@rho-workspace/rho 0.5.2 → 0.5.3

package/node_modules/jose/dist/types/jws/flattened/verify.d.ts

@@ -1,26 +0,0 @@
-import type * as t from '../../types.d.ts';
-/** Resolves a key for Flattened JWS verification from unverified headers and token data. */
-export interface FlattenedVerifyGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWSHeaderParameters, t.FlattenedJWSInput, KeyType | t.KeyObject | t.JWK> {
-}
-/**
- * Validates a flattened JWS JSON Serialization (digital signature or MAC) and decodes its JWS
- * Payload.
- *
- * @param key Public key or shared secret. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- */
-export declare function flattenedVerify(jws: t.FlattenedJWSInput, key: t.KeyInput, options?: t.VerifyOptions): Promise<t.FlattenedVerifyResult>;
-/**
- * Validates a flattened JWS JSON Serialization (digital signature or MAC) and decodes its JWS
- * Payload with a dynamically resolved key, included in the result.
- *
- * @param getKey Resolves a public key or shared secret from unverified token data.
- */
-export declare function flattenedVerify<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jws: t.FlattenedJWSInput, getKey: FlattenedVerifyGetKey<KeyType>, options?: t.VerifyOptions): Promise<t.FlattenedVerifyResult & t.ResolvedKey<KeyType>>;
-/**
- * Validates a flattened JWS JSON Serialization (digital signature or MAC) and decodes its JWS
- * Payload using a key or key resolver. The result includes `key` only when a resolver is used.
- *
- * @param key Public key or shared secret, or a function resolving one.
- */
-export declare function flattenedVerify(jws: t.FlattenedJWSInput, key: t.KeyInput | FlattenedVerifyGetKey, options?: t.VerifyOptions): Promise<t.FlattenedVerifyResult & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/jws/general/sign.d.ts

@@ -1,41 +0,0 @@
-import type * as t from '../../types.d.ts';
-/** Configures an individual JWS Signature (digital signature or MAC) in a General JWS. */
-export interface Signature {
-    /** Sets the JWS Protected Header. May only be called once. */
-    setProtectedHeader(protectedHeader: t.JWSHeaderParameters): Signature;
-    /** Sets the JWS Unprotected Header. May only be called once. */
-    setUnprotectedHeader(unprotectedHeader: t.JWSHeaderParameters): Signature;
-    /**
-     * Adds another signature to the enclosing {@link GeneralSign} and returns its configuration.
-     *
-     * @param key Private key or shared secret. See
-     *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
-     */
-    addSignature(key: t.KeyInput, options?: t.SignOptions): Signature;
-    /** Computes all JWS Signatures on the enclosing {@link GeneralSign}, using their configured keys. */
-    sign(): Promise<t.GeneralJWS>;
-    /** Returns the enclosing {@link GeneralSign} instance. */
-    done(): GeneralSign;
-}
-/** Produces general JWS JSON Serialization using digital signatures or MACs. */
-export declare class GeneralSign {
-    #private;
-    /**
-     * Creates a signer for general JWS JSON Serialization.
-     *
-     * @param payload JWS Payload bytes to sign or MAC.
-     */
-    constructor(payload: Uint8Array);
-    /**
-     * Adds a signature and returns its configuration.
-     *
-     * @param key Private key or shared secret. See
-     *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
-     */
-    addSignature(key: t.KeyInput, options?: t.SignOptions): Signature;
-    /**
-     * Computes each JWS Signature (digital signature or MAC) and returns the general JWS JSON
-     * Serialization.
-     */
-    sign(): Promise<t.GeneralJWS>;
-}

package/node_modules/jose/dist/types/jws/general/verify.d.ts

@@ -1,31 +0,0 @@
-import type * as t from '../../types.d.ts';
-/** Resolves a key for General JWS verification from unverified headers and token data. */
-export interface GeneralVerifyGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWSHeaderParameters, t.FlattenedJWSInput, KeyType | t.KeyObject | t.JWK> {
-}
-/**
- * Validates a JWS Signature (digital signature or MAC) from a general JWS JSON Serialization and
- * decodes its JWS Payload.
- *
- * > Note: Returns payload and headers from the first signature that verifies successfully. Other entries'
- * > headers may be inspected to reject inconsistent use of the JWS Unencoded Payload Option, but are
- * > not included in the result. Rely only on the returned data.
- *
- * @param key Public key or shared secret. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- */
-export declare function generalVerify(jws: t.GeneralJWSInput, key: t.KeyInput, options?: t.VerifyOptions): Promise<t.GeneralVerifyResult>;
-/**
- * Validates a JWS Signature (digital signature or MAC) from a general JWS JSON Serialization and
- * decodes its JWS Payload with a dynamically resolved key, included in the result.
- *
- * @param getKey Resolves a public key or shared secret from unverified token data.
- */
-export declare function generalVerify<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jws: t.GeneralJWSInput, getKey: GeneralVerifyGetKey<KeyType>, options?: t.VerifyOptions): Promise<t.GeneralVerifyResult & t.ResolvedKey<KeyType>>;
-/**
- * Validates a JWS Signature (digital signature or MAC) from a general JWS JSON Serialization and
- * decodes its JWS Payload using a key or key resolver. The result includes `key` only when a
- * resolver is used.
- *
- * @param key Public key or shared secret, or a function resolving one.
- */
-export declare function generalVerify(jws: t.GeneralJWSInput, key: t.KeyInput | GeneralVerifyGetKey, options?: t.VerifyOptions): Promise<t.GeneralVerifyResult & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/jwt/decrypt.d.ts

@@ -1,38 +0,0 @@
-import type * as t from '../types.d.ts';
-/** JWE decryption and JWT Claims Set validation options. */
-export interface JWTDecryptOptions extends t.DecryptOptions, t.JWTClaimVerificationOptions {
-}
-/**
- * Resolves a JWT decryption key. No token components have been authenticated when this function is
- * called.
- */
-export interface JWTDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWEHeaderParameters, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
-}
-export declare function jwtDecrypt<PayloadType, KeyType extends t.KeyInput, InferredPayloadType>(jwt: string | Uint8Array, key: KeyType, options?: JWTDecryptOptions): Promise<t.InferredJWTResult<t.JWTDecryptResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)>>;
-export declare function jwtDecrypt<PayloadType, KeyType extends t.CryptoKey | Uint8Array, InferredPayloadType>(jwt: string | Uint8Array, getKey: JWTDecryptGetKey<KeyType>, options?: JWTDecryptOptions): Promise<t.InferredJWTResult<t.JWTDecryptResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)> & t.ResolvedKey<KeyType>>;
-export declare function jwtDecrypt<PayloadType, KeyType extends t.KeyInput | JWTDecryptGetKey, InferredPayloadType>(jwt: string | Uint8Array, key: KeyType, options?: JWTDecryptOptions): Promise<t.InferredJWTResult<t.JWTDecryptResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)> & Partial<t.ResolvedKey>>;
-/**
- * Authenticates and decrypts a JWT in JWE Compact Serialization and validates its JWT Claims Set.
- *
- * @param key Private key or shared secret to authenticate and decrypt the JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- */
-export declare function jwtDecrypt<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput, options?: JWTDecryptOptions): Promise<t.JWTDecryptResult<PayloadType>>;
-/**
- * Decrypts a JWT and validates its claims, returning the dynamically
- * {@link t.ResolvedKey.key resolved key}.
- *
- * @param getKey Function resolving a private key or shared secret to authenticate and decrypt the
- *   JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- */
-export declare function jwtDecrypt<PayloadType = t.JWTPayload, KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwt: string | Uint8Array, getKey: JWTDecryptGetKey<KeyType>, options?: JWTDecryptOptions): Promise<t.JWTDecryptResult<PayloadType> & t.ResolvedKey<KeyType>>;
-/**
- * Accepts a key or key resolver. Use this overload when forwarding either form; the result includes
- * `key` only when a resolver was used.
- *
- * @param key Private key or shared secret, or a function resolving one, to authenticate and decrypt
- *   the JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
- */
-export declare function jwtDecrypt<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput | JWTDecryptGetKey, options?: JWTDecryptOptions): Promise<t.JWTDecryptResult<PayloadType> & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/jwt/encrypt.d.ts

@@ -1,57 +0,0 @@
-import type * as t from '../types.d.ts';
-/** @param payload Initial JWT Claims Set. Defaults to an empty object. */
-declare const EncryptJWT_base: new (payload?: t.JWTPayload) => t.ProduceJWT;
-/** Produces encrypted JWTs in JWE Compact Serialization. */
-export declare class EncryptJWT extends EncryptJWT_base {
-    #private;
-    /**
-     * Sets the JWE Protected Header. May only be called once.
-     *
-     * @param protectedHeader JWE Protected Header. Must contain an "alg" (JWE Algorithm) and "enc"
-     *   (JWE Encryption Algorithm) properties.
-     */
-    setProtectedHeader(protectedHeader: t.CompactJWEHeaderParameters): this;
-    /**
-     * Sets JWE Key Management parameters, such as ECDH-ES "apu" and "apv" or PBES2 "p2c", and adds
-     * them to the appropriate JOSE Header. Use this instead of the header setters for algorithm
-     * inputs. May only be called once.
-     */
-    setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
-    /**
-     * Sets the content encryption key. By default, a suitable random key is generated for the JWE
-     * "enc" (Encryption Algorithm). May only be called once.
-     *
-     * @deprecated For testing and vector validation only; allow random generation in production.
-     */
-    setContentEncryptionKey(cek: Uint8Array): this;
-    /**
-     * Sets the Initialization Vector for content encryption. By default, a suitable random IV is
-     * generated for the JWE "enc" (Encryption Algorithm). May only be called once.
-     *
-     * @deprecated For testing and vector validation only; allow random generation in production.
-     */
-    setInitializationVector(iv: Uint8Array): this;
-    /**
-     * Replicates the "iss" (Issuer) Claim in the JWE Protected Header, exposing it without
-     * decryption.
-     */
-    replicateIssuerAsHeader(): this;
-    /**
-     * Replicates the "sub" (Subject) Claim in the JWE Protected Header, exposing it without
-     * decryption.
-     */
-    replicateSubjectAsHeader(): this;
-    /**
-     * Replicates the "aud" (Audience) Claim in the JWE Protected Header, exposing it without
-     * decryption.
-     */
-    replicateAudienceAsHeader(): this;
-    /**
-     * Encrypts and returns the JWT.
-     *
-     * @param key Public key or shared secret to encrypt the JWT with. See
-     *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
-     */
-    encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<string>;
-}
-export {};

package/node_modules/jose/dist/types/jwt/sign.d.ts

@@ -1,21 +0,0 @@
-import type * as t from '../types.d.ts';
-/** @param payload Initial JWT Claims Set. Defaults to an empty object. */
-declare const SignJWT_base: new (payload?: t.JWTPayload) => t.ProduceJWT;
-/** Produces JWTs in JWS Compact Serialization using a digital signature or MAC. */
-export declare class SignJWT extends SignJWT_base {
-    #private;
-    /**
-     * Sets the JWS Protected Header. May only be called once.
-     *
-     * @param protectedHeader JWS Protected Header. Must contain an "alg" (JWS Algorithm) property.
-     */
-    setProtectedHeader(protectedHeader: t.JWTHeaderParameters): this;
-    /**
-     * Signs and returns the JWT.
-     *
-     * @param key Private key or shared secret to sign the JWT with. See
-     *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
-     */
-    sign(key: t.KeyInput, options?: t.SignOptions): Promise<string>;
-}
-export {};

package/node_modules/jose/dist/types/jwt/unsecured.d.ts

@@ -1,21 +0,0 @@
-import type * as t from '../types.d.ts';
-/** Decoded Unsecured JWT. */
-export interface UnsecuredResult<PayloadType = t.JWTPayload> {
-    /** JWT Claims Set. */
-    payload: PayloadType & t.JWTPayload & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never);
-    /** The decoded JOSE Header; its "alg" (Algorithm) Header Parameter is "none". */
-    header: t.JWSHeaderParameters;
-}
-/** @param payload Initial JWT Claims Set. Defaults to an empty object. */
-declare const UnsecuredJWT_base: new (payload?: t.JWTPayload) => t.ProduceJWT;
-/** Encodes and decodes `{ "alg": "none" }` Unsecured JWTs. */
-export declare class UnsecuredJWT extends UnsecuredJWT_base {
-    private jwt;
-    /** Encodes the Unsecured JWT. */
-    encode(): string;
-    /** Decodes an unsecured JWT and validates its claims without authenticating the token. */
-    static decode<PayloadType, InferredPayloadType>(jwt: string, options?: t.JWTClaimVerificationOptions): t.InferredJWTResult<UnsecuredResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)>;
-    /** Decodes an unsecured JWT and validates its claims without authenticating the token. */
-    static decode<PayloadType = t.JWTPayload>(jwt: string, options?: t.JWTClaimVerificationOptions): UnsecuredResult<PayloadType>;
-}
-export {};

package/node_modules/jose/dist/types/jwt/verify.d.ts

@@ -1,36 +0,0 @@
-import type * as t from '../types.d.ts';
-/** JWS verification and JWT Claims Set validation options. */
-export interface JWTVerifyOptions extends t.VerifyOptions, t.JWTClaimVerificationOptions {
-}
-/**
- * Resolves a JWT verification key. No token components have been authenticated when this function
- * is called.
- */
-export interface JWTVerifyGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWSHeaderParameters, t.FlattenedJWSInput, KeyType | t.KeyObject | t.JWK> {
-}
-export declare function jwtVerify<PayloadType, KeyType extends t.KeyInput, InferredPayloadType>(jwt: string | Uint8Array, key: KeyType, options?: JWTVerifyOptions): Promise<t.InferredJWTResult<t.JWTVerifyResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)>>;
-export declare function jwtVerify<PayloadType, KeyType extends t.CryptoKey | Uint8Array, InferredPayloadType>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey<KeyType>, options?: JWTVerifyOptions): Promise<t.InferredJWTResult<t.JWTVerifyResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)> & t.ResolvedKey<KeyType>>;
-export declare function jwtVerify<PayloadType, KeyType extends t.KeyInput | JWTVerifyGetKey, InferredPayloadType>(jwt: string | Uint8Array, key: KeyType, options?: JWTVerifyOptions): Promise<t.InferredJWTResult<t.JWTVerifyResult<unknown>, InferredPayloadType & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never)> & Partial<t.ResolvedKey>>;
-/**
- * Validates a JWT in JWS Compact Serialization (digital signature or MAC) and its JWT Claims Set.
- *
- * @param key Public key or shared secret to verify the JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- */
-export declare function jwtVerify<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput, options?: JWTVerifyOptions): Promise<t.JWTVerifyResult<PayloadType>>;
-/**
- * Validates the JWT's JWS Signature (digital signature or MAC) and JWT Claims Set, returning the
- * resolved key.
- *
- * @param getKey Function resolving a public key or shared secret to verify the JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- */
-export declare function jwtVerify<PayloadType = t.JWTPayload, KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey<KeyType>, options?: JWTVerifyOptions): Promise<t.JWTVerifyResult<PayloadType> & t.ResolvedKey<KeyType>>;
-/**
- * Accepts a key or key resolver. Use this overload when forwarding either form; the result includes
- * `key` only when a resolver was used.
- *
- * @param key Key, or function resolving a key, to verify the JWT with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
- */
-export declare function jwtVerify<PayloadType = t.JWTPayload>(jwt: string | Uint8Array, key: t.KeyInput | JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<t.JWTVerifyResult<PayloadType> & Partial<t.ResolvedKey>>;

package/node_modules/jose/dist/types/key/export.d.ts

@@ -1,19 +0,0 @@
-import type * as t from '../types.d.ts';
-/**
- * Exports a public key to PEM-encoded SPKI. CryptoKey inputs must be extractable.
- *
- * @param key Key to export.
- */
-export declare function exportSPKI(key: t.CryptoKey | t.KeyObject): Promise<string>;
-/**
- * Exports a private key to PEM-encoded PKCS #8. CryptoKey inputs must be extractable.
- *
- * @param key Key to export.
- */
-export declare function exportPKCS8(key: t.CryptoKey | t.KeyObject): Promise<string>;
-/**
- * Exports a key to JWK. CryptoKey inputs must be extractable.
- *
- * @param key Key to export.
- */
-export declare function exportJWK(key: t.CryptoKey | t.KeyObject | Uint8Array): Promise<t.JWK>;

package/node_modules/jose/dist/types/key/generate_key_pair.d.ts

@@ -1,33 +0,0 @@
-import type * as t from '../types.d.ts';
-/** Algorithms supported by {@link generateKeyPair}, subject to runtime support. */
-export type GenerateKeyPairAlgorithm = 'PS256' | 'PS384' | 'PS512' | 'RS256' | 'RS384' | 'RS512' | 'RSA-OAEP' | 'RSA-OAEP-256' | 'RSA-OAEP-384' | 'RSA-OAEP-512' | 'ES256' | 'ES384' | 'ES512' | 'Ed25519' | 'EdDSA' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | 'ECDH-ES' | 'ECDH-ES+A128KW' | 'ECDH-ES+A192KW' | 'ECDH-ES+A256KW' | (string & {});
-/** Generated asymmetric key pair. */
-export interface GenerateKeyPairResult {
-    privateKey: t.CryptoKey;
-    publicKey: t.CryptoKey;
-}
-/** Asymmetric key pair generation options. */
-export interface GenerateKeyPairOptions {
-    /**
-     * EC curve or OKP key subtype. Must be supported by the algorithm and runtime. ECDH-ES defaults
-     * to P-256.
-     */
-    crv?: string;
-    /** RSA modulus length in bits. Must be an integer of at least 2048; defaults to 2048. */
-    modulusLength?: number;
-    /**
-     * Whether the private key is extractable. Defaults to false; the public key is always
-     * extractable.
-     */
-    extractable?: boolean;
-}
-/**
- * Generates an asymmetric key pair for a JWA algorithm identifier.
- *
- * > Note: Private keys are not extractable by default. Set {@link GenerateKeyPairOptions.extractable} to
- * > export them; public keys are always extractable.
- *
- * @param alg JWA Algorithm Identifier to be used with the generated key pair. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- */
-export declare function generateKeyPair(alg: GenerateKeyPairAlgorithm, options?: GenerateKeyPairOptions): Promise<GenerateKeyPairResult>;

package/node_modules/jose/dist/types/key/generate_secret.d.ts

@@ -1,30 +0,0 @@
-import type * as t from '../types.d.ts';
-/** Algorithms supported by {@link generateSecret}, subject to runtime support. */
-export type GenerateSecretAlgorithm = 'HS256' | 'HS384' | 'HS512' | 'A128CBC-HS256' | 'A192CBC-HS384' | 'A256CBC-HS512' | 'A128KW' | 'A192KW' | 'A256KW' | 'A128GCMKW' | 'A192GCMKW' | 'A256GCMKW' | 'A128GCM' | 'A192GCM' | 'A256GCM' | (string & {});
-/**
- * Maps a JWA algorithm identifier to the value returned by {@link generateSecret}. AES_CBC_HMAC_SHA2
- * algorithms return {@link !Uint8Array}; other supported algorithms return
- * {@link t.CryptoKey CryptoKey}. When the algorithm is not statically known, the result is their
- * union.
- */
-export type GeneratedSecret<Alg extends string> = Alg extends 'A128CBC-HS256' | 'A192CBC-HS384' | 'A256CBC-HS512' ? Uint8Array : string extends Alg ? t.CryptoKey | Uint8Array : t.CryptoKey;
-/** Secret generation options. */
-export interface GenerateSecretOptions {
-    /**
-     * Whether the generated CryptoKey is extractable. Defaults to false; has no effect for
-     * A128CBC-HS256, A192CBC-HS384, and A256CBC-HS512, which return raw bytes.
-     */
-    extractable?: boolean;
-}
-/**
- * Generates a symmetric secret key for a given JWA algorithm identifier.
- *
- * > Note: The secret key is generated with `extractable` set to `false` by default.
- *
- * > Note: A128CBC-HS256, A192CBC-HS384, and A256CBC-HS512 return {@link !Uint8Array} because these secrets
- * > have no CryptoKey representation.
- *
- * @param alg JWA Algorithm Identifier to be used with the generated secret. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- */
-export declare function generateSecret<Alg extends GenerateSecretAlgorithm>(alg: Alg, options?: GenerateSecretOptions): Promise<GeneratedSecret<Alg>>;

package/node_modules/jose/dist/types/key/import.d.ts

@@ -1,67 +0,0 @@
-import type * as t from '../types.d.ts';
-/**
- * Maps a JWK key type to the value returned by {@link importJWK}. An "oct" JWK returns
- * {@link !Uint8Array}; other supported key types return {@link t.CryptoKey CryptoKey}. A JWK
- * whose "kty" is not statically known resolves to their union.
- */
-export type ImportedJWK<JWKType extends t.JWK> = JWKType extends {
-    kty: 'oct';
-} ? Uint8Array : JWKType extends {
-    kty: 'AKP' | 'EC' | 'OKP' | 'RSA';
-} ? t.CryptoKey : t.CryptoKey | Uint8Array;
-/** Key import options. */
-export interface KeyImportOptions {
-    /**
-     * Whether the imported CryptoKey is extractable. Overrides JWK "ext" when set. Without either,
-     * defaults to false for private keys, true otherwise.
-     */
-    extractable?: boolean;
-}
-/**
- * Imports a PEM-encoded SPKI string as a {@link !CryptoKey}.
- *
- * > Note: For RSA keys, use the rsaEncryption OID (1.2.840.113549.1.1.1). The id-RSASSA-PSS OID
- * > (1.2.840.113549.1.1.10) is not supported by the Web Cryptography API.
- *
- * @param spki PEM-encoded SPKI string
- * @param alg JSON Web Algorithm identifier to be used with the imported key. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- */
-export declare function importSPKI(spki: string, alg: string, options?: KeyImportOptions): Promise<t.CryptoKey>;
-/**
- * Imports a PEM-encoded X.509 certificate's public key as a {@link !CryptoKey}.
- *
- * > Note: For RSA keys, use the rsaEncryption OID (1.2.840.113549.1.1.1). The id-RSASSA-PSS OID
- * > (1.2.840.113549.1.1.10) is not supported by the Web Cryptography API.
- *
- * @param x509 X.509 certificate string
- * @param alg JSON Web Algorithm identifier to be used with the imported key. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- */
-export declare function importX509(x509: string, alg: string, options?: KeyImportOptions): Promise<t.CryptoKey>;
-/**
- * Imports a PEM-encoded PKCS #8 string as a {@link !CryptoKey}.
- *
- * > Note: For RSA keys, use the rsaEncryption OID (1.2.840.113549.1.1.1). The id-RSASSA-PSS OID
- * > (1.2.840.113549.1.1.10) is not supported by the Web Cryptography API.
- *
- * @param pkcs8 PEM-encoded PKCS #8 string
- * @param alg JSON Web Algorithm identifier to be used with the imported key. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- */
-export declare function importPKCS8(pkcs8: string, alg: string, options?: KeyImportOptions): Promise<t.CryptoKey>;
-/**
- * Imports a JWK as a {@link !CryptoKey} or {@link !Uint8Array}. Asymmetric imports require either the
- * "alg" argument or JWK "alg" parameter. For AKP keys, the JWK "alg" parameter is required and must
- * match the argument when provided.
- *
- * > Note: CryptoKey imports honor the JWK "key_ops" and "ext" parameters.
- *
- * > Note: Symmetric JWKs (`kty: "oct"`) return {@link !Uint8Array} instead of CryptoKey.
- *
- * @param jwk JSON Web Key.
- * @param alg JSON Web Algorithm identifier to be used with the imported key. Default is the "alg"
- *   property on the JWK. See
- *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- */
-export declare function importJWK<JWKType extends t.JWK>(jwk: JWKType, alg?: string, options?: KeyImportOptions): Promise<ImportedJWK<JWKType>>;