@psnext/slingcli 3.0.20260827-1 → 3.3.20260911-1

package/node_modules/ip-address/dist/v6/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/v6/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,IAAI,GAAG,GAAG,CAAC;AACX,QAAA,MAAM,GAAG,CAAC,CAAC;AAExB;;;;GAIG;AACU,QAAA,MAAM,GAA0C;IAC3D,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,oBAAoB;IACvB,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,UAAU;CACN,CAAC;AAEX;;;;GAIG;AACU,QAAA,KAAK,GAA0C;IAC1D,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,2CAA2C;IAC1D,aAAa,EAAE,oCAAoC;IACnD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,mCAAmC;IAClD,aAAa,EAAE,kCAAkC;IACjD,aAAa,EAAE,yBAAyB;IACxC,aAAa,EAAE,2BAA2B;IAC1C,aAAa,EAAE,yBAAyB;IACxC,cAAc,EAAE,2BAA2B;IAC3C,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,2CAA2C;IAC5D,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,aAAa;IAC9B,UAAU,EAAE,WAAW;IACvB,WAAW,EAAE,oBAAoB;IACjC,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,mBAAmB;CAC7B,CAAC;AAEX;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;;GAIG;AACU,QAAA,cAAc,GAAG,0CAA0C,CAAC;AAEzE;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;GAIG;AACU,QAAA,cAAc,GAAG,MAAM,CAAC;AAExB,QAAA,MAAM,GAAG,oDAAoD,CAAC;AAC9D,QAAA,gBAAgB,GAAG,+CAA+C,CAAC","sourcesContent":["export const BITS = 128;\nexport const GROUPS = 8;\n\n/**\n * Represents IPv6 address scopes\n * @memberof Address6\n * @static\n */\nexport const SCOPES: { [key: number]: string | undefined } = {\n  0: 'Reserved',\n  1: 'Interface local',\n  2: 'Link local',\n  4: 'Admin local',\n  5: 'Site local',\n  8: 'Organization local',\n  14: 'Global',\n  15: 'Reserved',\n} as const;\n\n/**\n * Represents IPv6 address types\n * @memberof Address6\n * @static\n */\nexport const TYPES: { [key: string]: string | undefined } = {\n  'ff01::1/128': 'Multicast (All nodes on this interface)',\n  'ff01::2/128': 'Multicast (All routers on this interface)',\n  'ff02::1/128': 'Multicast (All nodes on this link)',\n  'ff02::2/128': 'Multicast (All routers on this link)',\n  'ff05::2/128': 'Multicast (All routers in this site)',\n  'ff02::5/128': 'Multicast (OSPFv3 AllSPF routers)',\n  'ff02::6/128': 'Multicast (OSPFv3 AllDR routers)',\n  'ff02::9/128': 'Multicast (RIP routers)',\n  'ff02::a/128': 'Multicast (EIGRP routers)',\n  'ff02::d/128': 'Multicast (PIM routers)',\n  'ff02::16/128': 'Multicast (MLDv2 reports)',\n  'ff01::fb/128': 'Multicast (mDNSv6)',\n  'ff02::fb/128': 'Multicast (mDNSv6)',\n  'ff05::fb/128': 'Multicast (mDNSv6)',\n  'ff02::1:2/128': 'Multicast (All DHCP servers and relay agents on this link)',\n  'ff05::1:2/128': 'Multicast (All DHCP servers and relay agents in this site)',\n  'ff02::1:3/128': 'Multicast (All DHCP servers on this link)',\n  'ff05::1:3/128': 'Multicast (All DHCP servers in this site)',\n  '::/128': 'Unspecified',\n  '::1/128': 'Loopback',\n  '::ffff:0:0/96': 'IPv4-mapped',\n  'ff00::/8': 'Multicast',\n  'fe80::/10': 'Link-local unicast',\n  'fc00::/7': 'Unique local',\n  '2002::/16': '6to4',\n  '2001:db8::/32': 'Documentation',\n  '64:ff9b::/96': 'NAT64 (well-known)',\n  '64:ff9b:1::/48': 'NAT64 (local-use)',\n} as const;\n\n/**\n * A regular expression that matches bad characters in an IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_CHARACTERS = /([^0-9a-f:/%])/gi;\n\n/**\n * A regular expression that matches an incorrect IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_ADDRESS = /([0-9a-f]{5,}|:{3,}|[^:]:$|^:[^:]|\\/$)/gi;\n\n/**\n * A regular expression that matches an IPv6 subnet\n * @memberof Address6\n * @static\n */\nexport const RE_SUBNET_STRING = /\\/\\d{1,3}(?=%|$)/;\n\n/**\n * A regular expression that matches an IPv6 zone\n * @memberof Address6\n * @static\n */\nexport const RE_ZONE_STRING = /%.*$/;\n\nexport const RE_URL = /^(?:\\[([0-9a-f:.]+)\\]|([0-9a-f:.]+))(?:[/?#].*)?$/i;\nexport const RE_URL_WITH_PORT = /^\\[([0-9a-f:.]+)\\]:([0-9]{1,5})(?:[/?#].*)?$/i;\n"]}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/v6/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,IAAI,GAAG,GAAG,CAAC;AACX,QAAA,MAAM,GAAG,CAAC,CAAC;AAExB;;;;GAIG;AACU,QAAA,MAAM,GAA0C;IAC3D,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,oBAAoB;IACvB,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,UAAU;CACN,CAAC;AAEX;;;;GAIG;AACU,QAAA,KAAK,GAA0C;IAC1D,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,2CAA2C;IAC1D,aAAa,EAAE,oCAAoC;IACnD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,mCAAmC;IAClD,aAAa,EAAE,kCAAkC;IACjD,aAAa,EAAE,yBAAyB;IACxC,aAAa,EAAE,2BAA2B;IAC1C,aAAa,EAAE,yBAAyB;IACxC,cAAc,EAAE,2BAA2B;IAC3C,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,2CAA2C;IAC5D,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,aAAa;IAC9B,UAAU,EAAE,WAAW;IACvB,WAAW,EAAE,oBAAoB;IACjC,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,cAAc;IAC7B,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,eAAe;IAChC,WAAW,EAAE,eAAe;IAC5B,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,iCAAiC;IAC9C,OAAO,EAAE,8BAA8B;IACvC,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,mBAAmB;CAC7B,CAAC;AAEX;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;;GAIG;AACU,QAAA,cAAc,GAAG,0CAA0C,CAAC;AAEzE;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;GAIG;AACU,QAAA,cAAc,GAAG,MAAM,CAAC;AAExB,QAAA,MAAM,GAAG,oDAAoD,CAAC;AAC9D,QAAA,gBAAgB,GAAG,+CAA+C,CAAC;AAEhF;;;;;;;;;;;;GAYG;AACU,QAAA,eAAe,GAA6D;IACvF,CAAC,SAAS,EAAE,kBAAkB,EAAE,KAAK,CAAC;IACtC,CAAC,QAAQ,EAAE,qBAAqB,EAAE,KAAK,CAAC;IACxC,CAAC,eAAe,EAAE,qBAAqB,EAAE,KAAK,CAAC;IAC/C,CAAC,cAAc,EAAE,qBAAqB,EAAE,IAAI,CAAC;IAC7C,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,KAAK,CAAC;IAChD,CAAC,UAAU,EAAE,4BAA4B,EAAE,KAAK,CAAC;IACjD,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,KAAK,CAAC;IAC9C,CAAC,WAAW,EAAE,2BAA2B,EAAE,KAAK,CAAC;IACjD,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC;IAC9B,CAAC,eAAe,EAAE,+BAA+B,EAAE,IAAI,CAAC;IACxD,CAAC,eAAe,EAAE,2CAA2C,EAAE,IAAI,CAAC;IACpE,CAAC,eAAe,EAAE,8CAA8C,EAAE,IAAI,CAAC;IACvE,CAAC,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC;IACtC,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC;IAC5B,CAAC,iBAAiB,EAAE,UAAU,EAAE,IAAI,CAAC;IACrC,CAAC,cAAc,EAAE,gCAAgC,EAAE,IAAI,CAAC;IACxD,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC;IAClC,CAAC,cAAc,EAAE,oDAAoD,EAAE,IAAI,CAAC;IAC5E,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC;IACzC,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC;IAC5B,CAAC,mBAAmB,EAAE,iCAAiC,EAAE,IAAI,CAAC;IAC9D,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,CAAC;IACrC,CAAC,WAAW,EAAE,6BAA6B,EAAE,KAAK,CAAC;IACnD,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC;IACnC,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,CAAC;CAC3C,CAAC","sourcesContent":["export const BITS = 128;\nexport const GROUPS = 8;\n\n/**\n * Represents IPv6 address scopes\n * @memberof Address6\n * @static\n */\nexport const SCOPES: { [key: number]: string | undefined } = {\n  0: 'Reserved',\n  1: 'Interface local',\n  2: 'Link local',\n  4: 'Admin local',\n  5: 'Site local',\n  8: 'Organization local',\n  14: 'Global',\n  15: 'Reserved',\n} as const;\n\n/**\n * Represents IPv6 address types\n * @memberof Address6\n * @static\n */\nexport const TYPES: { [key: string]: string | undefined } = {\n  'ff01::1/128': 'Multicast (All nodes on this interface)',\n  'ff01::2/128': 'Multicast (All routers on this interface)',\n  'ff02::1/128': 'Multicast (All nodes on this link)',\n  'ff02::2/128': 'Multicast (All routers on this link)',\n  'ff05::2/128': 'Multicast (All routers in this site)',\n  'ff02::5/128': 'Multicast (OSPFv3 AllSPF routers)',\n  'ff02::6/128': 'Multicast (OSPFv3 AllDR routers)',\n  'ff02::9/128': 'Multicast (RIP routers)',\n  'ff02::a/128': 'Multicast (EIGRP routers)',\n  'ff02::d/128': 'Multicast (PIM routers)',\n  'ff02::16/128': 'Multicast (MLDv2 reports)',\n  'ff01::fb/128': 'Multicast (mDNSv6)',\n  'ff02::fb/128': 'Multicast (mDNSv6)',\n  'ff05::fb/128': 'Multicast (mDNSv6)',\n  'ff02::1:2/128': 'Multicast (All DHCP servers and relay agents on this link)',\n  'ff05::1:2/128': 'Multicast (All DHCP servers and relay agents in this site)',\n  'ff02::1:3/128': 'Multicast (All DHCP servers on this link)',\n  'ff05::1:3/128': 'Multicast (All DHCP servers in this site)',\n  '::/128': 'Unspecified',\n  '::1/128': 'Loopback',\n  '::ffff:0:0/96': 'IPv4-mapped',\n  'ff00::/8': 'Multicast',\n  'fe80::/10': 'Link-local unicast',\n  'fc00::/7': 'Unique local',\n  '2001::/32': 'Teredo',\n  '2001:2::/48': 'Benchmarking',\n  '2002::/16': '6to4',\n  '2001:db8::/32': 'Documentation',\n  '3fff::/20': 'Documentation',\n  '100::/64': 'Discard-only',\n  'fec0::/10': 'Site-local unicast (deprecated)',\n  '::/96': 'IPv4-compatible (deprecated)',\n  '64:ff9b::/96': 'NAT64 (well-known)',\n  '64:ff9b:1::/48': 'NAT64 (local-use)',\n} as const;\n\n/**\n * A regular expression that matches bad characters in an IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_CHARACTERS = /([^0-9a-f:/%])/gi;\n\n/**\n * A regular expression that matches an incorrect IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_ADDRESS = /([0-9a-f]{5,}|:{3,}|[^:]:$|^:[^:]|\\/$)/gi;\n\n/**\n * A regular expression that matches an IPv6 subnet\n * @memberof Address6\n * @static\n */\nexport const RE_SUBNET_STRING = /\\/\\d{1,3}(?=%|$)/;\n\n/**\n * A regular expression that matches an IPv6 zone\n * @memberof Address6\n * @static\n */\nexport const RE_ZONE_STRING = /%.*$/;\n\nexport const RE_URL = /^(?:\\[([0-9a-f:.]+)\\]|([0-9a-f:.]+))(?:[/?#].*)?$/i;\nexport const RE_URL_WITH_PORT = /^\\[([0-9a-f:.]+)\\]:([0-9]{1,5})(?:[/?#].*)?$/i;\n\n/**\n * The IANA IPv6 Special-Purpose Address Registry\n * (https://www.iana.org/assignments/iana-ipv6-special-registry/), one entry\n * per block: `[cidr, name, globallyReachable]`. A `null` reachability means\n * the registry says N/A or leaves the column blank; N/A blocks (Teredo, 6to4)\n * are treated as not globally reachable, since a packet to one needs a relay,\n * and blank blocks inherit the answer of the block containing them.\n *\n * `Address6.isGlobal()` answers from the most specific entry containing the\n * address, after delegating IPv4-mapped and NAT64 well-known addresses to the\n * embedded IPv4 address. `test/data/iana-corpus.json` is generated from the\n * registry's CSV and pins this table to it.\n */\nexport const SPECIAL_PURPOSE: ReadonlyArray<readonly [string, string, boolean | null]> = [\n  ['::1/128', 'Loopback Address', false],\n  ['::/128', 'Unspecified Address', false],\n  ['::ffff:0:0/96', 'IPv4-mapped Address', false],\n  ['64:ff9b::/96', 'IPv4-IPv6 Translat.', true],\n  ['64:ff9b:1::/48', 'IPv4-IPv6 Translat.', false],\n  ['100::/64', 'Discard-Only Address Block', false],\n  ['100:0:0:1::/64', 'Dummy IPv6 Prefix', false],\n  ['2001::/23', 'IETF Protocol Assignments', false],\n  ['2001::/32', 'TEREDO', false],\n  ['2001:1::1/128', 'Port Control Protocol Anycast', true],\n  ['2001:1::2/128', 'Traversal Using Relays around NAT Anycast', true],\n  ['2001:1::3/128', 'DNS-SD Service Registration Protocol Anycast', true],\n  ['2001:2::/48', 'Benchmarking', false],\n  ['2001:3::/32', 'AMT', true],\n  ['2001:4:112::/48', 'AS112-v6', true],\n  ['2001:10::/28', 'Deprecated (previously ORCHID)', null],\n  ['2001:20::/28', 'ORCHIDv2', true],\n  ['2001:30::/28', 'Drone Remote ID Protocol Entity Tags (DETs) Prefix', true],\n  ['2001:db8::/32', 'Documentation', false],\n  ['2002::/16', '6to4', false],\n  ['2620:4f:8000::/48', 'Direct Delegation AS112 Service', true],\n  ['3fff::/20', 'Documentation', false],\n  ['5f00::/16', 'Segment Routing (SRv6) SIDs', false],\n  ['fc00::/7', 'Unique-Local', false],\n  ['fe80::/10', 'Link-Local Unicast', false],\n];\n"]}

package/node_modules/ip-address/package.json

@@ -16,7 +16,7 @@
     "bigint",
     "browser"
   ],
-  "version": "10.5.0",
+  "version": "10.7.0",
   "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
   "license": "MIT",
   "main": "dist/ip-address.js",

package/node_modules/jose/dist/types/index.d.ts

@@ -48,8 +48,7 @@ import * as base64url from './util/base64url.js';
 export { base64url };
 export type { AnyJWK, CompactDecryptResult, CompactJWEHeaderParameters, CompactJWSHeaderParameters, CompactVerifyResult, CritOption, CryptoKey, DecryptOptions, EncryptOptions, FlattenedDecryptResult, FlattenedJWE, FlattenedJWS, FlattenedJWSInput, FlattenedVerifyResult, GeneralDecryptResult, GeneralJWE, GeneralJWS, GeneralJWSInput, GeneralVerifyResult, GetKeyFunction, JoseHeaderParameters, JSONWebKeySet, JWEContentEncryptionAlgorithm, JWEHeaderParameters, JWEKeyManagementAlgorithm, JWEKeyManagementHeaderParameters, JWK_AKP_Private, JWK_AKP_Public, JWK_EC_Private, JWK_EC_Public, JWK_oct, JWK_OKP_Private, JWK_OKP_Public, JWK_RSA_Private, JWK_RSA_Public, JWK, JWKKeyType, JWKParameters, JWSAlgorithm, JWSHeaderParameters, JWTClaimVerificationOptions, JWTDecryptResult, JWTHeaderParameters, JWTPayload, JWTVerifyResult, KeyInput, KeyObject, ProduceJWT, ResolvedKey, SignOptions, VerifyOptions, } from './types.d.ts';
 /**
- * In prior releases this indicated whether a Node.js-specific build was loaded, this is now fixed
- * to `"WebCryptoAPI"`
+ * Identified the loaded runtime-specific build in prior releases; now always `"WebCryptoAPI"`.
  *
  * @deprecated Remove any runtime branching on this value; it is always `"WebCryptoAPI"`.
  */

package/node_modules/jose/dist/types/jwe/compact/decrypt.d.ts

@@ -1,37 +1,24 @@
-import type * as types from '../../types.d.ts';
-/**
- * Interface for Compact JWE Decryption dynamic key resolution. No token components have been
- * verified at the time of this function call.
- */
-export interface CompactDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.CompactJWEHeaderParameters, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
+import type * as t from '../../types.d.ts';
+/** Resolves a key for Compact JWE decryption from unverified headers and token data. */
+export interface CompactDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWEHeaderParameters, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
 }
 /**
  * Decrypts a Compact JWE.
  *
- * @param jwe Compact JWE.
- * @param key Private Key or Secret to decrypt the JWE with. See
+ * @param key Private key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
  */
-export declare function compactDecrypt(jwe: string | Uint8Array, key: types.KeyInput, options?: types.DecryptOptions): Promise<types.CompactDecryptResult>;
+export declare function compactDecrypt(jwe: string | Uint8Array, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.CompactDecryptResult>;
 /**
- * Decrypts a Compact JWE, resolving the key dynamically. The result additionally carries the
- * {@link types.ResolvedKey.key resolved key}.
+ * Decrypts a Compact JWE with a dynamically resolved key, included in the result.
  *
- * @param jwe Compact JWE.
- * @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
+ * @param getKey Resolves a private key or shared secret from unverified token data.
  */
-export declare function compactDecrypt<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jwe: string | Uint8Array, getKey: CompactDecryptGetKey<KeyType>, options?: types.DecryptOptions): Promise<types.CompactDecryptResult & types.ResolvedKey<KeyType>>;
+export declare function compactDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: string | Uint8Array, getKey: CompactDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.CompactDecryptResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Decrypts a Compact JWE with a key or key resolver. The result includes `key` only when a resolver
+ * is used.
  *
- * @param jwe Compact JWE.
- * @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
+ * @param key Private key or shared secret, or a function resolving one.
  */
-export declare function compactDecrypt(jwe: string | Uint8Array, key: types.KeyInput | CompactDecryptGetKey, options?: types.DecryptOptions): Promise<types.CompactDecryptResult & Partial<types.ResolvedKey>>;
+export declare function compactDecrypt(jwe: string | Uint8Array, key: t.KeyInput | CompactDecryptGetKey, options?: t.DecryptOptions): Promise<t.CompactDecryptResult & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/jwe/compact/encrypt.d.ts

@@ -1,54 +1,40 @@
-import type * as types from '../../types.d.ts';
-/** The CompactEncrypt class is used to build and encrypt Compact JWE strings. */
+import type * as t from '../../types.d.ts';
+/** Builds and encrypts Compact JWE strings. */
 export declare class CompactEncrypt {
     #private;
     /**
-     * {@link CompactEncrypt} constructor
+     * Creates a Compact JWE encryptor.
      *
      * @param plaintext Binary representation of the plaintext to encrypt.
      */
     constructor(plaintext: Uint8Array);
     /**
-     * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
-     * "enc" (Encryption Algorithm) Header Parameter.
+     * Sets a content encryption key instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
-     *
-     * @param cek JWE Content Encryption Key.
+     * @deprecated Use only for testing and vector validation.
      */
     setContentEncryptionKey(cek: Uint8Array): this;
     /**
-     * Sets the JWE Initialization Vector to use for content encryption, by default a random suitable
-     * one is generated for the JWE "enc" (Encryption Algorithm) Header Parameter.
-     *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * Sets the content encryption IV instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @param iv JWE Initialization Vector.
+     * @deprecated Use only for testing and vector validation.
      */
     setInitializationVector(iv: Uint8Array): this;
+    /** Sets the JWE Protected Header. May only be called once. */
+    setProtectedHeader(protectedHeader: t.CompactJWEHeaderParameters): this;
     /**
-     * Sets the JWE Protected Header on the CompactEncrypt object.
-     *
-     * @param protectedHeader JWE Protected Header object.
-     */
-    setProtectedHeader(protectedHeader: types.CompactJWEHeaderParameters): this;
-    /**
-     * Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
-     * the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
-     * and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
-     * appropriate JOSE Header.
-     *
-     * @param parameters JWE Key Management parameters.
+     * Sets key management inputs such as ECDH-ES "apu"/"apv" or PBES2 "p2c". Use this method instead
+     * of header setters; the resulting parameters are added to the JOSE header. May only be called
+     * once.
      */
-    setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): this;
+    setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
     /**
-     * Encrypts and resolves the value of the Compact JWE string.
+     * Encrypts the plaintext as a Compact JWE.
      *
-     * @param key Public Key or Secret to encrypt the JWE with. See
+     * @param key Public key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
-     * @param options JWE Encryption options.
      */
-    encrypt(key: types.KeyInput, options?: types.EncryptOptions): Promise<string>;
+    encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<string>;
 }

package/node_modules/jose/dist/types/jwe/flattened/decrypt.d.ts

@@ -1,37 +1,24 @@
-import type * as types from '../../types.d.ts';
-/**
- * Interface for Flattened JWE Decryption dynamic key resolution. No token components have been
- * verified at the time of this function call.
- */
-export interface FlattenedDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWEHeaderParameters | undefined, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
+import type * as t from '../../types.d.ts';
+/** Resolves a key for Flattened JWE decryption from unverified headers and token data. */
+export interface FlattenedDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWEHeaderParameters | undefined, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
 }
 /**
  * Decrypts a Flattened JWE.
  *
- * @param jwe Flattened JWE.
- * @param key Private Key or Secret to decrypt the JWE with. See
+ * @param key Private key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
  */
-export declare function flattenedDecrypt(jwe: types.FlattenedJWE, key: types.KeyInput, options?: types.DecryptOptions): Promise<types.FlattenedDecryptResult>;
+export declare function flattenedDecrypt(jwe: t.FlattenedJWE, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult>;
 /**
- * Decrypts a Flattened JWE, resolving the key dynamically. The result additionally carries the
- * {@link types.ResolvedKey.key resolved key}.
+ * Decrypts a Flattened JWE with a dynamically resolved key, included in the result.
  *
- * @param jwe Flattened JWE.
- * @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
+ * @param getKey Resolves a private key or shared secret from unverified token data.
  */
-export declare function flattenedDecrypt<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jwe: types.FlattenedJWE, getKey: FlattenedDecryptGetKey<KeyType>, options?: types.DecryptOptions): Promise<types.FlattenedDecryptResult & types.ResolvedKey<KeyType>>;
+export declare function flattenedDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: t.FlattenedJWE, getKey: FlattenedDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Decrypts a Flattened JWE with a key or key resolver. The result includes `key` only when a
+ * resolver is used.
  *
- * @param jwe Flattened JWE.
- * @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
+ * @param key Private key or shared secret, or a function resolving one.
  */
-export declare function flattenedDecrypt(jwe: types.FlattenedJWE, key: types.KeyInput | FlattenedDecryptGetKey, options?: types.DecryptOptions): Promise<types.FlattenedDecryptResult & Partial<types.ResolvedKey>>;
+export declare function flattenedDecrypt(jwe: t.FlattenedJWE, key: t.KeyInput | FlattenedDecryptGetKey, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/jwe/flattened/encrypt.d.ts

@@ -1,72 +1,46 @@
-import type * as types from '../../types.d.ts';
-/** The FlattenedEncrypt class is used to build and encrypt Flattened JWE objects. */
+import type * as t from '../../types.d.ts';
+/** Builds and encrypts Flattened JWE objects. */
 export declare class FlattenedEncrypt {
     #private;
     /**
-     * {@link FlattenedEncrypt} constructor
+     * Creates a Flattened JWE encryptor.
      *
      * @param plaintext Binary representation of the plaintext to encrypt.
      */
     constructor(plaintext: Uint8Array);
     /**
-     * Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
-     * the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
-     * and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
-     * appropriate JOSE Header.
-     *
-     * @param parameters JWE Key Management parameters.
-     */
-    setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): this;
-    /**
-     * Sets the JWE Protected Header on the FlattenedEncrypt object.
-     *
-     * @param protectedHeader JWE Protected Header.
-     */
-    setProtectedHeader(protectedHeader: types.JWEHeaderParameters): this;
-    /**
-     * Sets the JWE Shared Unprotected Header on the FlattenedEncrypt object.
-     *
-     * @param sharedUnprotectedHeader JWE Shared Unprotected Header.
-     */
-    setSharedUnprotectedHeader(sharedUnprotectedHeader: types.JWEHeaderParameters): this;
-    /**
-     * Sets the JWE Per-Recipient Unprotected Header on the FlattenedEncrypt object.
-     *
-     * @param unprotectedHeader JWE Per-Recipient Unprotected Header.
-     */
-    setUnprotectedHeader(unprotectedHeader: types.JWEHeaderParameters): this;
-    /**
-     * Sets the Additional Authenticated Data on the FlattenedEncrypt object.
-     *
-     * @param aad Additional Authenticated Data.
-     */
+     * Sets key management inputs such as ECDH-ES "apu"/"apv" or PBES2 "p2c". Use this method instead
+     * of header setters; the resulting parameters are added to the JOSE header. May only be called
+     * once.
+     */
+    setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
+    /** Sets the JWE Protected Header. May only be called once. */
+    setProtectedHeader(protectedHeader: t.JWEHeaderParameters): this;
+    /** Sets the JWE Shared Unprotected Header. May only be called once. */
+    setSharedUnprotectedHeader(sharedUnprotectedHeader: t.JWEHeaderParameters): this;
+    /** Sets the JWE Per-Recipient Unprotected Header. May only be called once. */
+    setUnprotectedHeader(unprotectedHeader: t.JWEHeaderParameters): this;
+    /** Sets additional data to authenticate without encrypting it. */
     setAdditionalAuthenticatedData(aad: Uint8Array): this;
     /**
-     * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
-     * "enc" (Encryption Algorithm) Header Parameter.
+     * Sets a content encryption key instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
-     *
-     * @param cek JWE Content Encryption Key.
+     * @deprecated Use only for testing and vector validation.
      */
     setContentEncryptionKey(cek: Uint8Array): this;
     /**
-     * Sets the JWE Initialization Vector to use for content encryption, by default a random suitable
-     * one is generated for the JWE "enc" (Encryption Algorithm) Header Parameter.
-     *
-     * @deprecated You should not use this method. It is only really intended for test and vector
-     *   validation purposes.
+     * Sets the content encryption IV instead of generating a random one for the JWE "enc" algorithm.
+     * May only be called once.
      *
-     * @param iv JWE Initialization Vector.
+     * @deprecated Use only for testing and vector validation.
      */
     setInitializationVector(iv: Uint8Array): this;
     /**
-     * Encrypts and resolves the value of the Flattened JWE object.
+     * Encrypts the plaintext as a Flattened JWE.
      *
-     * @param key Public Key or Secret to encrypt the JWE with. See
+     * @param key Public key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
-     * @param options JWE Encryption options.
      */
-    encrypt(key: types.KeyInput, options?: types.EncryptOptions): Promise<types.FlattenedJWE>;
+    encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<t.FlattenedJWE>;
 }

package/node_modules/jose/dist/types/jwe/general/decrypt.d.ts

@@ -1,43 +1,28 @@
-import type * as types from '../../types.d.ts';
-/**
- * Interface for General JWE Decryption dynamic key resolution. No token components have been
- * verified at the time of this function call.
- */
-export interface GeneralDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWEHeaderParameters | undefined, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
+import type * as t from '../../types.d.ts';
+/** Resolves a key for General JWE decryption from unverified headers and token data. */
+export interface GeneralDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWEHeaderParameters | undefined, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
 }
 /**
  * Decrypts a General JWE.
  *
- * > Note: The function iterates over the `recipients` array in the General JWE and returns the decryption
- * > result of the first recipient entry that can be successfully decrypted. The result only contains
- * > the plaintext and headers of that successfully decrypted recipient entry. Other recipient entries
- * > in the General JWE are not validated, and their headers are not included in the returned result.
- * > Recipients of a General JWE should only rely on the returned (decrypted) data.
+ * > Note: Returns plaintext and headers from the first recipient that decrypts successfully. Other
+ * > recipients may be inspected to enforce serialization rules, but their headers are not included in
+ * > the result. Rely only on the returned data.
  *
- * @param jwe General JWE.
- * @param key Private Key or Secret to decrypt the JWE with. See
+ * @param key Private key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
  */
-export declare function generalDecrypt(jwe: types.GeneralJWE, key: types.KeyInput, options?: types.DecryptOptions): Promise<types.GeneralDecryptResult>;
+export declare function generalDecrypt(jwe: t.GeneralJWE, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.GeneralDecryptResult>;
 /**
- * Decrypts a General JWE, resolving the key dynamically. The result additionally carries the
- * {@link types.ResolvedKey.key resolved key}.
+ * Decrypts a General JWE with a dynamically resolved key, included in the result.
  *
- * @param jwe General JWE.
- * @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
+ * @param getKey Resolves a private key or shared secret from unverified token data.
  */
-export declare function generalDecrypt<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jwe: types.GeneralJWE, getKey: GeneralDecryptGetKey<KeyType>, options?: types.DecryptOptions): Promise<types.GeneralDecryptResult & types.ResolvedKey<KeyType>>;
+export declare function generalDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: t.GeneralJWE, getKey: GeneralDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.GeneralDecryptResult & t.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Decrypts a General JWE with a key or key resolver. The result includes `key` only when a resolver
+ * is used.
  *
- * @param jwe General JWE.
- * @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- * @param options JWE Decryption options.
+ * @param key Private key or shared secret, or a function resolving one.
  */
-export declare function generalDecrypt(jwe: types.GeneralJWE, key: types.KeyInput | GeneralDecryptGetKey, options?: types.DecryptOptions): Promise<types.GeneralDecryptResult & Partial<types.ResolvedKey>>;
+export declare function generalDecrypt(jwe: t.GeneralJWE, key: t.KeyInput | GeneralDecryptGetKey, options?: t.DecryptOptions): Promise<t.GeneralDecryptResult & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/jwe/general/encrypt.d.ts

@@ -1,74 +1,51 @@
-import type * as types from '../../types.d.ts';
-/** Used to build General JWE object's individual recipients. */
+import type * as t from '../../types.d.ts';
+/** Configures an individual recipient in a General JWE. */
 export interface Recipient {
+    /** Sets the JWE Per-Recipient Unprotected Header. May only be called once. */
+    setUnprotectedHeader(unprotectedHeader: t.JWEHeaderParameters): Recipient;
     /**
-     * Sets the JWE Per-Recipient Unprotected Header on the Recipient object.
-     *
-     * @param unprotectedHeader JWE Per-Recipient Unprotected Header.
-     */
-    setUnprotectedHeader(unprotectedHeader: types.JWEHeaderParameters): Recipient;
-    /**
-     * Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
-     * the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
-     * and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
-     * appropriate JOSE Header.
-     *
-     * @param parameters JWE Key Management parameters.
+     * Sets key management inputs such as ECDH-ES "apu"/"apv" or PBES2 "p2c". Use this method instead
+     * of header setters; the resulting parameters are added to the JOSE header. May only be called
+     * once.
      */
-    setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): Recipient;
+    setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): Recipient;
     /**
-     * A shorthand for calling {@link GeneralEncrypt.addRecipient addRecipient()} on the enclosing
-     * {@link GeneralEncrypt} instance.
+     * Adds another recipient to the enclosing {@link GeneralEncrypt} and returns its configuration.
      *
-     * @param key Public Key or Secret to encrypt the Content Encryption Key for the recipient with.
-     *   See {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
-     * @param options JWE Encryption options.
+     * @param key Public key or shared secret. See
+     *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
      */
-    addRecipient(key: types.KeyInput, options?: types.CritOption): Recipient;
+    addRecipient(key: t.KeyInput, options?: t.CritOption): Recipient;
     /**
-     * A shorthand for calling {@link GeneralEncrypt.encrypt encrypt()} on the enclosing
-     * {@link GeneralEncrypt} instance. Takes no arguments — each recipient's key is supplied to
-     * {@link addRecipient}.
+     * Encrypts for all recipients on the enclosing {@link GeneralEncrypt}, using their configured
+     * keys.
      */
-    encrypt(): Promise<types.GeneralJWE>;
-    /** Returns the enclosing {@link GeneralEncrypt} instance */
+    encrypt(): Promise<t.GeneralJWE>;
+    /** Returns the enclosing {@link GeneralEncrypt} instance. */
     done(): GeneralEncrypt;
 }
-/** The GeneralEncrypt class is used to build and encrypt General JWE objects. */
+/** Builds and encrypts General JWE objects. */
 export declare class GeneralEncrypt {
     #private;
     /**
-     * {@link GeneralEncrypt} constructor
+     * Creates a General JWE encryptor.
      *
      * @param plaintext Binary representation of the plaintext to encrypt.
      */
     constructor(plaintext: Uint8Array);
     /**
-     * Adds an additional recipient for the General JWE object.
-     *
-     * @param key Public Key or Secret to encrypt the Content Encryption Key for the recipient with.
-     *   See {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
-     * @param options JWE Encryption options.
-     */
-    addRecipient(key: types.KeyInput, options?: types.CritOption): Recipient;
-    /**
-     * Sets the JWE Protected Header on the GeneralEncrypt object.
-     *
-     * @param protectedHeader JWE Protected Header object.
-     */
-    setProtectedHeader(protectedHeader: types.JWEHeaderParameters): this;
-    /**
-     * Sets the JWE Shared Unprotected Header on the GeneralEncrypt object.
-     *
-     * @param sharedUnprotectedHeader JWE Shared Unprotected Header object.
-     */
-    setSharedUnprotectedHeader(sharedUnprotectedHeader: types.JWEHeaderParameters): this;
-    /**
-     * Sets the Additional Authenticated Data on the GeneralEncrypt object.
+     * Adds a recipient and returns its configuration.
      *
-     * @param aad Additional Authenticated Data.
+     * @param key Public key or shared secret. See
+     *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
      */
+    addRecipient(key: t.KeyInput, options?: t.CritOption): Recipient;
+    /** Sets the JWE Protected Header. May only be called once. */
+    setProtectedHeader(protectedHeader: t.JWEHeaderParameters): this;
+    /** Sets the JWE Shared Unprotected Header. May only be called once. */
+    setSharedUnprotectedHeader(sharedUnprotectedHeader: t.JWEHeaderParameters): this;
+    /** Sets additional data to authenticate without encrypting it. */
     setAdditionalAuthenticatedData(aad: Uint8Array): this;
-    /** Encrypts and resolves the value of the General JWE object. */
-    encrypt(): Promise<types.GeneralJWE>;
+    /** Encrypts the plaintext as a General JWE. */
+    encrypt(): Promise<t.GeneralJWE>;
 }

package/node_modules/jose/dist/types/jwk/embedded.d.ts

@@ -1,13 +1,10 @@
-import type * as types from '../types.d.ts';
+import type * as t from '../types.d.ts';
 /**
- * EmbeddedJWK is an implementation of a {@link types.GetKeyFunction GetKeyFunction} intended to be
- * used with the JWS/JWT verify operations whenever you need to opt-in to verify signatures with a
- * public key embedded in the token's "jwk" (JSON Web Key) Header Parameter. It is recommended to
- * combine this with the verify function's `algorithms` option to define accepted JWS "alg"
- * (Algorithm) Header Parameter values.
+ * Resolves a verification key from an embedded "jwk" (JSON Web Key) Header Parameter. This key
+ * resolver opts JWS and JWT verification into trusting a public key supplied by the token. Use the
+ * verification function's `algorithms` option to restrict accepted algorithms.
  *
- * @param protectedHeader JWS Protected Header.
  * @param token The consumed JWS token.
  * @returns The public key from the JWS "jwk" (JSON Web Key) Header Parameter.
  */
-export declare function EmbeddedJWK(protectedHeader?: types.JWSHeaderParameters, token?: types.FlattenedJWSInput): Promise<types.CryptoKey>;
+export declare function EmbeddedJWK(protectedHeader?: t.JWSHeaderParameters, token?: t.FlattenedJWSInput): Promise<t.CryptoKey>;

package/node_modules/jose/dist/types/jwk/thumbprint.d.ts

@@ -1,17 +1,15 @@
-import type * as types from '../types.d.ts';
+import type * as t from '../types.d.ts';
 /**
- * Calculates a base64url-encoded JSON Web Key (JWK) Thumbprint
+ * Calculates a base64url-encoded JWK Thumbprint. CryptoKey inputs must be extractable.
  *
  * @param key Key to calculate the thumbprint for.
- * @param digestAlgorithm Digest Algorithm to use for calculating the thumbprint. Default is
- *   "sha256".
+ * @param digestAlgorithm Digest algorithm. Defaults to "sha256".
  */
-export declare function calculateJwkThumbprint(key: types.JWK | types.CryptoKey | types.KeyObject, digestAlgorithm?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;
+export declare function calculateJwkThumbprint(key: t.JWK | t.CryptoKey | t.KeyObject, digestAlgorithm?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;
 /**
- * Calculates a JSON Web Key (JWK) Thumbprint URI
+ * Calculates a JWK Thumbprint URI. CryptoKey inputs must be extractable.
  *
  * @param key Key to calculate the thumbprint for.
- * @param digestAlgorithm Digest Algorithm to use for calculating the thumbprint. Default is
- *   "sha256".
+ * @param digestAlgorithm Digest algorithm. Defaults to "sha256".
  */
-export declare function calculateJwkThumbprintUri(key: types.CryptoKey | types.KeyObject | types.JWK, digestAlgorithm?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;
+export declare function calculateJwkThumbprintUri(key: t.CryptoKey | t.KeyObject | t.JWK, digestAlgorithm?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;

package/node_modules/jose/dist/types/jwks/local.d.ts

@@ -1,20 +1,17 @@
-import type * as types from '../types.d.ts';
-/** The key resolution function returned by {@link createLocalJWKSet}. */
+import type * as t from '../types.d.ts';
+/** A key resolver created by {@link createLocalJWKSet}. */
 export interface LocalJWKSet {
-    (protectedHeader?: types.JWSHeaderParameters, token?: types.FlattenedJWSInput): Promise<types.CryptoKey>;
-    /** Returns a structured clone of the JSON Web Key Set this resolver was created with. */
-    jwks: () => types.JSONWebKeySet;
+    (protectedHeader?: t.JWSHeaderParameters, token?: t.FlattenedJWSInput): Promise<t.CryptoKey>;
+    /** Returns a structured clone of the original JSON Web Key Set. */
+    jwks: () => t.JSONWebKeySet;
 }
 /**
- * Returns a function that resolves a JWS JOSE Header to a public key object from a locally stored,
- * or otherwise available, JSON Web Key Set. Selection respects the header's "alg" (Algorithm) and
- * "kid" (Key ID) as well as the JWK's "use" (Public Key Use) and "key_ops" (Key Operations).
- * Exactly one key must match; if multiple keys match, the thrown `JWKSMultipleMatchingKeys` can be
- * iterated.
+ * Creates a resolver for a locally available JSON Web Key Set. Selection uses the header's "alg"
+ * (Algorithm) and "kid" (Key ID), and respects the JWK's "use" (Public Key Use) and "key_ops" (Key
+ * Operations). Exactly one key must match.
  *
- * > Note: The function's purpose is to resolve public keys used for verifying signatures and will not work
- * > for public encryption keys.
+ * > Note: Only public signature verification keys are supported, not public encryption keys.
  *
  * @param jwks JSON Web Key Set formatted object.
  */
-export declare function createLocalJWKSet(jwks: types.JSONWebKeySet): LocalJWKSet;
+export declare function createLocalJWKSet(jwks: t.JSONWebKeySet): LocalJWKSet;