unjwt 0.8.1 → 0.8.3

package/package.json

@@ -1,7 +1,25 @@
 {
   "name": "unjwt",
-  "version": "0.8.1",
-  "description": "Low-level JWT utilities",
+  "version": "0.8.3",
+  "description": "A collection of JWT utilities based on the Web Crypto API.",
+  "keywords": [
+    "auth",
+    "browser",
+    "decrypt",
+    "edge",
+    "encrypt",
+    "jose",
+    "jwe",
+    "jwk",
+    "jws",
+    "jwt",
+    "security",
+    "serverless",
+    "session",
+    "sign",
+    "verify",
+    "webcrypto"
+  ],
   "homepage": "https://unjwt.s94.dev",
   "license": "MIT",
   "author": {
@@ -12,6 +30,9 @@
     "type": "git",
     "url": "git+https://github.com/sandros94/unjwt.git"
   },
+  "funding": {
+    "url": "https://github.com/sponsors/sandros94"
+  },
   "files": [
     "dist"
   ],
@@ -41,21 +62,25 @@
       "types": "./dist/core/utils/index.d.mts",
       "default": "./dist/core/utils/index.mjs"
     },
+    "./session": {
+      "types": "./dist/session/index.d.mts",
+      "default": "./dist/session/index.mjs"
+    },
     "./internal": {
       "types": "./dist/core/internal.d.mts",
       "default": "./dist/core/internal.mjs"
     },
     "./adapters/h3": {
-      "types": "./dist/adapters/h3v2/index.d.mts",
-      "default": "./dist/adapters/h3v2/index.mjs"
+      "types": "./dist/adapters/h3/index.d.mts",
+      "default": "./dist/adapters/h3/index.mjs"
     },
     "./adapters/h3v1": {
       "types": "./dist/adapters/h3v1/index.d.mts",
       "default": "./dist/adapters/h3v1/index.mjs"
     },
     "./adapters/h3v2": {
-      "types": "./dist/adapters/h3v2/index.d.mts",
-      "default": "./dist/adapters/h3v2/index.mjs"
+      "types": "./dist/adapters/h3/index.d.mts",
+      "default": "./dist/adapters/h3/index.mjs"
     },
     "./adapters/elysia": {
       "types": "./dist/adapters/elysia/index.d.mts",
@@ -67,11 +92,10 @@
     "@types/supertest": "^7.2.1",
     "@vitest/coverage-v8": "^5.0.4",
     "automd": "^0.4.3",
-    "cookie-esv1": "npm:cookie-es@^1.2.3",
-    "cookie-esv3": "npm:cookie-es@^3.1.1",
+    "cookie-es": "^3.1.1",
     "elysia": "^1.4.30",
+    "h3": "^2.0.5",
     "h3v1": "npm:h3@^1.15.11",
-    "h3v2": "npm:h3@^2.0.2",
     "jose": "^6.2.12",
     "obuild": "^0.4.45",
     "oxfmt": "^0.73.0",
@@ -85,14 +109,10 @@
     "vitest": "^5.0.4"
   },
   "peerDependencies": {
-    "cookie-es": "^1.2.3 || ^3.1.1",
     "elysia": "^1.4.29",
     "h3": "^1.15.4 || ^2.0.1"
   },
   "peerDependenciesMeta": {
-    "cookie-es": {
-      "optional": true
-    },
     "elysia": {
       "optional": true
     },
@@ -100,9 +120,6 @@
       "optional": true
     }
   },
-  "resolutions": {
-    "unjwt": "link:."
-  },
   "simple-git-hooks": {
     "pre-commit": "pnpm build --stub && pnpm lint && pnpm typecheck"
   },
@@ -120,8 +137,10 @@
   },
   "scripts": {
     "build": "obuild",
-    "dev": "bun --watch ./playground/main.ts",
-    "dev:prepare": "obuild --stub && pnpm simple-git-hooks",
+    "dev": "pnpm --dir playgrounds/h3 dev",
+    "dev:nuxt": "pnpm --dir playgrounds/nuxt-4 dev",
+    "dev:nitro": "pnpm --dir playgrounds/nitro dev",
+    "dev:prepare": "obuild --stub && pnpm --dir playgrounds/nuxt-4 prepare && pnpm simple-git-hooks",
     "lint": "oxlint --deny-warnings . && oxfmt --check .",
     "fmt": "automd && oxlint --fix . && oxfmt .",
     "test": "vitest run --slowTestThreshold=1000",

package/dist/adapters/h3v2/index.d.mts

@@ -1,65 +0,0 @@
-import { CompositeKey, ContentEncryptionAlgorithm, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHeaderParameters, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, MaxTokenAge, NotBeforeIn, PayloadOf, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
-import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, SessionClaims, SessionData, SessionDecryptOptions, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/_codec-jwe.mjs";
-import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../core/jwk.mjs";
-import { HTTPEvent } from "h3";
-import { CookieSerializeOptions } from "cookie-es";
-/** Session state for the current request, mirroring the claims of its JWE token. */
-interface SessionJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
-/** JWE session hooks; `onRead`, `onExpire` and `onError` are mutually exclusive per token. */
-interface SessionHooksJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWESessionHooks<SessionJWE<T, MaxAge>, SessionManager<T, MaxAge>, {
-  event: TEvent;
-}, SessionConfigJWE<T, MaxAge, TEvent>> {}
-/** Configuration for a JWE-backed (encrypted) session. */
-interface SessionConfigJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWESessionConfig<MaxAge, CookieSerializeOptions> {
-  /** Cookie and session-header name. Default `"h3-jwe"`; a `.<digits>` suffix throws `ERR_SESSION_CONFIG_INVALID`. */
-  name?: string;
-  hooks?: SessionHooksJWE<T, MaxAge, TEvent>;
-}
-/** Create a JWE (encrypted) session manager for the request. */
-export declare function useJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<SessionManager<T, MaxAge>>;
-/** Get (and lazily initialize) the session for the current request. */
-export declare function getJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<SessionJWE<T, MaxAge>>;
-/** Read the raw session token: cookie first, then the session header (default `x-<name>-session`, optional `Bearer`). */
-export declare function getJWESessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): string | undefined;
-/** Update the session data (if provided) and reissue the JWE; `options.maxAge` overrides this token's lifetime. */
-export declare function updateJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>, update?: SessionUpdate<T>, options?: SessionIssueOptions): Promise<SessionJWE<T, MaxAge> & {
-  id: string;
-  token: string;
-}>;
-/** Seal the session as a compact JWE without writing a cookie; fresh `jti` if no ID, no token source needed. */
-export declare function sealJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<string>;
-/** Decrypt a compact JWE into a session, checking `typ`, pinned `alg`/`enc`, `jti`/`iat` and `exp` (required with `maxAge`). */
-export declare function unsealJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>, sealed: string): Promise<Partial<SessionJWE<T, MaxAge>>>;
-/** Drop the session cookie and leave an empty session for the rest of the request. */
-export declare function clearJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<void>;
-/** Session state for the current request, mirroring the claims of its JWS token. */
-interface SessionJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
-/** JWS session hooks; `onRead`, `onExpire` and `onError` are mutually exclusive per token. */
-interface SessionHooksJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWSSessionHooks<SessionJWS<T, MaxAge>, SessionManager<T, MaxAge>, {
-  event: TEvent;
-}, SessionConfigJWS<T, MaxAge, TEvent>> {}
-/** Configuration for a JWS-backed (signed, not encrypted) session. */
-interface SessionConfigJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWSSessionConfig<MaxAge, CookieSerializeOptions> {
-  /** Cookie and session-header name. Default `"h3-jws"`; a `.<digits>` suffix throws `ERR_SESSION_CONFIG_INVALID`. */
-  name?: string;
-  hooks?: SessionHooksJWS<T, MaxAge, TEvent>;
-}
-/** Create a JWS (signed, not encrypted) session manager for the request; clients can read its data. */
-export declare function useJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<SessionManager<T, MaxAge>>;
-/** Get (and lazily initialize) the session for the current request. */
-export declare function getJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<SessionJWS<T, MaxAge>>;
-/** Read the raw session token: cookie first, then the session header (default `x-<name>-session`, optional `Bearer`). */
-export declare function getJWSSessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): string | undefined;
-/** Update the session data (if provided) and reissue the JWS; `options.maxAge` overrides this token's lifetime. */
-export declare function updateJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>, update?: SessionUpdate<T>, options?: SessionIssueOptions): Promise<SessionJWS<T, MaxAge> & {
-  id: string;
-  token: string;
-}>;
-/** Sign the session as a compact JWS without writing a cookie; fresh `jti` if no ID, no token source needed. */
-export declare function signJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<string>;
-/** Verify a compact JWS into a session, checking `typ`, pinned `alg`, `jti`/`iat` and `exp` (required with `maxAge`). */
-export declare function verifyJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>, token: string): Promise<Partial<SessionJWS<T, MaxAge>>>;
-/** Drop the session cookie and leave an empty session for the rest of the request. */
-export declare function clearJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<void>;
-export { type CompositeKey, type ContentEncryptionAlgorithm, type DeriveKeyOptions, type DeriveKeyReturn, type Duration, type ECDHEphemeralKeyInput, type ExpiresIn, type GenerateJWKOptions, type GenerateJWKReturn, type GenerateKeyAlgorithm, type GenerateKeyOptions, type GenerateKeyReturn, type GeneratedJWKMap, type GeneratedKeyMap, type ImportedKey, type ImportedKeyMap, type JOSEConsumerOptions, type JOSELimits, type JOSEPayload, type JOSEPayloadMode, type JOSEPayloadTypeMap, type JWEAsymmetricPrivateJWK, type JWEAsymmetricPublicJWK, type JWEDecryptJWK, type JWEDecryptOptions, type JWEDecryptResult, type JWEEncryptJWK, type JWEEncryptOptions, type JWEFlattenedSerialization, type JWEGeneralRecipient, type JWEGeneralSerialization, type JWEHeaderParameters, type JWEKeyManagementHeaderParameters, type JWELibraryHeaderName, type JWEMultiDecryptKey, type JWEMultiDecryptOptions, type JWEMultiDecryptResult, type JWEMultiEncryptOptions, type JWEMultiRecipient, type JWEProtectedHeader, type JWK, type JWKAlgorithm, type JWKCacheAdapter, type JWKLookupFunction, type JWKLookupFunctionHeader, type JWKMetadata, type JWKPEMAlgorithm, type JWKParameters, type JWKSet, type JWK_AES_CBC_HMAC, type JWK_AES_GCM, type JWK_AES_GCM_KW, type JWK_AES_KW, type JWK_Asymmetric, type JWK_Asymmetric_Algorithm, type JWK_EC, type JWK_ECDH_ES, type JWK_ECDSA, type JWK_EC_Private, type JWK_EC_Public, type JWK_HMAC, type JWK_OKP, type JWK_OKP_Private, type JWK_OKP_Public, type JWK_OKP_SIGN, type JWK_PBES2, type JWK_Pair, type JWK_Private, type JWK_Public, type JWK_RSA, type JWK_RSA_ENC, type JWK_RSA_PSS, type JWK_RSA_Private, type JWK_RSA_Public, type JWK_RSA_SIGN, type JWK_Symmetric, type JWK_Symmetric_Algorithm, type JWK_oct, type JWSAlgorithm, type JWSAsymmetricPrivateJWK, type JWSAsymmetricPublicJWK, type JWSFlattenedSerialization, type JWSGeneralSerialization, type JWSGeneralSignature, type JWSHeaderParameters, type JWSMultiSignOptions, type JWSMultiSigner, type JWSMultiVerifyAllOptions, type JWSMultiVerifyOptions, type JWSMultiVerifyOutcome, type JWSMultiVerifyResult, type JWSProtectedHeader, type JWSSignJWK, type JWSSignOptions, type JWSVerifyJWK, type JWSVerifyOptions, type JWSVerifyResult, type JWT, type JWTClaimValidationOptions, type JWTClaims, type JWTTimeClaimOptions, type JoseHeaderParameters, type KeyManagementAlgorithm, type MaxTokenAge, type NotBeforeIn, type PayloadOf, type SessionClaims, type SessionConfigJWE, type SessionConfigJWS, type SessionData, type SessionDecryptOptions, type SessionEncryptOptions, type SessionHooksJWE, type SessionHooksJWS, type SessionIssueOptions, type SessionJWE, type SessionJWS, type SessionManager, type SessionSignOptions, type SessionUpdate, type SessionUpdateTrigger, type SessionVerifyOptions, type UnwrapKeyOptions, type UnwrapKeyResult, type UnwrappingKeyFor, type WrapKeyOptions, type WrapKeyResult, type WrappingKeyFor, deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint };

package/dist/adapters/h3v2/index.mjs

@@ -1,139 +0,0 @@
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint } from "../../_chunks/jwk.mjs";
-import { bindSession, createJWECodec, createJWSCodec, dropSession, encodeSession, isChunkName, issueSession, loadSession, openSessionToken, readChunkedBy, readChunkedFromSetCookie, recordSlotStore, removeChunked, resolveSessionToken, responseCookieStore, sessionActions, sessionManager, sessionToken, setCookieName, writeChunked } from "../../_chunks/_codec-jws.mjs";
-import { getCookie, getEventContext, setCookie } from "h3";
-function eventCookieStore(event) {
-	return responseCookieStore({
-		request: (name) => getCookie(event, name),
-		response: () => event.res.headers.getSetCookie(),
-		write: (name, value, attrs) => setCookie(event, name, value, attrs)
-	});
-}
-const PREFIX = "[unjwt/h3]";
-const h3SessionPort = {
-	prefix: PREFIX,
-	carrier: (event) => ({ event }),
-	store: (event, slot) => recordSlotStore(() => {
-		const context = getEventContext(event);
-		return context.sessions ||= Object.create(null);
-	}, slot),
-	readToken: readSessionToken,
-	scope: (event) => getEventContext(event),
-	writable: hasWritableResponse,
-	setCookie: (event, sessionName, token, { attrs, chunkMaxLength }) => {
-		const target = cookieEvent(event);
-		writeChunked(eventCookieStore(target), sessionName, token, {
-			attrs,
-			chunkMaxLength,
-			prefix: PREFIX
-		});
-		stageSessionErrCookies(target, sessionName);
-	},
-	deleteCookie: (event, sessionName, { attrs }) => {
-		const target = cookieEvent(event);
-		removeChunked(eventCookieStore(target), sessionName, { attrs });
-		stageSessionErrCookies(target, sessionName);
-	}
-};
-function hasResponse(event) {
-	return "res" in event && Boolean(event.res);
-}
-function hasWritableResponse(event) {
-	if (!hasResponse(event)) return false;
-	const res = event.runtime?.node?.res;
-	return !res || !res.headersSent && !res.writableEnded;
-}
-function readSessionToken(event, sessionName, source) {
-	return resolveSessionToken(source, sessionName, {
-		written: (name) => hasResponse(event) ? readChunkedFromSetCookie(event.res.headers.getSetCookie(), name) : void 0,
-		cookie: (name) => readChunkedBy((key) => getCookie(event, key), name),
-		header: (name) => event.req.headers.get(name)
-	});
-}
-function stageSessionErrCookies(event, sessionName) {
-	const isSessionCookie = (cookie) => {
-		const name = setCookieName(cookie);
-		return name !== void 0 && (name === sessionName || isChunkName(name, sessionName));
-	};
-	const errHeaders = event.res.errHeaders;
-	const staged = [...errHeaders.getSetCookie().filter((cookie) => !isSessionCookie(cookie)), ...event.res.headers.getSetCookie().filter((cookie) => isSessionCookie(cookie))];
-	errHeaders.delete("set-cookie");
-	for (const cookie of staged) errHeaders.append("set-cookie", cookie);
-}
-function cookieEvent(event) {
-	return event;
-}
-const codec$1 = createJWECodec({
-	prefix: PREFIX,
-	defaultName: "h3-jwe"
-});
-async function useJWESession(event, config) {
-	const binding = bind$1(event, config);
-	await loadSession(binding);
-	return sessionManager(binding);
-}
-async function getJWESession(event, config) {
-	return loadSession(bind$1(event, config));
-}
-function getJWESessionToken(event, config) {
-	return sessionToken(bind$1(event, config));
-}
-async function updateJWESession(event, config, update, options) {
-	return issueSession(bind$1(event, config), update, options);
-}
-async function sealJWESession(event, config) {
-	return encodeSession(bind$1(event, config));
-}
-async function unsealJWESession(event, config, sealed) {
-	return openSessionToken(codec$1, config, {
-		token: sealed,
-		carrier: { event }
-	});
-}
-async function clearJWESession(event, config) {
-	return dropSession(bind$1(event, config));
-}
-function bind$1(event, config) {
-	return bindSession(event, config, {
-		port: h3SessionPort,
-		codec: codec$1,
-		actions: sessionActions()
-	});
-}
-const codec = createJWSCodec({
-	prefix: PREFIX,
-	defaultName: "h3-jws"
-});
-async function useJWSSession(event, config) {
-	const binding = bind(event, config);
-	await loadSession(binding);
-	return sessionManager(binding);
-}
-async function getJWSSession(event, config) {
-	return loadSession(bind(event, config));
-}
-function getJWSSessionToken(event, config) {
-	return sessionToken(bind(event, config));
-}
-async function updateJWSSession(event, config, update, options) {
-	return issueSession(bind(event, config), update, options);
-}
-async function signJWSSession(event, config) {
-	return encodeSession(bind(event, config));
-}
-async function verifyJWSSession(event, config, token) {
-	return openSessionToken(codec, config, {
-		token,
-		carrier: { event }
-	});
-}
-async function clearJWSSession(event, config) {
-	return dropSession(bind(event, config));
-}
-function bind(event, config) {
-	return bindSession(event, config, {
-		port: h3SessionPort,
-		codec,
-		actions: sessionActions()
-	});
-}
-export { clearJWESession, clearJWSSession, deriveJWKFromPassword, exportPEM, generateJWK, getJWESession, getJWESessionToken, getJWSSession, getJWSSessionToken, importPEM, sealJWESession, signJWSSession, thumbprint, unsealJWESession, updateJWESession, updateJWSSession, useJWESession, useJWSSession, verifyJWSSession };