@pulse-compute/jwt 0.0.0 → 1.0.0-beta.1

package/dist/options.js

@@ -0,0 +1,382 @@
+import { normalizeP256PublicKeyCoordinates } from '@pulse-compute/crypto';
+import { jwtError } from './errors.js';
+import { jwtDataRecord, jwtDenseArrayValues, } from './internal/data.js';
+export const JWT_ALGORITHMS = Object.freeze(['HS256', 'RS256', 'ES256', 'EdDSA']);
+const PRIVATE_JWK_MEMBERS = Object.freeze(['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'k']);
+const JWK_MEMBERS = new Set([
+    'kty', 'use', 'key_ops', 'alg', 'kid', 'ext',
+    'n', 'e', 'crv', 'x', 'y', 'x5c', 'x5t', 'x5t#S256',
+]);
+const ES256_JWK_MEMBERS = new Set([
+    'kty', 'crv', 'x', 'y', 'alg', 'use', 'key_ops', 'kid',
+]);
+const MAX_JWKS_KEYS = 16;
+const MAX_REQUIRED_CLAIMS = 32;
+const MAX_CLOCK_TOLERANCE_SECONDS = 300;
+const MAX_TOKEN_AGE_SECONDS = 31_536_000;
+/**
+ * G0 contract freeze only. G3 owns making these rules executable.
+ *
+ * JWT owns public JWK/JWKS shape and deterministic key selection. The
+ * crypto-owned adapter owns coordinate/signature decoding into fixed bytes.
+ */
+export const JWT_ES256_KEY_NORMALIZATION_CONTRACT = Object.freeze({
+    version: 'pulse.jwt.es256-key-normalization.v1',
+    status: 'executable-g3',
+    algorithm: 'ES256',
+    inlineJwk: Object.freeze({
+        requiredMembers: Object.freeze(['kty', 'crv', 'x', 'y']),
+        optionalMembers: Object.freeze([
+            'alg',
+            'use',
+            'key_ops',
+            'kid',
+        ]),
+        exactValues: Object.freeze({
+            kty: 'EC',
+            crv: 'P-256',
+            alg: 'absent-or-ES256',
+            use: 'absent-or-sig',
+            key_ops: 'absent-or-exactly-verify',
+        }),
+        coordinateEncoding: 'canonical-unpadded-base64url',
+        coordinateBytes: 32,
+        privateMembersRejected: true,
+        unknownMembersRejected: true,
+        certificateMembersRejected: true,
+    }),
+    jwks: Object.freeze({
+        kind: 'bounded-static-inline',
+        entriesMaximum: MAX_JWKS_KEYS,
+        remoteDiscovery: false,
+        fetch: false,
+        cache: false,
+        refresh: false,
+        duplicateKid: 'reject-entire-set',
+        selection: 'kid-exact-or-single-eligible-key',
+        selectedKeyFailure: 'terminal-no-retry',
+    }),
+    cryptoAdapter: Object.freeze({
+        publicKeyType: 'p256-public-key-bytes',
+        publicKeyEncoding: 'x-y-big-endian',
+        publicKeyBytes: 64,
+        signatureEncoding: 'jose-r-s-big-endian',
+        signatureBytes: 64,
+        derAccepted: false,
+        highS: 'accepted-if-otherwise-valid',
+    }),
+    exactSigningInput: true,
+    claimsBeforeAuthenticity: false,
+    automaticFallback: false,
+});
+function requireKnownKeys(entries, allowed, category) {
+    if ([...entries.keys()].some((key) => !allowed.has(key))) {
+        throw jwtError(category === 'key' ? 'PULSE_JWT_KEY_INVALID' : 'PULSE_JWT_OPERATION_FAILED', { category });
+    }
+}
+function nonEmptyString(value, category) {
+    if (typeof value !== 'string' || value.trim().length === 0 || value.includes('\0')) {
+        throw jwtError(category === 'key' ? 'PULSE_JWT_KEY_INVALID' : 'PULSE_JWT_OPERATION_FAILED', { category });
+    }
+    return value;
+}
+function arrayDataValues(value, category) {
+    const output = jwtDenseArrayValues(value);
+    if (!output) {
+        throw jwtError(category === 'key' ? 'PULSE_JWT_KEY_INVALID' : 'PULSE_JWT_OPERATION_FAILED', { category });
+    }
+    return output;
+}
+function stringList(value, category, maximum) {
+    const values = arrayDataValues(value, category);
+    if (values.length === 0) {
+        throw jwtError(category === 'key' ? 'PULSE_JWT_KEY_INVALID' : 'PULSE_JWT_OPERATION_FAILED', { category });
+    }
+    if (maximum !== undefined && values.length > maximum) {
+        throw jwtError('PULSE_JWT_LIMIT_EXCEEDED', {
+            category,
+            limit: maximum,
+            actual: values.length,
+        });
+    }
+    const normalized = values.map((entry) => nonEmptyString(entry, category));
+    if (new Set(normalized).size !== normalized.length) {
+        throw jwtError(category === 'key' ? 'PULSE_JWT_KEY_INVALID' : 'PULSE_JWT_OPERATION_FAILED', { category });
+    }
+    return Object.freeze(normalized);
+}
+function optionalStringOrList(value, category) {
+    if (value === undefined)
+        return undefined;
+    if (Array.isArray(value))
+        return stringList(value, category);
+    return nonEmptyString(value, category);
+}
+function integerOption(value, name, minimum, maximum) {
+    if (value === undefined)
+        return undefined;
+    if (!Number.isSafeInteger(value) || Number(value) < minimum) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: name });
+    }
+    if (Number(value) > maximum) {
+        throw jwtError('PULSE_JWT_LIMIT_EXCEEDED', {
+            category: name,
+            limit: maximum,
+            actual: Number(value),
+        });
+    }
+    return Number(value);
+}
+function normalizeAlgorithms(value) {
+    const values = arrayDataValues(value, 'options');
+    if (values.length === 0) {
+        throw jwtError('PULSE_JWT_ALGORITHM_NOT_ALLOWED', { category: 'algorithms' });
+    }
+    if (values.length > JWT_ALGORITHMS.length) {
+        throw jwtError('PULSE_JWT_LIMIT_EXCEEDED', {
+            category: 'algorithms',
+            limit: JWT_ALGORITHMS.length,
+            actual: values.length,
+        });
+    }
+    const output = values.map((entry) => {
+        if (typeof entry !== 'string' || !JWT_ALGORITHMS.includes(entry)) {
+            throw jwtError('PULSE_JWT_ALGORITHM_NOT_ALLOWED', { category: 'algorithms' });
+        }
+        return entry;
+    });
+    if (new Set(output).size !== output.length) {
+        throw jwtError('PULSE_JWT_ALGORITHM_NOT_ALLOWED', { category: 'algorithms' });
+    }
+    return Object.freeze(output);
+}
+function compatibleAlgorithm(jwk, algorithm) {
+    const record = jwtDataRecord(jwk);
+    if (!record)
+        return false;
+    const keyAlgorithm = record.get('alg');
+    const keyType = record.get('kty');
+    const curve = record.get('crv');
+    if (keyAlgorithm !== undefined && keyAlgorithm !== algorithm)
+        return false;
+    if (algorithm === 'RS256')
+        return keyType === 'RSA';
+    if (algorithm === 'ES256')
+        return keyType === 'EC' && curve === 'P-256';
+    if (algorithm === 'EdDSA')
+        return keyType === 'OKP' && curve === 'Ed25519';
+    return false;
+}
+function normalizePublicJwk(value) {
+    const record = jwtDataRecord(value);
+    if (!record)
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+    const declaredType = record.get('kty');
+    if ([...record.keys()].some((key) => PRIVATE_JWK_MEMBERS.includes(key))
+        || [...record.keys()].some((key) => (declaredType === 'EC'
+            ? !ES256_JWK_MEMBERS.has(key)
+            : !JWK_MEMBERS.has(key)))) {
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+    }
+    const kty = nonEmptyString(record.get('kty'), 'key');
+    const output = { kty };
+    for (const name of ['use', 'alg', 'kid', 'n', 'e', 'crv', 'x', 'y', 'x5t', 'x5t#S256']) {
+        const entry = record.get(name);
+        if (entry !== undefined)
+            output[name] = nonEmptyString(entry, 'key');
+    }
+    const ext = record.get('ext');
+    if (ext !== undefined) {
+        if (typeof ext !== 'boolean')
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+        output.ext = ext;
+    }
+    const keyOperations = record.get('key_ops');
+    if (keyOperations !== undefined) {
+        const operations = stringList(keyOperations, 'key');
+        if (!operations.includes('verify') || operations.some((operation) => operation !== 'verify')) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+        }
+        output.key_ops = operations;
+    }
+    const certificateChain = record.get('x5c');
+    if (certificateChain !== undefined)
+        output.x5c = stringList(certificateChain, 'key');
+    if (output.use !== undefined && output.use !== 'sig') {
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+    }
+    if (kty === 'RSA') {
+        nonEmptyString(output.n, 'key');
+        nonEmptyString(output.e, 'key');
+    }
+    else if (kty === 'EC') {
+        if (output.crv !== 'P-256')
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+        const x = nonEmptyString(output.x, 'key');
+        const y = nonEmptyString(output.y, 'key');
+        if (output.alg !== undefined && output.alg !== 'ES256') {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'algorithm-key-mismatch' });
+        }
+        const normalized = normalizeP256PublicKeyCoordinates({ x, y });
+        if (!normalized.ok) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key-coordinate' });
+        }
+        normalized.key.bytes.fill(0);
+    }
+    else if (kty === 'OKP') {
+        if (output.crv !== 'Ed25519')
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+        nonEmptyString(output.x, 'key');
+    }
+    else {
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+    }
+    if (output.alg !== undefined && !JWT_ALGORITHMS.includes(String(output.alg))) {
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+    }
+    return Object.freeze(output);
+}
+function assertKeyAlgorithms(key, algorithms) {
+    if (key.type === 'secret') {
+        if (algorithms.some((algorithm) => algorithm !== 'HS256')) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'algorithm-key-mismatch' });
+        }
+        return;
+    }
+    if (algorithms.includes('HS256')) {
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'algorithm-key-mismatch' });
+    }
+    const keys = key.type === 'jwk' ? [key.key] : key.keys;
+    if (algorithms.some((algorithm) => !keys.some((jwk) => compatibleAlgorithm(jwk, algorithm)))) {
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'algorithm-key-mismatch' });
+    }
+}
+function normalizeKey(value, algorithms) {
+    const record = jwtDataRecord(value);
+    if (!record)
+        throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+    const type = record.get('type');
+    if (type === 'secret') {
+        requireKnownKeys(record, new Set(['type', 'binding']), 'key');
+        const key = Object.freeze({
+            type,
+            binding: nonEmptyString(record.get('binding'), 'key'),
+        });
+        assertKeyAlgorithms(key, algorithms);
+        return key;
+    }
+    if (type === 'jwk') {
+        requireKnownKeys(record, new Set(['type', 'key']), 'key');
+        const key = Object.freeze({
+            type,
+            key: normalizePublicJwk(record.get('key')),
+        });
+        assertKeyAlgorithms(key, algorithms);
+        return key;
+    }
+    if (type === 'jwks') {
+        requireKnownKeys(record, new Set(['type', 'keys']), 'key');
+        const keyValues = arrayDataValues(record.get('keys'), 'key');
+        if (keyValues.length === 0) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+        }
+        if (keyValues.length > MAX_JWKS_KEYS) {
+            throw jwtError('PULSE_JWT_LIMIT_EXCEEDED', {
+                category: 'jwks',
+                limit: MAX_JWKS_KEYS,
+                actual: keyValues.length,
+            });
+        }
+        const keys = Object.freeze(keyValues.map(normalizePublicJwk));
+        const kids = keys.map((entry) => entry.kid).filter((kid) => kid !== undefined);
+        if (new Set(kids).size !== kids.length) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'duplicate-kid' });
+        }
+        const key = Object.freeze({ type, keys });
+        assertKeyAlgorithms(key, algorithms);
+        return key;
+    }
+    throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'key' });
+}
+export function normalizeJwtVerifyOptions(value) {
+    const record = jwtDataRecord(value);
+    if (!record)
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'options' });
+    requireKnownKeys(record, new Set([
+        'algorithms', 'key', 'issuer', 'audience', 'subject', 'typ',
+        'clockToleranceSeconds', 'maxTokenAgeSeconds', 'requiredClaims', 'claimsSchema',
+    ]), 'options');
+    const algorithms = normalizeAlgorithms(record.get('algorithms'));
+    const key = normalizeKey(record.get('key'), algorithms);
+    const issuer = optionalStringOrList(record.get('issuer'), 'options');
+    const audience = optionalStringOrList(record.get('audience'), 'options');
+    const subjectValue = record.get('subject');
+    const typValue = record.get('typ');
+    const subject = subjectValue === undefined ? undefined : nonEmptyString(subjectValue, 'options');
+    const typ = typValue === undefined ? undefined : nonEmptyString(typValue, 'options');
+    const clockToleranceSeconds = integerOption(record.get('clockToleranceSeconds'), 'clock-tolerance', 0, MAX_CLOCK_TOLERANCE_SECONDS);
+    const maxTokenAgeSeconds = integerOption(record.get('maxTokenAgeSeconds'), 'max-token-age', 1, MAX_TOKEN_AGE_SECONDS);
+    const requiredClaimsValue = record.get('requiredClaims');
+    const requiredClaims = requiredClaimsValue === undefined
+        ? undefined
+        : stringList(requiredClaimsValue, 'options', MAX_REQUIRED_CLAIMS);
+    const claimsSchemaValue = record.get('claimsSchema');
+    const claimsSchema = claimsSchemaValue === undefined
+        ? undefined
+        : nonEmptyString(claimsSchemaValue, 'options');
+    return Object.freeze({
+        algorithms,
+        key,
+        ...(issuer === undefined ? {} : { issuer }),
+        ...(audience === undefined ? {} : { audience }),
+        ...(subject === undefined ? {} : { subject }),
+        ...(typ === undefined ? {} : { typ }),
+        ...(clockToleranceSeconds === undefined ? {} : { clockToleranceSeconds }),
+        ...(maxTokenAgeSeconds === undefined ? {} : { maxTokenAgeSeconds }),
+        ...(requiredClaims === undefined ? {} : { requiredClaims }),
+        ...(claimsSchema === undefined ? {} : { claimsSchema }),
+    });
+}
+export function isJwkCompatibleWithAlgorithm(jwk, algorithm) {
+    return compatibleAlgorithm(jwk, algorithm);
+}
+export function selectEs256VerificationJwk(key, kid) {
+    if (key.type === 'secret') {
+        throw jwtError('PULSE_JWT_KEY_INVALID', {
+            category: 'algorithm-key-mismatch',
+        });
+    }
+    if (key.type === 'jwk') {
+        if (!compatibleAlgorithm(key.key, 'ES256')) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', {
+                category: 'algorithm-key-mismatch',
+            });
+        }
+        if (kid !== undefined && key.key.kid !== undefined && key.key.kid !== kid) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', { category: 'unknown-kid' });
+        }
+        return key.key;
+    }
+    if (kid !== undefined) {
+        const selected = key.keys.filter((entry) => entry.kid === kid);
+        if (selected.length !== 1) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', {
+                category: selected.length === 0 ? 'unknown-kid' : 'duplicate-kid',
+            });
+        }
+        if (!compatibleAlgorithm(selected[0], 'ES256')) {
+            throw jwtError('PULSE_JWT_KEY_INVALID', {
+                category: 'algorithm-key-mismatch',
+            });
+        }
+        return selected[0];
+    }
+    const eligible = key.keys.filter((entry) => (compatibleAlgorithm(entry, 'ES256')));
+    if (eligible.length !== 1) {
+        throw jwtError('PULSE_JWT_KEY_INVALID', {
+            category: eligible.length === 0 ? 'missing-kid' : 'ambiguous-key',
+        });
+    }
+    return eligible[0];
+}
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EACL,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC,CAAC;AAsE3F,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACzF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC5C,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU;CACpD,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK;CACvD,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,2BAA2B,GAAG,GAAG,CAAC;AACxC,MAAM,qBAAqB,GAAG,UAAU,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,MAAM,CAAC,MAAM,CAAC;IAChE,OAAO,EAAE,sCAAsC;IAC/C,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;QACvB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;QACjE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC;YAC7B,KAAK;YACL,KAAK;YACL,SAAS;YACT,KAAK;SACG,CAAC;QACX,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,eAAe;YACpB,OAAO,EAAE,0BAA0B;SACpC,CAAC;QACF,kBAAkB,EAAE,8BAA8B;QAClD,eAAe,EAAE,EAAE;QACnB,sBAAsB,EAAE,IAAI;QAC5B,sBAAsB,EAAE,IAAI;QAC5B,0BAA0B,EAAE,IAAI;KACjC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,uBAAuB;QAC7B,cAAc,EAAE,aAAa;QAC7B,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,mBAAmB;QACjC,SAAS,EAAE,kCAAkC;QAC7C,kBAAkB,EAAE,mBAAmB;KACxC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,aAAa,EAAE,uBAAuB;QACtC,iBAAiB,EAAE,gBAAgB;QACnC,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,qBAAqB;QACxC,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,KAAK;QAClB,KAAK,EAAE,6BAA6B;KACrC,CAAC;IACF,iBAAiB,EAAE,IAAI;IACvB,wBAAwB,EAAE,KAAK;IAC/B,iBAAiB,EAAE,KAAK;CAChB,CAAC,CAAC;AAEZ,SAAS,gBAAgB,CACvB,OAAqC,EACrC,OAA4B,EAC5B,QAA2B;IAE3B,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,QAA2B;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,MAAM,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,QAA2B;IAE3B,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,QAAQ,CACZ,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,EAC3E,EAAE,QAAQ,EAAE,CACb,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,QAA2B,EAC3B,OAAgB;IAEhB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QACrD,MAAM,QAAQ,CAAC,0BAA0B,EAAE;YACzC,QAAQ;YACR,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,QAAmB;IAEnB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7D,OAAO,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,IAAY,EACZ,OAAe,EACf,OAAe;IAEf,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,EAAE,CAAC;QAC5D,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,QAAQ,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE,YAAY;YACtB,KAAK,EAAE,cAAc,CAAC,MAAM;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,QAAQ,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,KAAqB,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,QAAQ,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAiB,EAAE,SAAuB;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,OAAO,KAAK,KAAK,CAAC;IACpD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,OAAO,KAAK,IAAI,IAAI,KAAK,KAAK,OAAO,CAAC;IACxE,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,OAAO,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IACE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WAChE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAClC,YAAY,KAAK,IAAI;YACnB,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;YAC7B,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAC1B,CAAC,EACF,CAAC;QACD,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,MAAM,GAA4B,EAAE,GAAG,EAAE,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAU,EAAE,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7F,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC;IAC9B,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,gBAAgB,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,UAAU,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACrD,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;SAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;YAAE,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,UAAU,GAAG,iCAAiC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpG,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAA4B,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAuB,EAAE,UAAmC;IACvF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACvD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,UAAmC;IACvE,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI;YACJ,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;SACtD,CAAuB,CAAC;QACzB,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,gBAAgB,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI;YACJ,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;SAC3C,CAAuB,CAAC;QACzB,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,gBAAgB,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACrC,MAAM,QAAQ,CAAC,0BAA0B,EAAE;gBACzC,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;QAC9F,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAuB,CAAC;QAChE,mBAAmB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAuB;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACnF,gBAAgB,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC;QAC/B,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK;QAC3D,uBAAuB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc;KAChF,CAAC,EAAE,SAAS,CAAC,CAAC;IAEf,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrF,MAAM,qBAAqB,GAAG,aAAa,CACzC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,EACnC,iBAAiB,EACjB,CAAC,EACD,2BAA2B,CAC5B,CAAC;IACF,MAAM,kBAAkB,GAAG,aAAa,CACtC,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAChC,eAAe,EACf,CAAC,EACD,qBAAqB,CACtB,CAAC;IACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,mBAAmB,KAAK,SAAS;QACtD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CAAC,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,iBAAiB,KAAK,SAAS;QAClD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,cAAc,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAEjD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU;QACV,GAAG;QACH,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC;QACzE,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;QACnE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,GAAiB,EACjB,SAAuB;IAEvB,OAAO,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,GAAuB,EACvB,GAAuB;IAEvB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,QAAQ,CAAC,uBAAuB,EAAE;YACtC,QAAQ,EAAE,wBAAwB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,CAAC,uBAAuB,EAAE;gBACtC,QAAQ,EAAE,wBAAwB;aACnC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YAC1E,MAAM,QAAQ,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,GAAG,CAAC,GAAG,CAAC;IACjB,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,QAAQ,CAAC,uBAAuB,EAAE;gBACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe;aAClE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;YAC/C,MAAM,QAAQ,CAAC,uBAAuB,EAAE;gBACtC,QAAQ,EAAE,wBAAwB;aACnC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC1C,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CACpC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,CAAC,uBAAuB,EAAE;YACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe;SAClE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,7 @@
+export { verifyJwtWithCrypto, type JwtCryptoMacVerify, type JwtCryptoVerifier, type JwtCryptoVerifierHost, type JwtCryptoVerifierInput, } from './crypto-verifier.js';
+export { normalizeJwtVerifyOptions, type JwtAlgorithm, type JwtClaims, type JwtJsonPrimitive, type JwtJsonValue, type JwtPublicJwk, type JwtVerificationKey, type JwtVerifyOptions, } from './options.js';
+export { normalizeJwtVerification, type DeepReadonly, type JwtProtectedHeader, type JwtVerification, } from './result.js';
+export { JwtError, JWT_ERROR_CODES, isJwtError, jwtError, type JwtErrorCode, } from './errors.js';
+export { bearerFromAuthorizationValue, } from './bearer.js';
+export { captureJwtCurrentDate, type JwtCapturedWallClock, type JwtWallClockCapture, } from './internal/clock.js';
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,EACxB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,UAAU,EACV,QAAQ,EACR,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC"}

package/dist/provider.js

@@ -0,0 +1,7 @@
+export { verifyJwtWithCrypto, } from './crypto-verifier.js';
+export { normalizeJwtVerifyOptions, } from './options.js';
+export { normalizeJwtVerification, } from './result.js';
+export { JwtError, JWT_ERROR_CODES, isJwtError, jwtError, } from './errors.js';
+export { bearerFromAuthorizationValue, } from './bearer.js';
+export { captureJwtCurrentDate, } from './internal/clock.js';
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAKpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,GAQ1B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,wBAAwB,GAIzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,UAAU,EACV,QAAQ,GAET,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC"}

package/dist/result.d.ts

@@ -0,0 +1,17 @@
+import type { JwtAlgorithm, JwtClaims } from './options.js';
+export type DeepReadonly<Value> = Value extends JwtJsonPrimitive ? Value : Value extends readonly (infer Item)[] ? readonly DeepReadonly<Item>[] : Value extends object ? {
+    readonly [Key in keyof Value]: DeepReadonly<Value[Key]>;
+} : never;
+type JwtJsonPrimitive = string | number | boolean | null;
+export interface JwtProtectedHeader {
+    readonly alg: JwtAlgorithm;
+    readonly kid?: string;
+    readonly typ?: string;
+}
+export interface JwtVerification<Claims = JwtClaims> {
+    readonly claims: DeepReadonly<Claims>;
+    readonly protectedHeader: Readonly<JwtProtectedHeader>;
+}
+export declare function normalizeJwtVerification<Claims = JwtClaims>(value: unknown): JwtVerification<Claims>;
+export {};
+//# sourceMappingURL=result.d.ts.map

package/dist/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAC;AAE1E,MAAM,MAAM,YAAY,CAAC,KAAK,IAC5B,KAAK,SAAS,gBAAgB,GAAG,KAAK,GAClC,KAAK,SAAS,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,GAAG,SAAS,YAAY,CAAC,IAAI,CAAC,EAAE,GACnE,KAAK,SAAS,MAAM,GAAG;IAAE,QAAQ,EAAE,GAAG,IAAI,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;CAAE,GAChF,KAAK,CAAC;AAEhB,KAAK,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe,CAAC,MAAM,GAAG,SAAS;IACjD,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;CACxD;AAmDD,wBAAgB,wBAAwB,CAAC,MAAM,GAAG,SAAS,EACzD,KAAK,EAAE,OAAO,GACb,eAAe,CAAC,MAAM,CAAC,CA+CzB"}

package/dist/result.js

@@ -0,0 +1,96 @@
+import { jwtError } from './errors.js';
+import { defineJwtDataProperty, isJwtOrdinaryObject, jwtDataEntries, jwtDenseArrayValues, jwtOwnDataProperty, } from './internal/data.js';
+function dataProperty(value, name) {
+    const property = jwtOwnDataProperty(value, name);
+    return property.valid && property.present ? property.value : undefined;
+}
+function cloneJson(value, path, depth, seen) {
+    if (depth > 32)
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-depth' });
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-value' });
+        return Object.is(value, -0) ? 0 : value;
+    }
+    if (!value || typeof value !== 'object') {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-value' });
+    }
+    if (seen.has(value))
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-value' });
+    seen.add(value);
+    try {
+        if (Array.isArray(value)) {
+            const entries = jwtDenseArrayValues(value);
+            if (!entries)
+                throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-value' });
+            const output = [];
+            for (let index = 0; index < entries.length; index += 1) {
+                output.push(cloneJson(entries[index], `${path}[${index}]`, depth + 1, seen));
+            }
+            return Object.freeze(output);
+        }
+        if (!isJwtOrdinaryObject(value)) {
+            throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-value' });
+        }
+        const entries = jwtDataEntries(value);
+        if (!entries)
+            throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-value' });
+        const output = {};
+        for (const [key, child] of entries) {
+            defineJwtDataProperty(output, key, cloneJson(child, `${path}.${key}`, depth + 1, seen));
+        }
+        return Object.freeze(output);
+    }
+    finally {
+        seen.delete(value);
+    }
+}
+export function normalizeJwtVerification(value) {
+    if (!isJwtOrdinaryObject(value)) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result' });
+    }
+    const record = value;
+    const recordEntries = jwtDataEntries(record);
+    if (!recordEntries
+        || recordEntries.length !== 2
+        || !recordEntries.some(([name]) => name === 'claims')
+        || !recordEntries.some(([name]) => name === 'protectedHeader')) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result' });
+    }
+    const header = dataProperty(record, 'protectedHeader');
+    if (!isJwtOrdinaryObject(header)) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-header' });
+    }
+    const headerRecord = header;
+    const headerEntries = jwtDataEntries(headerRecord);
+    if (!headerEntries || headerEntries.some(([name]) => !['alg', 'kid', 'typ'].includes(name))) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-header' });
+    }
+    const alg = dataProperty(headerRecord, 'alg');
+    if (!['HS256', 'RS256', 'ES256', 'EdDSA'].includes(String(alg))) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-header' });
+    }
+    const kid = dataProperty(headerRecord, 'kid');
+    const typ = dataProperty(headerRecord, 'typ');
+    if (kid !== undefined && typeof kid !== 'string') {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-header' });
+    }
+    if (typ !== undefined && typeof typ !== 'string') {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-header' });
+    }
+    const claims = cloneJson(dataProperty(record, 'claims'), '$', 0, new Set());
+    if (!claims || typeof claims !== 'object' || Array.isArray(claims)) {
+        throw jwtError('PULSE_JWT_OPERATION_FAILED', { category: 'result-claims' });
+    }
+    return Object.freeze({
+        claims: claims,
+        protectedHeader: Object.freeze({
+            alg: alg,
+            ...(kid === undefined ? {} : { kid }),
+            ...(typ === undefined ? {} : { typ }),
+        }),
+    });
+}
+//# sourceMappingURL=result.js.map

package/dist/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../src/result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAsB5B,SAAS,YAAY,CACnB,KAAa,EACb,IAAY;IAEZ,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,IAAY,EAAE,KAAa,EAAE,IAAiB;IAC/E,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAC3F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;QACxG,OAAO,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO;gBAAE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YACzF,MAAM,MAAM,GAAmB,EAAE,CAAC;YAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,GAAiC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,qBAAqB,CACnB,MAAM,EACN,GAAG,EACH,SAAS,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CACpD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,KAA0C,CAAC;IAC1D,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7C,IACE,CAAC,aAAa;WACX,aAAa,CAAC,MAAM,KAAK,CAAC;WAC1B,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC;WAClD,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,iBAAiB,CAAC,EAC9D,CAAC;QACD,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,YAAY,GAAG,MAA2C,CAAC;IACjE,MAAM,aAAa,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,QAAQ,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAA8B;QACtC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC;YAC7B,GAAG,EAAE,GAAmB;YACxB,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;YACrC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACtC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/token.d.ts

@@ -0,0 +1,20 @@
+import type { JwtClaims, JwtJsonValue } from './options.js';
+export interface JwtPreflight {
+    readonly protectedHeader: Readonly<Record<string, JwtJsonValue>>;
+    readonly claimsText: string;
+}
+export interface JwtCompactSignatureInput {
+    readonly signingInput: Uint8Array;
+    readonly signature: Uint8Array;
+}
+export interface JwtCompactParts {
+    readonly signingInput: Uint8Array;
+    readonly signatureSegment: string;
+}
+export declare function preflightCompactJwt(token: string | undefined): JwtPreflight;
+export declare function protectedAlgorithm(header: Readonly<Record<string, JwtJsonValue>>): string;
+export declare function protectedHeaderString(header: Readonly<Record<string, JwtJsonValue>>, name: 'kid' | 'typ'): string | undefined;
+export declare function parseVerifiedClaims(preflight: JwtPreflight): JwtClaims;
+export declare function compactJwtSignatureInput(token: string): JwtCompactSignatureInput;
+export declare function compactJwtParts(token: string): JwtCompactParts;
+//# sourceMappingURL=token.d.ts.map

package/dist/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQ5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAsOD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAqC3E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,GAAG,MAAM,CAgBzF;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAC9C,IAAI,EAAE,KAAK,GAAG,KAAK,GAClB,MAAM,GAAG,SAAS,CAUpB;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,YAAY,GAAG,SAAS,CAEtE;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,wBAAwB,CAMhF;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAS9D"}