toolcraft 0.0.119 → 0.0.121

package/composition.json

@@ -61,11 +61,21 @@
       "version": "5.3.2",
       "license": "MIT"
     },
+    {
+      "name": "jose",
+      "version": "6.2.3",
+      "license": "MIT"
+    },
     {
       "name": "jsonc-parser",
       "version": "3.3.1",
       "license": "MIT"
     },
+    {
+      "name": "mcp-oauth",
+      "version": "0.0.1",
+      "license": "MIT"
+    },
     {
       "name": "sisteransi",
       "version": "1.0.5",
@@ -76,6 +86,11 @@
       "version": "1.6.1",
       "license": "BSD-3-Clause"
     },
+    {
+      "name": "tiny-http-mcp-server",
+      "version": "0.1.0",
+      "license": "MIT"
+    },
     {
       "name": "tiny-mcp-client",
       "version": "0.1.0",
@@ -88,7 +103,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.119",
+      "version": "0.0.121",
       "license": "MIT"
     },
     {
@@ -98,7 +113,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.119",
+      "version": "0.0.121",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -61,11 +61,21 @@
       "version": "5.3.2",
       "license": "MIT"
     },
+    {
+      "name": "jose",
+      "version": "6.2.3",
+      "license": "MIT"
+    },
     {
       "name": "jsonc-parser",
       "version": "3.3.1",
       "license": "MIT"
     },
+    {
+      "name": "mcp-oauth",
+      "version": "0.0.1",
+      "license": "MIT"
+    },
     {
       "name": "sisteransi",
       "version": "1.0.5",
@@ -76,6 +86,11 @@
       "version": "1.6.1",
       "license": "BSD-3-Clause"
     },
+    {
+      "name": "tiny-http-mcp-server",
+      "version": "0.1.0",
+      "license": "MIT"
+    },
     {
       "name": "tiny-mcp-client",
       "version": "0.1.0",
@@ -88,7 +103,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.119",
+      "version": "0.0.121",
       "license": "MIT"
     },
     {
@@ -98,7 +113,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.119",
+      "version": "0.0.121",
       "license": "MIT"
     },
     {

package/dist/http.compile-check.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/http.compile-check.js

@@ -0,0 +1,31 @@
+import { S } from "toolcraft-schema";
+import { defineCommand, defineGroup } from "./index.js";
+import { createHTTPMCPServer, runHTTPMCP } from "./http.js";
+const ignoredRoot = defineGroup({
+    name: "root",
+    children: [
+        defineCommand({
+            name: "whoami",
+            params: S.Object({}),
+            handler: async ({ requester }) => requester
+        })
+    ]
+});
+const ignoredOptions = {
+    name: "toolcraft-http-test",
+    version: "1.0.0",
+    hostname: "127.0.0.1",
+    port: 0,
+    path: "/mcp",
+    enableJsonResponse: true,
+    allowedHosts: ["127.0.0.1"],
+    allowedOrigins: ["https://example.com"],
+    maxRequestBytes: 1_000_000,
+    maxConcurrentToolCalls: 4,
+    requestTimeoutMs: 30_000,
+    requestServices(context) {
+        return { requester: context.auth?.subject ?? "anonymous" };
+    }
+};
+const ignoredServer = createHTTPMCPServer(ignoredRoot, ignoredOptions);
+const ignoredHandle = runHTTPMCP(ignoredRoot, ignoredOptions);

package/dist/http.d.ts

@@ -0,0 +1,19 @@
+import "./node-require-shim.js";
+import { type HttpListenOptions, type HttpServer, type HttpServerHandle, type HttpToolContext, type HttpTransportOptions } from "tiny-http-mcp-server/server";
+import type { Group } from "./index.js";
+import { type RunMCPOptions } from "./mcp.js";
+export type ToolcraftHTTPContext = HttpToolContext;
+export type ToolcraftHTTPServer = HttpServer;
+export type ToolcraftHTTPServerHandle = HttpServerHandle;
+type HTTPTransportControls = Omit<HttpTransportOptions, "name" | "version" | "validateToolArguments">;
+type HTTPListenControls = Omit<HttpListenOptions, "port" | "hostname" | "path">;
+export interface RunHTTPMCPOptions<TServices extends object = Record<string, unknown>> extends RunMCPOptions<TServices>, HTTPTransportControls, HTTPListenControls {
+    hostname?: string;
+    port?: number;
+    path?: string;
+    requestServices?(context: ToolcraftHTTPContext): Partial<TServices> | Promise<Partial<TServices>>;
+}
+export declare function createHTTPMCPServer<TServices extends object = Record<string, unknown>>(roots: Group<TServices> | Group<TServices>[], options: RunHTTPMCPOptions<TServices>): Promise<ToolcraftHTTPServer>;
+export declare function runHTTPMCP<TServices extends object = Record<string, unknown>>(roots: Group<TServices> | Group<TServices>[], options: RunHTTPMCPOptions<TServices>): Promise<ToolcraftHTTPServerHandle>;
+export type { HttpListenOptions, HttpObservabilityEvent, HttpObservabilityOptions, RequestAuthInfo, Session, SessionStore, StreamableHttpTransportOptions, TinyHttpMcpServerOAuthOptions, TokenVerifier, VerifiedAccessToken } from "tiny-http-mcp-server/server";
+export { createJwksTokenVerifier, TokenVerificationError } from "tiny-http-mcp-server/server";

package/dist/http.js

@@ -0,0 +1,62 @@
+import "./node-require-shim.js";
+import { createHttpServer } from "tiny-http-mcp-server/server";
+import { createMCPServerForTransport } from "./mcp.js";
+import { enableSourceMaps } from "./stack-trim.js";
+function createTransportOptions(options, serverOptions) {
+    return {
+        ...serverOptions,
+        toolCallTimeoutMs: options.toolCallTimeoutMs,
+        sessionIdGenerator: options.sessionIdGenerator,
+        enableJsonResponse: options.enableJsonResponse,
+        allowedOrigins: options.allowedOrigins,
+        allowedHosts: options.allowedHosts,
+        maxRequestBytes: options.maxRequestBytes,
+        maxBatchSize: options.maxBatchSize,
+        maxSessions: options.maxSessions,
+        sessionTtlMs: options.sessionTtlMs,
+        maxStreamsPerSession: options.maxStreamsPerSession,
+        maxStreamBufferBytes: options.maxStreamBufferBytes,
+        maxSseEventHistory: options.maxSseEventHistory,
+        sseKeepAliveMs: options.sseKeepAliveMs,
+        maxConcurrentToolCalls: options.maxConcurrentToolCalls,
+        sessionStore: options.sessionStore,
+        requestIdGenerator: options.requestIdGenerator,
+        observability: options.observability,
+        trustedProxy: options.trustedProxy,
+        oauth: options.oauth
+    };
+}
+function createListenOptions(options) {
+    return {
+        hostname: options.hostname,
+        port: options.port,
+        path: options.path,
+        signal: options.signal,
+        requestTimeoutMs: options.requestTimeoutMs,
+        headersTimeoutMs: options.headersTimeoutMs,
+        keepAliveTimeoutMs: options.keepAliveTimeoutMs
+    };
+}
+export async function createHTTPMCPServer(roots, options) {
+    let server;
+    await createMCPServerForTransport(roots, options, {
+        createServer(serverOptions) {
+            server = createHttpServer(createTransportOptions(options, serverOptions));
+            return server;
+        },
+        getRequestContext() {
+            return server?.getRequestContext();
+        },
+        requestServices: options.requestServices
+    });
+    if (server === undefined) {
+        throw new Error("Toolcraft HTTP MCP server was not created.");
+    }
+    return server;
+}
+export async function runHTTPMCP(roots, options) {
+    enableSourceMaps();
+    const server = await createHTTPMCPServer(roots, options);
+    return server.listenHttp(createListenOptions(options));
+}
+export { createJwksTokenVerifier, TokenVerificationError } from "tiny-http-mcp-server/server";

package/dist/mcp.js

@@ -714,7 +714,7 @@ function toToolError(error, reportPath) {
     }
     return new ToolError(JSON_RPC_ERROR_CODES.INTERNAL_ERROR, String(error));
 }
-function createResolvedMCPServer(root, options) {
+function createResolvedMCPServer(root, options, runtime = {}) {
     const casing = options.casing ?? "snake";
     const services = (options.services ?? {});
     const runtimeOptions = options.humanInLoop ?? {};
@@ -723,19 +723,19 @@ function createResolvedMCPServer(root, options) {
         level: options.logLevel,
         logger: options.logger
     });
-    const servicesWithBuiltIns = {
-        ...services,
-        runtimeOptions,
-        root
-    };
     validateServices(services);
     const tools = enumerateTools(root, casing, options.tools, options.omitRootToolNamePrefix ?? false);
     const version = resolveMCPVersion(options.version);
-    const server = createServer({
+    const server = runtime.createServer?.({
         name: options.name,
         version,
         validateToolArguments: false
-    });
+    }) ??
+        createServer({
+            name: options.name,
+            version,
+            validateToolArguments: false
+        });
     const streamTools = tools.filter((tool) => tool.command.stream !== undefined);
     const subscriptions = new Map();
     let nextSubscriptionId = 0;
@@ -760,8 +760,12 @@ function createResolvedMCPServer(root, options) {
         }
         const argumentsValue = isPlainObject(request?.arguments) ? request.arguments : {};
         const secrets = resolveCommandSecrets(tool.command, options.env);
+        const requestServices = await runtime.requestServices?.(runtime.getRequestContext?.());
         const baseContext = {
-            ...servicesWithBuiltIns,
+            ...services,
+            ...requestServices,
+            runtimeOptions,
+            root,
             secrets,
             fetch: runtimeFetch,
             fs: createFs(options.fs),
@@ -850,13 +854,17 @@ function createResolvedMCPServer(root, options) {
         return { unsubscribed: true };
     });
     for (const tool of tools.filter((candidate) => candidate.command.stream === undefined)) {
-        const handler = async (argumentsValue) => {
+        const handler = async (argumentsValue, transportContext) => {
             let params;
             let secrets;
             try {
                 secrets = resolveCommandSecrets(tool.command, options.env);
+                const requestServices = await runtime.requestServices?.(transportContext);
                 const baseContext = {
-                    ...servicesWithBuiltIns,
+                    ...services,
+                    ...requestServices,
+                    runtimeOptions,
+                    root,
                     secrets,
                     fetch: runtimeFetch,
                     fs: createFs(options.fs),
@@ -958,6 +966,13 @@ export function createMCPServer(roots, options) {
     }
     return createDeferredMCPServer(root, options);
 }
+/** @internal */
+export async function createMCPServerForTransport(roots, options, runtime) {
+    const normalizedRoot = normalizeRoots(roots);
+    const root = options.approvals === true ? mergeApprovalsGroup(normalizedRoot) : normalizedRoot;
+    await resolveMcpProxies(root, { projectRoot: options.projectRoot });
+    createResolvedMCPServer(root, options, runtime);
+}
 export async function runMCP(roots, options) {
     enableSourceMaps();
     const normalizedRoot = normalizeRoots(roots);

package/node_modules/jose/LICENSE.md

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2018 Filip Skokan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/node_modules/jose/README.md

@@ -0,0 +1,153 @@
+# jose
+
+`jose` is a JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more. The module is designed to work across various Web-interoperable runtimes including Node.js, browsers, Cloudflare Workers, Deno, Bun, and others.
+
+## Sponsor
+
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/panva/jose/HEAD/sponsor/Auth0byOkta_dark.png">
+  <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/panva/jose/HEAD/sponsor/Auth0byOkta_light.png">
+  <img height="65" align="left" alt="Auth0 by Okta" src="https://raw.githubusercontent.com/panva/jose/HEAD/sponsor/Auth0byOkta_light.png">
+</picture>
+
+If you want to quickly add JWT authentication to JavaScript apps, feel free to check out Auth0's JavaScript SDK and free plan. [Create an Auth0 account; it's free!][sponsor-auth0]<br><br>
+
+## [💗 Help the project](https://github.com/sponsors/panva)
+
+Support from the community to continue maintaining and improving this module is welcome. If you find the module useful, please consider supporting the project by [becoming a sponsor](https://github.com/sponsors/panva).
+
+## Dependencies: 0
+
+`jose` has no dependencies and it exports tree-shakeable ESM[^cjs].
+
+## Documentation
+
+`jose` is distributed via [npmjs.com](https://www.npmjs.com/package/jose), [jsr.io](https://jsr.io/@panva/jose), [jsdelivr.com](https://www.jsdelivr.com/package/npm/jose), and [github.com](https://github.com/panva/jose).
+
+**`example`** ESM import[^cjs]
+
+```js
+import * as jose from 'jose'
+```
+
+### JSON Web Tokens (JWT)
+
+The `jose` module supports JSON Web Tokens (JWT) and provides functionality for signing and verifying tokens, as well as their JWT Claims Set validation.
+
+- [JWT Claims Set Validation & Signature Verification](docs/jwt/verify/functions/jwtVerify.md) using the `jwtVerify` function
+  - [Using a remote JSON Web Key Set (JWKS)](docs/jwks/remote/functions/createRemoteJWKSet.md)
+  - [Using a local JSON Web Key Set (JWKS)](docs/jwks/local/functions/createLocalJWKSet.md)
+- [Signing](docs/jwt/sign/classes/SignJWT.md) using the `SignJWT` class
+- Utility functions
+  - [Decoding Token's Protected Header](docs/util/decode_protected_header/functions/decodeProtectedHeader.md)
+  - [Decoding JWT Claims Set](docs/util/decode_jwt/functions/decodeJwt.md) prior to its validation
+
+### Encrypted JSON Web Tokens
+
+The `jose` module supports encrypted JSON Web Tokens and provides functionality for encrypting and decrypting tokens, as well as their JWT Claims Set validation.
+
+- [Decryption & JWT Claims Set Validation](docs/jwt/decrypt/functions/jwtDecrypt.md) using the `jwtDecrypt` function
+- [Encryption](docs/jwt/encrypt/classes/EncryptJWT.md) using the `EncryptJWT` class
+- Utility functions
+  - [Decoding Token's Protected Header](docs/util/decode_protected_header/functions/decodeProtectedHeader.md)
+
+### Key Utilities
+
+The `jose` module supports importing, exporting, and generating keys and secrets in various formats, including PEM formats like SPKI, X.509 certificate, and PKCS #8, as well as JSON Web Key (JWK).
+
+- Key Import Functions
+  - [JWK Import](docs/key/import/functions/importJWK.md)
+  - [Public Key Import (SPKI)](docs/key/import/functions/importSPKI.md)
+  - [Public Key Import (X.509 Certificate)](docs/key/import/functions/importX509.md)
+  - [Private Key Import (PKCS #8)](docs/key/import/functions/importPKCS8.md)
+- Key and Secret Generation Functions
+  - [Asymmetric Key Pair Generation](docs/key/generate_key_pair/functions/generateKeyPair.md)
+  - [Symmetric Secret Generation](docs/key/generate_secret/functions/generateSecret.md)
+- Key Export Functions
+  - [JWK Export](docs/key/export/functions/exportJWK.md)
+  - [Private Key Export](docs/key/export/functions/exportPKCS8.md)
+  - [Public Key Export](docs/key/export/functions/exportSPKI.md)
+
+### JSON Web Signature (JWS)
+
+The `jose` module supports signing and verification of JWS messages with arbitrary payloads in Compact, Flattened JSON, and General JSON serialization syntaxes.
+
+- Signing - [Compact](docs/jws/compact/sign/classes/CompactSign.md), [Flattened JSON](docs/jws/flattened/sign/classes/FlattenedSign.md), [General JSON](docs/jws/general/sign/classes/GeneralSign.md)
+- Verification - [Compact](docs/jws/compact/verify/functions/compactVerify.md), [Flattened JSON](docs/jws/flattened/verify/functions/flattenedVerify.md), [General JSON](docs/jws/general/verify/functions/generalVerify.md)
+  - [Using a remote JSON Web Key Set (JWKS)](docs/jwks/remote/functions/createRemoteJWKSet.md)
+  - [Using a local JSON Web Key Set (JWKS)](docs/jwks/local/functions/createLocalJWKSet.md)
+- Utility functions
+  - [Decoding Token's Protected Header](docs/util/decode_protected_header/functions/decodeProtectedHeader.md)
+
+### JSON Web Encryption (JWE)
+
+The `jose` module supports encryption and decryption of JWE messages with arbitrary plaintext in Compact, Flattened JSON, and General JSON serialization syntaxes.
+
+- Encryption - [Compact](docs/jwe/compact/encrypt/classes/CompactEncrypt.md), [Flattened JSON](docs/jwe/flattened/encrypt/classes/FlattenedEncrypt.md), [General JSON](docs/jwe/general/encrypt/classes/GeneralEncrypt.md)
+- Decryption - [Compact](docs/jwe/compact/decrypt/functions/compactDecrypt.md), [Flattened JSON](docs/jwe/flattened/decrypt/functions/flattenedDecrypt.md), [General JSON](docs/jwe/general/decrypt/functions/generalDecrypt.md)
+- Utility functions
+  - [Decoding Token's Protected Header](docs/util/decode_protected_header/functions/decodeProtectedHeader.md)
+
+### Other
+
+The following are additional features and utilities provided by the `jose` module:
+
+- [Calculating JWK Thumbprint](docs/jwk/thumbprint/functions/calculateJwkThumbprint.md)
+- [Calculating JWK Thumbprint URI](docs/jwk/thumbprint/functions/calculateJwkThumbprintUri.md)
+- [Verification using a JWK Embedded in a JWS Header](docs/jwk/embedded/functions/EmbeddedJWK.md)
+- [Unsecured JWT](docs/jwt/unsecured/classes/UnsecuredJWT.md)
+- [JOSE Errors](docs/util/errors/README.md)
+
+## Supported Runtimes
+
+The `jose` module is compatible with JavaScript runtimes that support the utilized Web API globals and standard built-in objects or are Node.js.
+
+The following runtimes are supported _(this is not an exhaustive list)_:
+
+- [Bun](https://github.com/panva/jose/issues/471)
+- [Browsers](https://github.com/panva/jose/issues/263)
+- [Cloudflare Workers](https://github.com/panva/jose/issues/265)
+- [Deno](https://github.com/panva/jose/issues/266)
+- [Electron](https://github.com/panva/jose/issues/264)
+- [Node.js](https://github.com/panva/jose/issues/262)
+
+Please note that certain algorithms may not be available depending on the runtime used. You can find a list of available algorithms for each runtime in the specific issue links provided above.
+
+## Supported Versions
+
+| Version                                         | Security Fixes 🔑 | Other Bug Fixes 🐞 | New Features ⭐ | Runtime and Module type         |
+| ----------------------------------------------- | ----------------- | ------------------ | --------------- | ------------------------------- |
+| [v6.x](https://github.com/panva/jose/tree/v6.x) | [Security Policy] | ✅                 | ✅              | Universal[^universal] ESM[^cjs] |
+| [v5.x](https://github.com/panva/jose/tree/v5.x) | [Security Policy] | ❌                 | ❌              | Universal[^universal] CJS + ESM |
+| [v4.x](https://github.com/panva/jose/tree/v4.x) | [Security Policy] | ❌                 | ❌              | Universal[^universal] CJS + ESM |
+| [v2.x](https://github.com/panva/jose/tree/v2.x) | [Security Policy] | ❌                 | ❌              | Node.js CJS                     |
+
+## Specifications
+
+<details>
+<summary>Details</summary>
+
+- JSON Web Signature (JWS) - [RFC7515](https://www.rfc-editor.org/rfc/rfc7515)
+- JSON Web Encryption (JWE) - [RFC7516](https://www.rfc-editor.org/rfc/rfc7516)
+- JSON Web Key (JWK) - [RFC7517](https://www.rfc-editor.org/rfc/rfc7517)
+- JSON Web Algorithms (JWA) - [RFC7518](https://www.rfc-editor.org/rfc/rfc7518)
+- JSON Web Token (JWT) - [RFC7519](https://www.rfc-editor.org/rfc/rfc7519)
+- JSON Web Key Thumbprint - [RFC7638](https://www.rfc-editor.org/rfc/rfc7638)
+- JSON Web Key Thumbprint URI - [RFC9278](https://www.rfc-editor.org/rfc/rfc9278)
+- JWS Unencoded Payload Option - [RFC7797](https://www.rfc-editor.org/rfc/rfc7797)
+- CFRG Elliptic Curve ECDH and Signatures - [RFC8037](https://www.rfc-editor.org/rfc/rfc8037)
+- Fully-Specified Algorithms for JOSE - [RFC9864](https://www.rfc-editor.org/rfc/rfc9864.html)
+- ML-DSA for JOSE - [draft-ietf-cose-dilithium-10](https://www.ietf.org/archive/id/draft-ietf-cose-dilithium-10.html)
+
+The algorithm implementations in `jose` have been tested using test vectors from their respective specifications as well as [RFC7520](https://www.rfc-editor.org/rfc/rfc7520).
+
+</details>
+
+[sponsor-auth0]: https://a0.to/signup/panva
+[WebCryptoAPI]: https://w3c.github.io/webcrypto/
+[Fetch API]: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
+[Security Policy]: https://github.com/panva/jose/security/policy
+
+[^cjs]: CJS style `let jose = require('jose')` is possible in Node.js versions where the `require(esm)` feature is enabled by default (^20.19.0 || ^22.12.0 || >= 23.0.0).
+
+[^universal]: Assumes runtime support of [WebCryptoAPI][] and [Fetch API][]

package/node_modules/jose/dist/types/index.d.ts

@@ -0,0 +1,55 @@
+export { compactDecrypt } from './jwe/compact/decrypt.js';
+export type { CompactDecryptGetKey } from './jwe/compact/decrypt.js';
+export { flattenedDecrypt } from './jwe/flattened/decrypt.js';
+export type { FlattenedDecryptGetKey } from './jwe/flattened/decrypt.js';
+export { generalDecrypt } from './jwe/general/decrypt.js';
+export type { GeneralDecryptGetKey } from './jwe/general/decrypt.js';
+export { GeneralEncrypt } from './jwe/general/encrypt.js';
+export type { Recipient } from './jwe/general/encrypt.js';
+export { compactVerify } from './jws/compact/verify.js';
+export type { CompactVerifyGetKey } from './jws/compact/verify.js';
+export { flattenedVerify } from './jws/flattened/verify.js';
+export type { FlattenedVerifyGetKey } from './jws/flattened/verify.js';
+export { generalVerify } from './jws/general/verify.js';
+export type { GeneralVerifyGetKey } from './jws/general/verify.js';
+export { jwtVerify } from './jwt/verify.js';
+export type { JWTVerifyOptions, JWTVerifyGetKey } from './jwt/verify.js';
+export { jwtDecrypt } from './jwt/decrypt.js';
+export type { JWTDecryptOptions, JWTDecryptGetKey } from './jwt/decrypt.js';
+export { CompactEncrypt } from './jwe/compact/encrypt.js';
+export { FlattenedEncrypt } from './jwe/flattened/encrypt.js';
+export { CompactSign } from './jws/compact/sign.js';
+export { FlattenedSign } from './jws/flattened/sign.js';
+export { GeneralSign } from './jws/general/sign.js';
+export type { Signature } from './jws/general/sign.js';
+export { SignJWT } from './jwt/sign.js';
+export { EncryptJWT } from './jwt/encrypt.js';
+export { calculateJwkThumbprint, calculateJwkThumbprintUri } from './jwk/thumbprint.js';
+export { EmbeddedJWK } from './jwk/embedded.js';
+export { createLocalJWKSet } from './jwks/local.js';
+export { createRemoteJWKSet, jwksCache, customFetch } from './jwks/remote.js';
+export type { RemoteJWKSetOptions, JWKSCacheInput, ExportedJWKSCache, FetchImplementation, } from './jwks/remote.js';
+export { UnsecuredJWT } from './jwt/unsecured.js';
+export type { UnsecuredResult } from './jwt/unsecured.js';
+export { exportPKCS8, exportSPKI, exportJWK } from './key/export.js';
+export { importSPKI, importPKCS8, importX509, importJWK } from './key/import.js';
+export type { KeyImportOptions } from './key/import.js';
+export { decodeProtectedHeader } from './util/decode_protected_header.js';
+export { decodeJwt } from './util/decode_jwt.js';
+export type { ProtectedHeaderParameters } from './util/decode_protected_header.js';
+import * as errors from './util/errors.js';
+export { errors };
+export { generateKeyPair } from './key/generate_key_pair.js';
+export type { GenerateKeyPairResult, GenerateKeyPairOptions } from './key/generate_key_pair.js';
+export { generateSecret } from './key/generate_secret.js';
+export type { GenerateSecretOptions } from './key/generate_secret.js';
+import * as base64url from './util/base64url.js';
+export { base64url };
+export type { CompactDecryptResult, CompactJWEHeaderParameters, CompactJWSHeaderParameters, CompactVerifyResult, CritOption, CryptoKey, DecryptOptions, EncryptOptions, FlattenedDecryptResult, FlattenedJWE, FlattenedJWS, FlattenedJWSInput, FlattenedVerifyResult, GeneralDecryptResult, GeneralJWE, GeneralJWS, GeneralJWSInput, GeneralVerifyResult, GetKeyFunction, JoseHeaderParameters, JSONWebKeySet, JWEHeaderParameters, JWEKeyManagementHeaderParameters, JWK_EC_Private, JWK_EC_Public, JWK_oct, JWK_OKP_Private, JWK_OKP_Public, JWK_RSA_Private, JWK_RSA_Public, JWK, JWKParameters, JWSHeaderParameters, JWTClaimVerificationOptions, JWTDecryptResult, JWTHeaderParameters, JWTPayload, JWTVerifyResult, KeyObject, ProduceJWT, ResolvedKey, SignOptions, VerifyOptions, } from './types.d.ts';
+/**
+ * In prior releases this indicated whether a Node.js-specific build was loaded, this is now fixed
+ * to `"WebCryptoAPI"`
+ *
+ * @deprecated
+ */
+export declare const cryptoRuntime = "WebCryptoAPI";

package/node_modules/jose/dist/types/jwe/compact/decrypt.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Decrypting JSON Web Encryption (JWE) in Compact Serialization
+ *
+ * @module
+ */
+import type * as types from '../../types.d.ts';
+/**
+ * Interface for Compact JWE Decryption dynamic key resolution. No token components have been
+ * verified at the time of this function call.
+ */
+export interface CompactDecryptGetKey extends types.GetKeyFunction<types.CompactJWEHeaderParameters, types.FlattenedJWE> {
+}
+/**
+ * Decrypts a Compact JWE.
+ *
+ * This function is exported (as a named export) from the main `'jose'` module entry point as well
+ * as from its subpath export `'jose/jwe/compact/decrypt'`.
+ *
+ * @param jwe Compact JWE.
+ * @param key Private Key or Secret to decrypt the JWE with. See
+ *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+ * @param options JWE Decryption options.
+ */
+export declare function compactDecrypt(jwe: string | Uint8Array, key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: types.DecryptOptions): Promise<types.CompactDecryptResult>;
+/**
+ * @param jwe Compact JWE.
+ * @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
+ *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+ * @param options JWE Decryption options.
+ */
+export declare function compactDecrypt(jwe: string | Uint8Array, getKey: CompactDecryptGetKey, options?: types.DecryptOptions): Promise<types.CompactDecryptResult & types.ResolvedKey>;

package/node_modules/jose/dist/types/jwe/compact/encrypt.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Encrypting JSON Web Encryption (JWE) in Compact Serialization
+ *
+ * @module
+ */
+import type * as types from '../../types.d.ts';
+/**
+ * The CompactEncrypt class is used to build and encrypt Compact JWE strings.
+ *
+ * This class is exported (as a named export) from the main `'jose'` module entry point as well as
+ * from its subpath export `'jose/jwe/compact/encrypt'`.
+ *
+ */
+export declare class CompactEncrypt {
+    #private;
+    /**
+     * {@link CompactEncrypt} constructor
+     *
+     * @param plaintext Binary representation of the plaintext to encrypt.
+     */
+    constructor(plaintext: Uint8Array);
+    /**
+     * Sets a content encryption key to use, by default a random suitable one is generated for the JWE
+     * enc" (Encryption Algorithm) Header Parameter.
+     *
+     * @deprecated You should not use this method. It is only really intended for test and vector
+     *   validation purposes.
+     *
+     * @param cek JWE Content Encryption Key.
+     */
+    setContentEncryptionKey(cek: Uint8Array): this;
+    /**
+     * Sets the JWE Initialization Vector to use for content encryption, by default a random suitable
+     * one is generated for the JWE enc" (Encryption Algorithm) Header Parameter.
+     *
+     * @deprecated You should not use this method. It is only really intended for test and vector
+     *   validation purposes.
+     *
+     * @param iv JWE Initialization Vector.
+     */
+    setInitializationVector(iv: Uint8Array): this;
+    /**
+     * Sets the JWE Protected Header on the CompactEncrypt object.
+     *
+     * @param protectedHeader JWE Protected Header object.
+     */
+    setProtectedHeader(protectedHeader: types.CompactJWEHeaderParameters): this;
+    /**
+     * Sets the JWE Key Management parameters to be used when encrypting.
+     *
+     * (ECDH-ES) Use of this method is needed for ECDH based algorithms to set the "apu" (Agreement
+     * PartyUInfo) or "apv" (Agreement PartyVInfo) parameters.
+     *
+     * @param parameters JWE Key Management parameters.
+     */
+    setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): this;
+    /**
+     * Encrypts and resolves the value of the Compact JWE string.
+     *
+     * @param key Public Key or Secret to encrypt the JWE with. See
+     *   {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
+     * @param options JWE Encryption options.
+     */
+    encrypt(key: types.CryptoKey | types.KeyObject | types.JWK | Uint8Array, options?: types.EncryptOptions): Promise<string>;
+}