@vibes.diy/identity 3.0.3 → 4.0.2

package/types/device-id-payload.d.ts

@@ -1,5 +1,71 @@
 import { z } from "zod";
-import type { Subject, Extensions, FPDeviceIDCSRPayload, FPDeviceIDSession } from "@fireproof/core-types-base";
+import { type JWKPublic } from "./wire.js";
+import { type ClerkClaim } from "../clerk-claim.js";
+export interface JWTPayload {
+    azp?: string;
+    iss?: string;
+    sub?: string;
+    aud?: string | string[];
+    exp?: number;
+    nbf?: number;
+    iat?: number;
+    jti?: string;
+}
+export interface Subject {
+    commonName: string;
+    countryName?: string;
+    stateOrProvinceName?: string;
+    locality?: string;
+    organization?: string;
+    organizationalUnitName?: string;
+    emailAddress?: string;
+    serialNumber?: string;
+    streetAddress?: string;
+    postalCode?: string;
+    businessCategory?: string;
+    jurisdictionCountryName?: string;
+    jurisdictionStateOrProvinceName?: string;
+    jurisdictionLocalityName?: string;
+}
+export interface Extensions {
+    subjectAltName?: string[];
+    keyUsage?: ("digitalSignature" | "nonRepudiation" | "keyEncipherment" | "dataEncipherment" | "keyAgreement" | "keyCertSign" | "cRLSign" | "encipherOnly" | "decipherOnly")[];
+    extendedKeyUsage?: ("serverAuth" | "clientAuth" | "codeSigning" | "emailProtection" | "timeStamping" | "OCSPSigning" | "ipsecIKE" | "msCodeInd" | "msCodeCom" | "msCTLSign" | "msEFS")[];
+    basicConstraints?: {
+        cA?: boolean;
+        pathLenConstraint?: number;
+    };
+    authorityKeyIdentifier?: string;
+    subjectKeyIdentifier?: string;
+    certificatePolicies?: {
+        policyIdentifier: string;
+        policyQualifiers?: string[];
+    }[];
+    crlDistributionPoints?: string[];
+    authorityInfoAccess?: {
+        ocsp?: string[];
+        caIssuers?: string[];
+    };
+    nameConstraints?: {
+        permitted?: string[];
+        excluded?: string[];
+    };
+}
+export type FPDeviceIDCSRPayload = Readonly<JWTPayload & {
+    creatingUser?: {
+        type: "clerk";
+        claims: ClerkClaim;
+    };
+    csr: Readonly<{
+        subject: Subject;
+        publicKey: JWKPublic;
+        extensions?: Extensions;
+    }>;
+}>;
+export type FPDeviceIDSession = Readonly<JWTPayload & {
+    deviceId: string;
+    seq: number;
+}>;
 export declare const SubjectSchema: z.ZodType<Subject>;
 export declare const ExtensionsSchema: z.ZodType<Extensions>;
 export declare const FPDeviceIDCSRPayloadSchema: z.ZodType<FPDeviceIDCSRPayload>;

package/types/device-id-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-id-payload.js","sourceRoot":"","sources":["../../jsr/types/device-id-payload.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAuB,CAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,+BAA+B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAuB,CAAC;AAEzB,MAAM,CAAC,MAAM,gBAAgB,GAA0B,CAAC,CAAC,MAAM,CAAC;IAC9D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;QAClB,cAAc;QACd,aAAa;QACb,SAAS;QACT,cAAc;QACd,cAAc;KACf,CAAC,CACH;SACA,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,cAAc;QACd,aAAa;QACb,UAAU;QACV,WAAW;QACX,WAAW;QACX,WAAW;QACX,OAAO;KACR,CAAC,CACH;SACA,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC;SACD,QAAQ,EAAE;IACb,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,mBAAmB,EAAE,CAAC;SACnB,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACjD,CAAC,CACH;SACA,QAAQ,EAAE;IACb,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,mBAAmB,EAAE,CAAC;SACnB,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;KAChD,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC;SACf,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,QAAQ,EAAE;CACd,CAA0B,CAAC;AAE5B,MAAM,CAAC,MAAM,0BAA0B,GAAoC,gBAAgB,CAAC,MAAM,CAAC;IACjG,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACC,MAAM,EAAE;KACR,QAAQ,EAAqC,CAAC;AAEjD,MAAM,CAAC,MAAM,uBAAuB,GAAiC,gBAAgB,CAAC,MAAM,CAAC;IAC3F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC;KACC,MAAM,EAAE;KACR,QAAQ,EAAkC,CAAC"}
+{"version":3,"file":"device-id-payload.js","sourceRoot":"","sources":["../../jsr/types/device-id-payload.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAkB,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AA2FtE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAuB,CAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,+BAA+B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAuB,CAAC;AAEzB,MAAM,CAAC,MAAM,gBAAgB,GAA0B,CAAC,CAAC,MAAM,CAAC;IAC9D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB;QACjB,kBAAkB;QAClB,cAAc;QACd,aAAa;QACb,SAAS;QACT,cAAc;QACd,cAAc;KACf,CAAC,CACH;SACA,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;QACL,YAAY;QACZ,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,cAAc;QACd,aAAa;QACb,UAAU;QACV,WAAW;QACX,WAAW;QACX,WAAW;QACX,OAAO;KACR,CAAC,CACH;SACA,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC;SACD,QAAQ,EAAE;IACb,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,mBAAmB,EAAE,CAAC;SACnB,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC5B,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACjD,CAAC,CACH;SACA,QAAQ,EAAE;IACb,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3D,mBAAmB,EAAE,CAAC;SACnB,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;KAChD,CAAC;SACD,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC;SACf,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,QAAQ,EAAE;CACd,CAA0B,CAAC;AAE5B,MAAM,CAAC,MAAM,0BAA0B,GAAoC,gBAAgB,CAAC,MAAM,CAAC;IACjG,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACC,MAAM,EAAE;KACR,QAAQ,EAAqC,CAAC;AAEjD,MAAM,CAAC,MAAM,uBAAuB,GAAiC,gBAAgB,CAAC,MAAM,CAAC;IAC3F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC;KACC,MAAM,EAAE;KACR,QAAQ,EAAkC,CAAC"}

package/types/device-id-payload.test.js

@@ -1,6 +1,5 @@
 import { describe, it, expect } from "vitest";
 import { SubjectSchema, ExtensionsSchema, FPDeviceIDSessionSchema, FPDeviceIDCSRPayloadSchema } from "./device-id-payload.js";
-import { SubjectSchema as UpstreamSubject, ExtensionsSchema as UpstreamExtensions, FPDeviceIDSessionSchema as UpstreamSession, FPDeviceIDCSRPayloadSchema as UpstreamCSR, } from "@fireproof/core-types-base";
 const publicKey = { kty: "EC", crv: "P-256", x: "abc", y: "def" };
 const subject = { commonName: "device-1" };
 const fullClerkClaim = {
@@ -39,46 +38,35 @@ const csrPayload = (creatingUser) => ({
         extensions: { subjectAltName: [], keyUsage: ["digitalSignature"], extendedKeyUsage: ["serverAuth"] },
     },
 });
-describe("device-id payload schemas — owned vs upstream parity (non-Clerk parts)", () => {
-    it("Subject: owned and upstream agree on accept/reject", () => {
+describe("device-id payload schemas — owned (frozen at core-types-base 0.24.19)", () => {
+    it("Subject: accepts a valid subject, rejects missing commonName / bad countryName", () => {
         expect(SubjectSchema.safeParse(subject).success).toBe(true);
-        expect(SubjectSchema.safeParse(subject).success).toBe(UpstreamSubject.safeParse(subject).success);
         expect(SubjectSchema.safeParse({}).success).toBe(false);
-        expect(SubjectSchema.safeParse({}).success).toBe(UpstreamSubject.safeParse({}).success);
         const badCountry = { commonName: "d", countryName: "USA" };
         expect(SubjectSchema.safeParse(badCountry).success).toBe(false);
-        expect(SubjectSchema.safeParse(badCountry).success).toBe(UpstreamSubject.safeParse(badCountry).success);
     });
-    it("Extensions: owned and upstream agree", () => {
+    it("Extensions: accepts known usages, rejects an unknown enum member", () => {
         const ext = { keyUsage: ["digitalSignature"], extendedKeyUsage: ["serverAuth"] };
         expect(ExtensionsSchema.safeParse(ext).success).toBe(true);
-        expect(ExtensionsSchema.safeParse(ext).success).toBe(UpstreamExtensions.safeParse(ext).success);
         const badEnum = { keyUsage: ["notAUsage"] };
         expect(ExtensionsSchema.safeParse(badEnum).success).toBe(false);
-        expect(ExtensionsSchema.safeParse(badEnum).success).toBe(UpstreamExtensions.safeParse(badEnum).success);
     });
-    it("FPDeviceIDSession: owned and upstream agree (valid + strict + seq bounds)", () => {
+    it("FPDeviceIDSession: valid passes; .strict() + seq bounds reject", () => {
         expect(FPDeviceIDSessionSchema.safeParse(validSession).success).toBe(true);
-        expect(UpstreamSession.safeParse(validSession).success).toBe(true);
         const extra = { ...validSession, bogus: 1 };
         expect(FPDeviceIDSessionSchema.safeParse(extra).success).toBe(false);
-        expect(FPDeviceIDSessionSchema.safeParse(extra).success).toBe(UpstreamSession.safeParse(extra).success);
         const negSeq = { ...validSession, seq: -1 };
         expect(FPDeviceIDSessionSchema.safeParse(negSeq).success).toBe(false);
-        expect(FPDeviceIDSessionSchema.safeParse(negSeq).success).toBe(UpstreamSession.safeParse(negSeq).success);
     });
-    it("FPDeviceIDCSRPayload: owned and upstream agree on a CSR with no clerk claim", () => {
+    it("FPDeviceIDCSRPayload: a CSR with no clerk claim passes; .strict() rejects unknown keys", () => {
         expect(FPDeviceIDCSRPayloadSchema.safeParse(csrPayload()).success).toBe(true);
-        expect(UpstreamCSR.safeParse(csrPayload()).success).toBe(true);
         const extra = { ...csrPayload(), csr: { ...csrPayload().csr, bogus: 1 } };
         expect(FPDeviceIDCSRPayloadSchema.safeParse(extra).success).toBe(false);
-        expect(FPDeviceIDCSRPayloadSchema.safeParse(extra).success).toBe(UpstreamCSR.safeParse(extra).success);
     });
 });
 describe("device-id CSR payload — owned Clerk-claim leniency (patch-removal gate)", () => {
     it("accepts a CSR whose creatingUser clerk claim omits first/image_url/last/name", () => {
         expect(FPDeviceIDCSRPayloadSchema.safeParse(csrPayload({ type: "clerk", claims: leanClerkClaim })).success).toBe(true);
-        expect(UpstreamCSR.safeParse(csrPayload({ type: "clerk", claims: leanClerkClaim })).success).toBe(false);
     });
     it("accepts a CSR whose creatingUser carries a fully-populated clerk claim", () => {
         expect(FPDeviceIDCSRPayloadSchema.safeParse(csrPayload({ type: "clerk", claims: fullClerkClaim })).success).toBe(true);

package/types/device-id-payload.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-id-payload.test.js","sourceRoot":"","sources":["../../jsr/types/device-id-payload.test.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAC9H,OAAO,EACL,aAAa,IAAI,eAAe,EAChC,gBAAgB,IAAI,kBAAkB,EACtC,uBAAuB,IAAI,eAAe,EAC1C,0BAA0B,IAAI,WAAW,GAC1C,MAAM,4BAA4B,CAAC;AAEpC,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAW,CAAC;AAC3E,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,UAAU,EAAW,CAAC;AACpD,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,MAAM,EAAE;QACN,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,gBAAgB;QAC3B,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,EAAE;KAChB;CACF,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;CAClE,CAAC;AAEF,MAAM,GAAG,GAAG,aAAa,CAAC;AAC1B,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC/H,MAAM,UAAU,GAAG,CAAC,YAAsB,EAAE,EAAE,CAAC,CAAC;IAC9C,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG,GAAG,IAAI;IACf,GAAG,EAAE,GAAG;IACR,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,GAAG,EAAE;QACH,OAAO;QACP,SAAS;QACT,UAAU,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE;KACrG;CACF,CAAC,CAAC;AAEH,QAAQ,CAAC,wEAAwE,EAAE,GAAG,EAAE;IACtF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;QAElG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAExF,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;QACjF,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnE,MAAM,KAAK,GAAG,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;QAExG,MAAM,MAAM,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACvF,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QAGtF,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAGvH,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"device-id-payload.test.js","sourceRoot":"","sources":["../../jsr/types/device-id-payload.test.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAE9H,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAW,CAAC;AAC3E,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,UAAU,EAAW,CAAC;AACpD,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,MAAM,EAAE;QACN,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,gBAAgB;QAC3B,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,EAAE;KAChB;CACF,CAAC;AAEF,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;CAClE,CAAC;AAEF,MAAM,GAAG,GAAG,aAAa,CAAC;AAC1B,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC/H,MAAM,UAAU,GAAG,CAAC,YAAsB,EAAE,EAAE,CAAC,CAAC;IAC9C,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG,GAAG,IAAI;IACf,GAAG,EAAE,GAAG;IACR,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,GAAG,EAAE;QACH,OAAO;QACP,SAAS;QACT,UAAU,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE;KACrG;CACF,CAAC,CAAC;AAEH,QAAQ,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACrF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;QACjF,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAG,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9E,MAAM,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACvF,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QAItF,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/types/device-id-types.d.ts

@@ -0,0 +1,93 @@
+import type { Result } from "@adviser/cement";
+import type { z } from "zod";
+import type { CertificatePayload, IssueCertificateResult } from "./cert-payload.js";
+import type { JWKPublic, JWKPrivate } from "./wire.js";
+import type { ClerkClaim } from "../clerk-claim.js";
+export interface CAActions {
+    generateSerialNumber(pub: JWKPublic): Promise<string>;
+}
+export interface DeviceIdCAJsonParam {
+    readonly privateKey: JWKPrivate | string;
+    readonly signedCert: string;
+}
+export interface CACertResult {
+    readonly certificate: CertificatePayload;
+    readonly jwtStr: string;
+}
+export interface DeviceIdTransport {
+    issueCertificate(csrJWT: string): Promise<Result<IssueCertificateResult>>;
+}
+export interface DeviceIdProtocol {
+    issueCertificate(msg: string): Promise<Result<IssueCertificateResult>>;
+    verifyMsg<S>(message: string, schema?: S): Promise<VerifyWithCertificateResult<S>>;
+}
+export interface DeviceIdProtocolSrvOpts {
+    readonly actions: CAActions;
+}
+export interface CertorIf {
+    asCert(): CertificatePayload;
+    parseCertificateSubject(s: string): Record<string, string>;
+    asSHA1(): Promise<string>;
+    asSHA256(): Promise<string>;
+    asBase64(): string;
+}
+export interface HeaderCertInfo {
+    readonly certificate: CertorIf;
+    readonly certificateChain: CertorIf[];
+    readonly thumbprint?: string;
+    readonly thumbprintSha256?: string;
+    readonly keyId?: string;
+    readonly algorithm?: string;
+    readonly certificateUrl?: string;
+    readonly rawHeader: unknown;
+}
+export interface VerifyWithCertificateSuccess<T = unknown> {
+    readonly valid: true;
+    readonly payload: T;
+    readonly header: unknown;
+    readonly certificate: HeaderCertInfo & {
+        readonly validation: {
+            readonly valid: true;
+            readonly subject: Record<string, string>;
+            readonly issuer: Record<string, string>;
+            readonly serialNumber: string;
+            readonly notBefore: Date;
+            readonly notAfter: Date;
+            readonly publicKey: JWKPublic;
+            readonly trustedCA?: CertificatePayload;
+            readonly validityPeriod: {
+                readonly days: number;
+            };
+        };
+        readonly publicKey: JWKPublic;
+    };
+    readonly verificationTimestamp: string;
+}
+export interface VerifyWithCertificateError {
+    readonly valid: false;
+    readonly error: Error;
+    readonly errorCode: string;
+    readonly partialResults: {
+        readonly certificateExtracted: boolean;
+        readonly jwtSignatureValid: boolean;
+        readonly certificateInfo?: HeaderCertInfo;
+    };
+    readonly verificationTimestamp: string;
+}
+export type VerifyWithCertificateResult<T> = VerifyWithCertificateSuccess<T extends z.ZodTypeAny ? z.infer<T> : unknown> | VerifyWithCertificateError;
+export interface VerifyWithCertificateOptions {
+    readonly clockTolerance: number;
+    readonly maxAge?: number;
+    readonly deviceIdCA: DeviceIdCAIf;
+}
+export interface DeviceIdKeyIf {
+    fingerPrint(): Promise<string>;
+    exportPrivateJWK(): Promise<JWKPrivate>;
+    publicKey(): Promise<JWKPublic>;
+}
+export interface DeviceIdCAIf {
+    getCAKey(): DeviceIdKeyIf;
+    processCSR(csrJWS: string, addition: ClerkClaim): Promise<Result<IssueCertificateResult>>;
+    caCertificate(): Promise<Result<CACertResult>>;
+    issueCertificate(devId: unknown): Promise<Result<IssueCertificateResult>>;
+}

package/types/device-id-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=device-id-types.js.map

package/types/device-id-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-id-types.js","sourceRoot":"","sources":["../../jsr/types/device-id-types.ts"],"names":[],"mappings":""}

package/types/keybag-item.d.ts

@@ -0,0 +1,15 @@
+import type { Option } from "@adviser/cement";
+import type { JWKPrivate } from "./wire.js";
+import type { CertificatePayload } from "./cert-payload.js";
+export type DeviceIdKeyBagItem = Readonly<{
+    deviceId: JWKPrivate;
+    cert?: Readonly<{
+        certificateJWT: string;
+        certificatePayload: CertificatePayload;
+    }>;
+}>;
+export interface DeviceIdResult {
+    readonly deviceId: Option<JWKPrivate>;
+    readonly cert: Option<DeviceIdKeyBagItem["cert"]>;
+    readonly error?: Error;
+}

package/types/keybag-item.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=keybag-item.js.map

package/types/keybag-item.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keybag-item.js","sourceRoot":"","sources":["../../jsr/types/keybag-item.ts"],"names":[],"mappings":""}

package/types/sthis.d.ts

@@ -0,0 +1,84 @@
+import type { Env, Logger, CryptoRuntime, AppContext, EnvFactoryOpts, Result } from "@adviser/cement";
+export type ToUInt8 = Uint8Array | Result<Uint8Array>;
+export type PromiseToUInt8 = ToUInt8 | Promise<Uint8Array> | Promise<Result<Uint8Array>>;
+export interface FPStats {
+    isFile(): boolean;
+    isDirectory(): boolean;
+    isBlockDevice(): boolean;
+    isCharacterDevice(): boolean;
+    isSymbolicLink(): boolean;
+    isFIFO(): boolean;
+    isSocket(): boolean;
+    uid: number | Falsy;
+    gid: number | Falsy;
+    size: number | Falsy;
+    atime: Date | Falsy;
+    mtime: Date | Falsy;
+    ctime: Date | Falsy;
+    birthtime: Date | Falsy;
+}
+export type Falsy = false | null | undefined;
+export interface SysFileSystem {
+    start(): Promise<SysFileSystem>;
+    mkdir(path: string, options?: {
+        recursive: boolean;
+    }): Promise<string | undefined>;
+    readdir(path: string): Promise<string[]>;
+    rm(path: string, options?: {
+        recursive: boolean;
+    }): Promise<void>;
+    copyFile(source: string, destination: string): Promise<void>;
+    readfile(path: string): Promise<Uint8Array>;
+    stat(path: string): Promise<FPStats>;
+    unlink(path: string): Promise<void>;
+    writefile(path: string, data: Uint8Array | string): Promise<void>;
+}
+export interface PathOps {
+    join(...args: string[]): string;
+    dirname(path: string): string;
+    basename(path: string): string;
+}
+export interface BaseXXEndeCoder {
+    encode(input: string | ToUInt8): string;
+    decodeUint8(input: string): Uint8Array;
+    decode(input: string): string;
+}
+export interface TextEndeCoder {
+    id(): string;
+    encode(input: string): Uint8Array;
+    decode(input: ToUInt8): string;
+    readonly base64: BaseXXEndeCoder;
+    readonly base58: BaseXXEndeCoder;
+}
+export interface TextEndeCodable {
+    txt: TextEndeCoder;
+}
+export interface SuperThisOpts {
+    readonly logger: Logger;
+    readonly pathOps: PathOps;
+    readonly crypto: CryptoRuntime;
+    readonly env: Partial<EnvFactoryOpts>;
+    readonly txt: TextEndeCoder;
+    readonly ctx: AppContext;
+}
+export interface SuperThis {
+    readonly logger: Logger;
+    readonly loggerCollector?: Logger;
+    readonly env: Env;
+    readonly pathOps: PathOps;
+    readonly ctx: AppContext;
+    readonly txt: TextEndeCoder;
+    timeOrderedNextId(time?: number): {
+        str: string;
+        toString: () => string;
+    };
+    nextId(bytes?: number): {
+        str: string;
+        bin: Uint8Array;
+        toString: () => string;
+    };
+    start(): Promise<void>;
+    clone(override: Partial<SuperThisOpts>): SuperThis;
+}
+export type DocObject = NonNullable<unknown>;
+export type DocTypes = DocObject;

package/types/sthis.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sthis.js.map

package/types/sthis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sthis.js","sourceRoot":"","sources":["../../jsr/types/sthis.ts"],"names":[],"mappings":""}

package/types/wire.d.ts

@@ -1,7 +1,58 @@
 import { Result } from "@adviser/cement";
 import { z } from "zod";
 import type { ClerkClaim } from "../clerk-claim.js";
-import type { JWKPublic } from "@fireproof/core-types-base";
+interface JWKCommonFields {
+    use?: "sig" | "enc";
+    key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[];
+    alg?: string;
+    kid?: string;
+    x5u?: string;
+    x5c?: string[];
+    x5t?: string;
+    "x5t#S256"?: string;
+}
+export type JWKPublic = JWKCommonFields & ({
+    kty: "RSA";
+    n: string;
+    e: string;
+} | {
+    kty: "EC";
+    crv: "P-256" | "P-384" | "P-521" | "secp256k1";
+    x: string;
+    y: string;
+} | {
+    kty: "oct";
+    k: string;
+} | {
+    kty: "OKP";
+    crv: "Ed25519" | "Ed448" | "X25519" | "X448";
+    x: string;
+});
+export type JWKPrivate = JWKCommonFields & ({
+    kty: "RSA";
+    n: string;
+    e: string;
+    d: string;
+    p: string;
+    q: string;
+    dp: string;
+    dq: string;
+    qi: string;
+} | {
+    kty: "EC";
+    crv: "P-256" | "P-384" | "P-521" | "secp256k1";
+    x: string;
+    y: string;
+    d: string;
+} | {
+    kty: "oct";
+    k: string;
+} | {
+    kty: "OKP";
+    crv: "Ed25519" | "Ed448" | "X25519" | "X448";
+    x: string;
+    d: string;
+});
 export declare const JWKPrivateSchema: z.ZodIntersection<z.ZodObject<{
     kty: z.ZodEnum<{
         EC: "EC";
@@ -167,3 +218,4 @@ export interface FPApiParameters {
     maxLedgers: number;
     maxAppIdBindings: number;
 }
+export {};

package/types/wire.js.map

@@ -1 +1 @@
-{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../jsr/types/wire.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAC3C,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE;IAC1B,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;KACf,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACd,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACvH,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAC1C,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE;IAC1B,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvH,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACxG,CAAC,CACH,CAAC;AAKF,MAAM,UAAU,SAAS,CAAC,GAAiD;IACzE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,EAAE,CAAC;YACV,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChB,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,WAAW;oBACd,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC7B;oBACE,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChB,KAAK,SAAS;oBACZ,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B;oBACE,OAAO,MAAM,CAAC,GAAG,CAAC,0BAA0B,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD;YACE,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../jsr/types/wire.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuCxB,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChI,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAC3C,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE;IAC1B,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;KACf,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACd,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACvH,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,GAAG,CAC1C,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE;IAC1B,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvH,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACxG,CAAC,CACH,CAAC;AAKF,MAAM,UAAU,SAAS,CAAC,GAAiD;IACzE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,EAAE,CAAC;YACV,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChB,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,WAAW;oBACd,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAC7B;oBACE,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;gBAChB,KAAK,SAAS;oBACZ,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,KAAK,OAAO;oBACV,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B;oBACE,OAAO,MAAM,CAAC,GAAG,CAAC,0BAA0B,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD;YACE,OAAO,MAAM,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/types/wire.test.js

@@ -1,23 +1,19 @@
 import { describe, it, expect } from "vitest";
 import { generateKeyPair, exportJWK } from "jose";
 import { JWKPrivateSchema, JWKPublicSchema } from "./wire.js";
-import { JWKPrivateSchema as UpstreamPrivate, JWKPublicSchema as UpstreamPublic } from "@fireproof/core-types-base";
-describe("JWK schema parity (owned vs @fireproof/core-types-base)", () => {
-    it("agrees with upstream on a real ES256 private + public JWK", async () => {
+describe("JWK schema parity (owned; frozen at core-types-base 0.24.19)", () => {
+    it("accepts a real ES256 private + public JWK", async () => {
         const { privateKey, publicKey } = await generateKeyPair("ES256", { extractable: true });
         const priv = await exportJWK(privateKey);
         const pub = await exportJWK(publicKey);
         expect(JWKPrivateSchema.safeParse(priv).success).toBe(true);
-        expect(JWKPrivateSchema.safeParse(priv).success).toBe(UpstreamPrivate.safeParse(priv).success);
         expect(JWKPublicSchema.safeParse(pub).success).toBe(true);
-        expect(JWKPublicSchema.safeParse(pub).success).toBe(UpstreamPublic.safeParse(pub).success);
-        expect(JWKPublicSchema.safeParse(priv).success).toBe(UpstreamPublic.safeParse(priv).success);
+        expect(JWKPublicSchema.safeParse(priv).success).toBe(true);
     });
-    it("agrees with upstream on rejecting a malformed JWK (EC missing y)", () => {
+    it("rejects a malformed JWK (EC missing y)", () => {
         const bad = { kty: "EC", crv: "P-256", x: "only-x" };
         expect(JWKPublicSchema.safeParse(bad).success).toBe(false);
-        expect(JWKPublicSchema.safeParse(bad).success).toBe(UpstreamPublic.safeParse(bad).success);
-        expect(JWKPrivateSchema.safeParse(bad).success).toBe(UpstreamPrivate.safeParse(bad).success);
+        expect(JWKPrivateSchema.safeParse(bad).success).toBe(false);
     });
 });
 //# sourceMappingURL=wire.test.js.map

package/types/wire.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"wire.test.js","sourceRoot":"","sources":["../../jsr/types/wire.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,gBAAgB,IAAI,eAAe,EAAE,eAAe,IAAI,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAKpH,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACvE,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAEvC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAE/F,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAG3F,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3F,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"wire.test.js","sourceRoot":"","sources":["../../jsr/types/wire.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAQ9D,QAAQ,CAAC,8DAA8D,EAAE,GAAG,EAAE;IAC5E,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAEvC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAI1D,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}