@tonyclaw/agent-inspector 4.0.8 → 4.0.10

package/.output/server/_libs/jwa.mjs

@@ -1,233 +1,3 @@
-import { a as requireSafeBuffer } from "./safe-buffer.mjs";
-import require$$1 from "crypto";
-import { r as requireEcdsaSigFormatter } from "./ecdsa-sig-formatter.mjs";
-import require$$2 from "util";
-import { r as requireBufferEqualConstantTime } from "./buffer-equal-constant-time.mjs";
-var jwa;
-var hasRequiredJwa;
-function requireJwa() {
-  if (hasRequiredJwa) return jwa;
-  hasRequiredJwa = 1;
-  var Buffer = requireSafeBuffer().Buffer;
-  var crypto = require$$1;
-  var formatEcdsa = requireEcdsaSigFormatter();
-  var util = require$$2;
-  var MSG_INVALID_ALGORITHM = '"%s" is not a valid algorithm.\n  Supported algorithms are:\n  "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".';
-  var MSG_INVALID_SECRET = "secret must be a string or buffer";
-  var MSG_INVALID_VERIFIER_KEY = "key must be a string or a buffer";
-  var MSG_INVALID_SIGNER_KEY = "key must be a string, a buffer or an object";
-  var supportsKeyObjects = typeof crypto.createPublicKey === "function";
-  if (supportsKeyObjects) {
-    MSG_INVALID_VERIFIER_KEY += " or a KeyObject";
-    MSG_INVALID_SECRET += "or a KeyObject";
-  }
-  function checkIsPublicKey(key) {
-    if (Buffer.isBuffer(key)) {
-      return;
-    }
-    if (typeof key === "string") {
-      return;
-    }
-    if (!supportsKeyObjects) {
-      throw typeError(MSG_INVALID_VERIFIER_KEY);
-    }
-    if (typeof key !== "object") {
-      throw typeError(MSG_INVALID_VERIFIER_KEY);
-    }
-    if (typeof key.type !== "string") {
-      throw typeError(MSG_INVALID_VERIFIER_KEY);
-    }
-    if (typeof key.asymmetricKeyType !== "string") {
-      throw typeError(MSG_INVALID_VERIFIER_KEY);
-    }
-    if (typeof key.export !== "function") {
-      throw typeError(MSG_INVALID_VERIFIER_KEY);
-    }
-  }
-  function checkIsPrivateKey(key) {
-    if (Buffer.isBuffer(key)) {
-      return;
-    }
-    if (typeof key === "string") {
-      return;
-    }
-    if (typeof key === "object") {
-      return;
-    }
-    throw typeError(MSG_INVALID_SIGNER_KEY);
-  }
-  function checkIsSecretKey(key) {
-    if (Buffer.isBuffer(key)) {
-      return;
-    }
-    if (typeof key === "string") {
-      return key;
-    }
-    if (!supportsKeyObjects) {
-      throw typeError(MSG_INVALID_SECRET);
-    }
-    if (typeof key !== "object") {
-      throw typeError(MSG_INVALID_SECRET);
-    }
-    if (key.type !== "secret") {
-      throw typeError(MSG_INVALID_SECRET);
-    }
-    if (typeof key.export !== "function") {
-      throw typeError(MSG_INVALID_SECRET);
-    }
-  }
-  function fromBase64(base64) {
-    return base64.replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
-  }
-  function toBase64(base64url) {
-    base64url = base64url.toString();
-    var padding = 4 - base64url.length % 4;
-    if (padding !== 4) {
-      for (var i = 0; i < padding; ++i) {
-        base64url += "=";
-      }
-    }
-    return base64url.replace(/\-/g, "+").replace(/_/g, "/");
-  }
-  function typeError(template) {
-    var args = [].slice.call(arguments, 1);
-    var errMsg = util.format.bind(util, template).apply(null, args);
-    return new TypeError(errMsg);
-  }
-  function bufferOrString(obj) {
-    return Buffer.isBuffer(obj) || typeof obj === "string";
-  }
-  function normalizeInput(thing) {
-    if (!bufferOrString(thing))
-      thing = JSON.stringify(thing);
-    return thing;
-  }
-  function createHmacSigner(bits) {
-    return function sign(thing, secret) {
-      checkIsSecretKey(secret);
-      thing = normalizeInput(thing);
-      var hmac = crypto.createHmac("sha" + bits, secret);
-      var sig = (hmac.update(thing), hmac.digest("base64"));
-      return fromBase64(sig);
-    };
-  }
-  var bufferEqual;
-  var timingSafeEqual = "timingSafeEqual" in crypto ? function timingSafeEqual2(a, b) {
-    if (a.byteLength !== b.byteLength) {
-      return false;
-    }
-    return crypto.timingSafeEqual(a, b);
-  } : function timingSafeEqual2(a, b) {
-    if (!bufferEqual) {
-      bufferEqual = requireBufferEqualConstantTime();
-    }
-    return bufferEqual(a, b);
-  };
-  function createHmacVerifier(bits) {
-    return function verify(thing, signature, secret) {
-      var computedSig = createHmacSigner(bits)(thing, secret);
-      return timingSafeEqual(Buffer.from(signature), Buffer.from(computedSig));
-    };
-  }
-  function createKeySigner(bits) {
-    return function sign(thing, privateKey) {
-      checkIsPrivateKey(privateKey);
-      thing = normalizeInput(thing);
-      var signer = crypto.createSign("RSA-SHA" + bits);
-      var sig = (signer.update(thing), signer.sign(privateKey, "base64"));
-      return fromBase64(sig);
-    };
-  }
-  function createKeyVerifier(bits) {
-    return function verify(thing, signature, publicKey) {
-      checkIsPublicKey(publicKey);
-      thing = normalizeInput(thing);
-      signature = toBase64(signature);
-      var verifier = crypto.createVerify("RSA-SHA" + bits);
-      verifier.update(thing);
-      return verifier.verify(publicKey, signature, "base64");
-    };
-  }
-  function createPSSKeySigner(bits) {
-    return function sign(thing, privateKey) {
-      checkIsPrivateKey(privateKey);
-      thing = normalizeInput(thing);
-      var signer = crypto.createSign("RSA-SHA" + bits);
-      var sig = (signer.update(thing), signer.sign({
-        key: privateKey,
-        padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
-        saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST
-      }, "base64"));
-      return fromBase64(sig);
-    };
-  }
-  function createPSSKeyVerifier(bits) {
-    return function verify(thing, signature, publicKey) {
-      checkIsPublicKey(publicKey);
-      thing = normalizeInput(thing);
-      signature = toBase64(signature);
-      var verifier = crypto.createVerify("RSA-SHA" + bits);
-      verifier.update(thing);
-      return verifier.verify({
-        key: publicKey,
-        padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
-        saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST
-      }, signature, "base64");
-    };
-  }
-  function createECDSASigner(bits) {
-    var inner = createKeySigner(bits);
-    return function sign() {
-      var signature = inner.apply(null, arguments);
-      signature = formatEcdsa.derToJose(signature, "ES" + bits);
-      return signature;
-    };
-  }
-  function createECDSAVerifer(bits) {
-    var inner = createKeyVerifier(bits);
-    return function verify(thing, signature, publicKey) {
-      signature = formatEcdsa.joseToDer(signature, "ES" + bits).toString("base64");
-      var result = inner(thing, signature, publicKey);
-      return result;
-    };
-  }
-  function createNoneSigner() {
-    return function sign() {
-      return "";
-    };
-  }
-  function createNoneVerifier() {
-    return function verify(thing, signature) {
-      return signature === "";
-    };
-  }
-  jwa = function jwa2(algorithm) {
-    var signerFactories = {
-      hs: createHmacSigner,
-      rs: createKeySigner,
-      ps: createPSSKeySigner,
-      es: createECDSASigner,
-      none: createNoneSigner
-    };
-    var verifierFactories = {
-      hs: createHmacVerifier,
-      rs: createKeyVerifier,
-      ps: createPSSKeyVerifier,
-      es: createECDSAVerifer,
-      none: createNoneVerifier
-    };
-    var match = algorithm.match(/^(RS|PS|ES|HS)(256|384|512)$|^(none)$/);
-    if (!match)
-      throw typeError(MSG_INVALID_ALGORITHM, algorithm);
-    var algo = (match[1] || match[3]).toLowerCase();
-    var bits = match[2];
-    return {
-      sign: signerFactories[algo](bits),
-      verify: verifierFactories[algo](bits)
-    };
-  };
-  return jwa;
-}
-export {
-  requireJwa as r
-};
+import{a as j}from"./safe-buffer.mjs";import C from"crypto";import{r as M}from"./ecdsa-sig-formatter.mjs";import O from"util";import{r as $}from"./buffer-equal-constant-time.mjs";var y,w;function Q(){if(w)return y;w=1;var u=j().Buffer,a=C,E=M(),l=O,P=`"%s" is not a valid algorithm.
+  Supported algorithms are:
+  "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".`,s="secret must be a string or buffer",c="key must be a string or a buffer",h="key must be a string, a buffer or an object",v=typeof a.createPublicKey=="function";v&&(c+=" or a KeyObject",s+="or a KeyObject");function _(r){if(!u.isBuffer(r)&&typeof r!="string"&&(!v||typeof r!="object"||typeof r.type!="string"||typeof r.asymmetricKeyType!="string"||typeof r.export!="function"))throw o(c)}function A(r){if(!u.isBuffer(r)&&typeof r!="string"&&typeof r!="object")throw o(h)}function q(r){if(!u.isBuffer(r)){if(typeof r=="string")return r;if(!v||typeof r!="object"||r.type!=="secret"||typeof r.export!="function")throw o(s)}}function g(r){return r.replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function d(r){r=r.toString();var i=4-r.length%4;if(i!==4)for(var e=0;e<i;++e)r+="=";return r.replace(/\-/g,"+").replace(/_/g,"/")}function o(r){var i=[].slice.call(arguments,1),e=l.format.bind(l,r).apply(null,i);return new TypeError(e)}function L(r){return u.isBuffer(r)||typeof r=="string"}function S(r){return L(r)||(r=JSON.stringify(r)),r}function I(r){return function(e,t){q(t),e=S(e);var n=a.createHmac("sha"+r,t),f=(n.update(e),n.digest("base64"));return g(f)}}var m,D="timingSafeEqual"in a?function(i,e){return i.byteLength!==e.byteLength?!1:a.timingSafeEqual(i,e)}:function(i,e){return m||(m=$()),m(i,e)};function H(r){return function(e,t,n){var f=I(r)(e,n);return D(u.from(t),u.from(f))}}function R(r){return function(e,t){A(t),e=S(e);var n=a.createSign("RSA-SHA"+r),f=(n.update(e),n.sign(t,"base64"));return g(f)}}function b(r){return function(e,t,n){_(n),e=S(e),t=d(t);var f=a.createVerify("RSA-SHA"+r);return f.update(e),f.verify(n,t,"base64")}}function K(r){return function(e,t){A(t),e=S(e);var n=a.createSign("RSA-SHA"+r),f=(n.update(e),n.sign({key:t,padding:a.constants.RSA_PKCS1_PSS_PADDING,saltLength:a.constants.RSA_PSS_SALTLEN_DIGEST},"base64"));return g(f)}}function N(r){return function(e,t,n){_(n),e=S(e),t=d(t);var f=a.createVerify("RSA-SHA"+r);return f.update(e),f.verify({key:n,padding:a.constants.RSA_PKCS1_PSS_PADDING,saltLength:a.constants.RSA_PSS_SALTLEN_DIGEST},t,"base64")}}function V(r){var i=R(r);return function(){var t=i.apply(null,arguments);return t=E.derToJose(t,"ES"+r),t}}function T(r){var i=b(r);return function(t,n,f){n=E.joseToDer(n,"ES"+r).toString("base64");var p=i(t,n,f);return p}}function B(){return function(){return""}}function G(){return function(i,e){return e===""}}return y=function(i){var e={hs:I,rs:R,ps:K,es:V,none:B},t={hs:H,rs:b,ps:N,es:T,none:G},n=i.match(/^(RS|PS|ES|HS)(256|384|512)$|^(none)$/);if(!n)throw o(P,i);var f=(n[1]||n[3]).toLowerCase(),p=n[2];return{sign:e[f](p),verify:t[f](p)}},y}export{Q as r};

package/.output/server/_libs/jws.mjs

@@ -1,298 +1 @@
-import { a as requireSafeBuffer } from "./safe-buffer.mjs";
-import require$$0 from "stream";
-import require$$2 from "util";
-import { r as requireJwa } from "./jwa.mjs";
-import require$$0$1 from "buffer";
-var jws = {};
-var dataStream;
-var hasRequiredDataStream;
-function requireDataStream() {
-  if (hasRequiredDataStream) return dataStream;
-  hasRequiredDataStream = 1;
-  var Buffer = requireSafeBuffer().Buffer;
-  var Stream = require$$0;
-  var util = require$$2;
-  function DataStream(data) {
-    this.buffer = null;
-    this.writable = true;
-    this.readable = true;
-    if (!data) {
-      this.buffer = Buffer.alloc(0);
-      return this;
-    }
-    if (typeof data.pipe === "function") {
-      this.buffer = Buffer.alloc(0);
-      data.pipe(this);
-      return this;
-    }
-    if (data.length || typeof data === "object") {
-      this.buffer = data;
-      this.writable = false;
-      process.nextTick((function() {
-        this.emit("end", data);
-        this.readable = false;
-        this.emit("close");
-      }).bind(this));
-      return this;
-    }
-    throw new TypeError("Unexpected data type (" + typeof data + ")");
-  }
-  util.inherits(DataStream, Stream);
-  DataStream.prototype.write = function write(data) {
-    this.buffer = Buffer.concat([this.buffer, Buffer.from(data)]);
-    this.emit("data", data);
-  };
-  DataStream.prototype.end = function end(data) {
-    if (data)
-      this.write(data);
-    this.emit("end", data);
-    this.emit("close");
-    this.writable = false;
-    this.readable = false;
-  };
-  dataStream = DataStream;
-  return dataStream;
-}
-var tostring;
-var hasRequiredTostring;
-function requireTostring() {
-  if (hasRequiredTostring) return tostring;
-  hasRequiredTostring = 1;
-  var Buffer = require$$0$1.Buffer;
-  tostring = function toString(obj) {
-    if (typeof obj === "string")
-      return obj;
-    if (typeof obj === "number" || Buffer.isBuffer(obj))
-      return obj.toString();
-    return JSON.stringify(obj);
-  };
-  return tostring;
-}
-var signStream;
-var hasRequiredSignStream;
-function requireSignStream() {
-  if (hasRequiredSignStream) return signStream;
-  hasRequiredSignStream = 1;
-  var Buffer = requireSafeBuffer().Buffer;
-  var DataStream = requireDataStream();
-  var jwa = requireJwa();
-  var Stream = require$$0;
-  var toString = requireTostring();
-  var util = require$$2;
-  function base64url(string, encoding) {
-    return Buffer.from(string, encoding).toString("base64").replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
-  }
-  function jwsSecuredInput(header, payload, encoding) {
-    encoding = encoding || "utf8";
-    var encodedHeader = base64url(toString(header), "binary");
-    var encodedPayload = base64url(toString(payload), encoding);
-    return util.format("%s.%s", encodedHeader, encodedPayload);
-  }
-  function jwsSign(opts) {
-    var header = opts.header;
-    var payload = opts.payload;
-    var secretOrKey = opts.secret || opts.privateKey;
-    var encoding = opts.encoding;
-    var algo = jwa(header.alg);
-    var securedInput = jwsSecuredInput(header, payload, encoding);
-    var signature = algo.sign(securedInput, secretOrKey);
-    return util.format("%s.%s", securedInput, signature);
-  }
-  function SignStream(opts) {
-    var secret = opts.secret;
-    secret = secret == null ? opts.privateKey : secret;
-    secret = secret == null ? opts.key : secret;
-    if (/^hs/i.test(opts.header.alg) === true && secret == null) {
-      throw new TypeError("secret must be a string or buffer or a KeyObject");
-    }
-    var secretStream = new DataStream(secret);
-    this.readable = true;
-    this.header = opts.header;
-    this.encoding = opts.encoding;
-    this.secret = this.privateKey = this.key = secretStream;
-    this.payload = new DataStream(opts.payload);
-    this.secret.once("close", (function() {
-      if (!this.payload.writable && this.readable)
-        this.sign();
-    }).bind(this));
-    this.payload.once("close", (function() {
-      if (!this.secret.writable && this.readable)
-        this.sign();
-    }).bind(this));
-  }
-  util.inherits(SignStream, Stream);
-  SignStream.prototype.sign = function sign() {
-    try {
-      var signature = jwsSign({
-        header: this.header,
-        payload: this.payload.buffer,
-        secret: this.secret.buffer,
-        encoding: this.encoding
-      });
-      this.emit("done", signature);
-      this.emit("data", signature);
-      this.emit("end");
-      this.readable = false;
-      return signature;
-    } catch (e) {
-      this.readable = false;
-      this.emit("error", e);
-      this.emit("close");
-    }
-  };
-  SignStream.sign = jwsSign;
-  signStream = SignStream;
-  return signStream;
-}
-var verifyStream;
-var hasRequiredVerifyStream;
-function requireVerifyStream() {
-  if (hasRequiredVerifyStream) return verifyStream;
-  hasRequiredVerifyStream = 1;
-  var Buffer = requireSafeBuffer().Buffer;
-  var DataStream = requireDataStream();
-  var jwa = requireJwa();
-  var Stream = require$$0;
-  var toString = requireTostring();
-  var util = require$$2;
-  var JWS_REGEX = /^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;
-  function isObject(thing) {
-    return Object.prototype.toString.call(thing) === "[object Object]";
-  }
-  function safeJsonParse(thing) {
-    if (isObject(thing))
-      return thing;
-    try {
-      return JSON.parse(thing);
-    } catch (e) {
-      return void 0;
-    }
-  }
-  function headerFromJWS(jwsSig) {
-    var encodedHeader = jwsSig.split(".", 1)[0];
-    return safeJsonParse(Buffer.from(encodedHeader, "base64").toString("binary"));
-  }
-  function securedInputFromJWS(jwsSig) {
-    return jwsSig.split(".", 2).join(".");
-  }
-  function signatureFromJWS(jwsSig) {
-    return jwsSig.split(".")[2];
-  }
-  function payloadFromJWS(jwsSig, encoding) {
-    encoding = encoding || "utf8";
-    var payload = jwsSig.split(".")[1];
-    return Buffer.from(payload, "base64").toString(encoding);
-  }
-  function isValidJws(string) {
-    return JWS_REGEX.test(string) && !!headerFromJWS(string);
-  }
-  function jwsVerify(jwsSig, algorithm, secretOrKey) {
-    if (!algorithm) {
-      var err = new Error("Missing algorithm parameter for jws.verify");
-      err.code = "MISSING_ALGORITHM";
-      throw err;
-    }
-    jwsSig = toString(jwsSig);
-    var signature = signatureFromJWS(jwsSig);
-    var securedInput = securedInputFromJWS(jwsSig);
-    var algo = jwa(algorithm);
-    return algo.verify(securedInput, signature, secretOrKey);
-  }
-  function jwsDecode(jwsSig, opts) {
-    opts = opts || {};
-    jwsSig = toString(jwsSig);
-    if (!isValidJws(jwsSig))
-      return null;
-    var header = headerFromJWS(jwsSig);
-    if (!header)
-      return null;
-    var payload = payloadFromJWS(jwsSig);
-    if (header.typ === "JWT" || opts.json)
-      payload = JSON.parse(payload, opts.encoding);
-    return {
-      header,
-      payload,
-      signature: signatureFromJWS(jwsSig)
-    };
-  }
-  function VerifyStream(opts) {
-    opts = opts || {};
-    var secretOrKey = opts.secret;
-    secretOrKey = secretOrKey == null ? opts.publicKey : secretOrKey;
-    secretOrKey = secretOrKey == null ? opts.key : secretOrKey;
-    if (/^hs/i.test(opts.algorithm) === true && secretOrKey == null) {
-      throw new TypeError("secret must be a string or buffer or a KeyObject");
-    }
-    var secretStream = new DataStream(secretOrKey);
-    this.readable = true;
-    this.algorithm = opts.algorithm;
-    this.encoding = opts.encoding;
-    this.secret = this.publicKey = this.key = secretStream;
-    this.signature = new DataStream(opts.signature);
-    this.secret.once("close", (function() {
-      if (!this.signature.writable && this.readable)
-        this.verify();
-    }).bind(this));
-    this.signature.once("close", (function() {
-      if (!this.secret.writable && this.readable)
-        this.verify();
-    }).bind(this));
-  }
-  util.inherits(VerifyStream, Stream);
-  VerifyStream.prototype.verify = function verify() {
-    try {
-      var valid = jwsVerify(this.signature.buffer, this.algorithm, this.key.buffer);
-      var obj = jwsDecode(this.signature.buffer, this.encoding);
-      this.emit("done", valid, obj);
-      this.emit("data", valid);
-      this.emit("end");
-      this.readable = false;
-      return valid;
-    } catch (e) {
-      this.readable = false;
-      this.emit("error", e);
-      this.emit("close");
-    }
-  };
-  VerifyStream.decode = jwsDecode;
-  VerifyStream.isValid = isValidJws;
-  VerifyStream.verify = jwsVerify;
-  verifyStream = VerifyStream;
-  return verifyStream;
-}
-var hasRequiredJws;
-function requireJws() {
-  if (hasRequiredJws) return jws;
-  hasRequiredJws = 1;
-  var SignStream = requireSignStream();
-  var VerifyStream = requireVerifyStream();
-  var ALGORITHMS = [
-    "HS256",
-    "HS384",
-    "HS512",
-    "RS256",
-    "RS384",
-    "RS512",
-    "PS256",
-    "PS384",
-    "PS512",
-    "ES256",
-    "ES384",
-    "ES512"
-  ];
-  jws.ALGORITHMS = ALGORITHMS;
-  jws.sign = SignStream.sign;
-  jws.verify = VerifyStream.verify;
-  jws.decode = VerifyStream.decode;
-  jws.isValid = VerifyStream.isValid;
-  jws.createSign = function createSign(opts) {
-    return new SignStream(opts);
-  };
-  jws.createVerify = function createVerify(opts) {
-    return new VerifyStream(opts);
-  };
-  return jws;
-}
-export {
-  requireJws as r
-};
+import{a as V}from"./safe-buffer.mjs";import B from"stream";import T from"util";import{r as k}from"./jwa.mjs";import M from"buffer";var d={},q,E;function A(){if(E)return q;E=1;var n=V().Buffer,u=B,s=T;function h(i){if(this.buffer=null,this.writable=!0,this.readable=!0,!i)return this.buffer=n.alloc(0),this;if(typeof i.pipe=="function")return this.buffer=n.alloc(0),i.pipe(this),this;if(i.length||typeof i=="object")return this.buffer=i,this.writable=!1,process.nextTick((function(){this.emit("end",i),this.readable=!1,this.emit("close")}).bind(this)),this;throw new TypeError("Unexpected data type ("+typeof i+")")}return s.inherits(h,u),h.prototype.write=function(f){this.buffer=n.concat([this.buffer,n.from(f)]),this.emit("data",f)},h.prototype.end=function(f){f&&this.write(f),this.emit("end",f),this.emit("close"),this.writable=!1,this.readable=!1},q=h,q}var J,I;function D(){if(I)return J;I=1;var n=M.Buffer;return J=function(s){return typeof s=="string"?s:typeof s=="number"||n.isBuffer(s)?s.toString():JSON.stringify(s)},J}var O,K;function P(){if(K)return O;K=1;var n=V().Buffer,u=A(),s=k(),h=B,i=D(),f=T;function b(a,t){return n.from(a,t).toString("base64").replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function w(a,t,o){o=o||"utf8";var m=b(i(a),"binary"),S=b(i(t),o);return f.format("%s.%s",m,S)}function g(a){var t=a.header,o=a.payload,m=a.secret||a.privateKey,S=a.encoding,p=s(t.alg),l=w(t,o,S),e=p.sign(l,m);return f.format("%s.%s",l,e)}function y(a){var t=a.secret;if(t=t??a.privateKey,t=t??a.key,/^hs/i.test(a.header.alg)===!0&&t==null)throw new TypeError("secret must be a string or buffer or a KeyObject");var o=new u(t);this.readable=!0,this.header=a.header,this.encoding=a.encoding,this.secret=this.privateKey=this.key=o,this.payload=new u(a.payload),this.secret.once("close",(function(){!this.payload.writable&&this.readable&&this.sign()}).bind(this)),this.payload.once("close",(function(){!this.secret.writable&&this.readable&&this.sign()}).bind(this))}return f.inherits(y,h),y.prototype.sign=function(){try{var t=g({header:this.header,payload:this.payload.buffer,secret:this.secret.buffer,encoding:this.encoding});return this.emit("done",t),this.emit("data",t),this.emit("end"),this.readable=!1,t}catch(o){this.readable=!1,this.emit("error",o),this.emit("close")}},y.sign=g,O=y,O}var R,H;function j(){if(H)return R;H=1;var n=V().Buffer,u=A(),s=k(),h=B,i=D(),f=T,b=/^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.([a-zA-Z0-9\-_]+)?$/;function w(e){return Object.prototype.toString.call(e)==="[object Object]"}function g(e){if(w(e))return e;try{return JSON.parse(e)}catch{return}}function y(e){var r=e.split(".",1)[0];return g(n.from(r,"base64").toString("binary"))}function a(e){return e.split(".",2).join(".")}function t(e){return e.split(".")[2]}function o(e,r){r=r||"utf8";var c=e.split(".")[1];return n.from(c,"base64").toString(r)}function m(e){return b.test(e)&&!!y(e)}function S(e,r,c){if(!r){var v=new Error("Missing algorithm parameter for jws.verify");throw v.code="MISSING_ALGORITHM",v}e=i(e);var W=t(e),_=a(e),G=s(r);return G.verify(_,W,c)}function p(e,r){if(r=r||{},e=i(e),!m(e))return null;var c=y(e);if(!c)return null;var v=o(e);return(c.typ==="JWT"||r.json)&&(v=JSON.parse(v,r.encoding)),{header:c,payload:v,signature:t(e)}}function l(e){e=e||{};var r=e.secret;if(r=r??e.publicKey,r=r??e.key,/^hs/i.test(e.algorithm)===!0&&r==null)throw new TypeError("secret must be a string or buffer or a KeyObject");var c=new u(r);this.readable=!0,this.algorithm=e.algorithm,this.encoding=e.encoding,this.secret=this.publicKey=this.key=c,this.signature=new u(e.signature),this.secret.once("close",(function(){!this.signature.writable&&this.readable&&this.verify()}).bind(this)),this.signature.once("close",(function(){!this.secret.writable&&this.readable&&this.verify()}).bind(this))}return f.inherits(l,h),l.prototype.verify=function(){try{var r=S(this.signature.buffer,this.algorithm,this.key.buffer),c=p(this.signature.buffer,this.encoding);return this.emit("done",r,c),this.emit("data",r),this.emit("end"),this.readable=!1,r}catch(v){this.readable=!1,this.emit("error",v),this.emit("close")}},l.decode=p,l.isValid=m,l.verify=S,R=l,R}var $;function Z(){if($)return d;$=1;var n=P(),u=j(),s=["HS256","HS384","HS512","RS256","RS384","RS512","PS256","PS384","PS512","ES256","ES384","ES512"];return d.ALGORITHMS=s,d.sign=n.sign,d.verify=u.verify,d.decode=u.decode,d.isValid=u.isValid,d.createSign=function(i){return new n(i)},d.createVerify=function(i){return new u(i)},d}export{Z as r};