@suveren/gateway 0.7.4 → 0.8.0

package/node_modules/jose/dist/webapi/lib/type_checks.js

@@ -1,35 +1,30 @@
-export function isObject(input) {
-    if (typeof input !== 'object' ||
-        input === null ||
-        Object.prototype.toString.call(input) !== '[object Object]') {
-        return false;
-    }
-    const prototype = Object.getPrototypeOf(input);
-    if (prototype === null) {
-        return true;
-    }
-    let proto = prototype;
-    while (Object.getPrototypeOf(proto) !== null) {
-        proto = Object.getPrototypeOf(proto);
-    }
-    return prototype === proto;
+function assertUint8Array(input, label) {
+  if (!(input instanceof Uint8Array))
+    throw new TypeError(`${label} must be an instance of Uint8Array`);
 }
-export function isDisjoint(...headers) {
-    const parameters = new Set();
-    for (const header of headers) {
-        if (!header)
-            continue;
-        for (const parameter of Object.keys(header)) {
-            if (parameters.has(parameter)) {
-                return false;
-            }
-            parameters.add(parameter);
-        }
-    }
-    return true;
+function isObject(input) {
+  if (typeof input != "object" || input === null || Object.prototype.toString.call(input) !== "[object Object]")
+    return !1;
+  const prototype = Object.getPrototypeOf(input);
+  return prototype === null || Object.getPrototypeOf(prototype) === null;
 }
-export const isJWK = (key) => isObject(key) && typeof key.kty === 'string';
-export const isPrivateJWK = (key) => key.kty !== 'oct' &&
-    ((key.kty === 'AKP' && typeof key.priv === 'string') || typeof key.d === 'string');
-export const isPublicJWK = (key) => key.kty !== 'oct' && key.d === undefined && key.priv === undefined;
-export const isSecretJWK = (key) => key.kty === 'oct' && typeof key.k === 'string';
+function isJwkSet(input) {
+  return isObject(input) && Array.isArray(input.keys) && Array.from(input.keys).every(isObject);
+}
+function isDisjoint(...headers) {
+  const parameters = /* @__PURE__ */ new Set();
+  for (const header of headers)
+    if (header)
+      for (const parameter of Object.keys(header)) {
+        if (parameters.has(parameter))
+          return !1;
+        parameters.add(parameter);
+      }
+  return !0;
+}
+export {
+  assertUint8Array,
+  isDisjoint,
+  isJwkSet,
+  isObject
+};

package/node_modules/jose/dist/webapi/util/base64url.js

@@ -1,39 +1,30 @@
-import { encoder, decoder } from '../lib/buffer_utils.js';
-import { encodeBase64, decodeBase64 } from '../lib/base64.js';
-const invalid = 'The input to be decoded is not correctly encoded.';
-export function decode(input) {
-    if (Uint8Array.fromBase64) {
-        try {
-            return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {
-                alphabet: 'base64url',
-            });
-        }
-        catch (cause) {
-            throw new TypeError(invalid, { cause });
-        }
-    }
-    let encoded = input;
-    if (encoded instanceof Uint8Array) {
-        encoded = decoder.decode(encoded);
-    }
-    if (encoded.includes('+') || encoded.includes('/')) {
-        throw new TypeError(invalid);
-    }
-    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');
+import { encoder, decoder } from "../lib/buffer_utils.js";
+import { encodeBase64, decodeBase64 } from "../lib/base64.js";
+const invalid = "The input to be decoded is not correctly encoded.";
+function decode(input) {
+  if (Uint8Array.fromBase64)
     try {
-        return decodeBase64(encoded);
-    }
-    catch {
-        throw new TypeError(invalid);
+      return Uint8Array.fromBase64(typeof input == "string" ? input : decoder.decode(input), {
+        alphabet: "base64url"
+      });
+    } catch (cause) {
+      throw new TypeError(invalid, { cause });
     }
+  let encoded = input;
+  if (encoded instanceof Uint8Array && (encoded = decoder.decode(encoded)), encoded.includes("+") || encoded.includes("/"))
+    throw new TypeError(invalid);
+  encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
+  try {
+    return decodeBase64(encoded);
+  } catch {
+    throw new TypeError(invalid);
+  }
 }
-export function encode(input) {
-    let unencoded = input;
-    if (typeof unencoded === 'string') {
-        unencoded = encoder.encode(unencoded);
-    }
-    if (Uint8Array.prototype.toBase64) {
-        return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });
-    }
-    return encodeBase64(unencoded).replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+function encode(input) {
+  let unencoded = input;
+  return typeof unencoded == "string" && (unencoded = encoder.encode(unencoded)), Uint8Array.prototype.toBase64 ? unencoded.toBase64({ alphabet: "base64url", omitPadding: !0 }) : encodeBase64(unencoded).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
 }
+export {
+  decode,
+  encode
+};

package/node_modules/jose/dist/webapi/util/decode_jwt.js

@@ -1,32 +1,33 @@
-import { decode as b64u } from './base64url.js';
-import { strictDecoder } from '../lib/buffer_utils.js';
-import { isObject } from '../lib/type_checks.js';
-import { JWTInvalid } from './errors.js';
-export function decodeJwt(jwt) {
-    if (typeof jwt !== 'string')
-        throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');
-    const { 1: payload, length } = jwt.split('.');
-    if (length === 5)
-        throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');
-    if (length !== 3)
-        throw new JWTInvalid('Invalid JWT');
-    if (!payload)
-        throw new JWTInvalid('JWTs must contain a payload');
-    let decoded;
-    try {
-        decoded = b64u(payload);
-    }
-    catch {
-        throw new JWTInvalid('Failed to base64url decode the payload');
-    }
-    let result;
-    try {
-        result = JSON.parse(strictDecoder.decode(decoded));
-    }
-    catch {
-        throw new JWTInvalid('Failed to parse the decoded payload as JSON');
-    }
-    if (!isObject(result))
-        throw new JWTInvalid('Invalid JWT Claims Set');
-    return result;
+import { decode as b64u } from "./base64url.js";
+import { strictDecoder } from "../lib/buffer_utils.js";
+import { isObject } from "../lib/type_checks.js";
+import { JWTInvalid } from "./errors.js";
+function decodeJwt(jwt) {
+  if (typeof jwt != "string")
+    throw new JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");
+  const { 1: payload, length } = jwt.split(".");
+  if (length === 5)
+    throw new JWTInvalid("Only JWTs using Compact JWS serialization can be decoded");
+  if (length !== 3)
+    throw new JWTInvalid("Invalid JWT");
+  if (!payload)
+    throw new JWTInvalid("JWTs must contain a payload");
+  let decoded;
+  try {
+    decoded = b64u(payload);
+  } catch {
+    throw new JWTInvalid("Failed to base64url decode the payload");
+  }
+  let result;
+  try {
+    result = JSON.parse(strictDecoder.decode(decoded));
+  } catch {
+    throw new JWTInvalid("Failed to parse the decoded payload as JSON");
+  }
+  if (!isObject(result))
+    throw new JWTInvalid("Invalid JWT Claims Set");
+  return result;
 }
+export {
+  decodeJwt
+};

package/node_modules/jose/dist/webapi/util/decode_protected_header.js

@@ -1,24 +1,19 @@
-import { parseJoseHeader } from '../lib/helpers.js';
-export function decodeProtectedHeader(token) {
-    let protectedB64u;
-    if (typeof token === 'string') {
-        const parts = token.split('.');
-        if (parts.length === 3 || parts.length === 5) {
-            ;
-            [protectedB64u] = parts;
-        }
-    }
-    else if (typeof token === 'object' && token) {
-        if ('protected' in token) {
-            protectedB64u = token.protected;
-        }
-        else {
-            throw new TypeError('Token does not contain a Protected Header');
-        }
-    }
-    const invalid = 'Invalid Token or Protected Header formatting';
-    if (typeof protectedB64u !== 'string' || !protectedB64u) {
-        throw new TypeError(invalid);
-    }
-    return parseJoseHeader(protectedB64u, TypeError, invalid);
+import { parseJoseHeader } from "../lib/helpers.js";
+function decodeProtectedHeader(token) {
+  let protectedB64u;
+  if (typeof token == "string") {
+    const parts = token.split(".");
+    (parts.length === 3 || parts.length === 5) && ([protectedB64u] = parts);
+  } else if (typeof token == "object" && token)
+    if ("protected" in token)
+      protectedB64u = token.protected;
+    else
+      throw new TypeError("Token does not contain a Protected Header");
+  const invalid = "Invalid Token or Protected Header formatting";
+  if (typeof protectedB64u != "string" || !protectedB64u)
+    throw new TypeError(invalid);
+  return parseJoseHeader(protectedB64u, TypeError, invalid);
 }
+export {
+  decodeProtectedHeader
+};

package/node_modules/jose/dist/webapi/util/errors.js

@@ -1,99 +1,109 @@
-export class JOSEError extends Error {
-    static code = 'ERR_JOSE_GENERIC';
-    code = 'ERR_JOSE_GENERIC';
-    constructor(message, options) {
-        super(message, options);
-        this.name = this.constructor.name;
-        Error.captureStackTrace?.(this, this.constructor);
-    }
+class JOSEError extends Error {
+  static code = "ERR_JOSE_GENERIC";
+  code = "ERR_JOSE_GENERIC";
+  constructor(message, options) {
+    super(message, options), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
+  }
 }
-export class JWTClaimValidationFailed extends JOSEError {
-    static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';
-    code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';
-    claim;
-    reason;
-    payload;
-    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {
-        super(message, { cause: { claim, reason, payload } });
-        this.claim = claim;
-        this.reason = reason;
-        this.payload = payload;
-    }
+class JWTClaimValidationFailed extends JOSEError {
+  static code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+  code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+  claim;
+  reason;
+  payload;
+  constructor(message, payload, claim = "unspecified", reason = "unspecified") {
+    super(message, { cause: { claim, reason, payload } }), this.claim = claim, this.reason = reason, this.payload = payload;
+  }
 }
-export class JWTExpired extends JOSEError {
-    static code = 'ERR_JWT_EXPIRED';
-    code = 'ERR_JWT_EXPIRED';
-    claim;
-    reason;
-    payload;
-    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {
-        super(message, { cause: { claim, reason, payload } });
-        this.claim = claim;
-        this.reason = reason;
-        this.payload = payload;
-    }
+class JWTExpired extends JOSEError {
+  static code = "ERR_JWT_EXPIRED";
+  code = "ERR_JWT_EXPIRED";
+  claim;
+  reason;
+  payload;
+  constructor(message, payload, claim = "unspecified", reason = "unspecified") {
+    super(message, { cause: { claim, reason, payload } }), this.claim = claim, this.reason = reason, this.payload = payload;
+  }
 }
-export class JOSEAlgNotAllowed extends JOSEError {
-    static code = 'ERR_JOSE_ALG_NOT_ALLOWED';
-    code = 'ERR_JOSE_ALG_NOT_ALLOWED';
+class JOSEAlgNotAllowed extends JOSEError {
+  static code = "ERR_JOSE_ALG_NOT_ALLOWED";
+  code = "ERR_JOSE_ALG_NOT_ALLOWED";
 }
-export class JOSENotSupported extends JOSEError {
-    static code = 'ERR_JOSE_NOT_SUPPORTED';
-    code = 'ERR_JOSE_NOT_SUPPORTED';
+class JOSENotSupported extends JOSEError {
+  static code = "ERR_JOSE_NOT_SUPPORTED";
+  code = "ERR_JOSE_NOT_SUPPORTED";
 }
-export class JWEDecryptionFailed extends JOSEError {
-    static code = 'ERR_JWE_DECRYPTION_FAILED';
-    code = 'ERR_JWE_DECRYPTION_FAILED';
-    constructor(message = 'decryption operation failed', options) {
-        super(message, options);
-    }
+class JWEDecryptionFailed extends JOSEError {
+  static code = "ERR_JWE_DECRYPTION_FAILED";
+  code = "ERR_JWE_DECRYPTION_FAILED";
+  constructor(message = "decryption operation failed", options) {
+    super(message, options);
+  }
 }
-export class JWEInvalid extends JOSEError {
-    static code = 'ERR_JWE_INVALID';
-    code = 'ERR_JWE_INVALID';
+class JWEInvalid extends JOSEError {
+  static code = "ERR_JWE_INVALID";
+  code = "ERR_JWE_INVALID";
 }
-export class JWSInvalid extends JOSEError {
-    static code = 'ERR_JWS_INVALID';
-    code = 'ERR_JWS_INVALID';
+class JWSInvalid extends JOSEError {
+  static code = "ERR_JWS_INVALID";
+  code = "ERR_JWS_INVALID";
 }
-export class JWTInvalid extends JOSEError {
-    static code = 'ERR_JWT_INVALID';
-    code = 'ERR_JWT_INVALID';
+class JWTInvalid extends JOSEError {
+  static code = "ERR_JWT_INVALID";
+  code = "ERR_JWT_INVALID";
 }
-export class JWKInvalid extends JOSEError {
-    static code = 'ERR_JWK_INVALID';
-    code = 'ERR_JWK_INVALID';
+class JWKInvalid extends JOSEError {
+  static code = "ERR_JWK_INVALID";
+  code = "ERR_JWK_INVALID";
 }
-export class JWKSInvalid extends JOSEError {
-    static code = 'ERR_JWKS_INVALID';
-    code = 'ERR_JWKS_INVALID';
+class JWKSInvalid extends JOSEError {
+  static code = "ERR_JWKS_INVALID";
+  code = "ERR_JWKS_INVALID";
 }
-export class JWKSNoMatchingKey extends JOSEError {
-    static code = 'ERR_JWKS_NO_MATCHING_KEY';
-    code = 'ERR_JWKS_NO_MATCHING_KEY';
-    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {
-        super(message, options);
-    }
+class JWKSNoMatchingKey extends JOSEError {
+  static code = "ERR_JWKS_NO_MATCHING_KEY";
+  code = "ERR_JWKS_NO_MATCHING_KEY";
+  constructor(message = "no applicable key found in the JSON Web Key Set", options) {
+    super(message, options);
+  }
 }
-export class JWKSMultipleMatchingKeys extends JOSEError {
-    [Symbol.asyncIterator] = async function* () { };
-    static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
-    code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
-    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {
-        super(message, options);
-    }
+class JWKSMultipleMatchingKeys extends JOSEError {
+  [Symbol.asyncIterator] = async function* () {
+  };
+  static code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+  code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+  constructor(message = "multiple matching keys found in the JSON Web Key Set", options) {
+    super(message, options);
+  }
 }
-export class JWKSTimeout extends JOSEError {
-    static code = 'ERR_JWKS_TIMEOUT';
-    code = 'ERR_JWKS_TIMEOUT';
-    constructor(message = 'request timed out', options) {
-        super(message, options);
-    }
+class JWKSTimeout extends JOSEError {
+  static code = "ERR_JWKS_TIMEOUT";
+  code = "ERR_JWKS_TIMEOUT";
+  constructor(message = "request timed out", options) {
+    super(message, options);
+  }
 }
-export class JWSSignatureVerificationFailed extends JOSEError {
-    static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
-    code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
-    constructor(message = 'signature verification failed', options) {
-        super(message, options);
-    }
+class JWSSignatureVerificationFailed extends JOSEError {
+  static code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+  code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+  constructor(message = "signature verification failed", options) {
+    super(message, options);
+  }
 }
+export {
+  JOSEAlgNotAllowed,
+  JOSEError,
+  JOSENotSupported,
+  JWEDecryptionFailed,
+  JWEInvalid,
+  JWKInvalid,
+  JWKSInvalid,
+  JWKSMultipleMatchingKeys,
+  JWKSNoMatchingKey,
+  JWKSTimeout,
+  JWSInvalid,
+  JWSSignatureVerificationFailed,
+  JWTClaimValidationFailed,
+  JWTExpired,
+  JWTInvalid
+};

package/node_modules/jose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "6.2.8",
+  "version": "6.2.11",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "akp",
@@ -67,13 +67,9 @@
       "types": "./dist/types/index.d.ts",
       "default": "./dist/webapi/index.js"
     },
-    "./jwk/embedded": {
-      "types": "./dist/types/jwk/embedded.d.ts",
-      "default": "./dist/webapi/jwk/embedded.js"
-    },
-    "./jwk/thumbprint": {
-      "types": "./dist/types/jwk/thumbprint.d.ts",
-      "default": "./dist/webapi/jwk/thumbprint.js"
+    "./jwk/*": {
+      "types": "./dist/types/jwk/*.d.ts",
+      "default": "./dist/webapi/jwk/*.js"
     },
     "./key/import": {
       "types": "./dist/types/key/import.d.ts",
@@ -91,89 +87,29 @@
       "types": "./dist/types/key/generate_secret.d.ts",
       "default": "./dist/webapi/key/generate_secret.js"
     },
-    "./jwks/remote": {
-      "types": "./dist/types/jwks/remote.d.ts",
-      "default": "./dist/webapi/jwks/remote.js"
-    },
-    "./jwks/local": {
-      "types": "./dist/types/jwks/local.d.ts",
-      "default": "./dist/webapi/jwks/local.js"
-    },
-    "./jwt/sign": {
-      "types": "./dist/types/jwt/sign.d.ts",
-      "default": "./dist/webapi/jwt/sign.js"
-    },
-    "./jwt/verify": {
-      "types": "./dist/types/jwt/verify.d.ts",
-      "default": "./dist/webapi/jwt/verify.js"
-    },
-    "./jwt/encrypt": {
-      "types": "./dist/types/jwt/encrypt.d.ts",
-      "default": "./dist/webapi/jwt/encrypt.js"
-    },
-    "./jwt/decrypt": {
-      "types": "./dist/types/jwt/decrypt.d.ts",
-      "default": "./dist/webapi/jwt/decrypt.js"
-    },
-    "./jwt/unsecured": {
-      "types": "./dist/types/jwt/unsecured.d.ts",
-      "default": "./dist/webapi/jwt/unsecured.js"
+    "./jwks/*": {
+      "types": "./dist/types/jwks/*.d.ts",
+      "default": "./dist/webapi/jwks/*.js"
     },
     "./jwt/decode": {
       "types": "./dist/types/util/decode_jwt.d.ts",
       "default": "./dist/webapi/util/decode_jwt.js"
     },
+    "./jwt/*": {
+      "types": "./dist/types/jwt/*.d.ts",
+      "default": "./dist/webapi/jwt/*.js"
+    },
     "./decode/protected_header": {
       "types": "./dist/types/util/decode_protected_header.d.ts",
       "default": "./dist/webapi/util/decode_protected_header.js"
     },
-    "./jws/compact/sign": {
-      "types": "./dist/types/jws/compact/sign.d.ts",
-      "default": "./dist/webapi/jws/compact/sign.js"
-    },
-    "./jws/compact/verify": {
-      "types": "./dist/types/jws/compact/verify.d.ts",
-      "default": "./dist/webapi/jws/compact/verify.js"
-    },
-    "./jws/flattened/sign": {
-      "types": "./dist/types/jws/flattened/sign.d.ts",
-      "default": "./dist/webapi/jws/flattened/sign.js"
-    },
-    "./jws/flattened/verify": {
-      "types": "./dist/types/jws/flattened/verify.d.ts",
-      "default": "./dist/webapi/jws/flattened/verify.js"
-    },
-    "./jws/general/sign": {
-      "types": "./dist/types/jws/general/sign.d.ts",
-      "default": "./dist/webapi/jws/general/sign.js"
-    },
-    "./jws/general/verify": {
-      "types": "./dist/types/jws/general/verify.d.ts",
-      "default": "./dist/webapi/jws/general/verify.js"
-    },
-    "./jwe/compact/encrypt": {
-      "types": "./dist/types/jwe/compact/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/compact/encrypt.js"
-    },
-    "./jwe/compact/decrypt": {
-      "types": "./dist/types/jwe/compact/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/compact/decrypt.js"
-    },
-    "./jwe/flattened/encrypt": {
-      "types": "./dist/types/jwe/flattened/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/flattened/encrypt.js"
-    },
-    "./jwe/flattened/decrypt": {
-      "types": "./dist/types/jwe/flattened/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/flattened/decrypt.js"
-    },
-    "./jwe/general/encrypt": {
-      "types": "./dist/types/jwe/general/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/general/encrypt.js"
+    "./jws/*": {
+      "types": "./dist/types/jws/*.d.ts",
+      "default": "./dist/webapi/jws/*.js"
     },
-    "./jwe/general/decrypt": {
-      "types": "./dist/types/jwe/general/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/general/decrypt.js"
+    "./jwe/*": {
+      "types": "./dist/types/jwe/*.d.ts",
+      "default": "./dist/webapi/jwe/*.js"
     },
     "./errors": {
       "types": "./dist/types/util/errors.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.7.4",
+  "version": "0.8.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",
@@ -24,7 +24,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@hap/core": "npm:@humanagencyp/hap-core@^0.8.4",
+    "@hap/core": "npm:@humanagencyp/hap-core@^0.10.0",
     "@hpke/core": "^1.9.0",
     "express": "^4.18.0",
     "http-proxy-middleware": "^3.0.0",