lacewing 1.0.0

package/dist/src/lib/headers.js

@@ -0,0 +1,75 @@
+/**
+ * Header parsing and hardening (RFC 8725 §3.1/§3.2/§3.6/§3.10/§3.11).
+ *
+ * Header values are untrusted input: `kid` is length-capped and
+ * character-whitelisted before any lookup, `jku`/`x5u`/`jwk`/`x5c` are
+ * never honored, `zip` is rejected outright, and `crit` is rejected
+ * because Lacewing supports no header extensions.
+ */
+import { AlgorithmNotAllowed, JWTClaimValidationFailed, JWTInvalid } from "../util/errors.js";
+import { getAlgorithmProperties } from "./algorithms.js";
+import { SetAlg } from "../types.js";
+const KID_MAX_LENGTH = 128;
+const KID_CHARSET = /^[A-Za-z0-9._:-]+$/;
+// Never followed / never honored (§3.6, §3.10) plus `crit`, since we
+// implement no extensions and RFC 7515 requires rejecting unknown ones.
+const FORBIDDEN_PARAMS = ["jku", "x5u", "jwk", "x5c", "x5t", "zip", "crit"];
+/**
+ * Sanitize an untrusted `kid` before it is used for key lookup (§3.10):
+ * bounded length, conservative charset.
+ */
+export function sanitizeKid(kid) {
+    if (typeof kid !== "string" ||
+        kid.length === 0 ||
+        kid.length > KID_MAX_LENGTH ||
+        !KID_CHARSET.test(kid)) {
+        throw new JWTInvalid("Token key identifier failed sanitization");
+    }
+    return kid;
+}
+/** Compare `typ` values per RFC 9068: optional media-type prefix, case-insensitive. */
+export function normalizeTyp(typ) {
+    const lower = typ.toLowerCase();
+    return lower.startsWith("application/") ? lower.slice("application/".length) : lower;
+}
+/** Validate a decoded (but unverified) header object against a profile. */
+export function validateHeader(raw, profile) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+        throw new JWTInvalid("Token header is not a JSON object");
+    }
+    const header = raw;
+    for (const param of FORBIDDEN_PARAMS) {
+        if (param in header) {
+            throw new JWTInvalid(`Token header parameter "${param}" is not supported`);
+        }
+    }
+    const alg = header.alg;
+    if (typeof alg !== "string" || alg.toLowerCase() === "none") {
+        throw new AlgorithmNotAllowed("Algorithm 'none' (or a missing alg) is not allowed");
+    }
+    if (!profile.alg.some((allowed) => allowed === alg)) {
+        throw new AlgorithmNotAllowed("Token algorithm is not in this profile's allowlist");
+    }
+    // Defense in depth: the allowlist is registry-validated at profile
+    // creation, but re-check in case the profile object was hand-built.
+    getAlgorithmProperties(alg);
+    const typ = header.typ;
+    if (typeof typ !== "string" || typ.length === 0) {
+        throw new JWTInvalid("Token header is missing a typ (explicit typing is mandatory)");
+    }
+    if (normalizeTyp(typ) !== normalizeTyp(profile.typ)) {
+        throw new JWTClaimValidationFailed("typ", "Unexpected token type for this profile");
+    }
+    const result = { alg: SetAlg(alg), typ };
+    if (header.kid !== undefined) {
+        result.kid = sanitizeKid(header.kid);
+    }
+    if (header.cty !== undefined) {
+        if (typeof header.cty !== "string") {
+            throw new JWTInvalid("Token header cty must be a string");
+        }
+        result.cty = header.cty;
+    }
+    return result;
+}
+//# sourceMappingURL=headers.js.map

package/dist/src/lib/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../../src/lib/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,MAAM,EAA2C,MAAM,aAAa,CAAC;AAE9E,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC,qEAAqE;AACrE,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAErF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACvC,IACC,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,GAAG,CAAC,MAAM,GAAG,cAAc;QAC3B,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EACrB,CAAC;QACF,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACtF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,OAA2B;IACvE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACtC,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,UAAU,CAAC,2BAA2B,KAAK,oBAAoB,CAAC,CAAC;QAC5E,CAAC;IACF,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,mBAAmB,CAAC,oDAAoD,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,OAAkB,KAAK,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,oDAAoD,CAAC,CAAC;IACrF,CAAC;IACD,mEAAmE;IACnE,oEAAoE;IACpE,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAE5B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/src/lib/invariants.js

@@ -0,0 +1,12 @@
+/** Internal assertion helpers. */
+/** Throw if `condition` is false. For states that must be impossible. */
+export function invariant(condition, message) {
+    if (!condition) {
+        throw new Error(`Invariant violation: ${message}`);
+    }
+}
+/** Exhaustiveness check for switch statements. */
+export function assertNever(value) {
+    throw new Error(`Unexpected value: ${String(value)}`);
+}
+//# sourceMappingURL=invariants.js.map

package/dist/src/lib/invariants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariants.js","sourceRoot":"","sources":["../../../src/lib/invariants.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAElC,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,SAAkB,EAAE,OAAe;IAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;AACF,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,WAAW,CAAC,KAAY;IACvC,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/src/lib/json.js

@@ -0,0 +1,140 @@
+/**
+ * Strict JSON object parsing for token segments (RFC 8725 §3.7 strictness).
+ *
+ * `JSON.parse` silently keeps the *last* value when a member name is
+ * duplicated. That is a parser differential: an attacker crafts a header or
+ * payload where Lacewing and another consumer disagree about, say, which
+ * `alg` or `aud` is authoritative. RFC 8259 §4 says names SHOULD be unique
+ * and that behavior is otherwise unpredictable - Lacewing treats a duplicate
+ * key at any nesting level as malformed and rejects the token.
+ *
+ * The scan runs only after `JSON.parse` has confirmed the text is
+ * well-formed, so it can assume valid JSON and stay small.
+ */
+import { JWTInvalid } from "../util/errors.js";
+function readString(text, start) {
+    // text[start] === '"'
+    let i = start + 1;
+    let out = "";
+    const n = text.length;
+    while (i < n) {
+        const c = text[i];
+        if (c === "\"") {
+            return { value: out, next: i + 1 };
+        }
+        if (c === "\\") {
+            const e = text[i + 1];
+            switch (e) {
+                case "\"":
+                    out += "\"";
+                    break;
+                case "\\":
+                    out += "\\";
+                    break;
+                case "/":
+                    out += "/";
+                    break;
+                case "b":
+                    out += "\b";
+                    break;
+                case "f":
+                    out += "\f";
+                    break;
+                case "n":
+                    out += "\n";
+                    break;
+                case "r":
+                    out += "\r";
+                    break;
+                case "t":
+                    out += "\t";
+                    break;
+                case "u":
+                    out += String.fromCharCode(parseInt(text.slice(i + 2, i + 6), 16));
+                    i += 4;
+                    break;
+                default:
+                    out += e;
+            }
+            i += 2;
+            continue;
+        }
+        out += c;
+        i++;
+    }
+    // Unreachable for JSON that already parsed.
+    return { value: out, next: i };
+}
+/**
+ * Throw {@link JWTInvalid} if `text` (already known to be valid JSON) contains
+ * a duplicated member name in any object at any depth.
+ */
+export function assertNoDuplicateKeys(text, what) {
+    const stack = [];
+    let i = 0;
+    const n = text.length;
+    while (i < n) {
+        const c = text[i];
+        if (c === "{") {
+            stack.push({ seen: new Set(), expectingKey: true });
+            i++;
+            continue;
+        }
+        if (c === "[") {
+            stack.push("array");
+            i++;
+            continue;
+        }
+        if (c === "}" || c === "]") {
+            stack.pop();
+            i++;
+            continue;
+        }
+        if (c === "\"") {
+            const top = stack[stack.length - 1];
+            if (top !== undefined && top !== "array" && top.expectingKey) {
+                const { value, next } = readString(text, i);
+                if (top.seen.has(value)) {
+                    throw new JWTInvalid(`Token ${what} contains a duplicate JSON key`);
+                }
+                top.seen.add(value);
+                top.expectingKey = false;
+                i = next;
+            }
+            else {
+                i = readString(text, i).next;
+            }
+            continue;
+        }
+        if (c === ",") {
+            const top = stack[stack.length - 1];
+            if (top !== undefined && top !== "array") {
+                top.expectingKey = true;
+            }
+            i++;
+            continue;
+        }
+        i++;
+    }
+}
+/**
+ * Decode a token segment's UTF-8 text into a JSON object, rejecting anything
+ * that is not a plain object and any duplicate member names.
+ */
+export function parseJsonObject(text, what) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (cause) {
+        if (cause instanceof JWTInvalid)
+            throw cause;
+        throw new JWTInvalid(`Token ${what} is not valid JSON`, { cause });
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new JWTInvalid(`Token ${what} is not a JSON object`);
+    }
+    assertNoDuplicateKeys(text, what);
+    return parsed;
+}
+//# sourceMappingURL=json.js.map

package/dist/src/lib/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../src/lib/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAS/C,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC9C,sBAAsB;IACtB,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC;YAChC,QAAQ,CAAC,EAAE,CAAC;gBACZ,KAAK,IAAI;oBACR,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,IAAI;oBACR,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,GAAG,CAAC;oBACX,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,IAAI,CAAC;oBACZ,MAAM;gBACP,KAAK,GAAG;oBACP,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBACnE,CAAC,IAAI,CAAC,CAAC;oBACP,MAAM;gBACP;oBACC,GAAG,IAAI,CAAC,CAAC;YACV,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACV,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,CAAC,EAAE,CAAC;IACL,CAAC;IACD,4CAA4C;IAC5C,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAU,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC,EAAE,CAAC;YACJ,SAAS;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC,EAAE,CAAC;YACJ,SAAS;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,EAAE,CAAC;YACJ,SAAS;QACV,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC9D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5C,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzB,MAAM,IAAI,UAAU,CAAC,SAAS,IAAI,gCAAgC,CAAC,CAAC;gBACrE,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;gBACzB,CAAC,GAAG,IAAI,CAAC;YACV,CAAC;iBAAM,CAAC;gBACP,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9B,CAAC;YACD,SAAS;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBAC1C,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACV,CAAC;QACD,CAAC,EAAE,CAAC;IACL,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACzD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,UAAU;YAAE,MAAM,KAAK,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,SAAS,IAAI,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,SAAS,IAAI,uBAAuB,CAAC,CAAC;IAC5D,CAAC;IACD,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,MAAiC,CAAC;AAC1C,CAAC"}

package/dist/src/lib/jwe_algorithms.js

@@ -0,0 +1,81 @@
+/**
+ * The JWE algorithm registry (encrypted JWTs). Two axes, both curated:
+ *
+ *  - key management (`alg`): how the content-encryption key is agreed/wrapped.
+ *  - content encryption (`enc`): the AEAD that actually encrypts the payload.
+ *
+ * Deliberately absent, exactly as on the JWS side: `none`, `RSA1_5`
+ * (Bleichenbacher - CVE-2023-... class), `RSA-OAEP` with SHA-1, and the `PBES2*`
+ * password-based algorithms (Lacewing does not do human-memorable secrets).
+ * As with JWS, the token header never chooses - the decryption profile does.
+ *
+ * Portability note: the `A192*` entries work on Node >= 24 (the engine floor)
+ * but 192-bit AES is not implemented by browser WebCrypto and some edge
+ * runtimes. Documented in the README; prefer `A128*`/`A256*` for tokens that
+ * must be decrypted outside Node.
+ */
+import { AlgorithmNotAllowed } from "../util/errors.js";
+import { SetAlg } from "../types.js";
+const KEY_MANAGEMENT = [
+    { name: "dir", kind: "dir", kty: "oct" },
+    { name: "A128KW", kind: "aeskw", kty: "oct", secretBytes: 16 },
+    { name: "A192KW", kind: "aeskw", kty: "oct", secretBytes: 24 },
+    { name: "A256KW", kind: "aeskw", kty: "oct", secretBytes: 32 },
+    { name: "A128GCMKW", kind: "aeskw", kty: "oct", secretBytes: 16 },
+    { name: "A192GCMKW", kind: "aeskw", kty: "oct", secretBytes: 24 },
+    { name: "A256GCMKW", kind: "aeskw", kty: "oct", secretBytes: 32 },
+    { name: "ECDH-ES", kind: "ecdh", kty: "EC" },
+    { name: "ECDH-ES+A128KW", kind: "ecdh", kty: "EC" },
+    { name: "ECDH-ES+A192KW", kind: "ecdh", kty: "EC" },
+    { name: "ECDH-ES+A256KW", kind: "ecdh", kty: "EC" },
+    { name: "RSA-OAEP-256", kind: "rsa", kty: "RSA", minKeyBits: 2048 },
+];
+const CONTENT_ENCRYPTION = [
+    { name: "A128GCM", cekBytes: 16 },
+    { name: "A192GCM", cekBytes: 24 },
+    { name: "A256GCM", cekBytes: 32 },
+    { name: "A128CBC-HS256", cekBytes: 32 },
+    { name: "A192CBC-HS384", cekBytes: 48 },
+    { name: "A256CBC-HS512", cekBytes: 64 },
+];
+const keyManagement = new Map(KEY_MANAGEMENT.map((info) => [info.name, info]));
+const contentEncryption = new Map(CONTENT_ENCRYPTION.map((info) => [info.name, info]));
+export function isValidKeyManagementAlgorithm(alg) {
+    return keyManagement.has(alg);
+}
+export function isValidContentEncryptionAlgorithm(enc) {
+    return contentEncryption.has(enc);
+}
+/** Look up a key-management algorithm, or throw {@link AlgorithmNotAllowed}. */
+export function getKeyManagementProperties(alg) {
+    const info = keyManagement.get(alg);
+    if (info === undefined) {
+        throw new AlgorithmNotAllowed("Key-management algorithm is not in the Lacewing allowlist");
+    }
+    return info;
+}
+/** Look up a content-encryption algorithm, or throw {@link AlgorithmNotAllowed}. */
+export function getContentEncryptionProperties(enc) {
+    const info = contentEncryption.get(enc);
+    if (info === undefined) {
+        throw new AlgorithmNotAllowed("Content-encryption algorithm is not in the Lacewing allowlist");
+    }
+    return info;
+}
+/** Validate against the registry and brand the key-management alg. */
+export function toValidKeyManagementAlg(alg) {
+    getKeyManagementProperties(alg);
+    return SetAlg(alg);
+}
+/** Validate against the registry and brand the content-encryption alg. */
+export function toValidContentEncryptionAlg(enc) {
+    getContentEncryptionProperties(enc);
+    return SetAlg(enc);
+}
+export function listKeyManagementAlgorithms() {
+    return [...keyManagement.keys()];
+}
+export function listContentEncryptionAlgorithms() {
+    return [...contentEncryption.keys()];
+}
+//# sourceMappingURL=jwe_algorithms.js.map

package/dist/src/lib/jwe_algorithms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwe_algorithms.js","sourceRoot":"","sources":["../../../src/lib/jwe_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAC;AAoBpD,MAAM,cAAc,GAAoC;IACvD,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE;IACxC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;IAC9D,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;IAC9D,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;IAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;IACjE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE;IAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE;IACnD,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE;IACnD,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE;IACnD,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;CACnE,CAAC;AAEF,MAAM,kBAAkB,GAAwC;IAC/D,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;IACjC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,EAAE;IACvC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,EAAE;IACvC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,EAAE;CACvC,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAEvF,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACxD,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,GAAW;IAC5D,OAAO,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACrD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,2DAA2D,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,8BAA8B,CAAC,GAAW;IACzD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAAC,+DAA+D,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,uBAAuB,CAAC,GAAW;IAClD,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACtD,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,2BAA2B;IAC1C,OAAO,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC9C,OAAO,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/src/lib/payload_hygiene.js

@@ -0,0 +1,116 @@
+/**
+ * Sign-time payload hygiene scanner (LW-payload).
+ *
+ * JWS payloads are base64url-encoded **plaintext** - encoding, not
+ * encryption. Two tiers, applied recursively so nesting offers no blind
+ * spots:
+ *  - claim *names* matching a deny-heuristic (`password`, `secret`, ...)
+ *  - claim *values* matching high-confidence secret patterns (Luhn-valid
+ *    card numbers, PEM private-key blocks, other JWTs)
+ *
+ * False positives are waived per top-level claim via the grep-loud
+ * `SignJWT.unsafeAllowClaim(name)`.
+ */
+import { PayloadHygieneViolation } from "../util/errors.js";
+const SENSITIVE_NAME_FRAGMENTS = [
+    "password",
+    "passwd",
+    "passphrase",
+    "secret",
+    "apikey",
+    "privatekey",
+    "ssn",
+    "socialsecurity",
+    "creditcard",
+    "cardnumber",
+    "cvv",
+    "cvc",
+    "token",
+    "authorization",
+    "bearer",
+];
+const PEM_PRIVATE_KEY = /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/;
+const JWT_LIKE = /^[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}$/;
+function normalizeName(name) {
+    return name.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function sensitiveNameFragment(name) {
+    const normalized = normalizeName(name);
+    return SENSITIVE_NAME_FRAGMENTS.find((fragment) => normalized.includes(fragment));
+}
+function isLuhnValidCardNumber(value) {
+    const digits = value.replace(/[\s-]/g, "");
+    if (!/^\d{13,19}$/.test(digits)) {
+        return false;
+    }
+    let sum = 0;
+    let double = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let digit = digits.charCodeAt(i) - 48;
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+function checkValue(topLevelClaim, value) {
+    if (PEM_PRIVATE_KEY.test(value)) {
+        throw new PayloadHygieneViolation(topLevelClaim, `Claim "${topLevelClaim}" contains a PEM private-key block. ` +
+            "JWS payloads are readable plaintext - never embed key material.");
+    }
+    if (JWT_LIKE.test(value)) {
+        throw new PayloadHygieneViolation(topLevelClaim, `Claim "${topLevelClaim}" contains what looks like another JWT. ` +
+            "Embedding tokens in tokens leaks credentials to anyone who can read the payload.");
+    }
+    if (isLuhnValidCardNumber(value)) {
+        throw new PayloadHygieneViolation(topLevelClaim, `Claim "${topLevelClaim}" contains what looks like a payment card number. ` +
+            "JWS payloads are readable plaintext - never embed cardholder data.");
+    }
+}
+function scanNode(topLevelClaim, value) {
+    if (typeof value === "string") {
+        checkValue(topLevelClaim, value);
+        return;
+    }
+    if (Array.isArray(value)) {
+        for (const entry of value) {
+            scanNode(topLevelClaim, entry);
+        }
+        return;
+    }
+    if (typeof value === "object" && value !== null) {
+        for (const [name, nested] of Object.entries(value)) {
+            const fragment = sensitiveNameFragment(name);
+            if (fragment !== undefined) {
+                throw new PayloadHygieneViolation(topLevelClaim, `Claim "${topLevelClaim}" contains a nested field whose name matches "${fragment}". ` +
+                    "JWS payloads are readable plaintext - do not put secrets in tokens. " +
+                    "If this is a false positive, waive it with unsafeAllowClaim().");
+            }
+            scanNode(topLevelClaim, nested);
+        }
+    }
+}
+/**
+ * Scan a payload about to be signed. Throws {@link PayloadHygieneViolation}
+ * naming the offending claim (never echoing its value). Claims listed in
+ * `allowedClaims` are skipped entirely, subtree included.
+ */
+export function scanPayloadForSensitiveData(payload, allowedClaims = new Set()) {
+    for (const [claim, value] of Object.entries(payload)) {
+        if (allowedClaims.has(claim)) {
+            continue;
+        }
+        const fragment = sensitiveNameFragment(claim);
+        if (fragment !== undefined) {
+            throw new PayloadHygieneViolation(claim, `Claim name "${claim}" matches the sensitive-name heuristic ("${fragment}"). ` +
+                "JWS payloads are readable plaintext - do not put secrets in tokens. " +
+                "If this is a false positive, waive it with unsafeAllowClaim().");
+        }
+        scanNode(claim, value);
+    }
+}
+//# sourceMappingURL=payload_hygiene.js.map

package/dist/src/lib/payload_hygiene.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload_hygiene.js","sourceRoot":"","sources":["../../../src/lib/payload_hygiene.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,MAAM,wBAAwB,GAAG;IAChC,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,KAAK;IACL,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,KAAK;IACL,OAAO;IACP,eAAe;IACf,QAAQ;CACC,CAAC;AAEX,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAChE,MAAM,QAAQ,GAAG,8DAA8D,CAAC;AAEhF,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,MAAM,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,aAAqB,EAAE,KAAa;IACvD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAChC,aAAa,EACb,UAAU,aAAa,sCAAsC;YAC5D,iEAAiE,CAClE,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAChC,aAAa,EACb,UAAU,aAAa,0CAA0C;YAChE,kFAAkF,CACnF,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,uBAAuB,CAChC,aAAa,EACb,UAAU,aAAa,oDAAoD;YAC1E,oEAAoE,CACrE,CAAC;IACH,CAAC;AACF,CAAC;AAED,SAAS,QAAQ,CAAC,aAAqB,EAAE,KAAc;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO;IACR,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC3B,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO;IACR,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,uBAAuB,CAChC,aAAa,EACb,UAAU,aAAa,iDAAiD,QAAQ,KAAK;oBACpF,sEAAsE;oBACtE,gEAAgE,CACjE,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAC1C,OAAgC,EAChC,gBAAqC,IAAI,GAAG,EAAE;IAE9C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAChC,KAAK,EACL,eAAe,KAAK,4CAA4C,QAAQ,MAAM;gBAC7E,sEAAsE;gBACtE,gEAAgE,CACjE,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;AACF,CAAC"}

package/dist/src/lib/utf8.js

@@ -0,0 +1,27 @@
+/**
+ * Strict UTF-8 encode/decode (RFC 8725 §3.7). Malformed sequences reject
+ * the token - no replacement characters, no silently stripped BOM.
+ */
+import { JWTInvalid } from "../util/errors.js";
+const encoder = new TextEncoder();
+// fatal: rejects malformed/overlong sequences. ignoreBOM: a leading BOM is
+// preserved as U+FEFF so downstream JSON parsing rejects it (BOM tricks).
+const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+// Matches unpaired surrogate halves, which TextEncoder would otherwise
+// silently replace with U+FFFD.
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+export function encodeUTF8(text) {
+    if (LONE_SURROGATE.test(text)) {
+        throw new JWTInvalid("Text contains unpaired surrogates");
+    }
+    return encoder.encode(text);
+}
+export function decodeUTF8(bytes) {
+    try {
+        return decoder.decode(bytes);
+    }
+    catch (cause) {
+        throw new JWTInvalid("Malformed UTF-8", { cause });
+    }
+}
+//# sourceMappingURL=utf8.js.map

package/dist/src/lib/utf8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utf8.js","sourceRoot":"","sources":["../../../src/lib/utf8.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAE3E,uEAAuE;AACvE,gCAAgC;AAChC,MAAM,cAAc,GACnB,wEAAwE,CAAC;AAE1E,MAAM,UAAU,UAAU,CAAC,IAAY;IACtC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC3C,IAAI,CAAC;QACJ,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;AACF,CAAC"}

package/dist/src/revocation/memory.js

@@ -0,0 +1,67 @@
+/**
+ * In-memory {@link RevocationStore}.
+ *
+ * Entries evict once the revoked token's `exp` passes: a revocation only
+ * needs to outlive the token it revokes. Suitable for single-process
+ * deployments and tests; multi-instance services want a shared backend
+ * (Redis/DB) implementing the same interface.
+ */
+const SWEEP_INTERVAL_OPS = 256;
+export class MemoryRevocationStore {
+    /** jti -> token expiry (unix seconds). */
+    #revoked = new Map();
+    #opsSinceSweep = 0;
+    /**
+     * Revoke a token by its `jti`. `expiresAt` is the token's `exp`
+     * (unix seconds or Date) - the entry is dropped after that moment.
+     */
+    revoke(jti, expiresAt) {
+        if (typeof jti !== "string" || jti.length === 0) {
+            throw new TypeError("revoke() requires the token's jti");
+        }
+        const expSeconds = expiresAt instanceof Date ? Math.ceil(expiresAt.getTime() / 1000) : expiresAt;
+        if (!Number.isFinite(expSeconds)) {
+            throw new TypeError("revoke() requires the token's expiry");
+        }
+        this.#revoked.set(jti, expSeconds);
+        this.#maybeSweep();
+    }
+    async isRevoked(context) {
+        this.#maybeSweep();
+        if (context.jti === undefined) {
+            return false;
+        }
+        const exp = this.#revoked.get(context.jti);
+        if (exp === undefined) {
+            return false;
+        }
+        if (exp <= this.#nowSeconds()) {
+            this.#revoked.delete(context.jti);
+            return false;
+        }
+        return true;
+    }
+    async isAnyRevoked(contexts) {
+        return Promise.all(contexts.map((context) => this.isRevoked(context)));
+    }
+    /** Number of live revocations (expired entries may linger until a sweep). */
+    get size() {
+        return this.#revoked.size;
+    }
+    #nowSeconds() {
+        return Math.floor(Date.now() / 1000);
+    }
+    #maybeSweep() {
+        if (++this.#opsSinceSweep < SWEEP_INTERVAL_OPS) {
+            return;
+        }
+        this.#opsSinceSweep = 0;
+        const now = this.#nowSeconds();
+        for (const [jti, exp] of this.#revoked) {
+            if (exp <= now) {
+                this.#revoked.delete(jti);
+            }
+        }
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/src/revocation/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/revocation/memory.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,OAAO,qBAAqB;IACjC,0CAA0C;IACjC,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,cAAc,GAAG,CAAC,CAAC;IAEnB;;;OAGG;IACH,MAAM,CAAC,GAAW,EAAE,SAAwB;QAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,UAAU,GACf,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAA+B;QAC9C,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAkC;QACpD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,WAAW;QACV,IAAI,EAAE,IAAI,CAAC,cAAc,GAAG,kBAAkB,EAAE,CAAC;YAChD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;IACF,CAAC;CACD"}

package/dist/src/revocation/store.js

@@ -0,0 +1,25 @@
+/**
+ * Revocation contract.
+ *
+ * A {@link RevocationStore} answers "has this token been revoked?" and is
+ * consulted by `jwtVerify` *only after* signature and claims checks pass
+ * (LW-rev.3), so unauthenticated input can never drive store lookups.
+ * Store errors fail closed (LW-rev.4).
+ *
+ * The interface is shaped for async backends (Redis, a database): see
+ * `MemoryRevocationStore` for the reference implementation and the
+ * eviction contract - a revocation only needs to outlive its token.
+ */
+/** Extract the revocation-relevant slice of a verified payload. */
+export function buildRevocationContext(payload) {
+    const { jti, sub, sid, exp, iat } = payload;
+    const context = { exp, iat };
+    if (typeof jti === "string")
+        context.jti = jti;
+    if (typeof sub === "string")
+        context.sub = sub;
+    if (typeof sid === "string")
+        context.sid = sid;
+    return context;
+}
+//# sourceMappingURL=store.js.map

package/dist/src/revocation/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/revocation/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CACrC,OAAgC;IAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAyC,CAAC;IAC9E,MAAM,OAAO,GAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IAC/C,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/src/types.js

@@ -0,0 +1,51 @@
+/*
+ * Portions of this code are copied or adapted from the 'jose' library.
+ * Copyright (c) Filip Skokan (panva)
+ * Licensed under the MIT License.
+ */
+/**
+ * Brand a string as a {@link ValidAlg}. Rejects `"none"` in any casing.
+ * Registry membership is enforced separately by `lib/algorithms.ts`;
+ * this brand only guarantees the value is not the `none` algorithm.
+ */
+export const SetAlg = (value) => {
+    if (value.toLowerCase() === "none") {
+        throw new Error("Algorithm 'none' is not allowed");
+    }
+    return value;
+};
+export function toSeconds(value) {
+    if (!Number.isFinite(value) || !Number.isInteger(value) || value < 0) {
+        throw new TypeError("Duration must be a non-negative integer number of seconds");
+    }
+    return value;
+}
+/** Internal constructor - use `importKey` / `generateKeyPair` instead. */
+export function createLacewingKey(algorithm, keyType, key) {
+    return Object.freeze({
+        __brand: "LacewingKey",
+        algorithm,
+        keyType,
+        key,
+    });
+}
+export function isLacewingKey(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        value.__brand === "LacewingKey");
+}
+/** Internal constructor - use `importEncryptionKey` / `generateEncryptionKeyPair`. */
+export function createLacewingEncryptionKey(algorithm, keyType, key) {
+    return Object.freeze({
+        __brand: "LacewingEncryptionKey",
+        algorithm,
+        keyType,
+        key,
+    });
+}
+export function isLacewingEncryptionKey(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        value.__brand === "LacewingEncryptionKey");
+}
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAY,EAAE;IACjD,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAiB,CAAC;AAC1B,CAAC,CAAC;AAQF,MAAM,UAAU,SAAS,CAAC,KAAa;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAwB,CAAC;AACjC,CAAC;AAiDD,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAChC,SAAyB,EACzB,OAAwC,EACxC,GAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,aAAa;QACtB,SAAS;QACT,OAAO;QACP,GAAG;KACH,CAAqB,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA+B,CAAC,OAAO,KAAK,aAAa,CAC1D,CAAC;AACH,CAAC;AAqFD,sFAAsF;AACtF,MAAM,UAAU,2BAA2B,CAC1C,SAAyB,EACzB,OAAwC,EACxC,GAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,uBAAuB;QAChC,SAAS;QACT,OAAO;QACP,GAAG;KACH,CAA+B,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACrD,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA+B,CAAC,OAAO,KAAK,uBAAuB,CACpE,CAAC;AACH,CAAC"}