@pulse-compute/jwt 0.0.0 → 1.0.0-beta.1

package/pulsewasm.manifest.cjs

@@ -0,0 +1,117 @@
+'use strict';
+
+const pulseWasmManifest = Object.freeze({
+  version: 'pulsewasm.lowerable-library-manifest.v2',
+  kind: 'pulsewasm.lowerable-library-manifest',
+  contractId: 'pulse.jwt',
+  npmPackage: '@pulse-compute/jwt',
+  lowerableSubpath: '@pulse-compute/jwt',
+  facade: Object.freeze({
+    namespace: 'jwt',
+    import: '@pulse-compute/jwt',
+    symbols: Object.freeze(['bearer', 'verify'])
+  }),
+  publicApi: Object.freeze({
+    package: '@pulse-compute/jwt',
+    symbols: Object.freeze([
+      'JWT_ERROR_CODES',
+      'JwtError',
+      'bearer',
+      'jwt',
+      'verify'
+    ]),
+    compatibilitySubpaths: Object.freeze([]),
+    loweringIntentionallyNarrow: true
+  }),
+  description: 'Package-owned Native lowering contract for bounded, provider-neutral JWT verification.',
+  compiler: Object.freeze({
+    version: 'pulsewasm.lowerable-compiler-builder.v1',
+    entry: './pulsewasm.compiler.cjs',
+    export: 'buildJwtLoweringPlan',
+    artifact: 'jwt-lowering-plan.json',
+    builderOwner: '@pulse-compute/jwt',
+    trust: 'first-party',
+    inputs: Object.freeze([
+      'typescript.SourceFile',
+      'pulsewasm.lowerable-library-manifest',
+      'pulse.jwt contracts',
+      'canonical schema bundle'
+    ])
+  }),
+  modes: Object.freeze({
+    typescript: Object.freeze({ entry: './dist/index.js' }),
+    jsEngine: Object.freeze({
+      entry: './dist/index.js',
+      behavior: 'javascript-package-runtime'
+    }),
+    wasm: Object.freeze({
+      mode: 'wasm-sidecar',
+      sidecar: './as/index.as.ts',
+      sourceContribution: Object.freeze({
+        entry: './pulsewasm.native.cjs',
+        export: 'pulseJwtAssemblyScriptSource',
+        id: 'pulse-jwt-as',
+        language: 'assemblyscript',
+        semanticOwner: '@pulse-compute/jwt',
+        providerAuthority: Object.freeze([
+          'request',
+          'secret',
+          'wall-clock',
+          'schema',
+          'redaction',
+          'error-transport'
+        ])
+      }),
+      lowerings: Object.freeze([
+        Object.freeze({
+          tsSymbol: 'jwt.verify',
+          asSymbol: 'pulse_jwt_verify',
+          callShape: 'request-bearer-static-policy',
+          hostCapabilities: Object.freeze([
+            'clock',
+            'headers',
+            'result'
+          ])
+        })
+      ]),
+      hostCapabilities: Object.freeze([
+        'clock',
+        'headers',
+        'result'
+      ]),
+      realization: Object.freeze({
+        kind: 'crypto-composed',
+        semanticOwner: '@pulse-compute/crypto',
+        realization: 'guest-source:pulse-hmac-as',
+        implementation: 'pulse-hmac-as.v1',
+        packageSource: 'pulse-jwt-as',
+        algorithms: Object.freeze(['HS256', 'ES256']),
+        keyTypes: Object.freeze(['secret', 'jwk', 'jwks']),
+        guestUnitRequired: false,
+        guestUnits: Object.freeze({
+          ES256: 'pulse.crypto.es256.rustcrypto-p256.v1'
+        }),
+        portable: true,
+        automaticFallback: false
+      })
+    })
+  }),
+  protocol: Object.freeze({
+    contractId: 'pulse.jwt',
+    payloadRulesOwner: '@pulse-compute/wasm-contracts/jwt/contracts'
+  }),
+  policy: Object.freeze({
+    effectRuntimeRequired: true,
+    providerRuntimeImplemented: true,
+    loweringIntentionallyNarrow: true,
+    packageOwnsFacadeMapping: true,
+    canonicalRootLowering: true,
+    tokenSourceStatic: true,
+    policyStatic: true,
+    targetBindingRequired: true,
+    nativeRealizationImplemented: true,
+    automaticFallback: false
+  })
+});
+
+module.exports = pulseWasmManifest;

package/pulsewasm.native.cjs

@@ -0,0 +1,60 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const packageManifest = require('./package.json');
+
+const JWT_NATIVE_SOURCE_CONTRACT_VERSION = 'pulse.jwt-native-source.v1';
+const sourceRelativeFile = 'as/index.as.ts';
+const sourceFile = path.join(__dirname, sourceRelativeFile);
+
+function sha256(value) {
+  return crypto.createHash('sha256').update(value).digest('hex');
+}
+
+function pulseJwtAssemblyScriptSource() {
+  const source = fs.readFileSync(sourceFile, 'utf8');
+  return Object.freeze({
+    version: JWT_NATIVE_SOURCE_CONTRACT_VERSION,
+    id: 'pulse-jwt-as',
+    owner: '@pulse-compute/jwt',
+    packageVersion: packageManifest.version,
+    kind: 'package-source',
+    language: 'assemblyscript',
+    license: 'Apache-2.0',
+    origin: 'package-source',
+    sourceIncluded: true,
+    sourceFile: sourceRelativeFile,
+    source,
+    sourceBytes: Buffer.byteLength(source),
+    sourceSha256: sha256(source),
+    imports: Object.freeze([]),
+    exports: Object.freeze([
+      'pulse_jwt_verify',
+      'pulse_jwt_fastly_verify'
+    ]),
+    semanticOwnership: Object.freeze([
+      'compact-jws-parsing',
+      'protected-header-policy',
+      'exact-signing-input',
+      'registered-claims',
+      'result-shaping'
+    ]),
+    providerAuthorities: Object.freeze([
+      'request',
+      'secret',
+      'wall-clock',
+      'schema',
+      'redaction',
+      'error-transport'
+    ]),
+    cryptoRealization: 'guest-source:pulse-hmac-as',
+    automaticFallback: false
+  });
+}
+
+module.exports = Object.freeze({
+  JWT_NATIVE_SOURCE_CONTRACT_VERSION,
+  pulseJwtAssemblyScriptSource
+});