lacewing 1.0.0

package/dist/src/key/generate.js

@@ -0,0 +1,47 @@
+/**
+ * Key generation with safe defaults:
+ * asymmetric-first - EdDSA unless you say otherwise - and secrets that
+ * are always cryptographically random at the algorithm's minimum size.
+ */
+import { generateKeyPair as joseGenerateKeyPair } from "jose";
+import { KeyImportFailed, KeyTypeMismatch } from "../util/errors.js";
+import { getAlgorithmProperties } from "../lib/algorithms.js";
+import { createLacewingKey, SetAlg } from "../types.js";
+/**
+ * Generate an asymmetric key pair, bound to `algorithm` (default EdDSA).
+ */
+export async function generateKeyPair(algorithm = "EdDSA", options = {}) {
+    const info = getAlgorithmProperties(algorithm);
+    if (info.kty === "oct") {
+        throw new KeyTypeMismatch(`${algorithm} is symmetric - use generateSecret() instead`);
+    }
+    const alg = SetAlg(algorithm);
+    try {
+        const { publicKey, privateKey } = await joseGenerateKeyPair(algorithm, {
+            extractable: options.extractable ?? false,
+        });
+        return {
+            publicKey: createLacewingKey(alg, "public", publicKey),
+            privateKey: createLacewingKey(alg, "private", privateKey),
+        };
+    }
+    catch (cause) {
+        throw new KeyImportFailed("Key generation failed", { cause });
+    }
+}
+/**
+ * Generate a random HMAC secret at the algorithm's minimum size
+ * (default HS256 -> 256 bits). Always passes the entropy checks by
+ * construction.
+ */
+export function generateSecret(algorithm = "HS256") {
+    const info = getAlgorithmProperties(algorithm);
+    if (info.kty !== "oct") {
+        throw new KeyTypeMismatch(`${algorithm} is asymmetric - use generateKeyPair() instead`);
+    }
+    const alg = SetAlg(algorithm);
+    const secret = new Uint8Array(Math.ceil(info.minKeyBits / 8));
+    globalThis.crypto.getRandomValues(secret);
+    return createLacewingKey(alg, "secret", secret);
+}
+//# sourceMappingURL=generate.js.map

package/dist/src/key/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/key/generate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,IAAI,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAoB,MAAM,aAAa,CAAC;AAU1E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,YAAiB,OAAc,EAC/B,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACxB,GAAG,SAAS,8CAA8C,CAC1D,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAoC,CAAC;IACjE,IAAI,CAAC;QACJ,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE;YACtE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;SACzC,CAAC,CAAC;QACH,OAAO;YACN,SAAS,EAAE,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC;YACtD,UAAU,EAAE,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC;SACzD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC7B,YAAiB,OAAc;IAE/B,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACxB,GAAG,SAAS,gDAAgD,CAC5D,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAoC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/key/import.js

@@ -0,0 +1,136 @@
+/**
+ * Key import with algorithm binding (RFC 8725 §3.1/§3.2/§3.5).
+ *
+ * Every key enters Lacewing through this module and leaves bound to
+ * exactly one algorithm, carried in the type system. Sign/verify never
+ * accept raw `CryptoKey`s, so the alg-to-key binding cannot be bypassed.
+ */
+import { importJWK, importPKCS8, importSPKI } from "jose";
+import { EntropyCheckFailed, KeyImportFailed, KeyTypeMismatch, } from "../util/errors.js";
+import { getAlgorithmProperties } from "../lib/algorithms.js";
+import { validateHMACSecret } from "../lib/entropy.js";
+import { decodeBase64url } from "../lib/base64url.js";
+import { createLacewingKey, SetAlg, } from "../types.js";
+function expectedWebCryptoName(alg, info) {
+    if (alg === "EdDSA")
+        return "Ed25519";
+    if (info.kty === "EC")
+        return "ECDSA";
+    if (info.kty === "oct")
+        return "HMAC";
+    // RSA: PS* uses RSA-PSS; legacy RS* uses PKCS#1 v1.5.
+    return alg.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5";
+}
+// Only called for asymmetric JWKs; oct keys take the importSecret path.
+function keyTypeOfJwk(jwk) {
+    return typeof jwk.d === "string" ? "private" : "public";
+}
+function assertJwkMatches(jwk, alg, info) {
+    if (jwk.kty !== info.kty) {
+        throw new KeyTypeMismatch(`Key type "${jwk.kty}" cannot be used with ${alg} (expected ${info.kty})`);
+    }
+    if (info.crv !== undefined && jwk.crv !== info.crv) {
+        throw new KeyTypeMismatch(`${alg} requires curve ${info.crv}`);
+    }
+    if (typeof jwk.alg === "string" && jwk.alg !== alg) {
+        throw new KeyTypeMismatch("JWK declares a different algorithm than it is being imported for");
+    }
+    if (info.kty === "RSA" && typeof jwk.n === "string") {
+        const modulusBits = decodeBase64url(jwk.n).length * 8;
+        if (modulusBits < info.minKeyBits) {
+            throw new KeyTypeMismatch(`${alg} requires an RSA modulus of at least ${info.minKeyBits} bits`);
+        }
+    }
+}
+function assertCryptoKeyMatches(key, alg, info) {
+    const algorithm = key.algorithm;
+    if (algorithm.name !== expectedWebCryptoName(alg, info)) {
+        throw new KeyTypeMismatch(`CryptoKey algorithm "${algorithm.name}" cannot be used with ${alg}`);
+    }
+    if (info.kty === "EC" && algorithm.namedCurve !== info.crv) {
+        throw new KeyTypeMismatch(`${alg} requires curve ${info.crv}`);
+    }
+}
+function importSecret(material, alg) {
+    let secret;
+    if (material instanceof Uint8Array) {
+        secret = material;
+    }
+    else if (typeof material === "string") {
+        // RS256->HS256 key-confusion defense (CVE-2016-5431 class): a PEM -
+        // typically the issuer's *public* key - is never a valid HMAC secret.
+        if (material.includes("-----BEGIN")) {
+            throw new KeyTypeMismatch("PEM key material cannot be used as an HMAC secret");
+        }
+        secret = new TextEncoder().encode(material);
+    }
+    else if (typeof material === "object" &&
+        material !== null &&
+        !(material instanceof CryptoKey) &&
+        material.kty === "oct" &&
+        typeof material.k === "string") {
+        secret = decodeBase64url(material.k);
+    }
+    else {
+        throw new KeyImportFailed("HMAC secrets must be a Uint8Array, string, or oct JWK");
+    }
+    validateHMACSecret(secret, alg);
+    return { key: secret };
+}
+async function importAsymmetric(material, alg, info) {
+    if (material instanceof CryptoKey) {
+        assertCryptoKeyMatches(material, alg, info);
+        const keyType = material.type;
+        if (keyType !== "public" && keyType !== "private") {
+            throw new KeyTypeMismatch(`A secret key cannot be used with ${alg}`);
+        }
+        return { key: material, keyType };
+    }
+    if (typeof material === "string") {
+        if (material.includes("-----BEGIN PRIVATE KEY-----")) {
+            return { key: await importPKCS8(material, alg), keyType: "private" };
+        }
+        if (material.includes("-----BEGIN PUBLIC KEY-----")) {
+            return { key: await importSPKI(material, alg), keyType: "public" };
+        }
+        throw new KeyImportFailed("Unsupported PEM - only PKCS#8 private keys and SPKI public keys are accepted");
+    }
+    if (material instanceof Uint8Array) {
+        throw new KeyTypeMismatch(`Raw bytes cannot be used with ${alg}`);
+    }
+    if (typeof material === "object" && material !== null) {
+        assertJwkMatches(material, alg, info);
+        const key = await importJWK(material, alg);
+        return { key, keyType: keyTypeOfJwk(material) };
+    }
+    throw new KeyImportFailed("Unsupported key material");
+}
+/**
+ * Import key material and bind it to `algorithm`. The returned
+ * {@link LacewingKey} can only ever be used with that algorithm.
+ *
+ * Throws {@link KeyTypeMismatch} when material and algorithm disagree,
+ * {@link EntropyCheckFailed} for weak HMAC secrets, and
+ * {@link KeyImportFailed} for anything else that goes wrong.
+ */
+export async function importKey(material, algorithm) {
+    const info = getAlgorithmProperties(algorithm);
+    const alg = SetAlg(algorithm);
+    try {
+        if (info.kty === "oct") {
+            const { key } = importSecret(material, algorithm);
+            return createLacewingKey(alg, "secret", key);
+        }
+        const { key, keyType } = await importAsymmetric(material, algorithm, info);
+        return createLacewingKey(alg, keyType, key);
+    }
+    catch (cause) {
+        if (cause instanceof KeyTypeMismatch ||
+            cause instanceof EntropyCheckFailed ||
+            cause instanceof KeyImportFailed) {
+            throw cause;
+        }
+        throw new KeyImportFailed("Key import failed", { cause });
+    }
+}
+//# sourceMappingURL=import.js.map

package/dist/src/key/import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../../src/key/import.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EACN,kBAAkB,EAClB,eAAe,EACf,eAAe,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAsB,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACN,iBAAiB,EACjB,MAAM,GAGN,MAAM,aAAa,CAAC;AAKrB,SAAS,qBAAqB,CAAC,GAAW,EAAE,IAAmB;IAC9D,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACtC,sDAAsD;IACtD,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC/D,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,GAAc;IACnC,OAAO,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAc,EAAE,GAAW,EAAE,IAAmB;IACzE,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,eAAe,CACxB,aAAa,GAAG,CAAC,GAAG,yBAAyB,GAAG,cAAc,IAAI,CAAC,GAAG,GAAG,CACzE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACxB,kEAAkE,CAClE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,IAAI,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,eAAe,CACxB,GAAG,GAAG,wCAAwC,IAAI,CAAC,UAAU,OAAO,CACpE,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAc,EAAE,GAAW,EAAE,IAAmB;IAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,eAAe,CACxB,wBAAwB,SAAS,CAAC,IAAI,yBAAyB,GAAG,EAAE,CACpE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,mBAAmB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,QAAqB,EAAE,GAAW;IACvD,IAAI,MAAkB,CAAC;IACvB,IAAI,QAAQ,YAAY,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,QAAQ,CAAC;IACnB,CAAC;SAAM,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,eAAe,CACxB,mDAAmD,CACnD,CAAC;QACH,CAAC;QACD,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;SAAM,IACN,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,CAAC,CAAC,QAAQ,YAAY,SAAS,CAAC;QAChC,QAAQ,CAAC,GAAG,KAAK,KAAK;QACtB,OAAO,QAAQ,CAAC,CAAC,KAAK,QAAQ,EAC7B,CAAC;QACF,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACxB,uDAAuD,CACvD,CAAC;IACH,CAAC;IACD,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,QAAqB,EACrB,GAAW,EACX,IAAmB;IAEnB,IAAI,QAAQ,YAAY,SAAS,EAAE,CAAC;QACnC,sBAAsB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,eAAe,CACxB,8EAA8E,CAC9E,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,YAAY,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACvD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,SAAS,CAC1B,QAA2C,EAC3C,GAAG,CACH,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,QAAqB,EACrB,SAAc;IAEd,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAoC,CAAC;IACjE,IAAI,CAAC;QACJ,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAClD,OAAO,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3E,OAAO,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IACC,KAAK,YAAY,eAAe;YAChC,KAAK,YAAY,kBAAkB;YACnC,KAAK,YAAY,eAAe,EAC/B,CAAC;YACF,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC"}

package/dist/src/legacy/rs256.js

@@ -0,0 +1,11 @@
+/**
+ * LEGACY INTEROP - explicit opt-in only.
+ *
+ * `RS256` (RSASSA-PKCS1-v1_5) is not in Lacewing's default registry. This
+ * module is kept for backwards compatibility and re-exports the RS256 opt-in
+ * from {@link module:legacy/rsa}, where the rest of the `RS*` family lives.
+ * Calling {@link enableLegacyRS256} is the grep-loud marker code review looks
+ * for; prefer `PS256`/`EdDSA` everywhere you control both sides.
+ */
+export { enableLegacyRS256 } from "./rsa.js";
+//# sourceMappingURL=rs256.js.map

package/dist/src/legacy/rs256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rs256.js","sourceRoot":"","sources":["../../../src/legacy/rs256.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/dist/src/legacy/rsa.js

@@ -0,0 +1,37 @@
+/**
+ * LEGACY INTEROP - explicit opt-in only.
+ *
+ * The `RS*` family (RSASSA-PKCS1-v1_5) is not in Lacewing's default registry:
+ * PKCS#1 v1.5 signatures are the deprecated ancestor of RSA-PSS and only
+ * belong in systems that must interoperate with issuers that cannot emit
+ * `PS256`/`EdDSA`. Each `enable...` call is the grep-loud marker code review
+ * looks for; prefer `PS256`/`EdDSA` everywhere you control both sides.
+ *
+ * `none` can never enter through this door - `registerLegacyAlgorithm` refuses
+ * it - and neither can any algorithm not on this curated legacy list.
+ */
+import { registerLegacyAlgorithm } from "../lib/algorithms.js";
+const RSA_MIN_KEY_BITS = 2048;
+/** Register legacy `RS256`. After this, importKey/profiles/JWKS accept it. */
+export function enableLegacyRS256() {
+    registerLegacyAlgorithm({ name: "RS256", kty: "RSA", minKeyBits: RSA_MIN_KEY_BITS });
+}
+/** Register legacy `RS384`. Prefer `PS384`/`EdDSA` where you control both sides. */
+export function enableLegacyRS384() {
+    registerLegacyAlgorithm({ name: "RS384", kty: "RSA", minKeyBits: RSA_MIN_KEY_BITS });
+}
+/** Register legacy `RS512`. Prefer `PS512`/`EdDSA` where you control both sides. */
+export function enableLegacyRS512() {
+    registerLegacyAlgorithm({ name: "RS512", kty: "RSA", minKeyBits: RSA_MIN_KEY_BITS });
+}
+/**
+ * Register the whole legacy `RS256`/`RS384`/`RS512` family at once, for
+ * interop with an issuer that may rotate across hash sizes. Still an explicit,
+ * grep-loud opt-in - do not call it "just in case".
+ */
+export function enableLegacyRSA() {
+    enableLegacyRS256();
+    enableLegacyRS384();
+    enableLegacyRS512();
+}
+//# sourceMappingURL=rsa.js.map

package/dist/src/legacy/rsa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.js","sourceRoot":"","sources":["../../../src/legacy/rsa.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB;IAChC,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB;IAChC,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB;IAChC,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC9B,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,CAAC;AACrB,CAAC"}

package/dist/src/lib/algorithms.js

@@ -0,0 +1,60 @@
+/**
+ * The algorithm registry - single source of truth for which algorithms
+ * exist and which key types they pair with (RFC 8725 §3.1/§3.2).
+ *
+ * `none`, `RSA1_5` and `RS*` are simply absent. Adding an algorithm is a
+ * one-entry change here (cryptographic agility, §3.2.4). Legacy interop
+ * algorithms can only enter through `registerLegacyAlgorithm`, which is
+ * reachable exclusively via the explicit `legacy/` imports.
+ */
+import { AlgorithmNotAllowed } from "../util/errors.js";
+import { SetAlg } from "../types.js";
+const CORE_ALGORITHMS = [
+    { name: "EdDSA", kty: "OKP", crv: "Ed25519", minKeyBits: 256 },
+    { name: "ES256", kty: "EC", crv: "P-256", minKeyBits: 256 },
+    { name: "ES384", kty: "EC", crv: "P-384", minKeyBits: 384 },
+    { name: "ES512", kty: "EC", crv: "P-521", minKeyBits: 521 },
+    { name: "PS256", kty: "RSA", minKeyBits: 2048 },
+    { name: "PS384", kty: "RSA", minKeyBits: 2048 },
+    { name: "PS512", kty: "RSA", minKeyBits: 2048 },
+    // RFC 7518 §3.2: HMAC keys must be at least as large as the hash output.
+    { name: "HS256", kty: "oct", minKeyBits: 256 },
+    { name: "HS384", kty: "oct", minKeyBits: 384 },
+    { name: "HS512", kty: "oct", minKeyBits: 512 },
+];
+const registry = new Map(CORE_ALGORITHMS.map((info) => [info.name, info]));
+/** Type guard: is this exact string an allowed algorithm? Case sensitive. */
+export function isValidAlgorithm(alg) {
+    return registry.has(alg);
+}
+/** Look up an algorithm's properties, or throw {@link AlgorithmNotAllowed}. */
+export function getAlgorithmProperties(alg) {
+    const info = registry.get(alg);
+    if (info === undefined) {
+        // Deliberately does not echo `alg`: it may be attacker-controlled.
+        throw new AlgorithmNotAllowed("Algorithm is not in the Lacewing allowlist");
+    }
+    return info;
+}
+/** Validate against the registry and brand the string as {@link ValidAlg}. */
+export function toValidAlg(alg) {
+    getAlgorithmProperties(alg);
+    return SetAlg(alg);
+}
+/** Currently registered algorithm names (core + any enabled legacy). */
+export function listAlgorithms() {
+    return [...registry.keys()];
+}
+/**
+ * Internal - only the `legacy/` modules call this. Registers an interop
+ * algorithm so it becomes importable/verifiable. Never accepts `none`.
+ */
+export function registerLegacyAlgorithm(info) {
+    if (info.name.toLowerCase() === "none") {
+        throw new AlgorithmNotAllowed("Algorithm 'none' is not allowed");
+    }
+    if (!registry.has(info.name)) {
+        registry.set(info.name, info);
+    }
+}
+//# sourceMappingURL=algorithms.js.map

package/dist/src/lib/algorithms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"algorithms.js","sourceRoot":"","sources":["../../../src/lib/algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAC;AAapD,MAAM,eAAe,GAA6B;IACjD,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE;IAC9D,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;IAC3D,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;IAC3D,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;IAC3D,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/C,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/C,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/C,yEAAyE;IACzE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE;IAC9C,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE;IAC9C,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE;CAC9C,CAAC;AAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CACvB,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAChD,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,GAAW;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,mEAAmE;QACnE,MAAM,IAAI,mBAAmB,CAAC,4CAA4C,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,GAAW;IACrC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc;IAC7B,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAmB;IAC1D,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAAC,iCAAiC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;AACF,CAAC"}

package/dist/src/lib/base64url.js

@@ -0,0 +1,28 @@
+/**
+ * Strict base64url (RFC 7515 §2: no padding, no whitespace, no URL-unsafe
+ * characters). Non-canonical encodings are rejected to close parser
+ * differentials between Lacewing and other JWT consumers.
+ */
+import { Buffer } from "node:buffer";
+import { JWTInvalid } from "../util/errors.js";
+const B64URL = /^[A-Za-z0-9_-]*$/;
+export function encodeBase64url(bytes) {
+    return Buffer.from(bytes).toString("base64url");
+}
+export function decodeBase64url(encoded) {
+    if (typeof encoded !== "string" || !B64URL.test(encoded)) {
+        throw new JWTInvalid("Invalid base64url");
+    }
+    // A single leftover character can never encode a full byte.
+    if (encoded.length % 4 === 1) {
+        throw new JWTInvalid("Invalid base64url length");
+    }
+    const bytes = Buffer.from(encoded, "base64url");
+    // Canonical check: trailing bits that don't round-trip are rejected
+    // (two encodings of the same bytes would otherwise both verify).
+    if (bytes.toString("base64url") !== encoded) {
+        throw new JWTInvalid("Non-canonical base64url");
+    }
+    return new Uint8Array(bytes);
+}
+//# sourceMappingURL=base64url.js.map

package/dist/src/lib/base64url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64url.js","sourceRoot":"","sources":["../../../src/lib/base64url.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAElC,MAAM,UAAU,eAAe,CAAC,KAAiB;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IACD,4DAA4D;IAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,oEAAoE;IACpE,iEAAiE;IACjE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/src/lib/claims.js

@@ -0,0 +1,111 @@
+/**
+ * Claims validation engine (RFC 8725 §3.8/§3.9).
+ *
+ * One pass, fail-fast, all-or-nothing. Rejection messages never echo
+ * untrusted token content (log-injection hygiene, §3.10) - errors name
+ * the claim, not its value.
+ */
+import { JWTClaimValidationFailed, JWTExpired, MissingClaim, } from "../util/errors.js";
+const MAX_STRING_CLAIM_LENGTH = 1024;
+function requireString(payload, claim) {
+    const value = payload[claim];
+    if (value === undefined) {
+        throw new MissingClaim(claim);
+    }
+    if (typeof value !== "string" || value.length === 0) {
+        throw new JWTClaimValidationFailed(claim, `Claim "${claim}" must be a non-empty string`);
+    }
+    if (value.length > MAX_STRING_CLAIM_LENGTH) {
+        throw new JWTClaimValidationFailed(claim, `Claim "${claim}" exceeds the length cap`);
+    }
+    return value;
+}
+function requireNumber(payload, claim) {
+    const value = payload[claim];
+    if (value === undefined) {
+        throw new MissingClaim(claim);
+    }
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        throw new JWTClaimValidationFailed(claim, `Claim "${claim}" must be a finite number`);
+    }
+    return value;
+}
+function audienceMatches(aud, expected) {
+    if (typeof aud === "string") {
+        return aud === expected;
+    }
+    if (Array.isArray(aud)) {
+        return aud.some((entry) => typeof entry === "string" && entry === expected);
+    }
+    return false;
+}
+/**
+ * Validate a decoded payload against a profile. Only called after the
+ * signature has been verified. `nowSeconds` is injectable for tests.
+ */
+export async function validateClaims(payload, profile, nowSeconds = Math.floor(Date.now() / 1000)) {
+    const skew = profile.maxClockSkew;
+    // iss - must exactly match the trusted issuer (§3.8).
+    const iss = requireString(payload, "iss");
+    if (iss !== profile.iss) {
+        throw new JWTClaimValidationFailed("iss", "Token issuer is not trusted by this profile");
+    }
+    // aud - the profile's audience must be present (§3.9).
+    if (payload.aud === undefined) {
+        throw new MissingClaim("aud");
+    }
+    if (!audienceMatches(payload.aud, profile.aud)) {
+        throw new JWTClaimValidationFailed("aud", "Token audience does not include this profile's audience");
+    }
+    // exp - required, with bounded clock skew.
+    const exp = requireNumber(payload, "exp");
+    if (nowSeconds >= exp + skew) {
+        throw new JWTExpired("Token has expired");
+    }
+    // iat - required, may not be in the future.
+    const iat = requireNumber(payload, "iat");
+    if (iat > nowSeconds + skew) {
+        throw new JWTClaimValidationFailed("iat", "Token issued-at time is in the future");
+    }
+    // maxTokenAge - enforced independently of exp (LW-life.2), so a
+    // compromised signer can't mint decade-long tokens we accept.
+    if (nowSeconds - iat > profile.maxTokenAge + skew) {
+        throw new JWTExpired("Token exceeds the profile's maximum age");
+    }
+    // nbf - optional, but honored when present.
+    if (payload.nbf !== undefined) {
+        const nbf = requireNumber(payload, "nbf");
+        if (nbf > nowSeconds + skew) {
+            throw new JWTClaimValidationFailed("nbf", "Token is not yet valid");
+        }
+    }
+    // jti - optional per RFC 7519, but bounded when present.
+    if (payload.jti !== undefined) {
+        requireString(payload, "jti");
+    }
+    // sub - validated when the profile pins one (§3.8.2).
+    if (payload.sub !== undefined) {
+        requireString(payload, "sub");
+    }
+    if (profile.subject !== undefined) {
+        const sub = requireString(payload, "sub");
+        if (sub !== profile.subject) {
+            throw new JWTClaimValidationFailed("sub", "Token subject does not match this profile");
+        }
+    }
+    // Custom claim validators - run last, after all standard checks.
+    if (profile.claimValidators !== undefined) {
+        for (const [claim, validate] of Object.entries(profile.claimValidators)) {
+            try {
+                await validate(payload[claim], payload);
+            }
+            catch (cause) {
+                if (cause instanceof JWTClaimValidationFailed || cause instanceof MissingClaim) {
+                    throw cause;
+                }
+                throw new JWTClaimValidationFailed(claim, `Custom validation for claim "${claim}" failed`, { cause });
+            }
+        }
+    }
+}
+//# sourceMappingURL=claims.js.map

package/dist/src/lib/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../src/lib/claims.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,wBAAwB,EACxB,UAAU,EACV,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAG3B,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa,CAAC,OAAgC,EAAE,KAAa;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,KAAK,8BAA8B,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC5C,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,KAAK,0BAA0B,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,OAAgC,EAAE,KAAa;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,UAAU,KAAK,2BAA2B,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,QAAgB;IACtD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,KAAK,QAAQ,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAID;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAAgC,EAChC,OAAqB,EACrB,aAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC;IAElC,sDAAsD;IACtD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,6CAA6C,CAAC,CAAC;IAC1F,CAAC;IAED,uDAAuD;IACvD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,yDAAyD,CAAC,CAAC;IACtG,CAAC;IAED,2CAA2C;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC3C,CAAC;IAED,4CAA4C;IAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,uCAAuC,CAAC,CAAC;IACpF,CAAC;IAED,gEAAgE;IAChE,8DAA8D;IAC9D,IAAI,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,UAAU,GAAG,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;IAED,yDAAyD;IACzD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,sDAAsD;IACtD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,2CAA2C,CAAC,CAAC;QACxF,CAAC;IACF,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC;gBACJ,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,wBAAwB,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;oBAChF,MAAM,KAAK,CAAC;gBACb,CAAC;gBACD,MAAM,IAAI,wBAAwB,CACjC,KAAK,EACL,gCAAgC,KAAK,UAAU,EAC/C,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/src/lib/duration.js

@@ -0,0 +1,24 @@
+/**
+ * Human-friendly duration parsing: public APIs accept `900` (seconds) or
+ * `"15m"`; everything internal works in branded {@link DurationSeconds}.
+ */
+import { toSeconds } from "../types.js";
+const DURATION = /^(\d{1,9})(s|m|h|d)$/;
+const MULTIPLIER = {
+    s: 1,
+    m: 60,
+    h: 3600,
+    d: 86400,
+};
+export function parseDuration(value) {
+    if (typeof value === "number") {
+        return toSeconds(value);
+    }
+    const match = DURATION.exec(value.trim());
+    if (match === null) {
+        throw new TypeError(`Invalid duration "${value}" - use seconds or "30s" / "15m" / "1h" / "7d"`);
+    }
+    const [, amount, unit] = match;
+    return toSeconds(Number(amount) * MULTIPLIER[unit]);
+}
+//# sourceMappingURL=duration.js.map

package/dist/src/lib/duration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duration.js","sourceRoot":"","sources":["../../../src/lib/duration.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAwB,MAAM,aAAa,CAAC;AAE9D,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AAExC,MAAM,UAAU,GAA2B;IAC1C,CAAC,EAAE,CAAC;IACJ,CAAC,EAAE,EAAE;IACL,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,KAAK;CACR,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,KAAsB;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAClB,qBAAqB,KAAK,gDAAgD,CAC1E,CAAC;IACH,CAAC;IACD,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,GAAI,UAAU,CAAC,IAAc,CAAY,CAAC,CAAC;AAC3E,CAAC"}

package/dist/src/lib/entropy.js

@@ -0,0 +1,70 @@
+/**
+ * HMAC secret strength checks (RFC 8725 §3.5).
+ *
+ * Two gates at import time:
+ *  1. Minimum length per algorithm (RFC 7518: >= hash output size).
+ *  2. A heuristic that rejects password-looking strings - the classic
+ *     `secret: "my-secret"` misuse - even when they are long enough.
+ */
+import { EntropyCheckFailed } from "../util/errors.js";
+import { getAlgorithmProperties } from "./algorithms.js";
+// Substrings that only ever show up in human-chosen secrets.
+const COMMON_WORDS = [
+    "password",
+    "passwort",
+    "secret",
+    "letmein",
+    "qwerty",
+    "123456",
+    "abcdef",
+    "changeme",
+    "default",
+];
+function shannonBitsPerByte(bytes) {
+    const counts = new Map();
+    for (const byte of bytes) {
+        counts.set(byte, (counts.get(byte) ?? 0) + 1);
+    }
+    let bits = 0;
+    for (const count of counts.values()) {
+        const p = count / bytes.length;
+        bits -= p * Math.log2(p);
+    }
+    return bits;
+}
+/**
+ * Heuristic: does this byte sequence look like a human-chosen password
+ * rather than a random key? Only printable-ASCII inputs are suspected -
+ * raw random bytes virtually never stay inside that range.
+ */
+export function isPasswordLike(bytes) {
+    const printableAscii = bytes.every((b) => b >= 0x20 && b <= 0x7e);
+    if (!printableAscii) {
+        return false;
+    }
+    const text = String.fromCharCode(...bytes).toLowerCase();
+    if (COMMON_WORDS.some((word) => text.includes(word))) {
+        return true;
+    }
+    // Random keys encoded as hex/base64 sit well above 3.5 bits/byte at
+    // these lengths; keyboard-pattern and dictionary strings sit below.
+    return shannonBitsPerByte(bytes) < 3.5;
+}
+/**
+ * Validate an HMAC secret for the given HS* algorithm.
+ * Throws {@link EntropyCheckFailed} when the secret is too short or
+ * looks like a password.
+ */
+export function validateHMACSecret(secret, algorithmName) {
+    const { minKeyBits } = getAlgorithmProperties(algorithmName);
+    const minBytes = Math.ceil(minKeyBits / 8);
+    if (secret.length < minBytes) {
+        throw new EntropyCheckFailed(`HMAC secret for ${algorithmName} must be at least ${minBytes} bytes ` +
+            "of cryptographically random data");
+    }
+    if (isPasswordLike(secret)) {
+        throw new EntropyCheckFailed("HMAC secret looks like a human-chosen password; use " +
+            "cryptographically random bytes (e.g. generateSecret())");
+    }
+}
+//# sourceMappingURL=entropy.js.map

package/dist/src/lib/entropy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entropy.js","sourceRoot":"","sources":["../../../src/lib/entropy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,6DAA6D;AAC7D,MAAM,YAAY,GAAG;IACpB,UAAU;IACV,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,SAAS;CACT,CAAC;AAEF,SAAS,kBAAkB,CAAC,KAAiB;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC/C,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,cAAc,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,oEAAoE;IACpE,oEAAoE;IACpE,OAAO,kBAAkB,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,aAAqB;IAC3E,MAAM,EAAE,UAAU,EAAE,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAC3B,mBAAmB,aAAa,qBAAqB,QAAQ,SAAS;YACrE,kCAAkC,CACnC,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,CAC3B,sDAAsD;YACrD,wDAAwD,CACzD,CAAC;IACH,CAAC;AACF,CAAC"}