unjwt 0.8.2 → 0.8.4

package/dist/_chunks/libs/unsecure.mjs

@@ -26,7 +26,16 @@ const _fatalDecoder = /* @__PURE__ */ new TextDecoder("utf-8", {
 	fatal: true
 });
 /* @__NO_SIDE_EFFECTS__ */
-function _wholeBuffer(bytes) {
+function honoursViews(encode, expected) {
+	try {
+		return encode(Uint8Array.of(0, 1, 2, 3).subarray(1, 3)) === expected;
+	} catch {
+		return false;
+	}
+}
+/* @__NO_SIDE_EFFECTS__ */
+function wholeBuffer(bytes, honoured) {
+	if (honoured) return bytes;
 	return bytes.byteOffset === 0 && bytes.byteLength === bytes.buffer.byteLength ? bytes : bytes.slice();
 }
 const _LATIN1_CHUNK = 32768;
@@ -37,15 +46,15 @@ function _latin1(bytes) {
 	for (let i = 0; i < bytes.length; i += _LATIN1_CHUNK) text += String.fromCharCode(...bytes.subarray(i, i + _LATIN1_CHUNK));
 	return text;
 }
-function _assertData(input, label) {
-	if (typeof input !== "string" && !/* @__PURE__ */ _isBytes(input)) throw new UnsecureError("INVALID_TYPE", `${label}: expected a string or Uint8Array, got ${/* @__PURE__ */ describeValue(input)}.`);
+function assertData(input, source) {
+	if (typeof input !== "string" && !/* @__PURE__ */ _isBytes(input)) throw new UnsecureError("INVALID_TYPE", `${source}: expected a string or Uint8Array, got ${/* @__PURE__ */ describeValue(input)}.`);
 }
 /* @__NO_SIDE_EFFECTS__ */
 function _isBytes(input) {
 	return ArrayBuffer.isView(input) && input instanceof Uint8Array;
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _parsePrep(input, options) {
+function parsePrep(input, options) {
 	const isBytes = /* @__PURE__ */ _isBytes(input);
 	const returnAs = options?.returnAs ?? (isBytes ? "uint8array" : "string");
 	return {
@@ -54,47 +63,47 @@ function _parsePrep(input, options) {
 	};
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _parseFinalize(bytes, wantString, strict, label) {
+function parseFinalize(bytes, wantString, strict, source) {
 	if (!wantString) return bytes;
 	if (!strict) return textDecoder.decode(bytes);
 	try {
 		return _fatalDecoder.decode(bytes);
 	} catch {
-		throw /* @__PURE__ */ _malformed(label, "decoded bytes are not valid UTF-8.");
+		throw /* @__PURE__ */ malformed("decoded bytes are not valid UTF-8.", source);
 	}
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _malformed(label, detail) {
-	return new UnsecureError("MALFORMED", `${label}: ${detail}`);
+function malformed(detail, source) {
+	return new UnsecureError("MALFORMED", `${source}: ${detail}`);
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _tailBits(rem, bits) {
+function tailBits(rem, bits) {
 	if (rem === 0) return 0;
 	const leftover = rem * bits % 8;
 	return leftover >= bits ? -1 : leftover;
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _strictBody(text, table, shape, label, padding) {
+function strictBody(text, table, shape, source, padding) {
 	let end = text.length;
 	while (end > 0 && text.charCodeAt(end - 1) === 61) end--;
 	const padFound = text.length - end;
 	for (let i = 0; i < end; i++) {
 		const c = text.charCodeAt(i);
-		if ((c < 128 ? table[c] : -1) < 0) throw /* @__PURE__ */ _malformed(label, `invalid ${shape.name} character ${JSON.stringify(text[i])} at index ${i}.`);
+		if ((c < 128 ? table[c] : -1) < 0) throw /* @__PURE__ */ malformed(`invalid ${shape.name} character ${JSON.stringify(text[i])} at index ${i}.`, source);
 	}
 	const rem = end % shape.group;
-	const tail = /* @__PURE__ */ _tailBits(rem, shape.bits);
-	if (tail < 0) throw /* @__PURE__ */ _malformed(label, `${end} ${shape.name} symbols cannot encode whole bytes.`);
+	const tail = /* @__PURE__ */ tailBits(rem, shape.bits);
+	if (tail < 0) throw /* @__PURE__ */ malformed(`${end} ${shape.name} symbols cannot encode whole bytes.`, source);
 	const padNeeded = rem === 0 ? 0 : shape.group - rem;
 	if (padFound > 0) {
-		if (padNeeded === 0 || padding === false) throw /* @__PURE__ */ _malformed(label, `unexpected "=" padding.`);
-		if (padFound !== padNeeded) throw /* @__PURE__ */ _malformed(label, `expected ${padNeeded} "=" padding characters, found ${padFound}.`);
-	} else if (padding === true && padNeeded > 0) throw /* @__PURE__ */ _malformed(label, `expected ${padNeeded} "=" padding characters, found 0.`);
-	if (tail > 0 && (table[text.charCodeAt(end - 1)] & (1 << tail) - 1) !== 0) throw /* @__PURE__ */ _malformed(label, `the last ${shape.name} symbol sets bits past the final byte.`);
+		if (padNeeded === 0 || padding === false) throw /* @__PURE__ */ malformed(`unexpected "=" padding.`, source);
+		if (padFound !== padNeeded) throw /* @__PURE__ */ malformed(`expected ${padNeeded} "=" padding characters, found ${padFound}.`, source);
+	} else if (padding === true && padNeeded > 0) throw /* @__PURE__ */ malformed(`expected ${padNeeded} "=" padding characters, found 0.`, source);
+	if (tail > 0 && (table[text.charCodeAt(end - 1)] & (1 << tail) - 1) !== 0) throw /* @__PURE__ */ malformed(`the last ${shape.name} symbol sets bits past the final byte.`, source);
 	return end === text.length ? text : text.slice(0, end);
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _symbols(text, table) {
+function symbols(text, table) {
 	const values = new Uint8Array(text.length);
 	let n = 0;
 	for (let i = 0; i < text.length; i++) {
@@ -105,13 +114,13 @@ function _symbols(text, table) {
 	return n === values.length ? values : values.subarray(0, n);
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _looseCount(n, shape) {
+function looseCount(n, shape) {
 	let count = n;
-	while (count > 0 && /* @__PURE__ */ _tailBits(count % shape.group, shape.bits) < 0) count--;
+	while (count > 0 && /* @__PURE__ */ tailBits(count % shape.group, shape.bits) < 0) count--;
 	return count;
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _decodeSymbols(values, count, bits) {
+function decodeSymbols(values, count, bits) {
 	const out = new Uint8Array(count * bits >>> 3);
 	let acc = 0;
 	let held = 0;
@@ -127,38 +136,43 @@ function _decodeSymbols(values, count, bits) {
 	return out;
 }
 const _ON_HEAP_MAX = 64;
-const _Buffer = /* @__PURE__ */ (() => {
+const nodeBuffer = /* @__PURE__ */ (() => {
 	try {
 		return globalThis.Buffer;
 	} catch {
 		return;
 	}
 })();
-const _hasBuffer = /* @__PURE__ */ (() => typeof _Buffer?.from === "function")();
+const hasBuffer = /* @__PURE__ */ (() => typeof nodeBuffer?.from === "function")();
 /* @__NO_SIDE_EFFECTS__ */
-function _toBuffer(bytes) {
-	return bytes.byteLength <= _ON_HEAP_MAX ? _Buffer.from(bytes) : _Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+function toBuffer(bytes) {
+	return bytes.byteLength <= _ON_HEAP_MAX ? nodeBuffer.from(bytes) : nodeBuffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+}
+/* @__NO_SIDE_EFFECTS__ */
+function preferBuffer(byteLength, native) {
+	return hasBuffer && !(native && byteLength <= _ON_HEAP_MAX);
 }
 const _nativeToBase64 = /* @__PURE__ */ (() => typeof Uint8Array.prototype.toBase64 === "function")();
 const _nativeFromBase64 = /* @__PURE__ */ (() => typeof Uint8Array.fromBase64 === "function")();
-const _B64_SHAPE = {
+const _base64Views = /* @__PURE__ */ (() => !_nativeToBase64 || /* @__PURE__ */ honoursViews((view) => view.toBase64(), "AQI="))();
+const _SHAPE = {
 	bits: 6,
 	group: 4,
 	name: "base64"
 };
-const _B64_DIGITS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+const _DIGITS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
 /* @__NO_SIDE_EFFECTS__ */
-function _b64Table(pairs) {
+function _table(pairs) {
 	const t = (/* @__PURE__ */ new Int16Array(128)).fill(-1);
-	for (let i = 0; i < 62; i++) t[_B64_DIGITS.charCodeAt(i)] = i;
+	for (let i = 0; i < 62; i++) t[_DIGITS.charCodeAt(i)] = i;
 	for (let i = 0; i < pairs.length; i += 2) {
 		t[pairs.charCodeAt(i)] = 62;
 		t[pairs.charCodeAt(i + 1)] = 63;
 	}
 	return t;
 }
-const _B64_TABLE_STD = /* @__PURE__ */ _b64Table("+/");
-const _B64_TABLE_URL = /* @__PURE__ */ _b64Table("-_");
+const _TABLE_STD = /* @__PURE__ */ _table("+/");
+const _TABLE_URL = /* @__PURE__ */ _table("-_");
 /* @__NO_SIDE_EFFECTS__ */
 function _unpad(s) {
 	let end = s.length;
@@ -171,14 +185,16 @@ function _padTo4(s) {
 	return rem === 0 ? s : s + "=".repeat(4 - rem);
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _encodeBase64(bytes, alphabet, padding) {
+function base64StringifyBytes(bytes, options = {}) {
+	const alphabet = options.alphabet ?? "base64";
+	const padding = options.padding ?? alphabet !== "base64url";
 	const url = alphabet === "base64url";
-	if (_hasBuffer) {
-		const s = (/* @__PURE__ */ _toBuffer(bytes)).toString(url ? "base64url" : "base64");
+	if (/* @__PURE__ */ preferBuffer(bytes.length, _nativeToBase64)) {
+		const s = (/* @__PURE__ */ toBuffer(bytes)).toString(url ? "base64url" : "base64");
 		if (url) return padding ? /* @__PURE__ */ _padTo4(s) : s;
 		return padding ? s : /* @__PURE__ */ _unpad(s);
 	}
-	if (_nativeToBase64) return (/* @__PURE__ */ _wholeBuffer(bytes)).toBase64({
+	if (_nativeToBase64) return (/* @__PURE__ */ wholeBuffer(bytes, _base64Views)).toBase64({
 		alphabet,
 		omitPadding: !padding
 	});
@@ -189,115 +205,36 @@ function _encodeBase64(bytes, alphabet, padding) {
 	return padding ? s : /* @__PURE__ */ _unpad(s);
 }
 /* @__NO_SIDE_EFFECTS__ */
-function _decodeCanonical(padded, symbols) {
-	if (_hasBuffer) return new Uint8Array(_Buffer.from(padded, "base64"));
-	if (_nativeFromBase64) return Uint8Array.fromBase64(padded);
-	return /* @__PURE__ */ _decodeSymbols(/* @__PURE__ */ _symbols(padded, _B64_TABLE_STD), symbols, 6);
-}
-/* @__NO_SIDE_EFFECTS__ */
-function _decodeBase64(text, alphabet, loose, label, padding) {
-	const url = alphabet === "base64url";
+function base64ParseText(text, source, options = {}) {
+	const url = (options.alphabet ?? "base64") === "base64url";
 	let body;
-	if (loose) {
+	if (options.loose) {
 		const clean = text.replace(/-/g, "+").replace(/_/g, "/").replace(/[^A-Za-z0-9+/]/g, "");
-		body = clean.slice(0, /* @__PURE__ */ _looseCount(clean.length, _B64_SHAPE));
+		body = clean.slice(0, /* @__PURE__ */ looseCount(clean.length, _SHAPE));
 	} else {
-		const strict = /* @__PURE__ */ _strictBody(text, url ? _B64_TABLE_URL : _B64_TABLE_STD, _B64_SHAPE, label, padding);
+		const strict = /* @__PURE__ */ strictBody(text, url ? _TABLE_URL : _TABLE_STD, _SHAPE, source, options.padding);
 		body = url ? strict.replace(/-/g, "+").replace(/_/g, "/") : strict;
 	}
 	const rem = body.length % 4;
-	return /* @__PURE__ */ _decodeCanonical(rem === 0 ? body : body + (rem === 2 ? "==" : "="), body.length);
+	return /* @__PURE__ */ _bulk$1(rem === 0 ? body : body + (rem === 2 ? "==" : "="), body.length);
+}
+/* @__NO_SIDE_EFFECTS__ */
+function _bulk$1(padded, count) {
+	if (/* @__PURE__ */ preferBuffer(count * 6 >>> 3, _nativeFromBase64)) return new Uint8Array(nodeBuffer.from(padded, "base64"));
+	if (_nativeFromBase64) return Uint8Array.fromBase64(padded);
+	return /* @__PURE__ */ decodeSymbols(/* @__PURE__ */ symbols(padded, _TABLE_STD), count, 6);
 }
 /* @__NO_SIDE_EFFECTS__ */
 function base64Stringify(data, options) {
-	const alphabet = options?.alphabet ?? "base64";
-	const padding = options?.padding ?? alphabet !== "base64url";
-	return /* @__PURE__ */ _encodeBase64(/* @__PURE__ */ toBytes(data, "Base64.stringify"), alphabet, padding);
+	return /* @__PURE__ */ base64StringifyBytes(/* @__PURE__ */ toBytes(data, "Base64.stringify"), options);
 }
 /* @__NO_SIDE_EFFECTS__ */
 function base64Parse(input, options) {
-	_assertData(input, "Base64.parse");
-	const { text, wantString } = /* @__PURE__ */ _parsePrep(input, options);
+	assertData(input, "Base64.parse");
+	const { text, wantString } = /* @__PURE__ */ parsePrep(input, options);
 	if (!text) return wantString ? "" : /* @__PURE__ */ new Uint8Array(0);
-	const alphabet = options?.alphabet ?? "base64";
 	const loose = options?.loose ?? false;
-	return /* @__PURE__ */ _parseFinalize(/* @__PURE__ */ _decodeBase64(text, alphabet, loose, "Base64.parse", options?.padding), wantString, !loose, "Base64.parse");
-}
-/* @__NO_SIDE_EFFECTS__ */
-function showValue(value) {
-	if (typeof value === "number" || typeof value === "boolean") return String(value);
-	if (typeof value === "string") return JSON.stringify(value);
-	return /* @__PURE__ */ describeValue(value);
-}
-function assertInteger(source, name, value, min, max = Number.MAX_SAFE_INTEGER) {
-	if (Number.isSafeInteger(value) && value >= min && value <= max) return;
-	throw new UnsecureError("OUT_OF_RANGE", `${source}: ${name} must be ${max === Number.MAX_SAFE_INTEGER ? `an integer >= ${min}` : `an integer between ${min} and ${max}`}, got ${/* @__PURE__ */ showValue(value)}.`);
-}
-const SHARED_POOL_BYTES = 4096;
-const _MAX_FILL = 65536;
-/* @__NO_SIDE_EFFECTS__ */
-function createEntropyPool(size) {
-	let bytes;
-	let words;
-	let offset = size;
-	function refill() {
-		if (bytes === void 0) {
-			const buffer = new ArrayBuffer(size);
-			bytes = new Uint8Array(buffer);
-			words = new Uint32Array(buffer);
-		}
-		crypto.getRandomValues(bytes);
-		offset = 0;
-	}
-	function nextUint32() {
-		offset = offset + 3 & -4;
-		if (offset >= size) refill();
-		const value = words[offset >>> 2];
-		offset += 4;
-		return value;
-	}
-	function fill(target) {
-		const length = target.length;
-		if (length === 0) return target;
-		if (length > 64) {
-			if (length <= _MAX_FILL) crypto.getRandomValues(target);
-			else for (let start = 0; start < length; start += _MAX_FILL) crypto.getRandomValues(target.subarray(start, Math.min(start + _MAX_FILL, length)));
-			return target;
-		}
-		if (offset + length > size) refill();
-		const slot = bytes.subarray(offset, offset + length);
-		target.set(slot);
-		slot.fill(0);
-		offset += length;
-		return target;
-	}
-	function reset(now = false) {
-		bytes?.fill(0);
-		bytes = words = void 0;
-		offset = size;
-		if (now) refill();
-	}
-	_onSnapshotRestore(reset);
-	return {
-		nextUint32,
-		fill,
-		reset
-	};
-}
-const sharedPool = /* @__PURE__ */ createEntropyPool(SHARED_POOL_BYTES);
-function _onSnapshotRestore(callback) {
-	try {
-		const proc = globalThis.process;
-		if (typeof proc?.getBuiltinModule !== "function") return;
-		const snapshot = proc.getBuiltinModule("node:v8")?.startupSnapshot;
-		if (snapshot?.isBuildingSnapshot()) snapshot.addDeserializeCallback(callback);
-	} catch {}
-}
-const MAX_RANDOM_BYTES = 2 ** 31 - 1;
-/* @__NO_SIDE_EFFECTS__ */
-function secureRandomBytes(length) {
-	assertInteger("secureRandomBytes", "length", length, 0, MAX_RANDOM_BYTES);
-	return sharedPool.fill(new Uint8Array(length));
+	return /* @__PURE__ */ parseFinalize(/* @__PURE__ */ base64ParseText(text, "Base64.parse", options), wantString, !loose, "Base64.parse");
 }
 /* @__NO_SIDE_EFFECTS__ */
 function safeJsonParse(json) {
@@ -413,4 +350,80 @@ function _copyValue(value, seen, stack) {
 	});
 	return target;
 }
+/* @__NO_SIDE_EFFECTS__ */
+function showValue(value) {
+	if (typeof value === "number" || typeof value === "boolean") return String(value);
+	if (typeof value === "string") return JSON.stringify(value);
+	return /* @__PURE__ */ describeValue(value);
+}
+function assertInteger(value, name, source, min, max = Number.MAX_SAFE_INTEGER) {
+	if (Number.isSafeInteger(value) && value >= min && value <= max) return;
+	throw new UnsecureError("OUT_OF_RANGE", `${source}: ${name} must be ${max === Number.MAX_SAFE_INTEGER ? `an integer >= ${min}` : `an integer between ${min} and ${max}`}, got ${/* @__PURE__ */ showValue(value)}.`);
+}
+const SHARED_POOL_BYTES = 4096;
+const _MAX_FILL = 65536;
+/* @__NO_SIDE_EFFECTS__ */
+function createEntropyPool(size) {
+	let bytes;
+	let words;
+	let offset = size;
+	function refill() {
+		if (bytes === void 0) {
+			const buffer = new ArrayBuffer(size);
+			bytes = new Uint8Array(buffer);
+			words = new Uint32Array(buffer);
+		}
+		crypto.getRandomValues(bytes);
+		offset = 0;
+	}
+	function nextUint32() {
+		offset = offset + 3 & -4;
+		if (offset >= size) refill();
+		const value = words[offset >>> 2];
+		offset += 4;
+		return value;
+	}
+	function fill(target) {
+		const length = target.length;
+		if (length === 0) return target;
+		if (length > 64) {
+			if (length <= _MAX_FILL) crypto.getRandomValues(target);
+			else for (let start = 0; start < length; start += _MAX_FILL) crypto.getRandomValues(target.subarray(start, Math.min(start + _MAX_FILL, length)));
+			return target;
+		}
+		if (offset + length > size) refill();
+		const slot = bytes.subarray(offset, offset + length);
+		target.set(slot);
+		slot.fill(0);
+		offset += length;
+		return target;
+	}
+	function reset(now = false) {
+		bytes?.fill(0);
+		bytes = words = void 0;
+		offset = size;
+		if (now) refill();
+	}
+	_onSnapshotRestore(reset);
+	return {
+		nextUint32,
+		fill,
+		reset
+	};
+}
+const sharedPool = /* @__PURE__ */ createEntropyPool(SHARED_POOL_BYTES);
+function _onSnapshotRestore(callback) {
+	try {
+		const proc = globalThis.process;
+		if (typeof proc?.getBuiltinModule !== "function") return;
+		const snapshot = proc.getBuiltinModule("node:v8")?.startupSnapshot;
+		if (snapshot?.isBuildingSnapshot()) snapshot.addDeserializeCallback(callback);
+	} catch {}
+}
+const MAX_RANDOM_BYTES = 2 ** 31 - 1;
+/* @__NO_SIDE_EFFECTS__ */
+function secureRandomBytes(length) {
+	assertInteger(length, "length", "secureRandomBytes", 0, MAX_RANDOM_BYTES);
+	return sharedPool.fill(new Uint8Array(length));
+}
 export { UnsecureError, base64Parse, base64Stringify, safeJsonParse, sanitizeObject, sanitizeObjectCopy, secureRandomBytes, textDecoder, textEncoder };

package/dist/adapters/elysia/index.d.mts

@@ -2,7 +2,7 @@ import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, O
 import { CookieAttributes } from "../../_chunks/_cookie-attributes.mjs";
 import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
 import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/jwk.mjs";
 import { Elysia } from "elysia";
 interface ChunkableCookie {
   value: unknown;

package/dist/adapters/elysia/index.mjs

@@ -1,4 +1,5 @@
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint, toPublicJWK } from "../../_chunks/jwk.mjs";
+import { thumbprint } from "../../_chunks/_import-key.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
 import { createJWECodec, createJWSCodec, defineSession, invalidConfigError } from "../../_chunks/_codec-jws.mjs";
 import { Elysia } from "elysia";
 function sessionPlugin(options) {
@@ -39,7 +40,7 @@ function reactiveCookieJar(jar) {
 }
 function reactiveCookie(jar, name) {
 	const cookie = jar[name];
-	if (!cookie || typeof cookie.set !== "function") throw invalidConfigError(`${PREFIX$1} Session cookie jar must expose a reactive cookie at "${name}" with a set() method — pass Elysia's own \`cookie\` context property.`);
+	if (!cookie || typeof cookie.set !== "function") throw invalidConfigError(`${PREFIX$1} Session cookie jar has no reactive cookie at "${name}", pass Elysia's \`cookie\`.`);
 	return cookie;
 }
 const PREFIX = "[unjwt/elysia]";

package/dist/adapters/h3/index.d.mts

@@ -1,7 +1,7 @@
 import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/_codec-jwe.mjs";
 import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
 import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/jwk.mjs";
 import { HTTPEvent, setCookie } from "h3";
 type CookieSerializeOptions = NonNullable<Parameters<typeof setCookie>[3]>;
 /**

package/dist/adapters/h3/index.mjs

@@ -1,4 +1,5 @@
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint, toPublicJWK } from "../../_chunks/jwk.mjs";
+import { thumbprint } from "../../_chunks/_import-key.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
 import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, openSessionToken, sessionActions, setCookieName, setCookieValues } from "../../_chunks/_codec-jws.mjs";
 import { getCookie, getEventContext, setCookie } from "h3";
 const PREFIX = "[unjwt/h3]";

package/dist/adapters/h3v1/index.d.mts

@@ -1,7 +1,7 @@
 import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/_codec-jwe.mjs";
 import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
 import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/jwk.mjs";
 import { H3Event, H3EventContext, setCookie } from "h3";
 type CookieSerializeOptions = NonNullable<Parameters<typeof setCookie>[3]>;
 /**

package/dist/adapters/h3v1/index.mjs

@@ -1,4 +1,5 @@
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint, toPublicJWK } from "../../_chunks/jwk.mjs";
+import { thumbprint } from "../../_chunks/_import-key.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
 import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, openSessionToken, sessionActions, setCookieValues } from "../../_chunks/_codec-jws.mjs";
 import { parse } from "../../_chunks/libs/cookie-es.mjs";
 import { getCookie, getRequestHeader, getResponseHeader, isEvent, setCookie } from "h3";

package/dist/core/jwe.mjs

@@ -1,5 +1,5 @@
 import { UnsecureError } from "../_chunks/libs/unsecure.mjs";
 import { JWTError, isJWTError, isUnsecureError } from "../_chunks/_jwt-internal.mjs";
-import { DEFAULT_JOSE_LIMITS } from "../_chunks/jwk.mjs";
+import { DEFAULT_JOSE_LIMITS } from "../_chunks/_import-key.mjs";
 import { decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened } from "../_chunks/jwe.mjs";
 export { DEFAULT_JOSE_LIMITS, JWTError, UnsecureError, decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened, isJWTError, isUnsecureError };