBAAsB,iBAClB,aACA,sBAAsB,aACpB,eAAe,OAAO,EAAE,YAAY,CAAC,GACrC,eAAe,OAAO;GACpB,MAAM,WAAW;GACjB,MAAM,WAAW;GACjB,gBAAgB,WAAW;GAC5B,CAAC;AAEV,SAAO,IAAI,cAAc,EAAE,SAAS,qBAAqB,OAAO;GAAE,YAAY;GAAgB;GAAS,CAAC,EAAE,CAAC;;CAG7G,OAAc,UAAU,OAAmB;EACzC,MAAM,MAAMC,UAAAA,IAAI,UAAU,MAAM;AAGhC,SAAO,IAAI,cAAc;GACvB,SAHc,qBAAqB,OAAO,IAAI,QAAQ;GAItD,kBAAkB,IAAI;GACtB,oBAAoB,IAAI;GACzB,CAAC;;CAGJ,MAAa,cACX,SAIA,KACA;AAMA,UAAQ,MALI,IAAIA,UAAAA,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ;;CAGxD,MAAa,sBAAsB,SAA8B,KAA+B;AAM9F,UAAQ,MALI,IAAIA,UAAAA,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,OAAO,aAAa,SAAS,IAAI,EAAE,QAAQ;;;;;;;;;ACzGjE,MAAa,uBAAuB;;;;;AAMpC,MAAa,gBAAgB;CAC3B,QAAQ;CACR,aAAa;CACb,KAAK;CACL,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,iBAAiB;CAClB;;;;;;;ACZD,SAAS,iBAAoB,KAAgB;CAC3C,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAO,KAAK,OAAA,GAAA,qBAAA,iBAAsB,MAAM,GAAG,CAAC;;;;;AAM9C,SAAgB,uBAAuB,MAAkB,SAAqB,QAAuC;AACnH,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAEhD,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAGhD,QAAO,MAAM;AACb,SAAQ,cAAc;EACpB,MAAM,KAAK,kBAAkB;EAC7B,MAAA,GAAA,qBAAA,uBAA2B,KAAK,2BAA2B,CAAC;EAC7D;AACD,QAAO;EAAE;EAAQ;EAAS;;;;;AAM5B,SAAgB,yBAAyB,KAAyB;CAEhE,MAAM,aADU,iBAAuC,IAAI,CAChC;CAC3B,MAAM,cAAA,GAAA,qBAAA,uBAAmC,WAAW,IAAI;AACxD,QAAO,WAAW,8BAA8B,YAAY,WAAW,KAAK;;;;;AAM9E,SAAgB,qBAAqB,KAA8B;AAEjE,QADgB,iBAA2C,IAAI,CAChD,OAAO"}

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { CborStructure, CoseKey, CoseKey as CoseKey$1, Mac0Context, Mac0Context as Mac0Context$1, MacAlgorithm, ProtectedHeaderOptions, ProtectedHeaders, RegisteredCwtClaimKey, Sign1Context, Sign1Context as Sign1Context$1, SignatureAlgorithm, SignatureAlgorithm as SignatureAlgorithm$1, TypedMap, UnprotectedHeaderOptions, UnprotectedHeaders } from "@owf/cose";
+import { CborStructure, CoseKey, Mac0Context, ProtectedHeaderOptions, ProtectedHeaders, RegisteredCwtClaimKey, Sign1Context, SignatureAlgorithm, TypedMap, UnprotectedHeaderOptions, UnprotectedHeaders } from "@owf/cose";
 import z$1, { z } from "zod";
 import { IdentityException, JwtPayload } from "@owf/identity-common";
 
@@ -177,12 +177,12 @@ declare class StatusListCwt {
   }, subject: string): StatusListCwt;
   static fromToken(token: Uint8Array): StatusListCwt;
   signAndEncode(options: {
-    signingKey: CoseKey$1;
-    algorithm?: SignatureAlgorithm$1;
-  }, ctx: Pick<Sign1Context$1, 'sign'>): Promise<Uint8Array<ArrayBufferLike>>;
+    signingKey: CoseKey;
+    algorithm?: SignatureAlgorithm;
+  }, ctx: Pick<Sign1Context, 'sign'>): Promise<Uint8Array<ArrayBufferLike>>;
   authenticateAndEncode(options: {
     key: Uint8Array;
-  }, ctx: Pick<Mac0Context$1, 'mac'>): Promise<Uint8Array<ArrayBufferLike>>;
+  }, ctx: Pick<Mac0Context, 'mac'>): Promise<Uint8Array<ArrayBufferLike>>;
 }
 //#endregion
 //#region src/jwt-types.d.ts
@@ -257,5 +257,5 @@ declare function getListFromStatusListJWT(jwt: string): StatusList;
  */
 declare function getStatusListFromJWT(jwt: string): StatusListEntry;
 //#endregion
-export { type BitsPerStatus, CoseKey, type CreateStatusListCborOptions, type CreateStatusListCwtPayloadOptions, JWTClaimNames, JWT_STATUS_LIST_TYPE, type JWTwithStatusListPayload, Mac0Context, MacAlgorithm, MediaTypes, SLException, Sign1Context, SignatureAlgorithm, StatusList, StatusListCbor, type StatusListCborWithStatusListOptions, StatusListCwt, StatusListCwtClaimKey, StatusListCwtHeaderKey, type StatusListCwtOptions, StatusListCwtPayload, type StatusListEntry, type StatusListJWTHeaderParameters, type StatusListJWTPayload, type StatusType, StatusTypes, createHeaderAndPayload, getListFromStatusListJWT, getStatusListFromJWT };
+export { type BitsPerStatus, type CreateStatusListCborOptions, type CreateStatusListCwtPayloadOptions, JWTClaimNames, JWT_STATUS_LIST_TYPE, type JWTwithStatusListPayload, MediaTypes, SLException, StatusList, StatusListCbor, type StatusListCborWithStatusListOptions, StatusListCwt, StatusListCwtClaimKey, StatusListCwtHeaderKey, type StatusListCwtOptions, StatusListCwtPayload, type StatusListEntry, type StatusListJWTHeaderParameters, type StatusListJWTPayload, type StatusType, StatusTypes, createHeaderAndPayload, getListFromStatusListJWT, getStatusListFromJWT };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { CborStructure, CoseKey, CoseKey as CoseKey$1, Mac0Context, Mac0Context as Mac0Context$1, MacAlgorithm, ProtectedHeaderOptions, ProtectedHeaders, RegisteredCwtClaimKey, Sign1Context, Sign1Context as Sign1Context$1, SignatureAlgorithm, SignatureAlgorithm as SignatureAlgorithm$1, TypedMap, UnprotectedHeaderOptions, UnprotectedHeaders } from "@owf/cose";
+import { CborStructure, CoseKey, Mac0Context, ProtectedHeaderOptions, ProtectedHeaders, RegisteredCwtClaimKey, Sign1Context, SignatureAlgorithm, TypedMap, UnprotectedHeaderOptions, UnprotectedHeaders } from "@owf/cose";
 import z$1, { z } from "zod";
 import { IdentityException, JwtPayload } from "@owf/identity-common";
 
@@ -177,12 +177,12 @@ declare class StatusListCwt {
   }, subject: string): StatusListCwt;
   static fromToken(token: Uint8Array): StatusListCwt;
   signAndEncode(options: {
-    signingKey: CoseKey$1;
-    algorithm?: SignatureAlgorithm$1;
-  }, ctx: Pick<Sign1Context$1, 'sign'>): Promise<Uint8Array<ArrayBufferLike>>;
+    signingKey: CoseKey;
+    algorithm?: SignatureAlgorithm;
+  }, ctx: Pick<Sign1Context, 'sign'>): Promise<Uint8Array<ArrayBufferLike>>;
   authenticateAndEncode(options: {
     key: Uint8Array;
-  }, ctx: Pick<Mac0Context$1, 'mac'>): Promise<Uint8Array<ArrayBufferLike>>;
+  }, ctx: Pick<Mac0Context, 'mac'>): Promise<Uint8Array<ArrayBufferLike>>;
 }
 //#endregion
 //#region src/jwt-types.d.ts
@@ -257,5 +257,5 @@ declare function getListFromStatusListJWT(jwt: string): StatusList;
  */
 declare function getStatusListFromJWT(jwt: string): StatusListEntry;
 //#endregion
-export { type BitsPerStatus, CoseKey, type CreateStatusListCborOptions, type CreateStatusListCwtPayloadOptions, JWTClaimNames, JWT_STATUS_LIST_TYPE, type JWTwithStatusListPayload, Mac0Context, MacAlgorithm, MediaTypes, SLException, Sign1Context, SignatureAlgorithm, StatusList, StatusListCbor, type StatusListCborWithStatusListOptions, StatusListCwt, StatusListCwtClaimKey, StatusListCwtHeaderKey, type StatusListCwtOptions, StatusListCwtPayload, type StatusListEntry, type StatusListJWTHeaderParameters, type StatusListJWTPayload, type StatusType, StatusTypes, createHeaderAndPayload, getListFromStatusListJWT, getStatusListFromJWT };
+export { type BitsPerStatus, type CreateStatusListCborOptions, type CreateStatusListCwtPayloadOptions, JWTClaimNames, JWT_STATUS_LIST_TYPE, type JWTwithStatusListPayload, MediaTypes, SLException, StatusList, StatusListCbor, type StatusListCborWithStatusListOptions, StatusListCwt, StatusListCwtClaimKey, StatusListCwtHeaderKey, type StatusListCwtOptions, StatusListCwtPayload, type StatusListEntry, type StatusListJWTHeaderParameters, type StatusListJWTPayload, type StatusType, StatusTypes, createHeaderAndPayload, getListFromStatusListJWT, getStatusListFromJWT };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { CborStructure, CoseKey, Cwt, Mac0Context, MacAlgorithm, ProtectedHeaders, RegisteredCwtClaimKey, Sign1Context, SignatureAlgorithm, TypedMap, UnprotectedHeaders, typedMap, zUint8Array } from "@owf/cose";
+import { CborStructure, Cwt, ProtectedHeaders, RegisteredCwtClaimKey, TypedMap, UnprotectedHeaders, typedMap, zUint8Array } from "@owf/cose";
 import z$1, { z } from "zod";
 import { deflate, inflate } from "pako";
 import { IdentityException, base64UrlToUint8Array, base64urlDecode, uint8ArrayToBase64Url } from "@owf/identity-common";
@@ -339,6 +339,6 @@ function getStatusListFromJWT(jwt) {
 	return decodeJwtPayload(jwt).status.status_list;
 }
 //#endregion
-export { CoseKey, JWTClaimNames, JWT_STATUS_LIST_TYPE, Mac0Context, MacAlgorithm, MediaTypes, SLException, Sign1Context, SignatureAlgorithm, StatusList, StatusListCbor, StatusListCwt, StatusListCwtClaimKey, StatusListCwtHeaderKey, StatusListCwtPayload, StatusTypes, createHeaderAndPayload, getListFromStatusListJWT, getStatusListFromJWT };
+export { JWTClaimNames, JWT_STATUS_LIST_TYPE, MediaTypes, SLException, StatusList, StatusListCbor, StatusListCwt, StatusListCwtClaimKey, StatusListCwtHeaderKey, StatusListCwtPayload, StatusTypes, createHeaderAndPayload, getListFromStatusListJWT, getStatusListFromJWT };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["z"],"sources":["../src/status-list-exception.ts","../src/status-list.ts","../src/cbor/status-list-cbor.ts","../src/types.ts","../src/cbor/status-list-cwt-payload.ts","../src/cbor/status-list-cwt.ts","../src/jwt-types.ts","../src/status-list-jwt.ts"],"sourcesContent":["import { IdentityException } from '@owf/identity-common'\n\n/**\n * SLException is a custom error class for Status List related exceptions.\n */\nexport class SLException extends IdentityException {\n  constructor(message: string, details?: unknown) {\n    super(message, details)\n    Object.setPrototypeOf(this, SLException.prototype)\n    this.name = 'SLException'\n  }\n}\n","import { deflate, inflate } from 'pako'\nimport { SLException } from './status-list-exception'\nimport type { BitsPerStatus } from './types'\n\n/**\n * StatusList is a class that manages a list of statuses with variable bit size.\n */\nexport class StatusList {\n  private _statusList: number[]\n  private bitsPerStatus: BitsPerStatus\n  private totalStatuses: number\n  public aggregationUri?: string\n\n  constructor(statusList: number[], bitsPerStatus: BitsPerStatus, aggregationUri?: string) {\n    if (![1, 2, 4, 8].includes(bitsPerStatus)) {\n      throw new SLException('bitsPerStatus must be 1, 2, 4, or 8')\n    }\n    for (let i = 0; i < statusList.length; i++) {\n      if (statusList[i] > 2 ** bitsPerStatus) {\n        throw new SLException(`Status value out of range at index ${i} with value ${statusList[i]}`)\n      }\n    }\n    this._statusList = statusList\n    this.bitsPerStatus = bitsPerStatus\n    this.totalStatuses = statusList.length\n    this.aggregationUri = aggregationUri\n  }\n\n  /** Get the status list. */\n  get statusList(): number[] {\n    return this._statusList\n  }\n\n  /** Get the number of bits per status. */\n  getBitsPerStatus(): BitsPerStatus {\n    return this.bitsPerStatus\n  }\n\n  /** Get the status at a specific index. */\n  getStatus(index: number): number {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    return this._statusList[index]\n  }\n\n  /** Set the status at a specific index. */\n  setStatus(index: number, value: number): void {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    this._statusList[index] = value\n  }\n\n  /** Compress the status list and return as raw bytes. */\n  compressStatusListToBytes(): Uint8Array {\n    const byteArray = this.encodeStatusListIntoByteArray()\n    return deflate(byteArray, { level: 9 })\n  }\n\n  /** Decompress a raw byte array and return a new StatusList instance. */\n  static decompressStatusListFromBytes(\n    compressed: Uint8Array,\n    bitsPerStatus: BitsPerStatus,\n    aggregationUri?: string\n  ): StatusList {\n    try {\n      const decompressed = inflate(compressed)\n      const statusList = StatusList.decodeStatusListFromByteArray(decompressed, bitsPerStatus)\n      return new StatusList(statusList, bitsPerStatus, aggregationUri)\n    } catch (err: unknown) {\n      throw new Error(`Decompression failed: ${err}`)\n    }\n  }\n\n  /** Encode the status list into a byte array. */\n  public encodeStatusListIntoByteArray(): Uint8Array {\n    const numBits = this.bitsPerStatus\n    const numBytes = Math.ceil((this.totalStatuses * numBits) / 8)\n    const byteArray = new Uint8Array(numBytes)\n    let byteIndex = 0\n    let bitIndex = 0\n    let currentByte = ''\n    for (let i = 0; i < this.totalStatuses; i++) {\n      const status = this._statusList[i]\n      currentByte = status.toString(2).padStart(numBits, '0') + currentByte\n      bitIndex += numBits\n\n      if (bitIndex >= 8 || i === this.totalStatuses - 1) {\n        if (i === this.totalStatuses - 1 && bitIndex % 8 !== 0) {\n          currentByte = currentByte.padStart(8, '0')\n        }\n        byteArray[byteIndex] = Number.parseInt(currentByte, 2)\n        currentByte = ''\n        bitIndex = 0\n        byteIndex++\n      }\n    }\n\n    return byteArray\n  }\n\n  /** Decode the byte array into a status list. */\n  private static decodeStatusListFromByteArray(byteArray: Uint8Array, bitsPerStatus: BitsPerStatus): number[] {\n    const numBits = bitsPerStatus\n    const totalStatuses = (byteArray.length * 8) / numBits\n    const statusList = new Array<number>(totalStatuses)\n    let bitIndex = 0\n    for (let i = 0; i < totalStatuses; i++) {\n      const byte = byteArray[Math.floor((i * numBits) / 8)]\n      let byteString = byte.toString(2)\n      if (byteString.length < 8) {\n        byteString = '0'.repeat(8 - byteString.length) + byteString\n      }\n      const status = byteString.slice(bitIndex, bitIndex + numBits)\n      const group = Math.floor(i / (8 / numBits))\n      const indexInGroup = i % (8 / numBits)\n      const position = group * (8 / numBits) + (8 / numBits + -1 - indexInGroup)\n      statusList[position] = Number.parseInt(status, 2)\n      bitIndex = (bitIndex + numBits) % 8\n    }\n    return statusList\n  }\n}\n","import { CborStructure, TypedMap, typedMap, zUint8Array } from '@owf/cose'\nimport { z } from 'zod'\nimport { StatusList } from '../status-list'\nimport type { BitsPerStatus } from '../types'\n\nexport const statusListCborEncodedSchema = typedMap([\n  ['bits', z.union([z.literal(1), z.literal(2), z.literal(4), z.literal(8)])],\n  ['lst', zUint8Array],\n  ['aggregation_uri', z.string().optional()],\n])\n\nexport const statusListCborDecodedSchema = z.instanceof(StatusList)\n\nexport type StatusListCborEncodedStructure = z.infer<typeof statusListCborEncodedSchema>\nexport type StatusListCborDecodedStructure = z.infer<typeof statusListCborDecodedSchema>\n\nexport type CreateStatusListCborOptions = {\n  bits: BitsPerStatus\n  list: Uint8Array | number[]\n  aggregationUri?: string\n}\n\nexport type StatusListCborWithStatusListOptions = {\n  statusList: StatusList\n}\n\nexport class StatusListCbor extends CborStructure<StatusListCborEncodedStructure, StatusListCborDecodedStructure> {\n  public statusList = this.structure\n\n  public static override get encodingSchema() {\n    return z.codec(statusListCborEncodedSchema, statusListCborDecodedSchema, {\n      encode: (statusList) => {\n        return new TypedMap([\n          ['bits', statusList.getBitsPerStatus()],\n          ['lst', statusList.compressStatusListToBytes()],\n          ['aggregation_uri', statusList.aggregationUri],\n        ]) satisfies StatusListCborEncodedStructure\n      },\n      decode: (input) => {\n        return StatusList.decompressStatusListFromBytes(\n          input.get('lst'),\n          input.get('bits'),\n          input.get('aggregation_uri')\n        )\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCborOptions | StatusListCborWithStatusListOptions) {\n    const statusList =\n      'statusList' in options\n        ? options.statusList\n        : options.list instanceof Uint8Array\n          ? StatusList.decompressStatusListFromBytes(options.list, options.bits, options.aggregationUri)\n          : new StatusList(options.list, options.bits, options.aggregationUri)\n\n    return new StatusListCbor(statusList)\n  }\n}\n","// ==================== Common Types & Constants ====================\n\n/**\n * Status Type values as defined in the spec.\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-7\n */\nexport const StatusTypes = {\n  /** The status of the Referenced Token is valid, correct or legal. */\n  VALID: 0x00,\n  /** The status of the Referenced Token is revoked, annulled, taken back, recalled or cancelled. */\n  INVALID: 0x01,\n  /** The status of the Referenced Token is temporarily invalid, hanging, debarred from privilege. */\n  SUSPENDED: 0x02,\n  /** Application-specific status (0x03). */\n  APPLICATION_SPECIFIC_3: 0x03,\n  /** Application-specific status range start (0x0C). */\n  APPLICATION_SPECIFIC_RANGE_START: 0x0c,\n  /** Application-specific status range end (0x0F). */\n  APPLICATION_SPECIFIC_RANGE_END: 0x0f,\n} as const\n\nexport type StatusType = (typeof StatusTypes)[keyof typeof StatusTypes] | number\n\n/**\n * Media types for Status List Tokens\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.7\n */\nexport const MediaTypes = {\n  /** Media type for JWT-based Status List Token */\n  STATUS_LIST_JWT: 'application/statuslist+jwt',\n  /** Media type for CWT-based Status List Token */\n  STATUS_LIST_CWT: 'application/statuslist+cwt',\n} as const\n\n/**\n * BitsPerStatus type.\n */\nexport type BitsPerStatus = 1 | 2 | 4 | 8\n\n/**\n * Reference to a status list entry.\n */\nexport interface StatusListEntry {\n  idx: number\n  uri: string\n}\n","import { CborStructure, RegisteredCwtClaimKey, TypedMap, typedMap } from '@owf/cose'\nimport z from 'zod'\nimport type { StatusList } from '../status-list'\nimport { StatusListCbor, type StatusListCborEncodedStructure } from './status-list-cbor'\n\nexport enum StatusListCwtClaimKey {\n  TimeToLive = 65534,\n  StatusList = 65533,\n}\n\nconst statusListCwtPayloadSchema = typedMap([\n  [RegisteredCwtClaimKey.Subject, z.string()],\n  [RegisteredCwtClaimKey.IssuedAt, z.number()],\n  [RegisteredCwtClaimKey.ExpirationTime, z.number().optional()],\n  [StatusListCwtClaimKey.TimeToLive, z.number().optional()],\n  [StatusListCwtClaimKey.StatusList, z.instanceof(StatusListCbor)],\n])\n\nexport type StatusListCwtPayloadEncodedStructure = z.infer<typeof statusListCwtPayloadSchema>\nexport type StatusListCwtPayloadDecodedStructure = z.infer<typeof statusListCwtPayloadSchema>\n\nexport type CreateStatusListCwtPayloadOptions = {\n  subject: string\n  statusList: StatusListCbor | StatusList\n  issuedAt?: Date\n  expirationTime?: Date\n  timeToLive?: number\n}\n\nexport class StatusListCwtPayload extends CborStructure<\n  StatusListCwtPayloadEncodedStructure,\n  StatusListCwtPayloadDecodedStructure\n> {\n  public static override get encodingSchema() {\n    return z.codec(statusListCwtPayloadSchema.in, statusListCwtPayloadSchema.out, {\n      decode: (input) => {\n        const map: StatusListCwtPayloadDecodedStructure = TypedMap.fromMap(input)\n\n        map.set(\n          StatusListCwtClaimKey.StatusList,\n          StatusListCbor.fromEncodedStructure(\n            input.get(StatusListCwtClaimKey.StatusList) as StatusListCborEncodedStructure\n          )\n        )\n\n        return map\n      },\n      encode: (output) => {\n        const map = output.toMap() as Map<unknown, unknown>\n        map.set(StatusListCwtClaimKey.StatusList, output.get(StatusListCwtClaimKey.StatusList).encodedStructure)\n        return map\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCwtPayloadOptions) {\n    const map: StatusListCwtPayloadEncodedStructure = new TypedMap([\n      [RegisteredCwtClaimKey.Subject, options.subject],\n      [RegisteredCwtClaimKey.IssuedAt, Math.floor((options.issuedAt?.getTime() ?? Date.now()) / 1000)],\n      [\n        RegisteredCwtClaimKey.ExpirationTime,\n        options.expirationTime ? Math.floor(options.expirationTime.getTime() / 1000) : undefined,\n      ],\n      [StatusListCwtClaimKey.TimeToLive, options.timeToLive],\n      [\n        StatusListCwtClaimKey.StatusList,\n        options.statusList instanceof StatusListCbor\n          ? options.statusList\n          : StatusListCbor.create({ statusList: options.statusList }),\n      ],\n    ])\n\n    return new StatusListCwtPayload(statusListCwtPayloadSchema.parse(map.toMap()))\n  }\n\n  public get subject() {\n    return this.structure.get(RegisteredCwtClaimKey.Subject)\n  }\n\n  public get issuedAt() {\n    return new Date(this.structure.get(RegisteredCwtClaimKey.IssuedAt) * 1000)\n  }\n\n  public get expirationTime() {\n    return this.structure.has(RegisteredCwtClaimKey.ExpirationTime)\n      ? // biome-ignore lint/style/noNonNullAssertion: checked with `has` in the line above\n        new Date(this.structure.get(RegisteredCwtClaimKey.ExpirationTime)! * 1000)\n      : undefined\n  }\n\n  public get timeToLive() {\n    return this.structure.get(StatusListCwtClaimKey.TimeToLive)\n  }\n\n  public get statusList() {\n    return this.structure.get(StatusListCwtClaimKey.StatusList).statusList\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.structure.set(\n      StatusListCwtClaimKey.StatusList,\n      statusList instanceof StatusListCbor ? statusList : StatusListCbor.create({ statusList })\n    )\n  }\n}\n","import {\n  type CoseKey,\n  Cwt,\n  type Mac0Context,\n  type ProtectedHeaderOptions,\n  ProtectedHeaders,\n  type Sign1Context,\n  type SignatureAlgorithm,\n  type UnprotectedHeaderOptions,\n  UnprotectedHeaders,\n} from '@owf/cose'\nimport { StatusList } from '../status-list'\nimport { type BitsPerStatus, MediaTypes } from '../types'\nimport { StatusListCbor } from './status-list-cbor'\nimport { type CreateStatusListCwtPayloadOptions, StatusListCwtPayload } from './status-list-cwt-payload'\n\nexport type StatusListCwtOptions = {\n  payload: StatusListCwtPayload | CreateStatusListCwtPayloadOptions\n  protectedHeaders?: ProtectedHeaders | ProtectedHeaderOptions['protectedHeaders']\n  unprotectedHeaders?: UnprotectedHeaders | UnprotectedHeaderOptions['unprotectedHeaders']\n}\n\nexport enum StatusListCwtHeaderKey {\n  Typ = 16,\n}\n\nexport class StatusListCwt {\n  public payload: StatusListCwtPayload\n  public protectedHeaders?: ProtectedHeaders\n  public unprotectedHeaders?: UnprotectedHeaders\n\n  public constructor(options: StatusListCwtOptions) {\n    this.payload =\n      options.payload instanceof StatusListCwtPayload ? options.payload : StatusListCwtPayload.create(options.payload)\n    this.protectedHeaders =\n      options.protectedHeaders instanceof ProtectedHeaders\n        ? options.protectedHeaders\n        : ProtectedHeaders.create({ protectedHeaders: options.protectedHeaders })\n    this.unprotectedHeaders =\n      options.unprotectedHeaders instanceof UnprotectedHeaders\n        ? options.unprotectedHeaders\n        : UnprotectedHeaders.create({ unprotectedHeaders: options.unprotectedHeaders })\n\n    if (this.protectedHeaders.headers.get(StatusListCwtHeaderKey.Typ) === undefined) {\n      this.protectedHeaders.headers.set(StatusListCwtHeaderKey.Typ, MediaTypes.STATUS_LIST_CWT)\n    }\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.payload.setStatusList(statusList)\n  }\n\n  public updateStatusList(index: number, value: number) {\n    this.payload.statusList.setStatus(index, value)\n  }\n\n  /**\n   *\n   * Create a minimal status list cwt. If you want to configure more options, use the constructor method\n   *\n   */\n  public static createFromStatusListAndSubject(\n    statusList:\n      | StatusList\n      | StatusListCbor\n      | { statusList: number[]; bitsPerStatus: BitsPerStatus; aggregationUri?: string },\n    subject: string\n  ) {\n    const cborStatusList =\n      statusList instanceof StatusListCbor\n        ? statusList\n        : statusList instanceof StatusList\n          ? StatusListCbor.create({ statusList })\n          : StatusListCbor.create({\n              bits: statusList.bitsPerStatus,\n              list: statusList.statusList,\n              aggregationUri: statusList.aggregationUri,\n            })\n\n    return new StatusListCwt({ payload: StatusListCwtPayload.create({ statusList: cborStatusList, subject }) })\n  }\n\n  public static fromToken(token: Uint8Array) {\n    const cwt = Cwt.fromToken(token)\n    const payload = StatusListCwtPayload.decode(cwt.payload)\n\n    return new StatusListCwt({\n      payload,\n      protectedHeaders: cwt.protectedHeaders,\n      unprotectedHeaders: cwt.unprotectedHeaders,\n    })\n  }\n\n  public async signAndEncode(\n    options: {\n      signingKey: CoseKey\n      algorithm?: SignatureAlgorithm\n    },\n    ctx: Pick<Sign1Context, 'sign'>\n  ) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asSign1.sign(options, ctx)).encode()\n  }\n\n  public async authenticateAndEncode(options: { key: Uint8Array }, ctx: Pick<Mac0Context, 'mac'>) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asMac0.authenticate(options, ctx)).encode()\n  }\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport type { BitsPerStatus, StatusListEntry } from './types'\n\n// ==================== JWT Types & Constants ====================\n\n/**\n * JWT type header value for Status List Token\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-5.1\n */\nexport const JWT_STATUS_LIST_TYPE = 'statuslist+jwt'\n\n/**\n * JWT claim names for Status List\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.1\n */\nexport const JWTClaimNames = {\n  STATUS: 'status',\n  STATUS_LIST: 'status_list',\n  TTL: 'ttl',\n  IDX: 'idx',\n  URI: 'uri',\n  BITS: 'bits',\n  LST: 'lst',\n  AGGREGATION_URI: 'aggregation_uri',\n} as const\n\n/**\n * Payload for a JWT with a status reference.\n */\nexport interface JWTwithStatusListPayload extends JwtPayload {\n  status: {\n    status_list: StatusListEntry\n  }\n}\n\n/**\n * Payload for a Status List JWT.\n */\nexport interface StatusListJWTPayload extends JwtPayload {\n  ttl?: number\n  status_list: {\n    bits: BitsPerStatus\n    lst: string\n  }\n}\n\n/**\n * Header parameters for a JWT Status List Token.\n */\nexport type StatusListJWTHeaderParameters = {\n  alg: string\n  typ: typeof JWT_STATUS_LIST_TYPE\n  [key: string]: unknown\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport { base64UrlToUint8Array, base64urlDecode, uint8ArrayToBase64Url } from '@owf/identity-common'\nimport type { JWTwithStatusListPayload, StatusListJWTHeaderParameters, StatusListJWTPayload } from './jwt-types'\nimport { JWT_STATUS_LIST_TYPE } from './jwt-types'\nimport { StatusList } from './status-list'\nimport { SLException } from './status-list-exception'\nimport type { StatusListEntry } from './types'\n\n/**\n * Decode a JWT and return the payload.\n * @param jwt JWT token in compact JWS serialization.\n */\nfunction decodeJwtPayload<T>(jwt: string): T {\n  const parts = jwt.split('.')\n  return JSON.parse(base64urlDecode(parts[1]))\n}\n\n/**\n * Adds the status list to the payload and header of a JWT.\n */\nexport function createHeaderAndPayload(list: StatusList, payload: JwtPayload, header: StatusListJWTHeaderParameters) {\n  if (!payload.sub) {\n    throw new SLException('sub field is required')\n  }\n  if (!payload.iat) {\n    throw new SLException('iat field is required')\n  }\n\n  header.typ = JWT_STATUS_LIST_TYPE\n  payload.status_list = {\n    bits: list.getBitsPerStatus(),\n    lst: uint8ArrayToBase64Url(list.compressStatusListToBytes()),\n  }\n  return { header, payload }\n}\n\n/**\n * Get the status list from a JWT, but do not verify the signature.\n */\nexport function getListFromStatusListJWT(jwt: string): StatusList {\n  const payload = decodeJwtPayload<StatusListJWTPayload>(jwt)\n  const statusList = payload.status_list\n  const compressed = base64UrlToUint8Array(statusList.lst)\n  return StatusList.decompressStatusListFromBytes(compressed, statusList.bits)\n}\n\n/**\n * Get the status list entry from a JWT, but do not verify the signature.\n */\nexport function getStatusListFromJWT(jwt: string): StatusListEntry {\n  const payload = decodeJwtPayload<JWTwithStatusListPayload>(jwt)\n  return payload.status.status_list\n}\n"],"mappings":";;;;;;;;AAKA,IAAa,cAAb,MAAa,oBAAoB,kBAAkB;CACjD,YAAY,SAAiB,SAAmB;AAC9C,QAAM,SAAS,QAAQ;AACvB,SAAO,eAAe,MAAM,YAAY,UAAU;AAClD,OAAK,OAAO;;;;;;;;ACFhB,IAAa,aAAb,MAAa,WAAW;CAMtB,YAAY,YAAsB,eAA8B,gBAAyB;AACvF,MAAI,CAAC;GAAC;GAAG;GAAG;GAAG;GAAE,CAAC,SAAS,cAAc,CACvC,OAAM,IAAI,YAAY,sCAAsC;AAE9D,OAAK,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,IACrC,KAAI,WAAW,KAAK,KAAK,cACvB,OAAM,IAAI,YAAY,sCAAsC,EAAE,cAAc,WAAW,KAAK;AAGhG,OAAK,cAAc;AACnB,OAAK,gBAAgB;AACrB,OAAK,gBAAgB,WAAW;AAChC,OAAK,iBAAiB;;;CAIxB,IAAI,aAAuB;AACzB,SAAO,KAAK;;;CAId,mBAAkC;AAChC,SAAO,KAAK;;;CAId,UAAU,OAAuB;AAC/B,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,SAAO,KAAK,YAAY;;;CAI1B,UAAU,OAAe,OAAqB;AAC5C,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,OAAK,YAAY,SAAS;;;CAI5B,4BAAwC;AAEtC,SAAO,QADW,KAAK,+BAA+B,EAC5B,EAAE,OAAO,GAAG,CAAC;;;CAIzC,OAAO,8BACL,YACA,eACA,gBACY;AACZ,MAAI;GACF,MAAM,eAAe,QAAQ,WAAW;AAExC,UAAO,IAAI,WADQ,WAAW,8BAA8B,cAAc,cAAc,EACtD,eAAe,eAAe;WACzD,KAAc;AACrB,SAAM,IAAI,MAAM,yBAAyB,MAAM;;;;CAKnD,gCAAmD;EACjD,MAAM,UAAU,KAAK;EACrB,MAAM,WAAW,KAAK,KAAM,KAAK,gBAAgB,UAAW,EAAE;EAC9D,MAAM,YAAY,IAAI,WAAW,SAAS;EAC1C,IAAI,YAAY;EAChB,IAAI,WAAW;EACf,IAAI,cAAc;AAClB,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,eAAe,KAAK;AAE3C,iBADe,KAAK,YAAY,GACX,SAAS,EAAE,CAAC,SAAS,SAAS,IAAI,GAAG;AAC1D,eAAY;AAEZ,OAAI,YAAY,KAAK,MAAM,KAAK,gBAAgB,GAAG;AACjD,QAAI,MAAM,KAAK,gBAAgB,KAAK,WAAW,MAAM,EACnD,eAAc,YAAY,SAAS,GAAG,IAAI;AAE5C,cAAU,aAAa,OAAO,SAAS,aAAa,EAAE;AACtD,kBAAc;AACd,eAAW;AACX;;;AAIJ,SAAO;;;CAIT,OAAe,8BAA8B,WAAuB,eAAwC;EAC1G,MAAM,UAAU;EAChB,MAAM,gBAAiB,UAAU,SAAS,IAAK;EAC/C,MAAM,aAAa,IAAI,MAAc,cAAc;EACnD,IAAI,WAAW;AACf,OAAK,IAAI,IAAI,GAAG,IAAI,eAAe,KAAK;GAEtC,IAAI,aADS,UAAU,KAAK,MAAO,IAAI,UAAW,EAAE,EAC9B,SAAS,EAAE;AACjC,OAAI,WAAW,SAAS,EACtB,cAAa,IAAI,OAAO,IAAI,WAAW,OAAO,GAAG;GAEnD,MAAM,SAAS,WAAW,MAAM,UAAU,WAAW,QAAQ;GAC7D,MAAM,QAAQ,KAAK,MAAM,KAAK,IAAI,SAAS;GAC3C,MAAM,eAAe,KAAK,IAAI;GAC9B,MAAM,WAAW,SAAS,IAAI,YAAY,IAAI,UAAU,KAAK;AAC7D,cAAW,YAAY,OAAO,SAAS,QAAQ,EAAE;AACjD,eAAY,WAAW,WAAW;;AAEpC,SAAO;;;;;ACpHX,MAAa,8BAA8B,SAAS;CAClD,CAAC,QAAQ,EAAE,MAAM;EAAC,EAAE,QAAQ,EAAE;EAAE,EAAE,QAAQ,EAAE;EAAE,EAAE,QAAQ,EAAE;EAAE,EAAE,QAAQ,EAAE;EAAC,CAAC,CAAC;CAC3E,CAAC,OAAO,YAAY;CACpB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,UAAU,CAAC;CAC3C,CAAC;AAEF,MAAa,8BAA8B,EAAE,WAAW,WAAW;AAenE,IAAa,iBAAb,MAAa,uBAAuB,cAA8E;;;oBAC5F,KAAK;;CAEzB,WAA2B,iBAAiB;AAC1C,SAAO,EAAE,MAAM,6BAA6B,6BAA6B;GACvE,SAAS,eAAe;AACtB,WAAO,IAAI,SAAS;KAClB,CAAC,QAAQ,WAAW,kBAAkB,CAAC;KACvC,CAAC,OAAO,WAAW,2BAA2B,CAAC;KAC/C,CAAC,mBAAmB,WAAW,eAAe;KAC/C,CAAC;;GAEJ,SAAS,UAAU;AACjB,WAAO,WAAW,8BAChB,MAAM,IAAI,MAAM,EAChB,MAAM,IAAI,OAAO,EACjB,MAAM,IAAI,kBAAkB,CAC7B;;GAEJ,CAAC;;CAGJ,OAAc,OAAO,SAA4E;AAQ/F,SAAO,IAAI,eANT,gBAAgB,UACZ,QAAQ,aACR,QAAQ,gBAAgB,aACtB,WAAW,8BAA8B,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,GAC5F,IAAI,WAAW,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,CAErC;;;;;;;;;AClDzC,MAAa,cAAc;CAEzB,OAAO;CAEP,SAAS;CAET,WAAW;CAEX,wBAAwB;CAExB,kCAAkC;CAElC,gCAAgC;CACjC;;;;;AAQD,MAAa,aAAa;CAExB,iBAAiB;CAEjB,iBAAiB;CAClB;;;AC3BD,IAAY,wBAAL,yBAAA,uBAAA;AACL,uBAAA,sBAAA,gBAAA,SAAA;AACA,uBAAA,sBAAA,gBAAA,SAAA;;KACD;AAED,MAAM,6BAA6B,SAAS;CAC1C,CAAC,sBAAsB,SAASA,IAAE,QAAQ,CAAC;CAC3C,CAAC,sBAAsB,UAAUA,IAAE,QAAQ,CAAC;CAC5C,CAAC,sBAAsB,gBAAgBA,IAAE,QAAQ,CAAC,UAAU,CAAC;CAC7D,CAAA,OAAmCA,IAAE,QAAQ,CAAC,UAAU,CAAC;CACzD,CAAA,OAAmCA,IAAE,WAAW,eAAe,CAAC;CACjE,CAAC;AAaF,IAAa,uBAAb,MAAa,6BAA6B,cAGxC;CACA,WAA2B,iBAAiB;AAC1C,SAAOA,IAAE,MAAM,2BAA2B,IAAI,2BAA2B,KAAK;GAC5E,SAAS,UAAU;IACjB,MAAM,MAA4C,SAAS,QAAQ,MAAM;AAEzE,QAAI,IAAA,OAEF,eAAe,qBACb,MAAM,IAAA,MAAqC,CAC5C,CACF;AAED,WAAO;;GAET,SAAS,WAAW;IAClB,MAAM,MAAM,OAAO,OAAO;AAC1B,QAAI,IAAA,OAAsC,OAAO,IAAA,MAAqC,CAAC,iBAAiB;AACxG,WAAO;;GAEV,CAAC;;CAGJ,OAAc,OAAO,SAA4C;EAC/D,MAAM,MAA4C,IAAI,SAAS;GAC7D,CAAC,sBAAsB,SAAS,QAAQ,QAAQ;GAChD,CAAC,sBAAsB,UAAU,KAAK,OAAO,QAAQ,UAAU,SAAS,IAAI,KAAK,KAAK,IAAI,IAAK,CAAC;GAChG,CACE,sBAAsB,gBACtB,QAAQ,iBAAiB,KAAK,MAAM,QAAQ,eAAe,SAAS,GAAG,IAAK,GAAG,KAAA,EAChF;GACD,CAAA,OAAmC,QAAQ,WAAW;GACtD,CAAA,OAEE,QAAQ,sBAAsB,iBAC1B,QAAQ,aACR,eAAe,OAAO,EAAE,YAAY,QAAQ,YAAY,CAAC,CAC9D;GACF,CAAC;AAEF,SAAO,IAAI,qBAAqB,2BAA2B,MAAM,IAAI,OAAO,CAAC,CAAC;;CAGhF,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU,IAAI,sBAAsB,QAAQ;;CAG1D,IAAW,WAAW;AACpB,yBAAO,IAAI,KAAK,KAAK,UAAU,IAAI,sBAAsB,SAAS,GAAG,IAAK;;CAG5E,IAAW,iBAAiB;AAC1B,SAAO,KAAK,UAAU,IAAI,sBAAsB,eAAe,mBAE3D,IAAI,KAAK,KAAK,UAAU,IAAI,sBAAsB,eAAe,GAAI,IAAK,GAC1E,KAAA;;CAGN,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC;;CAG7D,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC,CAAC;;CAG9D,cAAqB,YAAyC;AAC5D,OAAK,UAAU,IAAA,OAEb,sBAAsB,iBAAiB,aAAa,eAAe,OAAO,EAAE,YAAY,CAAC,CAC1F;;;;;AChFL,IAAY,yBAAL,yBAAA,wBAAA;AACL,wBAAA,uBAAA,SAAA,MAAA;;KACD;AAED,IAAa,gBAAb,MAAa,cAAc;CAKzB,YAAmB,SAA+B;AAChD,OAAK,UACH,QAAQ,mBAAmB,uBAAuB,QAAQ,UAAU,qBAAqB,OAAO,QAAQ,QAAQ;AAClH,OAAK,mBACH,QAAQ,4BAA4B,mBAChC,QAAQ,mBACR,iBAAiB,OAAO,EAAE,kBAAkB,QAAQ,kBAAkB,CAAC;AAC7E,OAAK,qBACH,QAAQ,8BAA8B,qBAClC,QAAQ,qBACR,mBAAmB,OAAO,EAAE,oBAAoB,QAAQ,oBAAoB,CAAC;AAEnF,MAAI,KAAK,iBAAiB,QAAQ,IAAA,GAA+B,KAAK,KAAA,EACpE,MAAK,iBAAiB,QAAQ,IAAA,IAAgC,WAAW,gBAAgB;;CAI7F,cAAqB,YAAyC;AAC5D,OAAK,QAAQ,cAAc,WAAW;;CAGxC,iBAAwB,OAAe,OAAe;AACpD,OAAK,QAAQ,WAAW,UAAU,OAAO,MAAM;;;;;;;CAQjD,OAAc,+BACZ,YAIA,SACA;EACA,MAAM,iBACJ,sBAAsB,iBAClB,aACA,sBAAsB,aACpB,eAAe,OAAO,EAAE,YAAY,CAAC,GACrC,eAAe,OAAO;GACpB,MAAM,WAAW;GACjB,MAAM,WAAW;GACjB,gBAAgB,WAAW;GAC5B,CAAC;AAEV,SAAO,IAAI,cAAc,EAAE,SAAS,qBAAqB,OAAO;GAAE,YAAY;GAAgB;GAAS,CAAC,EAAE,CAAC;;CAG7G,OAAc,UAAU,OAAmB;EACzC,MAAM,MAAM,IAAI,UAAU,MAAM;AAGhC,SAAO,IAAI,cAAc;GACvB,SAHc,qBAAqB,OAAO,IAAI,QAAQ;GAItD,kBAAkB,IAAI;GACtB,oBAAoB,IAAI;GACzB,CAAC;;CAGJ,MAAa,cACX,SAIA,KACA;AAMA,UAAQ,MALI,IAAI,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ;;CAGxD,MAAa,sBAAsB,SAA8B,KAA+B;AAM9F,UAAQ,MALI,IAAI,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,OAAO,aAAa,SAAS,IAAI,EAAE,QAAQ;;;;;;;;;ACzGjE,MAAa,uBAAuB;;;;;AAMpC,MAAa,gBAAgB;CAC3B,QAAQ;CACR,aAAa;CACb,KAAK;CACL,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,iBAAiB;CAClB;;;;;;;ACZD,SAAS,iBAAoB,KAAgB;CAC3C,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAO,KAAK,MAAM,gBAAgB,MAAM,GAAG,CAAC;;;;;AAM9C,SAAgB,uBAAuB,MAAkB,SAAqB,QAAuC;AACnH,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAEhD,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAGhD,QAAO,MAAM;AACb,SAAQ,cAAc;EACpB,MAAM,KAAK,kBAAkB;EAC7B,KAAK,sBAAsB,KAAK,2BAA2B,CAAC;EAC7D;AACD,QAAO;EAAE;EAAQ;EAAS;;;;;AAM5B,SAAgB,yBAAyB,KAAyB;CAEhE,MAAM,aADU,iBAAuC,IAAI,CAChC;CAC3B,MAAM,aAAa,sBAAsB,WAAW,IAAI;AACxD,QAAO,WAAW,8BAA8B,YAAY,WAAW,KAAK;;;;;AAM9E,SAAgB,qBAAqB,KAA8B;AAEjE,QADgB,iBAA2C,IAAI,CAChD,OAAO"}
+{"version":3,"file":"index.mjs","names":["z"],"sources":["../src/status-list-exception.ts","../src/status-list.ts","../src/cbor/status-list-cbor.ts","../src/types.ts","../src/cbor/status-list-cwt-payload.ts","../src/cbor/status-list-cwt.ts","../src/jwt-types.ts","../src/status-list-jwt.ts"],"sourcesContent":["import { IdentityException } from '@owf/identity-common'\n\n/**\n * SLException is a custom error class for Status List related exceptions.\n */\nexport class SLException extends IdentityException {\n  constructor(message: string, details?: unknown) {\n    super(message, details)\n    Object.setPrototypeOf(this, SLException.prototype)\n    this.name = 'SLException'\n  }\n}\n","import { deflate, inflate } from 'pako'\nimport { SLException } from './status-list-exception'\nimport type { BitsPerStatus } from './types'\n\n/**\n * StatusList is a class that manages a list of statuses with variable bit size.\n */\nexport class StatusList {\n  private _statusList: number[]\n  private bitsPerStatus: BitsPerStatus\n  private totalStatuses: number\n  public aggregationUri?: string\n\n  constructor(statusList: number[], bitsPerStatus: BitsPerStatus, aggregationUri?: string) {\n    if (![1, 2, 4, 8].includes(bitsPerStatus)) {\n      throw new SLException('bitsPerStatus must be 1, 2, 4, or 8')\n    }\n    for (let i = 0; i < statusList.length; i++) {\n      if (statusList[i] > 2 ** bitsPerStatus) {\n        throw new SLException(`Status value out of range at index ${i} with value ${statusList[i]}`)\n      }\n    }\n    this._statusList = statusList\n    this.bitsPerStatus = bitsPerStatus\n    this.totalStatuses = statusList.length\n    this.aggregationUri = aggregationUri\n  }\n\n  /** Get the status list. */\n  get statusList(): number[] {\n    return this._statusList\n  }\n\n  /** Get the number of bits per status. */\n  getBitsPerStatus(): BitsPerStatus {\n    return this.bitsPerStatus\n  }\n\n  /** Get the status at a specific index. */\n  getStatus(index: number): number {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    return this._statusList[index]\n  }\n\n  /** Set the status at a specific index. */\n  setStatus(index: number, value: number): void {\n    if (index < 0 || index >= this.totalStatuses) {\n      throw new Error('Index out of bounds')\n    }\n    this._statusList[index] = value\n  }\n\n  /** Compress the status list and return as raw bytes. */\n  compressStatusListToBytes(): Uint8Array {\n    const byteArray = this.encodeStatusListIntoByteArray()\n    return deflate(byteArray, { level: 9 })\n  }\n\n  /** Decompress a raw byte array and return a new StatusList instance. */\n  static decompressStatusListFromBytes(\n    compressed: Uint8Array,\n    bitsPerStatus: BitsPerStatus,\n    aggregationUri?: string\n  ): StatusList {\n    try {\n      const decompressed = inflate(compressed)\n      const statusList = StatusList.decodeStatusListFromByteArray(decompressed, bitsPerStatus)\n      return new StatusList(statusList, bitsPerStatus, aggregationUri)\n    } catch (err: unknown) {\n      throw new Error(`Decompression failed: ${err}`)\n    }\n  }\n\n  /** Encode the status list into a byte array. */\n  public encodeStatusListIntoByteArray(): Uint8Array {\n    const numBits = this.bitsPerStatus\n    const numBytes = Math.ceil((this.totalStatuses * numBits) / 8)\n    const byteArray = new Uint8Array(numBytes)\n    let byteIndex = 0\n    let bitIndex = 0\n    let currentByte = ''\n    for (let i = 0; i < this.totalStatuses; i++) {\n      const status = this._statusList[i]\n      currentByte = status.toString(2).padStart(numBits, '0') + currentByte\n      bitIndex += numBits\n\n      if (bitIndex >= 8 || i === this.totalStatuses - 1) {\n        if (i === this.totalStatuses - 1 && bitIndex % 8 !== 0) {\n          currentByte = currentByte.padStart(8, '0')\n        }\n        byteArray[byteIndex] = Number.parseInt(currentByte, 2)\n        currentByte = ''\n        bitIndex = 0\n        byteIndex++\n      }\n    }\n\n    return byteArray\n  }\n\n  /** Decode the byte array into a status list. */\n  private static decodeStatusListFromByteArray(byteArray: Uint8Array, bitsPerStatus: BitsPerStatus): number[] {\n    const numBits = bitsPerStatus\n    const totalStatuses = (byteArray.length * 8) / numBits\n    const statusList = new Array<number>(totalStatuses)\n    let bitIndex = 0\n    for (let i = 0; i < totalStatuses; i++) {\n      const byte = byteArray[Math.floor((i * numBits) / 8)]\n      let byteString = byte.toString(2)\n      if (byteString.length < 8) {\n        byteString = '0'.repeat(8 - byteString.length) + byteString\n      }\n      const status = byteString.slice(bitIndex, bitIndex + numBits)\n      const group = Math.floor(i / (8 / numBits))\n      const indexInGroup = i % (8 / numBits)\n      const position = group * (8 / numBits) + (8 / numBits + -1 - indexInGroup)\n      statusList[position] = Number.parseInt(status, 2)\n      bitIndex = (bitIndex + numBits) % 8\n    }\n    return statusList\n  }\n}\n","import { CborStructure, TypedMap, typedMap, zUint8Array } from '@owf/cose'\nimport { z } from 'zod'\nimport { StatusList } from '../status-list'\nimport type { BitsPerStatus } from '../types'\n\nexport const statusListCborEncodedSchema = typedMap([\n  ['bits', z.union([z.literal(1), z.literal(2), z.literal(4), z.literal(8)])],\n  ['lst', zUint8Array],\n  ['aggregation_uri', z.string().optional()],\n])\n\nexport const statusListCborDecodedSchema = z.instanceof(StatusList)\n\nexport type StatusListCborEncodedStructure = z.infer<typeof statusListCborEncodedSchema>\nexport type StatusListCborDecodedStructure = z.infer<typeof statusListCborDecodedSchema>\n\nexport type CreateStatusListCborOptions = {\n  bits: BitsPerStatus\n  list: Uint8Array | number[]\n  aggregationUri?: string\n}\n\nexport type StatusListCborWithStatusListOptions = {\n  statusList: StatusList\n}\n\nexport class StatusListCbor extends CborStructure<StatusListCborEncodedStructure, StatusListCborDecodedStructure> {\n  public statusList = this.structure\n\n  public static override get encodingSchema() {\n    return z.codec(statusListCborEncodedSchema, statusListCborDecodedSchema, {\n      encode: (statusList) => {\n        return new TypedMap([\n          ['bits', statusList.getBitsPerStatus()],\n          ['lst', statusList.compressStatusListToBytes()],\n          ['aggregation_uri', statusList.aggregationUri],\n        ]) satisfies StatusListCborEncodedStructure\n      },\n      decode: (input) => {\n        return StatusList.decompressStatusListFromBytes(\n          input.get('lst'),\n          input.get('bits'),\n          input.get('aggregation_uri')\n        )\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCborOptions | StatusListCborWithStatusListOptions) {\n    const statusList =\n      'statusList' in options\n        ? options.statusList\n        : options.list instanceof Uint8Array\n          ? StatusList.decompressStatusListFromBytes(options.list, options.bits, options.aggregationUri)\n          : new StatusList(options.list, options.bits, options.aggregationUri)\n\n    return new StatusListCbor(statusList)\n  }\n}\n","// ==================== Common Types & Constants ====================\n\n/**\n * Status Type values as defined in the spec.\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-7\n */\nexport const StatusTypes = {\n  /** The status of the Referenced Token is valid, correct or legal. */\n  VALID: 0x00,\n  /** The status of the Referenced Token is revoked, annulled, taken back, recalled or cancelled. */\n  INVALID: 0x01,\n  /** The status of the Referenced Token is temporarily invalid, hanging, debarred from privilege. */\n  SUSPENDED: 0x02,\n  /** Application-specific status (0x03). */\n  APPLICATION_SPECIFIC_3: 0x03,\n  /** Application-specific status range start (0x0C). */\n  APPLICATION_SPECIFIC_RANGE_START: 0x0c,\n  /** Application-specific status range end (0x0F). */\n  APPLICATION_SPECIFIC_RANGE_END: 0x0f,\n} as const\n\nexport type StatusType = (typeof StatusTypes)[keyof typeof StatusTypes] | number\n\n/**\n * Media types for Status List Tokens\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.7\n */\nexport const MediaTypes = {\n  /** Media type for JWT-based Status List Token */\n  STATUS_LIST_JWT: 'application/statuslist+jwt',\n  /** Media type for CWT-based Status List Token */\n  STATUS_LIST_CWT: 'application/statuslist+cwt',\n} as const\n\n/**\n * BitsPerStatus type.\n */\nexport type BitsPerStatus = 1 | 2 | 4 | 8\n\n/**\n * Reference to a status list entry.\n */\nexport interface StatusListEntry {\n  idx: number\n  uri: string\n}\n","import { CborStructure, RegisteredCwtClaimKey, TypedMap, typedMap } from '@owf/cose'\nimport z from 'zod'\nimport type { StatusList } from '../status-list'\nimport { StatusListCbor, type StatusListCborEncodedStructure } from './status-list-cbor'\n\nexport enum StatusListCwtClaimKey {\n  TimeToLive = 65534,\n  StatusList = 65533,\n}\n\nconst statusListCwtPayloadSchema = typedMap([\n  [RegisteredCwtClaimKey.Subject, z.string()],\n  [RegisteredCwtClaimKey.IssuedAt, z.number()],\n  [RegisteredCwtClaimKey.ExpirationTime, z.number().optional()],\n  [StatusListCwtClaimKey.TimeToLive, z.number().optional()],\n  [StatusListCwtClaimKey.StatusList, z.instanceof(StatusListCbor)],\n])\n\nexport type StatusListCwtPayloadEncodedStructure = z.infer<typeof statusListCwtPayloadSchema>\nexport type StatusListCwtPayloadDecodedStructure = z.infer<typeof statusListCwtPayloadSchema>\n\nexport type CreateStatusListCwtPayloadOptions = {\n  subject: string\n  statusList: StatusListCbor | StatusList\n  issuedAt?: Date\n  expirationTime?: Date\n  timeToLive?: number\n}\n\nexport class StatusListCwtPayload extends CborStructure<\n  StatusListCwtPayloadEncodedStructure,\n  StatusListCwtPayloadDecodedStructure\n> {\n  public static override get encodingSchema() {\n    return z.codec(statusListCwtPayloadSchema.in, statusListCwtPayloadSchema.out, {\n      decode: (input) => {\n        const map: StatusListCwtPayloadDecodedStructure = TypedMap.fromMap(input)\n\n        map.set(\n          StatusListCwtClaimKey.StatusList,\n          StatusListCbor.fromEncodedStructure(\n            input.get(StatusListCwtClaimKey.StatusList) as StatusListCborEncodedStructure\n          )\n        )\n\n        return map\n      },\n      encode: (output) => {\n        const map = output.toMap() as Map<unknown, unknown>\n        map.set(StatusListCwtClaimKey.StatusList, output.get(StatusListCwtClaimKey.StatusList).encodedStructure)\n        return map\n      },\n    })\n  }\n\n  public static create(options: CreateStatusListCwtPayloadOptions) {\n    const map: StatusListCwtPayloadEncodedStructure = new TypedMap([\n      [RegisteredCwtClaimKey.Subject, options.subject],\n      [RegisteredCwtClaimKey.IssuedAt, Math.floor((options.issuedAt?.getTime() ?? Date.now()) / 1000)],\n      [\n        RegisteredCwtClaimKey.ExpirationTime,\n        options.expirationTime ? Math.floor(options.expirationTime.getTime() / 1000) : undefined,\n      ],\n      [StatusListCwtClaimKey.TimeToLive, options.timeToLive],\n      [\n        StatusListCwtClaimKey.StatusList,\n        options.statusList instanceof StatusListCbor\n          ? options.statusList\n          : StatusListCbor.create({ statusList: options.statusList }),\n      ],\n    ])\n\n    return new StatusListCwtPayload(statusListCwtPayloadSchema.parse(map.toMap()))\n  }\n\n  public get subject() {\n    return this.structure.get(RegisteredCwtClaimKey.Subject)\n  }\n\n  public get issuedAt() {\n    return new Date(this.structure.get(RegisteredCwtClaimKey.IssuedAt) * 1000)\n  }\n\n  public get expirationTime() {\n    return this.structure.has(RegisteredCwtClaimKey.ExpirationTime)\n      ? // biome-ignore lint/style/noNonNullAssertion: checked with `has` in the line above\n        new Date(this.structure.get(RegisteredCwtClaimKey.ExpirationTime)! * 1000)\n      : undefined\n  }\n\n  public get timeToLive() {\n    return this.structure.get(StatusListCwtClaimKey.TimeToLive)\n  }\n\n  public get statusList() {\n    return this.structure.get(StatusListCwtClaimKey.StatusList).statusList\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.structure.set(\n      StatusListCwtClaimKey.StatusList,\n      statusList instanceof StatusListCbor ? statusList : StatusListCbor.create({ statusList })\n    )\n  }\n}\n","import type { Mac0Context } from '@owf/cose'\nimport {\n  type CoseKey,\n  Cwt,\n  type ProtectedHeaderOptions,\n  ProtectedHeaders,\n  type Sign1Context,\n  type SignatureAlgorithm,\n  type UnprotectedHeaderOptions,\n  UnprotectedHeaders,\n} from '@owf/cose'\nimport { StatusList } from '../status-list'\nimport { type BitsPerStatus, MediaTypes } from '../types'\nimport { StatusListCbor } from './status-list-cbor'\nimport { type CreateStatusListCwtPayloadOptions, StatusListCwtPayload } from './status-list-cwt-payload'\n\nexport type StatusListCwtOptions = {\n  payload: StatusListCwtPayload | CreateStatusListCwtPayloadOptions\n  protectedHeaders?: ProtectedHeaders | ProtectedHeaderOptions['protectedHeaders']\n  unprotectedHeaders?: UnprotectedHeaders | UnprotectedHeaderOptions['unprotectedHeaders']\n}\n\nexport enum StatusListCwtHeaderKey {\n  Typ = 16,\n}\n\nexport class StatusListCwt {\n  public payload: StatusListCwtPayload\n  public protectedHeaders?: ProtectedHeaders\n  public unprotectedHeaders?: UnprotectedHeaders\n\n  public constructor(options: StatusListCwtOptions) {\n    this.payload =\n      options.payload instanceof StatusListCwtPayload ? options.payload : StatusListCwtPayload.create(options.payload)\n    this.protectedHeaders =\n      options.protectedHeaders instanceof ProtectedHeaders\n        ? options.protectedHeaders\n        : ProtectedHeaders.create({ protectedHeaders: options.protectedHeaders })\n    this.unprotectedHeaders =\n      options.unprotectedHeaders instanceof UnprotectedHeaders\n        ? options.unprotectedHeaders\n        : UnprotectedHeaders.create({ unprotectedHeaders: options.unprotectedHeaders })\n\n    if (this.protectedHeaders.headers.get(StatusListCwtHeaderKey.Typ) === undefined) {\n      this.protectedHeaders.headers.set(StatusListCwtHeaderKey.Typ, MediaTypes.STATUS_LIST_CWT)\n    }\n  }\n\n  public setStatusList(statusList: StatusList | StatusListCbor) {\n    this.payload.setStatusList(statusList)\n  }\n\n  public updateStatusList(index: number, value: number) {\n    this.payload.statusList.setStatus(index, value)\n  }\n\n  /**\n   *\n   * Create a minimal status list cwt. If you want to configure more options, use the constructor method\n   *\n   */\n  public static createFromStatusListAndSubject(\n    statusList:\n      | StatusList\n      | StatusListCbor\n      | { statusList: number[]; bitsPerStatus: BitsPerStatus; aggregationUri?: string },\n    subject: string\n  ) {\n    const cborStatusList =\n      statusList instanceof StatusListCbor\n        ? statusList\n        : statusList instanceof StatusList\n          ? StatusListCbor.create({ statusList })\n          : StatusListCbor.create({\n              bits: statusList.bitsPerStatus,\n              list: statusList.statusList,\n              aggregationUri: statusList.aggregationUri,\n            })\n\n    return new StatusListCwt({ payload: StatusListCwtPayload.create({ statusList: cborStatusList, subject }) })\n  }\n\n  public static fromToken(token: Uint8Array) {\n    const cwt = Cwt.fromToken(token)\n    const payload = StatusListCwtPayload.decode(cwt.payload)\n\n    return new StatusListCwt({\n      payload,\n      protectedHeaders: cwt.protectedHeaders,\n      unprotectedHeaders: cwt.unprotectedHeaders,\n    })\n  }\n\n  public async signAndEncode(\n    options: {\n      signingKey: CoseKey\n      algorithm?: SignatureAlgorithm\n    },\n    ctx: Pick<Sign1Context, 'sign'>\n  ) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asSign1.sign(options, ctx)).encode()\n  }\n\n  public async authenticateAndEncode(options: { key: Uint8Array }, ctx: Pick<Mac0Context, 'mac'>) {\n    const cwt = new Cwt({\n      protectedHeaders: this.protectedHeaders,\n      unprotectedHeaders: this.unprotectedHeaders,\n      payload: this.payload.encode(),\n    })\n    return (await cwt.asMac0.authenticate(options, ctx)).encode()\n  }\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport type { BitsPerStatus, StatusListEntry } from './types'\n\n// ==================== JWT Types & Constants ====================\n\n/**\n * JWT type header value for Status List Token\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-5.1\n */\nexport const JWT_STATUS_LIST_TYPE = 'statuslist+jwt'\n\n/**\n * JWT claim names for Status List\n * @see https://www.ietf.org/archive/id/draft-ietf-oauth-status-list-16.html#section-14.1\n */\nexport const JWTClaimNames = {\n  STATUS: 'status',\n  STATUS_LIST: 'status_list',\n  TTL: 'ttl',\n  IDX: 'idx',\n  URI: 'uri',\n  BITS: 'bits',\n  LST: 'lst',\n  AGGREGATION_URI: 'aggregation_uri',\n} as const\n\n/**\n * Payload for a JWT with a status reference.\n */\nexport interface JWTwithStatusListPayload extends JwtPayload {\n  status: {\n    status_list: StatusListEntry\n  }\n}\n\n/**\n * Payload for a Status List JWT.\n */\nexport interface StatusListJWTPayload extends JwtPayload {\n  ttl?: number\n  status_list: {\n    bits: BitsPerStatus\n    lst: string\n  }\n}\n\n/**\n * Header parameters for a JWT Status List Token.\n */\nexport type StatusListJWTHeaderParameters = {\n  alg: string\n  typ: typeof JWT_STATUS_LIST_TYPE\n  [key: string]: unknown\n}\n","import type { JwtPayload } from '@owf/identity-common'\nimport { base64UrlToUint8Array, base64urlDecode, uint8ArrayToBase64Url } from '@owf/identity-common'\nimport type { JWTwithStatusListPayload, StatusListJWTHeaderParameters, StatusListJWTPayload } from './jwt-types'\nimport { JWT_STATUS_LIST_TYPE } from './jwt-types'\nimport { StatusList } from './status-list'\nimport { SLException } from './status-list-exception'\nimport type { StatusListEntry } from './types'\n\n/**\n * Decode a JWT and return the payload.\n * @param jwt JWT token in compact JWS serialization.\n */\nfunction decodeJwtPayload<T>(jwt: string): T {\n  const parts = jwt.split('.')\n  return JSON.parse(base64urlDecode(parts[1]))\n}\n\n/**\n * Adds the status list to the payload and header of a JWT.\n */\nexport function createHeaderAndPayload(list: StatusList, payload: JwtPayload, header: StatusListJWTHeaderParameters) {\n  if (!payload.sub) {\n    throw new SLException('sub field is required')\n  }\n  if (!payload.iat) {\n    throw new SLException('iat field is required')\n  }\n\n  header.typ = JWT_STATUS_LIST_TYPE\n  payload.status_list = {\n    bits: list.getBitsPerStatus(),\n    lst: uint8ArrayToBase64Url(list.compressStatusListToBytes()),\n  }\n  return { header, payload }\n}\n\n/**\n * Get the status list from a JWT, but do not verify the signature.\n */\nexport function getListFromStatusListJWT(jwt: string): StatusList {\n  const payload = decodeJwtPayload<StatusListJWTPayload>(jwt)\n  const statusList = payload.status_list\n  const compressed = base64UrlToUint8Array(statusList.lst)\n  return StatusList.decompressStatusListFromBytes(compressed, statusList.bits)\n}\n\n/**\n * Get the status list entry from a JWT, but do not verify the signature.\n */\nexport function getStatusListFromJWT(jwt: string): StatusListEntry {\n  const payload = decodeJwtPayload<JWTwithStatusListPayload>(jwt)\n  return payload.status.status_list\n}\n"],"mappings":";;;;;;;;AAKA,IAAa,cAAb,MAAa,oBAAoB,kBAAkB;CACjD,YAAY,SAAiB,SAAmB;AAC9C,QAAM,SAAS,QAAQ;AACvB,SAAO,eAAe,MAAM,YAAY,UAAU;AAClD,OAAK,OAAO;;;;;;;;ACFhB,IAAa,aAAb,MAAa,WAAW;CAMtB,YAAY,YAAsB,eAA8B,gBAAyB;AACvF,MAAI,CAAC;GAAC;GAAG;GAAG;GAAG;GAAE,CAAC,SAAS,cAAc,CACvC,OAAM,IAAI,YAAY,sCAAsC;AAE9D,OAAK,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,IACrC,KAAI,WAAW,KAAK,KAAK,cACvB,OAAM,IAAI,YAAY,sCAAsC,EAAE,cAAc,WAAW,KAAK;AAGhG,OAAK,cAAc;AACnB,OAAK,gBAAgB;AACrB,OAAK,gBAAgB,WAAW;AAChC,OAAK,iBAAiB;;;CAIxB,IAAI,aAAuB;AACzB,SAAO,KAAK;;;CAId,mBAAkC;AAChC,SAAO,KAAK;;;CAId,UAAU,OAAuB;AAC/B,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,SAAO,KAAK,YAAY;;;CAI1B,UAAU,OAAe,OAAqB;AAC5C,MAAI,QAAQ,KAAK,SAAS,KAAK,cAC7B,OAAM,IAAI,MAAM,sBAAsB;AAExC,OAAK,YAAY,SAAS;;;CAI5B,4BAAwC;AAEtC,SAAO,QADW,KAAK,+BAA+B,EAC5B,EAAE,OAAO,GAAG,CAAC;;;CAIzC,OAAO,8BACL,YACA,eACA,gBACY;AACZ,MAAI;GACF,MAAM,eAAe,QAAQ,WAAW;AAExC,UAAO,IAAI,WADQ,WAAW,8BAA8B,cAAc,cAAc,EACtD,eAAe,eAAe;WACzD,KAAc;AACrB,SAAM,IAAI,MAAM,yBAAyB,MAAM;;;;CAKnD,gCAAmD;EACjD,MAAM,UAAU,KAAK;EACrB,MAAM,WAAW,KAAK,KAAM,KAAK,gBAAgB,UAAW,EAAE;EAC9D,MAAM,YAAY,IAAI,WAAW,SAAS;EAC1C,IAAI,YAAY;EAChB,IAAI,WAAW;EACf,IAAI,cAAc;AAClB,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,eAAe,KAAK;AAE3C,iBADe,KAAK,YAAY,GACX,SAAS,EAAE,CAAC,SAAS,SAAS,IAAI,GAAG;AAC1D,eAAY;AAEZ,OAAI,YAAY,KAAK,MAAM,KAAK,gBAAgB,GAAG;AACjD,QAAI,MAAM,KAAK,gBAAgB,KAAK,WAAW,MAAM,EACnD,eAAc,YAAY,SAAS,GAAG,IAAI;AAE5C,cAAU,aAAa,OAAO,SAAS,aAAa,EAAE;AACtD,kBAAc;AACd,eAAW;AACX;;;AAIJ,SAAO;;;CAIT,OAAe,8BAA8B,WAAuB,eAAwC;EAC1G,MAAM,UAAU;EAChB,MAAM,gBAAiB,UAAU,SAAS,IAAK;EAC/C,MAAM,aAAa,IAAI,MAAc,cAAc;EACnD,IAAI,WAAW;AACf,OAAK,IAAI,IAAI,GAAG,IAAI,eAAe,KAAK;GAEtC,IAAI,aADS,UAAU,KAAK,MAAO,IAAI,UAAW,EAAE,EAC9B,SAAS,EAAE;AACjC,OAAI,WAAW,SAAS,EACtB,cAAa,IAAI,OAAO,IAAI,WAAW,OAAO,GAAG;GAEnD,MAAM,SAAS,WAAW,MAAM,UAAU,WAAW,QAAQ;GAC7D,MAAM,QAAQ,KAAK,MAAM,KAAK,IAAI,SAAS;GAC3C,MAAM,eAAe,KAAK,IAAI;GAC9B,MAAM,WAAW,SAAS,IAAI,YAAY,IAAI,UAAU,KAAK;AAC7D,cAAW,YAAY,OAAO,SAAS,QAAQ,EAAE;AACjD,eAAY,WAAW,WAAW;;AAEpC,SAAO;;;;;ACpHX,MAAa,8BAA8B,SAAS;CAClD,CAAC,QAAQ,EAAE,MAAM;EAAC,EAAE,QAAQ,EAAE;EAAE,EAAE,QAAQ,EAAE;EAAE,EAAE,QAAQ,EAAE;EAAE,EAAE,QAAQ,EAAE;EAAC,CAAC,CAAC;CAC3E,CAAC,OAAO,YAAY;CACpB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,UAAU,CAAC;CAC3C,CAAC;AAEF,MAAa,8BAA8B,EAAE,WAAW,WAAW;AAenE,IAAa,iBAAb,MAAa,uBAAuB,cAA8E;;;oBAC5F,KAAK;;CAEzB,WAA2B,iBAAiB;AAC1C,SAAO,EAAE,MAAM,6BAA6B,6BAA6B;GACvE,SAAS,eAAe;AACtB,WAAO,IAAI,SAAS;KAClB,CAAC,QAAQ,WAAW,kBAAkB,CAAC;KACvC,CAAC,OAAO,WAAW,2BAA2B,CAAC;KAC/C,CAAC,mBAAmB,WAAW,eAAe;KAC/C,CAAC;;GAEJ,SAAS,UAAU;AACjB,WAAO,WAAW,8BAChB,MAAM,IAAI,MAAM,EAChB,MAAM,IAAI,OAAO,EACjB,MAAM,IAAI,kBAAkB,CAC7B;;GAEJ,CAAC;;CAGJ,OAAc,OAAO,SAA4E;AAQ/F,SAAO,IAAI,eANT,gBAAgB,UACZ,QAAQ,aACR,QAAQ,gBAAgB,aACtB,WAAW,8BAA8B,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,GAC5F,IAAI,WAAW,QAAQ,MAAM,QAAQ,MAAM,QAAQ,eAAe,CAErC;;;;;;;;;AClDzC,MAAa,cAAc;CAEzB,OAAO;CAEP,SAAS;CAET,WAAW;CAEX,wBAAwB;CAExB,kCAAkC;CAElC,gCAAgC;CACjC;;;;;AAQD,MAAa,aAAa;CAExB,iBAAiB;CAEjB,iBAAiB;CAClB;;;AC3BD,IAAY,wBAAL,yBAAA,uBAAA;AACL,uBAAA,sBAAA,gBAAA,SAAA;AACA,uBAAA,sBAAA,gBAAA,SAAA;;KACD;AAED,MAAM,6BAA6B,SAAS;CAC1C,CAAC,sBAAsB,SAASA,IAAE,QAAQ,CAAC;CAC3C,CAAC,sBAAsB,UAAUA,IAAE,QAAQ,CAAC;CAC5C,CAAC,sBAAsB,gBAAgBA,IAAE,QAAQ,CAAC,UAAU,CAAC;CAC7D,CAAA,OAAmCA,IAAE,QAAQ,CAAC,UAAU,CAAC;CACzD,CAAA,OAAmCA,IAAE,WAAW,eAAe,CAAC;CACjE,CAAC;AAaF,IAAa,uBAAb,MAAa,6BAA6B,cAGxC;CACA,WAA2B,iBAAiB;AAC1C,SAAOA,IAAE,MAAM,2BAA2B,IAAI,2BAA2B,KAAK;GAC5E,SAAS,UAAU;IACjB,MAAM,MAA4C,SAAS,QAAQ,MAAM;AAEzE,QAAI,IAAA,OAEF,eAAe,qBACb,MAAM,IAAA,MAAqC,CAC5C,CACF;AAED,WAAO;;GAET,SAAS,WAAW;IAClB,MAAM,MAAM,OAAO,OAAO;AAC1B,QAAI,IAAA,OAAsC,OAAO,IAAA,MAAqC,CAAC,iBAAiB;AACxG,WAAO;;GAEV,CAAC;;CAGJ,OAAc,OAAO,SAA4C;EAC/D,MAAM,MAA4C,IAAI,SAAS;GAC7D,CAAC,sBAAsB,SAAS,QAAQ,QAAQ;GAChD,CAAC,sBAAsB,UAAU,KAAK,OAAO,QAAQ,UAAU,SAAS,IAAI,KAAK,KAAK,IAAI,IAAK,CAAC;GAChG,CACE,sBAAsB,gBACtB,QAAQ,iBAAiB,KAAK,MAAM,QAAQ,eAAe,SAAS,GAAG,IAAK,GAAG,KAAA,EAChF;GACD,CAAA,OAAmC,QAAQ,WAAW;GACtD,CAAA,OAEE,QAAQ,sBAAsB,iBAC1B,QAAQ,aACR,eAAe,OAAO,EAAE,YAAY,QAAQ,YAAY,CAAC,CAC9D;GACF,CAAC;AAEF,SAAO,IAAI,qBAAqB,2BAA2B,MAAM,IAAI,OAAO,CAAC,CAAC;;CAGhF,IAAW,UAAU;AACnB,SAAO,KAAK,UAAU,IAAI,sBAAsB,QAAQ;;CAG1D,IAAW,WAAW;AACpB,yBAAO,IAAI,KAAK,KAAK,UAAU,IAAI,sBAAsB,SAAS,GAAG,IAAK;;CAG5E,IAAW,iBAAiB;AAC1B,SAAO,KAAK,UAAU,IAAI,sBAAsB,eAAe,mBAE3D,IAAI,KAAK,KAAK,UAAU,IAAI,sBAAsB,eAAe,GAAI,IAAK,GAC1E,KAAA;;CAGN,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC;;CAG7D,IAAW,aAAa;AACtB,SAAO,KAAK,UAAU,IAAA,MAAqC,CAAC;;CAG9D,cAAqB,YAAyC;AAC5D,OAAK,UAAU,IAAA,OAEb,sBAAsB,iBAAiB,aAAa,eAAe,OAAO,EAAE,YAAY,CAAC,CAC1F;;;;;AChFL,IAAY,yBAAL,yBAAA,wBAAA;AACL,wBAAA,uBAAA,SAAA,MAAA;;KACD;AAED,IAAa,gBAAb,MAAa,cAAc;CAKzB,YAAmB,SAA+B;AAChD,OAAK,UACH,QAAQ,mBAAmB,uBAAuB,QAAQ,UAAU,qBAAqB,OAAO,QAAQ,QAAQ;AAClH,OAAK,mBACH,QAAQ,4BAA4B,mBAChC,QAAQ,mBACR,iBAAiB,OAAO,EAAE,kBAAkB,QAAQ,kBAAkB,CAAC;AAC7E,OAAK,qBACH,QAAQ,8BAA8B,qBAClC,QAAQ,qBACR,mBAAmB,OAAO,EAAE,oBAAoB,QAAQ,oBAAoB,CAAC;AAEnF,MAAI,KAAK,iBAAiB,QAAQ,IAAA,GAA+B,KAAK,KAAA,EACpE,MAAK,iBAAiB,QAAQ,IAAA,IAAgC,WAAW,gBAAgB;;CAI7F,cAAqB,YAAyC;AAC5D,OAAK,QAAQ,cAAc,WAAW;;CAGxC,iBAAwB,OAAe,OAAe;AACpD,OAAK,QAAQ,WAAW,UAAU,OAAO,MAAM;;;;;;;CAQjD,OAAc,+BACZ,YAIA,SACA;EACA,MAAM,iBACJ,sBAAsB,iBAClB,aACA,sBAAsB,aACpB,eAAe,OAAO,EAAE,YAAY,CAAC,GACrC,eAAe,OAAO;GACpB,MAAM,WAAW;GACjB,MAAM,WAAW;GACjB,gBAAgB,WAAW;GAC5B,CAAC;AAEV,SAAO,IAAI,cAAc,EAAE,SAAS,qBAAqB,OAAO;GAAE,YAAY;GAAgB;GAAS,CAAC,EAAE,CAAC;;CAG7G,OAAc,UAAU,OAAmB;EACzC,MAAM,MAAM,IAAI,UAAU,MAAM;AAGhC,SAAO,IAAI,cAAc;GACvB,SAHc,qBAAqB,OAAO,IAAI,QAAQ;GAItD,kBAAkB,IAAI;GACtB,oBAAoB,IAAI;GACzB,CAAC;;CAGJ,MAAa,cACX,SAIA,KACA;AAMA,UAAQ,MALI,IAAI,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ;;CAGxD,MAAa,sBAAsB,SAA8B,KAA+B;AAM9F,UAAQ,MALI,IAAI,IAAI;GAClB,kBAAkB,KAAK;GACvB,oBAAoB,KAAK;GACzB,SAAS,KAAK,QAAQ,QAAQ;GAC/B,CAAC,CACgB,OAAO,aAAa,SAAS,IAAI,EAAE,QAAQ;;;;;;;;;ACzGjE,MAAa,uBAAuB;;;;;AAMpC,MAAa,gBAAgB;CAC3B,QAAQ;CACR,aAAa;CACb,KAAK;CACL,KAAK;CACL,KAAK;CACL,MAAM;CACN,KAAK;CACL,iBAAiB;CAClB;;;;;;;ACZD,SAAS,iBAAoB,KAAgB;CAC3C,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAO,KAAK,MAAM,gBAAgB,MAAM,GAAG,CAAC;;;;;AAM9C,SAAgB,uBAAuB,MAAkB,SAAqB,QAAuC;AACnH,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAEhD,KAAI,CAAC,QAAQ,IACX,OAAM,IAAI,YAAY,wBAAwB;AAGhD,QAAO,MAAM;AACb,SAAQ,cAAc;EACpB,MAAM,KAAK,kBAAkB;EAC7B,KAAK,sBAAsB,KAAK,2BAA2B,CAAC;EAC7D;AACD,QAAO;EAAE;EAAQ;EAAS;;;;;AAM5B,SAAgB,yBAAyB,KAAyB;CAEhE,MAAM,aADU,iBAAuC,IAAI,CAChC;CAC3B,MAAM,aAAa,sBAAsB,WAAW,IAAI;AACxD,QAAO,WAAW,8BAA8B,YAAY,WAAW,KAAK;;;;;AAM9E,SAAgB,qBAAqB,KAA8B;AAEjE,QADgB,iBAA2C,IAAI,CAChD,OAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owf/token-status-list",
-  "version": "0.2.0",
+  "version": "0.3.0-alpha-20260508181749",
   "files": [
     "dist"
   ],
@@ -30,8 +30,8 @@
     "cbor-x": "^1.6.4",
     "pako": "^2.1.0",
     "zod": "^4.4.3",
-    "@owf/cose": "0.2.0",
-    "@owf/identity-common": "0.2.0"
+    "@owf/cose": "0.3.0-alpha-20260508181749",
+    "@owf/identity-common": "0.3.0-alpha-20260508181749"
   },
   "devDependencies": {
     "@types/pako": "^2.0.4"